last executing test programs: 5m17.29484655s ago: executing program 0 (id=64): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000030000005800018044000400200001000a00000000000000fe800000000000000000000000000010f8000000200002000a00000000000000ff160000fcff00000000000000000001000000000d0001007564703a73"], 0x6c}}, 0x0) 5m17.294641822s ago: executing program 0 (id=65): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500001800002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000005a00000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 5m17.22269294s ago: executing program 0 (id=68): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) unshare(0x22020600) syz_open_procfs(0x0, 0x0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x238, &(0x7f0000000740)={0x0, 0x198b, 0x0, 0x0, 0x3aa, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r5, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x402, @loopback}], 0x1c) sendto$inet6(r5, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r5, 0x84, 0x18, &(0x7f0000000300), 0x8) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) bind$tipc(r1, &(0x7f0000000080)=@name={0x1e, 0x2, 0x2, {{0x2, 0x3}, 0x2}}, 0x10) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000009500f7e6d3de2b5866a40ebaf47ff9000000000000006f73119d3acd3fe7"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r6}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f00000000c0)=@ethtool_drvinfo={0x33, "dabb6386f6d73094a90d1fdb507195e485f544228032f04eff6b7454b702570f", "6aabb3257fbc4eb5a702000000a9b0bfed5a88511bfa36cd4d6206598017dffa", "3323b7b8cd277c616d9206e6fd2d56ff18c6adb2b5f90e30b32158c846051324", "193d5bf82fba97515dda05e0637ba9fbf81e49d4f1b5508a4c956379155801bc", "d87badb8a826b9f7474cf73cc0ade30d0cd9c5a00f9025f55d18c2764e77d3fe", "14d3094839a1d8e1ef22cffc"}}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r8 = msgget$private(0x0, 0x100) r9 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r9, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x2, &(0x7f00000000c0)=@raw=[@call={0x85, 0x0, 0x0, 0xae}, @exit={0x95, 0x0, 0x9fff}], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000003c0)='virtio_transport_alloc_pkt\x00', r10}, 0x10) r11 = socket$inet6_icmp(0xa, 0x2, 0x3a) getsockopt$inet6_int(r11, 0x29, 0x38, 0x0, &(0x7f0000000b40)) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r9, 0x28, 0x1, &(0x7f0000000100)=0xffffffff00040000, 0x112) msgsnd(r8, &(0x7f0000002900)={0x3, "2c5b92fe53d0a8d45c8df77b3a5b24f5b5f47fb21e984f7cd98be58672f21c05d89a28dd30d16695fd88872467e730c5c5b07c0baad7f374dbe55481983863b91989f7f9e702207af9ed03c1ce4f6eb9b24a840cf9e71f78cba191462144280a2866a9e564cdf705a0dcf7833ebd4d2f23d396cbe8ffa41ecb67a470e3bb3037a146b21a2af740178582259f87014c3647901b3c888b71cb87bcb145a83f4429394c319164566ac0c8821c5827f7c81d9a289c18b0808e9046145a3890f5273bab59211376b73224dc2cfc9a99c36c8266430e1877aa8fb26ccbdee4c77a0de31deb8729c07d000f3714455c7db1999b623eee354be50ae48db0bc57b0d663aeabe13198305efa3c242b6b1745acf3aaf07f57727548163f83393600bc81201c2792b82cc5cdaa5ba4ae7ecdb2db7defa75da39bfbcdc1c139ac6f945758e6f536796ee758ebc486b289244942a2db4721deede70ef5b975e2ef6f72e7530e2a48d4cbb74ce7a376939ddd77cdc6aab076c17bba11ad81fb16f55aec0a603d71da0c53bb4b10c369308e8d397bd797b54a9fbb2f8b96b982a5775124bd1a73d659d8ec88148e5c9ee4f6156071adb66ee79e19cc753724cc31b5883b7a8c0d2921aff7103de65c90b97e4acd5e18bb3f373b9cd32f6a03476d6324645fcc44adad16f2bf3935232b2d33e68f16882e264d01064d9d74bdd36d1a43a6157875309e8ca7d23e87d44ae57f8db8a005f6833f75016ee942f226686cd342e11cc3b035d815c3935d0104783cb3d4bc70c2f1a377ef865b1ae7f1f8da4bd85a748b24a592b020891acd6f1bd1f6462e0fa5bd704dd94e254a60f7da2794abd16fa208a2b3dd40b8b6c91502da6aa9ce0b49c30dc886e94f9c637d0279234f69e9cc824a9f9eab8b78437f839d19c2d33b26f3a4aee997de0a3a9f4e850f2672de91b03e4199a231ac11b370a8381f742bd42521dde5e5703306273f763c36a499b7dfd591847d9a037761fb6b5fe63259896d3cc5a92839c7f8c7bc30fdb87bdf10e20528f85eee2e898e505d85ea55c7ca6f8188c99203ac65ab028c3ec8537a4bab01abe8df789fce5bb267737e936ba40834855589736b9ddd9610593ba55853cc171a5f40b81dadc741a2dd608977251c67cf5265066c064d9f29f444f08d6e220f930856207a4fc954dfdc2aa0af045c2a1e053e37c88af310ed6394c7fb0593ff5b20d729a71c91bd509ea2e50aad1f878523463eda57c4199287f9265289cef64c4e38da47adee287055d8f54bb6f9f7082b8046d62be6d974dfee3b99784d3a7c2bf332711bba305d6d13954282a390ec2872ce52c84d25b38f2c29a797eb21f3a2df1b207382561df9ec9432cc14a99ac51ded0afd4e4a2ea0504c9500100000000000002726bbed0eeabf92a5d44b36b686976a0521439afd"}, 0x2000, 0x0) 5m16.284286971s ago: executing program 0 (id=75): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000100)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) open_by_handle_at(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x81) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) r2 = socket$inet6(0x10, 0x3, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x56, &(0x7f0000000d40)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r3}, 0x10) fchmod(r2, 0x29) openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80882) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) acct(&(0x7f0000000040)='\xe9\x1fq\x89Y\x1e\x923aK\x00') mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f000000d000)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r4, {0x7, 0x1f, 0x0, 0x10408}}, 0x50) getresuid(&(0x7f0000000280)=0x0, &(0x7f00000002c0), &(0x7f0000000300)) setreuid(0x0, r5) r6 = socket(0x26, 0x3, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0xffffffffffffffff, r7) syz_open_dev$vim2m(0x0, 0x47b, 0x2) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00007fd000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000ffe000/0x2000)=nil) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) madvise(&(0x7f00003c1000/0x1000)=nil, 0xdfc3efff, 0x15) write$FUSE_CREATE_OPEN(r0, &(0x7f0000000200)={0xa0, 0xfffffffffffffff5, r4, {{0x5, 0x2, 0x6, 0x8, 0x7a6e, 0xd, {0x3, 0x9, 0x8, 0x1, 0x9, 0x8, 0x8, 0x3, 0x8, 0x5ffd, 0x2, r5, r7, 0x3}}, {0x0, 0x6}}}, 0xa0) getdents64(r0, 0x0, 0x0) 5m15.808277386s ago: executing program 0 (id=76): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58) sendmsg$alg(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4040001}, 0x0) chdir(&(0x7f0000000280)='./file0\x00') recvmsg$unix(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000001600)=""/4120, 0x1018}], 0x1}, 0x12060) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(blake2b-256-generic)\x00'}, 0x58) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000000406010200fc0000e6000000050000090900020073797a30"], 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x800) r3 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="12013f00000000407f04ff8d01113ef9ff01c81b21de6ddda91eae7440babdf7b509022d0001000000000904000015aae2b7b33bb3a9631292d8ab89e3b501ca7ed83c53dfddbe4a37d7494e17a455889d20294ba1c54917d1c993b2faac0117784baea1d90c7bc635000eaf5fa82d307d7e5be55b0ec2ccc1f4339e238d0879e04391545eb2408445f7ab55e035c8fc00000000000000", @ANYRES16], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0), 0x42, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="66643de15b5d66a78f8a8bb9b59ebda677b5e431250620a48771", @ANYRESHEX=r4, @ANYRES8, @ANYRES16, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r4, &(0x7f000000a300)="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", 0x2000, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r4, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000780)={&(0x7f0000000080)={0x50, 0xffffffffffffffda, 0x4, {0x7, 0x28, 0x0, 0xffffffffc0000000, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x134}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r4, &(0x7f0000000e00)={0x50, 0x0, r5, {0x7, 0x27, 0x0, 0x23072d}}, 0x50) setxattr$trusted_overlay_redirect(&(0x7f0000000200)='./file0/file0\x00', &(0x7f0000000240), 0x0, 0x0, 0x0) syz_usb_control_io(r3, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0) r6 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r6, 0x501c4814, &(0x7f00000000c0)={0x3, 0xffffffff, 0x0, 0x80000002, 0x0, 0xfffffefc}) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) getsockopt(r0, 0xf099, 0x80000050, &(0x7f0000000140)=""/167, &(0x7f00000003c0)=0xfffffffffffffe0a) socket$nl_route(0x10, 0x3, 0x0) 5m15.523779776s ago: executing program 0 (id=78): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000030000005800018044000400200001000a00000000000000fe800000000000000000000000000010f8000000200002000a00000000000000ff160000000003000000000000000001000000000d0001007564703a73"], 0x6c}}, 0x0) 5m15.314774381s ago: executing program 32 (id=78): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000030000005800018044000400200001000a00000000000000fe800000000000000000000000000010f8000000200002000a00000000000000ff160000000003000000000000000001000000000d0001007564703a73"], 0x6c}}, 0x0) 2m49.802432273s ago: executing program 2 (id=885): r0 = openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) mmap(&(0x7f00003c8000/0x3000)=nil, 0x3000, 0xa, 0x10, r0, 0x0) openat$binderfs(0xffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1, 0x0) openat$sequencer(0xffffff9c, &(0x7f0000000000), 0x400, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) ptrace$peekuser(0x3, 0x0, 0x40) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000007900)={&(0x7f0000001bc0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000078c0)={0x0, 0x68}, 0x1, 0x0, 0x0, 0x80}, 0x800) pipe2$9p(0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$IPSET_CMD_SAVE(r2, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x48, 0x8, 0x6, 0x401, 0x0, 0x0, {0xa, 0x0, 0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x4048081}, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) r4 = syz_open_dev$mouse(&(0x7f0000000100), 0x0, 0x800) r5 = syz_io_uring_setup(0x1e1e, 0x0, &(0x7f0000002000)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000140)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x17, 0x22}) io_uring_enter(r5, 0x48e9, 0x0, 0x2, 0x0, 0x0) r8 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r8, 0xc0145608, &(0x7f0000000040)={0x204, 0xa, 0x4}) clock_gettime(0x0, &(0x7f0000007740)={0x0, 0x0}) recvmmsg(r4, &(0x7f0000007640)=[{{&(0x7f0000000300)=@xdp, 0x80, 0x0, 0x0, &(0x7f0000000600)=""/29, 0x1d}, 0x7fff}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001a80)=""/157, 0x9d}, 0x1000}, {{&(0x7f0000001b40)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f0000001f40)=[{0x0}, {&(0x7f0000001c00)}, {&(0x7f0000001c40)=""/100, 0x64}, {&(0x7f0000001cc0)=""/27, 0x1b}, {&(0x7f0000002040)=""/4096, 0x1000}, {&(0x7f0000001d00)=""/177, 0xb1}, {&(0x7f0000001dc0)=""/217, 0xd9}], 0x7, &(0x7f0000003040)=""/196, 0xc4}, 0x8}, {{&(0x7f0000006400)=@l2={0x1f, 0x0, @fixed}, 0x80, 0x0}, 0x7}, {{&(0x7f0000000ac0)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c}, 0x80, &(0x7f0000006e00)=[{0x0}, {0x0}], 0x2, &(0x7f0000006e40)=""/127, 0x7f}, 0xffff}, {{&(0x7f0000006ec0)=@hci, 0x80, &(0x7f0000000800)=[{&(0x7f00000003c0)=""/203, 0xcb}, {&(0x7f0000000500)=""/220, 0xdc}, {&(0x7f00000006c0)=""/2, 0x2}, {&(0x7f0000000700)=""/40, 0x28}, {&(0x7f0000000740)=""/135, 0x87}, {&(0x7f0000000880)=""/207, 0xcf}], 0x6}, 0x8}, {{&(0x7f0000006f80)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, 0x80, 0x0}, 0x6}], 0x7, 0x120, &(0x7f0000007780)={r9, r10+10000000}) r11 = openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r11, 0xc0585609, &(0x7f0000000040)={0x0, 0xa}) syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0xec25, 0x0, 0x0, 0x40008333}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r12, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r12, r13, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) 2m48.463582262s ago: executing program 2 (id=888): r0 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x0, 0x32, 0xffffffffffffffff, 0x0) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c03000010000305000000000000002500000020", @ANYRES32=r1, @ANYBLOB="0000000000080400240012800b0001006d61637365630000140002800500060000000000050007000000000008000500", @ANYRES32=r1], 0x4c}}, 0x0) 2m48.422017154s ago: executing program 2 (id=889): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[], 0x30}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r1, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) fcntl$lock(r0, 0x26, &(0x7f00000000c0)={0x1, 0x2, 0x1000, 0x401}) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0) pread64(r2, &(0x7f0000001440)=""/126, 0x7e, 0x41) 2m48.243396432s ago: executing program 2 (id=890): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) openat$kvm(0x0, &(0x7f0000000080), 0x2382, 0x0) socket$inet6(0xa, 0x80000, 0x3) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) timerfd_create(0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0xc0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount_setattr(r1, &(0x7f0000000380)='./file0\x00', 0x0, &(0x7f0000001dc0)={0xb, 0x2, 0x80000}, 0x20) clock_adjtime(0x0, &(0x7f0000000040)={0xd54}) r2 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_STREAMOFF(r2, 0xc0405626, &(0x7f0000000080)=0x2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e088641100050000210283ac141440e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) 2m48.167766243s ago: executing program 2 (id=891): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="01000000040000000600000008000000000000026c31af59cd89adfd187f162f650efbb919cb97c288b9d313ce45c5db23f4b372edaf0f674f31ae17322b36ee4136f75510b9a29cc529d53ac6db54a52d61eb9cc127e033d147e7e0e0e03c669e94ef25cdf9a4b950699f8934370fe744cf875ee2a8010c8628d7abb806dd291d7bc89f495a3408389dcf0fea8575b1ee96d8f39b041faffc68d1276254fbcae2acf26a9de595d000718fa6a7c7", @ANYRESDEC=r0, @ANYBLOB="0cfca73d668a066b81757d82a3e5ae2adfa9e9f5a33b06b1ea774248cd41ab5f94da876ed947c6af935e567c36f0cf53f85d504b51c88acaef74d59073acb0519eeef9bbd13350f1c9a0afb57a0811440358178843b25eba36a228852467", @ANYRES32=0x0, @ANYRESOCT=r3], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0c0000000408000004000000018000000000000012c8b21e088f9e90f3e59a6066a9fb2f581d7a72a1a20a9ae865c386c2689b4e366d978a67ec54ff3baaf0ca2f0c711dd07a2978c794118f131236b8484adee277f2fdfaf06afe3db8f1e8a00ecc9441e611b6e5cd7f8c64fba631c39889a27b48ada185ed56be2608829c6eb0c4090764e93cfb0e08b65f37bee14ab4afdb9d31968177613d9f6f61675cc12f1c3c20c05ab5542d5cbfff5e6bfc656a29158727936feb76de0aa02a5c034867edd2400e37841e101759e3fbb51c1e7f56b7b402e4e812a26a5429d72cd0e6", @ANYRES32=r4, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, &(0x7f0000000040)=0x1) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) socket(0x2a, 0x2, 0x0) lstat64(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)) syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0404"], 0xd) mkdir(&(0x7f0000000180)='./file2\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000340), 0x800, &(0x7f00000001c0)={[{@volatile}, {@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file2'}}]}) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x37, 0x7fffffff}]}) close_range(r5, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) 2m48.053226107s ago: executing program 2 (id=892): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000010000304000000000000000000070400", @ANYRES32=0x0, @ANYBLOB="0003000000000000140012800b00010062726964676500000400028008000a00", @ANYRES32=r1], 0x3c}, 0x1, 0x0, 0x0, 0x20004084}, 0x8044) 2m47.987694112s ago: executing program 33 (id=892): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000010000304000000000000000000070400", @ANYRES32=0x0, @ANYBLOB="0003000000000000140012800b00010062726964676500000400028008000a00", @ANYRES32=r1], 0x3c}, 0x1, 0x0, 0x0, 0x20004084}, 0x8044) 1m38.702343331s ago: executing program 5 (id=1322): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x30}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = dup(0xffffffffffffffff) bind$alg(0xffffffffffffffff, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) sendto$unix(0xffffffffffffffff, 0x0, 0x0, 0x800, 0x0, 0x0) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x201}, 0x1}) r3 = socket(0x21, 0x2, 0x10000000000002) r4 = accept4$packet(r2, 0x0, &(0x7f00000000c0), 0x80800) recvmmsg(r4, &(0x7f0000002580)=[{{0x0, 0x0, &(0x7f0000001d00)=[{&(0x7f0000000380)=""/251, 0xfb}, {&(0x7f0000000480)=""/119, 0x77}, {&(0x7f00000005c0)=""/170, 0xaa}, {&(0x7f0000000680)=""/149, 0x95}, {&(0x7f0000001f40)=""/201, 0xc9}], 0x5, &(0x7f0000002680)=""/268, 0x10c}, 0x1}, {{&(0x7f0000000500)=@pptp={0x18, 0x2, {0x0, @dev}}, 0x80, &(0x7f0000001b40)=[{&(0x7f00000001c0)}, {&(0x7f0000000840)=""/92, 0x5c}, {&(0x7f00000008c0)=""/220, 0xdc}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f00000019c0)=""/155, 0x9b}, {&(0x7f0000001a80)=""/145, 0x91}, {&(0x7f0000002980)=""/4096, 0x1000}], 0x7, &(0x7f0000001b80)=""/234, 0xea}, 0x2}, {{0x0, 0x0, 0x0}, 0x7ff}, {{&(0x7f0000001ec0)=@generic, 0x80, 0x0, 0x0, &(0x7f0000002240)=""/74, 0x4a}, 0x2}, {{&(0x7f00000022c0)=@l2tp={0x2, 0x0, @private}, 0x80, &(0x7f00000024c0)=[{&(0x7f0000002340)=""/101, 0x65}, {&(0x7f00000023c0)=""/226, 0xe2}], 0x2, &(0x7f0000002500)=""/92, 0x5c}, 0x4}], 0x5, 0x10000, &(0x7f0000002640)={0x0, 0x989680}) connect$rxrpc(r3, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8000, @multicast2}}, 0x24) sendmmsg(r3, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="10000000100100000100000082cc0345fc428c5262f62fcec967bb98dc2d3e6ffc9f512f28ba50cd2cb3390e7ee3be1e3c0cbc889628fc768f11903271fab87de4c0b75c6d9e9c2de6da750865ff1048d182c4e5556a1fced7c10cc2dae28ddb3e827102f9d28be98137f1c44f7c848775acc24df0f3a30d6a29589887fe7724841ece487391f270a83391f964468b868a452bffe28101862d3da40937c74410e4f105"], 0x10, 0xe000}, 0x5}], 0x1, 0x0) recvmmsg(r3, &(0x7f0000002940)=[{{0x0, 0x0, 0x0}}], 0xf000, 0x10002, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000100)) r5 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="05000000040000000400000004000000", @ANYBLOB="00002202f5355ac6cf2e5f"], 0x48) timer_create(0x0, 0x0, &(0x7f0000000180)) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='stack\x00') pread64(r6, &(0x7f0000000040)=""/7, 0x7, 0x0) syz_usb_connect$cdc_ncm(0x1, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001c80)=@delchain={0x68, 0x65, 0x800, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x4, 0x1}, {0xf, 0x5}, {0x9890807f486baa26, 0xfff3}}, [@TCA_CHAIN={0x8, 0xb, 0x5f8}, @TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_bpf={{0x8}, {0x2c, 0x2, [@TCA_BPF_FLAGS={0x8}, @TCA_BPF_FD={0x8, 0x6, r2}, @TCA_BPF_POLICE={0x18, 0x2, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x8001}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x1}]}]}}]}, 0x68}, 0x1, 0xf0ffffffffffff, 0x0, 0x8881}, 0x0) r7 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r7, 0x0, 0x0, 0x0, 0x0, 0x0) 1m37.562058597s ago: executing program 5 (id=1324): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000030000005800018044000400200001000a00000000000000fe800000000000000000000000000010f8000000200002000a00000000000000ff16000000007c000000000000000001000000000d0001007564703a73"], 0x6c}}, 0x0) 1m37.561549618s ago: executing program 5 (id=1325): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000480), r0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000851000000100000018000000000000001800000020646c2500000000002020207b1a00fe00000000bda100000000000007010000f8ffffffb702000008000000b70300000000000085000000760000009500000000000000d36b59ac17a572d7444fe29366d8bcacdf913a8e7588905bf6cca226529c4362b31459e7b4279afff4c2"], &(0x7f0000000180)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000003e00), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r4, 0x0, 0x20040050) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) openat$cdrom(0xffffff9c, &(0x7f00000012c0), 0x42880, 0x0) socket$l2tp6(0xa, 0x2, 0x73) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_usbip_server_init(0x3) add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000580)='X', 0x1, 0xfffffffffffffffe) lstat(&(0x7f00000004c0)='./file0\x00', 0x0) add_key$user(0x0, 0x0, &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r5, 0x2000012, 0xffe, 0x0, &(0x7f0000000c40), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m35.830148172s ago: executing program 5 (id=1336): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r0, 0xf503, 0x0) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x145c01, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000100)={0x4, r0}) ioctl$DMA_BUF_SET_NAME_A(r2, 0x40086203, &(0x7f0000000040)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00') r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) close_range(r2, r1, 0x2) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r3) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0b060020000000000000307f8af22f6dbf4cc724616e30000000"], 0x20}}, 0x8000) socket(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00'}) 1m35.722098354s ago: executing program 5 (id=1339): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000017c0)=@newtaction={0xe78, 0x30, 0x25, 0x0, 0x0, {}, [{0xe64, 0x1, [@m_pedit={0xe60, 0x1, 0x0, 0x0, {{0xa}, {0xe34, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x10, 0x5, 0x0, 0x1, [{0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x300}]}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x1}, [{0x0, 0x0, 0x9}, {}, {}, {0x0, 0x0, 0xe4ff}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0xfffffffd}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0xfffffffc}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe78}}, 0x0) 1m35.650239435s ago: executing program 5 (id=1341): mlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000580)=ANY=[], 0x38}}, 0x0) r2 = socket(0x15, 0x5, 0x0) connect$unix(r2, &(0x7f0000000380)=@file={0x1, './file0\x00'}, 0x6e) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x12, &(0x7f0000000640)=ANY=[@ANYRES8=r1, @ANYBLOB="ac6b872f5d1a11679e45569ee8d2a42f84495db06863d67da1c2d32321f28b8d84642c050f8d47116aa319d4ea0194b1898214394a1cb6f22f07989add9327d70d3b8b25d3d71b002e5b060554e5fa5985bd140b4642681d89d445f73feb41760ff86d9abfca5ff3736997b447c45b32ec"], 0x0, 0xa, 0x0, 0x0, 0x41000, 0xa4, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x11000, @void, @value}, 0x94) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @raw_data="dad362e5d86f0b9c8ea6c9c36873ab6beeeeb3abe70397bb9fc6fffdf064f7533d05296a5417d144fde5fae4559e46741a565ae504c13b21db42a55c49f8a08a499d1ca35f67e6327d68caaecb949bd2ebdf5400f0da200302b6ac8d6fdbc6bfa67a0918e00909b1f4a0239fb32bbf195977a6bdec083b2021ee0e7433facb576310272158bf8c0b397adee3e412c68a51b8bba3625e3868dc6f9c5b81254140cc37795d783641dbac74d7b32504b26712c95e14dcbc7f6161e30cefcb2195b4c9108c91caf74b29"}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)=ANY=[@ANYBLOB], 0x28}}, 0x20000840) read$msr(r3, &(0x7f0000019680)=""/102392, 0xffffffffffffff2a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_procfs(0x0, 0x0) writev(r5, 0x0, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r9 = socket(0x10, 0x80002, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r10, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r10, &(0x7f0000004340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="310300000000000000000800000008000300", @ANYRES32=r12, @ANYBLOB="040006"], 0x24}, 0x1, 0x0, 0x0, 0x4804}, 0x0) connect$inet6(r9, &(0x7f0000000240)={0xa, 0x4e23, 0xa0000000, @ipv4={'\x00', '\xff\xff', @loopback}, 0x3}, 0x1c) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYRES64=r0, @ANYRES32=r8, @ANYBLOB="00000000000000001c001a8008001840809f12000008000200104000"/43], 0x44}, 0x1, 0x0, 0x0, 0x8080}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0xa1ff, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r8, {}, {}, {0xfff3}}}, 0x24}}, 0x0) 1m23.152452799s ago: executing program 4 (id=1368): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000030000005800018044000400200001000a00000000000000fe800000000000000000000000000010f8000000200002000a00000000000000ff160000000000030000000000000001000000000d0001007564703a73"], 0x6c}}, 0x0) 1m23.137113764s ago: executing program 4 (id=1369): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000017c0)=@newtaction={0xe78, 0x30, 0x25, 0x0, 0x0, {}, [{0xe64, 0x1, [@m_pedit={0xe60, 0x1, 0x0, 0x0, {{0xa}, {0xe34, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x10, 0x5, 0x0, 0x1, [{0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x300}]}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x1}, [{0x0, 0x0, 0x9}, {}, {}, {0x0, 0x0, 0xffffffe4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0xfffffffd}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0xfffffffc}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe78}}, 0x0) 1m23.052574122s ago: executing program 4 (id=1370): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00050000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000005a00000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 1m23.052294957s ago: executing program 4 (id=1371): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000000200000000000000000000090300000000000000000000010500000008000000000000000000000300000000020000000200000000020000000000000000000300000000010000"], 0x0, 