last executing test programs: 7m28.387412747s ago: executing program 2 (id=5022): r0 = openat$full(0xffffff9c, &(0x7f0000000000), 0x4b0101, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x88802, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSFLAGS1(r2, 0x40047459, &(0x7f00000000c0)=0x41) pwritev(r2, &(0x7f0000000040)=[{&(0x7f0000000240)="80fd0200004317122b018f42ab6f15b53098b9108154c550342729b594e158c886514949372d372d39e1dc961b814f3154213cdd3de6382dd1afff1dd9436485d8fb12e40f", 0x45}], 0x1, 0x0, 0x5) r3 = epoll_create1(0x80000) r4 = openat$pidfd(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) bind$can_j1939(r7, &(0x7f0000000100)={0x1d, r8, 0x8000000000000003, {0x0, 0x0, 0x4}, 0xfd}, 0x18) sendmsg$nl_route_sched(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=@newqdisc={0x24, 0x24, 0x300, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {0x10, 0x9}, {0xf, 0x5}, {0xe, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x4004845}, 0x480c5) close(r7) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x972, &(0x7f0000006680)) r9 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) preadv2(r9, 0x0, 0x0, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000100)=[{r0, 0x2000}, {r1, 0x8040}, {r2, 0x2002}, {0xffffffffffffffff, 0x420}, {r3, 0xf080}, {r4}], 0x6, &(0x7f0000000180)={r5, r6+10000000}, &(0x7f00000001c0)={[0x4, 0x8001]}, 0x8) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="5c010000", @ANYRES16=r11, @ANYBLOB="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"], 0x15c}}, 0x24008050) 7m28.176422648s ago: executing program 2 (id=5026): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000280)="44001d7d5e8a1f1f93c9d77e95a4e3b9ab1221998408b0ea16063a2ade630f616f1e53354f625c27739601ce23671e772e45383bc79fb97a91abf4d72ef12b58622106dda595169228262e18c44fd248cd94a17048793ce254d9a5ec9980e5a5f5e3741bdb", 0x65, 0x24004811, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@window={0x3, 0x1, 0x8}, @window={0x3, 0x6, 0x7}, @sack_perm, @window={0x3, 0x0, 0x4}, @mss={0x2, 0x4}, @timestamp, @timestamp, @mss={0x2, 0x6}], 0x8) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/3\x00') r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)) sendmsg$inet(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000100)="9a", 0x1}], 0x1}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)=ANY=[@ANYBLOB="20000000360001002bfd7004fcdbdf25040000004800662516fc6f6e90b60400"], 0x20}, 0x1, 0x0, 0x0, 0x24040050}, 0x24000080) sendto$inet(r0, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0) 7m28.081149168s ago: executing program 2 (id=5027): socket$inet(0x2, 0x4000000000000001, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) pipe(&(0x7f0000000000)) socket$kcm(0x10, 0x100000000002, 0x4) add_key(&(0x7f0000000140)='big_key\x00', 0x0, &(0x7f0000000200)="dce0a29617d1a46ff9c7abb92f8b412eb1839f91c1f8b4eca6913985d261b25042c6c60693dff3d0a61092d6fc3a42fe394f5baa549357681793e967de2f308088287b272681157a26092aae8e90948da1cc7574b21afb63ab52c01af95c2e527ae3da57f1d370836dcce1d5fe9389f7057a5e5d83306cf87638", 0x7a, 0x0) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="12013f00000000407f04ffff0000000000010902240001", @ANYRES8], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f0000000300), 0x3, 0xaa140) r2 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_mreq(r2, 0x29, 0x12, &(0x7f0000000340)={@remote}, 0x14) r3 = socket$inet(0xa, 0x801, 0x84) connect$inet(r3, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r3, 0x8) accept4(r3, 0x0, 0x0, 0x800) r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x8ad01, 0x0) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, &(0x7f00000000c0)={'c6xdigio\x00', [0x6484, 0xd7b, 0x8000000, 0x1, 0x3, 0x5, 0x4, 0x7, 0x54c6cff3, 0xfd, 0x2002, 0x1, 0x1, 0x1, 0x6, 0x6a, 0x3, 0xc7c, 0x1, 0x40000003, 0x5, 0xcaa5, 0x10000, 0x20001e57, 0x3, 0x2000e66, 0x3, 0x1, 0x10004086, 0x0, 0xfffffff8]}) write(r4, 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000400)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2000, 0x1a8) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x200) fchdir(r5) getcwd(0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'netdevsim0\x00', 0x0}) sendmsg$ETHTOOL_MSG_COALESCE_SET(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYRES32=r7, @ANYBLOB="080011"], 0x28}, 0x1, 0x0, 0x0, 0x40000c5}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) pipe(&(0x7f0000000080)) 7m27.530797016s ago: executing program 2 (id=5030): r0 = socket$nl_generic(0x10, 0x3, 0x10) mount(&(0x7f0000000100)=@nullb, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='nilfs2\x00', 0x1084490, 0x0) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x100) fcntl$notify(r1, 0x402, 0x8000000b) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000000)=0x20) r2 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x200) r3 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000000)={0x1000, 0x10ffff, 0xfffffffd}) writev(r3, &(0x7f0000000300)=[{&(0x7f0000000080)="ae", 0x1}], 0x1) ioctl$CEC_S_MODE(r2, 0x40046109, &(0x7f0000000040)=0x12) ioctl$CEC_S_MODE(r2, 0x40046109, &(0x7f00000000c0)=0x12) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)={0x1c, 0x26, 0x109, 0x860bd22, 0xfffffff9, {0x17}, [@typed={0x8, 0x3, 0x0, 0x0, @binary='G\x00\x00\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20008008) 7m27.458268721s ago: executing program 2 (id=5032): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) epoll_create(0x8) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000fcffe0ff00000000000000008500000036000000850000000e00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0xe, 0x0, &(0x7f0000000040)="f7edad00"/14, 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) sendmsg$NL80211_CMD_JOIN_OCB(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)={0x24, r2, 0x1, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}]}, 0x24}}, 0x4008000) socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x80080, 0x0) ioctl$KVM_CREATE_VM(r5, 0x40086806, 0x21) pselect6(0x40, &(0x7f0000000100)={0x0, 0x3, 0x0, 0x1, 0x800, 0x2}, 0x0, &(0x7f0000000240)={0x1f, 0x3, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r6, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r6, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x6d207ee5}, 0x8) bind$inet6(r6, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000001140)=[{{&(0x7f0000000580)={0xa, 0x4e23, 0x1, @loopback}, 0x1c, &(0x7f00000006c0)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000400)='.', 0x1}], 0x1}}], 0x2, 0x8020) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r6, 0x84, 0x77, &(0x7f0000000180)=ANY=[@ANYRES32=0x0, @ANYBLOB="9b000200020006"], 0xc) r7 = socket$netlink(0x10, 0x3, 0x4) writev(r7, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b45602067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a04000000ffffffffe6ffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="50000000090601020000000000000000030000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0c00148008000140ac1414bb0c0002800800"], 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) 7m26.841556936s ago: executing program 2 (id=5033): r0 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000500)="5c00000013006bcc9e3be35c6e17aa31076b876c1c0000007ea60864160af3651400a101c00364683b9dad7aa21240d69a6a819bf6c551ae60fc91b169edb1b175732b9f597fe3b6c5a3d77cc766307de200"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4044) (fail_nth: 3) 7m26.832682055s ago: executing program 32 (id=5033): r0 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000500)="5c00000013006bcc9e3be35c6e17aa31076b876c1c0000007ea60864160af3651400a101c00364683b9dad7aa21240d69a6a819bf6c551ae60fc91b169edb1b175732b9f597fe3b6c5a3d77cc766307de200"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4044) (fail_nth: 3) 3m51.174400664s ago: executing program 1 (id=6883): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x2, 0x2) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f00000001c0)=0x1) ioctl$VIDIOC_S_FREQUENCY(r0, 0x402c5639, &(0x7f0000000080)={0x0, 0x2, 0x7}) 3m51.149060012s ago: executing program 1 (id=6885): r0 = syz_open_procfs(0x0, &(0x7f0000000300)='net/icmp6\x00') preadv(r0, 0x0, 0x0, 0x7, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000a80)={0x11, 0xf9, &(0x7f0000000980)="ed3ffaaee757b2cd0ee092f1063a9eeeb21b038a1fdc3a899e2b4dbd65a62b8aa9925307f5f739eb68714a2e99c1ae402c41dc29f1cd8f5ee78cb61c1df53301be009b228e2a008843313493ea4c36f5c2f9ed9c318e6dda5d255701eb589ac2f5a64976b798a4fceff277808a3d2fb84f5852e1075ad4b5bec1126d58f686e0e6117b3eedb53e9e53823064a67cc3f131c72c614ac16a052322966df0fac02a2a2674e1d04fb2ed354d499ad02b5529d8dbdfd8ce9a24b54683460a135d40bf6f85af17af750c7d2a2c4f909b9fb2de590432b12750aad767aa49076117bf42e20b88664941ddd5a8b1f10a29901aa195e43e532545df9d5f"}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xf, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000006000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000ebff00008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b7000000"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000300)=[{{&(0x7f0000000000)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x4, 0x0}}, 0x10, 0x0}}], 0x1, 0x4000000) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000005c0)=ANY=[@ANYRESDEC=0x0, @ANYRESOCT=0x0, @ANYRESOCT=0x0], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') init_module(&(0x7f0000000d40)=ANY=[], 0xa99, &(0x7f0000001800)='GPL\x00') r5 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r5, &(0x7f0000000d00)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffffc}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000400)="b8", 0x1}], 0x1, 0x0, 0x0, 0xff000000}}, {{&(0x7f0000000080)={0xa, 0x4e20, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x45af}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000340)="01", 0x1}], 0x1b6}}], 0x2, 0x0) r6 = syz_io_uring_setup(0xf03, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x0, 0x51}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r7, r8, r9, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10}) io_uring_enter(r6, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) 3m50.160095427s ago: executing program 1 (id=6891): r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x0) ioctl$I2C_SMBUS(r0, 0x720, 0x0) 3m50.128113072s ago: executing program 1 (id=6893): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x0, 0x800, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0x2, 0x8032, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x3, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x7fff}}]}, 0x38}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x1, 0x3}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/functions/phonet.usb0\x00', 0x1ff) r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r5, &(0x7f0000000280)='dummy_udc.0', 0xb) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x3, 0x6, 0x7, 0x200, 0x2, 0x8, 0x8ed, 0x10, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x48081}, 0x8810) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'veth1_macvtap\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r4) r11 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r12 = add_key$fscrypt_v1(&(0x7f0000000440), &(0x7f0000000480)={'fscrypt:', @auto=[0x0, 0x0, 0x0, 0x34]}, &(0x7f00000000c0)={0x0, "3e82554dc8ccfbc2e85ec82d4ee9df60f6ae16b1a5f2c848722ba3b132e4fde178c945bd950b0477e801fc8a1be9b4ebbe9c2289a6b0aa00", 0x40}, 0x48, 0xfffffffffffffffe) r13 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioprio_get$pid(0x2, r13) keyctl$get_persistent(0x16, 0x0, r12) sendmsg$ETHTOOL_MSG_FEATURES_SET(r11, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000180)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) 3m49.981518434s ago: executing program 1 (id=6894): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0x200, 0x70bd26, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [0x3, 0x4, 0x0, 0x1, 0x0, 0x5, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x10, 0x0, 0x7, 0x4], 0x2, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc, 0x0, 0x1000], [0x0, 0x4, 0x0, 0x0, 0xffff, 0x0, 0xfffd, 0x0, 0x0, 0x0, 0x2, 0xfffd, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x20008004}, 0x20000000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000005f00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_KEY(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="28fcff7f0424335c422717c72a27aa89ff1a66044c675200fd20", @ANYRES16=r1, @ANYBLOB="010029bd7000ffdbdf250a00000008000300", @ANYRES32=r3, @ANYBLOB="0c0050800800070003000000"], 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x8000) write(0xffffffffffffffff, &(0x7f0000000300)="600000001800050601000000000000000a400000fe040001000000001400200020010db8000100000000000000000001080004000100000006", 0x39) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r4, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) r5 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) socket$packet(0x11, 0x2, 0x300) ioctl$VHOST_SET_VRING_BASE(r6, 0xaf01, 0x0) r7 = eventfd(0x7) ioctl$VHOST_SET_VRING_KICK(r6, 0x4008af20, &(0x7f0000000000)={0x0, r7}) ioctl$VHOST_SET_LOG_FD(r6, 0x4004af07, &(0x7f0000000240)=r7) ioctl$VHOST_SET_VRING_KICK(r6, 0x4008af20, &(0x7f0000000040)={0x1, r7}) ioctl$VHOST_SET_VRING_ADDR(r6, 0x4028af11, &(0x7f0000000080)={0x0, 0x1, 0x0, &(0x7f00000002c0)=""/82, 0x0, 0xeeeb5000}) ioctl$VHOST_SET_VRING_ADDR(r6, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r6, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_VSOCK_SET_RUNNING(r6, 0x4004af61, &(0x7f0000000140)=0x1) fremovexattr(r5, &(0x7f0000000040)=@known='system.posix_acl_default\x00') syz_emit_ethernet(0x46, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x2, 0x7fffffff, &(0x7f0000002480)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x8031, r5, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r8 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$set_timeout(0xf, r8, 0x2) keyctl$set_timeout(0xf, r8, 0x79) 3m48.918739455s ago: executing program 1 (id=6899): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r0 = syz_open_dev$rtc(&(0x7f0000000000), 0x8, 0x80000) ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f0000000040)={0x1, 0x1, {0x26, 0x30, 0x17, 0xd, 0x2, 0x7, 0x4, 0xec, 0xffffffffffffffff}}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)={0x2c, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_WANT_1X_4WAY_HS={0x4}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x2c}}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000340)=@newsa={0x184, 0x10, 0x713, 0x0, 0x25dfdbff, {{@in=@loopback, @in6=@remote}, {@in6=@remote, 0x0, 0x32}, @in6=@mcast1, {}, {}, {}, 0x0, 0x3, 0x2}, [@algo_crypt={0x48, 0x2, {{'cbc(aes)\x00'}}}, @algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}, 0x0, 0x2}}]}, 0x184}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x1010, r0, 0x3a8bc000) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r5) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x28, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x2, 0x0, 0x1}}]}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=@newqdisc={0x200, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x1d0, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x1000, 0xa, 0x64, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x200}}, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r5, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, r6, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r8}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x63a}]}, 0x2c}, 0x1, 0x0, 0x0, 0x41}, 0x8011) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000260009012269cf90fac668657d42594f9b75b2a2bd6008f9"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20008008) madvise(&(0x7f00001d5000/0x1000)=nil, 0x1000, 0x9) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) 3m48.851809964s ago: executing program 33 (id=6899): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r0 = syz_open_dev$rtc(&(0x7f0000000000), 0x8, 0x80000) ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f0000000040)={0x1, 0x1, {0x26, 0x30, 0x17, 0xd, 0x2, 0x7, 0x4, 0xec, 0xffffffffffffffff}}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)={0x2c, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_WANT_1X_4WAY_HS={0x4}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x2c}}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000340)=@newsa={0x184, 0x10, 0x713, 0x0, 0x25dfdbff, {{@in=@loopback, @in6=@remote}, {@in6=@remote, 0x0, 0x32}, @in6=@mcast1, {}, {}, {}, 0x0, 0x3, 0x2}, [@algo_crypt={0x48, 0x2, {{'cbc(aes)\x00'}}}, @algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}, 0x0, 0x2}}]}, 0x184}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x1010, r0, 0x3a8bc000) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r5) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x28, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x2, 0x0, 0x1}}]}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=@newqdisc={0x200, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x1d0, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x1000, 0xa, 0x64, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x200}}, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r5, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, r6, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r8}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x63a}]}, 0x2c}, 0x1, 0x0, 0x0, 0x41}, 0x8011) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000260009012269cf90fac668657d42594f9b75b2a2bd6008f9"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20008008) madvise(&(0x7f00001d5000/0x1000)=nil, 0x1000, 0x9) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) 3m1.478432192s ago: executing program 4 (id=7144): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000008500000010000000850000005000000095"], 0x0, 0x0, 0x0, 0x0, 0x136e54520700452d, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000780850000002d"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000840)={{r1}, &(0x7f00000007c0), &(0x7f0000000800)=r2}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0x13, 0x8, 0x4, 0x0, 0x2400, 0x1}, 0x48) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x20) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x200, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_GET_DIRTY_LOG(r5, 0x4010ae42, 0x0) r6 = socket$netlink(0x10, 0x3, 0x4) r7 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0xc4, 0x8, 0x8}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000080), 0x8000, r9}, 0x38) sendto$packet(r7, &(0x7f0000000000)="05004305", 0x5e0, 0x0, &(0x7f0000000080)={0x11, 0x8100, r8}, 0x14) r10 = syz_open_dev$mtd(&(0x7f0000000100), 0x0, 0x101000) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000180)={r2, 0xffffffffffffffff}, 0x4) fcntl$addseals(r11, 0x409, 0x7) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000540)=ANY=[@ANYBLOB="1c000000180001efff00000000000000050000000800b8"], 0x1c}, 0x1, 0x0, 0x0, 0x44}, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x10, 0xffffffffffffffff, 0x0) ioctl$MEMGETREGIONINFO(r10, 0xc0104d08, 0x0) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, 0x0, 0x0) 3m0.752549364s ago: executing program 4 (id=7148): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000600000004000000000000010400000020040000000000000000000d040000000000000000000010040000000400000000000008030000000000000061"], 0x0, 0x52}, 0x28) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x180) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8880, 0x85) lseek(r0, 0xaeb, 0x1) getdents64(r0, 0x0, 0x4f) socket$packet(0x11, 0x3, 0x300) r1 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0x0, 0x40055}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x2011}}) io_uring_enter(r1, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) r5 = syz_usb_connect$cdc_ncm(0x0, 0x7a, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902680002010040000904000001020e0000052406000105240000000d370f0100000000000000000006241a0000000c241b4800f3ff00050080050905810300020000000904010000020d00000904010102020d00000905820200040000000905030200"], 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000480)={0x1e8, r7, 0x1, 0x0, 0x1, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x1bc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x2}, @ETHTOOL_A_BITSET_BITS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'ceph\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_BITS={0x8, 0x3, 0x0, 0x1, [{0x4}]}, @ETHTOOL_A_BITSET_BITS={0xcc, 0x3, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'aead\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7f}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xbbf6}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '+\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '.:/\xbf.\x00'}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '%\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, '%\'!(,/\xa8%$-\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}]}, {0x4}]}, @ETHTOOL_A_BITSET_MASK={0xc4, 0x5, "8c43c5b08f8ce7cfb5f0a9faea887e3aae3270eeda3f65521dddfaf3c8856e5ac7d0abbb11ec7198057ef61f50c67525aaff9f2546219a5864829a30b8cb5b7743d5b864aea3ebe2c528c327a4bd74d4fbcb748390b32415282e8bf848a11e6a1cc3ac4dda061ce2bd0d4cb10692f1eb5cc58f4dabf3221acd88409738efedac94b13d31dbb5850e8bd6ef4b88b971e34c83dd3bae983f4fc536035439c1d2eb9b343512cc1fb9fd177bcaf4eda6d4b759bdb59c1069fa3381d6fb3ef36dc56b"}]}, @ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}]}]}, 0x1e8}, 0x1, 0x0, 0x0, 0x40}, 0x4048086) syz_usb_control_io$cdc_ncm(r5, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r5, 0x0, 0x0) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'authenc(streebog256-generic,pcbc(fcrypt-generic))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r5, 0x0, &(0x7f0000000000)={0x24, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x20, 0x80, 0x1c, {0x1, 0x28, 0xe4d, 0x81, 0x3fc, 0xfffd, 0x5, 0xfffffffe, 0x800, 0x9, 0x0, 0x2}}, 0x0, 0x0, 0x0, 0x0}) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=@base={0x18, 0x4, 0x41, 0x0, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x48) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 2m58.879186844s ago: executing program 4 (id=7162): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_io_uring_setup(0x6384, &(0x7f0000000180)={0x0, 0xbf56, 0x11000, 0x8003, 0x2d0}, &(0x7f0000001040), &(0x7f0000000080), &(0x7f0000000000)) io_uring_enter(r1, 0x7b20, 0xe93c, 0x0, 0x0, 0x0) r2 = openat$cgroup_root(0xffffff9c, &(0x7f0000000280)='./cgroup.net/syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000100)={@cgroup=r2, r0, 0x19, 0x10, 0x0, @void, @value=r0}, 0x20) r3 = io_uring_setup(0x667, &(0x7f0000000000)={0x0, 0xa14a, 0x1000, 0x2, 0x235}) r4 = socket$rds(0x15, 0x5, 0x0) setsockopt$sock_int(r4, 0x1, 0x3c, &(0x7f0000000080)=0x1, 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) lsm_set_self_attr(0x69, &(0x7f0000000e40)={0x68, 0x8, 0x20}, 0x20, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000000080)={'wg1\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xf, &(0x7f0000000740)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', r6, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bind$rds(r4, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee6, 0x8031, 0xffffffffffffffff, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCETHTOOL(r7, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000000)=@ethtool_rxnfc={0x0, 0xd, 0x6, {0xb, @usr_ip6_spec={@empty, @dev={0xfe, 0x80, '\x00', 0x2d}, 0xfffffff8, 0x3d, 0xe}, {0x0, @remote, 0xe, 0x4, [0x7, 0x6]}, @ah_ip4_spec={@multicast1, @private=0xa010101, 0xfffffffc, 0x45}, {0x0, @empty, 0xfff, 0x5, [0x209, 0xf]}, 0xff, 0x3}}}) r8 = syz_open_procfs(0x0, &(0x7f0000000140)='fdinfo/3\x00') landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r8, 0x1, &(0x7f0000000340)={0x5420, r4}, 0x1) read$FUSE(r8, &(0x7f00000040c0)={0x2020}, 0x2020) 2m58.217148186s ago: executing program 4 (id=7167): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) close(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) request_key(0x0, 0x0, &(0x7f0000000340)='\x8e\x00\x9e\xbb\x1e\x1av\xe8M\x00d\xaaI\x00\x00\x00\x00\x00\x00\t<\xe5u\xedA\xa7\aT\xdd\xd1{\xff\xcb\xdb\xb11\xc2s\xcb\xbf\x04\x00\x00\x00<\xfe\xf9\f\xe6E\b\x00\xd7\x85q\xc4\xab\xbd&\x92\x89(\xf3\"\xceJ\x19\x185\xa6- \xe6uK\xe1D\x8f\x9f\x92\xca\x93#\xf5E\xc2\x91Yl\x17\a\x02\t\x17\x7f\xc4\xde\x04\x9b\x89#\xf6&[\xd81\xb3\xdc\x00\x04\x15\x03\x17R\xd24\xeb\xb5\xc2\xff\x1bnF\x8e\xe4\'\x18\xba9.