last executing test programs: 3m52.609304439s ago: executing program 3 (id=1949): memfd_create(&(0x7f0000000040)='\x02A\xbb\xcc\x96\x0e\x00\x00\x00\x00\x00\x00', 0x6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r2, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r2, 0x114, 0x1, &(0x7f0000000100), 0x10) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}}, 0x0) recvmmsg(r3, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/189, 0xbd}, {&(0x7f00000003c0)=""/152, 0x98}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x3}}], 0x7, 0x0, 0x0) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) chdir(&(0x7f0000000140)='./bus\x00') r4 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r4, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x4, 0x3, 0x5, 0x6, 0x3, 0x1, {0x0, 0x9, 0x20ff, 0x1, 0x89, 0xd615, 0x9, 0x7fffffff, 0xfffffffe, 0x8000, 0x0, 0x0, 0x0, 0x3ff, 0x1}}, {0x0, 0x13}}}, 0xa0) sendfile(r4, r4, &(0x7f0000000080), 0x7f03) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c0000001500010300000000000000000c00000008000400"], 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x4000000) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, 0x0) 3m51.116294578s ago: executing program 3 (id=1954): socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_HYPERV_SYNIC2(r2, 0x4068aea3, &(0x7f0000000140)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r3, &(0x7f0000009b80)=""/102392, 0x18ff8) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)={0x2, 0x0, [{0x400000b0, 0x0, 0xfffffffffffffffb}, {0x400000b1, 0x0, 0x8000000000000001}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r4 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r4, 0x42, 0x1ff) r5 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f00000020c0), 0x413, 0x0) execveat$binfmt(0xffffffffffffff9c, r4, 0x0, 0x0, 0x0) lseek(0xffffffffffffffff, 0x9, 0x0) syz_fuse_handle_req(r5, &(0x7f0000009b40)="7f6918c94c44884d7b8a28634924247bb7227f95c895bbd9b1d304e96d5cec730781de7dae19f800f70a3f79a7dd3d71df24387c5c75ab544cb9f6046356198c15e42d1243561d3564eb81f867c971bfde8b68e2bb06c19acd4db9ff3338918a966ab2ae23d8a2d5d8329ebad40e96db51b70fb245b7876f6df6c6d07327f3c03928531903e5e783e0115db15b2833fc33d3b57f30f25e7b32d7d41f724e8b61cf82045c6cef472b58b94ad9f0b4746e47a86aa7fe472a33dd5d87578cbc83356e87ed9786be4fe4bbd49c4bea54f1209106ecc101b945d8bd1fc5f8f9fc04cb63087d76679c6985f9cd03ab2b47208be4f291c12a1aa95ec5d84137ef7f84f6bc37d829622c63a758886d23c509bb6009ee56c05ae6a79c890728b9028231456d8ba449755ac2a3b33f17ec27c69a93319f84ee840f08f379b53fd36a770b4353e273efce7392e2ad35975a1a6c9ec0d09a3e5052aa9c0cd67f68c0c878129ab13a46c2c650311739fe5658f035b08cd96b41b5b8b154eaa9aad034fa376ae9b906a93c91343755a26056335c7a3cd68132a957badaa133517f219b48dac6f8b9e073d484170e7c8d0279aa09986a4e18ababe7a67ca4706916dc14442ace6876fc039fc4895c086e6464b41c31fbfee4385bc6c8adfce87642ef7e360c84f6d731635579c2b78f3efb77a8cd7d985f7f4a3260cc8802173f6db768645cb59d3dcaf4c024312fb6bc6a77d177d838f976f2e37026927b02cbdcb2cf6f6c1ca9dcc90ad40d849c50085f4d1f15378f388b51a5c3a0eab990b8724fc2e39b4c5308e5bb2faa1e534a46c298309d6d8d01982ce3a4f5e7ffb6a32e1062735c361e29e8648a94daf71896fee3b2e5ecf3c9bc30d00f588129e3eb3ee8c3b5dda9b70db7e8f0ceb1b14bf4e823781237a8490ef28205b23d88840f9865ba8a760752bbae44ecaed810051ed2778864ba9aa48422c22fdb46b1dcca4601ade39a2200b9ca59cec048527da207d1b122da061f2085af49574bf9c9ff3534d8dc10f1352638515facb031dcf9d4f44aa76908b7ca8cb19347d83dea67121ae9f759df68e183a79e4f14b35bd18a47a81cd8cbfc45a772f2084f640d1343c1048dfb0da78063896a2f757637d767289c24608cadb0c98b0b8e525c5a6fcd57471b1a03f34008c70d60096fb25dbc1d7b090427304699a6e64a547c192388fa88b021644a38705645d0588e573f1052d56b2fbd3f0c7fa8bf713b77801fbeb7e53517326055617a45691a24dd22022b0f8a4f70da5792a66dffd7a52b0133bc8df01e7bfb2b81e15179452035b9a6f27f262936d7ecfafe97964ae4e6848793400177554bdfcae4897f0c5eebda209ff2e39326fc6bfb8012801432fb27723ccce88dc4bf26c9c2407e8fa19c2a5669905319e67268d0900c3a4de3825c1a6f3d256d62c1983d6136aa5554cbece1bd238161a7f7138d6b4d1bf4841c72ae9f8cd2eb4141f84947367c6457d37178f8dd3589faf2dfdc2a52172b5eed7ac6e65ea8a85764df131e05ce45e29a55e77625c4b47a823d726994956321af20152482d8bfa165fb3a59cb177a0a39839b597260e81bda3c1ce17cd84b5b5934f1e0c14287d99a091754b6430d8c7fe06ddecd1dc54fbdb2fb241a3022abdd5072c40fabd6a278bf12c2508b5222ecee996359fb7e2013280f25d63879fbc464c90966dc5d475fc0518593728e627be5683a782df540117cb0da3d0aa9ef492ac2e454cf8c4a34b454eb4ec4316026e34aeb4f0490d7d2b1a8cf757e0613b0348f10f3075a6ba221adbd3ee54a520254d4a3d4f7c012e6e35a6c3c7d5c321f12ed8ea1bea46161c26d5b2b956d712624435fc267d90b61c7a7929f82762e5708a650d5ed27be212a313bd603480857c26e118dc7b16021f090a765dd0b304aad70d16e7fa31c5c06e511b8a848bef23a68bd415ba3bce70d6e2d621a7c871e7c45a0e66e6e8f9b3ec58610f24e8332c15d8e0422ce3589639523e2089f68fb4d38b4fae820b88fc67a0884249fd509996dedce14d307e91166f90da5086b4574e922137b60c859847e54f62fc6d13ad5b79f7595999d54df6810f6cfe90e81399d4d6f905f569672f6f543572f87124b56d26ea43f66a1c75ac1ea26695d61599fd8db6e7f8c025393f948ba9e3ccc57270f371d3d31589c1f445388c931d78ae714a54b4c0bf1b0c8e4ec49db480c40b1df7135e5a1cd5d427fdb3fc8689999600f474f2b98312b89e8102e231258ad7137a3eed49a26f1ba3d7624e7ca647232ab36fb2a73f85f52c752bb32d61c2b6b9452cf279a30e971322cad2d6430a0d9f4902c9ce4b43054a4aac67250f9967523d57068616e7769189d3c513cfdf8a8bb37ad7932159c819af127eb3abee2c45e78ae62a3f6022f0e9de7454ff51ebeefc58db63803236b311087af41efe1cd5b82fc973a047565fb2c428a20052cb578e1fc6e33a66b331f53045b69efef186a6b34e01d089197112566020cd78410657e4547b726b48aab4d3d49554bfbbdf9d3598e93b412796931c2b662a096618deb94649cf2a922b2b6e2ea44163fc460419a8c5e88a18a05ee96392573cf2406affe801955214891430da0ee4ce385b013d827fd4adafaff661741d447e7be653efd5977bbd4aef922c076e91f391607a3f60d105753cb8e44aeee51e90aba0c52f731885c9d459cc89a1f548874009c5b6938feab5cc3f42721f4c9599fe74a11fd2f898c9fb3401be644a9ff6c093683e90e9a23a544e778fd5735e72eb432dd1ccbbfa9db14e8b7e5a638895edcff4a684a9d467151cd4b8d0fcebe3481b4c9f18b3279cafb76ed7bc5bde263baba9ab032f8973c8e1527f26c56b627a312538bec70e3829a1b35c53b0ca64571de79514c30c98cad975056a98fca351dd1753422e81733667098f893f1375736d6228531b97c5ab918819ff16c7eb38d33f0a1f023d07f97ce5d1d1e4b71c9a292aaee6522e1b0e332b7ad6a0248ecbc611e93652951ded443ba05530e2b6ef6f5837b2fb214db180281ecf14e73064dbb53f002ffc12038b8d720f7fb919ae92c423798fee59e1d20dc9002b8eee98347ec86026a293545d4224a334d77cbd68a39e698567b47dd296402b1a91b31184032ad5c07f9766d96a3aad4746153c3060204b6fca81b0e4195e54ad6d963526c2ce74cfece9b16fb93bddd0965335756243153faaae2e299b33eb8c2b58b1ff26714e3479418d77f3d122c2a397b851cc1b62ee272129137037b14312a6535376c2f8a505434bdbe1f009898709790a0cd0c6f265d7d2e93b22319991dedd018d391b9d824af7a0d1cdd08e05b961ef867d0bef9b56791bd34602af6cf812e20d7f1a68bd66b5b30700003b6fd06e690baad26193ccb4806057068f4a48cfbe289e718215b368ecee46b30088d38668f55e04f8ba14c26264f10456acab6a0982ac251ee1f2e2f612e7d7f4f9c7399972013844d442334aceb641e7b3535311488925d542a2a4000eadaecd0e23238bc3740beb45ac504b14591fbbd7e1b6015fe338c1399edb7d6dbb539d34ad9ffadd665e5f85b918f3d1d888636a84c7e685453bbdf9a5e22fe80f8e8b72ebfc1a2db75ae07edd9004f7d95481459edae62388c75d8be87fa491daab39e8f0764809fb6cdd0c1a501094b2ece56cdf14b5a92593fe8f158f41c0f77e0fbfcd8a76bc805895014b3c4a1ff8933bf07ffa971845441a27c4f83c682706cd03b405fa87224216f178403ac871990cdeb1bd75cc4dc963e4ca23be0fe9961a04cdb631e67baa1947c154f106ed5d8afbb1a6b57314603200a381a83446e5cb6346c484a878fe4339f0260e70f987fc73c58d4b82b853dd52b1967eeb13f724ae92b2ab490b8457230422cc1ecdc2860d730ed8cac393f7fd4927edcd13c8c8d576848a24d973172b2b70e9467dd6e28bcce21eb34d8cf0e2da165b18851d5fd017fd7b74eeca936267787870131a203e946fff450387ca87d5a6fa3f95109a9671cf4b066ef881df3ccc8902f67808c01e1739167ecb59b6cd8a195c62837348a2548708ce553e9cbd3f2a75bc83996871bcb0e7fac4d1e68eb3302b42cb46d3b8d1c6a27b237b3b50d87874197a197357178ccd8fd7575a4d54222ac1fb200657cbca5683303f3bc7a36ed0418327f8d1df336af2092c544f6226ced77b63445d913d328f03fb8889cf54ee36e642b37638d203c2e1bbb9ffa33d1e8124f7dcd22e98f66519f79a0731f6c5f1a3417d7e50eb39ba9d9a0a8be11112d1de4b6983ec0436cfcc5e0cbfab9ceed17a75743f70173649e8650a0e1183c11e62d0a9b566641feb8261432624d5116a6cc0a3332945f4aac41d46067777261ed028436220237340eecd76e820cb434f50e88c4c731f3e3f302220baba2a346683acb65008f4af74de5112cfb15be1d4d5fe080098e9cc447c5ed48eed2729f437f685548bea6842eb33bf7683bb097fc400d5be9ef54f79d8bf53ab057a431f535309e9af11783a5ce371ba5de8e517b767ff1b1d64efea71bf44cb0974665e4142f583489bb3b3870a779089822f52136bd34ee4b97276992bb080c6278be503fa06c970bff455d9d323fa2a7baea78e03b99a57ead6cfc90ec1cdc541e06c0ba80f23a03756e3d3d56b6f7cf7fe706cc9fd10395f18a6f1cd019e57efe3c49cddcc48c42890349d1255201c928d590ad6963700f91c73b8e522e9950ff9088f1b5365de624178f1e71168d29644e8a4dd9b524aeaf70738dc16aed5edef1c18365f00d6a7f8b1466b4da1a3f0981b491f79a87ebc323c75b12b292ad9e0ff34b615f57c1dd896e7eec65d075d3a4414769af553c0fde01d73196660c3401a0a5a82a5099564480bb7fc10240860bb2813612122c580438403a0fbc3aa5b789af01a4392163345291e7c83e57f20e9f7a9b4b234308688956d993ac0b4d4eaa8f714a5059734a5e1d47c98f93a40f60e77511e463e4fcbad3410882c553da9c7845b8554ae7e070f04c6752ca58363840479ee570b2960102814dd963bcf69d3a1279e5d6bee1ca28a46c0f34626da074053f52ac7eb71e05702086d3b23a250e7b8c4c0075e366b42fc64d06af19c49fc89a441182cef130c72f279f56813241e51775681aac365459bc24bb4bf59819c65df280cf1d11650796f35650efaebf2d4d00c9ea7c49dc8e7400e3c344dbfe7e93f4b70b89ca42df53dc42d7c0a6c67d8cb28c711ecbd945b3a21a412a10296a705c447c4a46a2c62a63a686ef467ee736a25c23a6e9496d35257b58f21669300b33d6e5abf93fdad59ab1f7358e07d0e409c9c8371bc44d42ce5da24a8fb8eb5a3aa55010d55358f72033c59a4491851002fce689caf1efe7e61016ce511c6af68fa4498ffc643cfcfe992f3d4a68987c27a1aceb06a87c8ae6fb59de2d5b6f01c57cfe27738531b0cf87f3b2ac41e19c4b51f2dc54514513c740bd2a1a60a7210afa6c727352d00b1a6b0c70d44592029eba80bf0b47e7bfffa6865d4ed213e9ad66f28ac8066d3e3a22f795c374de53a07b8318ef37b809601b2ce19d18229d5c9190250a9b0a27c500744b359134dc7a19ce9ba83b586c7c4190610e807ba13a62fde4ab8c443311800b03ad761a77dadbcf91b1fb7de0696d273b803d186f22657feb01fcfc00e2c38b4b3e77c987cc10605429e6a5aa4a6e55397cf8b7252119a8c90e4c5ab44e035e43f038e23cf491e9d0cb54155b38a73f781b7ba3973d5b011fca0501ab228bc7a07d52c1a417f2d89b21e32d7b54f0a7ceb7e5b3bbbf30093542df3c2896334a046d9ea5bf5b39c65d44bb4fc0447496549a2252c5002f4eacb09659c7d81a1b5aa36019fc6cf2dadc62bfb923d573a245b01be37872505081c28d95c023bb9d2398614cf8c06b48bcb26c727d739d8f970ac8b430001f32a11d60573edc125551ef19a46f9ed274f7da3962572d741a38ebfe2c79eefde7c0cc6f6b800bd3c2c3a3f397f109550e3339044968ee5d76a41c74d40cf7a9f9e1f6b8917037ba5dd5faad8a18380ce2c9c78f70fce4a6086649bc0bbd3fd79a2b96083a82ec212ffc00f98469b1923773a25400fdce8f2d6f6c5aa83e8071dc3073927f7901bf9685f603b246f46101ea69383a26277a7dde0aad5df47bfd9dd2dbfbb9c82d4c2536d687cabd85876725fa98220b85387ddabc59f9e065ab499cb19db370f4090edbe5203255c2e7b9199e9f7e3fd8efe96c760e56a8a0b581d7419fbcb7bc05b0ecad49980a191f3c572a3f187bbc7c9aca7e07631174be92bc42e31d420466503cd8eb65ff81f2fc87f262731f7f9a3d70b2973baf6a0a45e84aab447cc33ae5ee7e7e00ca346ebdf307b32f6a2792311195b6dd4458fbdfd63aa743848be5f33919fac774887bc2e819afc2f18b639bfbed1d4be7aac932ec64d1b735fd58f23ef87e9986d70d734267ef75b6c37d833d7c7c9abfccaf77e300e687127eda92dbe586d2821a50028d2bf073e8e628fa17c30f72d4ab734c03e665381de9b2c6bc56d3352a05db51c6b880a503368286a12e8eadebd62d5176725444700ee47c6d129f95ee724f7c15f1c6f8eb173482295789b870b1c307841e9f4ba0cba08f67bf38b26e9a7951a2bb6e1b11a864d468d26104573a23557e376667aeae0680086924c6be4a3b1cd77791a461b69bbbea5e2bb1662fd09fac1e4c2a4c3a9af4e1d1950a61f6731b84ef80809c745226c4b5c973e2ae9db0a0b89243ac24b6211a7dfd01ce2ac794bb1ddf4971ed9e03e1b48b15928de9ba1ec10d25c729e5aa1791de3c24f88783bece40b2d26f818a85412631136da414dae2b0e84a4f756ff47faf50b993ca2b1332f946bd60aaa244fef4c44e27abe18e3c139357621cc3f2181078619175019f07e8cff2029225657e869ab2f85f7d0da1f4ca725213ff3c54e9c8bbde165f4e7fefa7703ff9aaaeba782d09cfacd1b3ae70bc59c6721a487e9a151c2c2d6c374b2c9d7437485dcd9aabf09c1e8adfa2484f0e5972ede72ce13d6162052c6a94d8cd742a02996bc477a00a9180744ee9ea3d4c9c8b033c23076bef2773345d221c294864bc8b20a0522ddea26c0f9257db1abf991830cfc08e34d0d6f3225c425dfa7661ef281d715756e967ceacba90430f42bc906c39415266225041f7f400060bb86a43ec1f8f050f5c3cee2cf541b1d5f3e13d9613bb97d7dc0e58c5a0f4b11c572bceda5b632e98a9172e1b45eefc4ba808aeec0d3e40eb121035d174147aa1e54b8d5f75b630118e12e7688375e26ed745a9c50fa8a2fb023571c40ef4f0a2da5284d0ee921839709a3df86662dcabe01a592621a5c57d88f3dd7b1f1db695d6f577b024e004d46d4a463109befe04ad42776dcbe46ec9399d88f4b83018baa453c981d2639af3dcf650777be6a9ca936c1619cdedeece29c2013237556d09dd983d56a3cc8bc6a3a2960daeaec4d798637564eff409248ee3f9a733e7d612812748c63650c9f75997953e5e781ad48c1bc3a5c4d85cb5819acdfd7d593d615b6d09cb072d222332b6f8e23bdca8ae10868534519e250f7052b009b0e5c132726734645bc9850ab98bab08665887f4c97ce2eff5d8603066d4dfc2d762cd45bc96a7b2cdc2ca557e9ffaf0f03521a0680e30387706946c3587996b2751b5944147c7344b51cfd30e70da869ef1a5d8ec2ac8f4c56d4168f20365690c995c226840c5fc6b1f998acbaf4bbf095c314aec39123ba23df17d36ffbf48d110a6cef7b0d49cd34a6a097b31fc05025924e32df666c9bd264d62aeba0db0c6fad6513bd366c1c788661bd7f86fd3e5e5c52963a30a589f2266a0e3d0d00245f9db624bcfacd3328a9ff9c1ac6ed9495b37e56bf3152ff3188d2a5a5ec3ffd237468fff8fb42e693b796647020e1be6689789fee77045ef0e99114ba5eb55055805f012cd11a6d4a3cb04b1dd6243618cff80cc8a980325e9fe55e1acae084bc353fd56b8a500614c2f4997358099521a7210024d03e0f31f29eda6bf96eff0f741d90bacfb4fc87c15f0a924b38facd926a9767edddaf0e328ace267367a7a4f0efd04ba042457f306eb7f201faa5709e4052a162cd33bab0bac9a0181c0d383fd17957a9987f1d24e80901e6843beb37e7e13a076e44576456d3fedf50afaf2fbff36b1c7555bd560bdfdecb37412a2a6b66c94f988668d05eebbb5738ef09c7b9c1fda542f39a4f7d3eb2902d9c144fe89a4c33d77b7a053d89749a1260a6236db383474e8938d0c6a21abd63fe67c01d9fc16a8821c5709a22949344670547174223c3e13117ad43cb4e1b39903c92f9e548832019adec859e8ab84952b379f80a81451cf53eee157ed76eb0c816598e018195d69d9bd01b0e46432fef38f7cce7e0b180b0e16425ba49fa2d2cb99a5525f90e04ceeed8c8643592e64756e0b9911aae238a475ede1378e709cd20144d779e6aaf9fdb8236dbf5fe3f60d254fa19bd2c9fa950501894b95f272f6f4236625c5b2108d853f8407298a90947447c0c5dad5c235144954dd197493fc9fcbe82afea68cc29d3e53c16256c00d6ec40ef6319164a70017d19e07747cea22e668d53115f66c2a222dd3ab72d3ea6712f539796010c122aace09934fa37f2f4564d19ffe320ee0f0bb252e5b9d3abccd3cac62d7700a8372e19b981c192c367ed4182c94dd36771ab70d84e4f993de2c7a6d005c648b3ad78a065685cd11621c0a74bd4444e7e1183bb6b175bd43c7f5986fcd48c7a5522449b3f38019668a197bb6ee510719a7288d018ff4a72ad18ab81f7136b5f0b9f23e63a69d8ff174efd824a9ae0722a3cbce8ee596bb6025ff9a901ee70c462c01baa240f93511803652ee9fb2bd19bef2a849e184e36938cd2e1220157a8ca376e8a8bbb93669ba1dbe3ea2b5c5a55ec02cbb1393eee30a9ccfa22f22fe7fc888be74e00dadc9f273ef252304cc10b3acb2d320c74800e8397ce26eb806c9bbaab24c3bee318669e62696b05ea586068feabcff9e49967b2f7b1698f45a086f9deda7d8a26d3fe0723ad1a6ea3dfd10722e960f270db5a7d39daf6c5bcd822d4b05e10f5ea53d9267d13eab771405de136ed3a77c8f2f483d543fe8a5d7d1f34b39e78df05c3945a0f1ae184f641eaff54d92e739f16dd7ff3bb7f4026281eee4dc6fb429f7715a6fde415172d193b913dae9e73cc8c690f597ec757801f503fab84579f21721f90518b4ee88c0c947dce61fd5bcb7c58d4eb45d06aac0d35c1a9647ebb3507c0f8a2dbff36d03681929b942d7202ea575542f6921db5a3a933ff8ba2cb066f028e216b64d281fb6a236481d57d71bd318930fc1ee1d9ad2113df747c592be3d244e5f42957e468c0840b1dcd6cb82a5ce29ab016c7294bad05a6c0430929ae96164597abc25b6f746c25f50fe98afdc04ee696c620b923d15e211360b8c122f9c0fa8cec463c8f7a45a1eb054e2480d4f87a14a9ebb3836afad1d02234bfcbe75ac0ff43d1ab4b8c1ae7067422a2a1807814d53868959e8919090e6af016628ebac18684bd238d99ba6f16053aebcd69dd4ddde9db5fe0b6b431a316eb54d2ae29b695430ba60e30e3fb169bb3636de169175e5fcb52d13ed918fdaa0eea476df0804a3af0dc468fbea1b263b92de2206c7aa9ff6a85ebd5a578c60df6611a3944d79d81729fefd0562cdde51e8108bf0c273359d596e4bb85dd888168de99b0a6a81ae74ac3759c4b986d9cca8fcf60a536180570f0be902f1e96d960d353dc38c684eb63118f27bfc167f971f76a5863106889cbaa47f800436405eac62a14ff4138c712f1b45eac7b531fe548cfa6918f11787cb2c84a157a65a9e8668b2f3751e51a943423fc59a691ca16de178edf0c2a8e897222356af56490aaf6a0a8a4153f43ec3876a5bbf27a00dbcb70dfb885c85c419556624a18800bef8eb4f3e6e138856b1bbdc1eda17c1adfee5966837da52fa088c532e47263f5917707b7f08408d3461d4dc083b247714915c7c751ac0f9a6118fb24cd759d04f33043892e509fc12c73b17d03541749ca82ca2992b3aef51191e02f8bea747d0690a0991087761bd5e23b6289e7dadc6025276e9bec88858357f93735b01718d1d250b80381354ed5a782413bc34c08dc4b2aa91f2f6892a116cab3173b74230fe109e879ce854b1bc7047b6c8228e18797f7a355eb502aa0b012c82e10f7bc4bc91b149c85b8696cd5735c553347c26212b36dc9e778ac43dfe139a319e9aaf3c5643dc476a7ecd9f8f69e6b5ff54e2b98b6ff9f3aeb6ffd0019c4c6cf5332c1fec541ca45720e88d10f9c04352dce307053ad6e0b9b1448fe86b893cdd3a0caabc5a42772b186caec04e029faf696a842f78fdcd5bc6168e49656d9922d3797ab948298d830bcbdfeb2a593e38ac7f0c0aa10d70c4a6b110d3a75aea66af29ead30f3d03806ba9b1fc2c42aa27627e0647209b07ed7317eb711148b8781d9c6a79317fee6277951d9d7b7d8f823c046b3f2cd22bd809fc4c17d27c9f1c14269f6846f70bca0eb2280e720dff51082b40890061fad286ad200828a58e50391b011489e5b70d2aafe165c6e609badb24c0b29c05ab48b296a2b75a27aec0ca8a5b5eeec344ec2ebcdc2f7910b0b136b925e1dd75e3cf0739721f0f6d1df55e00445bdb630d801fe51a16eb63019df487b91a556d0ebcdeec1511b251679df0624bbaf8b0f53262f587cfad05f3587ea7ee22aa4b052013b08fd217fd58e8b918d58fb9ba50c1998a9ef9a42494392f8f3087b5d18512472420450fcce13ff6a56a5b491020f91a586decf28171ac13ad0e803b4617557a7335052b7468e98179ee82c729dc9422d4ecc87a4c6c308caff8e6ef4c3fe8088924cfea53d760d17008a4d111db27ead13863e808bd13b8bc5341017231fa1c27d12a0630b5472271354a1b09d85c90e4d0d731c7233c163c6d78fe48ae3f665f2e75d922e77a48f949cb33d41800360d0fc7cb165b6f4e8f3c05f0e1b9ce163f288861ecc7f3e134cac468795d3781c4aabad5d88fab0dd780bf913a19102a2be74798cd737d62b0186b641dc89552ac444ad60685e4c3118e8296972880f69ff39a69dfa38e07bbfe32fef1b683edb340f8b8ccfdadca73a44488ad6807c16a8c3a45111ac8664f7b85a45a28a6fbd4351a06521ebe22feaba53229c9d13daa40d8762e5eacb9bd6a69c3b37230c229348307ca24d15305a8667f9584a3abb11e5135146e3fa90769410f7dd04bb4e7744f28288b84dfde7aaab141d582d9faa5dfbdd36e6d3da28f627e05f39ca3cd24fe6cb05817c528b956e623f74b747b56e11fe93f40d881b59ff7edaa26d583fcaaf368a4247fb338759e5ead21fd8225e2436a336f95edf783fdfbabc7813f4d9a96613ed01e22becb25634ce3e5a1ccd25f6328c8c60eeb09a5484743bf0c90ad2ea1884ea12263b4700f667a2cf4649e7185c74f6e1f707d45db83563cd3cf6caa1a90da482d9ddba7e2c0bdbd60d24f00", 0x2000, 0x0) write$FUSE_IOCTL(r5, &(0x7f0000000200)={0x20, 0x0, 0x0, {0x1, 0x0, 0x1fc, 0x1}}, 0x20) lsetxattr$trusted_overlay_upper(&(0x7f0000000280)='./cgroup.net/devices.allow\x00', &(0x7f00000000c0), 0x0, 0xfe37, 0x3) 3m46.19032201s ago: executing program 3 (id=1959): r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) fchdir(r0) mount(0x0, 0x0, 0x0, 0x1001, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, &(0x7f0000000280)={0x2, [0x0, 0x0]}) r1 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = syz_io_uring_setup(0x5fe9, &(0x7f0000000740)={0x0, 0x1c22, 0x10100, 0x4, 0x1, 0x0, r3}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r2, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r4, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c41, 0x0) flock(r7, 0x5) r8 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) flock(r8, 0x2) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newtaction={0x18, 0x30, 0xb, 0x5, 0x0, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x8890}, 0x40) r9 = openat$sr(0xffffff9c, 0x0, 0x2800, 0x0) ioctl$KVM_GET_DIRTY_LOG(r9, 0x4010ae42, 0x0) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) 3m44.895571022s ago: executing program 3 (id=1963): socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) r0 = socket$kcm(0x2, 0x3, 0x2) r1 = socket$kcm(0xa, 0x5, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0xfffffffffffffee7) sendmsg$kcm(r1, &(0x7f0000002dc0)={&(0x7f0000001640)=@l2tp6={0xa, 0x0, 0x7fff, @local, 0x8}, 0xbd, &(0x7f0000000340)=[{&(0x7f00000003c0)='`', 0x1}], 0x1}, 0x41) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000180)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000040)={&(0x7f0000a52000/0x1000)=nil, &(0x7f0000eb1000/0x2000)=nil, 0x1000, 0x3}) setsockopt$sock_attach_bpf(r1, 0x84, 0x1e, &(0x7f0000000000), 0x4) r3 = socket$kcm(0x2, 0x3, 0x2) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r5 = fcntl$dupfd(r4, 0x406, r4) mkdir(0x0, 0x0) mount$overlay(0x0, &(0x7f00000001c0)='./bus\x00', &(0x7f0000000140), 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000000c0)='./bus\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ioctl$USBDEVFS_GETDRIVER(r5, 0x41045508, &(0x7f0000000440)={0x7, "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"}) rseq(0x0, 0x0, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8916, &(0x7f0000000040)={'wlan1\x00', @random="0200ac7f7f00"}) ioctl$SIOCSIFHWADDR(r0, 0x8916, &(0x7f0000000040)={'veth0_to_bond\x00', @random="0200ac7f7f00"}) 3m44.647901507s ago: executing program 3 (id=1964): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x440c1}, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x101e01, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) openat$dsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r2, 0xffffffffffffffff, 0x0) syz_clone(0x2910a000, 0x0, 0x37, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 3m42.72580932s ago: executing program 3 (id=1967): socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_HYPERV_SYNIC2(r2, 0x4068aea3, &(0x7f0000000140)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r3, &(0x7f0000009b80)=""/102392, 0x18ff8) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)={0x2, 0x0, [{0x400000b0, 0x0, 0xfffffffffffffffb}, {0x400000b1, 0x0, 0x8000000000000001}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r4 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r4, 0x42, 0x1ff) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f00000020c0), 0x413, 0x0) execveat$binfmt(0xffffffffffffff9c, r4, 0x0, 0x0, 0x0) lseek(0xffffffffffffffff, 0x9, 0x0) syz_fuse_handle_req(r5, &(0x7f0000009b40)="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", 0x2000, 0x0) write$FUSE_IOCTL(r5, &(0x7f0000000200)={0x20, 0x0, 0x0, {0x1, 0x0, 0x1fc, 0x1}}, 0x20) lsetxattr$trusted_overlay_upper(&(0x7f0000000280)='./cgroup.net/devices.allow\x00', 0x0, 0x0, 0x0, 0x3) 3m27.28180532s ago: executing program 32 (id=1967): socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_HYPERV_SYNIC2(r2, 0x4068aea3, &(0x7f0000000140)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r3, &(0x7f0000009b80)=""/102392, 0x18ff8) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)={0x2, 0x0, [{0x400000b0, 0x0, 0xfffffffffffffffb}, {0x400000b1, 0x0, 0x8000000000000001}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r4 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r4, 0x42, 0x1ff) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f00000020c0), 0x413, 0x0) execveat$binfmt(0xffffffffffffff9c, r4, 0x0, 0x0, 0x0) lseek(0xffffffffffffffff, 0x9, 0x0) syz_fuse_handle_req(r5, &(0x7f0000009b40)="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", 0x2000, 0x0) write$FUSE_IOCTL(r5, &(0x7f0000000200)={0x20, 0x0, 0x0, {0x1, 0x0, 0x1fc, 0x1}}, 0x20) lsetxattr$trusted_overlay_upper(&(0x7f0000000280)='./cgroup.net/devices.allow\x00', 0x0, 0x0, 0x0, 0x3) 1m38.075638565s ago: executing program 1 (id=2189): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x6, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() ptrace$poke(0x5, 0x0, &(0x7f0000000080), 0xf5) request_key(&(0x7f0000000100)='big_key\x00', &(0x7f0000000140)={'syz', 0x2}, 0x0, 0xfffffffffffffffe) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000000a00)=@newsa={0x19c, 0x10, 0x1, 0x0, 0x0, {{@in=@private=0xa010101, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x64}, {@in, 0x0, 0x32}, @in=@dev={0xac, 0x14, 0x14, 0x36}, {0x0, 0x100, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0xe3}, {0xfffffffffffffffd, 0x4, 0x8000000, 0x100000000}, {0x0, 0x0, 0x2}, 0x0, 0x0, 0xa, 0x0, 0x0, 0xcd}, [@algo_crypt={0x48, 0x2, {{'cbc(aes)\x00'}}}, @replay_esn_val={0x1c, 0x17, {0x0, 0x70bd27, 0x0, 0x70bd2a, 0x70bd28}}, @algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}}}]}, 0x19c}}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$net_dm(&(0x7f0000001140), r5) sendmsg$NET_DM_CMD_START(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000001180)={0x14, r6, 0x1, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40880}, 