0x66, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc2c45512, &(0x7f0000000a00)={{0x7, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, [0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x3, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803fc90, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x7, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2]}) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0xffffffffffffff7c, &(0x7f00000002c0)=0x2) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee7, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsopen(0x0, 0x0) getsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, &(0x7f0000000180), &(0x7f0000000300)=0x4) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, 0x0, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000800)=ANY=[@ANYBLOB="611234000000000061134c0000000000bf2000000000000015000200000001103d030100000000009500000000000000bc26000000000000bf670000c0ff0000070300000fff070067020000030000001606000000000078bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f909ad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2d6b05fe70305865050df26469fac5202d6293c3d5e11f4f83e7455baeeba4f"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 1m20.114281226s ago: executing program 34 (id=1341): mlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000580)=ANY=[], 0x38}}, 0x0) r2 = socket(0x15, 0x5, 0x0) connect$unix(r2, &(0x7f0000000380)=@file={0x1, './file0\x00'}, 0x6e) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x12, &(0x7f0000000640)=ANY=[@ANYRES8=r1, @ANYBLOB="ac6b872f5d1a11679e45569ee8d2a42f84495db06863d67da1c2d32321f28b8d84642c050f8d47116aa319d4ea0194b1898214394a1cb6f22f07989add9327d70d3b8b25d3d71b002e5b060554e5fa5985bd140b4642681d89d445f73feb41760ff86d9abfca5ff3736997b447c45b32ec"], 0x0, 0xa, 0x0, 0x0, 0x41000, 0xa4, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x11000, @void, @value}, 0x94) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @raw_data="dad362e5d86f0b9c8ea6c9c36873ab6beeeeb3abe70397bb9fc6fffdf064f7533d05296a5417d144fde5fae4559e46741a565ae504c13b21db42a55c49f8a08a499d1ca35f67e6327d68caaecb949bd2ebdf5400f0da200302b6ac8d6fdbc6bfa67a0918e00909b1f4a0239fb32bbf195977a6bdec083b2021ee0e7433facb576310272158bf8c0b397adee3e412c68a51b8bba3625e3868dc6f9c5b81254140cc37795d783641dbac74d7b32504b26712c95e14dcbc7f6161e30cefcb2195b4c9108c91caf74b29"}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)=ANY=[@ANYBLOB], 0x28}}, 0x20000840) read$msr(r3, &(0x7f0000019680)=""/102392, 0xffffffffffffff2a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_procfs(0x0, 0x0) writev(r5, 0x0, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r9 = socket(0x10, 0x80002, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r10, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r10, &(0x7f0000004340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="310300000000000000000800000008000300", @ANYRES32=r12, @ANYBLOB="040006"], 0x24}, 0x1, 0x0, 0x0, 0x4804}, 0x0) connect$inet6(r9, &(0x7f0000000240)={0xa, 0x4e23, 0xa0000000, @ipv4={'\x00', '\xff\xff', @loopback}, 0x3}, 0x1c) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYRES64=r0, @ANYRES32=r8, @ANYBLOB="00000000000000001c001a8008001840809f12000008000200104000"/43], 0x44}, 0x1, 0x0, 0x0, 0x8080}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0xa1ff, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r8, {}, {}, {0xfff3}}}, 0x24}}, 0x0) 1m16.071703313s ago: executing program 4 (id=1375): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x80000) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000e00)=@deltfilter={0xd4, 0x2d, 0x200, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x9, 0xc}, {0xf, 0x10}, {0xffe0, 0xfff3}}, [@filter_kind_options=@f_route={{0xa}, {0xa4, 0x2, [@TCA_ROUTE4_ACT={0xa0, 0x6, [@m_bpf={0x9c, 0x19, 0x0, 0x0, {{0x8}, {0x4}, {0x71, 0x6, "12350323c7ad6dfe6067df70b8979256e60d0bdbe4a4d7126208884d025535c398bbf90ff0afd3033b6387c68f4ed8787bf3b30840d0263f52aae1e4b1f8be35aec017efff865e09a82ac118e50601bbe06963b695d0e397ce2c23d37f0e4985290f4df61b0a0bd489648458ea"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}]}}]}, 0xd4}, 0x1, 0x0, 0x0, 0x8011}, 0x894) r2 = syz_io_uring_setup(0x3a, &(0x7f0000000080)={0x0, 0x7244, 0x10100, 0x3}, &(0x7f0000000240), &(0x7f0000000580)) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f00000006c0)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x45, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000440)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r5, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="34000000100001f8ffffff000000000000000000", @ANYRES32=0x0, @ANYRES32=r4, @ANYBLOB], 0x34}}, 0x4004010) r8 = socket(0x2, 0x3, 0x6) setsockopt$SO_TIMESTAMPING(r8, 0x1, 0x41, &(0x7f0000000240)=0x45d8, 0x4) sendto$inet(r8, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x2, 0x0, @remote}, 0x10) mkdir(&(0x7f0000000540)='./cgroup/../file0\x00', 0x131) recvmsg$unix(r8, &(0x7f0000000140)={&(0x7f00000000c0)=@abs, 0x6e, 0x0, 0x0, &(0x7f0000000380)=[@cred={{0x18}}, @cred={{0x18}}, @rights={{0x10, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x18}}, @cred={{0x18}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x88}, 0x40) rmdir(&(0x7f00000001c0)='./cgroup/../file0\x00') io_uring_register$IORING_REGISTER_NAPI(r2, 0x1b, &(0x7f0000000040)={0xffffff01, 0x3, '\x00', 0x100000000000000}, 0x1) 1m14.918078162s ago: executing program 4 (id=1381): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000480), r0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000851000000100000095000000000000001800000020646c2500000000602020207b1a00fe00000000bda100000000000007010000f8ffffffb702000008000000b70300000000000085000000760000009500000000000000d36b59ac17a572d7444fe29366d8bcacdf913a8e7588905bf6cca226529c4362b31459e7b4279afff4c2"], &(0x7f0000000180)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r4, &(0x7f0000003f00)={0x0, 0x0, &(0x7f0000003ec0)={&(0x7f0000000280)={0x24, 0x0, 0x401, 0x70bd2b, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x9}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x810}, 0x20040050) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) openat$cdrom(0xffffff9c, &(0x7f00000012c0), 0x42880, 0x0) socket$l2tp6(0xa, 0x2, 0x73) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_usbip_server_init(0x3) add_key$user(0x0, &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000580)='X', 0x1, 0xfffffffffffffffe) lstat(&(0x7f00000004c0)='./file0\x00', 0x0) add_key$user(0x0, 0x0, &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r5, 0x2000012, 0xffe, 0x0, &(0x7f0000000c40), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 59.590086213s ago: executing program 35 (id=1381): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000480), r0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000851000000100000095000000000000001800000020646c2500000000602020207b1a00fe00000000bda100000000000007010000f8ffffffb702000008000000b70300000000000085000000760000009500000000000000d36b59ac17a572d7444fe29366d8bcacdf913a8e7588905bf6cca226529c4362b31459e7b4279afff4c2"], &(0x7f0000000180)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r4, &(0x7f0000003f00)={0x0, 0x0, &(0x7f0000003ec0)={&(0x7f0000000280)={0x24, 0x0, 0x401, 0x70bd2b, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x9}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x810}, 0x20040050) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) openat$cdrom(0xffffff9c, &(0x7f00000012c0), 0x42880, 0x0) socket$l2tp6(0xa, 0x2, 0x73) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_usbip_server_init(0x3) add_key$user(0x0, &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000580)='X', 0x1, 0xfffffffffffffffe) lstat(&(0x7f00000004c0)='./file0\x00', 0x0) add_key$user(0x0, 0x0, &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r5, 0x2000012, 0xffe, 0x0, &(0x7f0000000c40), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 52.079334848s ago: executing program 7 (id=1392): ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000080)={0x8000, 0x0, 0x0, 0x1, 0x0, "000100"}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{}, 0xdf}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/sockstat6\x00') pread64(r0, &(0x7f0000000000)=""/15, 0xf, 0x7fff) ioctl$FBIOBLANK(r0, 0x4611, 0x4) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) mount(0x0, &(0x7f0000000080)='./cgroup\x00', &(0x7f00000000c0)='gfs2\x00', 0x10, 0x0) quotactl$Q_GETFMT(0xffffffff80000402, &(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, 0xffffffffffffffff, 0x0) unshare(0x6a040000) dup(0xffffffffffffffff) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c", 0x2d}], 0x1}, 0x0) r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40186f40, &(0x7f0000000440)=0x1f) ioctl$FS_IOC_SETFLAGS(r6, 0x40046f41, 0x0) r7 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000c80)={'batadv_slave_0\x00'}) sendmmsg$inet6(r7, &(0x7f0000000e00)=[{{&(0x7f00000001c0)={0xa, 0x4e22, 0x6, @rand_addr=' \x01\x00', 0x6}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000300)="54688fd8dbc7d771abc74a2ae9c718e31e0df0d966738b8dec79425dbd47c22c5daac78c7052e41240f6d90d2b4b308be637a02205050b69c5f8bccc7a865a6e55025b61b35e3f580aef7b5f16694f2ddce8ba9cb21d19fc410f63edefe185782175ef2d48dae29732f41b06e7bb6d3a0765c1a735109e444ded42942a3e49ff42e223be629427caac07b80e08b3252ee620846ecb98fac73d2e79c7f87e1e940bcbe3aed73f73efca320097fd39f3e1821101a87faea571370edcee827c76ba13b96d48a99eb148a8df1140dd80b39c09cce9ee", 0xd4}], 0x1, &(0x7f0000000480)=[@hoplimit={{0x10, 0x29, 0x34, 0x7}}, @hopopts={{0x24, 0x29, 0x36, {0x5e, 0x1, '\x00', [@enc_lim={0x4, 0x1, 0x94}, @jumbo={0xc2, 0x4, 0x80}, @padn]}}}, @hopopts_2292={{0x14, 0x29, 0x36, {0x6c}}}], 0x48}}, {{&(0x7f0000000280)={0xa, 0x4e20, 0xfe3, @loopback, 0x1}, 0x1c, &(0x7f0000000940)=[{&(0x7f0000000540)="0ccc938c076a8e26aa7f3fee1a4050b957aa3e39ed9144766dcdd7e34ade56c286f2751b95b44c947fe9f67528cbe9bb434812be67f9022d65bee9d4d5b330432143896e354a136d375380d82350cb5f6656dff0d4de9a57c7c476bbed22f6183adaa18c5475c46308d9ad3d84e5dc9ce5278325b71a70bf2fc46bb931d4f5147875de52faa26da9649fd6541417e55afbfa25905bfb1e10614c6ddd34d32ffd2ba3d46499762dcfd873ea81ec4820756d5864a37327", 0xb6}, {&(0x7f0000000400)="9d3bdbfa49f353820b71e235ab5de0cfc8acb6970a29a87f07ceec27a56c786c362b50effae161806c1be3e433", 0x2d}, {&(0x7f0000000600)="6e2c3dea08d51befce9668e956ac133090388c27a379f4f81f5a5a98120cbfce134df44e5256b513b6931ffc5a4fa166a0584d1a6571dca08f4b613ef39dae3c668aa35dd138c517884dd7cef4f3a49f6f65558c921a16972c02af708512fe6f7421d6c3b638a8659733b6b60f2daba02c6e87c0debd0567cc188625e47cdea5b5060ae52c6cf65a1dfd60eee89c8f0f1091bb45380b0a8206abf1f14f1437fc5d3e32b1aff38a2044598c2a39165d7396a06e524e0ac7dc0cfbce1009a1904870295b60b149ea10e411", 0xca}, {&(0x7f0000000700)="287678b8842b5e6cfbbd7e39425275643ac035d7e922c9e442d8fa134f10faed98c6cf2fc48e81e8d46a37a9edf01d619437e862f7c6ad", 0x37}, {&(0x7f0000000740)="e4f7b10246049091ba1351663a8a5183f1195d314841941d7510915667bfafecbd706602209a333ea23e53070bee0c39cd62ec733401099832e9be519eaa04ac35316c723731af9f5546837e2b9f6c9ecda796dcad7079bd9201ac41b69c6d2d81185fa131a266ab0906062c6a4d6c4574f8233b214535d72ae01a88c8119815b0a50505186a5beaac7c9851e83ceef2e8cf3892143b7d1c790686ba862ef44f5395c413eaf37d79f5e53113e6e1f315", 0xb0}, {&(0x7f0000000800)="8ed73ea74db0f46fc3bf1dad701ebbfcd0acaa606954be2b167d56c984c4b2716692d29b304f25f509103b09e0e4015ff96ce5236a85a0911af7bef9bb4ed86649b36796fc65a683d9a56742cf655c3948ec3c71f684553f2c9add4f7d54b95b4a7874d36905a5943dae5bffbedc55bcd05886c8c2bbb1ec8c9f5b1231f72e539cae7d7b02074ef4eb1235978c409b4f1418a07976ce5d3aae4b800b8519501450a5fce67a0d82836d8700ba5b6c640f7f3259", 0xb3}, {&(0x7f00000008c0)="ca8dd3e42f90654ddc73f8b43d6135bf57fa557ec10380fc0818209570e79b77832e34ed39ed38a5fb0744f9b51997503620f6232001067a36a7068607e01c8bde5c124ca1458b7b56453499fd", 0x4d}], 0x7}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000ac0)=[@dstopts={{0x3c, 0x29, 0x37, {0x73, 0x4, '\x00', [@ra={0x5, 0x2, 0x1}, @ra={0x5, 0x2, 0x1ff}, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x9}, @jumbo={0xc2, 0x4, 0x4}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}]}}}, @dstopts={{0x44, 0x29, 0x37, {0xbbb58362fb415e3a, 0x5, '\x00', [@hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @hao={0xc9, 0x10, @loopback}, @jumbo={0xc2, 0x4, 0xd}]}}}, @hoplimit={{0x10, 0x29, 0x34, 0xb}}, @hoplimit={{0x10, 0x29, 0x34, 0xfffffffa}}, @hoplimit={{0x10, 0x29, 0x34, 0x30a7}}, @hoplimit_2292={{0x10, 0x29, 0x8, 0xccf9}}, @rthdr={{0x64, 0x29, 0x39, {0x33, 0xa, 0x66d161d76449e692, 0x3, 0x0, [@private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast1, @empty, @dev={0xfe, 0x80, '\x00', 0x15}]}}}, @rthdr_2292={{0x34, 0x29, 0x39, {0x88, 0x4, 0x1, 0x61, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @empty]}}}], 0x158}}], 0x3, 0xc000) 37.018171317s ago: executing program 36 (id=1392): ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000080)={0x8000, 0x0, 0x0, 0x1, 0x0, "000100"}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{}, 0xdf}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/sockstat6\x00') pread64(r0, &(0x7f0000000000)=""/15, 0xf, 0x7fff) ioctl$FBIOBLANK(r0, 0x4611, 0x4) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) mount(0x0, &(0x7f0000000080)='./cgroup\x00', &(0x7f00000000c0)='gfs2\x00', 0x10, 0x0) quotactl$Q_GETFMT(0xffffffff80000402, &(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, 0xffffffffffffffff, 0x0) unshare(0x6a040000) dup(0xffffffffffffffff) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c", 0x2d}], 0x1}, 0x0) r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40186f40, &(0x7f0000000440)=0x1f) ioctl$FS_IOC_SETFLAGS(r6, 0x40046f41, 0x0) r7 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000c80)={'batadv_slave_0\x00'}) sendmmsg$inet6(r7, &(0x7f0000000e00)=[{{&(0x7f00000001c0)={0xa, 0x4e22, 0x6, @rand_addr=' \x01\x00', 0x6}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000300)="54688fd8dbc7d771abc74a2ae9c718e31e0df0d966738b8dec79425dbd47c22c5daac78c7052e41240f6d90d2b4b308be637a02205050b69c5f8bccc7a865a6e55025b61b35e3f580aef7b5f16694f2ddce8ba9cb21d19fc410f63edefe185782175ef2d48dae29732f41b06e7bb6d3a0765c1a735109e444ded42942a3e49ff42e223be629427caac07b80e08b3252ee620846ecb98fac73d2e79c7f87e1e940bcbe3aed73f73efca320097fd39f3e1821101a87faea571370edcee827c76ba13b96d48a99eb148a8df1140dd80b39c09cce9ee", 0xd4}], 0x1, &(0x7f0000000480)=[@hoplimit={{0x10, 0x29, 0x34, 0x7}}, @hopopts={{0x24, 0x29, 0x36, {0x5e, 0x1, '\x00', [@enc_lim={0x4, 0x1, 0x94}, @jumbo={0xc2, 0x4, 0x80}, @padn]}}}, @hopopts_2292={{0x14, 0x29, 0x36, {0x6c}}}], 0x48}}, {{&(0x7f0000000280)={0xa, 0x4e20, 0xfe3, @loopback, 0x1}, 0x1c, &(0x7f0000000940)=[{&(0x7f0000000540)="0ccc938c076a8e26aa7f3fee1a4050b957aa3e39ed9144766dcdd7e34ade56c286f2751b95b44c947fe9f67528cbe9bb434812be67f9022d65bee9d4d5b330432143896e354a136d375380d82350cb5f6656dff0d4de9a57c7c476bbed22f6183adaa18c5475c46308d9ad3d84e5dc9ce5278325b71a70bf2fc46bb931d4f5147875de52faa26da9649fd6541417e55afbfa25905bfb1e10614c6ddd34d32ffd2ba3d46499762dcfd873ea81ec4820756d5864a37327", 0xb6}, {&(0x7f0000000400)="9d3bdbfa49f353820b71e235ab5de0cfc8acb6970a29a87f07ceec27a56c786c362b50effae161806c1be3e433", 0x2d}, {&(0x7f0000000600)="6e2c3dea08d51befce9668e956ac133090388c27a379f4f81f5a5a98120cbfce134df44e5256b513b6931ffc5a4fa166a0584d1a6571dca08f4b613ef39dae3c668aa35dd138c517884dd7cef4f3a49f6f65558c921a16972c02af708512fe6f7421d6c3b638a8659733b6b60f2daba02c6e87c0debd0567cc188625e47cdea5b5060ae52c6cf65a1dfd60eee89c8f0f1091bb45380b0a8206abf1f14f1437fc5d3e32b1aff38a2044598c2a39165d7396a06e524e0ac7dc0cfbce1009a1904870295b60b149ea10e411", 0xca}, {&(0x7f0000000700)="287678b8842b5e6cfbbd7e39425275643ac035d7e922c9e442d8fa134f10faed98c6cf2fc48e81e8d46a37a9edf01d619437e862f7c6ad", 0x37}, {&(0x7f0000000740)="e4f7b10246049091ba1351663a8a5183f1195d314841941d7510915667bfafecbd706602209a333ea23e53070bee0c39cd62ec733401099832e9be519eaa04ac35316c723731af9f5546837e2b9f6c9ecda796dcad7079bd9201ac41b69c6d2d81185fa131a266ab0906062c6a4d6c4574f8233b214535d72ae01a88c8119815b0a50505186a5beaac7c9851e83ceef2e8cf3892143b7d1c790686ba862ef44f5395c413eaf37d79f5e53113e6e1f315", 0xb0}, {&(0x7f0000000800)="8ed73ea74db0f46fc3bf1dad701ebbfcd0acaa606954be2b167d56c984c4b2716692d29b304f25f509103b09e0e4015ff96ce5236a85a0911af7bef9bb4ed86649b36796fc65a683d9a56742cf655c3948ec3c71f684553f2c9add4f7d54b95b4a7874d36905a5943dae5bffbedc55bcd05886c8c2bbb1ec8c9f5b1231f72e539cae7d7b02074ef4eb1235978c409b4f1418a07976ce5d3aae4b800b8519501450a5fce67a0d82836d8700ba5b6c640f7f3259", 0xb3}, {&(0x7f00000008c0)="ca8dd3e42f90654ddc73f8b43d6135bf57fa557ec10380fc0818209570e79b77832e34ed39ed38a5fb0744f9b51997503620f6232001067a36a7068607e01c8bde5c124ca1458b7b56453499fd", 0x4d}], 0x7}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000ac0)=[@dstopts={{0x3c, 0x29, 0x37, {0x73, 0x4, '\x00', [@ra={0x5, 0x2, 0x1}, @ra={0x5, 0x2, 0x1ff}, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x9}, @jumbo={0xc2, 0x4, 0x4}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}]}}}, @dstopts={{0x44, 0x29, 0x37, {0xbbb58362fb415e3a, 0x5, '\x00', [@hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @hao={0xc9, 0x10, @loopback}, @jumbo={0xc2, 0x4, 0xd}]}}}, @hoplimit={{0x10, 0x29, 0x34, 0xb}}, @hoplimit={{0x10, 0x29, 0x34, 0xfffffffa}}, @hoplimit={{0x10, 0x29, 0x34, 0x30a7}}, @hoplimit_2292={{0x10, 0x29, 0x8, 0xccf9}}, @rthdr={{0x64, 0x29, 0x39, {0x33, 0xa, 0x66d161d76449e692, 0x3, 0x0, [@private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast1, @empty, @dev={0xfe, 0x80, '\x00', 0x15}]}}}, @rthdr_2292={{0x34, 0x29, 0x39, {0x88, 0x4, 0x1, 0x61, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @empty]}}}], 0x158}}], 0x3, 0xc000) 28.32937108s ago: executing program 6 (id=1455): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, 0x0, 0x0) getsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, 0x0, &(0x7f0000000200)) r2 = socket$nl_generic(0x10, 0x3, 0x10) clock_gettime(0x0, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000240)='ext4_mb_release_inode_pa\x00', r3, 0x0, 0x6}, 0x18) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) remap_file_pages(&(0x7f000057a000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x1c0000) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) getpid() r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x0, 0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160-generic\x00'}, 0x58) r6 = add_key$user(&(0x7f0000002100), &(0x7f0000002180)={'syz', 0x1}, &(0x7f00000021c0)='b', 0x1, 0xfffffffffffffffe) r7 = add_key$user(&(0x7f0000002300), &(0x7f0000002340)={'syz', 0x3}, &(0x7f0000000100)="370c099069effa43de3e1404db09b4ce1ef77bde4b371532dd16447c1b13403656c86711f6e750026f23029a50d44299c7bf5c78dc5efae2d041016160e8bef7b30c05e298aa9572540dd950307987eef2115e1bcf512bea3410ca5a9e9f827e4b13490dbbd4fc5a45e0738b959acafd2c12863045265bcbc2c9426ac3f614746b436fe86a72dc642dd67d970604a69b4f22cd0076beedc18056ab4bea4c825b69a7a77adcd5488684872b1bb9eb84586549e11b080468668e8fd0e52ce0705a", 0xc0, 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f0000000540)={r6, r7, r7}, &(0x7f0000000400)=""/190, 0xbe, &(0x7f00000003c0)={&(0x7f0000000240)={'sha256-generic\x00'}, &(0x7f0000000380)="708803449262ddb5bda92158536f78c390609a10de442b2c8522cbff4fd8e5ffc37e1b3aebbdae8dc970f20781e9711ab309fc77", 0x34}) r8 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) write(r8, &(0x7f0000000580)="c37a7ed1ac914536474f736ef8b63a7a88c0f538f716daae8c76dbefeebe372d035105fedee3e4b6814c996f19c8982b19ceaf5571b862d8ca0058e50ab53b64b44641d25f9e3b64bc9cef7eca6d2103d71c7e65c65fb5f46810adae17693ac951d507121a058a72864c1e", 0xfffffffffffffdfb) setpriority(0x2, 0x0, 0x7) socket$netlink(0x10, 0x3, 0x0) r9 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x2]}, 0x8, 0x80000) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, &(0x7f00000021c0)={{r8}, "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"}) readv(r9, &(0x7f0000000000)=[{&(0x7f0000000140)=""/128, 0x80}], 0x1) socket$nl_route(0x10, 0x3, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) 27.29933061s ago: executing program 6 (id=1461): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x101041) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = syz_io_uring_setup(0xcf, &(0x7f0000000480)={0x0, 0x0, 0x0, 0xfffffffc}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x4}) io_uring_enter(r1, 0x47ba, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000003c0)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x20, 0x0, 0x0, 0x0, 0x1}) r4 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) bind$tipc(r4, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000080)={0x42, 0x80000009, 0x2}, 0x10) write$sndseq(r0, &(0x7f0000000040)=[{0xf, 0x0, 0x0, 0xfd, @time, {}, {0xe}, @queue}], 0x1c) r6 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) bpf$ENABLE_STATS(0x20, &(0x7f0000000340), 0x4) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="02000000040000000100000027bf00000005"], 0x50) mmap(&(0x7f0000fa2000/0x3000)=nil, 0x3000, 0x3, 0x13, r8, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40)={r8}, 0x4) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(r6, &(0x7f0000006280)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=@newtaction={0xbc, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0xa8, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0xfffffffd, 0x0, 0x10000000, 0x5, 0x4}, 0x1, r9}}]}, {0x4, 0xa}, {0xc}, {0xc}}}, @m_mpls={0x54, 0x2, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x6, 0x5, 0x8, 0x8, 0xfffffff8}, 0x4}}, @TCA_MPLS_LABEL={0x8, 0x5, 0xad64f}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x80}, 0x0) r10 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_MAX_BURST(r10, 0x84, 0x14, &(0x7f0000000140)=@int=0x9, 0x4) mkdir(&(0x7f0000000300)='./file0\x00', 0x4) sendto$inet(r10, &(0x7f0000000080)="8f", 0x1, 0x1, &(0x7f0000000040)={0x2, 0x4e22, @rand_addr=0x64010102}, 0x10) 26.23793889s ago: executing program 6 (id=1468): r0 = socket(0x10, 0x803, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) r1 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) keyctl$read(0xb, r1, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r2, &(0x7f0000000340)={0xa, 0x4e21, 0x0, @empty, 0xeea}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) bind$unix(0xffffffffffffffff, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$9p_virtio(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000380)={'trans=virtio,', {[{@cache_loose}, {@cachetag={'cachetag', 0x3d, 'trans=virtio,'}}]}}) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='mountinfo\x00') lseek(r5, 0x10001, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e, 0x0, 0x0, 0x0, 0xa, 0x800}, 0x4000080) r6 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) unshare(0x22020600) r9 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r9, 0x6, 0x0, 0x0, 0x0) r10 = fsmount(r9, 0x0, 0x4) r11 = openat$cgroup_ro(r10, &(0x7f00000000c0)='cgroup.controllers\x00', 0x5000000, 0x0) unshare(0x10000) readv(r11, &(0x7f00000012c0)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1) ioctl$KVM_SET_CPUID2(r8, 0x4048aecb, &(0x7f0000000080)=ANY=[]) ioctl$KVM_GET_VCPU_EVENTS(r8, 0xc048aeca, &(0x7f0000000100)) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=@newlink={0x64, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffffff81}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r4}]}}}, @IFLA_LINKINFO={0x28, 0xd, 0x0, 0x1, @veth={{0x9, 0x9e00}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14}}}}]}, 0x64}}, 0x0) 25.291826107s ago: executing program 6 (id=1471): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000030000005800018044000400200001000a00000000000000fe800000000000000000000000000010f8000000200002000a00000000000000ff160000000000001000000000000001000000000d0001007564703a73"], 0x6c}}, 0x0) 25.130359966s ago: executing program 6 (id=1473): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x20000840) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, 0x0, 0x0) r3 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) syz_usb_control_io$uac1(r3, 0x0, &(0x7f0000000540)={0x44, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r4, 0x80015b18, 0x0) r5 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={0xffffffffffffffff, 0x58, &(0x7f0000000400)}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000001980)={0x2, 0x1, @loopback}, 0x10) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x18, 0x200000000000028b, &(0x7f0000000040)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) fstatat64(0xffffff9c, 0x0, 0x0, 0x1000) ioctl$UI_SET_ABSBIT(r6, 0x40045567, 0x0) ioctl$UI_ABS_SETUP(r6, 0x401c5504, &(0x7f00000002c0)={0x3f}) ioctl$UI_SET_EVBIT(r6, 0x40045564, 0x3) write$uinput_user_dev(r6, &(0x7f0000001740)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0xfffffffd, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x2, 0x0, 0x4, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7fffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffffffff, 0x0, 0x3, 0x515, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfaea], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x45c) ioctl$UI_DEV_CREATE(r6, 0x5501) sendmsg$key(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x110}}, 0x5) 21.680918027s ago: executing program 8 (id=1478): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x1, 0x0, 0x1, 0x0, 