\xd4\xd9\xc6\x98\x8f\xc6D!p\xbeV\xb7x\r@\x1b5\x8br\x11\xdex\x19\x89\xdc\x1el\xcd\x13\xb6\xc2\xdb\x1fr2\x7f?\xfe\x0f\x04\x11\xc3\x8f:uXQ\x0f\v\xfc\xff\x7fL\xfb\xa8]\xd4\xd7\x13?\xe3<#\x1f\x9a\x03C\x8f\xe7\rV1\x99\xaf@Re\x18J\xb6\xee\xeeAnR\n\x8a\xe4\x1a:&\xc7\x15B\x8aG\xa4\a`\xee\xaf\x80T\xddo\xc4D^z\xbf\x1c\x87F?!k\'\xc3\xf9\xa3\xd9\x85\xb1N%\x17\f\xd0#\x05^\xf7\x11\x13\xadKb\x8ck\x10\xd3 >\t\xe0\x16\x80\x82\xb3\xcc\xc7\x05*\x9b\x0eQ\x92\xd7\xbaO\x06\xb2\xdc\xe7/\x1f\x90]IB94(evFMJ\x85\xc4S\xa8\x8b\xbe\xd3\x90\xe9\t\x00\x13\x1e\x9a\x94\x00\x00\x00\x00\x00U\xfbLA\xa6K\xd5\x0eD\xf2Y\xc3,\t4hD\xc4o\xc3\x87$\x9d6\xc8\x93\xa3\x8e:\xfe#\xa0`\xb1k\xacz\xe0\xb3\x95\x17\xdf\xc7\xc2\xedKc\xa3\xbd\xc2\x9f\x86C(/\xe3\xb2\xc6$s^\xd1vU\x9cB)ao\xf1\'', 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x187) lsetxattr$security_capability(&(0x7f0000000000)='./file1/file2\x00', &(0x7f0000000140), 0x0, 0x0, 0x1) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)={0x4c, 0x2, 0x6, 0x101, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000040}, 0x2) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e27}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x66}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x80) sendmsg$IPSET_CMD_SAVE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000080601080000000000000000010000010500010007000076"], 0x1c}, 0x1, 0x0, 0x0, 0x40044}, 0x48040) 2m57.386290756s ago: executing program 4 (id=7171): r0 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x141080) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000200)=0x5) openat$audio(0xffffffffffffff9c, &(0x7f0000000100), 0x80002, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) writev(r1, &(0x7f0000003a00)=[{&(0x7f0000000300)="ca", 0x1}], 0x1) 2m57.122194796s ago: executing program 4 (id=7172): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) syz_open_dev$I2C(&(0x7f00000007c0), 0x0, 0x40) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = socket$kcm(0x29, 0x5, 0x0) write$cgroup_pressure(r2, &(0x7f0000000140)={'full'}, 0xfffffdef) sendmmsg(r2, 0x0, 0x0, 0x88c3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8f}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000300)={0x0, 'veth0_to_bridge\x00', {0x3}, 0x7}) recvfrom$inet(r4, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_ASSOCIATE(r5, &(0x7f0000000a80)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000ac0)={0x188, r6, 0x4, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x400, 0x1, 0x7, 0x0, {0x7, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x400, 0x7, 0xc5}}, @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x8, 0x0, 0x5, 0x0, {0x7, 0x9, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2}, 0x300, 0x9, 0xd}}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x8000, 0x1, 0x4, 0x0, {0x2b7, 0xd, 0x0, 0x8, 0x0, 0x1}, 0x6, 0xb, 0x7f}}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_IE={0xb8, 0x2a, [@ibss={0x6, 0x2, 0x2}, @random_vendor={0xdd, 0x88, "fef5a96a0991e2b0a550cda51526859ed34db6b6f08ffb1e0abd17a1065c8d4fe8327b22b71d929fda289adf38cacd9c48387e684e098aaeb5dcfeab2a250ca450b8263fc2945fa48ef1dfd80923744ee22d060bd2f575e28e38ba2544824037add61ca9399155b2090df2d4a0189e9cf57daed5b3f172b07ae34c7228d2a01f60a9d27754337d73"}, @mic={0x8c, 0x18, {0x54e, "09c190aa2b3c", @long="2948b92902edf1ed39878a2ec9ac08af"}}, @ssid={0x0, 0xa, @random="6cc70fa6f72f4485540c"}]}, @crypto_settings=[@NL80211_ATTR_PMK={0x11, 0xfe, "836a99982e07eaad3be1f4a2d0"}, @NL80211_ATTR_PMK={0xb, 0xfe, "3585575c7a0612"}, @NL80211_ATTR_CIPHER_SUITE_GROUP={0x8, 0x4a, 0xfac02}, @NL80211_ATTR_CIPHER_SUITES_PAIRWISE={0x10, 0x49, [0xfac04, 0xfac09, 0x4]}], @NL80211_ATTR_PREV_BSSID={0xa, 0x4f, @random="357bc1b4a846"}]}, 0x188}, 0x1, 0x0, 0x0, 0x8040}, 0x20000800) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c80)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r8, @ANYBLOB="0000000000601c15622eb8120000b70300001d00000a850000000c000000b70000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x94) r9 = openat$cdrom(0xffffff9c, &(0x7f00000002c0), 0x101100, 0x0) ioctl$CDROMPLAYBLK(r9, 0x5317, 0x0) 2m41.875369209s ago: executing program 34 (id=7172): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) syz_open_dev$I2C(&(0x7f00000007c0), 0x0, 0x40) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = socket$kcm(0x29, 0x5, 0x0) write$cgroup_pressure(r2, &(0x7f0000000140)={'full'}, 0xfffffdef) sendmmsg(r2, 0x0, 0x0, 0x88c3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8f}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000300)={0x0, 'veth0_to_bridge\x00', {0x3}, 0x7}) recvfrom$inet(r4, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_ASSOCIATE(r5, &(0x7f0000000a80)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000ac0)={0x188, r6, 0x4, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x400, 0x1, 0x7, 0x0, {0x7, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x400, 0x7, 0xc5}}, @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x8, 0x0, 0x5, 0x0, {0x7, 0x9, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2}, 0x300, 0x9, 0xd}}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x8000, 0x1, 0x4, 0x0, {0x2b7, 0xd, 0x0, 0x8, 0x0, 0x1}, 0x6, 0xb, 0x7f}}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_IE={0xb8, 0x2a, [@ibss={0x6, 0x2, 0x2}, @random_vendor={0xdd, 0x88, "fef5a96a0991e2b0a550cda51526859ed34db6b6f08ffb1e0abd17a1065c8d4fe8327b22b71d929fda289adf38cacd9c48387e684e098aaeb5dcfeab2a250ca450b8263fc2945fa48ef1dfd80923744ee22d060bd2f575e28e38ba2544824037add61ca9399155b2090df2d4a0189e9cf57daed5b3f172b07ae34c7228d2a01f60a9d27754337d73"}, @mic={0x8c, 0x18, {0x54e, "09c190aa2b3c", @long="2948b92902edf1ed39878a2ec9ac08af"}}, @ssid={0x0, 0xa, @random="6cc70fa6f72f4485540c"}]}, @crypto_settings=[@NL80211_ATTR_PMK={0x11, 0xfe, "836a99982e07eaad3be1f4a2d0"}, @NL80211_ATTR_PMK={0xb, 0xfe, "3585575c7a0612"}, @NL80211_ATTR_CIPHER_SUITE_GROUP={0x8, 0x4a, 0xfac02}, @NL80211_ATTR_CIPHER_SUITES_PAIRWISE={0x10, 0x49, [0xfac04, 0xfac09, 0x4]}], @NL80211_ATTR_PREV_BSSID={0xa, 0x4f, @random="357bc1b4a846"}]}, 0x188}, 0x1, 0x0, 0x0, 0x8040}, 0x20000800) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c80)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r8, @ANYBLOB="0000000000601c15622eb8120000b70300001d00000a850000000c000000b70000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x94) r9 = openat$cdrom(0xffffff9c, &(0x7f00000002c0), 0x101100, 0x0) ioctl$CDROMPLAYBLK(r9, 0x5317, 0x0) 2m18.441064007s ago: executing program 0 (id=7350): socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0xc0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000180)=0x4, 0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) r3 = openat$cgroup_subtree(r2, &(0x7f00000006c0), 0x2, 0x0) syz_open_procfs$pagemap(0x0, &(0x7f0000000500)) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000340), 0x2440, 0x0) ioctl$PTP_EXTTS_REQUEST2(r4, 0xc4c03d12, &(0x7f0000000040)={0x5, 0x4}) write$cgroup_subtree(r3, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) write$cgroup_subtree(r3, &(0x7f0000000040)={[{0x2b, 'cpu'}]}, 0x5) setreuid(0xee00, 0x0) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x181c82, 0x0) write$sequencer(r5, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000200)=[@timestamp, @timestamp], 0x2) r6 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r6, 0x0, 0x27, &(0x7f0000000100)={@multicast2, @local}, 0xc) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x4000, 0x4, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x10001}}}}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYRES32, @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/11], 0x50) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x0, 0x1}) r7 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$KDGETMODE(r7, 0x4b3b, &(0x7f0000000000)) 2m16.992891195s ago: executing program 0 (id=7359): r0 = syz_open_dev$evdev(&(0x7f00000001c0), 0x1bbc, 0x801) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000000180)=0xa) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0xffff, 0x341182) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0x7, 0x23}, 0x90) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000840)={r5, @in6={{0xa, 0x4e23, 0xe84, @empty, 0x129}}, 0x2, 0x2, 0x0, 0x2, 0x5, 0x8, 0x4}, 0x9c) pread64(0xffffffffffffffff, 0x0, 0x0, 0x200) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x1c) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x8814) mount(0x0, 0x0, 0x0, 0x8, 0x0) sendmsg$IPSET_CMD_LIST(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000000706010400000000000040000300000a050001"], 0x1c}, 0x1, 0x0, 0x0, 0x20004055}, 0x48000) 2m15.998233107s ago: executing program 0 (id=7364): setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=@newlink={0x54, 0x10, 0x403, 0x70bd27, 0x3, {0x0, 0x0, 0x0, 0x0, 0x90446}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}, @IFLA_VLAN_INGRESS_QOS={0x10, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x5, 0x1}}]}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000600}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 2m15.882079215s ago: executing program 0 (id=7365): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/functions/uvc.0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/uvc.0/streaming/mjpeg/m1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/functions/uvc.0/streaming/mjpeg/m1/bmaControls\x00', 0x2, 0x0) write(r0, &(0x7f0000000300)='123\x00', 0x3) socket$inet6(0xa, 0x80002, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f00000001c0)={0x8, 0x9, 0x4, 0x0, 0x4, 0x3}, 0xc) r2 = socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) prlimit64(0x0, 0xe, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000280)={'\x00', 0x8001, 0x9, 0x8, 0xfffffffffffffffc, 0x6, 0xffffffffffffffff}) sched_setscheduler(r3, 0x7, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="2c0000001e0021002b85951a710b54d4c53ad87f3a5fa9e200f78a0000"], 0x2c}}, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x2) syz_open_dev$usbfs(&(0x7f0000000040), 0xfffffff7, 0x400) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000180)={0x238f, 0x9}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000340)='./config/usb_gadget/g1\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/usb/drivers/usb/unbind\x00', 0x1, 0x0) write(r5, &(0x7f0000000200)='usb1', 0x4) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000001d80), 0x0, 0x0, 0x0, 0x20004880}, 0xc000) sendmmsg$inet(r2, &(0x7f0000000580)=[{{&(0x7f00000003c0)={0x2, 0x4e23, @rand_addr=0x64010100}, 0x10, 0x0, 0x0, &(0x7f0000000400)=[@ip_tos_u8={{0xd, 0x0, 0x1, 0xff}}, @ip_pktinfo={{0x18, 0x0, 0x8, {0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast}}}], 0x28}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000440)="36a8afe304c17b72d9d6a45c5c1256d7520cc1be3e666e1dc9d099b04417b779badd4995286a5864e610785f04d516f5af52d0b32aefca895d7cf47c08f6eea31bcb678b039b4d1f9ca064be2581e8ef1225a29b460b4ba520f6fcaad63f70e16809a775d0be8bfdf80b17a0a0eb57614ef47c4408162934c0002c92d07fe56a736c71084a2c7e9ccbe208dc9c7c06a99fbfc408660a8052c59cae0cdcd05007778417ecaced00d61b45254c88dbe3c5ccae482a59ffd698011245f266cc41", 0xbf}], 0x1, &(0x7f0000000540)=[@ip_ttl={{0x10, 0x0, 0x2, 0x7}}, @ip_ttl={{0x10, 0x0, 0x2, 0x2}}], 0x20}}], 0x2, 0x24008080) ioctl$USBDEVFS_CLAIMINTERFACE(r4, 0x8004550f, &(0x7f0000000140)=0x6) syz_usb_connect(0x5, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002020000407b06032300010102030109022d00010100800e090400"], 0x0) 2m15.175151422s ago: executing program 0 (id=7372): setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=@newlink={0x54, 0x10, 0x403, 0x70bd27, 0x3, {0x0, 0x0, 0x0, 0x0, 0x90446}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}, @IFLA_VLAN_INGRESS_QOS={0x10, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x5, 0x1}}]}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000600}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 2m13.979679398s ago: executing program 0 (id=7376): mknod(&(0x7f0000000240)='./bus\x00', 0x1000, 0xa0000005) r0 = open(&(0x7f0000000140)='./bus\x00', 0x8002, 0x91) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000700000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8ffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e4ffffff000000000000000000000000000000590277240000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$cgroup_type(r0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ed) mount(0x0, &(0x7f0000000080)='./tracing\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./tracing/uprobe_events\x00', 0x201, 0x0) r2 = eventfd2(0x0, 0x0) close(r2) write$eventfd(r2, &(0x7f0000000180)=0x5, 0xfffffde3) ioctl$AUTOFS_IOC_PROTOVER(r1, 0x80049363, &(0x7f0000000040)) 2m13.599016706s ago: executing program 35 (id=7376): mknod(&(0x7f0000000240)='./bus\x00', 0x1000, 0xa0000005) r0 = open(&(0x7f0000000140)='./bus\x00', 0x8002, 0x91) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000700000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8ffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e4ffffff000000000000000000000000000000590277240000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$cgroup_type(r0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ed) mount(0x0, &(0x7f0000000080)='./tracing\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./tracing/uprobe_events\x00', 0x201, 0x0) r2 = eventfd2(0x0, 0x0) close(r2) write$eventfd(r2, &(0x7f0000000180)=0x5, 0xfffffde3) ioctl$AUTOFS_IOC_PROTOVER(r1, 0x80049363, &(0x7f0000000040)) 1m1.426269357s ago: executing program 6 (id=7742): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000600000004000000000000010400000020040000000000000000000d040000000000000000000010040000000400000000000008030000000000000061"], 0x0, 0x52}, 0x28) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x180) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8880, 0x85) lseek(r0, 0xaeb, 0x1) getdents64(r0, 0x0, 0x4f) socket$packet(0x11, 0x3, 0x300) r1 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0x0, 0x40055}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x2011}}) io_uring_enter(r1, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) r5 = syz_usb_connect$cdc_ncm(0x0, 0x7a, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902680002010040000904000001020e0000052406000105240000000d370f0100000000000000000006241a0000000c241b4800f3ff00050080050905810300020000000904010000020d00000904010102020d00000905820200040000000905030200"], 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_DEBUG_SET(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000480)={0x1e8, 0x0, 0x1, 0x0, 0x1, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x1bc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x2}, @ETHTOOL_A_BITSET_BITS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'ceph\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_BITS={0x8, 0x3, 0x0, 0x1, [{0x4}]}, @ETHTOOL_A_BITSET_BITS={0xcc, 0x3, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'aead\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7f}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xbbf6}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '+\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '.:/\xbf.\x00'}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '%\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, '%\'!(,/\xa8%$-\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}]}, {0x4}]}, @ETHTOOL_A_BITSET_MASK={0xc4, 0x5, "8c43c5b08f8ce7cfb5f0a9faea887e3aae3270eeda3f65521dddfaf3c8856e5ac7d0abbb11ec7198057ef61f50c67525aaff9f2546219a5864829a30b8cb5b7743d5b864aea3ebe2c528c327a4bd74d4fbcb748390b32415282e8bf848a11e6a1cc3ac4dda061ce2bd0d4cb10692f1eb5cc58f4dabf3221acd88409738efedac94b13d31dbb5850e8bd6ef4b88b971e34c83dd3bae983f4fc536035439c1d2eb9b343512cc1fb9fd177bcaf4eda6d4b759bdb59c1069fa3381d6fb3ef36dc56b"}]}, @ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}]}]}, 0x1e8}, 0x1, 0x0, 0x0, 0x40}, 0x4048086) syz_usb_control_io$cdc_ncm(r5, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r5, 0x0, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'authenc(streebog256-generic,pcbc(fcrypt-generic))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r5, 0x0, &(0x7f0000000000)={0x24, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x20, 0x80, 0x1c, {0x1, 0x28, 0xe4d, 0x81, 0x3fc, 0xfffd, 0x5, 0xfffffffe, 0x800, 0x9, 0x0, 0x2}}, 0x0, 0x0, 0x0, 0x0}) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=@base={0x18, 0x4, 0x41, 0x0, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x48) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r8 = mq_open(&(0x7f0000000000)='!selinu\xff\x7f\x00\x00inux\x00T\x8b\xb5\xf3\xcb\xdd\xe3\xbf2\x86\x01\x84\xdd\x8a\x8f_l\xa1L\xb1\xef\xb2\xc9\xf7+C\xb2\x8e9\xb8\xec\x1a\xe5\xaeq\x8fZ\xff\xbcY+\xaf0<\xa3\xb8\"Zm\x1c\x18\x11\x93\xb5z \xc2\x8b\xa9\xc5\x9es\t\xfe\x002\xa0-\xaf\xcdP\x9f\xe5Iv\xce*\xa8\xa3\x14i\x05\x8f\x9b\x1eB\x9f\x9d#E\x19\xdc\xfe\xc7\xeb\xb5\xcd\xc8\xe2U\xce\x00\x00', 0x6e93ebbbcc0884f2, 0x2c, &(0x7f0000000300)={0x0, 0x1, 0x3}) mq_timedsend(r8, 0x0, 0x0, 0x0, 0x0) 59.654543486s ago: executing program 6 (id=7755): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000a00)={'syz1\x00', {0x6ec9, 0x7, 0x5, 0x5}, 0x3e, [0x9, 0x5, 0x8, 0x2, 0x5334, 0x400, 0x80000000, 0x8ef7, 0x8, 0x0, 0x6, 0xf5, 0x5, 0x39, 0x747d5a13, 0x8, 0xfffffb9a, 0xfffffffc, 0x4, 0xfffffffb, 0x4, 0x3, 0x4, 0xf252, 0x4, 0x800, 0x300000, 0x7, 0xe, 0x5, 0x0, 0x0, 0x1ff, 0x8000, 0x3ff, 0x3, 0xd, 0x3, 0xba55, 0x1000, 0x2, 0x200, 0x2, 0x400008, 0x8, 0x4, 0x2, 0x0, 0x8, 0x1009, 0x1, 0x199f, 0x8, 0x2, 0x9, 0x1, 0x4, 0x6, 0x1000, 0x5, 0x40, 0x9, 0x7, 0x5], [0x6, 0x1e, 0x3, 0x8000, 0xfffffffe, 0x3, 0x0, 0x5, 0x27, 0xfffffffc, 0x4, 0x7fff, 0x72c, 0x1c32, 0x3, 0x9, 0x10000, 0x400, 0x8001, 0x3, 0x1, 0x297, 0x5, 0x0, 0x981, 0x4, 0x100, 0x3ff, 0x0, 0xfffffffe, 0x0, 0x1000001, 0x10, 0xfffffff9, 0x0, 0x5, 0x1, 0xffffffff, 0x6, 0x5, 0x800, 0xffff, 0x6, 0x96, 0xfffffffd, 0x101, 0x0, 0x2, 0xffffffff, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0xb, 0x6, 0x2, 0x1, 0xa4, 0x8, 0x6, 0x200, 0x3], [0x401, 0xc584, 0x34711b8a, 0xcd4, 0xffff, 0x20, 0x7, 0x4, 0x8, 0x10, 0x7, 0x9, 0xe8b, 0x5, 0x80000001, 0x8, 0x3, 0x1000, 0x2, 0xe, 0x1, 0xfffffff9, 0xe55, 0x10, 0x80000001, 0x4, 0x4, 0x7, 0x9, 0x2, 0x20000005, 0x80, 0x9, 0xb, 0x47, 0x2, 0x3, 0x4, 0x7, 0x6d7e, 0x3, 0x8, 0x8001, 0xbf23, 0x6, 0x8, 0x95a, 0xffffffff, 0x4, 0x3, 0x6, 0x100fffd, 0x2005, 0x3, 0x4, 0xea, 0x9, 0x5, 0x2, 0xd9, 0x0, 0x7ff, 0x401, 0x5], [0x108e, 0x7fff, 0x3, 0x3, 0x88, 0x2, 0x6, 0x4, 0x40, 0x2, 0x763, 0xb, 0x402, 0x800, 0x2, 0xfff, 0x7f, 0x5, 0x3fa6, 0x4, 0x8e8, 0x5, 0x9, 0x4, 0xe47, 0x4, 0x0, 0x4, 0x4, 0x1000, 0x3b, 0x2, 0x5, 0x800, 0xa80a, 0x65f413fc, 0x4, 0x8, 0x8a8, 0x2, 0x40, 0x7, 0x2, 0x4, 0x4, 0x10, 0x0, 0x0, 0x7fff, 0x1, 0xfffffff8, 0x401, 0x1, 0x200, 0x7, 0x4edf, 0xfffffffd, 0xa, 0xe, 0x2, 0xe, 0xf, 0x133, 0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) readv(r0, &(0x7f00000005c0)=[{&(0x7f00000003c0)=""/138, 0x8a}], 0x1) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000040)={0x9, 0x2, 0x1000, 0x5}) socket$inet6(0xa, 0x80002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'dh\x00', 0x10, 0x5, 0x2d}, 0x2c) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x483, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'none\x00', 0x3a, 0x5, 0x54}, 0x2c) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) 58.679602028s ago: executing program 6 (id=7767): openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$ipvs(0xffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1000}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) mkdir(&(0x7f0000000000)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./my_configfs\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./my_sysfs\x00', 0x1ff) mkdir(&(0x7f0000000600)='./my_dev\x00', 0x1ff) mount(0x0, &(0x7f0000000700)='./my_dev\x00', &(0x7f0000000800)='devtmpfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000900)='./my_configfs/dlm/cluster1\x00', 0x1ff) write(0xffffffffffffffff, &(0x7f0000000b00)='cluster1\x00', 0x9) mkdir(&(0x7f0000000d00)='./my_configfs/dlm/cluster1/comms/1\x00', 0x1ff) r4 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='./my_configfs/dlm/cluster1/comms/1/local\x00', 0x2, 0x0) write(r4, &(0x7f0000000f00)='1\x00', 0x2) r5 = openat(0xffffffffffffff9c, &(0x7f0000001000)='./my_configfs/dlm/cluster1/comms/1/addr\x00', 0x1, 0x0) write(r5, &(0x7f0000001100)="0200"/128, 0x80) r6 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r6, &(0x7f00000000c0)='1\x00', 0x2) openat(0xffffffffffffff9c, &(0x7f0000001400)='./my_configfs/dlm/cluster1/scan_secs\x00', 0x2, 0x0) mkdir(&(0x7f0000001700)='./my_configfs/dlm/cluster1/spaces/ls1\x00', 0x1ff) mkdir(&(0x7f0000001900)='./my_configfs/dlm/cluster1/spaces/ls1/nodes/1\x00', 0x1ff) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@gettfilter={0x34, 0x2e, 0x100, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0xd, 0xfff2}, {0xfff2, 0x6}, {0x1, 0x7}}, [{0x8, 0xb, 0xffeffffd}, {0x8, 0xb, 0xffffffff}]}, 0x34}, 0x1, 0x0, 0x0, 0x4024850}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x4c, 0x2c, 0xd27, 0x60bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x4, 0xa}, {}, {0xffff}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0x1, 