0x20000000) shutdown(r3, 0x1) r7 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x101, 0x4}) syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR(r7, 0xc01c64a3, &(0x7f0000000280)={0x3, 0x0, 0xfe0f, 0x8000ffff, 0xa, 0x1ff, 0x10}) 1m33.30228214s ago: executing program 1 (id=2193): socket$inet_udplite(0x2, 0x2, 0x88) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x6, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_open_procfs(0xffffffffffffffff, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee4, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, 0x1, 0x4, 0x101, 0x0, 0x0, {0xd, 0x0, 0x4}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x44084) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x14, 0x1, 0x4, 0x101, 0x0, 0x0, {0xd, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x44084) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_NETMASK={0x5, 0x14, 0xfa}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000040)={{0x1, 0x1, 0x18, r2, {0x6}}, './file0\x00'}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, r8, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x8}, 0x4040800) 1m27.16067292s ago: executing program 1 (id=2197): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00"/13], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xa, &(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000100"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x25, 0x0, 0x0) r1 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000700)={0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) pwritev2(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)}], 0x1, 0xfffff, 0x0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) syz_open_dev$evdev(&(0x7f0000000040), 0x3d, 0x0) r4 = accept4(r3, 0x0, 0x0, 0x0) r5 = epoll_create(0x9) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000040)={0x40000004}) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) recvmmsg(r4, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x2}, &(0x7f0000000000)) timer_settime(0x0, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 1m24.022848855s ago: executing program 1 (id=2200): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x2}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xd}]}}}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xa8}, 0x1, 0x0, 0x0, 0x4040054}, 0x0) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='xfs\x00', 0x2208004, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x2010042, &(0x7f00000000c0)={[{@subsystem='cpu'}, {@subsystem='memory'}, {@xattr}]}) mount(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x40078, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0) r4 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x3e, 0x0, 0x0) unshare(0x40020000) 1m22.798352923s ago: executing program 1 (id=2203): sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0xffffffffffffffff, @ANYBLOB="0100000000000000000001"], 0x6c}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1f, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="666da0ab1669bcb4fbf35f2c5b6be7d7399f5044e8366ddef44a44443f0a2d46c8ed49eed40702623ecf8ec256a9f64f30f59a6181803850604eb9d2de0dab729db6dfa65251b7c14b981c938d158ae62f04a9040643fe6878659581ab0443935acb25b83b471552a202bd0740f5c3722b6b13fb760b06be5fa128fe958ea7e0e68a1e652acdfeff66372bd5853d6f09f003c5202bdb355556f0b7f57214567fa71c86ea388bc351dfbf83fa074bc2b71331ee5c971f2e22a180b47c21ed5092cb758d5bbe90cd2533d0dc9342a21ca3163da61af425", @ANYRES32, @ANYRES8=r0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) gettid() bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r2, 0xffffffffffffffff, 0x1e, 0x0, @val=@netkit={@void, @value=r2}}, 0x1c) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) utimensat(0xffffffffffffff9c, &(0x7f00000003c0)='.\x00', 0x0, 0x0) sysfs$2(0x2, 0x817fff, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0x8001}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}]}, 0x34}}, 0x0) 1m21.879022133s ago: executing program 1 (id=2204): socket$isdn_base(0x22, 0x3, 0x0) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000280)={'syztnl1\x00', &(0x7f0000000200)={'syztnl0\x00', 0x0, 0x2f, 0x0, 0x3, 0x1, 0x39, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private1, 0x8, 0x8000, 0x9c, 0x9}}) sendmsg$nl_route_sched_retired(r0, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@delchain={0x24, 0x65, 0x4, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, {0xb, 0xfff2}, {0xffef, 0xffe0}, {0x4, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x4040801}, 0x4000) syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r0, 0x800448d2, &(0x7f0000000540)={0x3, &(0x7f0000000380)=[{}, {@none}, {@none}]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb4e02000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setuid(0x0) r4 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000001b40)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000040), 0x100013, 0xa4a82) ioctl$LOOP_SET_FD(r5, 0x4c00, r4) r6 = syz_open_dev$loop(&(0x7f0000000000), 0x10, 0x4c0) ioctl$LOOP_SET_FD(r6, 0x4c00, r5) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x0, 0x10}, @l2cap_cid_signaling={{}, [@l2cap_conn_req={{0x2, 0x5}, {0x6, 0x4}}, @l2cap_disconn_rsp={{0x7, 0xb9}, {0x80ad, 0xffc4}}, @l2cap_disconn_req={{0x6, 0x5}, {0x5, 0x856}}]}}, 0x2) syz_usbip_server_init(0x1) 1m6.522219143s ago: executing program 33 (id=2204): socket$isdn_base(0x22, 0x3, 0x0) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000280)={'syztnl1\x00', &(0x7f0000000200)={'syztnl0\x00', 0x0, 0x2f, 0x0, 0x3, 0x1, 0x39, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private1, 0x8, 0x8000, 0x9c, 0x9}}) sendmsg$nl_route_sched_retired(r0, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@delchain={0x24, 0x65, 0x4, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, {0xb, 0xfff2}, {0xffef, 0xffe0}, {0x4, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x4040801}, 0x4000) syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r0, 0x800448d2, &(0x7f0000000540)={0x3, &(0x7f0000000380)=[{}, {@none}, {@none}]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb4e02000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setuid(0x0) r4 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000001b40)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000040), 0x100013, 0xa4a82) ioctl$LOOP_SET_FD(r5, 0x4c00, r4) r6 = syz_open_dev$loop(&(0x7f0000000000), 0x10, 0x4c0) ioctl$LOOP_SET_FD(r6, 0x4c00, r5) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x0, 0x10}, @l2cap_cid_signaling={{}, [@l2cap_conn_req={{0x2, 0x5}, {0x6, 0x4}}, @l2cap_disconn_rsp={{0x7, 0xb9}, {0x80ad, 0xffc4}}, @l2cap_disconn_req={{0x6, 0x5}, {0x5, 0x856}}]}}, 0x2) syz_usbip_server_init(0x1) 28.500751561s ago: executing program 2 (id=2283): bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000002600010025bd7000fcdbdf9715262400"], 0x14}}, 0x20006004) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0x2, &(0x7f0000000000)=0x100000b3, 0x4) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @multicast1}, 0x10) r4 = socket$inet6(0xa, 0x80002, 0x0) bind$inet6(r4, &(0x7f0000000200)={0xa, 0x4e20, 0x54bb7392, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x80ad}, 0x1c) r5 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r6, 0x4048aecb, &(0x7f0000000280)={0x8, 0x0, [{0x7, 0xffffffff, 0x1, 0xffffff89, 0x6, 0x6, 0x2}, {0x1, 0x4, 0x6, 0x8000, 0x27, 0x7, 0x9}, {0xb, 0x8, 0x3, 0x3ff, 0x7ffffdff, 0x8003, 0xffff}, {0x80000019, 0xe5f, 0x0, 0x7, 0xdf3, 0x6, 0x80000001}, {0x80000000, 0x2bb, 0x1, 0xd, 0x7, 0x7fd, 0x400}, {0x80000000, 0x100, 0x4, 0x6, 0x3, 0x2, 0x3}, {0x80000001, 0x2, 0x3, 0xfffffff7, 0xfffffff9, 0xff, 0x6}, {0xd, 0x0, 0x2, 0x7, 0x0, 0x5, 0x1c0}]}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/246, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0x73, &(0x7f00000001c0)=""/115}]}) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000340)={'hsr0\x00', 0x0}) r9 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$packet_add_memb(r7, 0x107, 0x1, &(0x7f0000000040)={r8, 0x1, 0x6, @local}, 0x10) sendmsg$nl_route_sched(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {0xc}, {0xfff3, 0x8}}}, 0x24}}, 0x20040000) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x0, 0x0, 0x0, 0x0, 0x1e, 0x0, 0x40f00, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfff}, 0x94) 28.2213288s ago: executing program 2 (id=2285): sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8) r0 = ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, &(0x7f0000000040)) syz_open_dev$dri(0x0, 0x4, 0x2c8000) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, 0x0) r1 = io_uring_setup(0x70c3, &(0x7f0000000400)={0x0, 0x2c45, 0x400, 0x3, 0x3b4}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r5, &(0x7f0000000400)={0x18, 0x0, {0x12, @link_local, 'wg0\x00'}}, 0x1e) r6 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r6, &(0x7f0000000100)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r6, 0x80047437, &(0x7f0000000080)) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r7, 0x40047438, &(0x7f0000000040)=0x2) ioctl$PPPIOCBRIDGECHAN(r7, 0x40047435, &(0x7f0000000200)=0x1) sendmmsg(r6, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x7c, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x31, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x12161, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0xb502c2eb43c80584) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f00000001c0)={{0x2000, 0x67001, 0x8, 0xff, 0xfb, 0x64, 0xc1, 0x5, 0x0, 0x2e, 0x48}, {0x5000, 0x3000, 0x0, 0x6, 0x40, 0x4, 0x7d, 0xd, 0x7, 0x3, 0x3}, {0xb000, 0x0, 0xb, 0x5, 0x83, 0x7, 0x40, 0x9, 0x5, 0xa7, 0x8, 0x7f}, {0x6000, 0x4000, 0xf, 0xc, 0x7f, 0x43, 0xb, 0xff, 0x8, 0xaf, 0xe, 0x11}, {0x4000, 0x8000000, 0xb, 0x1, 0x15, 0x7, 0xab, 0x8, 0x7, 0x83, 0xb4, 0x4}, {0x8000000, 0x2000, 0x8, 0x1c, 0x4, 0x6, 0x5, 0xa0, 0x80, 0x10, 0x0, 0xb}, {0x3000, 0xadd149b1f63e887, 0xc, 0x5, 0x7, 0x5, 0x6, 0x2, 0x5, 0x81, 0xff, 0x40}, {0x100000, 0x1000, 0xf, 0xd, 0x10, 0x7, 0xd, 0x34, 0xda, 0x1, 0xd9, 0x4}, {0x10000, 0x100}, {0xeeee8000, 0xf85}, 0x80000031, 0x0, 0x8080000, 0x2024, 0x2007, 0x1003, 0x100000, [0x6800000000000000, 0x2, 0x0, 0xe4c2]}) close_range(r1, 0xffffffffffffffff, 0x0) poll(&(0x7f0000000100)=[{r0, 0x200}, {0xffffffffffffffff, 0x8200}, {0xffffffffffffffff, 0x2}, {0xffffffffffffffff, 0x10}], 0x4, 0x1230) 27.121097545s ago: executing program 2 (id=2290): socket$igmp6(0xa, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) request_key(0x0, 0x0, 0x0, 0x0) r3 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r3, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x31) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x200000}, 0x1c) sendto$inet6(r4, &(0x7f00000001c0)='O', 0x1, 0x4000c01, &(0x7f0000000280)={0xa, 0x400, 0xfffffffe, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3}, 0x1c) shutdown(r4, 0x1) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0x4}, 0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7c, &(0x7f00000000c0), &(0x7f0000000180)=0x8) sendmmsg$inet6(r3, &(0x7f0000002940), 0x40000000000017d, 0x811) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r5, 0x4601, &(0x7f0000000380)={0x3c0, 0x78, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x8, 0x3, 0x1ff, 0x3d, 0x5, 0x3, 0x53, 0x202, 0x1, 0xc}) 24.320037732s ago: executing program 0 (id=2294): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0xfffffffd, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x22, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x9}, 0x80}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) socket$netlink(0x10, 0x3, 0x15) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) shutdown(r3, 0x1) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x600}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 24.263233906s ago: executing program 2 (id=2295): openat$sndseq(0xffffffffffffff9c, 0x0, 0xe0c81) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000000)={0x2, 0x0, 0x81, 0x10001, @vifc_lcl_addr=@dev={0xac, 0x14, 0x14, 0x2b}, @multicast1}, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_setup(0x231, &(0x7f0000000180)={0x0, 0xdd68, 0x2, 0x1}, &(0x7f0000000100), 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @vbi={0x6, 0x2, 0xc7a, 0x38414762, [0x3, 0x7], [0x2, 0x6], 0x2}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f00000004c0)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) r3 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000040), 0x40800, 0x0) ioctl$CDROMREADAUDIO(r3, 0x530e, &(0x7f0000000380)={@lba=0x7, 0x1, 0x0, 0x0}) bind$alg(r2, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) r4 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) recvmmsg(r4, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000340)=[{0x0}, {&(0x7f00000004c0)=""/168, 0xa8}, {0x0}, {&(0x7f00000000c0)=""/26, 0x1a}], 0x4}, 0x2000000}], 0x2, 0x101, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) connect$bt_l2cap(r5, &(0x7f0000000380)={0x1f, 0x1, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000480), 0xffffffffffffffff) 23.039238657s ago: executing program 2 (id=2296): openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_open_dev$vim2m(0x0, 0x2000000f5, 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) alarm(0x1000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r5, 0x894b, &(0x7f0000000180)) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x4, 0xfa11, 0xffffffff}, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r6, &(0x7f0000000900)=[{{&(0x7f0000000000)={0xa, 0x4e24, 0x9, @dev={0xfe, 0x80, '\x00', 0x14}, 0x6}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000280)='Q', 0x1}], 0x1}}, {{&(0x7f0000000040)={0xa, 0x4e23, 0xa2cc, @local, 0xf}, 0x1c, &(0x7f0000000880)=[{&(0x7f0000000080)='\\', 0x1}], 0x1}}], 0x2, 0x4000844) shutdown(r6, 0x1) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a20000000000a01080000000000000000050000090900010073797a310000000054000000030a03000000000000000000050000030900010073797a31000000000900030073797a3200000000280004800800014000000001080002400a7b1af2140003"], 0x9c}, 0x1, 0x0, 0x0, 0x24000144}, 0x20000050) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21.962292288s ago: executing program 2 (id=2297): ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0086426, &(0x7f0000000180)={0x1, &(0x7f0000000140)=[{0x0}]}) ioctl$DRM_IOCTL_LOCK(r0, 0x4008642a, &(0x7f0000000200)={r1, 0x16}) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x0, 0xfffffffe}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0xa) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x910ec27568a00e35, 0x40000002, 0x0) r5 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/card0/oss_mixer\x00', 0x2, 0x0) write$proc_mixer(r5, &(0x7f0000000280)=ANY=[@ANYBLOB="564f4c554d4520274c696e652720303030303030303030303030303030301d09c98414daa1880a000008"], 0x2a) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000000)={'lo\x00', &(0x7f0000000380)=@ethtool_drvinfo={0x3, "ae37a5fee7f817d0e7c80c5e531c83ef941fd0e94c6071d4265aeea524c7baf5", "0c7829aeda9446f0e8cf944fbac5a72f154a5c2529c572cceeee9c61aaded410", "0c65a946e6cd2bea44adc1d1ab71e142d0111c20ce139373e647e119edbb66a3", "fec3f28745c3a8a5d6ddb195c8e8ca612bf943471cf9c6af9e075ad4d09d59ea", "a0f17d77c0d227f7ee532514c328d9b827496ff8f10f3356079dfa3457ecfb14", "fbf7d34f9695832c057dfaf6", 0xa4d, 0xffff, 0x0, 0xffffffff, 0xfffffffa}}) syz_usbip_server_init(0x2) r7 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x40841, 0x2) r8 = landlock_create_ruleset(&(0x7f0000000140)={0x2000}, 0x10, 0x0) syz_open_procfs(0x0, &(0x7f0000001200)='net/snmp6\x00') landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r8, 0x1, &(0x7f0000000340)={0x2000, r7}, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000180)='./file1/file3\x00', 0xffffffffffffff9c, 0x0, 0x0) 20.536012713s ago: executing program 5 (id=2298): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x6, 0x2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x5}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getrlimit(0xc, &(0x7f0000000300)) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)={0x4a8, r4, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0x45c, 0x8, 0x0, 0x1, [{0x9c, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x50, 0x9, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "eff93d58460ea431f2cb4a6894ddb2834088d7445bf5afdd0619ce173f1db717"}]}, {0x4c, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "491bc0be1dc1f88092e741a88b64f6dd9218ad21b44b472e44f1d0807ee6675c"}]}, {0x370, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x9, 0x7, @empty, 0x3}}, @WGPEER_A_ALLOWEDIPS={0x328, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x3}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x2c}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}]}]}]}]}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x4a8}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) creat(&(0x7f0000000440)='./file0\x00', 0x0) syz_clone(0x1010000, &(0x7f0000000340), 0x0, 0x0, 0x0, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) sendfile(r5, r5, 0x0, 0x40008) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000005c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x1}}]}}) 20.085296636s ago: executing program 0 (id=2299): socket$inet_udplite(0x2, 0x2, 0x88) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x40}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() syz_emit_ethernet(0x2b, &(0x7f0000002200)={@random="8580f83288e1", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x1, 0x5, 0x1d, 0x67, 0x0, 0x0, 0x2, 0x0, @private=0xa010102, @multicast1}, {0x11, 0x81, 0x0, @remote, "e1"}}}}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r3 = socket$inet6(0xa, 0x3, 0x6) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, 0x0, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[], 0xd8}}, 0x0) setsockopt$inet6_buf(r3, 0x29, 0x39, &(0x7f0000000040)="ff02040000b5ffffffffffffffff2e2be82db1af00000000", 0x18) r6 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)}], 0x1}, 0x0) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e20, 0x1000040, @private1={0xfc, 0x1, '\x00', 0xa}, 0xae3c}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000002940)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}}], 0x62, 0x0) 19.434781082s ago: executing program 5 (id=2300): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000006c0)="0000000000aa303e97380e90231bdbdaf6a4bd77eabcd3866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9d00000c0a498396b28c7d1784d04aa38922721cb781608144284d90a72d7d2e3152d35bd216ed78ffb6e711b889cda0346ce9bca2e6e9e46b15980456c43a659f7c7e3e6e9e16e0de93100734d432ca57c27d3bde66b2791ccc02c85c43e8652f13258bd412174ea931ded39a9830e593761d91c56f637f0e1568ea66a15d9f0eba504ab3eb205fda13d1068e7692f8d00a6527788c134204d9c0d3eda07c2d92d2fb48887b6f71c6de43a923bbcaa9e3ac5bd82ac0ec", 0xf4}, {&(0x7f0000000d00)="0f198d5aa5caa1c55b84b414797cbdd4e8c576a921a070fc828060506683fd1106a961ac55b5b8ea3342ca7de5559ca2c14e05e42aed8ba14b2c78cb540f71a817d80fbf1945a046ebda494a8048a106a4d49d7f214735ada53397db3b203885ce39ee48d69465935eade21ce36e61826c52c82f038341d9bab5687c740ed3c18897094e7e1391eb84a4052e03c0c7c39ae86d454938f65e284620b99481c33d9f5e5b7a6c0d7548723f55b213c76be37f40c850c38e265758ebd8238257a146d6eced16fd658a784c928fea7a841db1a7fd6520442dae5fc0d3a3d3a5f16fcf6fe4f062ecdad7d0f3c6cd339339533c0ef28ad1e2729907094c3de93c1b1b00ad6df89507000000fb7565d3a8e9eaea020ed173c2179fb03e0944460989240a689c7fe795d310be4e7a6b778a903280dbf426b39c3603c49049980767e31edb997f59785184cbd7b9070400000073c745f71db0906cb51780f908fa61634af8ac85d9f04f3dff0a948e81cd3229a59aaeb00995358155343e3239588a0383e4df109d5ca24276d0d83a27d0e9bf681c1bbea12a6f3c20ad50f63430333bb327eb6ae32fe8809065bce26d2dc2fbb2b48d404637d61fd86852e0e1b6ccc6f75b1107aaa5f60ef45f94e953b3f213c3cb4ca4c716565078c666f84e1a99bb4cb5c7190648132f6ff1f6cb79b93f20752753c938da6241607a742361d995188b23cb4b8269e98e822585695962620673433748e476f7cc3e37db88639c525ff3a502c82c283b00aecfe7734ab369e1ed7c75e27a5a333641817baa3ea37844e20e6266c5095abf9d47ca5f8ad93f1a4d8795daec222ada00d65cf91425fae7939ceaa8d94ec1ab5082e1d251c27b3132119b350e81771f3733be232ffb90c03a818bf458aac3314007c3e35d5e4bed6b897608b01e7e26a54433e5f5c74a2ee3c2fc50067be05a677f122b7dba7010830b879a41b579d44158fbc84589ea05761d2d369853bea84dfb8081ed7b891dcb3bb3361534fdc5252e4964aed936ad2838e7af14fc65c7c1c6d44c6256f2462ae83cfd6a6b2651da607fe79d345e5080098e9e6e7482cc5c267e00d8d09dcde70b60fe6220fe953054720185010000f1885ecc2f106b66cd99131523c99f6102ddd7403791b3a7ac59b256cc4c938fe01740ae4f19b5204ca305b1666b0c2a7e5015d6d530995843adfbac395430", 0x35d}], 0x2}, 0x0) setsockopt$RDS_CONG_MONITOR(r1, 0x114, 0x6, &(0x7f0000000680)=0x1, 0x4) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x30}}, 0x40) mkdirat(0xffffffffffffff9c, 0x0, 0x0) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x15) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0xfffffffd, 0xb6}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000040)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r3, 0x47f6, 0x0, 0x4, 0x0, 0x0) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000440)={0x0, 0x48000000, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="ad43000000f45400000009"], 0x14}}, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x100000}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6a9}, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, 0x0) r8 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$FUSE(r8, &(0x7f0000007fc0)={0x2020}, 0x2020) 17.920414299s ago: executing program 5 (id=2302): r0 = openat$ptp1(0xffffff9c, &(0x7f0000000040), 0x101000, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4048084) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x3}}, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000), 0xfffffecc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socket$inet6(0xa, 0x1, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) setresuid(0xee01, 0x0, 0x0) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r4, 0x0, 0x8, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f00000000c0)={0x1, 0x5d5c, 0x9}) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000001, 0x13, r5, 0x100300) stat(0x0, &(0x7f0000003d00)) ioctl$PTP_SYS_OFFSET_PRECISE(r0, 0xc0403d08, 0x0) 17.731747816s ago: executing program 0 (id=2303): socket$kcm(0x10, 0x2, 0x0) r0 = syz_open_dev$dvb_frontend(&(0x7f00000002c0), 0x0, 0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x6, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x395, 0xffffffffffffffff, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0xffffffff, 0x5}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x2002c810) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e0b080510"], 0xe) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2000000000002) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000000500)={0x10, 0x0, 0x25dfdbfc, 0x2000000}, 0xc) r4 = syz_io_uring_setup(0x18d7, &(0x7f0000000540)={0x0, 0x0, 0x2, 0x0, 0xc}, &(0x7f0000ffe000), &(0x7f0000ffe000)) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r4, 0x2, &(0x7f0000000180), 0xfe) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)={0x28, 0x40, 0x107, 0xfffffffe, 0x1, {0x1, 0x7c}, [@nested={0x4, 0x102}, @nested={0x4, 0x1}, @nested={0xc, 0x2, 0x0, 0x1, [@typed={0x8, 0x18, 0x0, 0x0, @u32=0x20000}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) socket$inet_sctp(0x2, 0x1, 0x84) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0}, 0x28) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={0xffffffffffffffff, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$FE_SET_PROPERTY(r0, 0x40086f52, &(0x7f00000000c0)={0x20, &(0x7f0000000380)=[{0x43, '\x00', @data=0xff, 0x1}]}) 16.764043359s ago: executing program 4 (id=2304): socket$inet6_mptcp(0xa, 0x1, 0x106) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0xc0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000007d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x1fffffffffffffcd, 0x0, 0x0, 