0x3}) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="01000000040000000600000008000000000000026c31af59cd89adfd187f162f650efbb919cb97c288b9d313ce45c5db23f4b372edaf0f674f31ae17322b36ee4136f75510b9a29cc529d53ac6db54a52d61eb9cc127e033d147e7e0e0e03c669e94ef25cdf9a4b950699f8934370fe744cf875ee2a8010c8628d7abb806dd291d7bc89f495a3408389dcf0fea8575b1ee96d8f39b041faffc68d1276254fbcae2acf26a9de595d000718fa6a7c7", @ANYRESDEC=r0, @ANYBLOB="0cfca73d668a066b81757d82a3e5ae2adfa9e9f5a33b06b1ea774248cd41ab5f94da876ed947c6af935e567c36f0cf53f85d504b51c88acaef74d59073acb0519eeef9bbd13350f1c9a0afb57a0811440358178843b25eba36", @ANYRES32=0x0, @ANYRESOCT=r3], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0c0000000408000004000000018000000000000012c8b21e088f9e90f3e59a6066a9fb2f581d7a72a1a20a9ae865c386c2689b4e366d978a67ec54ff3baaf0ca2f0c711dd07a2978c794118f131236b8484adee277f2fdfaf06afe3db8f1e8a00ecc9441e611b6e5cd7f8c64fba631c39889a27b48ada185ed56be2608829c6eb0c4090764e93cfb0e08b65f37bee14ab4afdb9d31968177613d9f6f61675cc12f1c3c20c05ab5542d5cbfff5e6bfc656a29158727936feb76de0aa02a5c034867edd2400e37841e101759e3fbb51c1e7f56b7b402e4e812a26a5429d72cd0e6", @ANYRES32=r4, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, &(0x7f0000000040)=0x1) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) socket(0x2a, 0x2, 0x0) lstat64(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)) syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="0404"], 0xd) mkdir(&(0x7f0000000180)='./file2\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000340), 0x800, &(0x7f00000001c0)={[{@volatile}, {@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file2'}}]}) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x37, 0x7fffffff}]}) close_range(r5, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) 21.314590675s ago: executing program 6 (id=1481): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000480), r0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000851000000100000095000000000000001800000020646c250000000000202020851a00fe00000000bda100000000000007010000f8ffffffb702000008000000b70300000000000085000000760000009500000000000000d36b59ac17a572d7444fe29366d8bcacdf913a8e7588905bf6cca226529c4362b31459e7b4279afff4c2"], &(0x7f0000000180)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r4, &(0x7f0000003f00)={0x0, 0x0, &(0x7f0000003ec0)={&(0x7f0000000280)={0x24, 0x0, 0x401, 0x70bd2b, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x9}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x810}, 0x20040050) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) openat$cdrom(0xffffff9c, &(0x7f00000012c0), 0x42880, 0x0) socket$l2tp6(0xa, 0x2, 0x73) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_usbip_server_init(0x3) add_key$user(0x0, &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000580)='X', 0x1, 0xfffffffffffffffe) lstat(&(0x7f00000004c0)='./file0\x00', 0x0) add_key$user(0x0, 0x0, &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r5, 0x2000012, 0xffe, 0x0, &(0x7f0000000c40), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 21.080033922s ago: executing program 8 (id=1483): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x80000) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000e00)=@deltfilter={0xd4, 0x2d, 0x200, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x9, 0xc}, {0xf, 0x10}, {0xffe0, 0xfff3}}, [@filter_kind_options=@f_route={{0xa}, {0xa4, 0x2, [@TCA_ROUTE4_ACT={0xa0, 0x6, [@m_bpf={0x9c, 0x19, 0x0, 0x0, {{0x8}, {0x4}, {0x71, 0x6, "12350323c7ad6dfe6067df70b8979256e60d0bdbe4a4d7126208884d025535c398bbf90ff0afd3033b6387c68f4ed8787bf3b30840d0263f52aae1e4b1f8be35aec017efff865e09a82ac118e50601bbe06963b695d0e397ce2c23d37f0e4985290f4df61b0a0bd489648458ea"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}]}}]}, 0xd4}, 0x1, 0x0, 0x0, 0x8011}, 0x894) r2 = syz_io_uring_setup(0x3a, &(0x7f0000000080)={0x0, 0x7244, 0x10100, 0x3}, &(0x7f0000000240), &(0x7f0000000580)) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f00000006c0)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x45, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000440)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r5, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="34000000100001f8ffffff000000000000000000", @ANYRES32=0x0, @ANYRES32=r4, @ANYBLOB], 0x34}}, 0x4004010) r8 = socket(0x2, 0x3, 0x6) setsockopt$SO_TIMESTAMPING(r8, 0x1, 0x41, &(0x7f0000000240)=0x45d8, 0x4) sendto$inet(r8, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x2, 0x0, @remote}, 0x10) mkdir(&(0x7f0000000540)='./cgroup/../file0\x00', 0x131) recvmsg$unix(r8, &(0x7f0000000140)={&(0x7f00000000c0)=@abs, 0x6e, &(0x7f0000000040)=[{&(0x7f0000000640)=""/202, 0xca}], 0x1, &(0x7f0000000380)=[@cred={{0x18}}, @cred={{0x18}}, @rights={{0x10, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x18}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x70}, 0x40) rmdir(&(0x7f00000001c0)='./cgroup/../file0\x00') io_uring_register$IORING_REGISTER_NAPI(r2, 0x1b, &(0x7f0000000040)={0xffffff01, 0x3, '\x00', 0x100000000000000}, 0x1) 19.533057437s ago: executing program 8 (id=1486): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newtaction={0x48, 0x30, 0x800, 0x0, 0xffffffff, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9}, {0x4}, {0x4, 0x4}, {0xc}, {0xc, 0x8, {0x2}}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4008054}, 0x10000800) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="18400000040000000000944dd50aedaf7b5b000000000000f0c52267a655066d42430dfabc44ed042b236dcd42"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x50) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a300000000048000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000210c0009800800014000000005600000000c0a010300000000000000000700fffe0900020073797a31000000000900010073797a300000000034000380300000802c000180250001002130404c6bfef3a31e2587ebd76200eb3ea056f39e3ab8a93c358099bf8cf3007d00000014000000110001"], 0xf0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x94, 0x30, 0x9, 0x0, 0x100000, {}, [{0x80, 0x1, [@m_ct={0x44, 0x19, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9, 0x11e41e7a, 0x5, 0xfffffffe, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x38, 0x1, 0x0, 0x0, {{0x8}, {0x10, 0x2, 0x0, 0x1, [@TCA_IFE_DMAC={0xa, 0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xb058}, 0x0) sched_setscheduler(0x0, 0x6, &(0x7f0000000080)=0x1ff) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f00007fc000/0x2000)=nil, 0x2000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x0, 0x20000090) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_buf(r6, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x4e2b, 0x7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x6}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000002940)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}}], 0x62, 0x0) io_uring_setup(0x773d, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000027c0], 0x0, 0x0, 0x0}, 0x78) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000280)={'#! ', '', [], 0x8, "2c36ce35fe800000000000009d94165f433d388e6577f86274e326d04670000000002c"}, 0x27) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x28}}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x200001d8, &(0x7f0000000180)=ANY=[@ANYBLOB="18120000", @ANYRES32=r4, @ANYBLOB="4000000000000000b703000000000000850000000c0000b92000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 18.91220444s ago: executing program 3 (id=1487): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="12000000040000000400000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000850000000800000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000"], 0x0, 0x37, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) syz_usbip_server_init(0x1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = socket(0xa, 0x3, 0x3a) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x1c, 0x2, 0x3, 0x5, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x44840) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r5, 0x29, 0x36, &(0x7f00000000c0)=ANY=[], 0x8) r6 = socket$can_raw(0x1d, 0x3, 0x1) accept4(r6, 0x0, 0x0, 0x800) connect$inet6(r5, &(0x7f0000000180)={0xa, 0x4e22, 0x4, @mcast2, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000140)='batadv0\x00', 0x10) sendmmsg$inet6(r5, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000008c0)="8352f7dee26d77e8673d268697065aec0ac3391df006c5c1", 0x18}], 0x1}}], 0x1, 0x0) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000020301040000100000000000800000100880350001000000"], 0x1c}}, 0x0) setsockopt$MRT6_ADD_MIF(r3, 0x29, 0xca, &(0x7f0000000000)={0x0, 0x1}, 0xc) setsockopt$MRT6_DEL_MIF(r3, 0x29, 0xcb, &(0x7f0000000040), 0xc) 18.076302102s ago: executing program 3 (id=1488): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x2) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000080)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000280)={0x401, 0x1, &(0x7f0000000440)=[r2], &(0x7f0000000600)=[0x2], &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000580)}) 17.99202618s ago: executing program 3 (id=1489): socket(0x10, 0x3, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='ip6_vti0\x00', 0x10) sendto$inet(r0, 0x0, 0xe0, 0x2004a814, &(0x7f0000000080)={0x2, 0x4e23, @broadcast}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xfec9, 0x8, 0x1, 0x3d4}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r3, 0xdb4, 0x0, 0x0, 0x0, 0x0) exit(0x7) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r3, 0x18, &(0x7f0000000000)={0x8, 0xffffffffffffffff, 0x4, {0x4, 0x1}, 0x8}, 0x1) 17.934491021s ago: executing program 8 (id=1490): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000017c0)=@newtaction={0xe80, 0x30, 0x25, 0x0, 0x0, {}, [{0xe6c, 0x1, [@m_pedit={0xe68, 0x1, 0x0, 0x0, {{0xa}, {0xe3c, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x18, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x1}, [{0x0, 0x0, 0x9}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xe4ffffff}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0xfffffffd}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0xfffffffc}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe80}}, 0x0) 17.791868352s ago: executing program 8 (id=1491): syz_emit_ethernet(0x6a, &(0x7f0000001800)={@link_local, @random="50a245d5cde0", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x700, 0x0, 0x2, 0x0, @empty, @broadcast}, @address_reply}}}}, 0x0) 17.488893129s ago: executing program 8 (id=1492): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39, @void, @value}, 0x94) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f0000002540)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0xfffffffd, 0x0, 0xb49, 0x9, 0x4, 0x0, 0x2}, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) ioprio_get$uid(0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) socket$can_bcm(0x1d, 0x2, 0x2) r4 = dup(r3) write$UHID_INPUT(r4, 0x0, 0x0) r5 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x5885}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x49, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1}) io_uring_enter(r5, 0x3519, 0x0, 0x2e, 0x0, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x1) 17.000558522s ago: executing program 3 (id=1493): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x7, 0x2, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x100) socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x3ffe, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x10000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={r3}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x10, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0xffbff967, 0x0, 0x0, 0x0, 0xfffffffd}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 15.932161141s ago: executing program 3 (id=1494): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x1f9) r0 = openat$dir(0xffffff9c, &(0x7f0000000040)='./file0\x00', 0x8ef5cd55e7b24445, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='comm\x00') exit(0x7) read$FUSE(r1, &(0x7f0000006300)={0x2020}, 0x2020) r2 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000440)='.log\x00', 0x102, 0x4c) renameat2(r0, &(0x7f0000000080)='./file0\x00', r2, &(0x7f0000000140)='./file0\x00', 0x7) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r4, &(0x7f00000003c0)={0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r6 = socket$can_raw(0x1d, 0x3, 0x1) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="280000000203010400000000b6a5a68d2ecf2c168651000000000a00000809000200000000013000"], 0x28}, 0x1, 0x0, 0x0, 0x8040}, 0x4004000) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f00000001c0)={'vxcan0\x00', 0x0}) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000004c0)='cgroup2\x00', 0x100021, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f00000001c0)={[], [], 0x2f}) r9 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0xd5) openat$cgroup_ro(r9, &(0x7f0000000280)='blkio.bfq.io_wait_time\x00', 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x25, &(0x7f0000000000)=0x2, 0x4) sendmsg$can_raw(r6, &(0x7f0000000240)={&(0x7f0000000780)={0x1d, r8}, 0x10, &(0x7f0000000480)={&(0x7f0000000140)=@can={{0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, "5b7ba3698f28aaf0"}, 0x10}}, 0x2004c891) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@getqdisc={0x2c, 0x26, 0x0, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {0xfff1, 0xf}, {0x2, 0xffff}, {0xc, 0xfff1}}, [{0x4}, {0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0xc004) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) 15.051401425s ago: executing program 3 (id=1496): syz_open_procfs(0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000380)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="4bcc72dd61070bec0494f1422be64cd0e12182ae31ab5d3970e5", @ANYRESHEX=r0, @ANYBLOB=',wfdno', @ANYBLOB=',\x00']) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0xf, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9, 0x11e41e7a, 0x5, 0xfffffffc, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0xffffffffffffff2f, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0x21}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) socket$kcm(0x10, 0x2, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, 0x0, 0x0) sendto$inet(r5, 0x0, 0x218, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r5, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1", 0x25, 0x11, 0x0, 0x0) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r7}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x0, 0x3, 0xa, 0x2, 0xfff0}, {0x6, 0x0, 0xd, 0x9, 0x0, 0x8, 0x80000000}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r6}, {}, {0x15, 0x0, 0x0, 0x80000000}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) connect$bt_sco(r0, &(0x7f0000000300), 0x8) 12.996365893s ago: executing program 1 (id=1499): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000017c0)=@newtaction={0xe80, 0x30, 0x25, 0x0, 0x0, {}, [{0xe6c, 0x1, [@m_pedit={0xe68, 0x1, 0x0, 0x0, {{0xa}, {0xe3c, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x18, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x1}, [{0x0, 0x0, 0x9}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xffffffe4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0xfffffffd}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0xfffffffc}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe80}}, 0x0) 12.891994434s ago: executing program 1 (id=1500): connect$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e22, 0xfd9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0xc8040) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @raw_data="dea233684c996156af0d4bd8e3300217e750b8c97b7123d48003e7e1d3be5f710c41a1db6719881876e9bcc6e2f73c67cc6b675eb43188b5b7f9f898868de9a9c5d536d418ba283121a73a5aba55a87d2a2525295f4492bbde02ad8bc8e88779f2de06f38e99172df4d45b6f13c813dee4230c204a93172922b778fef7a1f89ce876bb89d44cd705bbb28db4869dfac20d928950507acd92c02d17f51b0a627539f6e0a0bdb92004bc6252cd35e8cd100962db9a83ad63a4e7e1ca17c1b6aac63fefa9bebdbe429d"}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, 0x0, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000180)={0x9e0c, {{0x2, 0x0, @empty}}}, 0x84) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000003340)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000600)='4', 0x1}], 0x1, &(0x7f0000000700)=ANY=[@ANYBLOB="100000008100002d315c01001c936aea95b88cffeebdf399839a41009144a7acbed61d0cbe4082b8508351800000000000576600006d5caa90e2c53bf9d0e96b16b7a14c55ec0cb9d138d9f9ff7cdee00c2676242de5d97a58c9f30730b6c32869973cacded3600de0dd34deea2ba665ae8385f3b8a7e50f2fe288f881699e0cdffba4354754ab62bbe4537d556600000000000000000000000000cf8263eb0f425304327d8d1d6696b0d40956ef62f28e2d3ef0c7935a2d272e47edb9daf685b98572601bfe9f2eb8861c23f7fab337f994a8c2eccca9c30ea2d7071a37ac17454a04033bb57fe04fb1f39ea8ea86e432883a1bd917de4c7ed6bf9a1d01db74688778a5e6489988bf3e85043d5a5dc109ce8930b32c18e04d72d1b7ccb500f2b6d68d9ee9aa"], 0x10, 0x40}}], 0x1, 0x0) pipe(&(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x39011, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$PIO_UNIMAP(r4, 0x4b67, &(0x7f0000000280)={0x1, &(0x7f00000000c0)=[{0x7, 0xb}]}) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, &(0x7f0000000a00)={0x2, {{0x2, 0x2000, @dev={0xac, 0x14, 0x14, 0x1b}}}, {{0x2, 0x0, @empty}}}, 0x104) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB]) chdir(&(0x7f0000000100)='./file0\x00') socket$key(0xf, 0x3, 0x2) r5 = open(&(0x7f0000000040)='./file0\x00', 0x80242, 0x1df2a23c5997fa7b) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) write$FUSE_CREATE_OPEN(r5, &(0x7f00000002c0)={0xa0, 0x0, 0x0, {{0x80000000, 0x3, 0x3, 0xffffffffffffff80, 0x3, 0x1, {0xffffffffffffffff, 0x180, 0x20ff, 0x8, 0x8b, 0x800000000000d615, 0x3fb, 0x7ffffffb, 0x6, 0x1000, 0x8, 0x0, 0x0, 0x3ff, 0x100}}, {0x0, 0x12}}}, 0xa0) sendfile(r5, r5, &(0x7f0000000080), 0x7f04) 5.505973287s ago: executing program 37 (id=1481): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000480), r0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000851000000100000095000000000000001800000020646c250000000000202020851a00fe00000000bda100000000000007010000f8ffffffb702000008000000b70300000000000085000000760000009500000000000000d36b59ac17a572d7444fe29366d8bcacdf913a8e7588905bf6cca226529c4362b31459e7b4279afff4c2"], &(0x7f0000000180)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r4, &(0x7f0000003f00)={0x0, 0x0, &(0x7f0000003ec0)={&(0x7f0000000280)={0x24, 0x0, 0x401, 0x70bd2b, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x9}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x810}, 0x20040050) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) openat$cdrom(0xffffff9c, &(0x7f00000012c0), 0x42880, 0x0) socket$l2tp6(0xa, 0x2, 0x73) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_usbip_server_init(0x3) add_key$user(0x0, &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000580)='X', 0x1, 0xfffffffffffffffe) lstat(&(0x7f00000004c0)='./file0\x00', 0x0) add_key$user(0x0, 0x0, &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r5, 0x2000012, 0xffe, 0x0, &(0x7f0000000c40), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.724556266s ago: executing program 1 (id=1502): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f00000009c0)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0], 0xcc}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) socketpair$unix(0x1, 0x3, 0x0, 0x0) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x14, 0x2d, 0x9, 0x70bd27, 0x25dfdbfe, {0x5}}, 0x14}}, 0x20040086) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000000000)=ANY=[], 0x114}], 0x1, 0x0, 0x0, 0x800}, 0x48010) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @pix={0x434c, 0x8, 0x584e4f53, 0x4, 0x2, 0x7, 0x0, 0x2f73, 0x1, 0x4, 0x2, 0x7}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7ff, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x976) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x25, &(0x7f0000000280)={r3, @in={{0x2, 0x4e22, @broadcast}}, 0x0, 0x1, 0x0, 0x8}, 0x9c) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) set_mempolicy(0x2, &(0x7f0000000080)=0x51e1, 0x3ff) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x401c2, 0x0) ftruncate(r4, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r6, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000b80)=""/4096, 0x20001b80}, {&(0x7f0000001b80)=""/112, 0x70}], 0x2, 0x0, 0xa0028cb4}}], 0x40000000000013c, 0x700, 0x0) sendfile(r5, r4, 0x0, 0x578410eb) socket$kcm(0x10, 0x2, 0x0) r7 = getpid() process_vm_readv(r7, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x36}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640), 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) socket$kcm(0x29, 0x5, 0x0) 2.483207508s ago: executing program 38 (id=1492): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39, @void, @value}, 0x94) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f0000002540)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0xfffffffd, 0x0, 0xb49, 0x9, 0x4, 0x0, 0x2}, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) ioprio_get$uid(0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) socket$can_bcm(0x1d, 0x2, 0x2) r4 = dup(r3) write$UHID_INPUT(r4, 0x0, 0x0) r5 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x5885}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x49, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1}) io_uring_enter(r5, 0x3519, 0x0, 0x2e, 0x0, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x1) 1.383685525s ago: executing program 1 (id=1504): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x2) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000080)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000280)={0x401, 0x1, &(0x7f0000000440)=[r2], &(0x7f0000000600)=[0x2], &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000580)}) 1.291728363s ago: executing program 1 (id=1505): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) r0 = accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x800) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x10000, 0x2) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0xc04c561a, &(0x7f00000000c0)) memfd_create(&(0x7f0000000080)='\x00', 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000180)=[{0x20, 0x2, 0x0, 0x6}, {0xc, 0x0, 0x4, 0x3}]}, 0x8) 1.241791169s ago: executing program 1 (id=1506): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000000200000000000000000000090300000000000000000000010500000008000000000000000000000300000000020000000200000000020000000000000000000300000000010000"], 0x0, 0x66, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc2c45512, &(0x7f0000000a00)={{0x7, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, [0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x3, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803fc90, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x7, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2]}) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0xffffffffffffff7c, &(0x7f00000002c0)=0x2) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee7, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsopen(0x0, 0x0) getsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, &(0x7f0000000180), &(0x7f0000000300)=0x4) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, 0x0, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 0s ago: executing program 39 (id=1496): syz_open_procfs(0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000380)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="4bcc72dd61070bec0494f1422be64cd0e12182ae31ab5d3970e5", @ANYRESHEX=r0, @ANYBLOB=',wfdno', @ANYBLOB=',\x00']) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0xf, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9, 0x11e41e7a, 0x5, 0xfffffffc, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0xffffffffffffff2f, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0x21}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) socket$kcm(0x10, 0x2, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, 0x0, 0x0) sendto$inet(r5, 0x0, 0x218, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r5, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1", 0x25, 0x11, 0x0, 0x0) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r7}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x0, 0x3, 0xa, 0x2, 0xfff0}, {0x6, 0x0, 0xd, 0x9, 0x0, 0x8, 0x80000000}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r6}, {}, {0x15, 0x0, 0x0, 0x80000000}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) connect$bt_sco(r0, &(0x7f0000000300), 0x8) kernel console output (not intermixed with test programs): : hci1: command 0x0405 tx timeout [ 241.971312][ T7760] usb 9-1: unable to read config index 0 descriptor/start: -61 [ 241.975128][ T7760] usb 9-1: can't read configurations, error -61 [ 242.109373][ T7760] usb 9-1: new high-speed USB device number 27 using dummy_hcd [ 242.261457][ T7760] usb 9-1: unable to read config index 0 descriptor/start: -61 [ 242.264652][ T7760] usb 9-1: can't read configurations, error -61 [ 242.266881][ T7760] usb usb9-port1: attempt power cycle [ 242.492100][ T839] vhci_hcd: vhci_device speed not set [ 242.609214][ T7760] usb 9-1: new high-speed USB device number 28 using dummy_hcd [ 242.616233][ T9228] netlink: 20 bytes leftover after parsing attributes in process `syz.1.922'. [ 242.651230][ T7760] usb 9-1: unable to read config index 0 descriptor/start: -61 [ 242.654522][ T7760] usb 9-1: can't read configurations, error -61 [ 243.079033][ T7760] usb 9-1: new high-speed USB device number 29 using dummy_hcd [ 243.113736][ T7760] usb 9-1: unable