0xb}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8858}, 0x20004804) socket(0x400000000010, 0x3, 0x0) 58.655147924s ago: executing program 6 (id=7768): setns(0xc9, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x180) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x38b1012, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) umount2(&(0x7f0000000140)='./file0/file0\x00', 0x0) r0 = socket$netlink(0x10, 0x3, 0x8) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x78, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x3, 0x0, 0xa, 0x0, 0x3}, 0x1, 0x1, 0x80000001, 0x6, 0x2, 0x1c, 0x14, 0xa, 0x5, 0x7f, {0xc609, 0x5, 0x80, 0x5, 0x6, 0xf}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x2}, 0x0) recvfrom$inet_nvme(r1, &(0x7f00000001c0)=""/56, 0x38, 0x1, 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c643c, &(0x7f0000000040)={0x0, 0x3f00}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@newqdisc={0x98, 0x10, 0x400, 0x70bd25, 0x25dfdbfc, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0x1}, {0xe, 0x10}}, [@TCA_STAB={0x74, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, {0x4, 0x1b}}, {{0x1c, 0x1, {0x7, 0xfa, 0xfffd, 0xfffffff8, 0x2, 0x1, 0xf, 0x6}}, {0x10, 0x2, [0x282d, 0x8, 0x7, 0x7f, 0x2729, 0x8]}}, {{0x1c, 0x1, {0x4, 0x5, 0xf345, 0x12, 0x0, 0xfffffffd, 0x738e, 0x1}}, {0x6, 0x2, [0xd]}}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x400c800}, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180), 0x60042, 0x0) write$binfmt_elf64(r3, &(0x7f0000000100)=ANY=[@ANYBLOB="7f454c460e02fab7ff7f00000000000002000300fffeffffdf020000000000004000000000000000030300ef0000000000000000080038000100040004000d0003000000008000000000000000000000070000"], 0x78) 58.549580936s ago: executing program 6 (id=7769): r0 = syz_open_procfs(0x0, &(0x7f0000000300)='net/icmp6\x00') preadv(r0, 0x0, 0x0, 0x7, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00"/11], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xf, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000006000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000ebff00008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000300)=[{{&(0x7f0000000000)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x4, 0x0}}, 0x10, 0x0}}], 0x1, 0x4000000) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000005c0)=ANY=[@ANYRESDEC=0x0, @ANYRESOCT=0x0, @ANYRESOCT=0x0], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) init_module(&(0x7f0000000d40)=ANY=[], 0xa99, &(0x7f0000001800)='GPL\x00') r5 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r5, &(0x7f0000000d00)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffffc}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000400)="b8", 0x1}], 0x1, 0x0, 0x0, 0xff000000}}, {{&(0x7f0000000080)={0xa, 0x4e20, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x45af}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000340)="01", 0x1}], 0x1b6}}], 0x2, 0x0) r6 = syz_io_uring_setup(0xf03, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x0, 0x51}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r7, r8, r9, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10}) io_uring_enter(r6, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) 58.253068087s ago: executing program 6 (id=7774): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x14, 0xa, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x4800) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0), r1) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB=' ', @ANYRES16=0x0, @ANYBLOB="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"], 0x250}, 0x1, 0x0, 0x0, 0x24000085}, 0x20000001) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(r1, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f00000005c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010069bd7000fedbdf253f00000008000300", @ANYRES32=r4, @ANYRESHEX=r4], 0x58}, 0x1, 0x0, 0x0, 0x40040d0}, 0x4) 58.097505325s ago: executing program 36 (id=7774): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x14, 0xa, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x4800) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0), r1) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB=' ', @ANYRES16=0x0, @ANYBLOB="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"], 0x250}, 0x1, 0x0, 0x0, 0x24000085}, 0x20000001) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(r1, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f00000005c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010069bd7000fedbdf253f00000008000300", @ANYRES32=r4, @ANYRESHEX=r4], 0x58}, 0x1, 0x0, 0x0, 0x40040d0}, 0x4) 6.531515723s ago: executing program 3 (id=8080): r0 = syz_open_procfs(0x0, &(0x7f0000000300)='net/icmp6\x00') preadv(r0, &(0x7f00000002c0)=[{&(0x7f00000003c0)=""/253, 0xfd}], 0x1, 0x7, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000a80)={0x11, 0xf9, &(0x7f0000000980)="ed3ffaaee757b2cd0ee092f1063a9eeeb21b038a1fdc3a899e2b4dbd65a62b8aa9925307f5f739eb68714a2e99c1ae402c41dc29f1cd8f5ee78cb61c1df53301be009b228e2a008843313493ea4c36f5c2f9ed9c318e6dda5d255701eb589ac2f5a64976b798a4fceff277808a3d2fb84f5852e1075ad4b5bec1126d58f686e0e6117b3eedb53e9e53823064a67cc3f131c72c614ac16a052322966df0fac02a2a2674e1d04fb2ed354d499ad02b5529d8dbdfd8ce9a24b54683460a135d40bf6f85af17af750c7d2a2c4f909b9fb2de590432b12750aad767aa49076117bf42e20b88664941ddd5a8b1f10a29901aa195e43e532545df9d5f"}) bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xf, 0x0, &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) creat(&(0x7f0000000340)='./file0\x00', 0x4) socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x4000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000005c0)=ANY=[@ANYRESDEC=0x0, @ANYRESOCT=0x0, @ANYRESOCT=0x0], 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') init_module(&(0x7f0000000d40)=ANY=[], 0xa99, &(0x7f0000001800)='GPL\x00') socket$inet6_sctp(0xa, 0x801, 0x84) openat$ppp(0xffffffffffffff9c, &(0x7f0000000680), 0x101402, 0x0) r4 = syz_io_uring_setup(0xf03, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x0, 0x51}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r5, r6, r7, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10}) io_uring_enter(r4, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) 5.323429667s ago: executing program 8 (id=8081): socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f0000000140)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c0d23266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) socket(0x10, 0x3, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)={0x1}) r2 = getpgid(0x0) sched_setscheduler(r2, 0x0, &(0x7f00000001c0)=0x8) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x3, 0x0, 0x1}, {}, {0xeda7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x20000000, 0x3, 0x3f8, 0x0, 0x0, 0x2004cb, 0x3, 0x0, 0xfffffffffffffff8, 0x0, 0x9, 0x2000000000003ff, 0x2], 0x2000, 0x200206}) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 5.025684129s ago: executing program 8 (id=8082): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_io_uring_setup(0x6384, &(0x7f0000000180)={0x0, 0xbf56, 0x11000, 0x8003, 0x2d0}, &(0x7f0000001040), &(0x7f0000000080), &(0x7f0000000000)) io_uring_enter(r1, 0x7b20, 0xe93c, 0x0, 0x0, 0x0) r2 = openat$cgroup_root(0xffffff9c, 0x0, 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000100)={@cgroup=r2, r0, 0x19, 0x10, 0x0, @void, @value=r0}, 0x20) r3 = io_uring_setup(0x667, 0x0) r4 = socket$rds(0x15, 0x5, 0x0) setsockopt$sock_int(r4, 0x1, 0x3c, &(0x7f0000000080)=0x1, 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) lsm_set_self_attr(0x69, &(0x7f0000000e40)={0x68, 0x8, 0x20}, 0x20, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000000080)={'wg1\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xf, &(0x7f0000000740)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', r6, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bind$rds(r4, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r4, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000300)=""/4, 0xd000}], 0x1, &(0x7f0000001740)=[@zcopy_cookie={0x18, 0x114, 0xc, 0x800}], 0x18}, 0x4000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee6, 0x8031, 0xffffffffffffffff, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000000)=@ethtool_rxnfc={0x0, 0xd, 0x6, {0xb, @usr_ip6_spec={@empty, @dev={0xfe, 0x80, '\x00', 0x2d}, 0xfffffff8, 0x3d, 0xe}, {0x0, @remote, 0xe, 0x4, [0x7, 0x6]}, @ah_ip4_spec={@multicast1, @private=0xa010101, 0xfffffffc, 0x45}, {0x0, @empty, 0xfff, 0x5, [0x209, 0xf]}, 0xff, 0x3}}}) r7 = syz_open_procfs(0x0, &(0x7f0000000140)='fdinfo/3\x00') landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r7, 0x1, &(0x7f0000000340)={0x5420, r4}, 0x1) read$FUSE(r7, &(0x7f00000040c0)={0x2020}, 0x2020) 4.91987743s ago: executing program 7 (id=8083): syz_emit_ethernet(0x6c, &(0x7f0000000400)=ANY=[@ANYBLOB="0380c2000000bbbbbbbbbbbb08004500005e0000000000019078ac1e0001ac1414aa0400907800000000409700070067fffd03020000ac1414aa0a010101440416609404000044128d01b1fc6291cfc6e89633504a929e9e890f80ac14000000661600"/108], 0x0) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000001880)={0x28, 0x4, 0x6, 0x801, 0x0, 0x0, {0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x20008804}, 0xc810) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x800) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[], 0x80}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000800) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) r2 = socket$netlink(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r3, 0x1, 0x100, 0x25dfdbfd, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x6048801) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r2) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) (async) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000840), r5) sendmsg$NL80211_CMD_SET_BSS(r5, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000880)={0x24, r7, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0xa044}, 0x20000000) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x48, r4, 0x100, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x8, 0x1d}}}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x33}, @NL80211_ATTR_BSSID={0xa, 0xf5, @random="8763a45b2ef2"}]}, 0x48}, 0x1, 0x0, 0x0, 0xc0}, 0x2000880) (async) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, 0x0) (async) syz_io_uring_setup(0x141c, &(0x7f00000000c0)={0x0, 0xb782, 0x200, 0x0, 0x212}, &(0x7f00000001c0), 0x0, 0x0) (async) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x40, 0x16f) (async) execve(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) (async) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='smaps_rollup\x00') fchdir(r8) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) 4.79964731s ago: executing program 7 (id=8085): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000800) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) syz_emit_ethernet(0x7a, &(0x7f00000000c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb86dd60fc104600442f00fc040000000000000000000000000000ff020000000000000000000000000001242088a800000003000008000000000000000000080022eb"], 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newtaction={0x78, 0x30, 0x1, 0x70bd26, 0x0, {}, [{0x64, 0x1, [@m_ct={0x60, 0x1, 0x0, 0x0, {{0x7}, {0x38, 0x2, 0x0, 0x1, [@TCA_CT_LABELS={0x14, 0x7, "4614c334e344ae53204373dc0ddeb17f"}, @TCA_CT_ZONE={0x6, 0x8}, @TCA_CT_PARMS={0x18, 0x1, {0xfffffffc, 0x0, 0x3}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x40800}, 0x1010) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000000140)=ANY=[@ANYRES64=r1], &(0x7f0000000200)=0x35) 4.676679724s ago: executing program 3 (id=8087): openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$ipvs(0xffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1000}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) mkdir(&(0x7f0000000000)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./my_configfs\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./my_sysfs\x00', 0x1ff) mkdir(&(0x7f0000000600)='./my_dev\x00', 0x1ff) mkdir(&(0x7f0000000900)='./my_configfs/dlm/cluster1\x00', 0x1ff) write(0xffffffffffffffff, &(0x7f0000000b00)='cluster1\x00', 0x9) mkdir(&(0x7f0000000d00)='./my_configfs/dlm/cluster1/comms/1\x00', 0x1ff) r4 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='./my_configfs/dlm/cluster1/comms/1/local\x00', 0x2, 0x0) write(r4, &(0x7f0000000f00)='1\x00', 0x2) r5 = openat(0xffffffffffffff9c, &(0x7f0000001000)='./my_configfs/dlm/cluster1/comms/1/addr\x00', 0x1, 0x0) write(r5, &(0x7f0000001100)="0200"/128, 0x80) r6 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r6, &(0x7f00000000c0)='1\x00', 0x2) r7 = openat(0xffffffffffffff9c, &(0x7f0000001400)='./my_configfs/dlm/cluster1/scan_secs\x00', 0x2, 0x0) write(r7, &(0x7f0000001500), 0x0) mkdir(&(0x7f0000001700)='./my_configfs/dlm/cluster1/spaces/ls1\x00', 0x1ff) mkdir(&(0x7f0000001900)='./my_configfs/dlm/cluster1/spaces/ls1/nodes/1\x00', 0x1ff) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@gettfilter={0x34, 0x2e, 0x100, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0xd, 0xfff2}, {0xfff2, 0x6}, {0x1, 0x7}}, [{0x8, 0xb, 0xffeffffd}, {0x8, 0xb, 0xffffffff}]}, 0x34}, 0x1, 0x0, 0x0, 0x4024850}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x4c, 0x2c, 0xd27, 0x60bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x4, 0xa}, {}, {0xffff}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0x1, 0xb}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8858}, 0x20004804) socket(0x400000000010, 0x3, 0x0) 4.397181418s ago: executing program 8 (id=8088): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_io_uring_setup(0x6384, &(0x7f0000000180)={0x0, 0xbf56, 0x11000, 0x8003, 0x2d0}, &(0x7f0000001040), &(0x7f0000000080), &(0x7f0000000000)) io_uring_enter(r1, 0x7b20, 0xe93c, 0x0, 0x0, 0x0) r2 = openat$cgroup_root(0xffffff9c, &(0x7f0000000280)='./cgroup.net/syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000100)={@cgroup=r2, r0, 0x19, 0x10, 0x0, @void, @value=r0}, 0x20) r3 = io_uring_setup(0x667, &(0x7f0000000000)={0x0, 0xa14a, 0x1000, 0x2, 0x235}) r4 = socket$rds(0x15, 0x5, 0x0) setsockopt$sock_int(r4, 0x1, 0x3c, &(0x7f0000000080)=0x1, 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) lsm_set_self_attr(0x69, &(0x7f0000000e40)={0x68, 0x8, 0x20}, 0x20, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000000080)={'wg1\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xf, &(0x7f0000000740)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', r6, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bind$rds(r4, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r4, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000300)=""/4, 0xd000}], 0x1, &(0x7f0000001740)=[@zcopy_cookie={0x18, 0x114, 0xc, 0x800}], 0x18}, 0x4000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee6, 0x8031, 0xffffffffffffffff, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCETHTOOL(r7, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000000)=@ethtool_rxnfc={0x0, 0xd, 0x6, {0xb, @usr_ip6_spec={@empty, @dev={0xfe, 0x80, '\x00', 0x2d}, 0xfffffff8, 0x3d, 0xe}, {0x0, @remote, 0xe, 0x4, [0x7, 0x6]}, @ah_ip4_spec={@multicast1, @private=0xa010101, 0xfffffffc, 0x45}, {0x0, @empty, 0xfff, 0x5, [0x209, 0xf]}, 0xff, 0x3}}}) r8 = syz_open_procfs(0x0, &(0x7f0000000140)='fdinfo/3\x00') landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r8, 0x1, &(0x7f0000000340)={0x5420, r4}, 0x1) read$FUSE(r8, &(0x7f00000040c0)={0x2020}, 0x2020) 3.776798714s ago: executing program 3 (id=8089): syz_emit_ethernet(0x6c, &(0x7f0000000400)=ANY=[], 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000001880)=ANY=[@ANYBLOB="280000000406010800000000000000020100000005000100070000000900020073797a3100000000"], 0x28}, 0x1, 0x0, 0x0, 0x20008804}, 0xc810) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCPKT(r3, 0x5420, &(0x7f0000000000)=0xf22) r4 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000180)=0x3) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=@deltfilter={0x84, 0x2d, 0x100, 0x78bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xfff3, 0x8}, {0xfff2, 0xffff}, {0xffff, 0xf}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x54, 0x2, [@TCA_CGROUP_POLICE={0x18, 0x2, [@TCA_POLICE_AVRATE={0x8, 0x4, 0xf889}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xc99}]}, @TCA_CGROUP_EMATCHES={0x38, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_LIST={0x24, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x7, 0x8, 0xe45a}, {0x2, 0x2, 0x2}}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x7, 0x8, 0x312}, {0x3, 0x3}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x9}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000810}, 0x20044800) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r6, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x77359400}}, 0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x3) r8 = dup(r7) ioctl$TCXONC(r7, 0x540a, 0x0) write$P9_RREADDIR(r8, 0x0, 0x0) r9 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, r9, 0x4}, 0x38) write$char_usb(r8, &(0x7f0000000000)="ef", 0x1) msgctl$IPC_INFO(0x0, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x800) sendmsg$NFT_BATCH(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[], 0x80}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000800) 3.702404591s ago: executing program 7 (id=8090): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="002281"], 0x0}, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) capget(0x0, &(0x7f0000000740)={0x1, 0x7ff, 0xa10f, 0x8, 0x903, 0x1}) fchdir(0xffffffffffffffff) prlimit64(0x0, 0xe, 0x0, 0x0) timer_create(0x1, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x2b) acct(0x0) unshare(0x38060000) openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/slabinfo\x00', 0x0, 0x0) r3 = openat$mice(0xffffffffffffff9c, &(0x7f0000000100), 0x101) write$FUSE_INIT(r3, 0x0, 0x0) ppoll(&(0x7f00000001c0), 0x0, 0x0, 0x0, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, 0x0, 0x48000) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4040aea0, 0x0) mkdir(&(0x7f0000000000)='dir0\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='dir0\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000400)='dir0/trace_marker\x00', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000500)='dir0/per_cpu/cpu0/trace_pipe\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracefs_dir\x00', 0x1ff) 3.506864075s ago: executing program 5 (id=8091): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000000)="6fb3", 0x2}], 0x1) 3.239581046s ago: executing program 8 (id=8092): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) syz_open_dev$I2C(&(0x7f00000007c0), 0x0, 0x40) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) write$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000140)={'full'}, 0xfffffdef) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x88c3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8f}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000300)={0x0, 'veth0_to_bridge\x00', {0x3}, 0x7}) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_ASSOCIATE(r4, &(0x7f0000000a80)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000ac0)={0x188, r5, 0x4, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x400, 0x1, 0x7, 0x0, {0x7, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x400, 0x7, 0xc5}}, @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x8, 0x0, 0x5, 0x0, {0x7, 0x9, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2}, 0x300, 0x9, 0xd}}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x8000, 0x1, 0x4, 0x0, {0x2b7, 0xd, 0x0, 0x8, 0x0, 0x1}, 0x6, 0xb, 0x7f}}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_IE={0xb8, 0x2a, [@ibss={0x6, 0x2, 0x2}, @random_vendor={0xdd, 0x88, "fef5a96a0991e2b0a550cda51526859ed34db6b6f08ffb1e0abd17a1065c8d4fe8327b22b71d929fda289adf38cacd9c48387e684e098aaeb5dcfeab2a250ca450b8263fc2945fa48ef1dfd80923744ee22d060bd2f575e28e38ba2544824037add61ca9399155b2090df2d4a0189e9cf57daed5b3f172b07ae34c7228d2a01f60a9d27754337d73"}, @mic={0x8c, 0x18, {0x54e, "09c190aa2b3c", @long="2948b92902edf1ed39878a2ec9ac08af"}}, @ssid={0x0, 0xa, @random="6cc70fa6f72f4485540c"}]}, @crypto_settings=[@NL80211_ATTR_PMK={0x11, 0xfe, "836a99982e07eaad3be1f4a2d0"}, @NL80211_ATTR_PMK={0xb, 0xfe, "3585575c7a0612"}, @NL80211_ATTR_CIPHER_SUITE_GROUP={0x8, 0x4a, 0xfac02}, @NL80211_ATTR_CIPHER_SUITES_PAIRWISE={0x10, 0x49, [0xfac04, 0xfac09, 0x4]}], @NL80211_ATTR_PREV_BSSID={0xa, 0x4f, @random="357bc1b4a846"}]}, 0x188}, 0x1, 0x0, 0x0, 0x8040}, 0x20000800) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c80)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000601c15622eb8120000b70300001d00000a850000000c000000b70000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x94) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000004c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x534, 0x3e8, 0x288, 0x0, 0x354, 0x354, 0x4cc, 0x4cc, 0x4cc, 0x4cc, 0x4cc, 0x6, &(0x7f0000000200), {[{{@uncond, 0x0, 0x70, 0x94}, @unspec=@CHECKSUM={0x24}}, {{@uncond, 0x0, 0x1c4, 0x1f4, 0x0, {}, [@common=@inet=@policy={{0x154}, {[{@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, [0xffffff00, 0xff, 0xff, 0xffffffff], @ipv6=@dev={0xfe, 0x80, '\x00', 0x2a}, [0xffffffff, 0xffffff00, 0xffffffff, 0xffffffff], 0x4d2, 0x34ff, 0x4, 0x1, 0xf301d94a6ccd76a1, 0x1}, {@ipv4=@empty, [0xff, 0xff000000, 0xff, 0xffffff00], @ipv4=@loopback, [0xff000000, 0xff, 0x0, 0xffffffff], 0x4d6, 0x34ff, 0x2c, 0x1, 0x6}, {@ipv6=@mcast2, [0x13139661c108bed2, 0xffffffff], @ipv6=@local, [0xffffffff, 0x0, 0x0, 0xff], 0x9, 0x3502, 0x0, 0x1, 0x0, 0xb}, {@ipv6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, [0xffffff00, 0xffffffff, 0xffffff00, 0xff], @ipv4=@loopback, [0x0, 0xff000000, 0xffffff00, 0xff000000], 0x4d6, 0x3503, 0x6cab86d5531856f4, 0x0, 0x8, 0xc}]}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x5, 0x3, @remote, 0x4e24}}}, {{@uncond, 0x0, 0x70, 0xcc}, @common=@CLUSTERIP={0x5c, 'CLUSTERIP\x00', 0x0, {0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x33}, 0x3, 0x7, [0x23, 0x40, 0x6, 0x26, 0x25, 0x14, 0x2e, 0xd, 0xf, 0x6, 0xd, 0x25, 0xd, 0x3c, 0x2e, 0x2d], 0x1, 0xa50, 0xfffffffc}}}, {{@ip={@private=0xa010102, @broadcast, 0xffffffff, 0x0, 'macvlan1\x00', 'erspan0\x00', {}, {0xff}, 0x2f, 0x1, 0x8}, 0x0, 0x70, 0x94}, @unspec=@CHECKSUM={0x24}}, {{@uncond, 0x0, 0x94, 0xb8, 0x0, {}, [@inet=@rpfilter={{0x24}, {0x7}}]}, @unspec=@CHECKSUM={0x24}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x590) r8 = openat$cdrom(0xffffff9c, &(0x7f00000002c0), 0x101100, 0x0) ioctl$CDROMPLAYBLK(r8, 0x5317, 0x0) 2.211111788s ago: executing program 3 (id=8093): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r1 = memfd_create(&(0x7f0000000700)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\xc2%/u\x17\xdaM\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d_\v\xfc\xad\x0f\xa8\xc5\xad\x00\xc2\x12\xff\xff\xff\xff\xff\xff\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc3Gj+kV$\x80\x8aJ$\x81\xc0\x16\xf5\x9cz\x10\x97\xdb\x12H\xee/\xe3sY\x02D;L~\xd0\xb44\x01*\xfb\xa4 \xb2b\x90H$\xb2\xad\xbf\x8aM\xb6\x81\x81^\x02\xa0\xa7t\xfbHb\xa5=\xdd+$\xc06J\xb4\xf0\xab\x85Xz\x9f\xb2D$\xbe\xd9\x7f-\r\x9aj9r\n_\x11\xd4\x19\xb0\xa0G\xb7\x94\xf7\xfd~\xe9\xb6G\xbfE\xbb\x15\x15\xa6\xca2\xd0\xd3\x8c\xf7nO\xf9\xa8\xfd\x8a\xd2\xb2\xab\xff\xe4\xb0;\xd9\xa8\f\x03R\xbd%\x9fF\xee\x05\x06.3(QF?