0x2010000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r1) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000540)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000680)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="10c32900000000dbdf253700000008005700020000000800342b675bd3758e792c34cc5bf858e26599e2cb3688532661feb890f64900270002000000a75f59d89d3639214e59f560db111da535aced570a3768b9995bbd315f65ade2"], 0x2c}, 0x1, 0x0, 0x0, 0x4004000}, 0x40010) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f00000005c0)) rseq(&(0x7f0000000400)={0x0, 0x0, 0x0, 0x4}, 0x20, 0x0, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='oom_adj\x00') read$FUSE(r3, 0x0, 0x0) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="1400000016000b63d25a80648c25940121", 0x11}, {&(0x7f0000000280)="e26248", 0x3}], 0x2}, 0x48050) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0xf, 0x491, 0x3, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4000c00) 12.634887533s ago: executing program 4 (id=2305): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') socket$inet6_sctp(0xa, 0x5, 0x84) timer_settime(0x0, 0x0, 0x0, &(0x7f0000000280)) socket$nl_route(0x10, 0x3, 0x0) r4 = add_key$keyring(&(0x7f0000000400), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) r5 = add_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$search(0xa, r5, &(0x7f0000000080)='user\x00', &(0x7f0000000180)={'syz', 0x3}, r4) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000003440)={0x0, 0x0, &(0x7f0000003400)={&(0x7f0000000340)=ANY=[@ANYBLOB="14002cbd7000fddb601f6da9549904e8a4e989f04b53c65e0126202e4f"], 0x14}}, 0x20040854) syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x14}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xbc}, 0x1, 0x0, 0x0, 0x4}, 0x40050) 12.202145494s ago: executing program 5 (id=2306): socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_emit_vhci(0x0, 0x27) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x802, 0x0) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB='`'], 0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) setrlimit(0xc, &(0x7f0000000200)={0x3, 0x4}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x800) recvmmsg(r1, &(0x7f0000007700), 0x318, 0xfc0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000000ac0)={'filter\x00', 0x102, 0x4, 0x404, 0x0, 0x10c, 0x10c, 0x324, 0x324, 0x324, 0x4, 0x0, {[{{@uncond, 0xbc, 0x10c}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@link_local, @empty, @remote, @multicast1}}}, {{@uncond, 0xbc, 0x10c}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@broadcast, @mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0xb}, @multicast2, @empty, 0x9, 0xffffffff}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {@empty, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xff]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'batadv_slave_1\x00', 'ipvlan1\x00'}, 0xbc, 0x10c}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@random="e9fb760d26c0", @multicast1, @broadcast}}}], {{'\x00', 0xbc, 0xe0}, {0x24}}}}, 0x450) r3 = socket(0x40000000015, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r3, 0x114, 0x6, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0xa0}, 0x1, 0x0, 0x0, 0x40070}, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$rfkill(0xffffff9c, &(0x7f0000000040), 0x182, 0x0) openat$nci(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x48) 8.96567041s ago: executing program 0 (id=2307): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0xfffffffd, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x22, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x9}, 0x80}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) socket$netlink(0x10, 0x3, 0x15) pipe(0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) shutdown(r3, 0x1) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x600}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 7.611799714s ago: executing program 4 (id=2308): memfd_create(&(0x7f0000000040)='\x02A\xbb\xcc\x96\x0e\x00\x00\x00\x00\x00\x00', 0x6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r2, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r2, 0x114, 0x1, &(0x7f0000000100), 0x10) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}}, 0x0) recvmmsg(r3, &(0x7f0000001b40)=[{}], 0x1, 0x0, 0x0) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) chdir(&(0x7f0000000140)='./bus\x00') r4 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r4, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x4, 0x3, 0x5, 0x6, 0x3, 0x1, {0x0, 0x9, 0x20ff, 0x1, 0x89, 0xd615, 0x9, 0x7fffffff, 0xfffffffe, 0x8000, 0x0, 0x0, 0x0, 0x3ff, 0x1}}, {0x0, 0x13}}}, 0xa0) sendfile(r4, r4, &(0x7f0000000080), 0x7f03) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c0000001500010300000000000000000c00000008000400"], 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x4000000) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, 0x0) 7.276102562s ago: executing program 5 (id=2309): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x6, 0x2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x5}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getrlimit(0xc, &(0x7f0000000300)) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)={0x4a8, r4, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0x45c, 0x8, 0x0, 0x1, [{0x9c, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x50, 0x9, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "eff93d58460ea431f2cb4a6894ddb2834088d7445bf5afdd0619ce173f1db717"}]}, {0x4c, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "491bc0be1dc1f88092e741a88b64f6dd9218ad21b44b472e44f1d0807ee6675c"}]}, {0x370, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x9, 0x7, @empty, 0x3}}, @WGPEER_A_ALLOWEDIPS={0x328, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x3}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x2c}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}]}]}]}]}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x4a8}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) creat(&(0x7f0000000440)='./file0\x00', 0x0) syz_clone(0x1010000, &(0x7f0000000340), 0x0, 0x0, 0x0, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) sendfile(r5, r5, 0x0, 0x40008) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000005c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x1}}]}}) 5.846564442s ago: executing program 34 (id=2297): ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0086426, &(0x7f0000000180)={0x1, &(0x7f0000000140)=[{0x0}]}) ioctl$DRM_IOCTL_LOCK(r0, 0x4008642a, &(0x7f0000000200)={r1, 0x16}) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x0, 0xfffffffe}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0xa) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x910ec27568a00e35, 0x40000002, 0x0) r5 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/card0/oss_mixer\x00', 0x2, 0x0) write$proc_mixer(r5, &(0x7f0000000280)=ANY=[@ANYBLOB="564f4c554d4520274c696e652720303030303030303030303030303030301d09c98414daa1880a000008"], 0x2a) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000000)={'lo\x00', &(0x7f0000000380)=@ethtool_drvinfo={0x3, "ae37a5fee7f817d0e7c80c5e531c83ef941fd0e94c6071d4265aeea524c7baf5", "0c7829aeda9446f0e8cf944fbac5a72f154a5c2529c572cceeee9c61aaded410", "0c65a946e6cd2bea44adc1d1ab71e142d0111c20ce139373e647e119edbb66a3", "fec3f28745c3a8a5d6ddb195c8e8ca612bf943471cf9c6af9e075ad4d09d59ea", "a0f17d77c0d227f7ee532514c328d9b827496ff8f10f3356079dfa3457ecfb14", "fbf7d34f9695832c057dfaf6", 0xa4d, 0xffff, 0x0, 0xffffffff, 0xfffffffa}}) syz_usbip_server_init(0x2) r7 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x40841, 0x2) r8 = landlock_create_ruleset(&(0x7f0000000140)={0x2000}, 0x10, 0x0) syz_open_procfs(0x0, &(0x7f0000001200)='net/snmp6\x00') landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r8, 0x1, &(0x7f0000000340)={0x2000, r7}, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000180)='./file1/file3\x00', 0xffffffffffffff9c, 0x0, 0x0) 5.798424182s ago: executing program 4 (id=2311): memfd_create(&(0x7f0000000040)='\x02A\xbb\xcc\x96\x0e\x00\x00\x00\x00\x00\x00', 0x6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r2 = socket$rds(0x15, 0x5, 0x0) setsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000000240)={0x0, 0x9}, 0x8) bind$rds(r2, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r2, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r2, 0x114, 0x1, &(0x7f0000000100), 0x10) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}}, 0x0) recvmmsg(r3, &(0x7f0000001b40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) chdir(&(0x7f0000000140)='./bus\x00') write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x4, 0x3, 0x5, 0x6, 0x3, 0x1, {0x0, 0x9, 0x20ff, 0x1, 0x89, 0xd615, 0x9, 0x7fffffff, 0xfffffffe, 0x8000, 0x0, 0x0, 0x0, 0x3ff, 0x1}}, {0x0, 0x13}}}, 0xa0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000080), 0x7f03) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c0000001500010300000000000000000c00000008000400"], 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x4000000) 5.465033052s ago: executing program 0 (id=2312): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x2}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xd}]}}}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xa8}, 0x1, 0x0, 0x0, 0x4040054}, 0x0) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='xfs\x00', 0x2208004, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x2010042, &(0x7f00000000c0)={[{@subsystem='cpu'}, {@subsystem='memory'}, {@xattr}]}) mount(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x40078, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0) socket$kcm(0x2, 0x2, 0x0) unshare(0x40020000) 3.703635943s ago: executing program 4 (id=2313): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000440)={0x8, 0x8b}, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e27}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) open$dir(0x0, 0x3917c1, 0x11) fspick(0xffffffffffffffff, &(0x7f0000000240)='./file0/file0\x00', 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r4, 0x405c5503, &(0x7f0000000100)={{0x5, 0x0, 0x0, 0x5}, 'syz1\x00'}) ioctl$UI_SET_LEDBIT(r4, 0x40045569, 0x4) ioctl$UI_DEV_CREATE(r4, 0x5501) ioctl$UI_DEV_DESTROY(r4, 0x5502) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000000)={@remote, 0x4, 0x0, 0x0, 0x6}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f00000000c0)={@remote={0xfe, 0x80, '\x00', 0xffffffffffffffff}}, 0x20) preadv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f00000001c0)=""/96, 0x87}], 0x1, 0x7, 0xb) socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect(0x5, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x3c, 0x46, 0x90, 0x20, 0x50d, 0x115, 0x133, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xd0, 0x0, [{{0x9, 0x4, 0xb0, 0x1, 0x2, 0xae, 0x29, 0x4f, 0x0, [], [{{0x9, 0x5, 0xd, 0xc, 0x10}}, {{0x9, 0x5, 0x82, 0x0, 0x18, 0x0, 0x0, 0x20}}]}}]}}]}}, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x3c1, 0x3, 0x308, 0x0, 0x940c, 0x3002, 0x0, 0x2c0, 0x238, 0x3d8, 0x3d8, 0x238, 0x3d8, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @private1, [0xff, 0xffffff00, 0xffffffff, 0xffffff00], [0xffffffff, 0xffffffff, 0xff000000, 0xff], 'geneve0\x00', 'veth1_to_bridge\x00', {}, {0xff}, 0x84, 0x81, 0x2, 0x1d}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@hl={{0x28}, {0x1, 0x7}}, @common=@inet=@multiport={{0x50}, {0x1, 0xb, [0x4e24, 0x4e22, 0x4e23, 0x4e22, 0x4e24, 0x4e24, 0x4e21, 0x4e22, 0x4e20, 0x4e20, 0x4e23, 0x4e24, 0x4e22, 0x4e22, 0x4e21], [0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x10]}}]}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0xff, 0x200, 0x2}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'veth1_to_team\x00', {0x12}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x368) syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) 1.791460935s ago: executing program 5 (id=2314): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x3, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x4040001) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_open_dev$sg(0x0, 0x0, 0x5) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x11, @rand_addr, 0x0, 0x0, 'none\x00', 0x0, 0xfffffffc}, 0x2c) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000000), &(0x7f0000000180)=0x68) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x2c240, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f0000000440)={r4, 0x2000, {0x0, 0x0, 0x0, 0x8, 0x7fffffffffffffff, 0x0, 0x0, 0x0, 0x1c, "339f020bbe78b39843d601010000000000080d0ec0c1b4e9b1c4369d03741250ceaac50104000041dd17c18e8438ef2a565ef1e833236500", "a1163939c787a16c1ca43f8539f3d3289737f0374c72a964a0193b3e8772fd29f35239d200", "24431a5e77a68e174f000300ffffffffff0fe200"}}) ioctl$LOOP_CHANGE_FD(r5, 0x4c06, r4) r6 = openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$UI_DEV_SETUP(r6, 0x405c5503, 0x0) madvise(&(0x7f0000773000/0x4000)=nil, 0x4000, 0xd) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00f7ffffff1e00ff130012800b0001006261746164760000", @ANYRES32], 0x3c}}, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) 1.098131715s ago: executing program 0 (id=2315): syz_open_dev$radio(&(0x7f0000000080), 0x1, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000040)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x2, 0xb3, &(0x7f0000000140)=""/179, 0x41100, 0x7b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x38}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000300), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x2000)=nil, 0x2000, &(0x7f0000000000)) fsmount(0xffffffffffffffff, 0x1, 0x0) r3 = syz_io_uring_setup(0x10f, &(0x7f00000000c0)={0x0, 0x211a, 0x80, 0x4, 0x306}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000040)=0xffefffdc, 0x0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @xdp}, 0x94) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='>'], 0x38}}, 0x80) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r6, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r6, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x21, 0x3, 0xffffffffffffffff, 0x0}) io_uring_register$IORING_REGISTER_FILES(r3, 0x2, &(0x7f00000002c0)=[0xffffffffffffffff], 0x57) io_uring_enter(r3, 0x3516, 0xc2de, 0x8, 0x0, 0x0) 0s ago: executing program 4 (id=2316): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x20, &(0x7f0000001080)="0bbb268dd6ffa80800000000002a16000000210d0000aaa8fa0172429a9380d41000000000000000290000003b000000", 0x30) kernel console output (not intermixed with test programs): 248][T19156] cgroup: fork rejected by pids controller in /syz0 [ 683.020559][T19141] vhci_hcd: connection reset by peer [ 683.025240][ T13] vhci_hcd vhci_hcd.3: stop threads [ 683.027531][ T13] vhci_hcd vhci_hcd.3: release socket [ 683.029830][ T13] vhci_hcd vhci_hcd.3: disconnect device [ 683.773922][T19371] kAFS: No cell specified [ 684.669880][ T40] audit: type=1326 audit(2000000086.229:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19376 comm="syz.2.1548" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709ef6c code=0x7ffc0000 [ 684.708512][ T40] audit: type=1326 audit(2000000086.229:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19376 comm="syz.2.1548" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709ef6c code=0x7ffc0000 [ 684.720265][ T40] audit: type=1326 audit(2000000086.239:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19376 comm="syz.2.1548" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf709ef6c code=0x7ffc0000 [ 684.730434][ T40] audit: type=1326 audit(2000000086.239:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19376 comm="syz.2.1548" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709ef6c code=0x7ffc0000 [ 684.739392][ T40] audit: type=1326 audit(2000000086.239:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19376 comm="syz.2.1548" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709ef6c code=0x7ffc0000 [ 684.748494][ T40] audit: type=1326 audit(2000000086.239:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19376 comm="syz.2.1548" exe="/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf709ef6c code=0x7ffc0000 [ 684.757896][ T40] audit: type=1326 audit(2000000086.719:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19376 comm="syz.2.1548" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709ef6c code=0x7ffc0000 [ 684.767622][ T40] audit: type=1326 audit(2000000086.719:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19376 comm="syz.2.1548" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709ef6c code=0x7ffc0000 [ 686.686473][ T24] usb 44-1: device descriptor read/8, error -110 [ 687.074444][ T24] usb usb44-port1: attempt power cycle [ 687.173753][ T10] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 687.343677][ T10] usb 8-1: Using ep0 maxpacket: 16 [ 687.347559][ T10] usb 8-1: config 0 has no interfaces? [ 687.351119][ T10] usb 8-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 687.354890][ T10] usb 8-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 687.357569][ T10] usb 8-1: Manufacturer: syz [ 687.360765][ T10] usb 8-1: config 0 descriptor?? [ 687.654277][ T24] usb usb44-port1: unable to enumerate USB device [ 687.889330][T19525] kAFS: No cell specified [ 688.241300][T19530] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 688.243454][T19530] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 688.255936][T19530] vhci_hcd vhci_hcd.0: Device attached [ 688.479970][T19531] vhci_hcd: connection closed [ 688.480273][ T13] vhci_hcd vhci_hcd.1: stop threads [ 688.485429][ T13] vhci_hcd vhci_hcd.1: release socket [ 688.490292][ T13] vhci_hcd vhci_hcd.1: disconnect device [ 688.543997][ T24] usb 40-1: enqueue for inactive port 0 [ 689.044769][ T24] usb usb40-port1: attempt power cycle [ 689.065699][ T5921] usb 8-1: USB disconnect, device number 9 [ 689.434896][T19656] qnx6: unable to read the first superblock [ 689.806327][ T24] usb usb40-port1: unable to enumerate USB device [ 690.527878][ T1414] ieee802154 phy0 wpan0: encryption failed: -22 [ 690.530668][ T1414] ieee802154 phy1 wpan1: encryption failed: -22 [ 691.480840][T19785] IPVS: Error connecting to the multicast addr [ 691.513770][T19788] kAFS: No cell specified [ 692.175589][T19795] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 692.178242][T19795] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 692.181228][T19795] vhci_hcd vhci_hcd.0: Device attached [ 692.353826][ T6016] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 692.413694][ T6016] usb 39-1: new full-speed USB device number 5 using vhci_hcd [ 692.479711][T19796] vhci_hcd: connection reset by peer [ 692.483912][ T13] vhci_hcd vhci_hcd.1: stop threads [ 692.488749][ T13] vhci_hcd vhci_hcd.1: release socket [ 692.495700][ T13] vhci_hcd vhci_hcd.1: disconnect device [ 694.769178][T19827] random: crng reseeded on system resumption [ 698.458424][ T6016] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 698.574237][T19877] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1591'. [ 699.240941][T19997] qnx6: unable to read the first superblock [ 700.251008][T20012] qnx6: unable to read the first superblock [ 703.557000][T20151] /dev/nullb0: Can't open blockdev [ 711.212917][T20744] fuse: Unknown parameter 'gro00000000000000000000' [ 712.611540][T20752] bridge1: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 715.803708][ T40] audit: type=1326 audit(2000000117.539:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20975 comm="syz.3.1641" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf70cef6c code=0x0 [ 716.476246][T21083] Cannot find add_set index 2 as target [ 718.194785][T21093] input: syz0 as /devices/virtual/input/input6 [ 718.294865][T21093] pimreg3: entered allmulticast mode [ 718.459376][ T63] Bluetooth: hci2: unexpected event for opcode 0x2031 [ 719.744653][ T40] audit: type=1804 audit(2000000121.719:316): pid=21210 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1648" name="/newroot/426/bus/bus" dev="overlay" ino=2367 res=1 errno=0 [ 719.765124][ T40] audit: type=1804 audit(2000000121.729:317): pid=21210 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.1648" name="/newroot/426/bus/bus" dev="overlay" ino=2367 res=1 errno=0 [ 719.775075][ T40] audit: type=1800 audit(2000000121.729:318): pid=21210 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1648" name="bus" dev="overlay" ino=2367 res=0 errno=0 [ 720.165550][ T13] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 720.177300][ T13] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 720.181967][ T13] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 720.224932][ T13] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 723.072349][T21450] netlink: 'syz.0.1659': attribute type 1 has an invalid length. [ 723.103744][ T24] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 723.255494][ T24] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 723.259783][ T24] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 723.266342][ T24] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 723.270162][ T24] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 723.276179][ T24] usb 8-1: Product: syz [ 723.278075][ T24] usb 8-1: Manufacturer: syz [ 723.280062][ T24] usb 8-1: SerialNumber: syz [ 723.284737][ T24] usb 8-1: config 0 descriptor?? [ 723.291500][T21454] bond1: (slave geneve2): making interface the new active one [ 723.294362][T21454] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 723.298589][T21454] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 723.301876][ T59] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 20004 - 0 [ 723.305324][ T59] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 20004 - 0 [ 723.308177][ T59] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 20004 - 0 [ 723.310966][ T59] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 20004 - 0 [ 726.066862][ T34] usb 8-1: USB disconnect, device number 10 [ 728.402442][T21919] qnx6: unable to read the first superblock [ 728.533764][ T24] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 728.697601][ T24] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 728.701085][ T24] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 728.723187][ T24] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 728.726195][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 728.728758][ T24] usb 6-1: Product: syz [ 728.730288][ T24] usb 6-1: Manufacturer: syz [ 728.731799][ T24] usb 6-1: SerialNumber: syz [ 728.744840][ T24] usb 6-1: config 0 descriptor?? [ 730.202644][T22047] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 730.205397][T22047] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 730.216877][T22047] vhci_hcd vhci_hcd.0: Device attached [ 730.327952][T22047] netlink: 'syz.0.1683': attribute type 12 has an invalid length. [ 730.483849][ T24] usb 38-1: SetAddress Request (46) to port 0 [ 730.486705][ T24] usb 38-1: new SuperSpeed USB device number 46 using vhci_hcd [ 730.994285][T22048] vhci_hcd: connection reset by peer [ 730.996828][ T12] vhci_hcd vhci_hcd.0: stop threads [ 730.999242][ T12] vhci_hcd vhci_hcd.0: release socket [ 731.001897][ T12] vhci_hcd vhci_hcd.0: disconnect device [ 731.053936][T22060] IPv6: NLM_F_CREATE should be specified when creating new route [ 732.555677][ T34] usb 6-1: USB disconnect, device number 7 [ 735.564261][ T24] usb 38-1: device descriptor read/8, error -110 [ 735.954660][ T24] usb usb38-port1: attempt power cycle [ 738.182900][ T24] usb usb38-port1: unable to enumerate USB device [ 738.281428][ T63] Bluetooth: unknown link type 128 [ 738.720979][T22503] qnx6: unable to read the first superblock [ 739.290803][T22509] overlayfs: failed to clone upperpath [ 739.694679][ T5971] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 739.733324][ T10] libceph: connect (1)[c::]:6789 error -101 [ 739.743873][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 739.769382][T22520] ceph: No mds server is up or the cluster is laggy [ 739.919013][ T5971] usb 8-1: config 0 has an invalid descriptor of length 84, skipping remainder of the config [ 739.945093][ T5971] usb 8-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 739.950388][ T5971] usb 8-1: New USB device found, idVendor=2040, idProduct=5530, bcdDevice=a8.82 [ 739.958249][ T5971] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 740.021379][ T5971] usb 8-1: config 0 descriptor?? [ 740.355727][ T40] audit: type=1326 audit(2000000142.389:319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22512 