to read config index 0 descriptor/start: -61 [ 243.116946][ T7760] usb 9-1: can't read configurations, error -61 [ 243.120232][ T7760] usb usb9-port1: unable to enumerate USB device [ 243.253717][ T9241] bridge12: entered promiscuous mode [ 243.256372][ T9241] bridge12: entered allmulticast mode [ 243.264280][ T9241] team0: Port device bridge12 added [ 243.639306][ T5966] Bluetooth: hci2: command tx timeout [ 243.707082][ T9254] netlink: 256 bytes leftover after parsing attributes in process `syz.3.933'. [ 244.331910][ T9259] tipc: Started in network mode [ 244.334194][ T9259] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 244.338769][ T9259] tipc: Enabled bearer , priority 10 [ 244.592826][ T9265] program syz.1.937 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 244.915628][ T9276] netlink: 20 bytes leftover after parsing attributes in process `syz.5.936'. [ 245.079298][ T5966] Bluetooth: hci3: command 0x0406 tx timeout [ 245.459192][ T72] tipc: Node number set to 4269801488 [ 245.703450][ T9284] netlink: 8 bytes leftover after parsing attributes in process `syz.3.943'. [ 245.787462][ T9278] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(10) [ 245.791279][ T9278] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 245.827875][ T9278] vhci_hcd vhci_hcd.0: Device attached [ 246.089119][ T839] usb 45-1: new high-speed USB device number 8 using vhci_hcd [ 246.588297][ T9298] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 246.766072][ T9281] vhci_hcd: connection reset by peer [ 246.769191][ T1147] vhci_hcd: stop threads [ 246.771056][ T1147] vhci_hcd: release socket [ 246.773052][ T1147] vhci_hcd: disconnect device [ 246.929193][ T9] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 247.091755][ T9] usb 10-1: unable to read config index 0 descriptor/start: -61 [ 247.094789][ T9] usb 10-1: can't read configurations, error -61 [ 247.159673][ T5966] Bluetooth: hci3: command 0x0406 tx timeout [ 247.163266][ T9304] netlink: 256 bytes leftover after parsing attributes in process `syz.1.947'. [ 247.229470][ T9] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 247.405217][ T9] usb 10-1: unable to read config index 0 descriptor/start: -61 [ 247.409683][ T9] usb 10-1: can't read configurations, error -61 [ 247.419133][ T9] usb usb10-port1: attempt power cycle [ 247.574328][ T9308] netlink: 4 bytes leftover after parsing attributes in process `syz.3.949'. [ 247.769026][ T9] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 247.802694][ T9] usb 10-1: unable to read config index 0 descriptor/start: -61 [ 247.806608][ T9] usb 10-1: can't read configurations, error -61 [ 247.982863][ T9] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 248.079824][ T9] usb 10-1: unable to read config index 0 descriptor/start: -61 [ 248.082754][ T9] usb 10-1: can't read configurations, error -61 [ 248.089985][ T9] usb usb10-port1: unable to enumerate USB device [ 248.441608][ T9324] netlink: 20 bytes leftover after parsing attributes in process `syz.1.950'. [ 249.024719][ T9327] netlink: 256 bytes leftover after parsing attributes in process `syz.3.954'. [ 249.364665][ T9334] netlink: 'syz.4.956': attribute type 39 has an invalid length. [ 249.781012][ T9343] tipc: Enabling of bearer rejected, already enabled [ 250.579046][ T54] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 250.776093][ T54] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 250.777667][ T9366] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 250.785176][ T54] usb 6-1: can't read configurations, error -61 [ 250.919174][ T54] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 251.075837][ T54] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 251.079747][ T54] usb 6-1: can't read configurations, error -61 [ 251.089217][ T54] usb usb6-port1: attempt power cycle [ 251.117307][ T9372] netlink: 216 bytes leftover after parsing attributes in process `syz.3.967'. [ 251.121844][ T9372] netlink: 216 bytes leftover after parsing attributes in process `syz.3.967'. [ 251.240838][ T9360] netlink: 'syz.5.963': attribute type 10 has an invalid length. [ 251.244150][ T9360] netlink: 40 bytes leftover after parsing attributes in process `syz.5.963'. [ 251.318098][ T9360] team0: Port device geneve0 added [ 251.467128][ T54] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 251.493412][ T40] audit: type=1326 audit(2000000102.590:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9377 comm="syz.4.977" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc7579 code=0x7ffc0000 [ 251.495238][ T54] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 251.503553][ T40] audit: type=1326 audit(2000000102.590:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9377 comm="syz.4.977" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc7579 code=0x7ffc0000 [ 251.508274][ T54] usb 6-1: can't read configurations, error -61 [ 251.553491][ T40] audit: type=1326 audit(2000000102.590:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9377 comm="syz.4.977" exe="/syz-executor" sig=0 arch=40000003 syscall=143 compat=1 ip=0xf7fc7579 code=0x7ffc0000 [ 251.573453][ T40] audit: type=1326 audit(2000000102.590:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9377 comm="syz.4.977" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc7579 code=0x7ffc0000 [ 251.595077][ T40] audit: type=1326 audit(2000000102.590:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9377 comm="syz.4.977" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc7579 code=0x7ffc0000 [ 251.614391][ T40] audit: type=1326 audit(2000000102.590:483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9377 comm="syz.4.977" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7fc7579 code=0x7ffc0000 [ 251.623475][ T40] audit: type=1326 audit(2000000102.590:484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9377 comm="syz.4.977" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc7579 code=0x7ffc0000 [ 251.634728][ T40] audit: type=1326 audit(2000000102.590:485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9377 comm="syz.4.977" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc7579 code=0x7ffc0000 [ 251.650327][ T40] audit: type=1326 audit(2000000102.590:486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9377 comm="syz.4.977" exe="/syz-executor" sig=0 arch=40000003 syscall=91 compat=1 ip=0xf7fc7579 code=0x7ffc0000 [ 251.659107][ T54] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 251.673133][ T40] audit: type=1326 audit(2000000102.590:487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9377 comm="syz.4.977" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc7579 code=0x7ffc0000 [ 251.682271][ T54] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 251.686388][ T54] usb 6-1: can't read configurations, error -61 [ 251.690166][ T54] usb usb6-port1: unable to enumerate USB device [ 251.739175][ T839] vhci_hcd: vhci_device speed not set [ 251.941341][ T9385] netlink: 'syz.5.970': attribute type 4 has an invalid length. [ 252.025055][ T9383] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 252.028612][ T9383] UDF-fs: Scanning with blocksize 2048 failed [ 252.036171][ T9383] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 252.039518][ T9383] UDF-fs: Scanning with blocksize 4096 failed [ 252.873376][ T9391] netlink: 256 bytes leftover after parsing attributes in process `syz.5.971'. [ 252.905282][ T9393] bridge10: entered promiscuous mode [ 252.907999][ T9393] bridge10: entered allmulticast mode [ 252.915613][ T9393] team0: Port device bridge10 added [ 253.149189][ T5966] Bluetooth: hci1: command 0x0405 tx timeout [ 253.676915][ T7760] usb 9-1: new high-speed USB device number 30 using dummy_hcd [ 253.937123][ T7760] usb 9-1: unable to read config index 0 descriptor/start: -61 [ 253.948840][ T7760] usb 9-1: can't read configurations, error -61 [ 253.949127][ T5966] Bluetooth: hci2: command tx timeout [ 254.118872][ T7760] usb 9-1: new high-speed USB device number 31 using dummy_hcd [ 254.223239][ T5966] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 254.338086][ T7760] usb 9-1: unable to read config index 0 descriptor/start: -61 [ 254.343967][ T7760] usb 9-1: can't read configurations, error -61 [ 254.367884][ T7760] usb usb9-port1: attempt power cycle [ 254.783128][ T7760] usb 9-1: new high-speed USB device number 32 using dummy_hcd [ 254.831650][ T7760] usb 9-1: unable to read config index 0 descriptor/start: -61 [ 254.835753][ T7760] usb 9-1: can't read configurations, error -61 [ 254.969325][ T7760] usb 9-1: new high-speed USB device number 33 using dummy_hcd [ 255.008440][ T7760] usb 9-1: unable to read config index 0 descriptor/start: -61 [ 255.013443][ T7760] usb 9-1: can't read configurations, error -61 [ 255.019023][ T7760] usb usb9-port1: unable to enumerate USB device [ 255.410392][ T9430] trusted_key: encrypted_key: insufficient parameters specified [ 255.582805][ T9408] netlink: 'syz.1.978': attribute type 10 has an invalid length. [ 255.587388][ T9408] netlink: 40 bytes leftover after parsing attributes in process `syz.1.978'. [ 255.618218][ T9408] team0: Port device geneve0 added [ 256.027410][ T9434] syzkaller1: entered promiscuous mode [ 256.029837][ T9434] syzkaller1: entered allmulticast mode [ 256.284351][ T9443] netlink: 8 bytes leftover after parsing attributes in process `syz.1.990'. [ 256.398345][ T9451] random: crng reseeded on system resumption [ 256.504725][ T9450] fuse: Bad value for 'fd' [ 256.585270][ T9462] netlink: 32 bytes leftover after parsing attributes in process `syz.4.995'. [ 257.112983][ T40] kauditd_printk_skb: 33 callbacks suppressed [ 257.113000][ T40] audit: type=1326 audit(2000000108.210:521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9442 comm="syz.3.991" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f52579 code=0x7fc00000 [ 257.129088][ T40] audit: type=1326 audit(2000000108.210:522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9442 comm="syz.3.991" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f52579 code=0x7fc00000 [ 257.138152][ T40] audit: type=1326 audit(2000000108.210:523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9442 comm="syz.3.991" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f52579 code=0x7fc00000 [ 257.165698][ T40] audit: type=1326 audit(2000000108.210:524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9442 comm="syz.3.991" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f52579 code=0x7fc00000 [ 257.182866][ T40] audit: type=1326 audit(2000000108.210:525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9442 comm="syz.3.991" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f52579 code=0x7fc00000 [ 257.253973][ T9472] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(10) [ 257.256753][ T9472] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 257.265116][ T9472] vhci_hcd vhci_hcd.0: Device attached [ 257.288280][ T9481] capability: warning: `syz.1.1002' uses deprecated v2 capabilities in a way that may be insecure [ 257.293601][ T9481] random: crng reseeded on system resumption [ 257.531057][ T7760] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 257.569110][ T7233] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 257.632844][ T9487] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1003'. [ 257.667240][ T6011] usb 45-1: new high-speed USB device number 9 using vhci_hcd [ 257.682777][ T7760] usb 10-1: unable to read config index 0 descriptor/start: -61 [ 257.694300][ T7760] usb 10-1: can't read configurations, error -61 [ 257.806110][ T9474] vhci_hcd: connection reset by peer [ 257.815776][ T1140] vhci_hcd: stop threads [ 257.817839][ T1140] vhci_hcd: release socket [ 257.826792][ T1140] vhci_hcd: disconnect device [ 257.839596][ T7760] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 257.986797][ T7233] usb 8-1: config 101 has an invalid interface number: 4 but max is 1 [ 257.991317][ T7233] usb 8-1: config 101 contains an unexpected descriptor of type 0x2, skipping [ 257.996475][ T7233] usb 8-1: config 101 has an invalid interface number: 207 but max is 1 [ 258.000291][ T7233] usb 8-1: config 101 has no interface number 0 [ 258.002537][ T7233] usb 8-1: config 101 has no interface number 1 [ 258.004981][ T7233] usb 8-1: config 101 interface 4 altsetting 47 endpoint 0x2 has invalid maxpacket 1023, setting to 64 [ 258.008534][ T7233] usb 8-1: config 101 interface 4 altsetting 47 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 258.012373][ T7233] usb 8-1: config 101 interface 4 altsetting 47 endpoint 0x3 has invalid maxpacket 1104, setting to 1024 [ 258.012943][ T7760] usb 10-1: unable to read config index 0 descriptor/start: -61 [ 258.016831][ T7233] usb 8-1: config 101 interface 4 altsetting 47 has a duplicate endpoint with address 0x2, skipping [ 258.023813][ T7233] usb 8-1: config 101 interface 4 altsetting 47 endpoint 0x5 has invalid maxpacket 1023, setting to 64 [ 258.027270][ T7233] usb 8-1: config 101 interface 4 altsetting 47 has a duplicate endpoint with address 0x5, skipping [ 258.030273][ T7760] usb 10-1: can't read configurations, error -61 [ 258.030915][ T7233] usb 8-1: config 101 interface 4 altsetting 47 has a duplicate endpoint with address 0x5, skipping [ 258.034925][ T7760] usb usb10-port1: attempt power cycle [ 258.037398][ T7233] usb 8-1: config 101 interface 4 altsetting 47 has a duplicate endpoint with address 0x2, skipping [ 258.043731][ T7233] usb 8-1: config 101 interface 207 altsetting 3 has a duplicate endpoint with address 0x2, skipping [ 258.047411][ T7233] usb 8-1: config 101 interface 207 altsetting 3 endpoint 0x6 has an invalid bInterval 137, changing to 7 [ 258.052054][ T7233] usb 8-1: config 101 interface 4 has no altsetting 0 [ 258.054597][ T7233] usb 8-1: config 101 interface 207 has no altsetting 0 [ 258.061448][ T7233] usb 8-1: New USB device found, idVendor=2c7c, idProduct=0195, bcdDevice=ef.5a [ 258.065903][ T7233] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.069190][ T7233] usb 8-1: Product: syz [ 258.070860][ T7233] usb 8-1: Manufacturer: ā°åžŒë˜Īāēĩâžīė”ąãĶŽäƒéšđė…Žä―”铙隰áĄĪ⧚įđĶ [ 258.073999][ T7233] usb 8-1: SerialNumber: syz [ 258.399438][ T7760] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 258.436348][ T7760] usb 10-1: unable to read config index 0 descriptor/start: -61 [ 258.441680][ T7760] usb 10-1: can't read configurations, error -61 [ 258.501717][ T9483] could not allocate digest TFM handle blake2s-256-x86 [ 258.525774][ T7233] usb 8-1: USB disconnect, device number 19 [ 258.589504][ T7760] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 258.632938][ T7760] usb 10-1: unable to read config index 0 descriptor/start: -61 [ 258.636296][ T7760] usb 10-1: can't read configurations, error -61 [ 258.639692][ T7760] usb usb10-port1: unable to enumerate USB device [ 258.658851][ T9509] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1010'. [ 258.823636][ T46] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.939613][ T46] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.021186][ T46] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.097282][ T46] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.234884][ T5305] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 259.242548][ T5305] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 259.246702][ T5305] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 259.251846][ T5305] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 259.256844][ T5305] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 259.770424][ T46] team0: Port device geneve0 removed [ 260.230959][ T9513] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 260.631684][ T46] team0: Port device bridge10 removed [ 260.703681][ T9548] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(10) [ 260.706241][ T9548] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 260.712096][ T46] team0: Port device bridge0 removed [ 260.719220][ T9548] vhci_hcd vhci_hcd.0: Device attached [ 260.775302][ T46] team0: Port device bridge11 removed [ 260.834706][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 260.842868][ T46] team0: Port device bridge12 removed [ 261.022548][ T46] bond0 (unregistering): Released all slaves [ 261.086173][ T9528] syzkaller1: entered promiscuous mode [ 261.089285][ T9528] syzkaller1: entered allmulticast mode [ 261.178399][ T9549] vhci_hcd: connection closed [ 261.178791][ T1147] vhci_hcd: stop threads [ 261.184025][ T1147] vhci_hcd: release socket [ 261.185635][ T1147] vhci_hcd: disconnect device [ 261.225793][ T9519] chnl_net:caif_netlink_parms(): no params data found [ 261.362316][ T9519] bridge0: port 1(bridge_slave_0) entered blocking state [ 261.365652][ T9519] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.368768][ T9519] bridge_slave_0: entered allmulticast mode [ 261.374192][ T9519] bridge_slave_0: entered promiscuous mode [ 261.379405][ T9519] bridge0: port 2(bridge_slave_1) entered blocking state [ 261.382361][ T9519] bridge0: port 2(bridge_slave_1) entered disabled state [ 261.385112][ T9519] bridge_slave_1: entered allmulticast mode [ 261.390028][ T9519] bridge_slave_1: entered promiscuous mode [ 261.493483][ T9519] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 261.505814][ T9519] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 261.582484][ T9519] team0: Port device team_slave_0 added [ 261.587982][ T9519] team0: Port device team_slave_1 added [ 261.652212][ T9519] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 261.655262][ T9519] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 261.668477][ T9519] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 261.674461][ T9519] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 261.677346][ T9519] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 261.688657][ T9519] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 261.863356][ T9519] hsr_slave_0: entered promiscuous mode [ 261.866727][ T9519] hsr_slave_1: entered promiscuous mode [ 261.869973][ T9519] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 261.873119][ T9519] Cannot create hsr debugfs directory [ 262.149117][ T839] usb 9-1: new high-speed USB device number 34 using dummy_hcd [ 262.321536][ T839] usb 9-1: unable to read config index 0 descriptor/start: -61 [ 262.340363][ T839] usb 9-1: can't read configurations, error -61 [ 262.479298][ T839] usb 9-1: new high-speed USB device number 35 using dummy_hcd [ 262.522577][ T9519] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 262.532952][ T9519] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 262.538677][ T9519] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 262.546733][ T9519] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 262.603374][ T9588] netlink: 'syz.3.1026': attribute type 6 has an invalid length. [ 262.632849][ T9519] 8021q: adding VLAN 0 to HW filter on device bond0 [ 262.649564][ T9519] 8021q: adding VLAN 0 to HW filter on device team0 [ 262.651052][ T839] usb 9-1: unable to read config index 0 descriptor/start: -61 [ 262.655976][ T839] usb 9-1: can't read configurations, error -61 [ 262.657823][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 262.659551][ T839] usb usb9-port1: attempt power cycle [ 262.663132][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 262.673040][ T46] tipc: Disabling bearer [ 262.675438][ T46] tipc: Left network mode [ 262.684543][ T1139] bridge0: port 2(bridge_slave_1) entered blocking state [ 262.687175][ T1139] bridge0: port 2(bridge_slave_1) entered forwarding state [ 262.763134][ T9519] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 262.839130][ T6011] vhci_hcd: vhci_device speed not set [ 262.901992][ T46] hsr_slave_0: left promiscuous mode [ 262.905386][ T46] hsr_slave_1: left promiscuous mode [ 262.953430][ T46] veth1_macvtap: left allmulticast mode [ 262.955881][ T46] veth1_macvtap: left promiscuous mode [ 262.958269][ T46] veth0_macvtap: left promiscuous mode [ 262.960838][ T46] veth1_vlan: left promiscuous mode [ 262.962950][ T46] veth0_vlan: left promiscuous mode [ 263.000486][ T839] usb 9-1: new high-speed USB device number 36 using dummy_hcd [ 263.024822][ T839] usb 9-1: unable to read config index 0 descriptor/start: -61 [ 263.027817][ T839] usb 9-1: can't read configurations, error -61 [ 263.169323][ T839] usb 9-1: new high-speed USB device number 37 using dummy_hcd [ 263.192410][ T839] usb 9-1: unable to read config index 0 descriptor/start: -61 [ 263.195253][ T839] usb 9-1: can't read configurations, error -61 [ 263.206225][ T839] usb usb9-port1: unable to enumerate USB device [ 263.229194][ T5966] Bluetooth: hci2: command tx timeout [ 265.364172][ T9625] bridge11: entered promiscuous mode [ 265.366610][ T9625] bridge11: entered allmulticast mode [ 265.373964][ T9625] team0: Port device bridge11 added [ 265.384058][ T9519] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 265.431800][ T9519] veth0_vlan: entered promiscuous mode [ 265.440380][ T9519] veth1_vlan: entered promiscuous mode [ 265.482183][ T9519] veth0_macvtap: entered promiscuous mode [ 265.488207][ T9519] veth1_macvtap: entered promiscuous mode [ 265.507914][ T9519] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 265.529529][ T9519] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 265.547363][ T9519] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.551895][ T9519] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.555391][ T9519] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.558667][ T9519] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.637202][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 265.640794][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 265.672354][ T1139] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 265.677603][ T1139] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 265.783140][ T46] IPVS: stop unused estimator thread 0... [ 266.159207][ T72] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 266.332819][ T72] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 266.336232][ T72] usb 6-1: can't read configurations, error -61 [ 266.473832][ T9654] loop4: detected capacity change from 0 to 524255232 [ 266.489027][ T72] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 266.594710][ T9658] : entered promiscuous mode [ 266.653014][ T72] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 266.656649][ T72] usb 6-1: can't read configurations, error -61 [ 266.663000][ T72] usb usb6-port1: attempt power cycle [ 266.999380][ T72] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 267.040969][ T9669] syz_tun: entered allmulticast mode [ 267.043340][ T72] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 267.046021][ T72] usb 6-1: can't read configurations, error -61 [ 267.097108][ T9674] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1051'. [ 267.142012][ T9674] syz_tun (unregistering): left allmulticast mode [ 267.152944][ T9669] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1051'. [ 267.193225][ T72] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 267.231892][ T72] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 267.235021][ T72] usb 6-1: can't read configurations, error -61 [ 267.237857][ T72] usb usb6-port1: unable to enumerate USB device [ 267.259786][ T9679] can0: slcan on ttyS3. [ 267.373983][ T9686] random: crng reseeded on system resumption [ 267.382582][ T9679] can0 (unregistered): slcan off ttyS3. [ 267.427770][ T9686] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.434068][ T9686] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 267.531415][ T9686] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.539032][ T9686] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 267.636068][ T9686] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.643706][ T9686] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 267.741982][ T9686] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.746079][ T9686] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 268.103592][ T9686] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 268.115318][ T9686] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 268.129482][ T9686] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 268.133029][ T9686] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 268.162209][ T9686] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 268.166102][ T9686] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 268.191898][ T9686] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 268.195758][ T9686] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 268.585887][ T9721] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1058'. [ 268.976904][ T9724] bridge1: entered promiscuous mode [ 268.979213][ T9724] bridge1: entered allmulticast mode [ 268.991705][ T9724] team0: Port device bridge1 added [ 269.017534][ T9722] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1059'. [ 269.568837][ T9726] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 269.720175][ T5966] Bluetooth: hci1: command 0x0405 tx timeout [ 270.483438][ T9753] 9pnet_fd: Insufficient options for proto=fd [ 270.553809][ T9756] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1069'. [ 270.720183][ T7760] usb 9-1: new high-speed USB device number 38 using dummy_hcd [ 270.871511][ T7760] usb 9-1: unable to read config index 0 descriptor/start: -61 [ 270.875403][ T7760] usb 9-1: can't read configurations, error -61 [ 270.888449][ T9762] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1070'. [ 271.029159][ T7760] usb 9-1: new high-speed USB device number 39 using dummy_hcd [ 271.182373][ T7760] usb 9-1: unable to read config index 0 descriptor/start: -61 [ 271.185226][ T7760] usb 9-1: can't read configurations, error -61 [ 271.187947][ T7760] usb usb9-port1: attempt power cycle [ 271.240300][ T9765] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1071'. [ 271.481710][ T9767] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1072'. [ 271.539349][ T7760] usb 9-1: new high-speed USB device number 40 using dummy_hcd [ 271.567043][ T7760] usb 9-1: unable to read config index 0 descriptor/start: -61 [ 271.576934][ T7760] usb 9-1: can't read configurations, error -61 [ 271.829147][ T7760] usb 9-1: new high-speed USB device number 41 using dummy_hcd [ 271.859258][ T7760] usb 9-1: unable to read config index 0 descriptor/start: -61 [ 271.862451][ T7760] usb 9-1: can't read configurations, error -61 [ 271.865269][ T7760] usb usb9-port1: unable to enumerate USB device [ 271.915021][ T9781] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 272.269272][ T5966] Bluetooth: hci2: command tx timeout [ 272.405065][ T9789] overlayfs: overlapping lowerdir path [ 272.416895][ T9789] overlayfs: failed to verify upper root origin [ 272.425894][ T9789] netlink: 'syz.3.1078': attribute type 10 has an invalid length. [ 272.429340][ T9789] mac80211_hwsim hwsim7 wlan1: left allmulticast mode [ 272.444130][ T9789] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 272.896613][ T9803] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1082'. [ 273.564922][ T9812] netlink: 'syz.4.1086': attribute type 1 has an invalid length. [ 273.568580][ T9812] netlink: 228 bytes leftover after parsing attributes in process `syz.4.1086'. [ 273.604611][ T9816] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1087'. [ 273.611813][ T9816] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1087'. [ 273.637176][ T9816] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1087'. [ 273.642749][ T9816] hsr_slave_0: left promiscuous mode [ 273.647819][ T9816] hsr_slave_1: left promiscuous mode [ 273.749112][ T7233] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 274.029042][ T7233] usb 8-1: Using ep0 maxpacket: 8 [ 274.041778][ T7233] usb 8-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 32 [ 274.046448][ T7233] usb 8-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 64 [ 274.066269][ T7233] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 274.070097][ T7233] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.073450][ T7233] usb 8-1: Product: äĒčĻŦéĐūęŠđčžœâ·îŒžĮĢ卙튖ėš˜æŒ˜ï·î―”ã›ēïŪļ䘞â‡ēâœīï‹ĩí™īïĄ·âē„ናãŋ ä§·ė·ę­ąã”§č‚ŒáŠŒęĒģėŋĨ [ 274.078635][ T7233] usb 8-1: Manufacturer: Ņ‰ [ 274.089197][ T7233] usb 8-1: SerialNumber: ည [ 274.098255][ T9832] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 274.173421][ T9830] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 274.179508][ T9830] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 274.195594][ T9830] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 274.197914][ T9830] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 274.204717][ T9830] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 274.234263][ T9830] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 274.236343][ T9830] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 274.242465][ T9830] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 274.248707][ T9830] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 274.344659][ T7233] cdc_ncm 8-1:1.0: bind() failure [ 274.351560][ T7233] cdc_ncm 8-1:1.1: CDC Union missing and no IAD found [ 274.354777][ T7233] cdc_ncm 8-1:1.1: bind() failure [ 274.360917][ T7233] usb 8-1: USB disconnect, device number 20 [ 274.649143][ T840] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 274.715999][ T9841] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1095'. [ 274.810809][ T840] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 274.813600][ T840] usb 6-1: can't read configurations, error -61 [ 274.949287][ T840] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 275.112336][ T840] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 275.115296][ T840] usb 6-1: can't read configurations, error -61 [ 275.121166][ T840] usb usb6-port1: attempt power cycle [ 275.489078][ T840] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 275.518384][ T840] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 275.523140][ T840] usb 6-1: can't read configurations, error -61 [ 275.611447][ T9874] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1104'. [ 275.659055][ T840] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 275.682245][ T840] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 275.685413][ T840] usb 6-1: can't read configurations, error -61 [ 275.688642][ T840] usb usb6-port1: unable to enumerate USB device [ 276.190170][ T5966] Bluetooth: hci3: command 0x0406 tx timeout [ 276.269271][ T5966] Bluetooth: hci2: command 0x0c1a tx timeout [ 276.271735][ T5305] Bluetooth: hci1: command 0x0405 tx timeout [ 276.499653][ T9896] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1109'. [ 277.333009][ T9909] tipc: Enabling of bearer rejected, already enabled [ 278.279115][ T5305] Bluetooth: hci3: command 0x0406 tx timeout [ 278.349082][ T5305] Bluetooth: hci2: command 0x0c1a tx timeout [ 278.351691][ T5966] Bluetooth: hci1: command 0x0405 tx timeout [ 278.475830][ T9934] tipc: Enabling of bearer rejected, already enabled [ 278.705971][ T9942] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1121'. [ 278.759631][ T840] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 278.901556][ T9946] bridge0: entered promiscuous mode [ 278.903810][ T9946] bridge0: entered allmulticast mode [ 278.912710][ T9946] team0: Port device bridge0 added [ 278.915116][ T840] usb 10-1: unable to read config index 0 descriptor/start: -61 [ 278.918276][ T840] usb 10-1: can't read configurations, error -61 [ 279.059055][ T840] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 279.236150][ T840] usb 10-1: unable to read config index 0 descriptor/start: -61 [ 279.239866][ T840] usb 10-1: can't read configurations, error -61 [ 279.243119][ T840] usb usb10-port1: attempt power cycle [ 279.289398][ T9962] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1130'. [ 279.537002][ T9967] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1131'. [ 279.579024][ T840] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 279.602279][ T1119] sr 2:0:0:0: [sr0] tag#22 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 279.614353][ T1119] sr 2:0:0:0: [sr0] tag#22 Sense Key : Illegal Request [current] [ 279.617023][ T840] usb 10-1: unable to read config index 0 descriptor/start: -61 [ 279.625367][ T840] usb 10-1: can't read configurations, error -61 [ 279.628894][ T1119] sr 2:0:0:0: [sr0] tag#22 Add. Sense: Invalid command operation code [ 279.634493][ T1119] sr 2:0:0:0: [sr0] tag#22 CDB: Write(10) 2a 00 00 00 00 00 00 00 02 00 [ 279.641050][ T1119] critical target error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 279.646083][ T1119] Buffer I/O error on dev sr0, logical block 0, lost async page write [ 279.769126][ T840] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 279.793005][ T840] usb 10-1: unable to read config index 0 descriptor/start: -61 [ 279.797319][ T840] usb 10-1: can't read configurations, error -61 [ 279.804209][ T840] usb usb10-port1: unable to enumerate USB device [ 280.164339][ T9972] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 280.167425][ T9972] overlayfs: missing 'lowerdir' [ 280.245623][ T9976] tipc: Started in network mode [ 280.249090][ T9976] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 280.259633][ T9976] tipc: Enabled bearer , priority 10 [ 280.429191][ T5305] Bluetooth: hci2: command 0x0c1a tx timeout [ 280.429224][ T5966] Bluetooth: hci1: command 0x0405 tx timeout [ 280.733061][ T9986] bridge2: entered promiscuous mode [ 280.735458][ T9986] bridge2: entered allmulticast mode [ 280.743698][ T9986] team0: Port device bridge2 added [ 281.229260][ T29] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 281.273285][ T9999] kvm: pic: single mode not supported [ 281.273456][ T9999] kvm: pic: level sensitive irq not supported [ 281.289784][ T9999] kvm: pic: non byte read [ 281.291227][T10007] netlink: 'syz.4.1140': attribute type 4 has an invalid length. [ 281.369125][ T6280] tipc: Node number set to 4269801488 [ 281.400935][ T29] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 281.404564][ T29] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 281.408381][ T29] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 281.412481][ T29] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 281.419188][ T9994] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 281.426093][ T29] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 281.528699][T10015] tipc: Enabling of bearer rejected, already enabled [ 281.678168][ T6280] usb 6-1: USB disconnect, device number 52 [ 281.889826][T10023] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1149'. [ 281.895597][T10023] xt_SECMARK: invalid mode: 0 [ 281.904613][T10027] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1150'. [ 282.150338][ T840] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 282.299175][ T840] usb 10-1: Using ep0 maxpacket: 8 [ 282.305620][ T840] usb 10-1: config index 0 descriptor too short (expected 65535, got 18) [ 282.310070][ T840] usb 10-1: config 255 has too many interfaces: 255, using maximum allowed: 32 [ 282.313495][ T840] usb 10-1: config 255 has an invalid descriptor of length 255, skipping remainder of the config [ 282.317675][ T840] usb 10-1: config 255 has 0 interfaces, different from the descriptor's value: 255 [ 282.326947][ T840] usb 10-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ee [ 282.331355][ T840] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.335027][ T840] usb 10-1: Product: syz [ 282.337128][ T840] usb 10-1: Manufacturer: syz [ 282.341576][ T840] usb 10-1: SerialNumber: syz [ 282.347423][ T840] usb 10-1: rejected 1 configuration due to insufficient available bus power [ 282.355414][ T840] usb 10-1: no configuration chosen from 1 choice [ 283.249635][T10034] wireguard0: entered promiscuous mode [ 283.252091][T10034] wireguard0: entered allmulticast mode [ 283.804289][T10045] ptrace attach of "/syz-executor exec"[10043] was attempted by "/syz-executor exec"[10045] [ 284.219090][ T29] usb 9-1: new high-speed USB device number 42 using dummy_hcd [ 284.411550][ T29] usb 9-1: unable to read config index 0 descriptor/start: -61 [ 284.414795][ T29] usb 9-1: can't read configurations, error -61 [ 284.551580][ T29] usb 9-1: new high-speed USB device number 43 using dummy_hcd [ 284.692205][ T24] usb 10-1: USB disconnect, device number 14 [ 284.706840][ T29] usb 9-1: unable to read config index 0 descriptor/start: -61 [ 284.710249][ T29] usb 9-1: can't read configurations, error -61 [ 284.716390][ T29] usb usb9-port1: attempt power cycle [ 285.085147][T10065] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1160'. [ 285.209278][ T29] usb 9-1: new high-speed USB device number 44 using dummy_hcd [ 285.292607][ T29] usb 9-1: unable to read config index 0 descriptor/start: -61 [ 285.335665][ T29] usb 9-1: can't read configurations, error -61 [ 285.469071][ T29] usb 9-1: new high-speed USB device number 45 using dummy_hcd [ 285.492746][ T29] usb 9-1: unable to read config index 0 descriptor/start: -61 [ 285.496116][ T29] usb 9-1: can't read configurations, error -61 [ 285.498495][ T29] usb usb9-port1: unable to enumerate USB device [ 285.546618][T10074] bridge6: entered promiscuous mode [ 285.548888][T10074] bridge6: entered allmulticast mode [ 285.553701][T10074] team0: Port device bridge6 added [ 285.789101][ T5966] Bluetooth: hci3: command 0x0406 tx timeout [ 285.892206][T10084] netlink: 256 bytes leftover after parsing attributes in process `syz.5.1166'. [ 286.935007][T10095] tipc: Enabling of bearer rejected, already enabled [ 286.983353][T10097] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1171'. [ 286.987019][T10097] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1171'. [ 287.060634][T10106] bridge3: entered promiscuous mode [ 287.062869][T10106] bridge3: entered allmulticast mode [ 287.072795][T10106] team0: Port device bridge3 added [ 287.123622][T10111] netlink: 256 bytes leftover after parsing attributes in process `syz.5.1176'. [ 287.699117][ T24] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 287.851206][ T24] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 287.855157][ T24] usb 6-1: can't read configurations, error -61 [ 287.979048][ T24] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 288.101299][T10131] tipc: Enabling of bearer rejected, already enabled [ 288.141596][ T24] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 288.144902][ T24] usb 6-1: can't read configurations, error -61 [ 288.147592][ T24] usb usb6-port1: attempt power cycle [ 288.454605][T10145] bridge0: entered promiscuous mode [ 288.457079][T10145] bridge0: entered allmulticast mode [ 288.462205][T10145] team0: Port device bridge0 added [ 288.485198][T10148] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1190'. [ 288.499258][ T24] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 288.523046][ T24] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 288.526417][ T24] usb 6-1: can't read configurations, error -61 [ 288.543894][T10150] tipc: Enabling of bearer rejected, already enabled [ 288.659448][ T24] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 288.698491][ T24] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 289.036362][ T24] usb 6-1: can't read configurations, error -61 [ 289.039383][ T24] usb usb6-port1: unable to enumerate USB device [ 289.321795][T10172] random: crng reseeded on system resumption [ 289.428215][T10174] netlink: 'syz.3.1198': attribute type 10 has an invalid length. [ 289.435210][T10174] bond0: (slave wlan1): Releasing backup interface [ 289.439751][T10174] team0: Device wlan1 is of different type [ 289.822419][T10182] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1199'. [ 290.313556][T10189] bridge12: entered promiscuous mode [ 290.315353][T10189] bridge12: entered allmulticast mode [ 290.318672][T10189] team0: Port device bridge12 added [ 290.808868][T10201] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1206'. [ 291.310040][T10217] bridge1: entered promiscuous mode [ 291.312136][T10217] bridge1: entered allmulticast mode [ 291.322679][T10217] team0: Port device bridge1 added [ 291.589311][ T72] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 291.685937][T10224] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1213'. [ 291.741391][ T72] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 291.745088][ T72] usb 8-1: can't read configurations, error -61 [ 291.869222][ T72] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 292.021160][ T72] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 292.023970][ T72] usb 8-1: can't read configurations, error -61 [ 292.026714][ T72] usb usb8-port1: attempt power cycle [ 292.177811][T10226] team0: Port device team_slave_1 removed [ 292.385773][T10233] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1216'. [ 292.399101][ T72] usb 8-1: new high-speed USB device number 23 using dummy_hcd [ 292.423046][ T72] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 292.426324][ T72] usb 8-1: can't read configurations, error -61 [ 292.429308][ T5305] Bluetooth: hci1: command 0x0405 tx timeout [ 292.527337][T10242] vivid-002: disconnect [ 292.579015][ T72] usb 8-1: new high-speed USB device number 24 using dummy_hcd [ 292.612261][ T72] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 292.614803][ T72] usb 8-1: can't read configurations, error -61 [ 292.619286][ T72] usb usb8-port1: unable to enumerate USB device [ 292.954655][T10263] 8021q: adding VLAN 0 to HW filter on device bond1 [ 293.301494][T10241] vivid-002: reconnect [ 293.714387][T10279] loop6: detected capacity change from 0 to 524287999 [ 293.825125][T10285] libceph: resolve '0.' (ret=-3): failed [ 294.510929][ T5305] Bluetooth: hci1: command 0x0405 tx timeout [ 294.534406][T10309] tipc: Enabling of bearer rejected, already enabled [ 294.729867][T10315] devtmpfs: Unknown parameter '0xffffffffffffffff' [ 295.009058][ T29] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 295.049872][T10335] syz.4.1249: vmalloc error: size 34359742464, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 295.055221][T10335] CPU: 1 UID: 0 PID: 10335 Comm: syz.4.1249 Not tainted 6.15.0-syzkaller-08175-g9d230d500b0e #0 PREEMPT(full) [ 295.055240][T10335] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 295.055248][T10335] Call Trace: [ 295.055254][T10335] [ 295.055260][T10335] dump_stack_lvl+0x16c/0x1f0 [ 295.055281][T10335] warn_alloc+0x248/0x3a0 [ 295.055298][T10335] ? __pfx_warn_alloc+0x10/0x10 [ 295.055316][T10335] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 295.055328][T10335] ? stack_depot_save_flags+0x3e0/0xa40 [ 295.055350][T10335] ? kasan_save_stack+0x42/0x60 [ 295.055363][T10335] ? kasan_save_stack+0x33/0x60 [ 295.055375][T10335] ? kasan_save_track+0x14/0x30 [ 295.055387][T10335] ? xskq_create+0x52/0x1d0 [ 295.055399][T10335] ? xsk_setsockopt+0x684/0x840 [ 295.055418][T10335] ? do_sock_setsockopt+0x224/0x470 [ 295.055436][T10335] ? xskq_create+0xfb/0x1d0 [ 295.055447][T10335] __vmalloc_node_range_noprof+0x10ce/0x1520 [ 295.055471][T10335] ? xskq_create+0xfb/0x1d0 [ 295.055485][T10335] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 295.055508][T10335] ? xskq_create+0xfb/0x1d0 [ 295.055518][T10335] vmalloc_user_noprof+0x9e/0xe0 [ 295.055536][T10335] ? xskq_create+0xfb/0x1d0 [ 295.055547][T10335] xskq_create+0xfb/0x1d0 [ 295.055561][T10335] xsk_setsockopt+0x684/0x840 [ 295.055579][T10335] ? __pfx_xsk_setsockopt+0x10/0x10 [ 295.055596][T10335] ? __pfx_aa_sk_perm+0x10/0x10 [ 295.055610][T10335] ? errseq_sample+0x53/0x70 [ 295.055629][T10335] ? __pfx_xsk_setsockopt+0x10/0x10 [ 295.055647][T10335] do_sock_setsockopt+0x224/0x470 [ 295.055662][T10335] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 295.055687][T10335] __sys_setsockopt+0x120/0x1a0 [ 295.055702][T10335] __ia32_sys_setsockopt+0xbc/0x160 [ 295.055714][T10335] ? lockdep_hardirqs_on+0x7c/0x110 [ 295.055727][T10335] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 295.055741][T10335] __do_fast_syscall_32+0x7c/0x3a0 [ 295.055756][T10335] do_fast_syscall_32+0x32/0x80 [ 295.055770][T10335] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 295.055784][T10335] RIP: 0023:0xf7fc7579 [ 295.055794][T10335] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 295.055805][T10335] RSP: 002b:00000000f50c555c EFLAGS: 00000296 ORIG_RAX: 000000000000016e [ 295.055816][T10335] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000000011b [ 295.055823][T10335] RDX: 0000000000000002 RSI: 0000000080000080 RDI: 0000000000000020 [ 295.055829][T10335] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 295.055836][T10335] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 295.055842][T10335] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 295.055855][T10335] [ 295.055860][T10335] Mem-Info: [ 295.161061][T10335] active_anon:7276 inactive_anon:121 isolated_anon:0 [ 295.161061][T10335] active_file:2295 inactive_file:45223 isolated_file:0 [ 295.161061][T10335] unevictable:1768 dirty:27 writeback:0 [ 295.161061][T10335] slab_reclaimable:7201 slab_unreclaimable:58948 [ 295.161061][T10335] mapped:27887 shmem:5289 pagetables:621 [ 295.161061][T10335] sec_pagetables:316 bounce:0 [ 295.161061][T10335] kernel_misc_reclaimable:0 [ 295.161061][T10335] free:51415 free_pcp:6087 free_cma:0 [ 295.175464][T10335] Node 0 active_anon:1392kB inactive_anon:124kB active_file:44kB inactive_file:28kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:8176kB dirty:0kB writeback:0kB shmem:4296kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:8068kB pagetables:756kB sec_pagetables:1140kB all_unreclaimable? yes Balloon:0kB [ 295.187303][T10335] Node 1 active_anon:27712kB inactive_anon:360kB active_file:9136kB inactive_file:180864kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:103372kB dirty:108kB writeback:0kB shmem:16860kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:3764kB pagetables:1728kB sec_pagetables:124kB all_unreclaimable? no Balloon:0kB [ 295.198797][T10335] Node 0 DMA free:1988kB boost:0kB min:760kB low:948kB high:1136kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:552kB local_pcp:124kB free_cma:0kB [ 295.207178][T10335] lowmem_reserve[]: 0 290 290 290 290 [ 295.208886][T10335] Node 0 DMA32 free:17740kB boost:0kB min:13332kB low:16664kB high:19996kB reserved_highatomic:4096KB active_anon:1392kB inactive_anon:124kB active_file:44kB inactive_file:28kB unevictable:3536kB writepending:0kB present:1032196kB managed:296984kB mlocked:0kB bounce:0kB free_pcp:3420kB local_pcp:300kB free_cma:0kB [ 295.218574][T10335] lowmem_reserve[]: 0 0 0 0 0 [ 295.220379][T10335] Node 1 DMA32 free:185676kB boost:10240kB min:57384kB low:69168kB high:80952kB reserved_highatomic:4096KB active_anon:27712kB inactive_anon:360kB active_file:9136kB inactive_file:180864kB unevictable:3536kB writepending:108kB present:1048432kB managed:948276kB mlocked:0kB bounce:0kB free_pcp:20568kB local_pcp:10420kB free_cma:0kB [ 295.229977][T10335] lowmem_reserve[]: 0 0 0 0 0 [ 295.231625][T10335] Node 0 DMA: 1*4kB (M) 0*8kB 0*16kB 4*32kB (U) 3*64kB (UM) 1*128kB (M) 0*256kB 1*512kB (M) 1*1024kB (M) 0*2048kB 0*4096kB = 1988kB [ 295.236146][T10335] Node 0 DMA32: 211*4kB (UMEH) 108*8kB (UMEH) 56*16kB (UMEH) 65*32kB (UMEH) 62*64kB (UMEH) 23*128kB (UME) 12*256kB (UME) 6*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 17740kB [ 295.241503][T10335] Node 1 DMA32: 211*4kB (UME) 52*8kB (UEH) 116*16kB (UMEH) 227*32kB (UMEH) 412*64kB (UMEH) 99*128kB (UMEH) 56*256kB (UMEH) 66*512kB (UM) 44*1024kB (UMH) 13*2048kB (UM) 4*4096kB (UM) = 185612kB [ 295.247778][T10335] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 295.251797][T10335] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 295.253360][ T29] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 295.254747][T10335] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 295.257205][ T29] usb 6-1: can't read configurations, error -61 [ 295.260270][T10335] Node 1 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 295.260286][T10335] 53196 total pagecache pages [ 295.260291][T10335] 392 pages in swap cache [ 295.260296][T10335] Free swap = 122448kB [ 295.260300][T10335] Total swap = 124996kB [ 295.260306][T10335] 524155 pages RAM [ 295.260311][T10335] 0 pages HighMem/MovableOnly [ 295.260315][T10335] 209000 pages reserved [ 295.260319][T10335] 0 pages cma reserved [ 295.293034][T10342] tipc: Enabling of bearer rejected, already enabled [ 295.501190][ T29] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 295.678429][ T29] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 295.682104][ T29] usb 6-1: can't read configurations, error -61 [ 295.686381][ T29] usb usb6-port1: attempt power cycle [ 296.296054][T10363] FAULT_INJECTION: forcing a failure. [ 296.296054][T10363] name failslab, interval 1, probability 0, space 0, times 1 [ 296.302606][T10363] CPU: 2 UID: 0 PID: 10363 Comm: syz.4.1259 Not tainted 6.15.0-syzkaller-08175-g9d230d500b0e #0 PREEMPT(full) [ 296.302632][T10363] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 296.302643][T10363] Call Trace: [ 296.302649][T10363] [ 296.302656][T10363] dump_stack_lvl+0x16c/0x1f0 [ 296.302682][T10363] should_fail_ex+0x512/0x640 [ 296.302706][T10363] ? __kvmalloc_node_noprof+0x122/0x620 [ 296.302728][T10363] should_failslab+0xc2/0x120 [ 296.302750][T10363] __kvmalloc_node_noprof+0x135/0x620 [ 296.302768][T10363] ? __pfx___mutex_lock+0x10/0x10 [ 296.302789][T10363] ? traverse.part.0.constprop.0+0x392/0x640 [ 296.302821][T10363] ? traverse.part.0.constprop.0+0x392/0x640 [ 296.302846][T10363] traverse.part.0.constprop.0+0x392/0x640 [ 296.302881][T10363] seq_read_iter+0x932/0x12c0 [ 296.302919][T10363] proc_reg_read_iter+0x21d/0x310 [ 296.302940][T10363] vfs_read+0x8bf/0xc60 [ 296.302963][T10363] ? __pfx_vfs_read+0x10/0x10 [ 296.302977][T10363] ? find_held_lock+0x2b/0x80 [ 296.303018][T10363] ksys_pread64+0x161/0x1a0 [ 296.303035][T10363] ? __pfx_ksys_pread64+0x10/0x10 [ 296.303055][T10363] ? rcu_is_watching+0x12/0xc0 [ 296.303083][T10363] __do_fast_syscall_32+0x7c/0x3a0 [ 296.303107][T10363] do_fast_syscall_32+0x32/0x80 [ 296.303128][T10363] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 296.303149][T10363] RIP: 0023:0xf7fc7579 [ 296.303163][T10363] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 296.303180][T10363] RSP: 002b:00000000f50e655c EFLAGS: 00000296 ORIG_RAX: 00000000000000b4 [ 296.303197][T10363] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000080001440 [ 296.303209][T10363] RDX: 000000000000007e RSI: 0000000000000041 RDI: 0000000000000000 [ 296.303218][T10363] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 296.303228][T10363] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 296.303242][T10363] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 296.303266][T10363] [ 296.309740][ T29] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 