\f\x05\xa4uY\xee\xab\x8a\xeb~\xed\xcb0\xb7\xe7\xe6?8g\x8aN\xda\x8f\x9d\xde\x1eNaS\x8fLk\xf1\x965N\x18\x8c\xb9=5\x991\xae\x89N\x13\xd1\xf7\xf0\x13\xb2\xaeS\xa1\x97\x18j\xea\x9f\xde\xb6\xd4\xdc\xe6*\x9c\xfdV\x82\x05', 0x2) fcntl$addseals(r1, 0x409, 0x3) close(0x3) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000000)={r1, 0x1, 0x0, 0x2000}) pselect6(0x40, &(0x7f0000000100)={0x0, 0x9, 0x1, 0x3, 0xb, 0xffffffffffffffff}, 0x0, &(0x7f0000000240)={0x1f, 0x3, 0x56d92c88, 0x0, 0xfffffffffffffffc, 0x10000}, 0x0, 0x0) 2.068723113s ago: executing program 3 (id=8094): openat$cachefiles(0xffffff9c, &(0x7f0000000080), 0x40, 0x0) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0x9}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x109) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x18a42000) fremovexattr(r1, &(0x7f0000000000)=@known='security.apparmor\x00') 1.836449095s ago: executing program 5 (id=8095): r0 = syz_open_procfs(0x0, &(0x7f0000000300)='net/icmp6\x00') preadv(r0, &(0x7f00000002c0)=[{&(0x7f00000003c0)=""/253, 0xfd}], 0x1, 0x7, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000a80)={0x11, 0xf9, &(0x7f0000000980)="ed3ffaaee757b2cd0ee092f1063a9eeeb21b038a1fdc3a899e2b4dbd65a62b8aa9925307f5f739eb68714a2e99c1ae402c41dc29f1cd8f5ee78cb61c1df53301be009b228e2a008843313493ea4c36f5c2f9ed9c318e6dda5d255701eb589ac2f5a64976b798a4fceff277808a3d2fb84f5852e1075ad4b5bec1126d58f686e0e6117b3eedb53e9e53823064a67cc3f131c72c614ac16a052322966df0fac02a2a2674e1d04fb2ed354d499ad02b5529d8dbdfd8ce9a24b54683460a135d40bf6f85af17af750c7d2a2c4f909b9fb2de590432b12750aad767aa49076117bf42e20b88664941ddd5a8b1f10a29901aa195e43e532545df9d5f"}) bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xf, 0x0, &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) creat(&(0x7f0000000340)='./file0\x00', 0x4) socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x4000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000005c0)=ANY=[@ANYRESDEC=0x0, @ANYRESOCT=0x0, @ANYRESOCT=0x0], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') init_module(&(0x7f0000000d40)=ANY=[], 0xa99, &(0x7f0000001800)='GPL\x00') socket$inet6_sctp(0xa, 0x801, 0x84) openat$ppp(0xffffffffffffff9c, &(0x7f0000000680), 0x101402, 0x0) r4 = syz_io_uring_setup(0xf03, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x0, 0x51}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r5, r6, r7, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10}) io_uring_enter(r4, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) 827.667495ms ago: executing program 5 (id=8096): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) ioctl$FUSE_DEV_IOC_BACKING_OPEN(r1, 0x4010e501, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) r2 = syz_io_uring_setup(0x1abf, &(0x7f0000000700)={0x0, 0x8ec7, 0x10000, 0x0, 0x3a8}, &(0x7f0000000480), &(0x7f00000007c0), &(0x7f0000000800)) r3 = io_uring_setup(0x165, &(0x7f0000000180)={0x0, 0xd9eb, 0x40, 0x10000003, 0x400015f, 0x0, r2}) io_uring_register$IORING_REGISTER_RESTRICTIONS(r3, 0xb, &(0x7f0000000580)=[@ioring_restriction_register_op={0x0, 0x1d}], 0x1) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r3, 0xc, 0x0, 0x0) write$sndseq(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000040)={0x0, 0x3, {0xffffffffffffffff}, {0xffffffffffffffff}, 0xfff, 0x800}) syz_open_procfs(r4, &(0x7f0000000100)='net/netlink\x00') r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) read$char_usb(r5, &(0x7f0000000480)=""/244, 0xf4) io_uring_register$IORING_REGISTER_PROBE(r3, 0x8, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(0xffffffffffffffff, 0xc2604110, &(0x7f0000000040)={0x0, [[0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x80000000], [0x2000000, 0x1, 0x400, 0x0, 0x3, 0x80000003, 0x0, 0xfffffffc], [0x8, 0xfffffffe, 0x0, 0x2, 0xfffffffd, 0x0, 0x2, 0xfffffffd]], '\x00', [{0xfffffffe, 0xf8}, {}, {0xffffffff, 0x10000}, {0x6, 0x10000002, 0x0, 0x1}, {0x3, 0xffffffff}, {0x1, 0x5}, {0x0, 0x20000}, {0x6, 0x4004}, {0x0, 0x7f}, {0x2}, {0x0, 0x8}, {0x401, 0xfffffffc}], '\x00', 0x1, 0x0, 0x0, 0xf8}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6(0xa, 0x802, 0x0) utimes(0x0, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r6, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}}) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) setsockopt$nfc_llcp_NFC_LLCP_RW(r8, 0x118, 0x0, &(0x7f0000000100)=0x9, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f00000001c0)={'vcan0\x00'}) 735.885591ms ago: executing program 8 (id=8097): openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$ipvs(0xffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1000}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) mkdir(&(0x7f0000000000)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./my_configfs\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./my_sysfs\x00', 0x1ff) mount(0x0, &(0x7f0000000700)='./my_dev\x00', &(0x7f0000000800)='devtmpfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000900)='./my_configfs/dlm/cluster1\x00', 0x1ff) write(0xffffffffffffffff, &(0x7f0000000b00)='cluster1\x00', 0x9) mkdir(&(0x7f0000000d00)='./my_configfs/dlm/cluster1/comms/1\x00', 0x1ff) r4 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='./my_configfs/dlm/cluster1/comms/1/local\x00', 0x2, 0x0) write(r4, &(0x7f0000000f00)='1\x00', 0x2) r5 = openat(0xffffffffffffff9c, &(0x7f0000001000)='./my_configfs/dlm/cluster1/comms/1/addr\x00', 0x1, 0x0) write(r5, &(0x7f0000001100)="0200"/128, 0x80) r6 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r6, &(0x7f00000000c0)='1\x00', 0x2) r7 = openat(0xffffffffffffff9c, &(0x7f0000001400)='./my_configfs/dlm/cluster1/scan_secs\x00', 0x2, 0x0) write(r7, &(0x7f0000001500), 0x0) mkdir(&(0x7f0000001700)='./my_configfs/dlm/cluster1/spaces/ls1\x00', 0x1ff) mkdir(&(0x7f0000001900)='./my_configfs/dlm/cluster1/spaces/ls1/nodes/1\x00', 0x1ff) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@gettfilter={0x34, 0x2e, 0x100, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0xd, 0xfff2}, {0xfff2, 0x6}, {0x1, 0x7}}, [{0x8, 0xb, 0xffeffffd}, {0x8, 0xb, 0xffffffff}]}, 0x34}, 0x1, 0x0, 0x0, 0x4024850}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x4c, 0x2c, 0xd27, 0x60bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x4, 0xa}, {}, {0xffff}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0x1, 0xb}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8858}, 0x20004804) socket(0x400000000010, 0x3, 0x0) 638.473711ms ago: executing program 5 (id=8098): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000740)=@ieee802154={0x24, @short}, 0x80, &(0x7f0000001ac0)=[{&(0x7f0000000200)="27031c00160014000200", 0xa}, {&(0x7f0000000300)="7d3ed2ea1f2f210c0784b2ce65c9e34b1100301a03df46a4853ed1b3f1ccf39fd05125be49192357d9a926", 0x2b}], 0x2}, 0x2400c8cc) 595.50843ms ago: executing program 3 (id=8099): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x206, 0x20182) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) wait4(r1, 0x0, 0x8, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0xf) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)={0x3c, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa, 0x0, 0x8}, [@CTA_TUPLE_ORIG={0x4}, @CTA_SYNPROXY={0x24, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x4}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x3}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_SYNPROXY_TSOFF={0x8}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) mknod$loop(0x0, 0x6000, 0x1) mknod$loop(&(0x7f00000003c0)='./file1\x00', 0x6000, 0x1) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000240)={'wlan0\x00'}) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0xc201}) io_uring_setup(0x17b1, &(0x7f0000000100)={0x0, 0xe7b5, 0x80, 0x20011, 0x1}) r5 = syz_usb_connect_ath9k(0x3, 0x6e, &(0x7f00000003c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r5, 0x83, 0xb, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "2046a2fc", {0x3, 0x1, 0x0, 0x5, 0x1f, 0xf8, 0x5}}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x0) r6 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e, 0x2}, 0x18, 0x0) landlock_restrict_self(r6, 0xe) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newlink={0x48, 0x10, 0xc362e63b3f31ba5f, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20080, 0x80e1}, [@IFLA_GROUP={0x8}, @IFLA_BROADCAST={0xa, 0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, @IFLA_IFALIAS={0x14, 0x14, 'wlan1\x00'}]}, 0x48}}, 0x800) socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'veth0_virt_wifi\x00', @multicast}) r8 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r8, r9, r10, r11, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)) dup(0xffffffffffffffff) ioctl$USBDEVFS_BULK(r0, 0x4008550c, 0x0) 591.032578ms ago: executing program 5 (id=8100): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x44004000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1d}}, 0x1}, 0x1c) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$tun(r2, &(0x7f0000000340)=ANY=[], 0x141) socket$can_bcm(0x1d, 0x2, 0x2) signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) 556.851988ms ago: executing program 7 (id=8101): r0 = io_uring_setup(0x1, &(0x7f0000000000)={0x0, 0x20000, 0x3800, 0x4}) io_uring_register$IORING_REGISTER_ZCRX_IFQ(r0, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x1, 0x2, &(0x7f0000000200)={&(0x7f0000001000), 0x1000}, &(0x7f0000000300)={&(0x7f0000002000), 0x1000, 0x1}}, 0x1) unshare(0x22020400) r1 = syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0x100c3b1, 0x800, 0x1, 0x388}, &(0x7f0000000180)=0x0, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfdffa000) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) setns(0xc9, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8910, 0x0) ioctl$sock_netdev_private(0xffffffffffffffff, 0x8914, 0x0) write$char_usb(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$sg(0x0, 0x7d97, 0x800) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, 0x0, 0x800) mount(0x0, 0x0, 0x0, 0x204001, 0x0) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, 0x0, 0x24000000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r5 = socket$inet(0x2, 0x1, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) getsockopt$EBT_SO_GET_ENTRIES(r5, 0x0, 0x81, &(0x7f00000001c0)={'filter\x00', 0x0, 0x4, 0x0, [0x4, 0x80, 0xffffffffffffffc0, 0xfff, 0xfffffffffffffff7, 0xd], 0x0, 0x0, 0x0}, &(0x7f0000000240)=0x50) bind$can_raw(0xffffffffffffffff, &(0x7f0000000040), 0x10) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x48, 0x0, r1}) io_uring_enter(r1, 0x1, 0x1, 0x1, 0x0, 0x0) io_uring_register$IORING_REGISTER_ZCRX_CTRL(r0, 0x24, &(0x7f0000000400)={0x0, 0x0, '\x00', @zc_export={r0}}, 0x0) 489.222491ms ago: executing program 8 (id=8102): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) get_mempolicy(0x0, 0x0, 0x2, &(0x7f0000240000/0x1000)=nil, 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x20, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000006000079b005000000000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_DEL_RULE(r2, &(0x7f00000008c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000880)={&(0x7f0000000440)={0x424, 0x3f4, 0x4, 0x70bd25, 0x25dfdbff, {0x3, 0x1, 0x25, [0xff, 0x8, 0x6, 0x2, 0x3, 0xd25d, 0x5, 0xfff, 0x0, 0x8, 0x714, 0x32, 0x6, 0x3, 0x1, 0x0, 0xffff, 0xfffeffff, 0x2, 0x8, 0x0, 0x6, 0x0, 0x6, 0xbd, 0x1, 0x80, 0x2c, 0xf, 0x2, 0x8, 0x5, 0xd, 0xa, 0x81, 0x6, 0x2, 0x7, 0xc6, 0x4, 0x8, 0x6, 0x7, 0x10001, 0x7, 0x3, 0xfffffff9, 0x7372, 0xf5, 0x4, 0x9, 0xffff, 0x7ff, 0x6, 0xffff, 0x9, 0x2, 0x1, 0x4, 0x3, 0x600000, 0x101, 0xd, 0x5], [0x7, 0x0, 0x2, 0x6, 0x2938, 0x6, 0xd, 0x6, 0x8, 0x0, 0x4, 0x1, 0xa3, 0x0, 0x5, 0xab9, 0x9dce, 0x5, 0x1, 0x9, 0x0, 0x4, 0xfff, 0x5, 0x56, 0x0, 0xffffffea, 0x7e, 0x5, 0x3, 0x5, 0x0, 0x168, 0x5, 0x1, 0xfffffff7, 0x0, 0x417b, 0x401, 0x1ff, 0x401, 0x3, 0x80000000, 0x2, 0x5, 0x34, 0x1, 0x633, 0x3, 0x2, 0xc748, 0x4, 0x4, 0xf, 0x4, 0x0, 0x3, 0xd83, 0x2, 0x6, 0x3, 0x400, 0x2, 0x401], [0xde, 0x6, 0x9a, 0x2, 0x4, 0xb7, 0x401, 0x3, 0x5, 0xf7a, 0x2139, 0xd, 0x0, 0x9, 0xe, 0x4, 0x10000, 0x7, 0xa61, 0x0, 0xfff, 0x9, 0x5, 0x4, 0x9, 0x2, 0x4, 0x1, 0x4, 0x0, 0x7, 0x2, 0xd8, 0x80, 0x0, 0x46, 0x7, 0xd8ae, 0x5, 0x2, 0x6, 0xd, 0x2, 0x1, 0x1, 0x6, 0xbb7, 0x200, 0x455e, 0x10001, 0x58, 0x2, 0x1, 0xfffffaec, 0x45b, 0x10, 0x5, 0x978c5fe, 0xc, 0xf7c0, 0xfff, 0x0, 0x4, 0x5], [0x401, 0x1, 0x8000, 0x133, 0x8, 0x6, 0x2, 0x0, 0x80, 0x4, 0x37, 0xb, 0xffffffff, 0x4, 0x2, 0x2, 0x3, 0x4, 0x10000, 0x100, 0x2, 0x52, 0x80000000, 0x1, 0x2, 0x8, 0x2, 0x9, 0x1, 0x9, 0x623a, 0x1, 0x10000, 0x1c3, 0x7f, 0x3, 0xfffffd63, 0xaa, 0x3, 0x6, 0x7c2, 0x0, 0x6, 0x3, 0x6, 0x9, 0xf, 0x0, 0xc4, 0x8, 0x7, 0x8, 0x0, 0x1000, 0x3, 0x6, 0x44, 0xe, 0x7, 0x5, 0xc471, 0x7fffffff, 0x4, 0x9], 0x4, [':\x00', 's\x00']}, ["", "", ""]}, 0x424}, 0x1, 0x0, 0x0, 0x4011}, 0x4000800) add_key$fscrypt_v1(0x0, 0x0, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300", 0xffffffff}, 0x48, 0xffffffffffffffff) ptrace(0x10, r1) ptrace$getregset(0x4205, r1, 0x200, &(0x7f0000000080)={&(0x7f00000000c0)=""/112, 0x70}) r3 = openat$vhost_vsock(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r3, 0x8010af78, &(0x7f0000000280)) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120100008e88052086800095d8b601020301090212000100000000090401"], 0x0) r4 = syz_open_dev$I2C(&(0x7f0000000000), 0x2, 0x40402) ioctl$I2C_RDWR(r4, 0x707, &(0x7f0000000340)={&(0x7f0000000380)=[{0x1e, 0x5011, 0x0, 0x0}], 0x1}) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x81, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r6, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) ioctl$KVM_SET_GSI_ROUTING(r6, 0x4008ae6a, &(0x7f0000000300)={0x1, 0x0, [{0x0, 0x2, 0x0, 0x0, @adapter={0xfffffffffffffff9, 0xb75, 0x100, 0x0, 0x9}}]}) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1) ioctl$KVM_IRQ_LINE_STATUS(r6, 0xc008ae67, &(0x7f00000002c0)={0x0, 0x81}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f00000000c0)='1\x00', 0x1) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:02.0/remove\x00', 0x1, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) write(r7, &(0x7f0000000140)='1\x00', 0x1) 417.869891ms ago: executing program 5 (id=8103): r0 = syz_open_procfs(0x0, &(0x7f0000000300)='net/icmp6\x00') preadv(r0, &(0x7f00000002c0)=[{&(0x7f00000003c0)=""/253, 0xfd}], 0x1, 0x7, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000a80)={0x11, 0xf9, &(0x7f0000000980)="ed3ffaaee757b2cd0ee092f1063a9eeeb21b038a1fdc3a899e2b4dbd65a62b8aa9925307f5f739eb68714a2e99c1ae402c41dc29f1cd8f5ee78cb61c1df53301be009b228e2a008843313493ea4c36f5c2f9ed9c318e6dda5d255701eb589ac2f5a64976b798a4fceff277808a3d2fb84f5852e1075ad4b5bec1126d58f686e0e6117b3eedb53e9e53823064a67cc3f131c72c614ac16a052322966df0fac02a2a2674e1d04fb2ed354d499ad02b5529d8dbdfd8ce9a24b54683460a135d40bf6f85af17af750c7d2a2c4f909b9fb2de590432b12750aad767aa49076117bf42e20b88664941ddd5a8b1f10a29901aa195e43e532545df9d5f"}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xf, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000006000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000ebff00008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) creat(&(0x7f0000000340)='./file0\x00', 0x4) socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000300), 0x0, 0x4000000) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000005c0)=ANY=[@ANYRESDEC=0x0, @ANYRESOCT=0x0, @ANYRESOCT=0x0], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') init_module(&(0x7f0000000d40)=ANY=[], 0xa99, &(0x7f0000001800)='GPL\x00') socket$inet6_sctp(0xa, 0x801, 0x84) openat$ppp(0xffffffffffffff9c, &(0x7f0000000680), 0x101402, 0x0) r5 = syz_io_uring_setup(0xf03, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x0, 0x51}, &(0x7f0000000100)=0x0, 0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r6, 0x0, r7, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10}) io_uring_enter(r5, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) 179.119709ms ago: executing program 7 (id=8104): ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x80080, 0x0) ioctl$BLKTRACESETUP(r10, 0x80186803, 0x0) ioctl$UFFDIO_WAKE(r10, 0x8010aa02, &(0x7f0000000080)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) sendmsg$NL80211_CMD_REGISTER_FRAME(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x28, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x40}]}, 0x28}}, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r11, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c80)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003a00000008000300", @ANYRES32=r5, @ANYBLOB="05005b"], 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000200)={0x0, 0x100000, &(0x7f00000000c0)={&(0x7f0000001440)={0x1c, r2, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 0s ago: executing program 7 (id=8105): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) syz_open_dev$I2C(&(0x7f00000007c0), 0x0, 0x40) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) write$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000140)={'full'}, 0xfffffdef) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x88c3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8f}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000300)={0x0, 'veth0_to_bridge\x00', {0x3}, 0x7}) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_ASSOCIATE(r4, &(0x7f0000000a80)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000ac0)={0x188, r5, 0x4, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x400, 0x1, 0x7, 0x0, {0x7, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x400, 0x7, 0xc5}}, @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x8, 0x0, 0x5, 0x0, {0x7, 0x9, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2}, 0x300, 0x9, 0xd}}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x8000, 0x1, 0x4, 0x0, {0x2b7, 0xd, 0x0, 0x8, 0x0, 0x1}, 0x6, 0xb, 0x7f}}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_IE={0xb8, 0x2a, [@ibss={0x6, 0x2, 0x2}, @random_vendor={0xdd, 0x88, "fef5a96a0991e2b0a550cda51526859ed34db6b6f08ffb1e0abd17a1065c8d4fe8327b22b71d929fda289adf38cacd9c48387e684e098aaeb5dcfeab2a250ca450b8263fc2945fa48ef1dfd80923744ee22d060bd2f575e28e38ba2544824037add61ca9399155b2090df2d4a0189e9cf57daed5b3f172b07ae34c7228d2a01f60a9d27754337d73"}, @mic={0x8c, 0x18, {0x54e, "09c190aa2b3c", @long="2948b92902edf1ed39878a2ec9ac08af"}}, @ssid={0x0, 0xa, @random="6cc70fa6f72f4485540c"}]}, @crypto_settings=[@NL80211_ATTR_PMK={0x11, 0xfe, "836a99982e07eaad3be1f4a2d0"}, @NL80211_ATTR_PMK={0xb, 0xfe, "3585575c7a0612"}, @NL80211_ATTR_CIPHER_SUITE_GROUP={0x8, 0x4a, 0xfac02}, @NL80211_ATTR_CIPHER_SUITES_PAIRWISE={0x10, 0x49, [0xfac04, 0xfac09, 0x4]}], @NL80211_ATTR_PREV_BSSID={0xa, 0x4f, @random="357bc1b4a846"}]}, 0x188}, 0x1, 0x0, 0x0, 0x8040}, 0x20000800) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c80)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000601c15622eb8120000b70300001d00000a850000000c000000b70000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x94) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000004c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x534, 0x3e8, 0x288, 0x0, 0x354, 0x354, 0x4cc, 0x4cc, 0x4cc, 0x4cc, 0x4cc, 0x6, &(0x7f0000000200), {[{{@uncond, 0x0, 0x70, 0x94}, @unspec=@CHECKSUM={0x24}}, {{@uncond, 0x0, 0x1c4, 0x1f4, 0x0, {}, [@common=@inet=@policy={{0x154}, {[{@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, [0xffffff00, 0xff, 0xff, 0xffffffff], @ipv6=@dev={0xfe, 0x80, '\x00', 0x2a}, [0xffffffff, 0xffffff00, 0xffffffff, 0xffffffff], 0x4d2, 0x34ff, 0x4, 0x1, 0xf301d94a6ccd76a1, 0x1}, {@ipv4=@empty, [0xff, 0xff000000, 0xff, 0xffffff00], @ipv4=@loopback, [0xff000000, 0xff, 0x0, 0xffffffff], 0x4d6, 0x34ff, 0x2c, 0x1, 0x6}, {@ipv6=@mcast2, [0x13139661c108bed2, 0xffffffff], @ipv6=@local, [0xffffffff, 0x0, 0x0, 0xff], 0x9, 0x3502, 0x0, 0x1, 0x0, 0xb}, {@ipv6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, [0xffffff00, 0xffffffff, 0xffffff00, 0xff], @ipv4=@loopback, [0x0, 0xff000000, 0xffffff00, 0xff000000], 0x4d6, 0x3503, 0x6cab86d5531856f4, 0x0, 0x8, 0xc}]}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x5, 0x3, @remote, 0x4e24}}}, {{@uncond, 0x0, 0x70, 0xcc}, @common=@CLUSTERIP={0x5c, 'CLUSTERIP\x00', 0x0, {0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x33}, 0x3, 0x7, [0x23, 0x40, 0x6, 0x26, 0x25, 0x14, 0x2e, 0xd, 0xf, 0x6, 0xd, 0x25, 0xd, 0x3c, 0x2e, 0x2d], 0x1, 0xa50, 0xfffffffc}}}, {{@ip={@private=0xa010102, @broadcast, 0xffffffff, 0x0, 'macvlan1\x00', 'erspan0\x00', {}, {0xff}, 0x2f, 0x1, 0x8}, 0x0, 0x70, 0x94}, @unspec=@CHECKSUM={0x24}}, {{@uncond, 0x0, 0x94, 0xb8, 0x0, {}, [@inet=@rpfilter={{0x24}, {0x7}}]}, @unspec=@CHECKSUM={0x24}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x590) r8 = openat$cdrom(0xffffff9c, &(0x7f00000002c0), 0x101100, 0x0) ioctl$CDROMPLAYBLK(r8, 0x5317, 0x0) kernel console output (not intermixed with test programs): vid-015: unregistering v4l-touch15 [ 1082.221908][T10776] vivid-016: unregistering video71 [ 1082.228025][T10776] vivid-016: unregistering video72 [ 1082.236094][T10776] vivid-016: unregistering vbi32 [ 1082.242073][T10776] vivid-016: unregistering vbi33 [ 1082.248829][T10776] vivid-016: unregistering swradio16 [ 1082.258906][T10776] vivid-016: unregistering radio32 [ 1082.263231][T10776] vivid-016: unregistering radio33 [ 1082.269151][T10776] vivid-016: unregistering video73 [ 1082.274837][T10776] vivid-016: unregistering video74 [ 1082.278117][T10776] vivid-016: unregistering v4l-touch16 [ 1082.326949][T10776] vivid-017: unregistering video75 [ 1082.330319][T10776] vivid-017: unregistering video76 [ 1082.333032][T10776] vivid-017: unregistering vbi34 [ 1082.336543][T10776] vivid-017: unregistering vbi35 [ 1082.340601][T10776] vivid-017: unregistering swradio17 [ 1082.349877][T10776] vivid-017: unregistering radio34 [ 1082.356607][T10776] vivid-017: unregistering radio35 [ 1082.368470][T10776] vivid-017: unregistering video77 [ 1082.370959][T10776] vivid-017: unregistering video78 [ 1082.375089][T10776] vivid-017: unregistering v4l-touch17 [ 1082.420493][T10776] vivid-018: unregistering video79 [ 1082.424302][T10776] vivid-018: unregistering video80 [ 1082.430021][T10776] vivid-018: unregistering vbi36 [ 1082.435327][T10776] vivid-018: unregistering vbi37 [ 1082.439418][T10776] vivid-018: unregistering swradio18 [ 1082.443165][T10776] vivid-018: unregistering radio36 [ 1082.446859][T10776] vivid-018: unregistering radio37 [ 1082.450199][T10776] vivid-018: unregistering video81 [ 1082.453410][T10776] vivid-018: unregistering video82 [ 1082.458112][T10776] vivid-018: unregistering v4l-touch18 [ 1082.495178][T10776] vivid-019: unregistering video83 [ 1082.497793][T10776] vivid-019: unregistering video84 [ 1082.502476][T10776] vivid-019: unregistering vbi38 [ 1082.506384][T10776] vivid-019: unregistering vbi39 [ 1082.508871][T10776] vivid-019: unregistering swradio19 [ 1082.514333][T10776] vivid-019: unregistering radio38 [ 1082.517850][T10776] vivid-019: unregistering radio39 [ 1082.520327][T10776] vivid-019: unregistering video85 [ 1082.522754][T10776] vivid-019: unregistering video86 [ 1082.526502][T10776] vivid-019: unregistering v4l-touch19 [ 1082.551070][T10776] vivid-020: unregistering video87 [ 1082.556089][T10776] vivid-020: unregistering video88 [ 1082.561468][T10776] vivid-020: unregistering vbi40 [ 1082.565207][T10776] vivid-020: unregistering vbi41 [ 1082.567947][T10776] vivid-020: unregistering swradio20 [ 1082.571106][T10776] vivid-020: unregistering radio40 [ 1082.575286][T10776] vivid-020: unregistering radio41 [ 1082.578064][T10776] vivid-020: unregistering video89 [ 1082.580891][T10776] vivid-020: unregistering video90 [ 1082.588687][T10776] vivid-020: unregistering v4l-touch20 [ 1082.622718][T10776] vivid-021: unregistering video91 [ 1082.625280][T10776] vivid-021: unregistering video92 [ 1082.627851][T10776] vivid-021: unregistering vbi42 [ 1082.632479][T10776] vivid-021: unregistering vbi43 [ 1082.635787][T10776] vivid-021: unregistering swradio21 [ 1082.638297][T10776] vivid-021: unregistering radio42 [ 1082.641155][T10776] vivid-021: unregistering radio43 [ 1082.645501][T10776] vivid-021: unregistering video93 [ 1082.648543][T10776] vivid-021: unregistering video94 [ 1082.664916][T10776] vivid-021: unregistering v4l-touch21 [ 1082.699305][T10776] vivid-022: unregistering video95 [ 1082.701752][T10776] vivid-022: unregistering video96 [ 1082.704328][T10776] vivid-022: unregistering vbi44 [ 1082.707716][T10776] vivid-022: unregistering vbi45 [ 1082.710072][T10776] vivid-022: unregistering swradio22 [ 1082.712435][T10776] vivid-022: unregistering radio44 [ 1082.715065][T10776] vivid-022: unregistering radio45 [ 1082.717572][T10776] vivid-022: unregistering video97 [ 1082.720188][T10776] vivid-022: unregistering video98 [ 1082.722899][T10776] vivid-022: unregistering v4l-touch22 [ 1082.788556][T10776] vivid-023: unregistering video99 [ 1082.790973][T10776] vivid-023: unregistering video100 [ 1082.793308][T10776] vivid-023: unregistering vbi46 [ 1082.797403][T10776] vivid-023: unregistering vbi47 [ 1082.799593][T10776] vivid-023: unregistering swradio23 [ 1082.822602][T10894] Invalid ELF header magic: != ELF [ 1082.833018][T10776] vivid-023: unregistering radio46 [ 1082.844068][T10776] vivid-023: unregistering radio47 [ 1082.854460][T10776] vivid-023: unregistering video101 [ 1082.861445][T10776] vivid-023: unregistering video102 [ 1082.865377][T10776] vivid-023: unregistering v4l-touch23 [ 1082.935040][T10903] Invalid ELF header magic: != ELF [ 1083.147964][ T5820] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 1083.153512][T10907] wlan0 speed is unknown, defaulting to 1000 [ 1083.178781][ T5844] net_ratelimit: 1 callbacks suppressed [ 1083.178800][ T5844] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1083.239137][ T5820] hid-generic 0000:0000:0000.0025: hidraw1: HID v0.00 Device [syz1] on syz0 [ 1083.342948][T10914] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7425'. [ 1083.354580][T10913] bond1: ARP target 9.0.0.0 is already present [ 1083.356750][T10913] bond1: option arp_ip_target: invalid value (9) [ 1083.360927][T10913] bond1 (unregistering): Released all slaves [ 1083.386214][ T5844] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1083.427134][T10916] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7426'. [ 1083.464977][T20380] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1083.468585][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1083.475654][T31006] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1083.479157][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1083.729188][T10923] io-wq is not configured for unbound workers [ 1083.795783][T10925] Invalid ELF header magic: != ELF [ 1084.085225][T10927] Invalid ELF header magic: != ELF [ 1084.120954][ T867] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 1084.138208][ T867] hid-generic 0000:0000:0000.0026: hidraw1: HID v0.00 Device [syz1] on syz0 [ 1084.181899][T10936] fido_id[10936]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1084.210903][ T867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1084.541327][ T5844] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1084.628778][T10944] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7435'. [ 1084.779780][ T6752] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1085.206550][T10962] Invalid ELF header magic: != ELF [ 1085.228338][ T867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1085.331021][T10960] wlan0 speed is unknown, defaulting to 1000 [ 1085.339414][T10955] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7439'. [ 1085.477564][ T42] audit: type=1804 audit(1786375984.079:1328): pid=10960 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.7.7439" name="/newroot/12/cgroup.controllers" dev="tmpfs" ino=84 res=1 errno=0 [ 1085.485560][ T42] audit: type=1800 audit(1786375984.079:1329): pid=10960 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.7439" name="cgroup.controllers" dev="tmpfs" ino=84 res=0 errno=0 [ 1085.992189][T10971] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 1086.646148][T10978] Invalid ELF header magic: != ELF [ 1086.801461][T10981] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7444'. [ 1087.234193][T10986] netlink: 28 bytes leftover after parsing attributes in process `syz.7.7446'. [ 1087.994026][ T6752] usb 12-1: new high-speed USB device number 4 using dummy_hcd [ 1088.166865][ T6752] usb 12-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice= 0.00 [ 1088.171955][ T6752] usb 12-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1088.177056][ T6752] usb 12-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1088.199783][ T6752] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1088.348499][ T5837] net_ratelimit: 6 callbacks suppressed [ 1088.348536][ T5837] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1088.620459][T11020] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1089.064063][ T5837] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1089.223940][T19709] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1089.226742][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1089.229643][T20380] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1089.232429][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1089.388107][ T5837] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1090.103853][ T5837] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1090.428662][ T5837] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1090.519006][T19724] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1090.736741][ T6752] usb 12-1: USB disconnect, device number 4 [ 1091.441684][T11039] Invalid ELF header magic: != ELF [ 1091.613431][T29853] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 1091.667128][T29853] hid-generic 0000:0000:0000.0027: hidraw1: HID v0.00 Device [syz1] on syz0 [ 1091.776911][T11041] wlan0 speed is unknown, defaulting to 1000 [ 1092.817491][T11080] ieee802154 phy0 wpan0: encryption failed: -22 [ 1092.821911][T11079] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7466'. [ 1093.216766][ T42] audit: type=1326 audit(1786375991.819:1330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11085 comm="syz.7.7468" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf706efec code=0x0 [ 1093.787376][ T867] net_ratelimit: 6 callbacks suppressed [ 1093.787390][ T867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1093.802784][T11102] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 1093.960166][T11107] Invalid ELF header magic: != ELF [ 1094.184305][ T5844] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0 [ 1094.191777][T11112] tipc: Started in network mode [ 1094.192476][ T5844] hid-generic 0000:0000:0000.0028: hidraw1: HID v0.00 Device [syz1] on syz0 [ 1094.194635][T11112] tipc: Node identity ac14140f, cluster identity 4711 [ 1094.204667][T11112] tipc: New replicast peer: 255.255.255.255 [ 1094.207622][T11112] tipc: Enabled bearer , priority 10 [ 1094.210094][T11106] wlan0 speed is unknown, defaulting to 1000 [ 1094.263819][T19724] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1094.266920][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1094.275341][ T867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1094.344487][T19709] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1094.348068][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1094.353735][T11130] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1094.824474][ T867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1095.071157][T11139] Invalid ELF header magic: != ELF [ 1095.183872][T11130] usb 12-1: new high-speed USB device number 5 using dummy_hcd [ 1095.189752][T11143] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7481'. [ 1095.223614][ T5820] tipc: Node number set to 2886997007 [ 1095.304278][ T867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1095.354140][T11130] usb 12-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice= 0.00 [ 1095.357913][T11130] usb 12-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1095.360968][T11130] usb 12-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1095.364111][T11130] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1095.634590][T31006] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1097.287225][ T42] audit: type=1800 audit(1786375995.889:1331): pid=11181 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.7492" name="local" dev="configfs" ino=139766 res=0 errno=0 [ 1097.319492][ T42] audit: type=1800 audit(1786375995.919:1332): pid=11181 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.7492" name="scan_secs" dev="configfs" ino=139128 res=0 errno=0 [ 1097.717480][T11190] Invalid ELF header magic: != ELF [ 1097.942341][ T5844] usb 12-1: USB disconnect, device number 5 [ 1098.598409][T11206] Invalid ELF header magic: != ELF [ 1098.872230][T11223] netlink: 'syz.3.7505': attribute type 11 has an invalid length. [ 1099.168724][ T5844] net_ratelimit: 8 callbacks suppressed [ 1099.168741][ T5844] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1099.196355][T11242] netlink: 'syz.7.7512': attribute type 3 has an invalid length. [ 1099.199860][T11242] netlink: 'syz.7.7512': attribute type 1 has an invalid length. [ 1099.202941][T11242] netlink: 228 bytes leftover after parsing attributes in process `syz.7.7512'. [ 1099.314255][T19723] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1099.316978][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1099.478852][T31006] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1099.481983][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1099.523287][ T867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1099.915253][T11250] tipc: Enabled bearer , priority 0 [ 1099.943993][T11245] i2c i2c-1: DVB: adapter 0 frontend 0 frequency 1000003 out of range (51000000..2150000000) [ 1099.975943][T11250] syzkaller0: mtu less than device minimum [ 1100.188958][ T867] libceph: connect (1)127.0.0.1:6789 error -101 [ 1100.196134][ T867] libceph: mon0 (1)127.0.0.1:6789 connect error [ 1100.200692][ T867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1100.282969][T11262] Invalid ELF header magic: != ELF [ 1100.431459][T11264] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7517'. [ 1100.453630][ T867] libceph: connect (1)127.0.0.1:6789 error -101 [ 1100.460267][ T867] libceph: mon0 (1)127.0.0.1:6789 connect error [ 1100.586823][ T867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1100.973780][ T867] libceph: connect (1)127.0.0.1:6789 error -101 [ 1100.992019][T11257] ceph: No mds server is up or the cluster is laggy [ 1101.045182][T19628] hid-generic 0000:0000:0000.0029: unknown main item tag 0x0 [ 1101.059093][T19628] hid-generic 0000:0000:0000.0029: hidraw1: HID v0.00 Device [syz1] on syz0 [ 1101.107586][T11271] fido_id[11271]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1101.178920][T29868] hid-generic 0000:0000:0000.002A: unknown main item tag 0x0 [ 1101.186627][T29868] hid-generic 0000:0000:0000.002A: hidraw1: HID v0.00 Device [syz1] on syz0 [ 1101.209420][T11273] wlan0 speed is unknown, defaulting to 1000 [ 1101.378140][ T867] libceph: mon0 (1)127.0.0.1:6789 connect error [ 1101.387094][T20380] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1101.763127][T11291] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7526'. [ 1101.783288][T11293] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7527'. [ 1102.074321][T11300] Invalid ELF header magic: != ELF [ 1102.106953][ T5820] usb 11-1: new high-speed USB device number 3 using dummy_hcd [ 1102.179087][T11302] Invalid ELF header magic: != ELF [ 1102.292224][ T5820] usb 11-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1102.311341][ T5820] usb 11-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1102.323530][ T5820] usb 11-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1102.339253][ T5820] usb 11-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1102.373441][ T5820] usb 11-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 1102.381932][ T5820] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1102.385796][ T5820] usb 11-1: Product: syz [ 1102.387866][ T5820] usb 11-1: Manufacturer: syz [ 1102.394346][ T5820] usb 11-1: SerialNumber: syz [ 1102.417803][ T5820] cdc_mbim 11-1:1.0: skipping garbage [ 1102.607449][T11286] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 1102.975348][ T7983] hid-generic 0000:0000:0000.002B: unknown main item tag 0x0 [ 1102.989095][ T7983] hid-generic 0000:0000:0000.002B: hidraw1: HID v0.00 Device [syz1] on syz0 [ 1103.047142][T11307] wlan0 speed is unknown, defaulting to 1000 [ 1103.170855][T31006] Bluetooth: hci1: Frame reassembly failed (-90) [ 1103.331164][ T5820] cdc_mbim 11-1:1.0: bind() failure [ 1103.357315][ T7983] hid-generic 0000:0000:0000.002C: unknown main item tag 0x0 [ 1103.368622][ T5820] cdc_ncm 11-1:1.1: CDC Union missing and no IAD found [ 1103.373691][ T7983] hid-generic 0000:0000:0000.002C: hidraw1: HID v0.00 Device [syz1] on syz0 [ 1103.379730][ T5820] cdc_ncm 11-1:1.1: bind() failure [ 1103.407579][ T5820] usb 11-1: USB disconnect, device number 3 [ 1103.489837][T11324] fido_id[11324]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1103.574018][T11329] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7536'. [ 1103.630789][T11331] loop8: detected capacity change from 0 to 7 [ 1103.668000][T11331] loop8: [CUMANA/ADFS] p1 [Linux] p2 [ADFS] p1 [Linux] p2 [ 1103.677859][T11331] loop8: partition table partially beyond EOD, truncated [ 1103.682577][T11331] loop8: p1 size 1905483274 extends beyond EOD, truncated [ 1103.691804][T11331] loop8: p2 start 121280928 is beyond EOD, truncated [ 1103.766472][T10898] udevd[10898]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 1104.044375][T19628] usb 11-1: new high-speed USB device number 4 using dummy_hcd [ 1104.204768][T19628] usb 11-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1104.210328][T19628] usb 11-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1104.215369][T19628] usb 11-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1104.219586][T19628] usb 11-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1104.224215][T19628] usb 11-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 1104.231150][T19628] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1104.235103][T19628] usb 11-1: Product: syz [ 1104.237057][T19628] usb 11-1: Manufacturer: syz [ 1104.239247][T19628] usb 11-1: SerialNumber: syz [ 1104.254781][T19628] cdc_mbim 11-1:1.0: skipping garbage [ 1104.478363][T11339] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1104.568153][ T7983] hid-generic 0000:0000:0000.002D: unknown main item tag 0x0 [ 1104.594102][ T8638] net_ratelimit: 12 callbacks suppressed [ 1104.594120][ T8638] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1104.600071][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1104.607172][ T7983] hid-generic 0000:0000:0000.002D: hidraw1: HID v0.00 Device [syz1] on syz0 [ 1104.648417][T11346] wlan0 speed is unknown, defaulting to 1000 [ 1104.668911][ T55] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1104.747370][ T5844] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1105.072824][T19628] cdc_mbim 11-1:1.0: failed GET_NTB_PARAMETERS [ 1105.082154][T19628] cdc_mbim 11-1:1.0: bind() failure [ 1105.095272][T19628] cdc_ncm 11-1:1.1: CDC Union missing and no IAD found [ 1105.098132][T19628] cdc_ncm 11-1:1.1: bind() failure [ 1105.114046][T19628] usb 11-1: USB disconnect, device number 4 [ 1105.231145][T28768] Bluetooth: hci1: command 0x1003 tx timeout [ 1105.236365][T19724] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1105.240002][ T9890] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 1105.240243][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1105.704139][ T5844] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1105.786406][ T5844] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1106.394142][T29868] usb 11-1: new high-speed USB device number 5 using dummy_hcd [ 1106.544082][T29868] usb 11-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1106.548977][T29868] usb 11-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1106.553334][T29868] usb 11-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1106.557441][T29868] usb 11-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1106.561138][T29868] usb 11-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 1106.568516][T29868] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1106.571982][T29868] usb 11-1: Product: syz [ 1106.573384][T29868] usb 11-1: Manufacturer: syz [ 1106.575383][T29868] usb 11-1: SerialNumber: syz [ 1106.591955][T29868] cdc_mbim 11-1:1.0: skipping garbage [ 1106.605771][T11130] usb 12-1: new high-speed USB device number 6 using dummy_hcd [ 1106.745558][ T867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1106.769560][T11130] usb 12-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1106.778129][T11130] usb 12-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1106.782581][T11130] usb 12-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1106.787504][T11130] usb 12-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1106.791441][T11130] usb 12-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 1106.801073][T11367] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1106.801121][T11130] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1106.808551][T11130] usb 12-1: Product: syz [ 1106.810470][T11130] usb 12-1: Manufacturer: syz [ 1106.812428][T11130] usb 12-1: SerialNumber: syz [ 1106.825621][T11377] binder: 11374:11377 ioctl 401c7012 0 returned -22 [ 1106.833573][ T5844] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1106.858117][T11130] cdc_mbim 12-1:1.0: skipping garbage [ 1107.071968][T11371] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 1107.494420][T29868] cdc_mbim 11-1:1.0: bind() failure [ 1107.501401][T29868] cdc_ncm 11-1:1.1: CDC Union missing and no IAD found [ 1107.508601][T29868] cdc_ncm 11-1:1.1: bind() failure [ 1107.518252][T29868] usb 11-1: USB disconnect, device number 5 [ 1107.544621][ T42] audit: type=1800 audit(1786376006.149:1333): pid=11389 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.7549" name="local" dev="configfs" ino=142437 res=0 errno=0 [ 1107.664654][ T9890] Bluetooth: hci2: unexpected event for opcode 0x1804 [ 1107.671641][ T55] hid-generic 0000:0000:0000.002E: unknown main item tag 0x0 [ 1107.684491][ T55] hid-generic 0000:0000:0000.002E: hidraw1: HID v0.00 Device [syz1] on syz0 [ 1107.694439][T11396] wlan0 speed is unknown, defaulting to 1000 [ 1107.777223][T11130] cdc_mbim 12-1:1.0: bind() failure [ 1107.789484][T11130] cdc_ncm 12-1:1.1: CDC Union missing and no IAD found [ 1107.793546][T11130] cdc_ncm 12-1:1.1: bind() failure [ 1107.800489][T11130] usb 12-1: USB disconnect, device number 6 [ 1107.829098][ T42] audit: type=1800 audit(1786376006.429:1334): pid=11408 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.7550" name="local" dev="configfs" ino=142455 res=0 errno=0 [ 1107.841261][ T42] audit: type=1800 audit(1786376006.439:1335): pid=11408 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.7550" name="scan_secs" dev="configfs" ino=140852 res=0 errno=0 [ 1108.166368][ T37] Bluetooth: hci1: Frame reassembly failed (-84) [ 1108.229749][ T42] audit: type=1400 audit(1786376006.829:1336): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name=3A22 pid=11422 comm="syz.5.7558" [ 1108.417963][T11431] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 1108.623709][T29868] usb 12-1: new high-speed USB device number 7 using dummy_hcd [ 1108.774324][T29868] usb 12-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1108.782865][T29868] usb 12-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1108.794063][T29868] usb 12-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1108.803100][T29868] usb 12-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1108.813013][T29868] usb 12-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 1108.821535][T29868] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1108.824696][T29868] usb 12-1: Product: syz [ 1108.826450][T29868] usb 12-1: Manufacturer: syz [ 1108.828278][T29868] usb 12-1: SerialNumber: syz [ 1108.850219][T29868] cdc_mbim 12-1:1.0: skipping garbage [ 1109.054453][T11432] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1109.728087][T11444] Invalid ELF header magic: != ELF [ 1109.786588][T29868] cdc_mbim 12-1:1.0: bind() failure [ 1109.872079][T29868] cdc_ncm 12-1:1.1: CDC Union missing and no IAD found [ 1109.886498][T29868] cdc_ncm 12-1:1.1: bind() failure [ 1109.977188][T29868] usb 12-1: USB disconnect, device number 7 [ 1110.051243][ T55] net_ratelimit: 7 callbacks suppressed [ 1110.051264][ T55] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1110.057301][ T5844] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1110.180226][ T42] audit: type=1800 audit(1786376008.779:1337): pid=11447 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.7562" name="local" dev="configfs" ino=141570 res=0 errno=0 [ 1110.193693][ T9890] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 1110.194912][ T42] audit: type=1800 audit(1786376008.789:1338): pid=11447 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.7562" name="scan_secs" dev="configfs" ino=141572 res=0 errno=0 [ 1110.196230][ T5741] Bluetooth: hci1: command 0x1003 tx timeout [ 1110.318306][T11130] hid-generic 