comm="syz.3.1711" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cef6c code=0x7ffc0000 [ 740.362229][T22629] tipc: Enabling of bearer rejected, failed to enable media [ 740.365592][ T40] audit: type=1326 audit(2000000142.389:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22512 comm="syz.3.1711" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf70cef6c code=0x7ffc0000 [ 740.367842][ T63] Bluetooth: hci2: command 0x0406 tx timeout [ 740.382686][ T40] audit: type=1326 audit(2000000142.389:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22512 comm="syz.3.1711" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cef6c code=0x7ffc0000 [ 740.410888][ T40] audit: type=1326 audit(2000000142.389:322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22512 comm="syz.3.1711" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf70cef6c code=0x7ffc0000 [ 740.449867][ T40] audit: type=1326 audit(2000000142.389:323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22512 comm="syz.3.1711" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cef6c code=0x7ffc0000 [ 740.626607][ T40] audit: type=1326 audit(2000000142.389:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22512 comm="syz.3.1711" exe="/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf70cef6c code=0x7ffc0000 [ 740.660855][ T40] audit: type=1326 audit(2000000142.389:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22512 comm="syz.3.1711" exe="/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf7205b6b code=0x7ffc0000 [ 740.683305][ T40] audit: type=1326 audit(2000000142.389:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22512 comm="syz.3.1711" exe="/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf7205b6b code=0x7ffc0000 [ 740.834819][ T40] audit: type=1326 audit(2000000142.389:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22512 comm="syz.3.1711" exe="/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf7205b6b code=0x7ffc0000 [ 740.856481][ T40] audit: type=1326 audit(2000000142.389:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22512 comm="syz.3.1711" exe="/syz-executor" sig=0 arch=40000003 syscall=6 compat=1 ip=0xf7205b6b code=0x7ffc0000 [ 740.992112][T22634] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1715'. [ 742.549862][ T5971] usb 8-1: string descriptor 0 read error: -71 [ 742.552736][ T5971] smsusb:smsusb_probe: board id=8, interface number 0 [ 742.573877][ T5971] smsusb:smsusb_probe: Device initialized with return code -19 [ 742.649989][ T5971] usb 8-1: USB disconnect, device number 11 [ 742.686243][T22753] qnx6: unable to read the first superblock [ 742.791053][T22763] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1721'. [ 742.800703][T22763] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1721'. [ 742.844001][T22763] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1721'. [ 742.856721][T22763] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1721'. [ 742.925638][T22763] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1721'. [ 742.944736][T22763] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1721'. [ 744.058517][T22777] netlink: 'syz.0.1724': attribute type 5 has an invalid length. [ 744.064931][T22777] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1724'. [ 744.162563][T22760] Process accounting resumed [ 744.760589][T22782] netlink: 'syz.3.1726': attribute type 10 has an invalid length. [ 748.812201][T22918] qnx6: unable to read the first superblock [ 751.997211][ T1414] ieee802154 phy0 wpan0: encryption failed: -22 [ 752.000409][ T1414] ieee802154 phy1 wpan1: encryption failed: -22 [ 753.651253][T23159] qnx6: unable to read the first superblock [ 754.294630][ T5971] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 754.600448][ T5971] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 754.617613][ T5971] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 754.652368][ T5971] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 754.662370][ T5971] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 754.677737][ T5971] usb 6-1: Product: syz [ 754.681621][ T5971] usb 6-1: Manufacturer: syz [ 754.684926][ T5971] usb 6-1: SerialNumber: syz [ 754.703876][ T5971] usb 6-1: config 0 descriptor?? [ 756.167516][T23280] binder: 23275:23280 ioctl 4018620d 0 returned -22 [ 758.584693][ T59] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 758.603410][ T59] netdevsim netdevsim0 eth0: unset [1, 1] type 2 family 0 port 20004 - 0 [ 758.658979][ T59] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 758.662994][ T59] netdevsim netdevsim0 eth1: unset [1, 1] type 2 family 0 port 20004 - 0 [ 758.673798][ T59] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 758.680839][ T59] netdevsim netdevsim0 eth2: unset [1, 1] type 2 family 0 port 20004 - 0 [ 758.703703][ T59] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 758.707573][ T59] netdevsim netdevsim0 eth3: unset [1, 1] type 2 family 0 port 20004 - 0 [ 759.068790][T23402] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1752'. [ 759.150227][T23402] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1752'. [ 759.421343][T23402] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1752'. [ 759.575508][T23402] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1752'. [ 759.927346][T23397] Process accounting resumed [ 760.326418][T23420] batadv_slave_0: entered promiscuous mode [ 762.602741][T23288] syz.3.1748 (23288) used greatest stack depth: 18584 bytes left [ 762.922696][T23436] 8021q: adding VLAN 0 to HW filter on device bond0 [ 762.942755][T23436] 8021q: adding VLAN 0 to HW filter on device team0 [ 763.164083][T23436] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 764.527018][T23452] qnx6: unable to read the first superblock [ 767.289429][ T34] usb 6-1: USB disconnect, device number 8 [ 770.648420][T23641] vcan0: tx drop: invalid da for name 0x0000000000000001 [ 770.717956][T23617] syz.3.1772 (23617): drop_caches: 2 [ 776.862428][T23812] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1781'. [ 781.046454][T23841] 8021q: adding VLAN 0 to HW filter on device bond0 [ 781.052344][T23841] 8021q: adding VLAN 0 to HW filter on device team0 [ 783.173856][T23841] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 784.376501][T24054] ubi0: attaching mtd0 [ 784.399456][T24054] ubi0: scanning is finished [ 784.416366][T24054] ubi0: empty MTD device detected [ 784.714436][T24054] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 784.720701][T24054] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 784.730218][T24054] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 784.735503][T24054] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 784.739918][T24054] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 784.745912][T24054] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 784.751461][T24054] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 1631655494 [ 784.759492][T24054] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 784.772179][T24056] ubi0: background thread "ubi_bgt0d" started, PID 24056 [ 787.469675][ T10] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 787.557673][T24180] syz.0.1797 invoked oom-killer: gfp_mask=0x2dc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 787.579222][T24180] CPU: 2 UID: 0 PID: 24180 Comm: syz.0.1797 Tainted: G L syzkaller #0 PREEMPT(full) [ 787.579250][T24180] Tainted: [L]=SOFTLOCKUP [ 787.579256][T24180] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 787.579267][T24180] Call Trace: [ 787.579273][T24180] [ 787.579279][T24180] dump_stack_lvl+0x100/0x190 [ 787.579311][T24180] dump_header+0xfb/0x606 [ 787.579331][T24180] oom_kill_process.cold+0xd/0x330 [ 787.579350][T24180] out_of_memory+0x1256/0x14f0 [ 787.579378][T24180] ? __pfx_out_of_memory+0x10/0x10 [ 787.579409][T24180] __alloc_frozen_pages_noprof+0x233d/0x2ba0 [ 787.579445][T24180] ? alloc_pages_bulk_noprof+0x811/0x1490 [ 787.579469][T24180] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 787.579498][T24180] ? __vmalloc_node_range_noprof+0x11eb/0x1530 [ 787.579518][T24180] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 787.579552][T24180] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 787.579580][T24180] ? cpuset_nodemask_valid_mems_allowed+0x5f/0x80 [ 787.579605][T24180] ? policy_nodemask+0xed/0x4f0 [ 787.579636][T24180] alloc_pages_mpol+0x1fb/0x550 [ 787.579671][T24180] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 787.579707][T24180] alloc_pages_noprof+0x131/0x390 [ 787.579735][T24180] __vmalloc_node_range_noprof+0xa1d/0x1530 [ 787.579764][T24180] ? packet_set_ring+0xb14/0x1860 [ 787.579795][T24180] ? policy_nodemask+0xed/0x4f0 [ 787.579822][T24180] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 787.579845][T24180] ? alloc_pages_mpol+0x25a/0x550 [ 787.579875][T24180] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 787.579901][T24180] ? trace_kmalloc+0x101/0x130 [ 787.583417][T24180] ? packet_set_ring+0xb14/0x1860 [ 787.583455][T24180] __vmalloc_node_noprof+0xad/0xf0 [ 787.583476][T24180] ? packet_set_ring+0xb14/0x1860 [ 787.583502][T24180] packet_set_ring+0xb14/0x1860 [ 787.583537][T24180] packet_setsockopt+0x11f8/0x3580 [ 787.583561][T24180] ? __pfx___might_resched+0x10/0x10 [ 787.583603][T24180] ? __lock_acquire+0x4a5/0x2630 [ 787.583627][T24180] ? __pfx_packet_setsockopt+0x10/0x10 [ 787.583656][T24180] ? aa_sk_perm+0x309/0xaa0 [ 787.583689][T24180] ? find_held_lock+0x2b/0x80 [ 787.583718][T24180] ? aa_sock_opt_perm+0xfe/0x1b0 [ 787.583741][T24180] ? __pfx_packet_setsockopt+0x10/0x10 [ 787.583769][T24180] do_sock_setsockopt+0xf3/0x1d0 [ 787.583796][T24180] __sys_setsockopt+0x119/0x190 [ 787.583818][T24180] __ia32_sys_setsockopt+0xbc/0x160 [ 787.583835][T24180] ? __do_fast_syscall_32+0x94/0x8c0 [ 787.583856][T24180] ? lockdep_hardirqs_on+0x78/0x100 [ 787.583875][T24180] __do_fast_syscall_32+0xe3/0x8c0 [ 787.583896][T24180] do_fast_syscall_32+0x32/0x70 [ 787.583915][T24180] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 787.583964][T24180] RIP: 0023:0xf70aef6c [ 787.583981][T24180] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 58 b8 77 00 00 00 cd 80 0f 0b 8d b6 00 00 00 00 b8 ad [ 787.583999][T24180] RSP: 002b:00000000f503850c EFLAGS: 00000292 ORIG_RAX: 000000000000016e [ 787.584018][T24180] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000107 [ 787.584029][T24180] RDX: 0000000000000005 RSI: 00000000800000c0 RDI: 000000000000001c [ 787.584041][T24180] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 787.584051][T24180] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 787.584062][T24180] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 787.584087][T24180] [ 787.903023][T24180] Mem-Info: [ 787.904532][ T10] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 787.905271][T24180] active_anon:16417 inactive_anon:17214 isolated_anon:0 [ 787.905271][T24180] active_file:11927 inactive_file:3875 isolated_file:0 [ 787.905271][T24180] unevictable:1768 dirty:19 writeback:0 [ 787.905271][T24180] slab_reclaimable:6883 slab_unreclaimable:62221 [ 787.905271][T24180] mapped:37423 shmem:17956 pagetables:3770 [ 787.905271][T24180] sec_pagetables:322 bounce:0 [ 787.905271][T24180] kernel_misc_reclaimable:0 [ 787.905271][T24180] free:44322 free_pcp:90 free_cma:0 [ 787.910603][ T10] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 787.941269][T24180] Node 0 active_anon:56kB inactive_anon:112kB active_file:0kB inactive_file:40kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:16kB dirty:4kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8816kB pagetables:2108kB sec_pagetables:1140kB all_unreclaimable? yes Balloon:0kB [ 787.964423][T24180] Node 0 DMA free:1412kB boost:0kB min:760kB low:948kB high:1136kB reserved_highatomic:0KB free_highatomic:0KB active_anon:20kB inactive_anon:12kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB zspages:52kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:124kB local_pcp:124kB free_cma:0kB [ 787.983967][T24180] lowmem_reserve[]: 0 285 285 285 285 [ 787.987544][T24180] Node 0 DMA32 free:6292kB boost:29412kB min:42484kB low:45752kB high:49020kB reserved_highatomic:0KB free_highatomic:0KB active_anon:36kB inactive_anon:40kB active_file:0kB inactive_file:36kB unevictable:3536kB writepending:4kB zspages:1092kB present:1032196kB managed:292660kB mlocked:0kB bounce:0kB free_pcp:236kB local_pcp:236kB free_cma:0kB [ 787.991531][ T10] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 788.024160][T24180] lowmem_reserve[]: [ 788.034762][ T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 788.034789][ T10] usb 8-1: Product: syz [ 788.034802][ T10] usb 8-1: Manufacturer: syz [ 788.034815][ T10] usb 8-1: SerialNumber: syz [ 788.039680][ T10] usb 8-1: config 0 descriptor?? [ 788.053745][T24180] 0 0 0 0 0 [ 788.053790][T24180] Node 0 DMA: 14*4kB (M) 9*8kB (UM) 6*16kB (UM) 5*32kB (UM) 2*64kB (UM) 3*128kB (UM) 2*256kB (M) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 1408kB [ 788.080788][T24180] Node 0 DMA32: 25*4kB (UM) 39*8kB (UME) 29*16kB (ME) 53*32kB (UME) 30*64kB (UME) 12*128kB (UME) 1*256kB (E) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 6284kB [ 788.087382][T24180] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 788.101574][T24180] Node 0 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 788.105363][T24180] 34464 total pagecache pages [ 788.107273][T24180] 728 pages in swap cache [ 788.109014][T24180] Free swap = 47140kB [ 788.124172][T24180] Total swap = 124996kB [ 788.126145][T24180] 524155 pages RAM [ 788.128036][T24180] 0 pages HighMem/MovableOnly [ 788.130804][T24180] 210097 pages reserved [ 788.135895][T24180] 0 pages cma reserved [ 788.138406][T24180] Unreclaimable slab info: [ 788.157416][T24180] Name Used Total [ 788.161523][T24180] bio-184 7KB 8KB [ 788.164975][T24180] pid_3 36KB 55KB [ 788.167752][T24180] pid_2 198KB 283KB [ 788.170758][T24180] bio-464 17KB 31KB [ 788.173486][T24180] bio-528 19KB 31KB [ 788.178721][T24180] bio-544 19KB 31KB [ 788.195611][T24180] bio-560 19KB 31KB [ 788.198679][T24180] afs_inode_cache 79KB 215KB [ 788.202117][T24180] zswap_entry 538KB 573KB [ 788.205785][T24180] AF_VSOCK 76KB 122KB [ 788.209375][T24180] sw_flow_stats 7KB 12KB [ 788.212663][T24180] sw_flow 20KB 30KB [ 788.215567][T24180] batadv_tt_change_cache 0KB 24KB [ 788.219852][T24180] batadv_tl_cache 2KB 24KB [ 788.230603][T24180] ceph_osd_request 13KB 127KB [ 788.235520][T24180] ceph_msg 6KB 53KB [ 788.241869][T24180] p9_req_t 19KB 63KB [ 788.291474][T24180] INET_SMC 65KB 125KB [ 788.299665][T24180] SMC6 96KB 187KB [ 788.313111][T24180] SMC 53KB 125KB [ 788.319556][T24180] TIPC 56KB 215KB [ 788.335830][T24180] rds_tcp_connection 24KB 143KB [ 788.340297][T24180] RDS 41KB 185KB [ 788.343570][T24180] rds_connection 26KB 46KB [ 788.346959][T24180] SCTPv6 67KB 180KB [ 788.362826][T24180] SCTP 52KB 153KB [ 788.367479][T24180] sctp_chunk 20KB 70KB [ 788.380363][T24180] sctp_bind_bucket 0KB 4KB [ 788.383242][T24180] PNPIPE 60KB 123KB [ 788.386939][T24180] PHONET 31KB 63KB [ 788.389642][T24180] L2TP/IPv6 54KB 95KB [ 788.392787][T24180] L2TP/IP 35KB 63KB [ 788.395729][T24180] KCM 60KB 93KB [ 788.398123][T24180] kcm_mux 54KB 94KB [ 788.400745][T24180] RXRPC 56KB 192KB [ 788.403243][T24180] rxrpc_call_jar 146KB 223KB [ 788.405737][T24180] can_receiver 24KB 31KB [ 788.408112][T24180] net_bridge_fdb_entry 3KB 23KB [ 788.410586][T24180] xfrm6_tunnel_spi 0KB 4KB [ 788.413408][T24180] MPTCPv6 89KB 191KB [ 788.416585][T24180] ip6-frags 0KB 23KB [ 788.419320][T24180] fib6_node 54KB 136KB [ 788.424870][T24180] ip6_dst_cache 56KB 335KB [ 788.428294][T24180] mfc6_cache 6KB 8KB [ 788.432442][T24180] PINGv6 45KB 61KB [ 788.436947][T24180] RAWv6 132KB 247KB [ 788.439971][T24180] UDPLITEv6 74KB 94KB [ 788.442632][T24180] UDPv6 83KB 220KB [ 788.464307][T24180] tw_sock_TCPv6 0KB 23KB [ 788.468727][T24180] TCPv6 115KB 298KB [ 788.473458][T24180] nf_conntrack 0KB 7KB [ 788.495911][T24180] wg_peer 118KB 118KB [ 788.504244][T24180] allowedips_node 24KB 31KB [ 788.507470][T24180] ubi_wl_entry_slab 2KB 3KB [ 788.525417][T24180] t10_alua_lu_gp_cache 8KB 15KB [ 788.529047][T24180] scsi_sense_cache 60KB 60KB [ 788.532745][T24180] virtio_scsi_cmd 21KB 24KB [ 788.535270][T24180] bio-136 36KB 64KB [ 788.538132][T24180] io_kiocb 2KB 62KB [ 788.541572][T24180] bio-264 10KB 15KB [ 788.559497][T24180] mqueue_inode_cache 47KB 151KB [ 788.563114][T24180] f2fs_bio_post_read_ctx 30KB 31KB [ 788.566554][T24180] jfs_mp 14KB 15KB [ 788.569136][T24180] fuse_request 24KB 39KB [ 788.573014][T24180] cifs_small_rq 28KB 32KB [ 788.591550][T24180] cifs_request 67KB 67KB [ 788.594991][T24180] cifs_mpx_ids 8KB 15KB [ 788.597453][T24180] cifs_io_subrequest 42KB 47KB [ 788.605538][T24180] cifs_io_request 105KB 111KB [ 788.608778][T24180] nfs_commit_data 24KB 31KB [ 788.622180][T24180] nfs_write_data 38KB 63KB [ 788.625680][T24180] ecryptfs_sb_cache 9KB 15KB [ 788.629496][T24180] jbd2_inode 22KB 23KB [ 788.632027][T24180] ext4_system_zone 1KB 3KB [ 788.634650][T24180] ext4_io_end_vec 8KB 11KB [ 788.637010][T24180] kioctx 35KB 127KB [ 788.639306][T24180] aio_kiocb 33KB 62KB [ 788.644792][T24180] userfaultfd_ctx_cache 56KB 94KB [ 788.660389][T24180] fanotify_fid_event 3KB 19KB [ 788.664292][T24180] fanotify_mark 22KB 23KB [ 788.668363][T24180] fasync_cache 27KB 35KB [ 788.681861][T24180] zspage 106KB 110KB [ 788.686634][T24180] zs_handle 187KB 512KB [ 788.689787][T24180] pid_namespace 56KB 123KB [ 788.700346][T24180] kvm_gmem_inode_cache 15KB 31KB [ 788.705108][T24180] kvm_async_pf 0KB 15KB [ 788.708893][T24180] kvm_vcpu 52KB 250KB [ 788.722014][T24180] kvm_mmu_page_header 19KB 38KB [ 788.725916][T24180] pte_list_desc 15KB 27KB [ 788.729749][T24180] x86_emulator 48KB 189KB [ 788.732921][T24180] rpc_buffers 25KB 31KB [ 788.743978][T24180] rpc_tasks 8KB 15KB [ 788.747510][T24180] UNIX-STREAM 498KB 551KB [ 788.751433][T24180] UNIX 551KB 673KB [ 788.755776][T24180] ip4-frags 0KB 31KB [ 788.759681][T24180] mfc_cache 6KB 16KB [ 788.763570][T24180] UDP-Lite 53KB 127KB [ 788.767093][T24180] MPTCP 49KB 183KB [ 788.770310][T24180] request_sock_subflow_v4 0KB 7KB [ 788.775350][T24180] tcp_bind2_bucket 7KB 28KB [ 788.779988][T24180] tcp_bind_bucket 19KB 44KB [ 788.805447][T24180] inet_peer 0KB 12KB [ 788.808911][T24180] xfrm_dst 0KB 31KB [ 788.811597][T24180] xfrm_state 5KB 191KB [ 788.814041][T24180] ip_fib_trie 24KB 28KB [ 788.816657][T24180] ip_fib_alias 63KB 83KB [ 788.820925][T24180] rtable 10KB 36KB [ 788.841402][T24180] PING 70KB 126KB [ 788.848279][T24180] RAW 78KB 191KB [ 788.855074][T24180] UDP 61KB 255KB [ 788.861788][T24180] tw_sock_TCP 0KB 31KB [ 788.868751][T24180] request_sock_TCP 0KB 7KB [ 788.874901][T24180] TCP 337KB 541KB [ 788.878389][T24180] hugetlbfs_inode_cache 25KB 187KB [ 788.881783][T24180] fscache_cookie_jar 17KB 30KB [ 788.885442][T24180] netfs_subrequest 31KB 70KB [ 788.888621][T24180] netfs_request 103KB 111KB [ 788.892038][T24180] bio-280 21KB 23KB [ 788.895537][T24180] ep_head 4KB 24KB [ 788.898872][T24180] eventpoll_pwq 14KB 35KB [ 788.902659][T24180] eventpoll_epi 44KB 70KB [ 788.906195][T24180] inotify_inode_mark 34KB 50KB [ 788.910138][T24180] sgpool-128 17KB 29KB [ 788.912823][T24180] sgpool-64 25KB 31KB [ 788.915458][T24180] sgpool-32 6KB 189KB [ 788.918085][T24180] sgpool-16 6KB 31KB [ 788.932362][T24180] sgpool-8 4KB 31KB [ 788.934939][T24180] bio_crypt_ctx 9KB 11KB [ 788.937312][T24180] bio_integrity_data 7KB 8KB [ 788.939676][T24180] request_queue 228KB 247KB [ 788.959044][T24180] blkdev_ioc 38KB 87KB [ 788.962104][T24180] bio-200 210KB 320KB [ 788.974132][T24180] biovec-max 633KB 833KB [ 788.977525][T24180] biovec-64 0KB 220KB [ 788.981317][T24180] biovec-16 0KB 54KB [ 788.985176][T24180] mm_slot 11KB 15KB [ 788.989056][T24180] ksm_mm_slot 11KB 12KB [ 788.998470][T24180] user_namespace 26KB 61KB [ 789.002122][T24180] uid_cache 24KB 46KB [ 789.005941][T24180] iommu_iova_magazine 976KB 1134KB [ 789.009099][T24180] iommu_iova 212KB 320KB [ 789.011876][T24180] dmaengine-unmap-256 26KB 30KB [ 789.015962][T24180] dmaengine-unmap-128 14KB 30KB [ 789.019352][T24180] dmaengine-unmap-16 7KB 8KB [ 789.022684][T24180] dmaengine-unmap-2 3KB 4KB [ 789.026195][T24180] QIPCRTR 45KB 93KB [ 789.030213][T24180] audit_buffer 13KB 39KB [ 789.033461][T24180] skbuff_ext_cache 0KB 24KB [ 789.037101][T24180] skbuff_small_head 1344KB 1590KB [ 789.042634][T24180] skbuff_fclone_cache 120KB 203KB [ 789.046107][T24180] skbuff_head_cache 2145KB 2968KB [ 789.049347][T24180] configfs_dir_cache 22KB 24KB [ 789.053424][T24180] file_lease_cache 19KB 39KB [ 789.056596][T24180] file_lock_cache 9KB 63KB [ 789.060049][T24180] file_lock_ctx 35KB 43KB [ 789.063185][T24180] fsnotify_inode_mark_connector 28KB 43KB [ 789.067277][T24180] posix_timers_cache 47KB 64KB [ 789.070594][T24180] taskstats 35KB 111KB [ 789.080967][T24180] mem_cgroup_per_node 94KB 123KB [ 789.084502][T24180] mem_cgroup 119KB 149KB [ 789.087897][T24180] proc_dir_entry 614KB 703KB [ 789.109350][T24180] pde_opener 9KB 15KB [ 789.111987][T24180] seq_file 49KB 93KB [ 789.114472][T24180] sigqueue 1KB 27KB [ 789.116883][T24180] shmem_inode_cache 8064KB 8357KB [ 789.119266][T24180] kernfs_iattrs_cache 46KB 46KB [ 789.133128][T24180] kernfs_node_cache 29860KB 29870KB [ 789.135641][T24180] mnt_cache 69KB 126KB [ 789.139057][T24180] bfilp 32KB 47KB [ 789.141766][T24180] filp 575KB 708KB [ 789.147169][T24180] names_cache 521KB 560KB [ 789.166644][T24180] net_namespace 105KB 229KB [ 789.170977][T24180] ima_iint_cache 30KB 71KB [ 789.173139][T24180] lsm_inode_cache 1456KB 1937KB [ 789.175613][T24180] lsm_file_cache 175KB 228KB [ 789.179027][T24180] key_jar 27KB 55KB [ 789.190564][T24180] uts_namespace 75KB 123KB [ 789.193348][T24180] nsproxy 14KB 31KB [ 789.210848][T24180] vm_area_struct 1866KB 2109KB [ 789.213402][T24180] fs_cache 51KB 80KB [ 789.215809][T24180] files_cache 194KB 302KB [ 789.218122][T24180] signal_cache 960KB 2033KB [ 789.220978][T24180] sighand_cache 1227KB 2164KB [ 789.240664][T24180] task_struct 6916KB 7582KB [ 789.243019][T24180] cred 176KB 316KB [ 789.245551][T24180] anon_vma_chain 559KB 618KB [ 789.262037][T24180] anon_vma 806KB 892KB [ 789.264964][T24180] pid 150KB 421KB [ 789.267536][T24180] Acpi-Operand 201KB 332KB [ 789.269912][T24180] Acpi-ParseExt 11KB 23KB [ 789.277304][ T59] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 789.284445][T24180] Acpi-Parse 12KB 23KB [ 789.289823][ T59] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 789.293119][T24180] Acpi-State 9KB 31KB [ 789.293140][T24180] Acpi-Namespace 35KB 48KB [ 789.293152][T24180] shared_policy_node 7KB 8KB [ 789.293164][T24180] numa_policy 10KB 15KB [ 789.293175][T24180] perf_event 34KB 62KB [ 789.293186][T24180] trace_event_file 540KB 540KB [ 789.293198][T24180] ftrace_event_field 1020KB 1023KB [ 789.293212][T24180] pool_workqueue 1907KB 1968KB [ 789.293224][T24180] task_group 41KB 61KB [ 789.293257][T24180] maple_node 862KB 1456KB [ 789.293272][T24180] mm_struct 535KB 704KB [ 789.293311][T24180] vmap_area 448KB 1073KB [ 789.293377][T24180] debug_objects_cache 2287KB 3073KB [ 789.293395][T24180] page->ptl 320KB 378KB [ 789.293408][T24180] kmalloc-cg-8k 1456KB 1600KB [ 789.293422][T24180] kmalloc-cg-4k 12848KB 13280KB [ 789.293436][T24180] kmalloc-cg-2k 8396KB 8640KB [ 789.293450][T24180] kmalloc-cg-1k 2324KB 2624KB [ 789.293470][T24180] kmalloc-cg-512 4913KB 5392KB [ 789.293483][T24180] kmalloc-cg-256 382KB 424KB [ 789.293496][T24180] kmalloc-cg-128 223KB 256KB [ 789.293510][T24180] kmalloc-cg-64 73KB 92KB [ 789.293527][T24180] kmalloc-cg-32 63KB 180KB [ 789.293577][T24180] kmalloc-cg-16 7KB 32KB [ 789.293709][T24180] kmalloc-cg-8 20KB 40KB [ 789.293725][T24180] kmalloc-cg-192 59KB 88KB [ 789.293768][T24180] kmalloc-cg-96 65KB 84KB [ 789.293797][T24180] kmalloc-8k 4880KB 4992KB [ 789.293810][T24180] kmalloc-4k 27672KB 27904KB [ 789.293827][T24180] kmalloc-2k 12676KB 13216KB [ 789.293856][T24180] kmalloc-1k 6724KB 8672KB [ 789.293891][T24180] kmalloc-512 10289KB 11760KB [ 789.293911][T24180] kmalloc-256 4834KB 5096KB [ 789.293934][T24180] kmalloc-128 1988KB 2144KB [ 789.294035][T24180] kmalloc-64 5198KB 6764KB [ 789.294134][T24180] kmalloc-32 1679KB 3400KB [ 789.294152][T24180] kmalloc-16 407KB 432KB [ 789.294168][T24180] kmalloc-8 898KB 972KB [ 789.294180][T24180] kmalloc-192 