296.372959][T10367] bridge13: entered promiscuous mode [ 296.390559][T10367] bridge13: entered allmulticast mode [ 296.395897][T10367] team0: Port device bridge13 added [ 296.411358][ T29] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 296.413807][ T29] usb 6-1: can't read configurations, error -61 [ 296.559091][ T29] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 296.579366][T10374] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1264'. [ 296.591819][ T29] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 296.595080][ T29] usb 6-1: can't read configurations, error -61 [ 296.598213][T10374] team1: entered promiscuous mode [ 296.598249][ T29] usb usb6-port1: unable to enumerate USB device [ 296.602923][T10374] 8021q: adding VLAN 0 to HW filter on device team1 [ 296.679016][ T6011] usb 10-1: new full-speed USB device number 15 using dummy_hcd [ 296.761859][T10392] IPv6: sit1: Disabled Multicast RS [ 297.001627][ T6011] usb 10-1: not running at top speed; connect to a high speed hub [ 297.006280][ T6011] usb 10-1: config 1 interface 0 altsetting 250 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 297.011538][ T6011] usb 10-1: config 1 interface 0 altsetting 250 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 297.016190][ T6011] usb 10-1: config 1 interface 0 altsetting 250 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 297.021634][ T6011] usb 10-1: config 1 interface 0 has no altsetting 0 [ 297.026834][ T6011] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 297.030622][ T29] usb 8-1: new high-speed USB device number 25 using dummy_hcd [ 297.033740][ T6011] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 297.041890][ T6011] usb 10-1: Product: Ў [ 297.043834][ T6011] usb 10-1: Manufacturer: ᐌ [ 297.045974][ T6011] usb 10-1: SerialNumber: ā°‡ [ 297.069819][T10370] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 297.073001][T10370] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 297.076240][T10370] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 297.196568][ T29] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 297.201422][ T29] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 297.205572][ T29] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 297.211418][ T29] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 297.215381][ T29] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.236813][ T29] usb 8-1: config 0 descriptor?? [ 297.291796][ T6011] cdc_ether 10-1:1.0: probe with driver cdc_ether failed with error -22 [ 297.307981][ T6011] usb 10-1: USB disconnect, device number 15 [ 297.657215][ T29] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 297.685333][ T29] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 297.794318][T10404] FAULT_INJECTION: forcing a failure. [ 297.794318][T10404] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 297.800977][T10404] CPU: 2 UID: 0 PID: 10404 Comm: syz.4.1273 Not tainted 6.15.0-syzkaller-08175-g9d230d500b0e #0 PREEMPT(full) [ 297.801002][T10404] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 297.801012][T10404] Call Trace: [ 297.801018][T10404] [ 297.801024][T10404] dump_stack_lvl+0x16c/0x1f0 [ 297.801047][T10404] should_fail_ex+0x512/0x640 [ 297.801074][T10404] _copy_to_iter+0x29f/0x16f0 [ 297.801105][T10404] ? __pfx__copy_to_iter+0x10/0x10 [ 297.801128][T10404] ? _raw_spin_unlock_irq+0x23/0x50 [ 297.801143][T10404] ? lockdep_hardirqs_on+0x7c/0x110 [ 297.801161][T10404] ? _raw_spin_unlock_irq+0x2e/0x50 [ 297.801177][T10404] ? traverse.part.0.constprop.0+0x2c5/0x640 [ 297.801251][T10404] seq_read_iter+0x719/0x12c0 [ 297.801286][T10404] proc_reg_read_iter+0x21d/0x310 [ 297.801306][T10404] vfs_read+0x8bf/0xc60 [ 297.801326][T10404] ? __pfx_vfs_read+0x10/0x10 [ 297.801340][T10404] ? find_held_lock+0x2b/0x80 [ 297.801378][T10404] ksys_pread64+0x161/0x1a0 [ 297.801394][T10404] ? __pfx_ksys_pread64+0x10/0x10 [ 297.801412][T10404] ? rcu_is_watching+0x12/0xc0 [ 297.801438][T10404] __do_fast_syscall_32+0x7c/0x3a0 [ 297.801461][T10404] do_fast_syscall_32+0x32/0x80 [ 297.801480][T10404] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 297.801500][T10404] RIP: 0023:0xf7fc7579 [ 297.801512][T10404] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 297.801527][T10404] RSP: 002b:00000000f50e655c EFLAGS: 00000296 ORIG_RAX: 00000000000000b4 [ 297.801543][T10404] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000080001440 [ 297.801553][T10404] RDX: 000000000000007e RSI: 0000000000000041 RDI: 0000000000000000 [ 297.801562][T10404] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 297.801571][T10404] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 297.801581][T10404] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 297.801602][T10404] [ 297.911968][T10388] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 297.915581][T10388] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 297.934400][T10410] bridge14: entered promiscuous mode [ 297.936609][T10410] bridge14: entered allmulticast mode [ 297.943025][T10410] team0: Port device bridge14 added [ 298.145090][ T72] usb 8-1: USB disconnect, device number 25 [ 298.789480][ T5992] usb 10-1: new high-speed USB device number 16 using dummy_hcd [ 298.808178][T10442] FAULT_INJECTION: forcing a failure. [ 298.808178][T10442] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 298.815348][T10442] CPU: 2 UID: 0 PID: 10442 Comm: syz.3.1286 Not tainted 6.15.0-syzkaller-08175-g9d230d500b0e #0 PREEMPT(full) [ 298.815370][T10442] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 298.815379][T10442] Call Trace: [ 298.815385][T10442] [ 298.815391][T10442] dump_stack_lvl+0x16c/0x1f0 [ 298.815414][T10442] should_fail_ex+0x512/0x640 [ 298.815438][T10442] should_fail_alloc_page+0xe7/0x130 [ 298.815458][T10442] prepare_alloc_pages+0x3c2/0x610 [ 298.815479][T10442] ? is_bpf_text_address+0x8a/0x1a0 [ 298.815502][T10442] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 298.815518][T10442] ? is_bpf_text_address+0x94/0x1a0 [ 298.815532][T10442] ? kernel_text_address+0x8d/0x100 [ 298.815550][T10442] ? __kernel_text_address+0xd/0x40 [ 298.815569][T10442] ? unwind_get_return_address+0x59/0xa0 [ 298.815588][T10442] ? arch_stack_walk+0xa6/0x100 [ 298.815621][T10442] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 298.815638][T10442] ? kvm_sched_clock_read+0x11/0x20 [ 298.815666][T10442] ? kvm_sched_clock_read+0x11/0x20 [ 298.815683][T10442] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 298.815704][T10442] ? policy_nodemask+0xea/0x4e0 [ 298.815725][T10442] alloc_pages_mpol+0x1fb/0x550 [ 298.815746][T10442] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 298.815771][T10442] folio_alloc_mpol_noprof+0x36/0x2f0 [ 298.815798][T10442] vma_alloc_folio_noprof+0xed/0x1e0 [ 298.815821][T10442] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 298.815841][T10442] ? find_held_lock+0x2b/0x80 [ 298.815862][T10442] ? __handle_mm_fault+0x1092/0x5450 [ 298.815881][T10442] __handle_mm_fault+0x2fac/0x5450 [ 298.815904][T10442] ? __pfx___handle_mm_fault+0x10/0x10 [ 298.815934][T10442] ? find_vma+0xbf/0x140 [ 298.815954][T10442] ? __pfx_find_vma+0x10/0x10 [ 298.815977][T10442] handle_mm_fault+0x3fe/0xad0 [ 298.815998][T10442] do_user_addr_fault+0x7a6/0x1370 [ 298.816045][T10442] ? rcu_is_watching+0x12/0xc0 [ 298.816076][T10442] exc_page_fault+0x5c/0xb0 [ 298.816093][T10442] asm_exc_page_fault+0x26/0x30 [ 298.816108][T10442] RIP: 0010:_copy_to_iter+0x37e/0x16f0 [ 298.816131][T10442] Code: fc 4d 85 f6 0f 85 52 ff ff ff e8 bd 34 e7 fc 4c 8b 74 24 18 89 de 4c 89 f7 e8 0e c8 4c fd 0f 01 cb 48 89 d9 48 89 ef 4c 89 f6 a4 0f 1f 00 48 89 cd 0f 01 ca 49 89 df 49 29 cf e9 22 ff ff ff [ 298.816146][T10442] RSP: 0018:ffffc9000cb7faf8 EFLAGS: 00050246 [ 298.816159][T10442] RAX: 0000000000000001 RBX: 0000000000000004 RCX: 0000000000000004 [ 298.816169][T10442] RDX: ffffed100b9e0409 RSI: ffff88805cf02041 RDI: 0000000080001440 [ 298.816178][T10442] RBP: 0000000080001440 R08: 0000000000000000 R09: ffffed100b9e0408 [ 298.816187][T10442] R10: ffff88805cf02044 R11: 0000000000000001 R12: ffffc9000cb7fd80 [ 298.816196][T10442] R13: 0000000080001444 R14: ffff88805cf02041 R15: 00007ffffffff000 [ 298.816218][T10442] ? _copy_to_iter+0x372/0x16f0 [ 298.816246][T10442] ? __pfx__copy_to_iter+0x10/0x10 [ 298.816266][T10442] ? _raw_spin_unlock_irq+0x23/0x50 [ 298.816281][T10442] ? lockdep_hardirqs_on+0x7c/0x110 [ 298.816297][T10442] ? _raw_spin_unlock_irq+0x2e/0x50 [ 298.816327][T10442] ? traverse.part.0.constprop.0+0x2c5/0x640 [ 298.816360][T10442] seq_read_iter+0x719/0x12c0 [ 298.816391][T10442] proc_reg_read_iter+0x21d/0x310 [ 298.816410][T10442] vfs_read+0x8bf/0xc60 [ 298.816430][T10442] ? __pfx_vfs_read+0x10/0x10 [ 298.816441][T10442] ? find_held_lock+0x2b/0x80 [ 298.816474][T10442] ksys_pread64+0x161/0x1a0 [ 298.816494][T10442] ? __pfx_ksys_pread64+0x10/0x10 [ 298.816510][T10442] ? rcu_is_watching+0x12/0xc0 [ 298.816532][T10442] __do_fast_syscall_32+0x7c/0x3a0 [ 298.816553][T10442] do_fast_syscall_32+0x32/0x80 [ 298.816571][T10442] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 298.816589][T10442] RIP: 0023:0xf7f52579 [ 298.816602][T10442] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 298.816616][T10442] RSP: 002b:00000000f507655c EFLAGS: 00000296 ORIG_RAX: 00000000000000b4 [ 298.816629][T10442] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000080001440 [ 298.816638][T10442] RDX: 000000000000007e RSI: 0000000000000041 RDI: 0000000000000000 [ 298.816646][T10442] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 298.816655][T10442] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 298.816664][T10442] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 298.816684][T10442] [ 299.042752][ T5992] usb 10-1: unable to read config index 0 descriptor/start: -61 [ 299.045162][ T5992] usb 10-1: can't read configurations, error -61 [ 299.169020][ T5992] usb 10-1: new high-speed USB device number 17 using dummy_hcd [ 299.192266][T10450] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(11) [ 299.194909][T10450] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 299.198350][T10450] vhci_hcd vhci_hcd.0: Device attached [ 299.321784][ T5992] usb 10-1: unable to read config index 0 descriptor/start: -61 [ 299.324741][ T5992] usb 10-1: can't read configurations, error -61 [ 299.326825][ T5992] usb usb10-port1: attempt power cycle [ 299.459162][ T29] usb 39-1: new high-speed USB device number 9 using vhci_hcd [ 299.670540][ T5992] usb 10-1: new high-speed USB device number 18 using dummy_hcd [ 299.691509][ T5992] usb 10-1: unable to read config index 0 descriptor/start: -61 [ 299.694716][ T5992] usb 10-1: can't read configurations, error -61 [ 299.727187][T10451] vhci_hcd: connection reset by peer [ 299.730795][ T13] vhci_hcd: stop threads [ 299.732657][ T13] vhci_hcd: release socket [ 299.734722][ T13] vhci_hcd: disconnect device [ 299.829220][ T5992] usb 10-1: new high-speed USB device number 19 using dummy_hcd [ 299.852027][ T5992] usb 10-1: unable to read config index 0 descriptor/start: -61 [ 299.855143][ T5992] usb 10-1: can't read configurations, error -61 [ 299.858162][ T5992] usb usb10-port1: unable to enumerate USB device [ 300.733264][T10486] tipc: Enabling of bearer rejected, already enabled [ 300.793266][T10488] bridge4: entered promiscuous mode [ 300.795528][T10488] bridge4: entered allmulticast mode [ 300.803864][T10488] team0: Port device bridge4 added [ 301.569625][T10496] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(10) [ 301.571835][T10496] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 301.575356][T10496] vhci_hcd vhci_hcd.0: Device attached [ 301.708524][T10509] trusted_key: encrypted_key: master key parameter 'trusted:' is invalid [ 302.107812][T10499] vhci_hcd: connection closed [ 302.108234][ T46] vhci_hcd: stop threads [ 302.116661][ T46] vhci_hcd: release socket [ 302.129146][ T46] vhci_hcd: disconnect device [ 302.159809][ T6011] vhci_hcd: vhci_device speed not set [ 302.245488][T10517] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1309'. [ 302.266246][T10519] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(11) [ 302.268942][T10519] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 302.272672][T10519] vhci_hcd vhci_hcd.0: Device attached [ 302.367019][T10524] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1310'. [ 302.519220][ T839] usb 47-1: new high-speed USB device number 2 using vhci_hcd [ 302.800188][T10521] vhci_hcd: connection reset by peer [ 302.813017][ T12] vhci_hcd: stop threads [ 302.814860][ T12] vhci_hcd: release socket [ 302.817212][ T12] vhci_hcd: disconnect device [ 302.854340][T10533] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1312'. [ 303.560629][ T7233] usb 6-1: new high-speed USB device number 61 using dummy_hcd [ 303.711916][ T7233] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 303.715360][ T7233] usb 6-1: can't read configurations, error -61 [ 303.803395][ T24] usb 8-1: new low-speed USB device number 26 using dummy_hcd [ 303.839074][ T7233] usb 6-1: new high-speed USB device number 62 using dummy_hcd [ 303.929340][ T24] usb 8-1: device descriptor read/64, error -71 [ 304.001646][ T7233] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 304.004806][ T7233] usb 6-1: can't read configurations, error -61 [ 304.007603][ T7233] usb usb6-port1: attempt power cycle [ 304.179061][ T24] usb 8-1: new low-speed USB device number 27 using dummy_hcd [ 304.292768][T10557] fuse: Bad value for 'fd' [ 304.320451][ T24] usb 8-1: device descriptor read/64, error -71 [ 304.349046][ T7233] usb 6-1: new high-speed USB device number 63 using dummy_hcd [ 304.371443][ T7233] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 304.373953][ T7233] usb 6-1: can't read configurations, error -61 [ 304.435180][ T24] usb usb8-port1: attempt power cycle [ 304.499149][ T7233] usb 6-1: new high-speed USB device number 64 using dummy_hcd [ 304.521528][ T7233] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 304.524992][ T7233] usb 6-1: can't read configurations, error -61 [ 304.528144][ T7233] usb usb6-port1: unable to enumerate USB device [ 304.589234][ T29] vhci_hcd: vhci_device speed not set [ 304.779119][ T24] usb 8-1: new low-speed USB device number 28 using dummy_hcd [ 304.809842][ T24] usb 8-1: device descriptor read/8, error -71 [ 305.049072][ T24] usb 8-1: new low-speed USB device number 29 using dummy_hcd [ 305.069706][ T24] usb 8-1: device descriptor read/8, error -71 [ 305.181680][ T24] usb usb8-port1: unable to enumerate USB device [ 305.432989][T10563] tipc: Enabling of bearer rejected, already enabled [ 305.481396][T10567] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 305.871186][T10572] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(10) [ 305.874005][T10572] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 305.877842][T10572] vhci_hcd vhci_hcd.0: Device attached [ 305.942944][T10573] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(10) [ 305.945745][T10573] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 305.956748][T10573] vhci_hcd vhci_hcd.0: Device attached [ 306.189236][ T29] usb 45-1: new high-speed USB device number 11 using vhci_hcd [ 306.451822][T10574] vhci_hcd: connection closed [ 306.453452][ T46] vhci_hcd: stop threads [ 306.457729][ T46] vhci_hcd: release socket [ 306.461450][ T46] vhci_hcd: disconnect device [ 306.505858][T10583] input: syz1 as /devices/virtual/input/input13 [ 306.519232][T10576] vhci_hcd: connection reset by peer [ 306.522973][ T1197] vhci_hcd: stop threads [ 306.525175][ T1197] vhci_hcd: release socket [ 306.528854][ T1197] vhci_hcd: disconnect device [ 306.736318][T10590] delete_channel: no stack [ 307.222294][T10603] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1336'. [ 307.288367][T10605] overlayfs: overlapping lowerdir path [ 307.551041][ T5305] Bluetooth: hci1: command 0x0405 tx timeout [ 307.590527][T10621] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1341'. [ 307.594327][T10621] bridge_slave_1: left allmulticast mode [ 307.596650][T10621] bridge_slave_1: left promiscuous mode [ 307.599317][T10621] bridge0: port 2(bridge_slave_1) entered disabled state [ 307.611542][T10621] bridge_slave_0: left allmulticast mode [ 307.614669][T10621] bridge_slave_0: left promiscuous mode [ 307.617271][T10621] bridge0: port 1(bridge_slave_0) entered disabled state [ 307.629157][ T839] vhci_hcd: vhci_device speed not set [ 308.458284][T10639] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1347'. [ 308.520287][T10642] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1348'. [ 308.619744][T10644] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(10) [ 308.622252][T10644] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 308.625706][T10644] vhci_hcd vhci_hcd.0: Device attached [ 309.229199][ T5305] Bluetooth: hci3: command 0x0406 tx timeout [ 309.542136][T10650] tipc: Enabling of bearer rejected, already enabled [ 309.611508][T10645] vhci_hcd: connection closed [ 309.611814][ T46] vhci_hcd: stop threads [ 309.617720][ T46] vhci_hcd: release socket [ 309.619958][ T46] vhci_hcd: disconnect device [ 309.773547][T10664] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1353'. [ 311.363998][T10675] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1357'. [ 312.496745][T10682] tipc: Enabling of bearer rejected, already enabled [ 312.590789][ T29] vhci_hcd: vhci_device speed not set [ 313.195361][T10691] sg_write: process 174 (syz.1.1362) changed security contexts after opening file descriptor, this is not allowed. [ 314.241863][T10695] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(11) [ 314.244740][T10695] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 314.248268][T10695] vhci_hcd vhci_hcd.0: Device attached [ 314.549134][ T29] usb 39-1: new high-speed USB device number 10 using vhci_hcd [ 318.718413][T10702] netlink: 64138 bytes leftover after parsing attributes in process `syz.4.1365'. [ 318.774588][T10705] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1366'. [ 319.719655][T10709] loop7: detected capacity change from 0 to 16384 [ 319.801171][T10709] I/O error, dev loop7, sector 328 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0 [ 319.855579][T10712] tipc: Enabling of bearer rejected, already enabled [ 320.896492][T10696] vhci_hcd: connection reset by peer [ 320.899518][ T13] vhci_hcd: stop threads [ 320.901906][ T13] vhci_hcd: release socket [ 320.906418][ T13] vhci_hcd: disconnect device [ 320.999148][ T29] vhci_hcd: vhci_device speed not set [ 322.274520][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 323.151171][ T5961] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 323.157466][ T5961] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 323.162154][ T5961] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 323.168575][ T5961] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 323.172905][ T5961] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 323.307064][T10723] chnl_net:caif_netlink_parms(): no params data found [ 324.624803][T10723] bridge0: port 1(bridge_slave_0) entered blocking state [ 324.628316][T10723] bridge0: port 1(bridge_slave_0) entered disabled state [ 324.631605][T10723] bridge_slave_0: entered allmulticast mode [ 324.635659][T10723] bridge_slave_0: entered promiscuous mode [ 324.640668][T10723] bridge0: port 2(bridge_slave_1) entered blocking state [ 324.643678][T10723] bridge0: port 2(bridge_slave_1) entered disabled state [ 324.646995][T10723] bridge_slave_1: entered allmulticast mode [ 324.651117][T10723] bridge_slave_1: entered promiscuous mode [ 324.872740][T10723] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 324.880332][T10723] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 325.229151][ T5305] Bluetooth: hci4: command tx timeout [ 327.029401][T10723] team0: Port device team_slave_0 added [ 327.036210][T10723] team0: Port device team_slave_1 added [ 327.232316][T10723] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 327.235453][T10723] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 327.291210][T10740] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1375'. [ 327.309116][ T5966] Bluetooth: hci4: command tx timeout [ 327.572150][T10723] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 327.597946][T10723] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 327.610935][T10723] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 327.638018][T10723] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 327.740988][T10743] team0: Port device bridge7 added [ 327.843424][T10745] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1377'. [ 327.849981][T10723] hsr_slave_0: entered promiscuous mode [ 327.853245][T10723] hsr_slave_1: entered promiscuous mode [ 327.885565][T10747] tipc: Enabling of bearer rejected, already enabled [ 328.220636][T10723] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 328.232037][T10723] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 328.238653][T10723] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 328.244942][T10723] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 328.363371][T10723] 8021q: adding VLAN 0 to HW filter on device bond0 [ 328.386381][T10723] 8021q: adding VLAN 0 to HW filter on device team0 [ 328.396189][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 328.399492][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 328.416327][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 328.419397][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 328.909774][T10723] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 329.092375][T10751] syz.1.1380: vmalloc error: size 2768896, failed to allocated page array size 5408, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 329.100255][T10751] CPU: 3 UID: 0 PID: 10751 Comm: syz.1.1380 Not tainted 6.15.0-syzkaller-08175-g9d230d500b0e #0 PREEMPT(full) [ 329.100284][T10751] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 329.100297][T10751] Call Trace: [ 329.100305][T10751] [ 329.100314][T10751] dump_stack_lvl+0x16c/0x1f0 [ 329.100344][T10751] warn_alloc+0x248/0x3a0 [ 329.100370][T10751] ? __pfx_warn_alloc+0x10/0x10 [ 329.100403][T10751] ? vb2_vmalloc_alloc+0x135/0x3f0 [ 329.100433][T10751] ? __vmalloc_node_noprof+0xad/0xf0 [ 329.100468][T10751] __vmalloc_node_range_noprof+0x10f4/0x1520 [ 329.100509][T10751] ? vb2_vmalloc_alloc+0x135/0x3f0 [ 329.100546][T10751] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 329.100584][T10751] ? vb2_vmalloc_alloc+0x135/0x3f0 [ 329.100611][T10751] vmalloc_user_noprof+0x9e/0xe0 [ 329.100640][T10751] ? vb2_vmalloc_alloc+0x135/0x3f0 [ 329.100670][T10751] vb2_vmalloc_alloc+0x135/0x3f0 [ 329.100698][T10751] ? __pfx_vb2_vmalloc_alloc+0x10/0x10 [ 329.100729][T10751] __vb2_queue_alloc+0x8c6/0x1280 [ 329.100772][T10751] vb2_core_reqbufs+0xa90/0xfe0 [ 329.100806][T10751] ? __pfx_vb2_core_reqbufs+0x10/0x10 [ 329.100835][T10751] ? __pfx___mutex_trylock_common+0x10/0x10 [ 329.100859][T10751] ? __pfx___might_resched+0x10/0x10 [ 329.100892][T10751] ? trace_contention_end+0xdd/0x130 [ 329.100911][T10751] ? __mutex_lock+0x1ca/0xb90 [ 329.100939][T10751] vb2_reqbufs+0x1a3/0x1f0 [ 329.100966][T10751] ? __pfx_vb2_reqbufs+0x10/0x10 [ 329.100993][T10751] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 329.101026][T10751] v4l2_m2m_ioctl_reqbufs+0xdc/0x1e0 [ 329.101057][T10751] v4l_reqbufs+0x152/0x1e0 [ 329.101104][T10751] __video_do_ioctl+0xb3d/0xfc0 [ 329.101133][T10751] ? __might_fault+0xe3/0x190 [ 329.101155][T10751] ? __pfx___video_do_ioctl+0x10/0x10 [ 329.101189][T10751] video_usercopy+0x47c/0x1440 [ 329.101215][T10751] ? __pfx___video_do_ioctl+0x10/0x10 [ 329.101239][T10751] ? __pfx_video_usercopy+0x10/0x10 [ 329.101274][T10751] ? hook_file_ioctl_common+0x145/0x410 [ 329.101301][T10751] v4l2_ioctl+0x1bd/0x250 [ 329.101321][T10751] ? __ia32_compat_sys_openat+0x161/0x210 [ 329.101353][T10751] v4l2_compat_ioctl32+0x217/0x2c0 [ 329.101374][T10751] ? __pfx_v4l2_compat_ioctl32+0x10/0x10 [ 329.101395][T10751] __ia32_compat_sys_ioctl+0x23f/0x370 [ 329.101429][T10751] __do_fast_syscall_32+0x7c/0x3a0 [ 329.101457][T10751] do_fast_syscall_32+0x32/0x80 [ 329.101482][T10751] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 329.101507][T10751] RIP: 0023:0xf7fb4579 [ 329.101524][T10751] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 329.101544][T10751] RSP: 002b:00000000f50d655c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 329.101564][T10751] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000c0145608 [ 329.101576][T10751] RDX: 00000000800000c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 329.101588][T10751] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 329.101600][T10751] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 329.101612][T10751] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 329.101639][T10751] [ 329.101672][T10751] Mem-Info: [ 329.301851][T10723] veth0_vlan: entered promiscuous mode [ 329.303953][T10751] active_anon:10005 inactive_anon:513 isolated_anon:0 [ 329.303953][T10751] active_file:2487 inactive_file:18307 isolated_file:0 [ 329.303953][T10751] unevictable:1771 dirty:97 writeback:0 [ 329.303953][T10751] slab_reclaimable:7230 slab_unreclaimable:60632 [ 329.303953][T10751] mapped:33066 shmem:7949 pagetables:703 [ 329.303953][T10751] sec_pagetables:316 bounce:0 [ 329.303953][T10751] kernel_misc_reclaimable:0 [ 329.303953][T10751] free:26225 free_pcp:695 free_cma:0 [ 