0000:0000:0000.002F: unknown main item tag 0x0 [ 1110.327829][T11130] hid-generic 0000:0000:0000.002F: hidraw1: HID v0.00 Device [syz1] on syz0 [ 1110.347241][T20380] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1110.350383][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1110.407055][T11452] wlan0 speed is unknown, defaulting to 1000 [ 1110.480914][T11465] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7567'. [ 1110.709741][T29868] hid-generic 0000:0000:0000.0030: unknown main item tag 0x0 [ 1110.737149][T29868] hid-generic 0000:0000:0000.0030: hidraw1: HID v0.00 Device [syz1] on syz0 [ 1110.750953][T11467] wlan0 speed is unknown, defaulting to 1000 [ 1111.078888][ T5844] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1111.604948][ T5844] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1111.767565][ T42] audit: type=1800 audit(1786376010.369:1339): pid=11489 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.7572" name="local" dev="configfs" ino=140965 res=0 errno=0 [ 1111.789600][ T42] audit: type=1800 audit(1786376010.389:1340): pid=11489 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.7572" name="scan_secs" dev="configfs" ino=140967 res=0 errno=0 [ 1111.882725][T11490] Invalid ELF header magic: != ELF [ 1112.024951][T11453] Bluetooth: hci2: link tx timeout [ 1112.031855][T11453] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa [ 1112.117350][ T5844] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1112.302068][T19628] hid-generic 0000:0000:0000.0031: unknown main item tag 0x0 [ 1112.308197][T19628] hid-generic 0000:0000:0000.0031: hidraw1: HID v0.00 Device [syz1] on syz0 [ 1112.334152][T11511] wlan0 speed is unknown, defaulting to 1000 [ 1112.507311][T11526] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 1112.664505][ T5844] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1112.708463][ T42] audit: type=1800 audit(1786376011.309:1341): pid=11532 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.7584" name="local" dev="configfs" ino=141709 res=0 errno=0 [ 1112.726426][ T42] audit: type=1800 audit(1786376011.329:1342): pid=11532 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.7584" name="scan_secs" dev="configfs" ino=141711 res=0 errno=0 [ 1112.854546][T11537] input: syz1 as /devices/virtual/input/input113 [ 1112.904102][T31006] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1112.907069][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1113.719003][ T5844] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 1113.730235][ T5844] hid-generic 0000:0000:0000.0032: hidraw1: HID v0.00 Device [syz1] on syz0 [ 1113.755831][T11561] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 1113.763906][T11553] wlan0 speed is unknown, defaulting to 1000 [ 1114.105297][T28768] Bluetooth: hci2: command 0x0406 tx timeout [ 1114.573093][T11580] input: syz1 as /devices/virtual/input/input114 [ 1115.223874][ T5844] net_ratelimit: 5 callbacks suppressed [ 1115.223889][ T5844] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1115.467928][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.470684][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 1115.928560][ T5844] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1116.104256][ T8638] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1116.107053][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1116.285758][ T8297] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1116.316022][ T8638] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1116.321530][ T8297] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1116.325649][ T5844] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1116.745935][T11130] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1116.766411][T11592] wlan0 speed is unknown, defaulting to 1000 [ 1116.984072][ T8297] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1117.015610][ T8297] hid-generic 0000:0000:0000.0033: unknown main item tag 0x0 [ 1117.029574][ T8297] hid-generic 0000:0000:0000.0033: hidraw1: HID v0.00 Device [syz1] on syz0 [ 1117.209583][T11643] wlan0 speed is unknown, defaulting to 1000 [ 1118.213800][T11663] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 1118.983893][T11679] Invalid ELF header magic: != ELF [ 1119.967422][T11684] syzkaller0: entered promiscuous mode [ 1119.969243][T11684] syzkaller0: entered allmulticast mode [ 1120.550604][ T5844] net_ratelimit: 7 callbacks suppressed [ 1120.550617][ T5844] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1120.575841][ T42] audit: type=1800 audit(1786376019.179:1343): pid=11702 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.7616" name="local" dev="configfs" ino=142864 res=0 errno=0 [ 1120.621017][ T42] audit: type=1800 audit(1786376019.189:1344): pid=11702 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.7616" name="scan_secs" dev="configfs" ino=142867 res=0 errno=0 [ 1120.897832][ T5844] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1121.163647][ T5844] usb 11-1: new high-speed USB device number 6 using dummy_hcd [ 1121.314528][ T5844] usb 11-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice= 0.00 [ 1121.335910][ T5844] usb 11-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1121.344091][ T5844] usb 11-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1121.358179][ T5844] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1121.626519][ T5844] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1121.649729][ T5820] usb 11-1: USB disconnect, device number 6 [ 1121.700489][T11719] Invalid ELF header magic: != ELF [ 1121.866885][T19709] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1121.870746][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1122.075321][ T8297] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1122.354526][T11736] Invalid ELF header magic: != ELF [ 1122.453674][T11743] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7630'. [ 1122.663701][T11130] usb 12-1: new high-speed USB device number 8 using dummy_hcd [ 1122.670296][ T5844] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1122.838602][T11130] usb 12-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1122.843840][T11130] usb 12-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1122.849459][T11130] usb 12-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1122.857222][T11130] usb 12-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1122.876478][T11130] usb 12-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 1122.936616][T11130] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1122.940480][T11130] usb 12-1: Product: syz [ 1122.945382][T11130] usb 12-1: Manufacturer: syz [ 1122.949957][T11130] usb 12-1: SerialNumber: syz [ 1122.990870][T11130] cdc_mbim 12-1:1.0: skipping garbage [ 1123.038815][T11753] Invalid ELF header magic: != ELF [ 1123.150960][ T8297] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1123.257003][T11740] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1123.714467][ T5844] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1123.714533][T19724] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1123.889536][T11130] cdc_mbim 12-1:1.0: bind() failure [ 1123.894205][T11130] cdc_ncm 12-1:1.1: CDC Union missing and no IAD found [ 1123.896411][T11130] cdc_ncm 12-1:1.1: bind() failure [ 1123.908912][T11130] usb 12-1: USB disconnect, device number 8 [ 1124.166760][ T8297] hid-generic 0000:0000:0000.0034: unknown main item tag 0x0 [ 1124.173048][ T8297] hid-generic 0000:0000:0000.0034: hidraw1: HID v0.00 Device [syz1] on syz0 [ 1124.186406][T11770] wlan0 speed is unknown, defaulting to 1000 [ 1124.203656][ T5844] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 1124.369697][ T5844] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1124.374977][ T5844] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1124.392760][ T5844] usb 10-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1124.395276][T11775] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7639'. [ 1124.396916][ T5844] usb 10-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1124.403849][ T5844] usb 10-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 1124.408669][ T5844] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1124.411379][ T5844] usb 10-1: Product: syz [ 1124.412723][ T5844] usb 10-1: Manufacturer: syz [ 1124.422624][ T5844] usb 10-1: SerialNumber: syz [ 1124.433067][ T5844] cdc_mbim 10-1:1.0: skipping garbage [ 1124.645583][T11768] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1125.078153][T11796] Invalid ELF header magic: != ELF [ 1125.470331][ T5844] cdc_mbim 10-1:1.0: bind() failure [ 1125.479500][ T5844] cdc_ncm 10-1:1.1: CDC Union missing and no IAD found [ 1125.484375][ T5844] cdc_ncm 10-1:1.1: bind() failure [ 1125.487915][T11799] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7648'. [ 1125.493049][ T5844] usb 10-1: USB disconnect, device number 14 [ 1125.622725][T11801] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 1125.810573][ T5844] net_ratelimit: 4 callbacks suppressed [ 1125.810592][ T5844] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1126.273908][ T8297] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1126.345562][T11130] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1126.619645][T11821] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7657'. [ 1126.698151][T11825] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7658'. [ 1126.803788][T11833] netlink: 16402 bytes leftover after parsing attributes in process `syz.7.7661'. [ 1126.826303][ T5844] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1126.869581][ T7983] hid-generic 0000:0000:0000.0035: unknown main item tag 0x0 [ 1126.901128][ T7983] hid-generic 0000:0000:0000.0035: hidraw1: HID v0.00 Device [syz1] on syz0 [ 1126.913795][T11831] wlan0 speed is unknown, defaulting to 1000 [ 1126.987781][T11130] usb 11-1: new high-speed USB device number 7 using dummy_hcd [ 1127.165814][T11130] usb 11-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice= 0.00 [ 1127.171750][T11130] usb 11-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1127.194107][T11130] usb 11-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1127.197824][T11130] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1127.305647][ T5844] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1127.309799][T11835] syz.3.7663 (11835): drop_caches: 1 [ 1127.343298][T11835] syz.3.7663 (11835): drop_caches: 1 [ 1127.478619][ T5820] usb 11-1: USB disconnect, device number 7 [ 1127.625579][T19709] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1127.629403][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1127.877765][ T5844] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1128.195803][T11857] Invalid ELF header magic: != ELF [ 1128.235688][ T42] audit: type=1800 audit(1786376026.839:1345): pid=11859 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.7668" name="bmaControls" dev="configfs" ino=144558 res=0 errno=0 [ 1128.380010][ T5844] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1128.734989][T11869] i2c i2c-1: DVB: adapter 0 frontend 0 frequency 1000003 out of range (51000000..2150000000) [ 1128.908641][ T5844] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1128.948312][T11877] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7675'. [ 1128.962874][T11875] netlink: 87 bytes leftover after parsing attributes in process `syz.7.7674'. [ 1129.022048][ T42] audit: type=1800 audit(1786376027.619:1346): pid=11881 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.7677" name="local" dev="configfs" ino=142024 res=0 errno=0 [ 1129.034234][T11882] Invalid ELF header magic: != ELF [ 1129.061933][ T42] audit: type=1800 audit(1786376027.659:1347): pid=11881 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.7677" name="scan_secs" dev="configfs" ino=142027 res=0 errno=0 [ 1129.361064][T11883] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint [ 1129.422345][T11883] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref] [ 1129.426035][T11883] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff] [ 1129.429278][T11883] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 1129.434213][T11883] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 1129.478570][T11883] pci 0000:00:01.0: Adding to iommu group 1 [ 1129.492898][T11883] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 1129.495677][T11883] pci 0000:00:01.0: vgaarb: bridge control possible [ 1129.498297][T11883] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 1129.519841][T11883] pci 0000:00:05.0: [1af4:1009] type 00 class 0x000200 conventional PCI endpoint [ 1129.530516][T11883] pci 0000:00:05.0: BAR 0 [io 0xc0c0-0xc0df] [ 1129.533127][T11883] pci 0000:00:05.0: BAR 1 [mem 0xfeaf6000-0xfeaf6fff] [ 1129.537706][T11883] pci 0000:00:05.0: BAR 4 [mem 0xfe204000-0xfe207fff 64bit pref] [ 1129.596335][T11883] pci 0000:00:05.0: Adding to iommu group 5 [ 1129.640194][T11883] pci 0000:00:1d.0: [8086:2934] type 00 class 0x0c0300 conventional PCI endpoint [ 1129.647397][T11883] pci 0000:00:1d.0: BAR 4 [io 0xc0e0-0xc0ff] [ 1129.782667][T11883] pci 0000:00:1d.0: Adding to iommu group 7 [ 1129.791216][T11883] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned [ 1129.797396][T11883] pci 0000:00:05.0: BAR 4 [mem 0x580000000-0x580003fff 64bit pref]: assigned [ 1129.819730][T11883] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned [ 1129.847555][T11883] pci 0000:00:05.0: BAR 1 [mem 0x81001000-0x81001fff]: assigned [ 1129.855290][T11883] pci 0000:00:05.0: BAR 0 [io 0x2000-0x201f]: assigned [ 1129.861565][T11883] pci 0000:00:1d.0: BAR 4 [io 0x2020-0x203f]: assigned [ 1129.866788][T11883] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console [ 1129.905016][T11883] [drm] Found bochs VGA, ID 0xb0c5. [ 1129.908764][T11883] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000. [ 1129.913056][T11883] bochs-drm 0000:00:01.0: probe with driver bochs-drm failed with error -4 [ 1129.940507][T11900] binder: 11899:11900 ioctl c0306201 800004c0 returned -14 [ 1129.942079][T11907] i2c i2c-1: DVB: adapter 0 frontend 0 frequency 1000003 out of range (51000000..2150000000) [ 1129.945716][T11900] binder: 11899:11900 ioctl c0306201 800001c0 returned -14 [ 1130.015211][T11910] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7684'. [ 1130.120844][T11130] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 1130.127042][T11130] hid-generic 0000:0000:0000.0036: hidraw1: HID v0.00 Device [syz1] on syz0 [ 1130.167288][T11916] wlan0 speed is unknown, defaulting to 1000 [ 1130.322750][T11883] pci 0000:00:1d.0: quirk_usb_early_handoff+0x0/0x1360 took 237657 usecs [ 1130.421908][T11883] uhci_hcd 0000:00:1d.0: UHCI Host Controller [ 1130.496146][T11883] uhci_hcd 0000:00:1d.0: new USB bus registered, assigned bus number 1 [ 1130.527274][T11883] uhci_hcd 0000:00:1d.0: detected 2 ports [ 1130.557299][T11883] uhci_hcd 0000:00:1d.0: irq 16, io port 0x00002020 [ 1130.569433][T11883] usb usb1: New USB device found, idVendor=1d6b, idProduct=0001, bcdDevice= 7.02 [ 1130.581972][T11883] usb usb1: New USB device strings: Mfr=3, Product=2, SerialNumber=1 [ 1130.592604][T11883] usb usb1: Product: UHCI Host Controller [ 1130.597074][T11883] usb usb1: Manufacturer: Linux syzkaller uhci_hcd [ 1130.632278][T11883] usb usb1: SerialNumber: 0000:00:1d.0 [ 1130.803369][T11883] hub 1-0:1.0: USB hub found [ 1130.811885][T11883] hub 1-0:1.0: 2 ports detected [ 1130.995060][ T5844] net_ratelimit: 5 callbacks suppressed [ 1130.995091][ T5844] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1131.126887][T11937] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7694'. [ 1131.172702][T11919] fido_id[11919]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1131.376918][T11951] i2c i2c-1: DVB: adapter 0 frontend 0 frequency 1000003 out of range (51000000..2150000000) [ 1131.386451][ T5828] hid-generic 0000:0000:0000.0037: unknown main item tag 0x0 [ 1131.396526][ T5828] hid-generic 0000:0000:0000.0037: hidraw1: HID v0.00 Device [syz1] on syz0 [ 1131.430542][T11954] netlink: 'syz.5.7699': attribute type 12 has an invalid length. [ 1131.430814][T11943] wlan0 speed is unknown, defaulting to 1000 [ 1131.465216][ T5844] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1131.713966][T11969] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7703'. [ 1132.111584][ T5844] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1132.234130][T28122] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1132.287981][T11979] Invalid ELF header magic: != ELF [ 1132.324964][ T1124] ata1.00: exception Emask 0x0 SAct 0x10 SErr 0x0 action 0x6 [ 1132.328033][ T1124] ata1.00: waking up from sleep [ 1132.330174][ T1124] ata1: hard resetting link [ 1132.451637][T11987] netlink: 'syz.6.7707': attribute type 12 has an invalid length. [ 1132.504073][ T5844] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1132.668853][ T1124] ata1: SATA link up 1.5 Gbps (SStatus 113 SControl 300) [ 1132.690057][ T1124] ata1.00: configured for UDMA/100 [ 1132.695632][ T1124] ata1: EH complete [ 1132.756727][T19709] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1132.760492][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1132.782249][T11997] i2c i2c-1: DVB: adapter 0 frontend 0 frequency 1000003 out of range (51000000..2150000000) [ 1132.785236][T19628] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1132.809744][ T8297] hid-generic 0000:0000:0000.0038: unknown main item tag 0x0 [ 1132.816666][ T8297] hid-generic 0000:0000:0000.0038: hidraw1: HID v0.00 Device [syz1] on syz0 [ 1132.864831][T12001] wlan0 speed is unknown, defaulting to 1000 [ 1132.933146][T11994] Invalid ELF header magic: != ELF [ 1133.036417][T12007] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7712'. [ 1133.049123][T12002] fido_id[12002]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1133.145684][ T5844] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1133.241990][T12015] tipc: Enabling of bearer rejected, already enabled [ 1133.544129][ T5844] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1133.624572][T12030] netlink: 'syz.7.7722': attribute type 11 has an invalid length. [ 1133.930639][T12028] Invalid ELF header magic: != ELF [ 1134.183960][ T5844] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1134.318543][T12047] i2c i2c-1: DVB: adapter 0 frontend 0 frequency 1000003 out of range (51000000..2150000000) [ 1135.098135][T12067] Invalid ELF header magic: != ELF [ 1135.196941][ T8297] hid-generic 0000:0000:0000.0039: unknown main item tag 0x0 [ 1135.204355][ T8297] hid-generic 0000:0000:0000.0039: hidraw1: HID v0.00 Device [syz1] on syz0 [ 1135.219408][T12069] wlan0 speed is unknown, defaulting to 1000 [ 1135.399546][ T41] hid-generic 0000:0000:0000.003A: unknown main item tag 0x0 [ 1135.425795][ T41] hid-generic 0000:0000:0000.003A: hidraw1: HID v0.00 Device [syz1] on syz0 [ 1135.450721][T12075] wlan0 speed is unknown, defaulting to 1000 [ 1135.709749][T12082] Invalid ELF header magic: != ELF [ 1135.852198][T12084] bridge1: entered promiscuous mode [ 1135.854492][T12084] bridge1: entered allmulticast mode [ 1136.063050][T29870] net_ratelimit: 4 callbacks suppressed [ 1136.063070][T29870] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1136.069622][ T8297] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1136.156217][T12097] input: syz1 as /devices/virtual/input/input115 [ 1136.212010][T12089] /dev/sr0: Can't open blockdev [ 1136.217053][T12091] hpfs: Bad magic ... probably not HPFS [ 1136.263649][ C2] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1136.274227][ T5844] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1136.356344][T12105] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7745'. [ 1136.431913][T11130] hid-generic 0000:0000:0000.003B: unknown main item tag 0x0 [ 1136.437198][T11130] hid-generic 0000:0000:0000.003B: hidraw1: HID v0.00 Device [syz1] on syz0 [ 1136.460652][T12103] wlan0 speed is unknown, defaulting to 1000 [ 1136.525389][ T41] usb 11-1: new high-speed USB device number 8 using dummy_hcd [ 1136.674679][ T41] usb 11-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1136.684023][ T41] usb 11-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1136.688892][ T41] usb 11-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1136.692781][ T41] usb 11-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1136.697267][ T41] usb 11-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 1136.701931][T12112] bond1: Removing last arp target with arp_interval on [ 1136.704981][ T41] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1136.708439][ T41] usb 11-1: Product: syz [ 1136.708535][T12112] bond1: entered promiscuous mode [ 1136.710218][ T41] usb 11-1: Manufacturer: syz [ 1136.710236][ T41] usb 11-1: SerialNumber: syz [ 1136.711937][T12112] bond1: entered allmulticast mode [ 1136.719070][T12112] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1136.720744][ T41] cdc_mbim 11-1:1.0: skipping garbage [ 1136.944601][T12099] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 1137.117735][T12124] Invalid ELF header magic: != ELF [ 1137.155049][ T8297] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1137.304423][ T5844] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1137.645955][T12135] Invalid ELF header magic: != ELF [ 1137.899198][ T41] cdc_mbim 11-1:1.0: bind() failure [ 1137.911852][ T41] cdc_ncm 11-1:1.1: CDC Union missing and no IAD found [ 1137.917458][ T41] cdc_ncm 11-1:1.1: bind() failure [ 1137.928626][ T41] usb 11-1: USB disconnect, device number 8 [ 1137.986879][T12141] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7754'. [ 1138.002951][T12142] i2c i2c-1: DVB: adapter 0 frontend 0 frequency 1000003 out of range (51000000..2150000000) [ 1138.011273][T12145] input: syz1 as /devices/virtual/input/input116 [ 1138.194204][ T8297] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1138.234284][ T42] audit: type=1800 audit(1786376036.829:1348): pid=12155 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.7757" name="local" dev="configfs" ino=146528 res=0 errno=0 [ 1138.245783][ T42] audit: type=1800 audit(1786376036.849:1349): pid=12155 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.7757" name="scan_secs" dev="configfs" ino=146530 res=0 errno=0 [ 1138.254353][T12158] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_vlan, syncid = 0, id = 0 [ 1138.256321][T12153] netlink: 'syz.3.7758': attribute type 29 has an invalid length. [ 1138.269040][T12153] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7758'. [ 1138.377659][T12164] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7760'. [ 1138.397637][ T71] IPVS: starting estimator thread 0... [ 1138.493616][T12165] IPVS: using max 45 ests per chain, 108000 per kthread [ 1138.503945][T19709] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1138.506872][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1138.560410][ T5844] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1138.736433][ T8297] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 1138.800357][T12179] Invalid ELF header magic: != ELF [ 1138.908658][ T8297] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1138.920727][ T8297] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1138.924690][ T8297] usb 10-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1138.929174][ T8297] usb 10-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1138.933208][ T8297] usb 10-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 1138.944052][ T8297] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1138.947725][ T8297] usb 10-1: Product: syz [ 1138.949348][ T8297] usb 10-1: Manufacturer: syz [ 1138.951310][ T8297] usb 10-1: SerialNumber: syz [ 1138.960021][ T42] audit: type=1800 audit(1786376037.559:1350): pid=12186 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.7767" name="local" dev="configfs" ino=144899 res=0 errno=0 [ 1138.961639][ T8297] cdc_mbim 10-1:1.0: skipping garbage [ 1138.966624][ T42] audit: type=1800 audit(1786376037.559:1351): pid=12186 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.7767" name="scan_secs" dev="configfs" ino=144901 res=0 errno=0 [ 1138.972802][T12187] i2c i2c-1: DVB: adapter 0 frontend 0 frequency 1000003 out of range (51000000..2150000000) [ 1139.175995][T12171] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1139.224861][T12194] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7771'. [ 1139.234217][ T5844] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1139.482945][ T6963] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1139.607655][ T6963] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1139.671125][T12213] Invalid ELF header magic: != ELF [ 1139.769649][T11453] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1139.805237][T11453] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1139.812073][T11453] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1139.825843][ T6963] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1139.832316][T11453] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1139.845044][T11453] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1140.014346][ T8297] cdc_mbim 10-1:1.0: bind() failure [ 1140.026513][ T8297] cdc_ncm 10-1:1.1: CDC Union missing and no IAD found [ 1140.032398][ T8297] cdc_ncm 10-1:1.1: bind() failure [ 1140.075172][ T8297] usb 10-1: USB disconnect, device number 15 [ 1140.091766][ T6963] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1140.339070][T12236] i2c i2c-1: DVB: adapter 0 frontend 0 frequency 1000003 out of range (51000000..2150000000) [ 1140.342346][T12217] wlan0 speed is unknown, defaulting to 1000 [ 1140.384394][T12241] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7780'. [ 1140.407587][ T6963] bridge_slave_1: left allmulticast mode [ 1140.409971][ T6963] bridge_slave_1: left promiscuous mode [ 1140.412668][ T6963] bridge0: port 2(bridge_slave_1) entered disabled state [ 1140.423702][ T6963] bridge_slave_0: left allmulticast mode [ 1140.426176][ T6963] bridge_slave_0: left promiscuous mode [ 1140.428802][ T6963] bridge0: port 1(bridge_slave_0) entered disabled state [ 1140.803917][ T6963] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1140.809731][ T6963] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1140.817898][ T6963] bond0 (unregistering): Released all slaves [ 1140.838936][ T6963] bond1 (unregistering): Released all slaves [ 1140.873290][T12249] Invalid ELF header magic: != ELF [ 1141.086911][T31006] net_ratelimit: 3 callbacks suppressed [ 1141.086927][T31006] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1141.091600][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1141.125648][ T6963] tipc: Disabling bearer [ 1141.132501][T12257] i2c i2c-1: DVB: adapter 0 frontend 0 frequency 1000003 out of range (51000000..2150000000) [ 1141.138587][ T6963] tipc: Disabling bearer [ 1141.151248][ T6963] tipc: Left network mode [ 1141.304175][ T5837] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1141.362452][T12217] bridge0: port 1(bridge_slave_0) entered blocking state [ 1141.367394][T12217] bridge0: port 1(bridge_slave_0) entered disabled state [ 1141.372460][T12217] bridge_slave_0: entered allmulticast mode [ 1141.376872][T12217] bridge_slave_0: entered promiscuous mode [ 1141.397547][T12217] bridge0: port 2(bridge_slave_1) entered blocking state [ 1141.398439][T12271] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7786'. [ 1141.400702][T12217] bridge0: port 2(bridge_slave_1) entered disabled state [ 1141.408317][T12217] bridge_slave_1: entered allmulticast mode [ 1141.412312][T12217] bridge_slave_1: entered promiscuous mode [ 1141.432881][ T5447] 8021q: adding VLAN 0 to HW filter on device eth14 [ 1141.463806][T12217] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1141.470140][T12217] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1141.488739][T12217] team0: Port device team_slave_0 added [ 1141.493898][T29870] usb 10-1: new high-speed USB device number 16 using dummy_hcd [ 1141.496119][T12217] team0: Port device team_slave_1 added [ 1141.563871][ T6963] hsr_slave_0: left promiscuous mode [ 1141.567727][ T6963] hsr_slave_1: left promiscuous mode [ 1141.572876][ T6963] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1141.576659][ T6963] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1141.581061][ T6963] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1141.584959][ T6963] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1141.600548][ T6963] veth1_macvtap: left promiscuous mode [ 1141.603126][ T6963] veth0_macvtap: left promiscuous mode [ 1141.606910][ T6963] veth1_vlan: left promiscuous mode [ 1141.609289][ T6963] veth0_vlan: left promiscuous mode [ 1141.647309][T29870] usb 10-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice= 0.00 [ 1141.652253][T29870] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1141.656553][T29870] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1141.660660][T29870] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1141.715799][ T8297] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1141.722600][T12281] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7788'. [ 1141.950433][T28768] Bluetooth: hci1: command tx timeout [ 1141.988448][ T5820] usb 10-1: USB disconnect, device number 16 [ 1142.054854][ T6963] team0 (unregistering): Port device team_slave_1 removed [ 1142.120534][ T6963] team0 (unregistering): Port device team_slave_0 removed [ 1142.343200][T12278] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7787'. [ 1142.347998][ T8297] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1142.519843][T12279] bridge0: port 2(bridge_slave_1) entered disabled state [ 1142.523387][T12279] bridge0: port 1(bridge_slave_0) entered disabled state [ 1142.629603][T12279] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1142.636090][T12279] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1142.744762][ T8297] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1142.846291][T12217] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1142.851513][T12217] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1142.867220][T12217] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1142.919655][T12217] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1142.922675][T12217] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1142.934624][T12217] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1143.060811][T12298] i2c i2c-1: DVB: adapter 0 frontend 0 frequency 1000003 out of range (51000000..2150000000) [ 1143.066894][T12217] hsr_slave_0: entered promiscuous mode [ 1143.070921][T12217] hsr_slave_1: entered promiscuous mode [ 1143.388369][ T5837] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1143.398820][ T5447] 8021q: adding VLAN 0 to HW filter on device eth15 [ 1143.421305][T29870] hid-generic 0000:0000:0000.003C: unknown main item tag 0x0 [ 1143.426267][T29870] hid-generic 0000:0000:0000.003C: hidraw1: HID v0.00 Device [syz1] on syz0 [ 1143.449551][ T6963] IPVS: stop unused estimator thread 0... [ 1143.529025][T12301] wlan0 speed is unknown, defaulting to 1000 [ 1143.568439][T12310] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 1143.571251][T12310] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1143.783892][ T5837] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1143.877192][T12310] vhci_hcd vhci_hcd.0: Device attached [ 1144.005202][ T5447] 8021q: adding VLAN 0 to HW filter on device eth16 [ 1144.023820][ T13] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1144.027360][ T13] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1144.033731][T28768] Bluetooth: hci1: command tx timeout [ 1144.093700][ T5820] usb 48-1: SetAddress Request (6) to port 0 [ 1144.096439][ T5820] usb 48-1: new SuperSpeed USB device number 6 using vhci_hcd [ 1144.164434][ T5837] usb 12-1: new high-speed USB device number 9 using dummy_hcd [ 1144.266863][T19723] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1144.270738][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1144.317785][ T5837] usb 12-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1144.322371][T12312] vhci_hcd: connection reset by peer [ 1144.328328][ T5837] usb 12-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1144.341816][ T5837] usb 12-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1144.353600][T28129] vhci_hcd vhci_hcd.5: stop threads [ 1144.355029][ T5837] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1144.355343][T28129] vhci_hcd vhci_hcd.5: release socket [ 1144.365239][T28129] vhci_hcd vhci_hcd.5: disconnect device [ 1144.368950][T12322] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1144.389297][ T5837] usb 12-1: Quirk or no altset; falling back to MIDI 1.0 [ 1144.466236][ T5447] 8021q: adding VLAN 0 to HW filter on device eth17 [ 1144.494741][T28129] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1144.567604][T28129] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1144.597954][T29870] usb 12-1: USB disconnect, device number 9 [ 1144.664388][T12336] Invalid ELF header magic: != ELF [ 1144.916138][T12217] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1144.922580][T12217] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1144.930423][T12217] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1144.935970][T12217] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1144.942844][T12217] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1144.955751][T12217] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1144.959858][T12217] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1144.965074][T12217] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1145.017414][T12217] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1145.028917][T12217] 8021q: adding VLAN 0 to HW filter on device team0 [ 1145.034822][T31006] bridge0: port 1(bridge_slave_0) entered blocking state [ 1145.037696][T31006] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1145.057704][T20380] bridge0: port 2(bridge_slave_1) entered blocking state [ 1145.060891][T20380] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1145.259005][T12350] netlink: 36 bytes leftover after parsing attributes in process `syz.7.7796'. [ 1145.265685][T12350] comedi comedi3: comedi_config --init_data is deprecated [ 1145.288820][T12350] wlan0 speed is unknown, defaulting to 1000 [ 1145.506873][T12217] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1145.587857][T12366] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7798'. [ 1146.022443][T12217] veth0_vlan: entered promiscuous mode [ 1146.038868][T12217] veth1_vlan: entered promiscuous mode [ 1146.103709][T28768] Bluetooth: hci1: command tx timeout [ 1146.117324][T12217] veth0_macvtap: entered promiscuous mode [ 1146.124751][T12217] veth1_macvtap: entered promiscuous mode [ 1146.165533][T12217] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1146.183274][T12217] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1146.194580][ T867] net_ratelimit: 4 callbacks suppressed [ 1146.194598][ T867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1146.203721][T28129] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1146.206611][T28129] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1146.265965][T20614] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1146.274122][T20614] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1146.274555][T12387] i2c i2c-1: DVB: adapter 0 frontend 0 frequency 1000003 out of range (51000000..2150000000) [ 1146.406982][T19709] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1146.411444][T19709] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1146.500468][T19709] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1146.503866][T19709] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1146.519821][ T8297] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1146.825199][T19716] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1146.828708][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1146.856061][ T42] audit: type=1800 audit(1786376045.459:1352): pid=12397 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.7776" name="local" dev="configfs" ino=148539 res=0 errno=0 [ 1146.981810][T12403] random: crng reseeded on system resumption [ 1147.239522][ T8297] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1147.313205][T12411] Invalid ELF header magic: != ELF [ 1147.555088][ T5837] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1147.884357][T12419] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7807'. [ 1148.183713][T28768] Bluetooth: hci1: command tx timeout [ 1148.265083][ T5837] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1148.299846][ T42] audit: type=1800 audit(1786376046.899:1353): pid=12436 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.7813" name="local" dev="configfs" ino=146198 res=0 errno=0 [ 1148.578860][T12451] i2c i2c-1: DVB: adapter 0 frontend 0 frequency 1000003 out of range (51000000..2150000000) [ 1148.589224][ T8297] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1149.155922][ T5820] usb 48-1: device descriptor read/8, error -110 [ 1149.187533][T12457] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7816'. [ 1149.221450][T12459] C: renamed from veth1_to_team (while UP) [ 1149.225525][T12459] netlink: 'syz.8.7817': attribute type 2 has an invalid length. [ 1149.228157][T12459] netlink: 128 bytes leftover after parsing attributes in process `syz.8.7817'. [ 1149.231076][T12459] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 1149.307808][ T55] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1149.466421][T12470] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7822'. [ 1149.577692][ T5820] usb usb48-port1: attempt power cycle [ 1149.591327][T12481] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7825'. [ 1150.074150][T12501] i2c i2c-1: DVB: adapter 0 frontend 0 frequency 1000003 out of range (51000000..2150000000) [ 1150.145820][ T5820] usb usb48-port1: unable to enumerate USB device [ 1150.459799][T12508] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7832'. [ 1150.639581][ T42] audit: type=1800 audit(1786376049.239:1354): pid=12514 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.7833" name="local" dev="configfs" ino=146315 res=0 errno=0 [ 1150.647907][ T42] audit: type=1800 audit(1786376049.239:1355): pid=12514 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.7833" name="scan_secs" dev="configfs" ino=146317 res=0 errno=0 [ 1151.053705][ T8297] usb 13-1: new high-speed USB device number 2 using dummy_hcd [ 1151.212451][ T8297] usb 13-1: unable to get BOS descriptor or descriptor too short [ 1151.215981][ T8297] usb 13-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 1151.221066][ T8297] usb 13-1: config 1 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1151.230557][ T8297] usb 13-1: string descriptor 0 read error: -22 [ 1151.233678][ T8297] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1151.393943][ T55] net_ratelimit: 5 callbacks suppressed [ 1151.393991][ T55] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1151.582234][T12536] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7841'. [ 1151.624467][ T5820] usb 12-1: new high-speed USB device number 10 using dummy_hcd [ 1151.689538][ T42] audit: type=1800 audit(1786376050.289:1356): pid=12538 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.7842" name="local" dev="configfs" ino=146354 res=0 errno=0 [ 1151.698139][ T42] audit: type=1800 audit(1786376050.289:1357): pid=12538 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.7842" name="scan_secs" dev="configfs" ino=146356 res=0 errno=0 [ 1151.718637][ T55] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1151.788903][ T5820] usb 12-1: unable to get BOS descriptor or descriptor too short [ 1151.793082][ T5820] usb 12-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 1151.799434][ T5820] usb 12-1: config 1 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1151.807366][ T5820] usb 12-1: string descriptor 0 read error: -22 [ 1151.810169][ T5820] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1151.944892][ T1473] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1151.956908][T19723] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1151.963929][ T5828] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1151.973950][ T5828] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1152.427365][ T5837] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1152.517212][ T8297] usb 13-1: USB disconnect, device number 2 [ 1152.586459][T31006] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1152.590018][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1152.633118][ T5820] usb 12-1: USB disconnect, device number 10 [ 1152.720115][T12550] i2c i2c-1: DVB: adapter 0 frontend 0 frequency 1000003 out of range (51000000..2150000000) [ 1152.744696][ T55] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1153.029864][T12564] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 1153.040155][T12564] CIFS mount error: No usable UNC path provided in device string! [ 1153.040155][T12564] [ 1153.050217][T12564] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1153.056300][T12559] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1153.253214][T12559] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1153.317445][ T42] audit: type=1800 audit(1786376051.919:1358): pid=12570 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.7851" name="local" dev="configfs" ino=147222 res=0 errno=0 [ 1153.325935][ T42] audit: type=1800 audit(1786376051.929:1359): pid=12570 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.7851" name="scan_secs" dev="configfs" ino=147224 res=0 errno=0 [ 1153.374635][T12559] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1153.504377][T12559] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1153.543824][ T8297] hid-generic 0000:0000:0000.003D: unknown main item tag 0x0 [ 1153.549248][ T8297] hid-generic 0000:0000:0000.003D: hidraw1: HID v0.00 Device [syz1] on syz0 [ 1153.588891][T12584] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7855'. [ 1153.593960][T12584] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7855'. [ 1153.602888][T12579] wlan0 speed is unknown, defaulting to 1000 [ 1153.624299][T12584] e1000e 0000:00:02.0 eth1: removed PHC [ 1153.667435][T12587] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7855'. [ 1153.765972][T12584] e1000e 0000:00:02.0 eth1: NIC Link is Down [ 1154.040905][T12603] i2c i2c-1: DVB: adapter 0 frontend 0 frequency 1000003 out of range (51000000..2150000000) [ 1154.074592][T12587] amd5536udc-pci 0000:00:02.0: Synopsys USB Device Controller [ 1154.087264][T12587] amd5536udc-pci 0000:00:02.0: DMA mode (PPBNDU) [ 1154.135244][T20614] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1154.139077][T20614] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1154.142696][T20614] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1154.147482][T20614] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1154.374508][T29853] usb 12-1: new high-speed USB device number 11 using dummy_hcd [ 1154.435728][T12621] Invalid ELF header magic: != ELF [ 1154.534851][T29853] usb 12-1: New USB device found, idVendor=0145, idProduct=1e00, bcdDevice= 0.00 [ 1154.542435][T29853] usb 12-1: no configurations [ 1154.547145][T29853] usb 12-1: can't read configurations, error -22 [ 1154.703623][T29853] usb 12-1: new high-speed USB device number 12 using dummy_hcd [ 1154.779575][ T42] audit: type=1800 audit(1786376053.379:1360): pid=12640 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.7860" name="local" dev="configfs" ino=148840 res=0 errno=0 [ 1154.798158][ T42] audit: type=1800 audit(1786376053.379:1361): pid=12640 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.7860" name="scan_secs" dev="configfs" ino=148842 res=0 errno=0 [ 1154.874385][T29853] usb 12-1: New USB device found, idVendor=0145, idProduct=1e00, bcdDevice= 0.00 [ 1154.883179][T29853] usb 12-1: no configurations [ 1154.889065][T29853] usb 12-1: can't read configurations, error -22 [ 1154.895653][T29853] usb usb12-port1: attempt power cycle [ 1155.058022][T12650] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7862'. [ 1155.061712][T12650] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7862'. [ 1155.244649][T29853] usb 12-1: new high-speed USB device number 13 using dummy_hcd [ 1155.280271][T29853] usb 12-1: New USB device found, idVendor=0145, idProduct=1e00, bcdDevice= 0.00 [ 1155.286093][T29853] usb 12-1: no configurations [ 1155.288263][T29853] usb 12-1: can't read configurations, error -22 [ 1155.423731][T29853] usb 12-1: new high-speed USB device number 14 using dummy_hcd [ 1155.427561][T29868] hid-generic 0000:0000:0000.003E: unknown main item tag 0x0 [ 1155.439333][T29868] hid-generic 0000:0000:0000.003E: hidraw1: HID v0.00 Device [syz1] on syz0 [ 1155.442654][T12682] syzkaller0: entered promiscuous mode [ 1155.445180][T29853] usb 12-1: New USB device found, idVendor=0145, idProduct=1e00, bcdDevice= 0.00 [ 1155.449933][T29853] usb 12-1: no configurations [ 1155.453577][T12682] syzkaller0: entered allmulticast mode [ 1155.454935][T29853] usb 12-1: can't read configurations, error -22 [ 1155.468542][T29853] usb usb12-port1: unable to enumerate USB device [ 1155.506753][T12676] wlan0 speed is unknown, defaulting to 1000 [ 1156.260084][T12702] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 1156.583989][ T8297] net_ratelimit: 9 callbacks suppressed [ 1156.584008][ T8297] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1156.903872][ T5837] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1157.354324][T12723] Invalid ELF header magic: != ELF [ 1157.408477][T12710] bond1 (unregistering): Released all slaves [ 1157.623852][ T55] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1157.946415][ T55] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1158.029793][T12741] netlink: 