1564KB 1588KB [ 789.294225][T24180] kmalloc-96 2628KB 3064KB [ 789.294235][T24180] kmem_cache_node 213KB 220KB [ 789.294246][T24180] kmem_cache 177KB 218KB [ 789.294257][T24180] oom-kill:constraint=CONSTRAINT_MEMORY_POLICY,nodemask=0,cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/syz0,task=syz.0.1797,pid=24180,uid=0 [ 789.295983][T24180] Out of memory (oom_kill_allocating_task): Killed process 24176 (syz.0.1797) total-vm:110732kB, anon-rss:2444kB, file-rss:31716kB, shmem-rss:11480kB, UID:0 pgtables:152kB oom_score_adj:1000 [ 789.557313][ T59] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 789.564445][ T59] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 790.809025][ T5971] usb 8-1: USB disconnect, device number 12 [ 794.146104][ T40] kauditd_printk_skb: 24 callbacks suppressed [ 794.146121][ T40] audit: type=1326 audit(2000000196.179:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24419 comm="syz.2.1807" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709ef6c code=0x7ffc0000 [ 794.173222][ T40] audit: type=1326 audit(2000000196.179:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24419 comm="syz.2.1807" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709ef6c code=0x7ffc0000 [ 794.187795][ T40] audit: type=1326 audit(2000000196.179:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24419 comm="syz.2.1807" exe="/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf709ef6c code=0x7ffc0000 [ 794.214147][ T40] audit: type=1326 audit(2000000196.179:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24419 comm="syz.2.1807" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709ef6c code=0x7ffc0000 [ 794.237167][ T40] audit: type=1326 audit(2000000196.179:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24419 comm="syz.2.1807" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709ef6c code=0x7ffc0000 [ 794.269521][ T40] audit: type=1326 audit(2000000196.179:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24419 comm="syz.2.1807" exe="/syz-executor" sig=0 arch=40000003 syscall=265 compat=1 ip=0xf709ef6c code=0x7ffc0000 [ 794.298064][ T40] audit: type=1326 audit(2000000196.179:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24419 comm="syz.2.1807" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709ef6c code=0x7ffc0000 [ 794.311416][ T40] audit: type=1326 audit(2000000196.179:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24419 comm="syz.2.1807" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709ef6c code=0x7ffc0000 [ 794.322843][ T40] audit: type=1326 audit(2000000196.179:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24419 comm="syz.2.1807" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf709ef6c code=0x7ffc0000 [ 794.336599][ T40] audit: type=1326 audit(2000000196.179:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24419 comm="syz.2.1807" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709ef6c code=0x7ffc0000 [ 794.684420][ T24] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 794.852887][ T24] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 794.860436][ T24] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 794.870987][ T24] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 794.878963][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 794.905442][ T24] usb 6-1: Product: syz [ 794.911232][ T24] usb 6-1: Manufacturer: syz [ 794.918162][ T24] usb 6-1: SerialNumber: syz [ 794.933091][ T24] usb 6-1: config 0 descriptor?? [ 795.948559][T24573] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1813'. [ 796.861973][T24748] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 797.323720][T24752] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1814'. [ 797.355633][T24752] smc: ib device syz2 ibport 1 applied user defined pnetid SYZ [ 801.092018][ C3] hrtimer: interrupt took 31067312 ns [ 805.303972][ T40] kauditd_printk_skb: 4 callbacks suppressed [ 805.303993][ T40] audit: type=1326 audit(2000000207.329:367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24804 comm="syz.3.1827" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf70cef6c code=0x0 [ 806.323010][ T24] usb 6-1: USB disconnect, device number 9 [ 808.482272][T25045] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1837'. [ 808.519885][T25045] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1837'. [ 811.721101][T25267] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 811.723608][T25267] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 811.726824][T25267] vhci_hcd vhci_hcd.0: Device attached [ 811.738016][T25267] random: crng reseeded on system resumption [ 811.898150][T25270] vhci_hcd: connection closed [ 811.898592][ T1140] vhci_hcd vhci_hcd.1: stop threads [ 811.906687][ T1140] vhci_hcd vhci_hcd.1: release socket [ 811.913361][ T1140] vhci_hcd vhci_hcd.1: disconnect device [ 812.844713][T25292] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1848'. [ 813.421501][ T1414] ieee802154 phy0 wpan0: encryption failed: -22 [ 813.424614][ T1414] ieee802154 phy1 wpan1: encryption failed: -22 [ 814.198650][ T10] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 814.474008][ T10] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 814.479390][ T10] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 814.578309][ T10] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 814.628849][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 814.647669][ T10] usb 6-1: Product: syz [ 814.656492][ T10] usb 6-1: Manufacturer: syz [ 814.660588][ T10] usb 6-1: SerialNumber: syz [ 814.674092][ T10] usb 6-1: config 0 descriptor?? [ 815.791478][T25459] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1854'. [ 824.839204][ T34] usb 6-1: USB disconnect, device number 10 [ 825.673884][ T40] audit: type=1326 audit(2000000227.549:368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25578 comm="syz.2.1868" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709ef6c code=0x7ffc0000 [ 825.795238][ T40] audit: type=1326 audit(2000000227.549:369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25578 comm="syz.2.1868" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709ef6c code=0x7ffc0000 [ 825.805155][ T40] audit: type=1326 audit(2000000227.549:370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25578 comm="syz.2.1868" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf709ef6c code=0x7ffc0000 [ 825.819359][ T40] audit: type=1326 audit(2000000227.549:371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25578 comm="syz.2.1868" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709ef6c code=0x7ffc0000 [ 825.848189][ T40] audit: type=1326 audit(2000000227.549:372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25578 comm="syz.2.1868" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709ef6c code=0x7ffc0000 [ 825.868543][ T40] audit: type=1326 audit(2000000227.549:373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25578 comm="syz.2.1868" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf709ef6c code=0x7ffc0000 [ 825.880994][ T40] audit: type=1326 audit(2000000227.549:374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25578 comm="syz.2.1868" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709ef6c code=0x7ffc0000 [ 825.894146][ T40] audit: type=1326 audit(2000000227.549:375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25578 comm="syz.2.1868" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709ef6c code=0x7ffc0000 [ 825.905573][ T40] audit: type=1326 audit(2000000227.549:376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25578 comm="syz.2.1868" exe="/syz-executor" sig=0 arch=40000003 syscall=283 compat=1 ip=0xf709ef6c code=0x7ffc0000 [ 825.920174][ T40] audit: type=1326 audit(2000000227.549:377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25578 comm="syz.2.1868" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709ef6c code=0x7ffc0000 [ 829.397084][T25603] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1875'. [ 829.404573][T25603] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1875'. [ 832.015106][T25714] batadv_slave_0: left promiscuous mode [ 832.056148][T25824] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1879'. [ 833.436648][ T6218] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 833.484444][ T6218] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 833.491229][ T6218] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 833.520637][ T6218] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 839.821877][T26188] qnx6: unable to read the first superblock [ 841.331915][T26298] netlink: 'syz.3.1897': attribute type 10 has an invalid length. [ 841.356557][T26298] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 845.675942][T26620] qnx6: unable to read the first superblock [ 854.473364][T27181] qnx6: unable to read the first superblock [ 855.187997][T27192] netlink: 'syz.1.1917': attribute type 1 has an invalid length. [ 855.198423][T27192] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1917'. [ 856.600653][T27194] x_tables: duplicate underflow at hook 1 [ 857.035801][ T138] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 857.387009][T27315] Set syz0 is full, maxelem 0 reached [ 859.094031][T27434] qnx6: unable to read the first superblock [ 860.888877][T27443] ptrace attach of "/syz-executor exec"[27452] was attempted by "/syz-executor exec"[27443] [ 861.783876][ T63] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 861.858518][T27570] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 861.872417][T27570] overlayfs: failed to set xattr on upper [ 861.881546][T27570] overlayfs: ...falling back to redirect_dir=nofollow. [ 861.884692][T27570] overlayfs: ...falling back to index=off. [ 861.887304][T27570] overlayfs: ...falling back to uuid=null. [ 861.891739][T27570] overlayfs: maximum fs stacking depth exceeded [ 862.224287][T27437] netlink: 'syz.0.1926': attribute type 5 has an invalid length. [ 864.621386][T27783] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1934'. [ 864.636045][T27783] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1934'. [ 865.198981][T27787] qnx6: unable to read the first superblock [ 869.804796][T27913] syz.2.1940: vmalloc error: size 17179873280, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 869.812830][T27913] CPU: 2 UID: 0 PID: 27913 Comm: syz.2.1940 Tainted: G L syzkaller #0 PREEMPT(full) [ 869.812861][T27913] Tainted: [L]=SOFTLOCKUP [ 869.812869][T27913] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 869.812880][T27913] Call Trace: [ 869.812890][T27913] [ 869.812900][T27913] dump_stack_lvl+0x100/0x190 [ 869.812933][T27913] warn_alloc.cold+0x95/0x1c1 [ 869.812964][T27913] ? __pfx_warn_alloc+0x10/0x10 [ 869.812986][T27913] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 869.813005][T27913] ? lockdep_hardirqs_on+0x78/0x100 [ 869.813026][T27913] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 869.813050][T27913] ? kasan_save_stack+0x3f/0x50 [ 869.813075][T27913] ? kasan_save_stack+0x30/0x50 [ 869.813107][T27913] ? kasan_save_track+0x14/0x30 [ 869.813135][T27913] ? xskq_create+0xfb/0x1d0 [ 869.813161][T27913] __vmalloc_node_range_noprof+0x1252/0x1530 [ 869.813189][T27913] ? xskq_create+0xfb/0x1d0 [ 869.813220][T27913] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 869.813249][T27913] ? xskq_create+0xfb/0x1d0 [ 869.813270][T27913] vmalloc_user_noprof+0x9e/0xe0 [ 869.813289][T27913] ? xskq_create+0xfb/0x1d0 [ 869.813312][T27913] xskq_create+0xfb/0x1d0 [ 869.813340][T27913] xsk_setsockopt+0x743/0xab0 [ 869.813362][T27913] ? __pfx_aa_sk_perm+0x10/0x10 [ 869.813386][T27913] ? __pfx_xsk_setsockopt+0x10/0x10 [ 869.813411][T27913] ? find_held_lock+0x2b/0x80 [ 869.813438][T27913] ? aa_sock_opt_perm+0xfe/0x1b0 [ 869.813461][T27913] ? __pfx_xsk_setsockopt+0x10/0x10 [ 869.813486][T27913] do_sock_setsockopt+0xf3/0x1d0 [ 869.813513][T27913] __sys_setsockopt+0x119/0x190 [ 869.813537][T27913] __ia32_sys_setsockopt+0xbc/0x160 [ 869.813554][T27913] ? __do_fast_syscall_32+0x94/0x8c0 [ 869.813574][T27913] ? lockdep_hardirqs_on+0x78/0x100 [ 869.813621][T27913] __do_fast_syscall_32+0xe3/0x8c0 [ 869.813643][T27913] do_fast_syscall_32+0x32/0x70 [ 869.813661][T27913] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 869.813683][T27913] RIP: 0023:0xf709ef6c [ 869.813699][T27913] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 58 b8 77 00 00 00 cd 80 0f 0b 8d b6 00 00 00 00 b8 ad [ 869.813716][T27913] RSP: 002b:00000000f548d50c EFLAGS: 00000292 ORIG_RAX: 000000000000016e [ 869.813735][T27913] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 000000000000011b [ 869.813746][T27913] RDX: 0000000000000006 RSI: 0000000080000080 RDI: 0000000000000004 [ 869.813756][T27913] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 869.813765][T27913] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 869.813774][T27913] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 869.813796][T27913] [ 869.995187][T27913] Mem-Info: [ 869.996346][T27913] active_anon:9462 inactive_anon:20399 isolated_anon:0 [ 869.996346][T27913] active_file:11783 inactive_file:4241 isolated_file:0 [ 869.996346][T27913] unevictable:1768 dirty:308 writeback:0 [ 869.996346][T27913] slab_reclaimable:6916 slab_unreclaimable:62005 [ 869.996346][T27913] mapped:33703 shmem:17974 pagetables:3759 [ 869.996346][T27913] sec_pagetables:323 bounce:0 [ 869.996346][T27913] kernel_misc_reclaimable:0 [ 869.996346][T27913] free:34950 free_pcp:12024 free_cma:0 [ 870.029172][T27913] Node 0 active_anon:72kB inactive_anon:44kB active_file:8kB inactive_file:0kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:16kB dirty:4kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8704kB pagetables:2052kB sec_pagetables:1140kB all_unreclaimable? yes Balloon:0kB [ 870.054539][T27913] Node 1 active_anon:37876kB inactive_anon:81552kB active_file:47124kB inactive_file:16964kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:134796kB dirty:1228kB writeback:0kB shmem:68360kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7428kB pagetables:12984kB sec_pagetables:152kB all_unreclaimable? no Balloon:0kB [ 870.077352][T27913] Node 0 DMA free:2048kB boost:0kB min:760kB low:948kB high:1136kB reserved_highatomic:0KB free_highatomic:0KB active_anon:4kB inactive_anon:20kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:60kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:400kB local_pcp:24kB free_cma:0kB [ 870.113725][T27913] lowmem_reserve[]: 0 285 285 285 285 [ 870.115917][T27913] Node 0 DMA32 free:24544kB boost:29412kB min:42484kB low:45752kB high:49020kB reserved_highatomic:0KB free_highatomic:0KB active_anon:68kB inactive_anon:24kB active_file:4kB inactive_file:0kB unevictable:3536kB writepending:4kB zspages:1084kB present:1032196kB managed:292660kB mlocked:0kB bounce:0kB free_pcp:624kB local_pcp:68kB free_cma:0kB [ 870.149947][T27913] lowmem_reserve[]: 0 0 0 0 0 [ 870.152565][T27913] Node 1 DMA32 free:113208kB boost:0kB min:47144kB low:58928kB high:70712kB reserved_highatomic:0KB free_highatomic:0KB active_anon:38500kB inactive_anon:81552kB active_file:47124kB inactive_file:16964kB unevictable:3536kB writepending:1228kB zspages:5592kB present:1048432kB managed:948212kB mlocked:0kB bounce:0kB free_pcp:46384kB local_pcp:13712kB free_cma:0kB [ 870.191896][T27913] lowmem_reserve[]: 0 0 0 0 0 [ 870.194803][T27913] Node 0 DMA: 104*4kB (U) 20*8kB (UM) 4*16kB (UM) 8*32kB (UM) 4*64kB (U) 3*128kB (UM) 2*256kB (M) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 2048kB [ 870.219426][T27913] Node 0 DMA32: 676*4kB (UME) 192*8kB (UME) 93*16kB (UME) 106*32kB (UME) 39*64kB (UME) 21*128kB (UME) 10*256kB (UE) 11*512kB (U) 2*1024kB (U) 0*2048kB 0*4096kB = 24544kB [ 870.229765][T27913] Node 1 DMA32: 363*4kB (UME) 1647*8kB (UME) 1273*16kB (UME) 342*32kB (UME) 148*64kB (UME) 89*128kB (UME) 45*256kB (UME) 32*512kB (UME) 18*1024kB (UM) 0*2048kB 0*4096kB = 113140kB [ 870.244033][T27913] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 870.293059][T27913] Node 0 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 870.319497][T27913] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 870.357053][T27913] Node 1 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 870.360727][T27913] 34869 total pagecache pages [ 870.362616][T27913] 865 pages in swap cache [ 870.375283][T27913] Free swap = 31068kB [ 870.377397][T27913] Total swap = 124996kB [ 870.379466][T27913] 524155 pages RAM [ 870.381185][T27913] 0 pages HighMem/MovableOnly [ 870.384769][T27913] 210097 pages reserved [ 870.409330][T27913] 0 pages cma reserved [ 871.903745][T27932] qnx6: unable to read the first superblock [ 875.010753][ T1414] ieee802154 phy0 wpan0: encryption failed: -22 [ 880.669247][T28278] IPVS: set_ctl: invalid protocol: 43 172.20.20.187:20064 [ 880.687348][ T40] kauditd_printk_skb: 34 callbacks suppressed [ 880.687367][ T40] audit: type=1800 audit(2000000282.689:412): pid=28278 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1956" name="nullb0" dev="tmpfs" ino=2775 res=0 errno=0 [ 881.965258][T28282] x_tables: duplicate underflow at hook 1 [ 882.005514][T28282] hub 8-0:1.0: USB hub found [ 882.014705][T28282] hub 8-0:1.0: 1 port detected [ 883.279910][T28393] syz_tun: entered allmulticast mode [ 883.321500][T28392] syz_tun: left allmulticast mode [ 893.358005][T28770] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 893.362343][T28770] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 893.370959][T28770] vhci_hcd vhci_hcd.0: Device attached [ 893.642142][T28774] vhci_hcd: connection closed [ 893.659395][ T1140] vhci_hcd vhci_hcd.1: stop threads [ 893.663905][ T5971] usb 40-1: SetAddress Request (51) to port 0 [ 893.668669][ T1140] vhci_hcd vhci_hcd.1: release socket [ 893.674209][ T1140] vhci_hcd vhci_hcd.1: disconnect device [ 893.675090][ T5971] usb 40-1: new SuperSpeed USB device number 51 using vhci_hcd [ 893.778622][ T5971] usb 40-1: enqueue for inactive port 0 [ 894.155337][ T5971] usb usb40-port1: attempt power cycle [ 894.855163][ T5971] usb usb40-port1: unable to enumerate USB device [ 895.547889][T28790] loop7: detected capacity change from 0 to 16384 [ 895.880636][T28794] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1983'. [ 896.066073][T28793] loop7: detected capacity change from 16384 to 0 [ 899.243377][T28913] loop6: detected capacity change from 0 to 524287999 [ 899.264077][T28913] buffer_io_error: 23 callbacks suppressed [ 899.264096][T28913] Buffer I/O error on dev loop6, logical block 0, async page read [ 899.273826][T28913] Buffer I/O error on dev loop6, logical block 0, async page read [ 899.278460][T28913] Buffer I/O error on dev loop6, logical block 0, async page read [ 899.284859][T28913] Buffer I/O error on dev loop6, logical block 0, async page read [ 899.290760][T28913] Buffer I/O error on dev loop6, logical block 0, async page read [ 899.296915][T28913] Buffer I/O error on dev loop6, logical block 0, async page read [ 899.302358][T28913] Buffer I/O error on dev loop6, logical block 0, async page read [ 899.307903][T28913] Buffer I/O error on dev loop6, logical block 0, async page read [ 899.313050][T28913] ldm_validate_partition_table(): Disk read failed. [ 899.317708][T28913] Buffer I/O error on dev loop6, logical block 0, async page read [ 899.322960][T28913] Buffer I/O error on dev loop6, logical block 0, async page read [ 899.328698][T28913] Dev loop6: unable to read RDB block 0 [ 899.332465][T28913] loop6: unable to read partition table [ 899.336424][T28913] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 903.013782][ T34] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 903.189771][T27439] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 903.204467][ T34] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 903.217411][ T34] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 903.222773][T27439] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 903.262658][T27439] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 903.290417][ T34] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 903.319548][ T34] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 903.323439][ T34] usb 5-1: Product: syz [ 903.331272][T27439] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 903.340798][ T34] usb 5-1: Manufacturer: syz [ 903.349430][ T34] usb 5-1: SerialNumber: syz [ 903.363883][T27439] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 903.391153][ T34] usb 5-1: config 0 descriptor?? [ 904.052419][T29147] /dev/nullb0: Can't lookup blockdev [ 904.609176][T29140] chnl_net:caif_netlink_parms(): no params data found [ 904.790584][T29153] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2000'. [ 904.802186][T29153] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2000'. [ 904.910346][T29140] bridge0: port 1(bridge_slave_0) entered blocking state [ 904.929133][T29140] bridge0: port 1(bridge_slave_0) entered disabled state [ 904.939757][T29140] bridge_slave_0: entered allmulticast mode [ 904.967240][T29140] bridge_slave_0: entered promiscuous mode [ 904.974550][T29140] bridge0: port 2(bridge_slave_1) entered blocking state [ 904.983689][T29140] bridge0: port 2(bridge_slave_1) entered disabled state [ 905.143701][T29140] bridge_slave_1: entered allmulticast mode [ 905.148084][T29140] bridge_slave_1: entered promiscuous mode [ 905.347287][T29140] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 905.376696][T29140] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 905.671536][T27439] Bluetooth: hci4: command tx timeout [ 906.035039][T29140] team0: Port device team_slave_0 added [ 906.074742][T29140] team0: Port device team_slave_1 added [ 906.180055][ T24] usb 5-1: USB disconnect, device number 6 [ 906.416655][T29140] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 906.874108][T29140] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 906.914016][T29140] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 907.079804][T29140] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 907.353713][T29140] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 907.523930][T29140] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 907.624464][T29140] hsr_slave_0: entered promiscuous mode [ 907.627953][T29140] hsr_slave_1: entered promiscuous mode [ 907.684129][T29140] debugfs: 'hsr0' already exists in 'hsr' [ 907.699148][T29140] Cannot create hsr debugfs directory [ 907.859353][T27439] Bluetooth: hci4: command tx timeout [ 907.909634][T29377] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 907.912882][T29377] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 907.930170][T29377] vhci_hcd vhci_hcd.0: Device attached [ 908.156089][T29140] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 908.179101][T29140] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 908.204180][T29140] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 908.224867][T29140] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 908.251305][ T1455] usb 40-1: SetAddress Request (55) to port 0 [ 908.255655][ T1455] usb 40-1: new SuperSpeed USB device number 55 using vhci_hcd [ 908.688502][T29140] 8021q: adding VLAN 0 to HW filter on device bond0 [ 908.736311][T29140] 8021q: adding VLAN 0 to HW filter on device team0 [ 908.758297][ T6218] bridge0: port 1(bridge_slave_0) entered blocking state [ 908.761999][ T6218] bridge0: port 1(bridge_slave_0) entered forwarding state [ 908.778151][ T79] bridge0: port 2(bridge_slave_1) entered blocking state [ 908.782786][ T79] bridge0: port 2(bridge_slave_1) entered forwarding state [ 909.285744][T29140] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 909.583521][T29382] vhci_hcd: connection reset by peer [ 909.588688][ T79] vhci_hcd vhci_hcd.1: stop threads [ 909.590908][ T79] vhci_hcd vhci_hcd.1: release socket [ 909.603690][ T79] vhci_hcd vhci_hcd.1: disconnect device [ 909.740858][T29140] veth0_vlan: entered promiscuous mode [ 909.771302][T29140] veth1_vlan: entered promiscuous mode [ 909.849320][T29140] veth0_macvtap: entered promiscuous mode [ 909.856879][T29140] veth1_macvtap: entered promiscuous mode [ 909.893800][T27439] Bluetooth: hci4: command tx timeout [ 909.904207][T29140] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 909.945096][T29140] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 910.271703][ T1140] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 910.276587][ T1140] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 910.442003][T28482] syz_tun (unregistering): left allmulticast mode [ 910.574211][ T1140] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 910.832177][ T1140] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 911.051772][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 911.073415][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 911.205488][ T1140] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 911.212169][ T1140] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 911.524021][T29720] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2009'. [ 911.973953][T27439] Bluetooth: hci4: command tx timeout [ 913.344161][ T1455] usb 40-1: device descriptor read/8, error -110 [ 913.431126][ T40] audit: type=1326 audit(2000000315.449:413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29829 comm="syz.2.2011" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf709ef6c code=0x0 [ 913.492230][T29841] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2013'. [ 913.558402][T13866] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 913.699418][T13866] bond0 (unregistering): Released all slaves [ 913.752894][ T1455] usb usb40-port1: attempt power cycle [ 914.257278][T13866] tipc: Left network mode [ 914.484644][ T1455] usb usb40-port1: unable to enumerate USB device [ 915.475274][T29845] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 915.480194][T29845] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 915.539383][T29845] vhci_hcd vhci_hcd.0: Device attached [ 915.786056][T29862] vhci_hcd: connection closed [ 915.786682][ T12] vhci_hcd vhci_hcd.1: stop threads [ 915.798086][ T12] vhci_hcd vhci_hcd.1: release socket [ 915.807652][ T12] vhci_hcd vhci_hcd.1: disconnect device [ 915.815742][ T138] usb 40-1: enqueue for inactive port 0 [ 916.259064][T29858] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 916.261865][T29858] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 916.265413][T29858] vhci_hcd vhci_hcd.0: Device attached [ 916.317384][ T138] usb usb40-port1: attempt power cycle [ 916.542528][T29872] vhci_hcd: connection closed [ 916.571160][ T34] usb 46-1: SetAddress Request (2) to port 0 [ 916.580069][ T34] usb 46-1: new SuperSpeed USB device number 2 using vhci_hcd [ 916.632823][ T79] vhci_hcd vhci_hcd.4: stop threads [ 916.635404][ T79] vhci_hcd vhci_hcd.4: release socket [ 916.638166][ T79] vhci_hcd vhci_hcd.4: disconnect device [ 916.982743][ T138] usb usb40-port1: unable to enumerate USB device [ 917.553762][ T40] audit: type=1326 audit(2000000319.379:414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29877 comm="syz.2.2018" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf709ef6c code=0x0 [ 918.005077][T13866] hsr_slave_0: left promiscuous mode [ 918.013228][T13866] hsr_slave_1: left promiscuous mode [ 921.289908][T30002] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 921.644214][ T34] usb 46-1: device descriptor read/8, error -110 [ 922.100574][ T34] usb usb46-port1: attempt power cycle [ 922.720834][ T34] usb usb46-port1: unable to enumerate USB device [ 923.005379][T30132] /dev/nullb0: Can't lookup blockdev [ 923.294283][T13866] IPVS: stop unused estimator thread 0... [ 923.295306][T30115] overlayfs: overlapping lowerdir path [ 923.486773][T30137] overlayfs: missing 'workdir' [ 928.011084][T30285] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2037'. [ 928.942809][T30365] /dev/nullb0: Can't lookup blockdev [ 929.785453][T30397] /dev/nullb0: Can't lookup blockdev [ 933.571964][ T220] syzkaller0: tun_net_xmit 76 [ 933.695885][ T5971] syzkaller0: tun_net_xmit 76 [ 933.710799][ T220] syzkaller0: tun_net_xmit 48 [ 934.764793][T30654] qnx6: unable to read the first superblock [ 934.914459][ T5978] IPVS: starting estimator thread 0... [ 934.975825][T30760] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 935.000239][T30760] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 935.043783][T30759] IPVS: using max 30 ests per chain, 72000 per kthread [ 935.184054][T30760] vhci_hcd vhci_hcd.0: Device attached [ 935.423782][ T1455] usb 37-1: new low-speed USB device number 4 using vhci_hcd [ 935.538738][T30760] netlink: 'syz.0.2048': attribute type 1 has an invalid length. [ 935.553982][ T34] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 935.742525][ T34] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 935.780541][ T34] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 935.800497][ T34] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 935.808795][ T34] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 935.812923][ T34] usb 9-1: Product: syz [ 935.843248][ T34] usb 9-1: Manufacturer: syz [ 935.887840][ T34] usb 9-1: SerialNumber: syz [ 935.892785][ T34] usb 9-1: config 0 descriptor?? [ 936.031321][T30761] vhci_hcd: connection reset by peer [ 936.046346][T13863] vhci_hcd vhci_hcd.0: stop threads [ 936.048888][T13863] vhci_hcd vhci_hcd.0: release socket [ 936.051807][T13863] vhci_hcd vhci_hcd.0: disconnect device [ 936.314745][ T1414] ieee802154 phy0 wpan0: encryption failed: -22 [ 938.281656][ T138] usb 9-1: USB disconnect, device number 2 [ 938.695619][T30772] qnx6: unable to read the first superblock [ 940.524520][ T1455] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 941.316176][T30760] 8021q: adding VLAN 0 to HW filter on device bond2 [ 941.328823][T30746] bond2: (slave geneve3): making interface the new active one [ 941.335523][T30746] bond2: (slave geneve3): Enslaving as an active interface with an up link [ 941.422174][ T10] syzkaller0: tun_net_xmit 76 [ 941.471056][ T6218] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 941.474975][ T6218] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 941.478266][ T6218] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 941.495002][ T10] syzkaller0: tun_net_xmit 76 [ 941.753118][ T6218] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 944.254658][T30804] qnx6: unable to read the first superblock [ 944.363177][T30812] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 944.367677][T30812] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 944.380946][T30812] vhci_hcd vhci_hcd.0: Device attached [ 944.720032][T30811] /dev/nullb0: Can't lookup blockdev [ 944.723706][ T138] usb 46-1: SetAddress Request (6) to port 0 [ 944.726467][ T138] usb 46-1: new SuperSpeed USB device number 6 using vhci_hcd [ 944.907206][T30813] vhci_hcd: connection reset by peer [ 944.916308][T13866] vhci_hcd vhci_hcd.4: stop threads [ 944.920519][T13866] vhci_hcd vhci_hcd.4: release socket [ 944.923448][T13866] vhci_hcd vhci_hcd.4: disconnect device [ 946.008307][T31030] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2066'. [ 946.120825][T31033] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2066'. [ 946.171180][T31032] 8021q: adding VLAN 0 to HW filter on device bond1 [ 946.181194][T31032] bond0: (slave bond1): Enslaving as an active interface with an up link [ 946.218157][T31033] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 946.227149][T31032] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2066'. [ 946.266959][T31033] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 946.362676][T31030] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2066'. [ 946.380216][T31033] bond0 (unregistering): (slave bond1): Releasing backup interface [ 946.448434][T31033] bond0 (unregistering): Released all slaves [ 948.779713][ T40] audit: type=1326 audit(2000000350.739:415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31251 comm="syz.4.2069" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f35f6c code=0x7ffc0000 [ 948.851136][ T40] audit: type=1326 audit(2000000350.739:416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31251 comm="syz.4.2069" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f35f6c code=0x7ffc0000 [ 948.972035][ T40] audit: type=1326 audit(2000000350.739:417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31251 comm="syz.4.2069" exe="/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf7f35f6c code=0x7ffc0000 [ 949.115022][ T40] audit: type=1326 audit(2000000350.739:418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31251 comm="syz.4.2069" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f35f6c code=0x7ffc0000 [ 949.237333][ T40] audit: type=1326 audit(2000000350.739:419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31251 comm="syz.4.2069" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f35f6c code=0x7ffc0000 [ 949.295706][ T40] audit: type=1326 audit(2000000350.739:420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31251 comm="syz.4.2069" exe="/syz-executor" sig=0 arch=40000003 syscall=265 compat=1 ip=0xf7f35f6c code=0x7ffc0000 [ 949.369655][ T40] audit: type=1326 audit(2000000350.739:421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31251 comm="syz.4.2069" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f35f6c code=0x7ffc0000 [ 949.490065][ T40] audit: type=1326 audit(2000000350.739:422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31251 comm="syz.4.2069" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f35f6c code=0x7ffc0000 [ 949.503167][ T40] audit: type=1326 audit(2000000350.739:423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31251 comm="syz.4.2069" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f35f6c code=0x7ffc0000 [ 949.523780][ T40] audit: type=1326 audit(2000000350.739:424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31251 comm="syz.4.2069" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f35f6c code=0x7ffc0000 [ 949.806780][ T138] usb 46-1: device descriptor read/8, error -110 [ 950.072736][T31368] qnx6: unable to read the first superblock [ 950.246183][ T138] usb usb46-port1: attempt power cycle [ 950.868639][ T138] usb usb46-port1: unable to enumerate USB device [ 950.917952][T31376] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2076'. [ 956.191294][T31607] /dev/nullb0: Can't open blockdev [ 958.165137][T31717] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 958.169395][T31717] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 958.175588][T31717] vhci_hcd vhci_hcd.0: Device attached [ 958.312773][T31821] vhci_hcd: connection closed [ 958.313300][T13863] vhci_hcd vhci_hcd.0: stop threads [ 958.350745][T13863] vhci_hcd vhci_hcd.0: release socket [ 958.358828][T13863] vhci_hcd vhci_hcd.0: disconnect device [ 959.486619][T31933] fuse: Bad value for 'fd' [ 959.578353][T31936] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2090'. [ 959.581833][T31936] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2090'. [ 961.641998][T31944] bridge0: port 1(erspan0) entered blocking state [ 961.645476][T31944] bridge0: port 1(erspan0) entered disabled state [ 961.649564][T31944] erspan0: entered allmulticast mode [ 961.653242][T31944] erspan0: entered promiscuous mode [ 961.661537][T31944] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2093'. [ 963.105951][T27439] Bluetooth: hci3: unexpected event for opcode 0x0c2d [ 963.356306][ T40] kauditd_printk_skb: 19 callbacks suppressed [ 963.356391][ T40] audit: type=1326 audit(2000000365.369:444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31958 comm="syz.4.2096" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f35f6c code=0x7ffc0000 [ 963.390824][ T40] audit: type=1326 audit(2000000365.369:445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31958 comm="syz.4.2096" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f35f6c code=0x7ffc0000 [ 963.499107][ T40] audit: type=1326 audit(2000000365.459:446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31958 comm="syz.4.2096" exe="/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf7f35f6c code=0x7ffc0000 [ 963.521730][ T40] audit: type=1326 audit(2000000365.459:447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31958 comm="syz.4.2096" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f35f6c code=0x7ffc0000 [ 963.566724][ T40] audit: type=1326 audit(2000000365.459:448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31958 comm="syz.4.2096" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f35f6c code=0x7ffc0000 [ 963.576655][ T40] audit: type=1326 audit(2000000365.459:449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31958 comm="syz.4.2096" exe="/syz-executor" sig=0 arch=40000003 syscall=228 compat=1 ip=0xf7f35f6c code=0x7ffc0000 [ 963.618689][ T40] audit: type=1326 audit(2000000365.459:450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31958 comm="syz.4.2096" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f35f6c code=0x7ffc0000 [ 963.641460][ T40] audit: type=1326 audit(2000000365.459:451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31958 comm="syz.4.2096" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f35f6c code=0x7ffc0000 [ 963.674729][ T40] audit: type=1326 audit(2000000365.469:452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31958 comm="syz.4.2096" exe="/syz-executor" sig=0 arch=40000003 syscall=163 compat=1 ip=0xf7f35f6c code=0x7ffc0000 [ 963.698200][ T40] audit: type=1326 audit(2000000365.469:453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31958 comm="syz.4.2096" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f35f6c code=0x7ffc0000 [ 963.834411][T27439] Bluetooth: hci3: unexpected event for opcode 0x040e [ 965.987117][T32082] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 965.994593][T32082] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 966.007448][T32082] vhci_hcd vhci_hcd.0: Device attached [ 966.130588][T32087] vhci_hcd: connection closed [ 966.130926][ T220] vhci_hcd vhci_hcd.4: stop threads [ 966.144050][ T220] vhci_hcd vhci_hcd.4: release socket [ 966.152557][ T220] vhci_hcd vhci_hcd.4: disconnect device [ 967.183833][T32101] ubi: mtd0 is already attached to ubi0 [ 968.930386][T32313] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2107'. [ 969.040661][T32314] 8021q: adding VLAN 0 to HW filter on device bond3 [ 969.051791][T32314] bond0: (slave bond3): Enslaving as an active interface with an up link [ 969.052416][T32316] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2107'. [ 969.146917][T32318] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2110'. [ 969.159456][T32316] bond0 (unregistering): (slave bond3): Releasing backup interface [ 969.243932][T32314] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2107'. [ 969.256529][T32316] bond0 (unregistering): Released all slaves [ 969.470811][ T40] kauditd_printk_skb: 9 callbacks suppressed [ 969.470829][ T40] audit: type=1326 audit(2000000370.809:463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32204 comm="syz.2.2109" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709ef6c code=0x7ffc0000 [ 969.500184][ T40] audit: type=1326 audit(2000000370.809:464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32204 comm="syz.2.2109" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709ef6c code=0x7ffc0000 [ 970.471759][T32429] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2111'. [ 970.487442][T32429] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2111'. [ 975.211499][T32659] binfmt_misc: Unknown parameter 'trans' [ 975.995863][T27439] Bluetooth: hci4: Invalid connection link type handle 0x00c9 [ 976.197873][T32662] qnx6: unable to read the first superblock [ 976.272831][T32674] wg1 speed is unknown, defaulting to 1000 [ 976.289903][T32674] wg1 speed is unknown, defaulting to 1000 [ 976.306821][T32674] wg1 speed is unknown, defaulting to 1000 [ 976.357001][T32674] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 976.415282][T32674] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 976.571613][T32674] wg1 speed is unknown, defaulting to 1000 [ 976.579538][T32674] wg1 speed is unknown, defaulting to 1000 [ 976.828056][T32674] wg1 speed is unknown, defaulting to 1000 [ 976.839467][T32674] wg1 speed is unknown, defaulting to 1000 [ 978.292479][ T397] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 978.297030][ T397] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 978.595500][ T397] vhci_hcd vhci_hcd.0: Device attached [ 978.944793][ T5971] usb 46-1: SetAddress Request (10) to port 0 [ 978.949564][ T5971] usb 46-1: new SuperSpeed USB device number 10 using vhci_hcd [ 978.982111][ T409] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 979.205439][ T220] vhci_hcd vhci_hcd.4: stop threads [ 979.207782][ T220] vhci_hcd vhci_hcd.4: release socket [ 979.210303][ T220] vhci_hcd vhci_hcd.4: disconnect device [ 981.342376][ T546] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9) [ 981.344904][ T546] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 981.349350][ T546] vhci_hcd vhci_hcd.0: Device attached [ 981.416622][ T543] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2131'. [ 981.583043][ T550] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2131'. [ 981.671661][ T549] 8021q: adding VLAN 0 to HW filter on device bond2 [ 981.681058][ T549] bond0: (slave bond2): Enslaving as an active interface with an up link [ 981.708726][ T5921] usb 38-1: SetAddress Request (50) to port 0 [ 981.712960][ T5921] usb 38-1: new SuperSpeed USB device number 50 using vhci_hcd [ 981.803473][ T547] vhci_hcd: connection closed [ 981.834479][ T550] bond0 (unregistering): (slave bond2): Releasing backup interface [ 981.879630][ T1167] vhci_hcd vhci_hcd.0: stop threads [ 981.882642][ T1167] vhci_hcd vhci_hcd.0: release socket [ 981.889156][ T1167] vhci_hcd vhci_hcd.0: disconnect device [ 981.987156][ T550] bond0 (unregistering): Released all slaves [ 984.044047][ T5971] usb 46-1: device descriptor read/8, error -110 [ 984.706142][ T5971] usb usb46-port1: attempt power cycle [ 985.071470][ T886] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 985.075816][ T886] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 985.143771][ T886] vhci_hcd vhci_hcd.0: Device attached [ 985.362978][ T5971] usb 46-1: SetAddress Request (13) to port 0 [ 985.380115][ T5971] usb 46-1: new SuperSpeed USB device number 13 using vhci_hcd [ 985.448458][ T887] vhci_hcd: connection reset by peer [ 985.453932][ T220] vhci_hcd vhci_hcd.4: stop threads [ 985.517214][ T220] vhci_hcd vhci_hcd.4: release socket [ 985.526706][ T220] vhci_hcd vhci_hcd.4: disconnect device [ 986.199774][ T1012] qnx6: unable to read the first superblock [ 986.961734][ T5921] usb 38-1: device descriptor read/8, error -110 [ 987.354650][ T5921] usb usb38-port1: attempt power cycle [ 987.944512][ T5921] usb usb38-port1: unable to enumerate USB device [ 989.019200][ T1260] input: syz1 as /devices/virtual/input/input8 [ 991.535122][ T5971] usb 46-1: device descriptor read/8, error -110 [ 991.655959][ T5971] usb usb46-port1: unable to enumerate USB device [ 994.156027][ T1390] qnx6: unable to read the first superblock [ 995.466755][ T1508] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2156'. [ 997.744690][ T1414] ieee802154 phy0 wpan0: encryption failed: -22 [ 999.962236][ T1741] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 999.965625][ T1741] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 999.986272][ T1741] vhci_hcd vhci_hcd.0: Device attached [ 1000.593774][ T5971] usb 38-1: SetAddress Request (54) to port 0 [ 1000.596444][ T5971] usb 38-1: new SuperSpeed USB device number 54 using vhci_hcd [ 1000.744641][ T1945] vhci_hcd: connection reset by peer [ 1000.748129][T13863] vhci_hcd vhci_hcd.0: stop threads [ 1000.751073][T13863] vhci_hcd vhci_hcd.0: release socket [ 1000.755440][T13863] vhci_hcd vhci_hcd.0: disconnect device [ 1005.725246][ T5971] usb 38-1: device descriptor read/8, error -110 [ 1005.798346][ T2287] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 1005.801133][ T2287] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1005.804463][ T2287] vhci_hcd vhci_hcd.0: Device attached [ 1005.993762][ T5971] usb 38-1: SetAddress Request (55) to port 0 [ 1005.996229][ T5971] usb 38-1: new SuperSpeed USB device number 55 using vhci_hcd [ 1006.328508][ T2500] vhci_hcd: connection reset by peer [ 1006.343415][T22799] vhci_hcd vhci_hcd.0: stop threads [ 1006.358316][T22799] vhci_hcd vhci_hcd.0: release socket [ 1006.360839][T22799] vhci_hcd vhci_hcd.0: disconnect device [ 1006.431989][ T2626] /dev/nullb0: Can't lookup blockdev [ 1007.240796][ T2701] fuse: Bad value for 'fd' [ 1007.422494][ T2761] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2181'. [ 1007.468301][ T2761] erspan0: left allmulticast mode [ 1007.554766][ T2761] erspan0: left promiscuous mode [ 1007.599129][ T2761] bridge0: port 1(erspan0) entered disabled state [ 1007.720767][ T2768] siw: device registration error -23 [ 1008.582847][ T1455] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 1008.736180][ T1455] usb 6-1: device descriptor read/64, error -71 [ 1008.964559][ T2899] qnx6: unable to read the first superblock [ 1009.034086][ T1455] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 1009.178830][ T1455] usb 6-1: device descriptor read/64, error -71 [ 1009.328671][ T1455] usb usb6-port1: attempt power cycle [ 1009.723878][ T1455] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 1009.764553][ T1455] usb 6-1: device descriptor read/8, error -71 [ 1010.031239][ T1455] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 1010.072817][ T1455] usb 6-1: device descriptor read/8, error -71 [ 1010.194885][ T1455] usb usb6-port1: unable to enumerate USB device [ 1011.243735][ T5971] usb 38-1: device descriptor read/8, error -110 [ 1011.379263][ T5971] usb usb38-port1: attempt power cycle [ 1012.814478][ T5971] usb usb38-port1: unable to enumerate USB device [ 1019.892848][ T3307] qnx6: unable to read the first superblock [ 1022.418085][ T34] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 1023.203393][ T34] usb 6-1: device descriptor read/64, error -71 [ 1023.544402][ T34] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 1023.704755][ T34] usb 6-1: device descriptor read/64, error -71 [ 1023.818626][ T34] usb usb6-port1: attempt power cycle [ 1024.210911][ T34] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 1024.342871][ T34] usb 6-1: device descriptor read/8, error -71 [ 1024.593829][ T34] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 1024.625272][ T34] usb 6-1: device descriptor read/8, error -71 [ 1024.750121][ T34] usb usb6-port1: unable to enumerate USB device [ 1026.507285][ T3450] 9pnet_virtio: no channels available for device syz [ 1026.917506][ T3570] netlink: 'syz.4.2202': attribute type 10 has an invalid length. [ 1026.944575][ T3570] team0: Port device dummy0 added [ 1026.978224][ T3570] netlink: 'syz.4.2202': attribute type 10 has an invalid length. [ 1027.346410][ T3570] team0: Port device dummy0 removed [ 1027.715031][ T3677] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1028.345612][T27439] Bluetooth: hci1: ACL packet too small [ 1028.353988][ T3679] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(11) [ 1028.356652][ T3679] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1028.363259][ T3679] vhci_hcd vhci_hcd.0: Device attached [ 1028.496351][ T3683] vhci_hcd: connection closed [ 1028.496728][ T6215] vhci_hcd vhci_hcd.1: stop threads [ 1028.505052][ T3677] geneve2: entered promiscuous mode [ 1028.505100][ T3677] geneve2: entered allmulticast mode [ 1028.527304][ T6215] vhci_hcd vhci_hcd.1: release socket [ 1028.545469][ T6215] vhci_hcd vhci_hcd.1: disconnect device [ 1028.865374][ T3688] /dev/nullb0: Can't lookup blockdev [ 1029.714115][ T34] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 1029.863829][ T34] usb 9-1: device descriptor read/64, error -71 [ 1030.136029][ T34] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 1030.416646][ T34] usb 9-1: device descriptor read/64, error -71 [ 1030.525837][ T63] Bluetooth: hci4: command 0x0406 tx timeout [ 1030.617228][ T34] usb usb9-port1: attempt power cycle [ 1030.984184][ T34] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 1031.029073][ T34] usb 9-1: device descriptor read/8, error -71 [ 1031.295993][ T34] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 1031.328697][ T34] usb 9-1: device descriptor read/8, error -71 [ 1031.444210][ T34] usb usb9-port1: unable to enumerate USB device [ 1031.933894][ T3707] batman_adv: batadv0: Adding interface: gretap1 [ 