329.312074][T10723] veth1_vlan: entered promiscuous mode [ 329.313233][T10751] Node 0 active_anon:2060kB inactive_anon:104kB active_file:44kB inactive_file:36kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:8820kB dirty:4kB writeback:0kB shmem:4940kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:7996kB pagetables:492kB sec_pagetables:1140kB all_unreclaimable? yes Balloon:0kB [ 329.337097][T10723] veth0_macvtap: entered promiscuous mode [ 329.339590][T10751] Node 1 active_anon:37960kB inactive_anon:1948kB active_file:9904kB inactive_file:73192kB unevictable:3548kB isolated(anon):0kB isolated(file):0kB mapped:123444kB dirty:384kB writeback:0kB shmem:26856kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:3836kB pagetables:2320kB sec_pagetables:124kB all_unreclaimable? no Balloon:0kB [ 329.368446][T10723] veth1_macvtap: entered promiscuous mode [ 329.371706][T10751] Node 0 [ 329.389361][ T5966] Bluetooth: hci4: command tx timeout [ 329.392709][T10751] DMA free:1980kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 329.399845][T10723] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 329.403906][T10751] lowmem_reserve[]: 0 290 290 290 290 [ 329.408700][T10751] Node 0 DMA32 free:16076kB boost:2048kB min:15380kB low:18712kB high:22044kB reserved_highatomic:2048KB active_anon:2060kB inactive_anon:104kB active_file:44kB inactive_file:36kB unevictable:3536kB writepending:4kB present:1032196kB managed:296984kB mlocked:0kB bounce:0kB free_pcp:252kB local_pcp:32kB free_cma:0kB [ 329.413017][T10723] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 329.420396][T10751] lowmem_reserve[]: 0 0 0 0 0 [ 329.420450][T10751] Node 1 DMA32 free:86456kB boost:8192kB min:55336kB low:67120kB high:78904kB reserved_highatomic:2048KB active_anon:37960kB inactive_anon:1948kB active_file:9904kB inactive_file:73192kB unevictable:3548kB writepending:384kB present:1048432kB managed:948276kB mlocked:12kB bounce:0kB free_pcp:2768kB local_pcp:764kB free_cma:0kB [ 329.420509][T10751] lowmem_reserve[]: 0 0 0 0 0 [ 329.420549][T10751] Node 0 DMA: 5*4kB (U) 3*8kB (U) 1*16kB (U) 0*32kB 0*64kB 1*128kB (U) 1*256kB (U) 1*512kB (U) 1*1024kB (U) 0*2048kB 0*4096kB = 1980kB [ 329.420703][T10751] Node 0 DMA32: [ 329.429993][T10723] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.436352][T10751] 21*4kB [ 329.437878][T10723] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.442455][T10751] (UME) 34*8kB (UMEH) 59*16kB (UMEH) 97*32kB (UMEH) 55*64kB (UMEH) 21*128kB (UMEH) 13*256kB (UMEH) 4*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 15988kB [ 329.442542][T10751] Node 1 DMA32: 916*4kB (UME) 866*8kB (UMEH) 55*16kB (UMEH) 119*32kB (UMEH) 352*64kB (MEH) 82*128kB (MEH) 49*256kB [ 329.445706][T10723] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.446795][T10751] (UMH) [ 329.447769][T10723] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.450634][T10751] 18*512kB (M) 4*1024kB (UMH) 2*2048kB (M) 2*4096kB (M) = 86448kB [ 329.450676][T10751] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 329.450691][T10751] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 329.450704][T10751] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 329.485913][T10751] Node 1 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 329.489828][T10751] 29144 total pagecache pages [ 329.491576][T10751] 404 pages in swap cache [ 329.493413][T10751] Free swap = 122528kB [ 329.495134][T10751] Total swap = 124996kB [ 329.496992][T10751] 524155 pages RAM [ 329.498739][T10751] 0 pages HighMem/MovableOnly [ 329.501051][T10751] 209000 pages reserved [ 329.502923][T10751] 0 pages cma reserved [ 330.419233][ T6280] usb 6-1: new high-speed USB device number 65 using dummy_hcd [ 330.574216][ T6280] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 330.578008][ T6280] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 330.581257][ T6280] usb 6-1: Product: syz [ 330.582873][ T6280] usb 6-1: Manufacturer: syz [ 330.584624][ T6280] usb 6-1: SerialNumber: syz [ 330.591631][ T6280] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 330.620163][ T6280] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 331.038593][ T24] usb 6-1: USB disconnect, device number 65 [ 331.469133][ T5966] Bluetooth: hci4: command tx timeout [ 331.709184][ T6280] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 331.712436][ T6280] ath9k_htc: Failed to initialize the device [ 331.717598][ T24] usb 6-1: ath9k_htc: USB layer deinitialized [ 334.208967][ C0] sched: DL replenish lagged too much [ 335.359375][ T74] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 335.362645][ T74] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 335.373303][T10775] bridge8: entered promiscuous mode [ 335.379385][T10775] team0: Port device bridge8 added [ 335.422920][ T1147] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 335.426284][ T1147] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 335.738866][T10784] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1383'. [ 336.241335][T10787] random: crng reseeded on system resumption [ 336.622830][T10798] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1390'. [ 337.139126][ T6280] usb 6-1: new high-speed USB device number 66 using dummy_hcd [ 337.289179][ T6280] usb 6-1: Using ep0 maxpacket: 16 [ 337.293711][ T6280] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 337.297418][ T6280] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 337.302453][ T6280] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 337.306085][ T6280] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 337.316103][ T6280] usb 6-1: config 0 descriptor?? [ 341.892288][T10801] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 342.352931][ T6280] usbhid 6-1:0.0: can't add hid device: -32 [ 342.356712][ T6280] usbhid 6-1:0.0: probe with driver usbhid failed with error -32 [ 343.629873][ T5305] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 343.634198][ T5305] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 343.638326][ T5305] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 343.646437][ T5305] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 343.650598][ T5305] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 343.795171][T10812] chnl_net:caif_netlink_parms(): no params data found [ 343.881679][ T7435] usb 6-1: USB disconnect, device number 66 [ 344.726412][T10812] bridge0: port 1(bridge_slave_0) entered blocking state [ 344.729947][T10812] bridge0: port 1(bridge_slave_0) entered disabled state [ 344.733321][T10812] bridge_slave_0: entered allmulticast mode [ 344.737431][T10812] bridge_slave_0: entered promiscuous mode [ 344.760368][T10812] bridge0: port 2(bridge_slave_1) entered blocking state [ 344.763409][T10812] bridge0: port 2(bridge_slave_1) entered disabled state [ 344.766468][T10812] bridge_slave_1: entered allmulticast mode [ 344.780204][T10812] bridge_slave_1: entered promiscuous mode [ 344.920822][ T13] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.514887][ T13] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.529800][T10812] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 345.536888][T10812] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 345.596614][T10812] team0: Port device team_slave_0 added [ 345.604937][T10812] team0: Port device team_slave_1 added [ 345.661810][ T13] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.719648][ T5966] Bluetooth: hci5: command tx timeout [ 345.760144][T10812] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 345.763309][T10812] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 345.774527][T10812] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 345.806314][ T13] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.848215][T10812] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 345.853606][T10812] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 345.862809][T10812] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 345.958372][T10812] hsr_slave_0: entered promiscuous mode [ 345.970100][T10812] hsr_slave_1: entered promiscuous mode [ 345.972916][T10812] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 345.976094][T10812] Cannot create hsr debugfs directory [ 346.533449][T10841] trusted_key: syz.1.1399 sent an empty control message without MSG_MORE. [ 346.587732][T10841] hfs: unable to load iocharset "io#harset" [ 346.719743][T10844] 9pnet_fd: Insufficient options for proto=fd [ 347.713288][ T13] team0: Port device bridge6 removed [ 347.770654][ T13] team0: Port device bridge7 removed [ 347.789102][ T5966] Bluetooth: hci5: command tx timeout [ 347.822388][ T13] team0: Port device bridge8 removed [ 347.870379][ T5966] Bluetooth: hci3: command 0x0406 tx timeout [ 347.903872][ T13] team0: Port device bridge9 removed [ 347.971984][ T13] team0: Port device bridge10 removed [ 348.030527][ T13] team0: Port device bridge11 removed [ 348.101506][ T13] team0: Port device bridge0 removed [ 348.159097][ T13] team0: Port device bridge12 removed [ 348.229914][ T13] team0: Port device bridge13 removed [ 348.291385][ T13] team0: Port device bridge14 removed [ 348.466852][ T13] bond0 (unregistering): Released all slaves [ 348.495435][T10837] lo speed is unknown, defaulting to 1000 [ 348.506410][T10845] geneve1: entered promiscuous mode [ 348.550497][T10837] lo speed is unknown, defaulting to 1000 [ 348.556307][T10837] lo speed is unknown, defaulting to 1000 [ 348.666617][T10812] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 348.675212][T10812] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 348.682518][T10812] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 348.690134][T10812] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 348.761173][T10837] infiniband sz1: set active [ 348.765810][T10837] infiniband sz1: added lo [ 348.770418][T10837] sz1: rxe_create_cq: returned err = -12 [ 348.773414][T10837] infiniband sz1: Couldn't create ib_mad CQ [ 348.777741][T10837] infiniband sz1: Couldn't open port 1 [ 348.799852][T10837] RDS/IB: sz1: added [ 348.801889][ T13] tipc: Disabling bearer [ 348.803508][T10837] smc: adding ib device sz1 with port count 1 [ 348.803622][ T13] tipc: Left network mode [ 348.807420][ T6280] lo speed is unknown, defaulting to 1000 [ 348.811261][T10837] smc: ib device sz1 port 1 has pnetid [ 349.023484][T10837] lo speed is unknown, defaulting to 1000 [ 349.111883][ T6280] lo speed is unknown, defaulting to 1000 [ 349.126720][T10812] 8021q: adding VLAN 0 to HW filter on device bond0 [ 349.139386][T10812] 8021q: adding VLAN 0 to HW filter on device team0 [ 349.146080][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 349.149223][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 349.165360][ T74] bridge0: port 2(bridge_slave_1) entered blocking state [ 349.168227][ T74] bridge0: port 2(bridge_slave_1) entered forwarding state [ 349.170996][T10853] fuse: Bad value for 'fd' [ 349.280622][T10837] lo speed is unknown, defaulting to 1000 [ 349.431357][T10837] lo speed is unknown, defaulting to 1000 [ 349.471437][T10812] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 349.569006][T10837] lo speed is unknown, defaulting to 1000 [ 349.690005][T10837] lo speed is unknown, defaulting to 1000 [ 349.879063][ T5966] Bluetooth: hci5: command tx timeout [ 349.971138][T10812] veth0_vlan: entered promiscuous mode [ 350.002656][T10837] lo speed is unknown, defaulting to 1000 [ 350.130609][T10812] veth1_vlan: entered promiscuous mode [ 350.314979][T10812] veth0_macvtap: entered promiscuous mode [ 350.325395][T10812] veth1_macvtap: entered promiscuous mode [ 350.427572][T10812] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 350.462294][T10812] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 350.478299][T10812] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.483072][T10812] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.486247][T10812] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.490391][T10812] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.837298][ T1147] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 350.840276][ T1147] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 350.872058][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 350.875553][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 351.029798][T10837] lo speed is unknown, defaulting to 1000 [ 351.473030][ T13] hsr_slave_0: left promiscuous mode [ 351.489051][ T13] hsr_slave_1: left promiscuous mode [ 351.508640][ T6280] usb 8-1: new high-speed USB device number 30 using dummy_hcd [ 351.565271][ T13] veth1_macvtap: left allmulticast mode [ 351.567821][ T13] veth1_macvtap: left promiscuous mode [ 351.570888][ T13] veth0_macvtap: left promiscuous mode [ 351.573457][ T13] veth1_vlan: left promiscuous mode [ 351.576052][ T13] veth0_vlan: left promiscuous mode [ 351.679605][ T6280] usb 8-1: Using ep0 maxpacket: 8 [ 351.692415][ T6280] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 351.696060][ T6280] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 351.709927][ T6280] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 351.734368][ T6280] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 351.744334][ T6280] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 351.785292][ T6280] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 351.805636][ T6280] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 351.962423][ T5966] Bluetooth: hci5: command tx timeout [ 352.075828][ T6280] usb 8-1: usb_control_msg returned -32 [ 352.078146][ T6280] usbtmc 8-1:16.0: can't read capabilities [ 354.389426][ T24] usb 8-1: USB disconnect, device number 30 [ 355.857196][T10896] befs: (loop3): No write support. Marking filesystem read-only [ 355.862237][T10896] syz.1.1407: attempt to access beyond end of device [ 355.862237][T10896] loop3: rw=0, sector=0, nr_sectors = 2 limit=0 [ 355.867615][T10896] befs: (loop3): unable to read superblock [ 356.026021][T10878] lo speed is unknown, defaulting to 1000 [ 356.101402][T10900] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(10) [ 356.101938][T10902] random: crng reseeded on system resumption [ 356.104095][T10900] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 356.104225][T10900] vhci_hcd vhci_hcd.0: Device attached [ 356.514457][ T13] IPVS: stop unused estimator thread 0... [ 357.419050][ T53] usb 43-1: new high-speed USB device number 15 using vhci_hcd [ 357.697455][T10903] vhci_hcd: connection reset by peer [ 357.722771][ T74] vhci_hcd: stop threads [ 357.724669][ T74] vhci_hcd: release socket [ 357.726655][ T74] vhci_hcd: disconnect device [ 363.611175][ T53] vhci_hcd: vhci_device speed not set [ 363.612622][T10926] IPVS: set_ctl: invalid protocol: 255 172.20.20.17:20000 [ 363.746750][T10930] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1415'. [ 363.838259][T10935] bridge0: port 2(bridge_slave_1) entered disabled state [ 363.843394][T10935] bridge0: port 1(bridge_slave_0) entered disabled state [ 364.406124][T10949] lo speed is unknown, defaulting to 1000 [ 364.409035][T10949] lo speed is unknown, defaulting to 1000 [ 364.412564][T10949] lo speed is unknown, defaulting to 1000 [ 364.421321][T10949] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 364.431781][T10949] infiniband sĖR4: RDMA CMA: cma_listen_on_dev, error -98 [ 364.452996][T10949] lo speed is unknown, defaulting to 1000 [ 364.456973][T10949] lo speed is unknown, defaulting to 1000 [ 364.461228][T10949] lo speed is unknown, defaulting to 1000 [ 364.465136][T10949] lo speed is unknown, defaulting to 1000 [ 364.468742][T10949] lo speed is unknown, defaulting to 1000 [ 364.472396][T10949] lo speed is unknown, defaulting to 1000 [ 365.299469][ T24] usb 6-1: new high-speed USB device number 67 using dummy_hcd [ 365.333859][T10957] vivid-002: disconnect [ 365.335963][T10956] vivid-002: reconnect [ 365.449068][ T24] usb 6-1: Using ep0 maxpacket: 8 [ 365.483483][ T24] usb 6-1: config 0 has no interfaces? [ 365.488298][ T24] usb 6-1: New USB device found, idVendor=10f0, idProduct=2002, bcdDevice=dc.4d [ 365.495240][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 365.498727][ T24] usb 6-1: Product: syz [ 365.503849][ T24] usb 6-1: Manufacturer: syz [ 365.506552][ T24] usb 6-1: SerialNumber: syz [ 365.512470][ T24] usb 6-1: config 0 descriptor?? [ 365.722271][T10955] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1423'. [ 365.736179][T10955] dummy0: entered promiscuous mode [ 365.738880][T10955] macvtap1: entered promiscuous mode [ 365.744437][T10955] macvtap1: entered allmulticast mode [ 365.747056][T10955] dummy0: entered allmulticast mode [ 365.763284][T10955] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1423'. [ 365.781187][T10955] dummy0: left allmulticast mode [ 365.783976][T10955] dummy0: left promiscuous mode [ 365.795676][T10955] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1423'. [ 365.799632][T10955] dummy0: entered promiscuous mode [ 365.801837][T10955] dummy0: entered allmulticast mode [ 365.804194][T10955] macvtap1: left promiscuous mode [ 365.806497][T10955] macvtap1: left allmulticast mode [ 365.808599][T10955] dummy0: left allmulticast mode [ 365.821603][ T54] usb 6-1: USB disconnect, device number 67 [ 366.424631][T10983] vivid-002: disconnect [ 366.443249][T10982] vivid-002: reconnect [ 367.178605][ T5305] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 367.185753][ T5305] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 367.189893][ T5305] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 367.194220][ T5305] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 367.196897][ T5305] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 367.222720][T10987] lo speed is unknown, defaulting to 1000 [ 367.324344][T10987] lo speed is unknown, defaulting to 1000 [ 367.462066][T10987] chnl_net:caif_netlink_parms(): no params data found [ 367.639597][ T5305] Bluetooth: hci3: ISO packet for unknown connection handle 0 [ 367.860099][T10987] bridge0: port 1(bridge_slave_0) entered blocking state [ 367.863218][T10987] bridge0: port 1(bridge_slave_0) entered disabled state [ 367.866366][T10987] bridge_slave_0: entered allmulticast mode [ 367.870355][T10987] bridge_slave_0: entered promiscuous mode [ 367.876601][T10987] bridge0: port 2(bridge_slave_1) entered blocking state [ 367.880217][T10987] bridge0: port 2(bridge_slave_1) entered disabled state [ 367.882785][T10987] bridge_slave_1: entered allmulticast mode [ 367.886090][T10987] bridge_slave_1: entered promiscuous mode [ 367.899034][ T24] usb 8-1: new high-speed USB device number 31 using dummy_hcd [ 368.028509][T10881] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.059542][ T24] usb 8-1: Using ep0 maxpacket: 8 [ 368.061503][T10987] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 368.075139][ T24] usb 8-1: config 0 has no interfaces? [ 368.077621][ T24] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 368.090395][ T24] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 368.095835][ T24] usb 8-1: config 0 descriptor?? [ 368.097826][T10987] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 368.136021][T11000] netdevsim netdevsim6 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 368.139686][T11000] netdevsim netdevsim6 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 368.143133][T11000] netdevsim netdevsim6 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 368.146789][T11000] netdevsim netdevsim6 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 368.151440][T11000] netdevsim netdevsim6 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 368.155010][T11000] netdevsim netdevsim6 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 368.158860][T11000] netdevsim netdevsim6 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 368.163653][T11000] netdevsim netdevsim6 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 368.168328][T11000] geneve2: entered promiscuous mode [ 368.170898][T11000] geneve2: entered allmulticast mode [ 368.241328][T10881] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.357934][ T24] usb 8-1: USB disconnect, device number 31 [ 368.358260][T10987] team0: Port device team_slave_0 added [ 368.413900][T10881] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.441663][T10987] team0: Port device team_slave_1 added [ 368.511151][T10881] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.524599][T10987] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 368.527550][T10987] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 368.546144][T10987] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 368.555212][T10987] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 368.558277][T10987] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 368.572201][T10987] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 368.696417][T10987] hsr_slave_0: entered promiscuous mode [ 368.700508][T10987] hsr_slave_1: entered promiscuous mode [ 368.704469][T10987] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 368.708360][T10987] Cannot create hsr debugfs directory [ 368.867531][T10881] bridge_slave_1: left allmulticast mode [ 368.872300][T10881] bridge_slave_1: left promiscuous mode [ 368.876263][T10881] bridge0: port 2(bridge_slave_1) entered disabled state [ 368.886253][T10881] bridge_slave_0: left allmulticast mode [ 368.888762][T10881] bridge_slave_0: left promiscuous mode [ 368.892424][T10881] bridge0: port 1(bridge_slave_0) entered disabled state [ 368.933916][ T53] libceph: connect (1)[c::]:6789 error -101 [ 368.936710][ T53] libceph: mon0 (1)[c::]:6789 connect error [ 368.974417][T11014] ceph: No mds server is up or the cluster is laggy [ 369.229285][ T5305] Bluetooth: hci1: command tx timeout [ 369.505457][T10881] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 369.513869][T10881] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 369.521171][T10881] bond0 (unregistering): Released all slaves [ 369.628386][T11022] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1442'. [ 369.953486][T11033] tipc: Failed to remove unknown binding: 66,1,1/4269801488:2424219800/2424219802 [ 370.050703][T10987] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 370.070089][T10987] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 370.093569][T10987] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 370.175690][T10987] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 370.182869][T11038] netlink: 'syz.1.1446': attribute type 1 has an invalid length. [ 370.207722][T11038] bond1: entered promiscuous mode [ 370.211816][T11038] bond1: entered allmulticast mode [ 370.237236][T11038] bond1: (slave erspan1): making interface the new active one [ 370.241223][T11038] erspan1: entered promiscuous mode [ 370.243627][T11038] erspan1: entered allmulticast mode [ 370.247513][T11038] bond1: (slave erspan1): Enslaving as an active interface with an up link [ 370.354479][T10987] 8021q: adding VLAN 0 to HW filter on device bond0 [ 370.376945][T10987] 8021q: adding VLAN 0 to HW filter on device team0 [ 370.389792][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 370.392929][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 370.408026][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 370.410884][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 370.460882][T10881] hsr_slave_0: left promiscuous mode [ 370.466956][T10881] hsr_slave_1: left promiscuous mode [ 370.475682][T10881] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 370.479221][T10881] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 370.483605][T10881] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 370.487007][T10881] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 370.615391][T10881] veth1_macvtap: left promiscuous mode [ 370.617814][T10881] veth0_macvtap: left promiscuous mode [ 370.623210][T10881] veth1_vlan: left promiscuous mode [ 370.625723][T10881] veth0_vlan: left promiscuous mode [ 370.902686][T11053] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(8) [ 370.905322][T11053] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 370.916471][T11053] vhci_hcd vhci_hcd.0: Device attached [ 371.063064][T11055] vhci_hcd: connection closed [ 371.063853][ T1197] vhci_hcd: stop threads [ 371.068064][ T1197] vhci_hcd: release socket [ 371.075185][ T1197] vhci_hcd: disconnect device [ 371.119376][ T24] vhci_hcd: vhci_device speed not set [ 371.312122][ T5305] Bluetooth: hci1: command tx timeout [ 371.782585][T11060] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1450'. [ 372.996782][T10881] team0 (unregistering): Port device team_slave_1 removed [ 373.149978][T10881] team0 (unregistering): Port device team_slave_0 removed [ 373.389178][ T5305] Bluetooth: hci1: command tx timeout [ 374.316022][T11051] veth1_macvtap: left promiscuous mode [ 374.341557][T11065] tipc: Enabling of bearer rejected, already enabled [ 374.450588][T10987] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 374.653400][T10987] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 374.761245][T11082] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 374.822774][T11087] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 374.825710][T11087] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 374.833952][T11087] vhci_hcd vhci_hcd.0: Device attached [ 374.847583][T11088] vhci_hcd: connection closed [ 374.847888][ T55] vhci_hcd: stop threads [ 374.852916][ T55] vhci_hcd: release socket [ 374.854583][ T55] vhci_hcd: disconnect device [ 374.933540][T10987] veth0_vlan: entered promiscuous mode [ 374.950735][T10987] veth1_vlan: entered promiscuous mode [ 375.005272][T10987] veth0_macvtap: entered promiscuous mode [ 375.013249][T10987] veth1_macvtap: entered promiscuous mode [ 375.033300][T10987] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 375.094780][T10987] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 375.106450][T10987] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.110746][T10987] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.114614][T10987] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.119341][T10987] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.201153][ T1147] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 375.204495][ T1147] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 375.243177][ T55] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 375.249486][ T55] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 375.473731][ T5305] Bluetooth: hci1: command tx timeout [ 375.786955][T11103] sctp: [Deprecated]: syz.6.1461 (pid 11103) Use of int in max_burst socket option deprecated. [ 375.786955][T11103] Use struct sctp_assoc_value instead [ 375.811168][T11098] blktrace: Concurrent blktraces are not allowed on sg0 [ 375.815444][T11098] blktrace: Concurrent blktraces are not allowed on sg0 [ 375.818610][T11098] blktrace: Concurrent blktraces are not allowed on sg0 [ 375.822393][T11098] blktrace: Concurrent blktraces are not allowed on sg0 [ 375.826411][T11098] blktrace: Concurrent blktraces are not allowed on sg0 [ 375.831520][T11105] tipc: Enabling of bearer rejected, already enabled [ 375.832689][T11098] blktrace: Concurrent blktraces are not allowed on sg0 [ 375.838315][T11098] blktrace: Concurrent blktraces are not allowed on sg0 [ 375.842607][T11098] blktrace: Concurrent blktraces are not allowed on sg0 [ 375.847150][T11098] blktrace: Concurrent blktraces are not allowed on sg0 [ 375.856216][T11098] blktrace: Concurrent blktraces are not allowed on sg0 [ 375.862871][T11098] blktrace: Concurrent blktraces are not allowed on sg0 [ 375.866924][T11098] blktrace: Concurrent blktraces are not allowed on sg0 [ 375.875107][T11098] blktrace: Concurrent blktraces are not allowed on sg0 [ 375.878328][T11098] blktrace: Concurrent blktraces are not allowed on sg0 [ 375.881708][T11098] blktrace: Concurrent blktraces are not allowed on sg0 [ 375.893859][T11098] blktrace: Concurrent blktraces are not allowed on sg0 [ 375.896935][T11098] blktrace: Concurrent blktraces are not allowed on sg0 [ 375.900089][T11098] blktrace: Concurrent blktraces are not allowed on sg0 [ 375.903671][T11098] blktrace: Concurrent blktraces are not allowed on sg0 [ 375.907515][T11098] blktrace: Concurrent blktraces are not allowed on sg0 [ 375.910586][T11098] blktrace: Concurrent blktraces are not allowed on sg0 [ 375.913463][T11098] blktrace: Concurrent blktraces are not allowed on sg0 [ 375.917354][T11098] blktrace: Concurrent blktraces are not allowed on sg0 [ 375.921750][T11098] blktrace: Concurrent blktraces are not allowed on sg0 [ 375.924818][T11098] blktrace: Concurrent blktraces are not allowed on sg0 [ 375.927853][T11098] blktrace: Concurrent blktraces are not allowed on sg0 [ 375.931090][T11098] blktrace: Concurrent blktraces are not allowed on sg0 [ 375.935156][T11098] blktrace: Concurrent blktraces are not allowed on sg0 [ 375.938436][T11098] blktrace: Concurrent blktraces are not allowed on sg0 [ 375.942049][T11098] blktrace: Concurrent blktraces are not allowed on sg0 [ 375.945659][T11098] blktrace: Concurrent blktraces are not allowed on sg0 [ 375.948705][T11098] blktrace: Concurrent blktraces are not allowed on sg0 [ 375.951836][T11098] blktrace: Concurrent blktraces are not allowed on sg0 [ 375.955181][T11098] blktrace: Concurrent blktraces are not allowed on sg0 [ 375.959361][T11098] blktrace: Concurrent blktraces are not allowed on sg0 [ 375.965029][T11098] blktrace: Concurrent blktraces are not allowed on sg0 [ 375.969160][T11098] blktrace: Concurrent blktraces are not allowed on sg0 [ 375.977832][T11098] blktrace: Concurrent blktraces are not allowed on sg0 [ 375.987545][T11098] blktrace: Concurrent blktraces are not allowed on sg0 [ 375.999206][T11098] blktrace: Concurrent blktraces are not allowed on sg0 [ 376.002944][T11098] blktrace: Concurrent blktraces are not allowed on sg0 [ 376.007251][T11098] blktrace: Concurrent blktraces are not allowed on sg0 [ 376.030991][T11098] blktrace: Concurrent blktraces are not allowed on sg0 [ 376.035590][T11098] blktrace: Concurrent blktraces are not allowed on sg0 [ 376.039013][T11098] blktrace: Concurrent blktraces are not allowed on sg0 [ 376.042184][T11098] blktrace: Concurrent blktraces are not allowed on sg0 [ 376.045216][T11098] blktrace: Concurrent blktraces are not allowed on sg0 [ 376.048273][T11098] blktrace: Concurrent blktraces are not allowed on sg0 [ 376.051401][T11098] blktrace: Concurrent blktraces are not allowed on sg0 [ 376.054697][T11098] blktrace: Concurrent blktraces are not allowed on sg0 [ 376.058111][T11098] blktrace: Concurrent blktraces are not allowed on sg0 [ 376.061290][T11098] blktrace: Concurrent blktraces are not allowed on sg0 [ 376.064227][T11098] blktrace: Concurrent blktraces are not allowed on sg0 [ 376.067648][T11098] blktrace: Concurrent blktraces are not allowed on sg0 [ 376.072582][T11098] blktrace: Concurrent blktraces are not allowed on sg0 [ 376.078000][T11098] blktrace: Concurrent blktraces are not allowed on sg0 [ 376.081352][T11098] blktrace: Concurrent blktraces are not allowed on sg0 [ 376.084350][T11098] blktrace: Concurrent blktraces are not allowed on sg0 [ 376.087692][T11098] blktrace: Concurrent blktraces are not allowed on sg0 [ 376.090721][T11098] blktrace: Concurrent blktraces are not allowed on sg0 [ 376.093716][T11098] blktrace: Concurrent blktraces are not allowed on sg0 [ 376.097269][T11098] blktrace: Concurrent blktraces are not allowed on sg0 [ 376.101840][T11098] blktrace: Concurrent blktraces are not allowed on sg0 [ 377.233190][T11128] netlink: 'syz.6.1468': attribute type 13 has an invalid length. [ 377.244794][T11128] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 377.318340][T11128] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 377.319541][ T40] audit: type=1326 audit(2000000228.420:526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11119 comm="syz.1.1467" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb4579 code=0x7fc00000 [ 377.334250][T11128] gretap1: entered promiscuous mode [ 377.337340][T11128] gretap1: entered allmulticast mode [ 377.692913][T11140] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1470'. [ 377.808309][T11144] tipc: Started in network mode [ 377.813724][T11144] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 377.822147][T11144] tipc: Enabled bearer , priority 10 [ 378.001916][ T6280] usb 13-1: new high-speed USB device number 2 using dummy_hcd [ 378.649935][ T6280] usb 13-1: unable to read config index 0 descriptor/start: -61 [ 378.653230][ T6280] usb 13-1: can't read configurations, error -61 [ 378.784084][ T6280] usb 13-1: new high-speed USB device number 3 using dummy_hcd [ 378.941831][ T6280] usb 13-1: unable to read config index 0 descriptor/start: -61 [ 378.945697][ T6280] usb 13-1: can't read configurations, error -61 [ 378.949434][ T6280] usb usb13-port1: attempt power cycle [ 378.953405][ T6191] tipc: Node number set to 4269801488 [ 379.289208][ T6280] usb 13-1: new high-speed USB device number 4 using dummy_hcd [ 379.317844][ T6280] usb 13-1: unable to read config index 0 descriptor/start: -61 [ 379.322251][ T6280] usb 13-1: can't read configurations, error -61 [ 379.449182][ T6280] usb 13-1: new high-speed USB device number 5 using dummy_hcd [ 379.459179][ T7435] usb 11-1: new high-speed USB device number 2 using dummy_hcd [ 379.472586][ T6280] usb 13-1: unable to read config index 0 descriptor/start: -61 [ 379.476121][ T6280] usb 13-1: can't read configurations, error -61 [ 379.480600][ T6280] usb usb13-port1: unable to enumerate USB device [ 379.959407][ T7435] usb 11-1: Using ep0 maxpacket: 8 [ 379.964817][ T7435] usb 11-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 379.970395][ T7435] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 379.975007][ T7435] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 379.979211][ T7435] usb 11-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 379.984509][ T7435] usb 11-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 379.987663][ T7435] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 380.209993][ T7435] usb 11-1: GET_CAPABILITIES returned 0 [ 380.212388][ T7435] usbtmc 11-1:16.0: can't read capabilities [ 380.305577][T11160] mac80211_hwsim hwsim17 wlan1: entered allmulticast mode [ 380.331123][T11160] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1476'. [ 380.418762][T11147] input: syz1 as /devices/virtual/input/input15 [ 380.551187][T11161] bridge_slave_0: left allmulticast mode [ 380.553463][T11161] bridge_slave_0: left promiscuous mode [ 380.555716][T11161] bridge0: port 1(bridge_slave_0) entered disabled state [ 380.622229][T11164] netlink: 'syz.1.1476': attribute type 10 has an invalid length. [ 380.694073][T11161] bridge_slave_1: left allmulticast mode [ 380.697148][T11161] bridge_slave_1: left promiscuous mode [ 380.703407][T11161] bridge0: port 2(bridge_slave_1) entered disabled state [ 381.276675][T11161] bond0: (slave bond_slave_0): Releasing backup interface [ 381.318236][T11161] bond0: (slave bond_slave_1): Releasing backup interface [ 381.397403][T11161] team0: Port device team_slave_0 removed [ 381.400716][T11161] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 381.403503][T11161] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 381.604048][T11161] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 381.607891][T11161] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 381.665715][T11161] team0: Port device bridge1 removed [ 381.708770][ T7435] usb 11-1: USB disconnect, device number 2 [ 381.708865][T11161] team0: Port device bridge2 removed [ 381.780657][T11161] team0: Port device bridge3 removed [ 381.853872][T11180] 9pnet: Unknown protocol version 9p20\++} [ 382.014155][T11161] team0: Port device bridge4 removed [ 382.021590][T11161] bond1: (slave erspan1): Releasing active interface [ 382.024580][T11161] erspan1: left promiscuous mode [ 382.026820][T11161] erspan1: left allmulticast mode [ 382.055829][T11164] mac80211_hwsim hwsim17 wlan1: left allmulticast mode [ 382.434739][T11187] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1483'. [ 382.873756][T11164] 8021q: adding VLAN 0 to HW filter on device bond0 [ 382.880997][T11164] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 382.930720][T11189] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(10) [ 382.934569][T11189] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 382.966477][T11189] vhci_hcd vhci_hcd.0: Device attached [ 383.352204][T11190] vhci_hcd: connection closed [ 383.352459][ T1139] vhci_hcd: stop threads [ 383.356855][ T1139] vhci_hcd: release socket [ 383.366952][ T1139] vhci_hcd: disconnect device [ 383.713151][ T5305] Bluetooth: hci1: command tx timeout [ 383.713397][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 384.086657][T11206] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 384.088676][T11206] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 384.091296][T11206] vhci_hcd vhci_hcd.0: Device attached [ 384.161992][T11211] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1487'. [ 384.172036][T11211] pim6reg: entered allmulticast mode [ 384.191091][T11211] pim6reg: left allmulticast mode [ 384.328988][ T54] usb 43-1: new low-speed USB device number 16 using vhci_hcd [ 384.392490][T11207] vhci_hcd: connection reset by peer [ 384.395089][ T1147] vhci_hcd: stop threads [ 384.396643][ T1147] vhci_hcd: release socket [ 384.398582][ T1147] vhci_hcd: disconnect device [ 387.201873][T11234] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1494'. [ 387.270787][T11234] overlay: Unknown parameter '/xcan0' [ 388.329278][T11244] tipc: Enabling of bearer rejected, already enabled [ 388.365698][T11246] syz.1.1498: attempt to access beyond end of device [ 388.365698][T11246] nbd1: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 388.371406][T11246] EXT4-fs (nbd1): unable to read superblock [ 388.416199][T11247] binder_alloc: 11245: binder_alloc_buf, no vma [ 388.421390][T11247] binder: 11245:11247 ioctl 4028641b 0 returned -22 [ 388.852265][T11246] binder_alloc: 11245: binder_alloc_buf, no vma [ 389.459111][ T54] vhci_hcd: vhci_device speed not set [ 397.634315][ T5966] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 397.639981][ T5966] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 397.646235][ T5966] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 397.651249][ T5966] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 397.654810][ T5966] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 397.684182][T11259] lo speed is unknown, defaulting to 1000 [ 397.809887][T11259] lo speed is unknown, defaulting to 1000 [ 397.957094][T11259] chnl_net:caif_netlink_parms(): no params data found [ 399.709452][ T5966] Bluetooth: hci5: command tx timeout [ 401.148823][ T5305] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 401.159323][ T5305] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 401.166916][ T5305] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 401.173590][ T5305] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 401.177539][ T5305] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 401.799317][ T5966] Bluetooth: hci5: command tx timeout [ 402.133999][T11259] bridge0: port 1(bridge_slave_0) entered blocking state [ 402.137217][T11259] bridge0: port 1(bridge_slave_0) entered disabled state [ 402.149145][T11259] bridge_slave_0: entered allmulticast mode [ 402.155147][T11259] bridge_slave_0: entered promiscuous mode [ 402.179288][T11259] bridge0: port 2(bridge_slave_1) entered blocking state [ 402.182375][T11259] bridge0: port 2(bridge_slave_1) entered disabled state [ 402.184885][T11259] bridge_slave_1: entered allmulticast mode [ 402.202168][T11259] bridge_slave_1: entered promiscuous mode [ 402.207132][T11273] lo speed is unknown, defaulting to 1000 [ 402.459718][T11273] lo speed is unknown, defaulting to 1000 [ 402.461865][T11259] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 402.470642][T11259] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 403.186949][ T5305] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 403.195001][ T5305] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 403.198884][ T5305] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 403.204499][ T5305] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 403.207824][ T5305] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 403.229620][ T5305] Bluetooth: hci6: command tx timeout [ 403.869146][ T5305] Bluetooth: hci5: command tx timeout [ 404.861009][T11259] team0: Port device team_slave_0 added [ 404.865698][T11259] team0: Port device team_slave_1 added [ 404.868759][ T1197] ================================================================== [ 404.871873][ T1197] BUG: KASAN: global-out-of-bounds in fib6_clean_node+0x51c/0x5b0 SYZFAIL: failed to recv rpc [ 404.874289][ T1197] Read of size 8 at addr ffffffff9aff0e68 by task kworker/u32:11/1197 [ 404.877945][ T1197] [ 404.879489][ T1197] CPU: 3 UID: 0 PID: 1197 Comm: kworker/u32:11 Not tainted 6.15.0-syzkaller-08175-g9d230d500b0e #0 PREEMPT(full) [ 404.879505][ T1197] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 404.879513][ T1197] Workqueue: events_unbound linkwatch_event [ 404.879533][ T1197] Call Trace: [ 404.879538][ T1197] [ 404.879543][ T1197] dump_stack_lvl+0x116/0x1f0 [ 404.879558][ T1197] print_report+0xcd/0x680 [ 404.879572][ T1197] ? __virt_addr_valid+0x81/0x610 [ 404.879587][ T1197] ? __phys_addr+0xe8/0x180 [ 404.879602][ T1197] ? fib6_clean_node+0x51c/0x5b0 [ 404.879616][ T1197] kasan_report+0xe0/0x110 [ 404.879629][ T1197] ? fib6_clean_node+0x51c/0x5b0 [ 404.879645][ T1197] fib6_clean_node+0x51c/0x5b0 [ 404.879659][ T1197] ? __pfx_fib6_clean_node+0x10/0x10 [ 404.879676][ T1197] fib6_walk_continue+0x44f/0x8d0 [ 404.879690][ T1197] fib6_walk+0x182/0x370 [ 404.879702][ T1197] ? __pfx_fib6_ifdown+0x10/0x10 [ 404.879716][ T1197] fib6_clean_tree+0xd4/0x110 [ 404.879728][ T1197] ? __pfx_fib6_clean_tree+0x10/0x10 [ 404.879742][ T1197] ? __pfx_fib6_clean_node+0x10/0x10 [ 404.879756][ T1197] ? __pfx_fib6_ifdown+0x10/0x10 [ 404.879772][ T1197] ? __pfx_fib6_ifdown+0x10/0x10 [ 404.879791][ T1197] __fib6_clean_all+0x107/0x2d0 [ 404.879810][ T1197] rt6_sync_down_dev+0x139/0x160 [ 404.879822][ T1197] ? __pfx_rt6_sync_down_dev+0x10/0x10 [ 404.879833][ T1197] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 404.879846][ T1197] addrconf_notify+0x12ef/0x19e0 [ 404.879863][ T1197] ? ip6mr_device_event+0x1bc/0x230 [ 404.879880][ T1197] notifier_call_chain+0xb9/0x410 [ 404.879902][ T1197] ? __pfx_addrconf_notify+0x10/0x10 [ 404.879920][ T1197] call_netdevice_notifiers_info+0xbe/0x140 [ 404.879937][ T1197] netif_state_change+0x165/0x3b0 [ 404.879953][ T1197] ? __pfx_netif_state_change+0x10/0x10 [ 404.879978][ T1197] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 404.879996][ T1197] linkwatch_do_dev+0x12b/0x160 [ 404.880012][ T1197] __linkwatch_run_queue+0x2aa/0x8a0 [ 404.880029][ T1197] ? __pfx___linkwatch_run_queue+0x10/0x10 [ 404.880054][ T1197] linkwatch_event+0x8f/0xc0 [ 404.880076][ T1197] ? __pfx_linkwatch_event+0x10/0x10 [ 404.880099][ T1197] ? rcu_is_watching+0x12/0xc0 [ 404.880114][ T1197] process_one_work+0x9cc/0x1b70 [ 404.880135][ T1197] ? __pfx_process_one_work+0x10/0x10 [ 404.880157][ T1197] ? assign_work+0x1a0/0x250 [ 404.880174][ T1197] worker_thread+0x6c8/0xf10 [ 404.880194][ T1197] ? __kthread_parkme+0x19e/0x250 [ 404.880211][ T1197] ? __pfx_worker_thread+0x10/0x10 [ 404.880223][ T1197] kthread+0x3c5/0x780 [ 404.880234][ T1197] ? __pfx_kthread+0x10/0x10 [ 404.880246][ T1197] ? rcu_is_watching+0x12/0xc0 [ 404.880260][ T1197] ? __pfx_kthread+0x10/0x10 [ 404.880271][ T1197] ret_from_fork+0x5d4/0x6f0 [ 404.880282][ T1197] ? __pfx_kthread+0x10/0x10 [ 404.880293][ T1197] ret_from_fork_asm+0x1a/0x30 [ 404.880311][ T1197] [ 404.880315][ T1197] [ 404.971469][ T1197] The buggy address belongs to the variable: [ 404.973369][ T1197] binder_devices+0x8/0x40 [ 404.974909][ T1197] [ 404.975703][ T1197] The buggy address belongs to the physical page: [ 404.978041][ T1197] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1aff0 [ 404.981127][ T1197] flags: 0xfff00000002000(reserved|node=0|zone=1|lastcpupid=0x7ff) [ 404.983572][ T1197] raw: 00fff00000002000 ffffea00006bfc08 ffffea00006bfc08 0000000000000000 [ 404.986314][ T1197] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 404.988838][ T1197] page dumped because: kasan: bad access detected [ 404.990877][ T1197] page_owner info is not present (never set?) [ 404.992750][ T1197] [ 404.993510][ T1197] Memory state around the buggy address: [ 404.995517][ T1197] ffffffff9aff0d00: f9 f9 f9 f9 04 f9 f9 f9 f9 f9 f9 f9 00 f9 f9 f9 [ 404.998032][ T1197] ffffffff9aff0d80: f9 f9 f9 f9 00 f9 f9 f9 f9 f9 f9 f9 00 f9 f9 f9 [ 405.000556][ T1197] >ffffffff9aff0e00: f9 f9 f9 f9 00 f9 f9 f9 f9 f9 f9 f9 00 f9 f9 f9 [ 405.003030][ T1197] ^ [ 405.005322][ T1197] ffffffff9aff0e80: f9 f9 f9 f9 00 f9 f9 f9 f9 f9 f9 f9 00 00 f9 f9 [ 405.007889][ T1197] ffffffff9aff0f00: f9 f9 f9 f9 00 f9 f9 f9 f9 f9 f9 f9 00 00 00 00 [ 405.011126][ T1197] ================================================================== [ 405.014450][ C3] vkms_vblank_simulate: vblank timer overrun [ 405.016959][ T1197] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 405.019983][ T1197] CPU: 3 UID: 0 PID: 1197 Comm: kworker/u32:11 Not tainted 6.15.0-syzkaller-08175-g9d230d500b0e #0 PREEMPT(full) [ 405.024822][ T1197] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 405.028627][ T1197] Workqueue: events_unbound linkwatch_event [ 405.030483][ T1197] Call Trace: [ 405.031532][ T1197] [ 405.032476][ T1197] dump_stack_lvl+0x3d/0x1f0 [ 405.033925][ T1197] panic+0x71c/0x800 [ 405.035259][ T1197] ? __pfx_panic+0x10/0x10 [ 405.036674][ T1197] ? mark_held_locks+0x49/0x80 [ 405.038166][ T1197] ? fib6_clean_node+0x51c/0x5b0 [ 405.039732][ T1197] ? check_panic_on_warn+0x1f/0xb0 [ 405.041332][ T1197] ? fib6_clean_node+0x51c/0x5b0 [ 405.042915][ T1197] check_panic_on_warn+0xab/0xb0 [ 405.044706][ T1197] end_report+0x107/0x170 [ 405.046068][ T1197] kasan_report+0xee/0x110 [ 405.047496][ T1197] ? fib6_clean_node+0x51c/0x5b0 [ 405.049052][ T1197] fib6_clean_node+0x51c/0x5b0 [ 405.050560][ T1197] ? __pfx_fib6_clean_node+0x10/0x10 [ 405.052408][ T1197] fib6_walk_continue+0x44f/0x8d0 [ 405.053985][ T1197] fib6_walk+0x182/0x370 [ 405.055351][ T1197] ? __pfx_fib6_ifdown+0x10/0x10 [ 405.056927][ T1197] fib6_clean_tree+0xd4/0x110 [ 405.058425][ T1197] ? __pfx_fib6_clean_tree+0x10/0x10 [ 405.060158][ T1197] ? __pfx_fib6_clean_node+0x10/0x10 [ 405.062060][ T1197] ? __pfx_fib6_ifdown+0x10/0x10 [ 405.063791][ T1197] ? __pfx_fib6_ifdown+0x10/0x10 [ 405.065371][ T1197] __fib6_clean_all+0x107/0x2d0 [ 405.067087][ T1197] rt6_sync_down_dev+0x139/0x160 [ 405.068641][ T1197] ? __pfx_rt6_sync_down_dev+0x10/0x10 [ 405.070462][ T1197] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 405.072466][ T1197] addrconf_notify+0x12ef/0x19e0 [ 405.074087][ T1197] ? ip6mr_device_event+0x1bc/0x230 [ 405.075952][ T1197] notifier_call_chain+0xb9/0x410 [ 405.077457][ T1197] ? __pfx_addrconf_notify+0x10/0x10 [ 405.079014][ T1197] call_netdevice_notifiers_info+0xbe/0x140 [ 405.080987][ T1197] netif_state_change+0x165/0x3b0 [ 405.082568][ T1197] ? __pfx_netif_state_change+0x10/0x10 [ 405.084392][ T1197] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 405.086446][ T1197] linkwatch_do_dev+0x12b/0x160 [ 405.088028][ T1197] __linkwatch_run_queue+0x2aa/0x8a0 [ 405.089760][ T1197] ? __pfx___linkwatch_run_queue+0x10/0x10 [ 405.091606][ T1197] linkwatch_event+0x8f/0xc0 [ 405.093072][ T1197] ? __pfx_linkwatch_event+0x10/0x10 [ 405.094782][ T1197] ? rcu_is_watching+0x12/0xc0 [ 405.096318][ T1197] process_one_work+0x9cc/0x1b70 [ 405.097884][ T1197] ? __pfx_process_one_work+0x10/0x10 [ 405.099584][ T1197] ? assign_work+0x1a0/0x250 [ 405.101047][ T1197] worker_thread+0x6c8/0xf10 [ 405.102465][ T1197] ? __kthread_parkme+0x19e/0x250 [ 405.104051][ T1197] ? __pfx_worker_thread+0x10/0x10 [ 405.105621][ T1197] kthread+0x3c5/0x780 [ 405.106816][ T1197] ? __pfx_kthread+0x10/0x10 [ 405.108239][ T1197] ? rcu_is_watching+0x12/0xc0 [ 405.109738][ T1197] ? __pfx_kthread+0x10/0x10 [ 405.111336][ T1197] ret_from_fork+0x5d4/0x6f0 [ 405.113074][ T1197] ? __pfx_kthread+0x10/0x10 [ 405.114596][ T1197] ret_from_fork_asm+0x1a/0x30 [ 405.116165][ T1197] [ 405.117796][ T1197] Kernel Offset: disabled [ 405.119317][ T1197] Rebooting in 86400 seconds.. VM DIAGNOSIS: 07:17:31 Registers: info registers vcpu 0 CPU#0 RAX=00000002000008fd RBX=ffff88801dab2440 RCX=0000000000000830 RDX=0000000000000002 RSI=00000000000000fd RDI=0000000000000002 RBP=0000000000000008 RSP=ffffffff8e007b98 R8 =0000000000000000 R9 =fffffbfff210ef8a R10=ffffffff90877c57 R11=0000000000000001 R12=0000000000000003 R13=1ffffffff1c00f74 R14=0000000000000001 R15=ffffffff8e007bc0 RIP=ffffffff81690e48 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88809777f000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000000000000 CR3=000000005f0b0000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000000 RBX=ffff88802b3285a0 RCX=ffffffff81ac3342 RDX=ffff88801dab2440 RSI=0000005e39ffef00 RDI=0000000000000006 RBP=0000005e39675880 RSP=ffffc9000046fc90 R8 =0000000000000006 R9 =0000005e39ffef00 R10=0000005e39675880 R11=0000000000000001 R12=0000005e39ffef00 R13=1ffff9200008df94 R14=0000000100002843 R15=0000000000000001 RIP=ffffffff81bb1e71 RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88809787f000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000008098a000 CR3=000000006ed01000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=ffffc90006f60000 RBX=0000000000000000 RCX=ffff8880232e1070 RDX=000000000000009d RSI=ffffffff86a18be8 RDI=ffff8880232e12d0 RBP=0000000000000001 RSP=ffffc90000538b60 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000001 R12=0000000000000001 R13=0000000000002328 R14=ffff8880232e1070 R15=0000000000000001 RIP=ffffffff86a18c25 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88809797f000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f7ef6e40 CR3=000000000e180000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f700585858585858 2e7a7973f7392ff4 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f700585858585858 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff 0f0e0d0c0b0a0908 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000031 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff8554b905 RDI=ffffffff9ae4fd80 RBP=ffffffff9ae4fd40 RSP=ffffc90006c4f080 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000039313154 R12=0000000000000000 R13=0000000000000031 R14=ffffffff9ae4fd40 R15=ffffffff8554b8a0 RIP=ffffffff8554b92f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888097a7f000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f7f55000 CR3=000000005f0b0000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000