1031.939681][ T3707] batman_adv: batadv0: The MTU of interface gretap1 is too small (1498) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1568 would solve the problem. [ 1031.981595][ T3707] batman_adv: batadv0: Interface activated: gretap1 [ 1033.314316][ T40] audit: type=1326 audit(2000000435.119:465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3708 comm="syz.4.2213" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f35f6c code=0x7ffc0000 [ 1033.360812][ T40] audit: type=1326 audit(2000000435.119:466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3708 comm="syz.4.2213" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f35f6c code=0x7ffc0000 [ 1033.442767][ T5971] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 1033.475310][ T40] audit: type=1326 audit(2000000435.119:467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3708 comm="syz.4.2213" exe="/syz-executor" sig=0 arch=40000003 syscall=21 compat=1 ip=0xf7f35f6c code=0x7ffc0000 [ 1033.521101][ T40] audit: type=1326 audit(2000000435.119:468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3708 comm="syz.4.2213" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f35f6c code=0x7ffc0000 [ 1033.570543][ T40] audit: type=1326 audit(2000000435.119:469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3708 comm="syz.4.2213" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f35f6c code=0x7ffc0000 [ 1033.595536][ T40] audit: type=1326 audit(2000000435.119:470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3708 comm="syz.4.2213" exe="/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf7135b6b code=0x7ffc0000 [ 1033.671494][ T40] audit: type=1326 audit(2000000435.119:471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3708 comm="syz.4.2213" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f35f6c code=0x7ffc0000 [ 1033.713410][ T5971] usb 9-1: Using ep0 maxpacket: 8 [ 1033.715968][ T40] audit: type=1326 audit(2000000435.119:472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3708 comm="syz.4.2213" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f35f6c code=0x7ffc0000 [ 1033.728029][ T40] audit: type=1326 audit(2000000435.119:473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3708 comm="syz.4.2213" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f35f6c code=0x7ffc0000 [ 1033.758937][ T40] audit: type=1326 audit(2000000435.119:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3708 comm="syz.4.2213" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f35f6c code=0x7ffc0000 [ 1033.776803][ T5971] usb 9-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1033.783559][ T5971] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 1033.829909][ T5971] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 1033.836383][ T5971] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1033.845755][ T5971] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1033.902718][ T5971] usb 9-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 1033.924504][ T5971] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1033.934922][ T5971] usb 9-1: Product: syz [ 1033.939982][ T5971] usb 9-1: Manufacturer: syz [ 1033.946395][ T5971] usb 9-1: SerialNumber: syz [ 1033.969944][ T5971] usb 9-1: config 0 descriptor?? [ 1034.014797][ T5971] input: KB Gear Tablet as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/input/input10 [ 1035.596767][ T3718] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 1035.599334][ T3718] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1035.602886][ T3718] vhci_hcd vhci_hcd.0: Device attached [ 1035.926611][ T34] usb 9-1: USB disconnect, device number 7 [ 1036.046201][ T3720] vhci_hcd: connection closed [ 1036.046520][ T220] vhci_hcd vhci_hcd.0: stop threads [ 1036.056781][ T220] vhci_hcd vhci_hcd.0: release socket [ 1036.063438][ T220] vhci_hcd vhci_hcd.0: disconnect device [ 1036.927522][ T3725] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 1036.930094][ T3725] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1036.940322][ T3725] vhci_hcd vhci_hcd.0: Device attached [ 1037.361042][ T6553] usb 46-1: SetAddress Request (14) to port 0 [ 1037.364276][ T6553] usb 46-1: new SuperSpeed USB device number 14 using vhci_hcd [ 1038.679156][ T3726] vhci_hcd: connection reset by peer [ 1038.681728][ T220] vhci_hcd vhci_hcd.4: stop threads [ 1038.685020][ T220] vhci_hcd vhci_hcd.4: release socket [ 1038.688609][ T220] vhci_hcd vhci_hcd.4: disconnect device [ 1039.315843][ T220] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1039.326289][ T220] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1040.452161][ T40] kauditd_printk_skb: 43 callbacks suppressed [ 1040.452180][ T40] audit: type=1326 audit(2000000442.479:518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3744 comm="syz.0.2221" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aef6c code=0x7ffc0000 [ 1040.746106][ T40] audit: type=1326 audit(2000000442.479:519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3744 comm="syz.0.2221" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aef6c code=0x7ffc0000 [ 1040.774592][ T40] audit: type=1326 audit(2000000442.479:520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3744 comm="syz.0.2221" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf70aef6c code=0x7ffc0000 [ 1040.783103][ T3752] workqueue: Failed to create a rescuer kthread for wq "xfs-reclaim/nullb0": -EINTR [ 1040.858022][ T40] audit: type=1326 audit(2000000442.479:521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3744 comm="syz.0.2221" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aef6c code=0x7ffc0000 [ 1041.121529][ T40] audit: type=1326 audit(2000000442.479:522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3744 comm="syz.0.2221" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aef6c code=0x7ffc0000 [ 1041.164477][ T40] audit: type=1326 audit(2000000442.479:523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3744 comm="syz.0.2221" exe="/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf70aef6c code=0x7ffc0000 [ 1041.245852][ T40] audit: type=1326 audit(2000000442.509:524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3744 comm="syz.0.2221" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aef6c code=0x7ffc0000 [ 1041.273237][ T40] audit: type=1326 audit(2000000442.509:525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3744 comm="syz.0.2221" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aef6c code=0x7ffc0000 [ 1041.520286][ T40] audit: type=1326 audit(2000000442.509:526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3744 comm="syz.0.2221" exe="/syz-executor" sig=0 arch=40000003 syscall=21 compat=1 ip=0xf70aef6c code=0x7ffc0000 [ 1041.878201][ T3865] : renamed from bond_slave_0 [ 1042.453798][ T6553] usb 46-1: device descriptor read/8, error -110 [ 1043.000448][ T6553] usb usb46-port1: attempt power cycle [ 1044.357984][ T6553] usb usb46-port1: unable to enumerate USB device [ 1044.450310][ T3982] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 1044.458207][ T3982] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1044.494708][ T63] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1044.574493][ T63] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1044.589387][ T3982] vhci_hcd vhci_hcd.0: Device attached [ 1044.604138][ T63] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1044.737392][ T63] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1044.854189][ T3983] vhci_hcd: connection closed [ 1044.854592][ T220] vhci_hcd vhci_hcd.4: stop threads [ 1044.861065][ T220] vhci_hcd vhci_hcd.4: release socket [ 1044.883730][ T220] vhci_hcd vhci_hcd.4: disconnect device [ 1044.952714][ T63] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1045.947915][ T3980] wg1 speed is unknown, defaulting to 1000 [ 1046.543858][ T3980] chnl_net:caif_netlink_parms(): no params data found [ 1046.706767][ T3980] bridge0: port 1(bridge_slave_0) entered blocking state [ 1046.712379][ T3980] bridge0: port 1(bridge_slave_0) entered disabled state [ 1046.716410][ T3980] bridge_slave_0: entered allmulticast mode [ 1046.721123][ T3980] bridge_slave_0: entered promiscuous mode [ 1046.727896][ T3980] bridge0: port 2(bridge_slave_1) entered blocking state [ 1046.733901][ T3980] bridge0: port 2(bridge_slave_1) entered disabled state [ 1046.737773][ T3980] bridge_slave_1: entered allmulticast mode [ 1046.742242][ T3980] bridge_slave_1: entered promiscuous mode [ 1046.770420][ T3980] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1046.778428][ T3980] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1046.808287][ T3980] team0: Port device team_slave_0 added [ 1046.817572][ T3980] team0: Port device team_slave_1 added [ 1046.842698][ T3980] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1046.849185][ T3980] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1046.866034][ T3980] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1046.872614][ T3980] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1046.876958][ T3980] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1046.889675][ T3980] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1046.938692][ T3980] hsr_slave_0: entered promiscuous mode [ 1046.945047][ T3980] hsr_slave_1: entered promiscuous mode [ 1046.950876][ T3980] debugfs: 'hsr0' already exists in 'hsr' [ 1046.955828][ T3980] Cannot create hsr debugfs directory [ 1047.097925][T27439] Bluetooth: hci0: command tx timeout [ 1047.268192][ T3980] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1047.468304][ T3980] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1048.535308][ T3980] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1048.552570][ T3980] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1048.779756][ T4016] Bluetooth: MGMT ver 1.23 [ 1048.998959][ T3980] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1049.163730][T27439] Bluetooth: hci0: command tx timeout [ 1049.175119][ T3980] 8021q: adding VLAN 0 to HW filter on device team0 [ 1049.212302][ T6218] bridge0: port 1(bridge_slave_0) entered blocking state [ 1049.215188][ T6218] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1049.352511][T13866] bridge0: port 2(bridge_slave_1) entered blocking state [ 1049.356034][T13866] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1050.141256][ T3980] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1050.651795][ T4036] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2235'. [ 1051.244188][T27439] Bluetooth: hci0: command tx timeout [ 1051.268643][T22799] bond0: (slave netdevsim0): Releasing backup interface [ 1051.906901][ T4107] fuse: Unknown parameter 'ÿ0x000000000000000800000000000000000000' [ 1052.053313][ T3980] veth0_vlan: entered promiscuous mode [ 1052.252481][ T3980] veth1_vlan: entered promiscuous mode [ 1052.971045][T22799] bond0 (unregistering): Released all slaves [ 1053.057692][T22799] bond1 (unregistering): (slave dummy0): Releasing active interface [ 1053.104501][T22799] bond1 (unregistering): Released all slaves [ 1053.154808][T22799] bond2 (unregistering): Released all slaves [ 1053.307398][ T3980] veth0_macvtap: entered promiscuous mode [ 1053.325270][T27439] Bluetooth: hci0: command tx timeout [ 1053.426116][ T3980] veth1_macvtap: entered promiscuous mode [ 1053.470683][ T3980] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1053.508832][ T3980] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1053.628820][ T6218] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1053.650305][ T4271] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2241'. [ 1053.662078][ T40] audit: type=1326 audit(2000000455.669:527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4265 comm="syz.4.2241" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f35f6c code=0x7ffc0000 [ 1053.750136][ T40] audit: type=1326 audit(2000000455.669:528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4265 comm="syz.4.2241" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f35f6c code=0x7ffc0000 [ 1053.766540][ T40] audit: type=1326 audit(2000000455.669:529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4265 comm="syz.4.2241" exe="/syz-executor" sig=0 arch=40000003 syscall=136 compat=1 ip=0xf7f35f6c code=0x7ffc0000 [ 1053.847397][ T40] audit: type=1326 audit(2000000455.669:530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4265 comm="syz.4.2241" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f35f6c code=0x7ffc0000 [ 1053.868852][ T40] audit: type=1326 audit(2000000455.669:531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4265 comm="syz.4.2241" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f35f6c code=0x7ffc0000 [ 1053.930056][ T6218] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1053.990108][ T40] audit: type=1326 audit(2000000455.679:532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4265 comm="syz.4.2241" exe="/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf7f35f6c code=0x7ffc0000 [ 1054.028367][ T40] audit: type=1326 audit(2000000455.679:533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4265 comm="syz.4.2241" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f35f6c code=0x7ffc0000 [ 1054.053674][ T6218] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1054.060447][ T40] audit: type=1326 audit(2000000455.679:534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4265 comm="syz.4.2241" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f35f6c code=0x7ffc0000 [ 1054.105939][ T6215] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1054.115624][ T40] audit: type=1326 audit(2000000455.679:535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4265 comm="syz.4.2241" exe="/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf7f35f6c code=0x7ffc0000 [ 1054.139186][ T40] audit: type=1326 audit(2000000455.679:536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4265 comm="syz.4.2241" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f35f6c code=0x7ffc0000 [ 1054.668420][ T220] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1054.674655][ T220] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1055.295295][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1055.323519][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1056.413717][T22799] hsr_slave_0: left promiscuous mode [ 1056.433152][T22799] hsr_slave_1: left promiscuous mode [ 1056.472948][T22799] pimreg3 (unregistering): left allmulticast mode [ 1058.579506][ T4323] overlayfs: failed to clone upperpath [ 1059.496017][ T1414] ieee802154 phy0 wpan0: encryption failed: -22 [ 1061.793207][T22799] IPVS: stop unused estimator thread 0... [ 1066.184739][ T4498] netlink: 'syz.2.2259': attribute type 4 has an invalid length. [ 1066.742601][ T6016] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 1066.940401][ T4499] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 1066.953721][ T6016] usb 5-1: Using ep0 maxpacket: 8 [ 1066.975358][ T6016] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 1066.980341][ T6016] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1066.985109][ T6016] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1067.014303][ T6016] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1067.033669][ T6016] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1067.040294][ T6016] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1067.044339][ T6016] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1067.306782][ T6016] usb 5-1: usb_control_msg returned -32 [ 1067.309512][ T6016] usbtmc 5-1:16.0: can't read capabilities [ 1068.212971][ T4613] wg1 speed is unknown, defaulting to 1000 [ 1069.569610][ T4623] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 1069.574480][ T4623] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1069.581758][ T4623] vhci_hcd vhci_hcd.0: Device attached [ 1069.597867][ T4623] random: crng reseeded on system resumption [ 1069.857551][ T4626] vhci_hcd: connection closed [ 1069.859872][ T220] vhci_hcd vhci_hcd.4: stop threads [ 1069.887609][ T220] vhci_hcd vhci_hcd.4: release socket [ 1069.903290][ T10] usb 46-1: SetAddress Request (19) to port 0 [ 1069.906052][ T10] usb 46-1: new SuperSpeed USB device number 19 using vhci_hcd [ 1069.910044][ T220] vhci_hcd vhci_hcd.4: disconnect device [ 1069.926145][ T10] usb 46-1: enqueue for inactive port 0 [ 1070.202889][ T29] usb 5-1: USB disconnect, device number 7 [ 1070.342644][ T10] usb usb46-port1: attempt power cycle [ 1070.919934][ T10] usb usb46-port1: unable to enumerate USB device [ 1071.938012][ T4653] random: crng reseeded on system resumption [ 1071.978522][ T4648] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 1071.981502][ T4648] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1071.985247][ T4648] vhci_hcd vhci_hcd.0: Device attached [ 1072.315703][ T24] usb 48-1: SetAddress Request (2) to port 0 [ 1072.315762][ T24] usb 48-1: new SuperSpeed USB device number 2 using vhci_hcd [ 1072.953919][ T4651] vhci_hcd: connection reset by peer [ 1072.954412][ T6215] vhci_hcd vhci_hcd.5: stop threads [ 1072.954434][ T6215] vhci_hcd vhci_hcd.5: release socket [ 1072.954476][ T6215] vhci_hcd vhci_hcd.5: disconnect device [ 1074.432730][ T4674] binder: 4673:4674 ioctl c0306201 0 returned -14 [ 1074.781743][ T4662] siw: device registration error -23 [ 1075.738856][ T4686] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 1075.761237][ T4686] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1075.866315][ T4686] vhci_hcd vhci_hcd.0: Device attached [ 1075.873847][ T40] kauditd_printk_skb: 23 callbacks suppressed [ 1075.873866][ T40] audit: type=1326 audit(2000000477.899:560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4684 comm="syz.0.2274" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aef6c code=0x7ffc0000 [ 1075.873921][ T40] audit: type=1326 audit(2000000477.899:561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4684 comm="syz.0.2274" exe="/syz-executor" sig=0 arch=40000003 syscall=138 compat=1 ip=0xf70aef6c code=0x7ffc0000 [ 1075.873959][ T40] audit: type=1326 audit(2000000477.899:562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4684 comm="syz.0.2274" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aef6c code=0x7ffc0000 [ 1075.874061][ T40] audit: type=1326 audit(2000000477.899:563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4684 comm="syz.0.2274" exe="/syz-executor" sig=0 arch=40000003 syscall=120 compat=1 ip=0xf70aef6c code=0x7ffc0000 [ 1076.123716][ T4703] rdma_rxe: rxe_newlink: failed to add wg2 [ 1076.189587][T29725] usb 46-1: SetAddress Request (23) to port 0 [ 1076.189650][T29725] usb 46-1: new SuperSpeed USB device number 23 using vhci_hcd [ 1076.232291][ T4695] vhci_hcd: connection reset by peer [ 1076.244037][T30202] vhci_hcd vhci_hcd.4: stop threads [ 1076.247129][T30202] vhci_hcd vhci_hcd.4: release socket [ 1076.270280][T30202] vhci_hcd vhci_hcd.4: disconnect device [ 1076.305227][ T40] audit: type=1326 audit(2000000478.309:564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4705 comm="syz.0.2274" exe="/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf71e5b6b code=0x7ffc0000 [ 1076.368712][ T40] audit: type=1326 audit(2000000478.339:565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4684 comm="syz.0.2274" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aef6c code=0x7ffc0000 [ 1076.446544][ T40] audit: type=1326 audit(2000000478.339:566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4684 comm="syz.0.2274" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aef6c code=0x7ffc0000 [ 1076.519248][ T40] audit: type=1326 audit(2000000478.509:567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4705 comm="syz.0.2274" exe="/syz-executor" sig=0 arch=40000003 syscall=1 compat=1 ip=0xf70aef6c code=0x7ffc0000 [ 1076.783807][ T40] audit: type=1326 audit(2000000478.749:568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4684 comm="syz.0.2274" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70aef78 code=0x7ffc0000 [ 1076.884709][ T40] audit: type=1326 audit(2000000478.819:569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4684 comm="syz.0.2274" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aef6c code=0x7ffc0000 [ 1077.421966][ T24] usb 48-1: device descriptor read/8, error -110 [ 1077.818300][ T24] usb usb48-port1: attempt power cycle [ 1078.395031][ T24] usb usb48-port1: unable to enumerate USB device [ 1078.524150][ T4729] bond1: (slave dummy0): Releasing active interface [ 1078.528479][ T4729] dummy0: left promiscuous mode [ 1078.535141][ T4729] dummy0: left allmulticast mode [ 1078.580025][ T4729] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1078.647820][ T4739] input: syz1 as /devices/virtual/input/input11 [ 1079.083739][ T24] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 1079.254306][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 1079.257883][ T24] usb 5-1: config 0 has an invalid interface number: 176 but max is 0 [ 1079.261605][ T24] usb 5-1: config 0 has no interface number 0 [ 1079.264568][ T24] usb 5-1: config 0 interface 176 has no altsetting 0 [ 1079.280822][ T24] usb 5-1: New USB device found, idVendor=050d, idProduct=0115, bcdDevice= 1.33 [ 1079.303417][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1079.332956][ T24] usb 5-1: Product: syz [ 1079.341420][ T24] usb 5-1: Manufacturer: syz [ 1079.344259][ T24] usb 5-1: SerialNumber: syz [ 1079.362240][ T24] usb 5-1: config 0 descriptor?? [ 1079.375337][ T24] usb-storage 5-1:0.176: USB Mass Storage device detected [ 1079.533100][ T24] usb-storage 5-1:0.176: Quirks match for vid 050d pid 0115: 4 [ 1080.236229][ T4837] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 1080.240598][ T4837] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1080.258391][ T4837] vhci_hcd vhci_hcd.0: Device attached [ 1080.432413][ T4898] vhci_hcd: connection closed [ 1080.432709][T22799] vhci_hcd vhci_hcd.5: stop threads [ 1080.437179][T22799] vhci_hcd vhci_hcd.5: release socket [ 1080.440351][T22799] vhci_hcd vhci_hcd.5: disconnect device [ 1080.786506][ T4946] hsr0: entered promiscuous mode [ 1080.791412][ T4946] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2283'. [ 1080.797442][ T4946] hsr_slave_0: left promiscuous mode [ 1080.810730][ T4946] hsr0 (unregistering): left promiscuous mode [ 1081.243828][T29725] usb 46-1: device descriptor read/8, error -110 [ 1081.587803][ T29] usb 5-1: USB disconnect, device number 8 [ 1081.769831][T29725] usb usb46-port1: attempt power cycle [ 1082.217843][ T4965] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2289'. [ 1082.220799][ T4965] netlink: 2 bytes leftover after parsing attributes in process `syz.0.2289'. [ 1082.414628][T29725] usb usb46-port1: unable to enumerate USB device [ 1084.124889][ T4982] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1089.900226][ T5007] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 1089.904046][ T5007] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1089.913947][ T5007] vhci_hcd vhci_hcd.0: Device attached [ 1090.310689][ T1455] usb 38-1: SetAddress Request (59) to port 0 [ 1090.314176][ T1455] usb 38-1: new SuperSpeed USB device number 59 using vhci_hcd [ 1090.395772][ T5017] binder: 5012:5017 ioctl c0306201 0 returned -14 [ 1090.448722][ T5008] vhci_hcd: connection reset by peer [ 1090.454406][ T6215] vhci_hcd vhci_hcd.0: stop threads [ 1090.456713][ T6215] vhci_hcd vhci_hcd.0: release socket [ 1090.459462][ T6215] vhci_hcd vhci_hcd.0: disconnect device [ 1093.794086][T27439] Bluetooth: hci3: unexpected event for opcode 0x1005 [ 1094.078071][ T5030] bridge0: port 2(bridge_slave_1) entered disabled state [ 1094.082181][ T5030] bridge0: port 1(bridge_slave_0) entered disabled state [ 1094.919141][ T5030] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1094.955257][ T5030] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1095.404423][ T1455] usb 38-1: device descriptor read/8, error -110 [ 1095.857497][ T1455] usb usb38-port1: attempt power cycle [ 1096.419893][ T1455] usb usb38-port1: unable to enumerate USB device [ 1096.491468][ T3871] wg1 speed is unknown, defaulting to 1000 [ 1096.495267][ T220] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1096.495330][ T220] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1096.500033][ T3871] syz0: Port: 1 Link DOWN [ 1096.525841][ T220] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1096.531956][ T220] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1101.717815][ T5045] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 1101.744881][ T5045] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1101.936588][ T5045] vhci_hcd vhci_hcd.0: Device attached [ 1102.050274][ T5046] vhci_hcd: connection closed [ 1102.050671][ T1167] vhci_hcd vhci_hcd.0: stop threads [ 1102.064288][ T1167] vhci_hcd vhci_hcd.0: release socket [ 1102.066684][ T1167] vhci_hcd vhci_hcd.0: disconnect device [ 1103.684533][ T63] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1103.760046][ T63] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1103.846790][ T63] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1103.852561][ T63] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1103.896174][ T63] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1104.518186][ T5063] wg1 speed is unknown, defaulting to 1000 [ 1104.556307][ T40] audit: type=1326 audit(2000000506.559:570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5066 comm="syz.0.2312" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aef6c code=0x7ffc0000 [ 1104.633115][ T40] audit: type=1326 audit(2000000506.559:571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5066 comm="syz.0.2312" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aef6c code=0x7ffc0000 [ 1104.709517][ T40] audit: type=1326 audit(2000000506.559:572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5066 comm="syz.0.2312" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf70aef6c code=0x7ffc0000 [ 1104.743828][ T40] audit: type=1326 audit(2000000506.559:573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5066 comm="syz.0.2312" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aef6c code=0x7ffc0000 [ 1104.784295][ T40] audit: type=1326 audit(2000000506.559:574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5066 comm="syz.0.2312" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aef6c code=0x7ffc0000 [ 1104.854976][ T40] audit: type=1326 audit(2000000506.559:575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5066 comm="syz.0.2312" exe="/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf70aef6c code=0x7ffc0000 [ 1105.181531][ T5075] wg1 speed is unknown, defaulting to 1000 [ 1105.695387][ T5087] input: syz1 as /devices/virtual/input/input12 [ 1105.699046][ T5063] chnl_net:caif_netlink_parms(): no params data found [ 1106.010493][ T63] Bluetooth: hci1: command tx timeout [ 1106.075731][ T24] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 1106.147902][ T5063] bridge0: port 1(bridge_slave_0) entered blocking state [ 1106.169561][ T5063] bridge0: port 1(bridge_slave_0) entered disabled state [ 1106.172623][ T5063] bridge_slave_0: entered allmulticast mode [ 1106.185399][ T5063] bridge_slave_0: entered promiscuous mode [ 1106.190366][ T5063] bridge0: port 2(bridge_slave_1) entered blocking state [ 1106.195498][ T5063] bridge0: port 2(bridge_slave_1) entered disabled state [ 1106.201996][ T5063] bridge_slave_1: entered allmulticast mode [ 1106.213296][ T5063] bridge_slave_1: entered promiscuous mode [ 1106.223949][ T24] usb 9-1: Using ep0 maxpacket: 32 [ 1106.319086][ T24] usb 9-1: config 0 has an invalid interface number: 176 but max is 0 [ 1106.322763][ T24] usb 9-1: config 0 has no interface number 0 [ 1106.325945][ T24] usb 9-1: config 0 interface 176 has no altsetting 0 [ 1106.335841][ T24] usb 9-1: New USB device found, idVendor=050d, idProduct=0115, bcdDevice= 1.33 [ 1106.351642][ T24] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1106.386222][ T24] usb 9-1: Product: syz [ 1106.388243][ T24] usb 9-1: Manufacturer: syz [ 1106.390632][ T24] usb 9-1: SerialNumber: syz [ 1106.395922][ T24] usb 9-1: config 0 descriptor?? [ 1106.415755][ T5063] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1106.421127][ T5063] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1106.452693][ T24] usb-storage 9-1:0.176: USB Mass Storage device detected [ 1106.472924][ T24] usb-storage 9-1:0.176: Quirks match for vid 050d pid 0115: 4 [ 1106.855687][ T5063] team0: Port device team_slave_0 added [ 1106.864583][ T5063] team0: Port device team_slave_1 added [ 1106.960704][ T5063] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1107.001756][ T5063] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1107.013651][ T5063] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1107.036006][ T5063] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1107.039600][ T5063] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1107.079925][ T5063] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1107.235922][ T5063] hsr_slave_0: entered promiscuous mode [ 1107.241362][ T5063] hsr_slave_1: entered promiscuous mode [ 1107.244436][ T5063] debugfs: 'hsr0' already exists in 'hsr' [ 1107.250338][ T5063] Cannot create hsr debugfs directory [ 1107.928792][ T5063] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1107.960080][ T5063] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1108.005266][ T5063] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1108.044008][ T63] Bluetooth: hci1: command tx timeout [ 1108.046245][ T5063] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1108.381284][ T3871] IPVS: starting estimator thread 0... [ 1108.479813][ T5063] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1108.483803][ T5100] IPVS: using max 30 ests per chain, 72000 per kthread [ 1108.525311][ T5063] 8021q: adding VLAN 0 to HW filter on device team0 [ 1108.563018][T30202] bridge0: port 1(bridge_slave_0) entered blocking state [ 1108.573523][T30202] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1108.606530][T30202] bridge0: port 2(bridge_slave_1) entered blocking state [ 1108.612585][T30202] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1108.668318][ T5109] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2314'. [ 1108.672339][ T5109] netlink: 3 bytes leftover after parsing attributes in process `syz.5.2314'. [ 1108.750415][ T5109] batadv1: entered allmulticast mode [ 1108.830640][ T138] usb 9-1: USB disconnect, device number 8 [ 1108.892443][ T5063] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1108.913707][ T5063] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1109.327992][ T4996] ================================================================== [ 1109.361365][ T4996] BUG: KASAN: slab-use-after-free in __list_del_entry_valid_or_report+0x1b1/0x1d0 [ 1109.364808][ T4996] Read of size 8 at addr ffff8880005395b8 by task syz.2.2297/4996 [ 1109.372074][ T4996] [ 1109.373702][ T4996] CPU: 1 UID: 0 PID: 4996 Comm: syz.2.2297 Tainted: G L syzkaller #0 PREEMPT(full) [ 1109.373729][ T4996] Tainted: [L]=SOFTLOCKUP [ 1109.373735][ T4996] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1109.373744][ T4996] Call Trace: [ 1109.373754][ T4996] [ 1109.373761][ T4996] dump_stack_lvl+0x100/0x190 [ 1109.373787][ T4996] print_report+0x156/0x4c9 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1109.373809][ T4996] ? __virt_addr_valid+0x81/0x620 [ 1109.373828][ T4996] ? __phys_addr+0xe8/0x180 [ 1109.373846][ T4996] ? __list_del_entry_valid_or_report+0x1b1/0x1d0 [ 1109.373865][ T4996] kasan_report+0xdf/0x1e0 [ 1109.373891][ T4996] ? __list_del_entry_valid_or_report+0x1b1/0x1d0 [ 1109.373912][ T4996] __list_del_entry_valid_or_report+0x1b1/0x1d0 [ 1109.373933][ T4996] bulk_make_private+0xd8/0x720 [ 1109.373962][ T4996] umount_tree+0x3fb/0xec0 [ 1109.373980][ T4996] ? lock_acquire+0x1cf/0x380 [ 1109.373996][ T4996] ? __pfx_umount_tree+0x10/0x10 [ 1109.374014][ T4996] ? switch_task_namespaces+0x89/0x2c0 [ 1109.374030][ T4996] put_mnt_ns+0x267/0x300 [ 1109.374047][ T4996] switch_task_namespaces+0x133/0x2c0 [ 1109.374062][ T4996] do_exit+0x824/0x2aa0 [ 1109.374079][ T4996] ? lock_acquire+0x1cf/0x380 [ 1109.374096][ T4996] ? find_held_lock+0x2b/0x80 [ 1109.374118][ T4996] ? __pfx_do_exit+0x10/0x10 [ 1109.374136][ T4996] ? find_held_lock+0x2b/0x80 [ 1109.374159][ T4996] ? get_signal+0x7e0/0x21e0 [ 1109.374175][ T4996] do_group_exit+0xd5/0x2a0 [ 1109.374195][ T4996] get_signal+0x1ec7/0x21e0 [ 1109.374211][ T4996] ? __pfx_do_recvmmsg+0x10/0x10 [ 1109.374237][ T4996] ? __pfx_get_signal+0x10/0x10 [ 1109.374254][ T4996] arch_do_signal_or_restart+0x91/0x770 [ 1109.374273][ T4996] ? __pfx_sched_setaffinity+0x10/0x10 [ 1109.374289][ T4996] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1109.374310][ T4996] ? __pfx___sys_recvmmsg+0x10/0x10 [ 1109.374331][ T4996] exit_to_user_mode_loop+0x86/0x4a0 [ 1109.374353][ T4996] __do_fast_syscall_32+0x578/0x8c0 [ 1109.374374][ T4996] do_fast_syscall_32+0x32/0x70 [ 1109.374392][ T4996] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1109.374413][ T4996] RIP: 0023:0xf709ef6c [ 1109.374426][ T4996] Code: Unable to access opcode bytes at 0xf709ef42. [ 1109.374433][ T4996] RSP: 002b:00000000f548d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000151 [ 1109.374450][ T4996] RAX: 000000000007fffa RBX: 0000000000000004 RCX: 00000000800000c0 [ 1109.374460][ T4996] RDX: 0000000068a00e35 RSI: 0000000040000002 RDI: 0000000000000000 [ 1109.374470][ T4996] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1109.374479][ T4996] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1109.374489][ T4996] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1109.374504][ T4996] [ 1109.374510][ T4996] [ 1109.716432][ T4996] Allocated by task 4725: [ 1109.737267][ T4996] kasan_save_stack+0x30/0x50 [ 1109.740152][ T4996] kasan_save_track+0x14/0x30 [ 1109.742274][ T4996] __kasan_slab_alloc+0x89/0x90 [ 1109.744465][ T4996] kmem_cache_alloc_noprof+0x241/0x6e0 [ 1109.746830][ T4996] alloc_vfsmnt+0x23/0x6a0 [ 1109.770936][ T4996] clone_mnt+0x4b/0x930 [ 1109.772807][ T4996] copy_tree+0x329/0xbf0 [ 1109.785787][ T4996] copy_mnt_ns+0x2bd/0xc30 [ 1109.787779][ T4996] create_new_namespaces+0xd3/0xac0 [ 1109.795611][ T4996] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 1109.809065][ T4996] ksys_unshare+0x455/0xab0 [ 1109.811740][ T4996] __ia32_sys_unshare+0x30/0x40 [ 1109.814495][ T4996] __do_fast_syscall_32+0xe3/0x8c0 [ 1109.817759][ T4996] do_fast_syscall_32+0x32/0x70 [ 1109.837647][ T4996] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1109.841431][ T4996] [ 1109.842514][ T4996] Freed by task 15: [ 1109.844374][ T4996] kasan_save_stack+0x30/0x50 [ 1109.846440][ T4996] kasan_save_track+0x14/0x30 [ 1109.848509][ T4996] kasan_save_free_info+0x3b/0x70 [ 1109.850495][ T4996] __kasan_slab_free+0x5f/0x80 [ 1109.852486][ T4996] kmem_cache_free+0x124/0x6a0 [ 1109.854733][ T4996] rcu_core+0x5a2/0x10d0 [ 1109.870767][ T4996] handle_softirqs+0x1eb/0x9e0 [ 1109.872628][ T4996] run_ksoftirqd+0x38/0x60 [ 1109.874406][ T4996] smpboot_thread_fn+0x3d3/0xaa0 [ 1109.876275][ T4996] kthread+0x370/0x450 [ 1109.877870][ T4996] ret_from_fork+0x754/0xd80 [ 1109.879657][ T4996] ret_from_fork_asm+0x1a/0x30 [ 1109.881879][ T4996] [ 1109.894754][ T4996] Last potentially related work creation: [ 1109.909605][ T4996] kasan_save_stack+0x30/0x50 [ 1109.911786][ T4996] kasan_record_aux_stack+0xa7/0xc0 [ 1109.914217][ T4996] __call_rcu_common.constprop.0+0xa5/0x9b0 [ 1109.917082][ T4996] task_work_run+0x150/0x240 [ 1109.920107][ T4996] do_exit+0x829/0x2aa0 [ 1109.922207][ T4996] do_group_exit+0xd5/0x2a0 [ 1109.934795][ T4996] get_signal+0x1ec7/0x21e0 [ 1109.936641][ T4996] arch_do_signal_or_restart+0x91/0x770 [ 1109.938971][ T4996] exit_to_user_mode_loop+0x86/0x4a0 [ 1109.941340][ T4996] __do_fast_syscall_32+0x578/0x8c0 [ 1109.954024][ T4996] do_fast_syscall_32+0x32/0x70 [ 1109.956324][ T4996] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1109.959493][ T4996] [ 1109.960723][ T4996] Second to last potentially related work creation: [ 1109.981373][ T4996] kasan_save_stack+0x30/0x50 [ 1109.983866][ T4996] kasan_record_aux_stack+0xa7/0xc0 [ 1109.986254][ T4996] task_work_add+0x28b/0x3b0 [ 1109.989061][ T4996] mntput_no_expire_slowpath+0x3da/0xb00 [ 1109.992491][ T4996] mntput_no_expire+0x1fd/0x220 [ 1110.001630][ T4996] namespace_unlock+0x675/0x920 [ 1110.006030][ T4996] put_mnt_ns+0x290/0x300 [ 1110.015480][ T4996] switch_task_namespaces+0x133/0x2c0 [ 1110.018810][ T4996] do_exit+0x824/0x2aa0 [ 1110.021388][ T4996] do_group_exit+0xd5/0x2a0 [ 1110.024182][ T4996] get_signal+0x1ec7/0x21e0 [ 1110.030984][ T4996] arch_do_signal_or_restart+0x91/0x770 [ 1110.034774][ T4996] exit_to_user_mode_loop+0x86/0x4a0 [ 1110.053599][ T4996] __do_fast_syscall_32+0x578/0x8c0 [ 1110.056362][ T4996] do_fast_syscall_32+0x32/0x70 [ 1110.058557][ T4996] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1110.061611][ T4996] [ 1110.063322][ T4996] The buggy address belongs to the object at ffff888000539500 [ 1110.063322][ T4996] which belongs to the cache mnt_cache of size 352 [ 1110.078201][ T4996] The buggy address is located 184 bytes inside of [ 1110.078201][ T4996] freed 352-byte region [ffff888000539500, ffff888000539660) [ 1110.085398][ T4996] [ 1110.086445][ T4996] The buggy address belongs to the physical page: [ 1110.100560][ T4996] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x538 [ 1110.106241][ T4996] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1110.116002][ T4996] memcg:ffff888000538171 [ 1110.122268][ T4996] flags: 0x7ff00000000040(head|node=0|zone=0|lastcpupid=0x7ff) [ 1110.125890][ T4996] page_type: f5(slab) [ 1110.133948][ T63] Bluetooth: hci1: command tx timeout [ 1110.138868][ T4996] raw: 007ff00000000040 ffff88804049cc80 dead000000000100 dead000000000122 [ 1110.138891][ T4996] raw: 0000000000000000 000001c000120012 00000000f5000000 ffff888000538171 [ 1110.138906][ T4996] head: 007ff00000000040 ffff88804049cc80 dead000000000100 dead000000000122 [ 1110.138920][ T4996] head: 0000000000000000 000001c000120012 00000000f5000000 ffff888000538171 [ 1110.138934][ T4996] head: 007ff00000000001 ffffea0000014e01 00000000ffffffff 00000000ffffffff [ 1110.138947][ T4996] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 1110.138963][ T4996] page dumped because: kasan: bad access detected [ 1110.138974][ T4996] page_owner tracks the page as allocated [ 1110.138980][ T4996] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5934, tgid 5934 (syz-executor), ts 57236323792, free_ts 32997054258 [ 1110.139013][ T4996] post_alloc_hook+0x153/0x170 [ 1110.139034][ T4996] get_page_from_freelist+0x111d/0x3140 [ 1110.139054][ T4996] __alloc_frozen_pages_noprof+0x27c/0x2ba0 [ 1110.139103][ T4996] new_slab+0xa6/0x6d0 [ 1110.139119][ T4996] refill_objects+0x26b/0x400 [ 1110.139136][ T4996] __pcs_replace_empty_main+0x19f/0x600 [ 1110.139154][ T4996] kmem_cache_alloc_noprof+0x480/0x6e0 [ 1110.139173][ T4996] alloc_vfsmnt+0x23/0x6a0 [ 1110.139189][ T4996] path_mount+0x1e6b/0x23d0 [ 1110.139203][ T4996] __ia32_sys_mount+0x292/0x310 [ 1110.139218][ T4996] __do_fast_syscall_32+0xe3/0x8c0 [ 1110.139236][ T4996] do_fast_syscall_32+0x32/0x70 [ 1110.139253][ T4996] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1110.139272][ T4996] page last free pid 5643 tgid 5643 stack trace: [ 1110.139281][ T4996] __free_frozen_pages+0x7e1/0x10d0 [ 1110.139298][ T4996] qlist_free_all+0x47/0xe0 [ 1110.139317][ T4996] kasan_quarantine_reduce+0x1a0/0x1f0 [ 1110.139337][ T4996] __kasan_slab_alloc+0x69/0x90 [ 1110.139358][ T4996] kmem_cache_alloc_node_noprof+0x25a/0x6f0 [ 1110.139379][ T4996] __alloc_skb+0x140/0x710 [ 1110.139392][ T4996] alloc_skb_with_frags+0xe0/0x810 [ 1110.139408][ T4996] sock_alloc_send_pskb+0x801/0x980 [ 1110.139431][ T4996] unix_dgram_sendmsg+0x3c7/0x1820 [ 1110.139450][ T4996] unix_seqpacket_sendmsg+0x12a/0x1d0 [ 1110.139470][ T4996] sock_write_iter+0x566/0x610 [ 1110.139489][ T4996] do_iter_readv_writev+0x6ee/0x920 [ 1110.139508][ T4996] vfs_writev+0x360/0xe10 [ 1110.139528][ T4996] do_writev+0x28a/0x340 [ 1110.139547][ T4996] do_syscall_64+0x106/0xf80 [ 1110.139563][ T4996] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1110.139579][ T4996] [ 1110.139583][ T4996] Memory state around the buggy address: [ 1110.139592][ T4996] ffff888000539480: fb fb fb fb fc fc fc fc fc fc fc fc fc fc fc fc [ 1110.139604][ T4996] ffff888000539500: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1110.139615][ T4996] >ffff888000539580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1110.139624][ T4996] ^ [ 1110.139633][ T4996] ffff888000539600: fb fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 1110.139644][ T4996] ffff888000539680: fc fc fc fc fc fc fc fc fa fb fb fb fb fb fb fb [ 1110.139652][ T4996] ================================================================== [ 1110.140280][ T4996] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1110.140298][ T4996] CPU: 1 UID: 0 PID: 4996 Comm: syz.2.2297 Tainted: G L syzkaller #0 PREEMPT(full) [ 1110.140321][ T4996] Tainted: [L]=SOFTLOCKUP [ 1110.140327][ T4996] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1110.140336][ T4996] Call Trace: [ 1110.140341][ T4996] [ 1110.140347][ T4996] dump_stack_lvl+0x100/0x190 [ 1110.140372][ T4996] vpanic+0x552/0x970 [ 1110.140388][ T4996] ? __pfx_vpanic+0x10/0x10 [ 1110.140404][ T4996] ? mark_held_locks+0x40/0x70 [ 1110.140425][ T4996] ? __list_del_entry_valid_or_report+0x1b1/0x1d0 [ 1110.140446][ T4996] panic+0xd1/0xe0 [ 1110.140460][ T4996] ? __pfx_panic+0x10/0x10 [ 1110.140479][ T4996] ? check_panic_on_warn+0x1f/0x90 [ 1110.140503][ T4996] check_panic_on_warn.cold+0x19/0x34 [ 1110.140520][ T4996] end_report.part.0+0x3a/0x90 [ 1110.140542][ T4996] kasan_report.cold+0xe/0x18 [ 1110.140565][ T4996] ? __list_del_entry_valid_or_report+0x1b1/0x1d0 [ 1110.140588][ T4996] __list_del_entry_valid_or_report+0x1b1/0x1d0 [ 1110.140608][ T4996] bulk_make_private+0xd8/0x720 [ 1110.140862][ T4996] umount_tree+0x3fb/0xec0 [ 1110.141491][ T4996] ? lock_acquire+0x1cf/0x380 [ 1110.141766][ T4996] ? __pfx_umount_tree+0x10/0x10 [ 1110.142039][ T4996] ? switch_task_namespaces+0x89/0x2c0 [ 1110.142322][ T4996] put_mnt_ns+0x267/0x300 [ 1110.142397][ T4996] switch_task_namespaces+0x133/0x2c0 [ 1110.142555][ T4996] do_exit+0x824/0x2aa0 [ 1110.637757][ T4996] ? lock_acquire+0x1cf/0x380 [ 1110.640470][ T4996] ? find_held_lock+0x2b/0x80 [ 1110.643160][ T4996] ? __pfx_do_exit+0x10/0x10 [ 1110.652379][ T4996] ? find_held_lock+0x2b/0x80 [ 1110.655662][ T4996] ? get_signal+0x7e0/0x21e0 [ 1110.671044][ T4996] do_group_exit+0xd5/0x2a0 [ 1110.673561][ T4996] get_signal+0x1ec7/0x21e0 [ 1110.676437][ T4996] ? __pfx_do_recvmmsg+0x10/0x10 [ 1110.679761][ T4996] ? __pfx_get_signal+0x10/0x10 [ 1110.683321][ T4996] arch_do_signal_or_restart+0x91/0x770 [ 1110.687501][ T4996] ? __pfx_sched_setaffinity+0x10/0x10 [ 1110.703786][ T4996] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1110.708379][ T4996] ? __pfx___sys_recvmmsg+0x10/0x10 [ 1110.711767][ T4996] exit_to_user_mode_loop+0x86/0x4a0 [ 1110.726973][ T4996] __do_fast_syscall_32+0x578/0x8c0 [ 1110.729143][ T4996] do_fast_syscall_32+0x32/0x70 [ 1110.731216][ T4996] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1110.733778][ T4996] RIP: 0023:0xf709ef6c [ 1110.735472][ T4996] Code: Unable to access opcode bytes at 0xf709ef42. [ 1110.739686][ T4996] RSP: 002b:00000000f548d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000151 [ 1110.745134][ T4996] RAX: 000000000007fffa RBX: 0000000000000004 RCX: 00000000800000c0 [ 1110.764540][ T4996] RDX: 0000000068a00e35 RSI: 0000000040000002 RDI: 0000000000000000 [ 1110.769331][ T4996] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1110.773488][ T4996] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1110.781062][ T4996] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1110.792030][ T4996] [ 1110.795112][ T4996] Kernel Offset: disabled [ 1110.798288][ T4996] Rebooting in 86400 seconds.. VM DIAGNOSIS: 17:43:17 Registers: info registers vcpu 0 CPU#0 RAX=dffffc0000000000 RBX=0000000000000000 RCX=ffffffff82642919 RDX=0000000000000000 RSI=0000000000000004 RDI=ffffea0001bdb274 RBP=1ffffd400037b64e RSP=ffffc90007cb7020 R8 =0000000000000000 R9 =1ffffd400037b64e R10=ffffea0001bdb277 R11=dffffc0000000000 R12=ffffea0001bdb240 R13=000000000006f6c8 R14=ffffea0001bdb200 R15=dffffc0000000000 RIP=ffffffff82735bf1 RFL=00000807 [-O---PC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888097151000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000002d305ff8 CR3=000000004dc18000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000600 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=000000000000003a RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85769f25 RDI=ffffffff9b486f80 RBP=ffffffff9b486f40 RSP=ffffc90006f67420 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=2e7a7973203a5043 R12=0000000000000000 R13=000000000000003a R14=0000000000000010 R15=ffffffff85769ec0 RIP=ffffffff85769f4f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888097251000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000002d2dcff8 CR3=00000000573f1000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ddcb2d34f198685f 875313f2bce2c91a ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 c4343f4390af249d c057b2a37e869e39 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2bf0792e454529b9 fa59e3eecb8ef288 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 bcdd8672b2e0c2c5 f77981ec636c0598 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000035c0 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000040 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0002a0b20002a0bd 0069e200c24a1b00 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000090002a0c6 000000020002a0c6 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0002a0bb53cd7600 f9f80e00dcb33f00 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0593f8004b49af00 000000104b93dc00 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 695feda8896dce16 332de0abfe11f386 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 b06b190f408022ff 52c1d759dd8b7bb2 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a54ff53a3c6ef372 bb67ae856a09e667 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5be0cd191f83d9ab 9b05688c510e527f ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=0000000000000001 RCX=ffffffff81fba592 RDX=ffff8880245c8000 RSI=ffffffff81fba56c RDI=ffff8880245c8000 RBP=ffff88802b342c20 RSP=ffffc90002e07878 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=0000000000000003 R13=ffffed1005668585 R14=0000000000000001 R15=ffff88802b43c500 RIP=ffffffff81fba56e RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 000fffff 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 000fffff 00000000 FS =0000 0000000000000000 000fffff 00000000 GS =0000 ffff888097351000 000fffff 00000000 LDT=0000 0000000000000000 000fffff 00000000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fb7dfea2c50 CR3=000000000e598000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000001000 Opmask01=0000000000000001 Opmask02=00000000fbf7ffdb Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055f5db7eb500 000055f5db7eb500 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6565656565656565 6565656565656565 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ff00ff0000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ffffffffffff0000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ff00ff0000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb7dfedab20 00007fb7dfedb050 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3d4d524554002f3d 454d4f4800306676 63696e2d76656474 656e002d2d00712d ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 640065676175676e 616c5f626400656c 7075745f62640062 6f6c625f62640065 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4800494b4d594b42 4d405f4e48004940 5c59585f4e48004e 43404e5f4e480049 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000001 RBX=ffff88801d316400 RCX=ffffffff868004af RDX=ffff888022bd0000 RSI=ffffffff8680054d RDI=ffff888022bd0000 RBP=0000000000000001 RSP=ffffc900005e8ea8 R8 =0000000000000004 R9 =0000000000000006 R10=0000000000000006 R11=0000000000000001 R12=ffffc90000415008 R13=0000000000000001 R14=ffff888029414028 R15=0000000000000000 RIP=ffffffff868006e7 RFL=00000092 [--S-A--] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888097451000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fb7dfd0f850 CR3=000000004cc01000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000