'syz.7.7876': attribute type 1 has an invalid length. [ 1158.098713][T12748] ieee802154 phy0 wpan0: encryption failed: -22 [ 1158.110098][T12745] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1158.134543][T12745] kvm: pic: level sensitive irq not supported [ 1158.134939][T12745] kvm: pic: non byte read [ 1158.139674][T12745] kvm: pic: level sensitive irq not supported [ 1158.139954][T12745] kvm: pic: non byte read [ 1158.145822][T12745] kvm: pic: level sensitive irq not supported [ 1158.146149][T12745] kvm: pic: non byte read [ 1158.146712][T29868] hid-generic 0000:0000:0000.003F: unknown main item tag 0x0 [ 1158.149399][T12745] kvm: pic: level sensitive irq not supported [ 1158.161192][T12745] kvm: pic: non byte read [ 1158.166227][T29868] hid-generic 0000:0000:0000.003F: hidraw1: HID v0.00 Device [syz1] on syz0 [ 1158.228906][T12738] wlan0 speed is unknown, defaulting to 1000 [ 1158.350467][T31006] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1158.353273][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1158.592554][T12762] IPVS: set_ctl: invalid protocol: 50 100.1.1.1:20003 [ 1158.634053][T12764] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7884'. [ 1158.719406][T12767] faux_driver vgem: [drm] Unknown color mode 55545; guessing buffer size. [ 1158.812479][ T55] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1158.814638][T29868] IPVS: starting estimator thread 0... [ 1158.919169][T12767] wlan0 speed is unknown, defaulting to 1000 [ 1158.924161][T12765] IPVS: using max 44 ests per chain, 105600 per kthread [ 1158.987287][ T55] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1159.243648][ T7983] usb 10-1: new high-speed USB device number 17 using dummy_hcd [ 1159.262784][T12779] Invalid ELF header magic: != ELF [ 1159.396147][ T7983] usb 10-1: Using ep0 maxpacket: 8 [ 1159.402139][ T7983] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1159.408332][ T7983] usb 10-1: New USB device found, idVendor=17ef, idProduct=7205, bcdDevice=8b.61 [ 1159.417559][T12782] netlink: 'syz.8.7888': attribute type 1 has an invalid length. [ 1159.429380][ T7983] usb 10-1: config 42 has an invalid interface number: 170 but max is 0 [ 1159.433241][T12782] netlink: 1010 bytes leftover after parsing attributes in process `syz.8.7888'. [ 1159.437162][ T7983] usb 10-1: config 42 has no interface number 0 [ 1159.446191][ T7983] usb 10-1: config 42 interface 170 has no altsetting 0 [ 1159.453716][T12782] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 1159.463077][ T7983] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1159.466943][ T7983] usb 10-1: Product: syz [ 1159.468745][ T7983] usb 10-1: Manufacturer: syz [ 1159.518598][ T7983] usb 10-1: SerialNumber: syz [ 1159.533062][ T7983] r8152-cfgselector 10-1: Unknown version 0x0000 [ 1159.711614][T12791] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1159.811571][ T8297] hid-generic 0000:0000:0000.0040: unknown main item tag 0x0 [ 1159.828428][ T8297] hid-generic 0000:0000:0000.0040: hidraw1: HID v0.00 Device [syz1] on syz0 [ 1159.860625][T12791] wlan0 speed is unknown, defaulting to 1000 [ 1159.865348][T12795] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7893'. [ 1159.866575][ T8297] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1160.025098][ T8297] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1160.170825][ T7983] r8152-cfgselector 10-1: USB disconnect, device number 17 [ 1160.264722][ T1473] usb 12-1: new high-speed USB device number 15 using dummy_hcd [ 1160.436040][ T1473] usb 12-1: Using ep0 maxpacket: 8 [ 1160.438578][ T1473] usb 12-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1160.444745][ T1473] usb 12-1: config index 0 descriptor too short (expected 301, got 45) [ 1160.449322][ T1473] usb 12-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1160.454348][ T1473] usb 12-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1160.457858][ T1473] usb 12-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1160.461524][ T1473] usb 12-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1160.466596][ T1473] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1160.682442][ T1473] usb 12-1: usb_control_msg returned -32 [ 1160.684325][ T1473] usbtmc 12-1:16.0: can't read capabilities [ 1161.263787][ T55] usb 10-1: new high-speed USB device number 18 using dummy_hcd [ 1161.604928][ T7983] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0 [ 1161.636698][ T7983] hid-generic 0000:0000:0000.0041: hidraw1: HID v0.00 Device [syz1] on syz0 [ 1161.675264][T12834] wlan0 speed is unknown, defaulting to 1000 [ 1161.954012][ T5837] net_ratelimit: 4 callbacks suppressed [ 1161.954026][ T5837] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1162.011508][T12839] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1162.104873][ T8297] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1162.496493][T12857] Invalid ELF header magic: != ELF [ 1162.555900][T12856] syzkaller0: entered promiscuous mode [ 1162.557733][T12856] syzkaller0: entered allmulticast mode [ 1162.565489][T12856] tipc: Started in network mode [ 1162.567151][T12856] tipc: Node identity 72a11e7f13e3, cluster identity 4711 [ 1162.570067][T12856] tipc: Enabled bearer , priority 0 [ 1162.576855][T12856] tipc: Resetting bearer [ 1162.662311][T12858] tipc: Resetting bearer [ 1162.685964][T12858] tipc: Disabling bearer [ 1162.975027][ T55] usb 12-1: USB disconnect, device number 15 [ 1162.986839][ T8297] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1163.153610][ T8297] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1163.263903][T29870] hid-generic 0000:0000:0000.0042: unknown main item tag 0x0 [ 1163.279165][T29870] hid-generic 0000:0000:0000.0042: hidraw1: HID v0.00 Device [syz1] on syz0 [ 1163.308002][T12867] wlan0 speed is unknown, defaulting to 1000 [ 1163.527312][T12870] fido_id[12870]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1163.909330][T12886] FAULT_INJECTION: forcing a failure. [ 1163.909330][T12886] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1163.913603][T12886] CPU: 3 UID: 0 PID: 12886 Comm: syz.8.7921 Tainted: G L syzkaller #0 PREEMPT(full) [ 1163.913622][T12886] Tainted: [L]=SOFTLOCKUP [ 1163.913626][T12886] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1163.913641][T12886] Call Trace: [ 1163.913647][T12886] [ 1163.913652][T12886] dump_stack_lvl+0x100/0x190 [ 1163.913747][T12886] should_fail_ex.cold+0x5/0xa [ 1163.913769][T12886] _copy_from_user+0x2e/0xd0 [ 1163.913809][T12886] __sys_bpf+0x2f5/0x4e80 [ 1163.913839][T12886] ? __pfx___sys_bpf+0x10/0x10 [ 1163.913852][T12886] ? find_held_lock+0x2b/0x80 [ 1163.913867][T12886] ? get_pid_task+0xfc/0x250 [ 1163.913881][T12886] ? get_pid_task+0xfc/0x250 [ 1163.913898][T12886] ? proc_fail_nth_write+0x9f/0x220 [ 1163.913930][T12886] ? find_held_lock+0x2b/0x80 [ 1163.913946][T12886] ? rcu_read_lock_any_held+0x6a/0xa0 [ 1163.913961][T12886] ? find_held_lock+0x2b/0x80 [ 1163.913973][T12886] ? ksys_write+0x190/0x250 [ 1163.913984][T12886] ? ksys_write+0x190/0x250 [ 1163.914004][T12886] ? fput+0x79/0x100 [ 1163.914018][T12886] ? __ia32_sys_bpf+0xcc/0x170 [ 1163.914029][T12886] __ia32_sys_bpf+0xcc/0x170 [ 1163.914042][T12886] ? __do_fast_syscall_32+0x98/0x970 [ 1163.914092][T12886] __do_fast_syscall_32+0xe7/0x970 [ 1163.914108][T12886] ? lockdep_hardirqs_on+0x78/0x100 [ 1163.914124][T12886] do_fast_syscall_32+0x32/0x70 [ 1163.914140][T12886] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1163.914155][T12886] RIP: 0023:0xf708efec [ 1163.914170][T12886] Code: Unable to access opcode bytes at 0xf708efc2. [ 1163.914175][T12886] RSP: 002b:00000000f547d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000165 [ 1163.914186][T12886] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000080000600 [ 1163.914193][T12886] RDX: 0000000000000048 RSI: 0000000000000000 RDI: 0000000000000000 [ 1163.914200][T12886] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1163.914206][T12886] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1163.914212][T12886] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1163.914225][T12886] [ 1164.023880][ T55] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1164.104297][T31006] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1164.108055][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1164.205975][ T8297] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1164.353953][T12899] Invalid ELF header magic: != ELF [ 1164.753802][T29870] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1165.090541][T12914] Invalid ELF header magic: != ELF [ 1165.615340][ T55] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1165.628535][ T55] hid-generic 0000:0000:0000.0043: hidraw1: HID v0.00 Device [syz1] on syz0 [ 1165.645904][T12917] wlan0 speed is unknown, defaulting to 1000 [ 1165.761695][T12928] Invalid ELF header magic: != ELF [ 1165.903124][T12927] netlink: 4 bytes leftover after parsing attributes in process `syz.8.7929'. [ 1166.097564][ T1473] usb 12-1: new high-speed USB device number 16 using dummy_hcd [ 1166.115836][T12938] Invalid ELF header magic: != ELF [ 1166.273717][ T1473] usb 12-1: Using ep0 maxpacket: 8 [ 1166.276228][ T1473] usb 12-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1166.280234][ T1473] usb 12-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1166.284059][ T1473] usb 12-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1166.287004][ T1473] usb 12-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 1166.290577][ T1473] usb 12-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 1166.294712][ T1473] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1166.330930][ T1473] hub 12-1:1.0: bad descriptor, ignoring hub [ 1166.334414][ T1473] hub 12-1:1.0: probe with driver hub failed with error -5 [ 1166.338097][ T1473] cdc_wdm 12-1:1.0: skipping garbage [ 1166.340449][ T1473] cdc_wdm 12-1:1.0: skipping garbage [ 1166.342714][ T1473] cdc_wdm 12-1:1.0: skipping garbage [ 1166.347834][ T1473] cdc_wdm 12-1:1.0: cdc-wdm0: USB WDM device [ 1166.350542][ T1473] cdc_wdm 12-1:1.0: Unknown control protocol [ 1166.951761][T12950] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1167.027828][T12950] kvm: pic: non byte read [ 1167.034887][T12950] kvm: pic: level sensitive irq not supported [ 1167.037203][T12950] kvm: pic: non byte read [ 1167.050206][T12950] kvm: pic: level sensitive irq not supported [ 1167.052066][T12950] kvm: pic: non byte read [ 1167.064399][T12950] kvm: pic: level sensitive irq not supported [ 1167.065432][T12950] kvm: pic: non byte read [ 1167.083207][T12950] kvm: pic: level sensitive irq not supported [ 1167.085437][T12950] kvm: pic: non byte read [ 1167.222225][T12955] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7936'. [ 1167.265886][T12932] usb 12-1: reset high-speed USB device number 16 using dummy_hcd [ 1167.304657][T19723] net_ratelimit: 4 callbacks suppressed [ 1167.304678][T19723] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1167.310279][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1167.358315][T12958] i2c i2c-1: DVB: adapter 0 frontend 0 frequency 1000003 out of range (51000000..2150000000) [ 1167.450629][T12932] usb 12-1: device firmware changed [ 1167.457765][T12932] cdc_wdm 12-1:1.0: Error autopm - -16 [ 1167.457895][ T1473] usb 12-1: USB disconnect, device number 16 [ 1167.474996][ T8297] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1167.543889][ T867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1167.593646][ T1473] usb 12-1: new high-speed USB device number 17 using dummy_hcd [ 1167.651341][T12963] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1167.653768][T12965] veth0_to_hsr: entered promiscuous mode [ 1167.732099][ T42] audit: type=1800 audit(1786376066.329:1362): pid=12970 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.7941" name="local" dev="configfs" ino=149260 res=0 errno=0 [ 1167.740031][ T42] audit: type=1800 audit(1786376066.339:1363): pid=12970 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.7941" name="scan_secs" dev="configfs" ino=150894 res=0 errno=0 [ 1167.744399][ T1473] usb 12-1: Using ep0 maxpacket: 8 [ 1167.749744][ T1473] usb 12-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1167.754360][ T1473] usb 12-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1167.758347][ T1473] usb 12-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1167.761803][ T1473] usb 12-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1167.767057][ T1473] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1167.776428][ T1473] hub 12-1:1.0: bad descriptor, ignoring hub [ 1167.782910][ T1473] hub 12-1:1.0: probe with driver hub failed with error -5 [ 1167.788162][ T1473] cdc_wdm 12-1:1.0: skipping garbage [ 1167.790709][ T1473] cdc_wdm 12-1:1.0: skipping garbage [ 1167.792776][ T1473] cdc_wdm 12-1:1.0: skipping garbage [ 1167.795429][ T1473] cdc_wdm 12-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1167.846226][T12979] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7943'. [ 1167.918301][T12981] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1167.939073][T12981] kvm: pic: non byte read [ 1167.942644][T12981] kvm: pic: level sensitive irq not supported [ 1167.943064][T12981] kvm: pic: non byte read [ 1167.950880][T12981] kvm: pic: level sensitive irq not supported [ 1167.951994][T12981] kvm: pic: non byte read [ 1167.959848][T12981] kvm: pic: level sensitive irq not supported [ 1167.960272][T12981] kvm: pic: non byte read [ 1167.966658][T12981] kvm: pic: level sensitive irq not supported [ 1167.967276][T12981] kvm: pic: non byte read [ 1168.093781][T12985] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7945'. [ 1168.114272][T19628] usb 12-1: USB disconnect, device number 17 [ 1168.261818][ T42] audit: type=1326 audit(1786376066.859:1364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12986 comm="syz.5.7946" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706efec code=0x7ffc0000 [ 1168.272775][ T42] audit: type=1326 audit(1786376066.859:1365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12986 comm="syz.5.7946" exe="/syz-executor" sig=0 arch=40000003 syscall=331 compat=1 ip=0xf706efec code=0x7ffc0000 [ 1168.285566][ T42] audit: type=1326 audit(1786376066.859:1366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12986 comm="syz.5.7946" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706efec code=0x7ffc0000 [ 1168.297973][ T42] audit: type=1326 audit(1786376066.859:1367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12986 comm="syz.5.7946" exe="/syz-executor" sig=0 arch=40000003 syscall=436 compat=1 ip=0xf706efec code=0x7ffc0000 [ 1168.307246][ T42] audit: type=1326 audit(1786376066.859:1368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12986 comm="syz.5.7946" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706efec code=0x7ffc0000 [ 1168.315092][ T42] audit: type=1326 audit(1786376066.869:1369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12986 comm="syz.5.7946" exe="/syz-executor" sig=0 arch=40000003 syscall=395 compat=1 ip=0xf706efec code=0x7ffc0000 [ 1168.366859][T13001] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.7950'. [ 1168.385264][ T42] audit: type=1326 audit(1786376066.979:1370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12986 comm="syz.5.7946" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706efec code=0x7ffc0000 [ 1168.415808][ T42] audit: type=1326 audit(1786376066.989:1371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12986 comm="syz.5.7946" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706efec code=0x7ffc0000 [ 1168.504525][ T55] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1168.576536][T13004] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7952'. [ 1168.585159][ T55] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1169.015949][T13013] nvme_fabrics: unknown parameter or missing value '0x0000000000000000' in ctrl creation request [ 1169.459788][T13019] i2c i2c-1: DVB: adapter 0 frontend 0 frequency 1000003 out of range (51000000..2150000000) [ 1169.544347][ T55] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1169.624509][ T55] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1169.863991][T19709] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1169.867042][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1169.983719][T19628] usb 13-1: new high-speed USB device number 3 using dummy_hcd [ 1170.105486][T13035] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7962'. [ 1170.163647][T19628] usb 13-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1170.171305][T19628] usb 13-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1170.179216][T19628] usb 13-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1170.183273][T19628] usb 13-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1170.191397][T19628] usb 13-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 1170.201944][T19628] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1170.206058][T19628] usb 13-1: Product: syz [ 1170.207769][T19628] usb 13-1: Manufacturer: syz [ 1170.209803][T19628] usb 13-1: SerialNumber: syz [ 1170.225328][T19628] cdc_mbim 13-1:1.0: skipping garbage [ 1170.293744][ T55] usb 12-1: new high-speed USB device number 18 using dummy_hcd [ 1170.473557][ T55] usb 12-1: Using ep0 maxpacket: 8 [ 1170.475998][ T55] usb 12-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1170.480043][ T55] usb 12-1: config index 0 descriptor too short (expected 301, got 45) [ 1170.483550][ T55] usb 12-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1170.487150][T13030] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1170.508585][ T55] usb 12-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1170.513303][ T55] usb 12-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1170.517585][ T55] usb 12-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1170.523243][ T55] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1170.809516][T13054] Invalid ELF header magic: != ELF [ 1170.843843][ T55] usb 12-1: usb_control_msg returned -32 [ 1170.845803][ T55] usbtmc 12-1:16.0: can't read capabilities [ 1171.246819][T19628] cdc_mbim 13-1:1.0: bind() failure [ 1171.257182][T19628] cdc_ncm 13-1:1.1: CDC Union missing and no IAD found [ 1171.260127][T19628] cdc_ncm 13-1:1.1: bind() failure [ 1171.274685][T19628] usb 13-1: USB disconnect, device number 3 [ 1171.595387][T13070] netlink: 16 bytes leftover after parsing attributes in process `syz.8.7968'. [ 1171.679258][T13074] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7971'. [ 1172.317769][T13077] can0: slcan on ttyS3. [ 1172.344420][ T8638] net_ratelimit: 5 callbacks suppressed [ 1172.344437][ T8638] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1172.350114][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1172.608478][T13104] i2c i2c-1: DVB: adapter 0 frontend 0 frequency 1000003 out of range (51000000..2150000000) [ 1172.665186][ T8297] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1172.753936][ T8297] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1172.958963][T13110] Invalid ELF header magic: != ELF [ 1173.163687][ T1473] usb 12-1: USB disconnect, device number 18 [ 1173.705001][ T8297] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1173.707298][T13137] Invalid ELF header magic: != ELF [ 1173.784525][ T8297] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1174.345192][T29870] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1174.665356][T13161] Invalid ELF header magic: != ELF [ 1174.793514][T13164] Invalid ELF header magic: != ELF [ 1174.978923][ T42] kauditd_printk_skb: 324 callbacks suppressed [ 1174.978943][ T42] audit: type=1800 audit(1786376073.579:1696): pid=13156 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.7984" name="local" dev="configfs" ino=151104 res=0 errno=0 [ 1174.993117][T13132] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1174.997081][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1175.021827][ T42] audit: type=1800 audit(1786376073.609:1697): pid=13156 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.7984" name="scan_secs" dev="configfs" ino=151106 res=0 errno=0 [ 1175.087433][ T8297] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1175.382460][T13077] can0 (unregistered): slcan off ttyS3. [ 1175.448508][T13183] i2c i2c-1: DVB: adapter 0 frontend 0 frequency 1000003 out of range (51000000..2150000000) [ 1175.502179][T13189] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7989'. [ 1175.699672][T13201] Invalid ELF header magic: != ELF [ 1176.504208][T13217] Invalid ELF header magic: != ELF [ 1176.781766][T13222] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1176.809748][T13222] kvm: pic: non byte read [ 1176.815441][T13222] kvm: pic: level sensitive irq not supported [ 1176.815983][T13222] kvm: pic: non byte read [ 1176.822553][T13222] kvm: pic: level sensitive irq not supported [ 1176.823035][T13222] kvm: pic: non byte read [ 1176.826000][T13226] Invalid ELF header magic: != ELF [ 1176.835464][T13222] kvm: pic: level sensitive irq not supported [ 1176.836048][T13222] kvm: pic: non byte read [ 1176.846247][T13222] kvm: pic: level sensitive irq not supported [ 1176.846989][T13222] kvm: pic: non byte read [ 1176.918983][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 1176.921685][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.285196][T13240] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1177.412863][T13246] i2c i2c-1: DVB: adapter 0 frontend 0 frequency 1000003 out of range (51000000..2150000000) [ 1177.498882][ T867] hid-generic 0000:0000:0000.0044: unknown main item tag 0x0 [ 1177.538107][ T867] hid-generic 0000:0000:0000.0044: hidraw1: HID v0.00 Device [syz1] on syz0 [ 1177.548242][T13247] wlan0 speed is unknown, defaulting to 1000 [ 1177.668629][T13255] Invalid ELF header magic: != ELF [ 1178.194190][ T867] net_ratelimit: 5 callbacks suppressed [ 1178.194227][ T867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1178.199462][ T8297] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1178.202459][T13118] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1178.206050][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1178.239603][T13261] FAULT_INJECTION: forcing a failure. [ 1178.239603][T13261] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1178.265646][T13261] CPU: 2 UID: 0 PID: 13261 Comm: syz.8.8003 Tainted: G L syzkaller #0 PREEMPT(full) [ 1178.265681][T13261] Tainted: [L]=SOFTLOCKUP [ 1178.265688][T13261] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1178.265709][T13261] Call Trace: [ 1178.265717][T13261] [ 1178.265724][T13261] dump_stack_lvl+0x100/0x190 [ 1178.265821][T13261] should_fail_ex.cold+0x5/0xa [ 1178.265851][T13261] _copy_from_user+0x2e/0xd0 [ 1178.265912][T13261] memdup_user+0x6b/0xe0 [ 1178.265958][T13261] strndup_user+0x78/0xe0 [ 1178.265982][T13261] __ia32_sys_mount+0x136/0x310 [ 1178.266008][T13261] ? __pfx___ia32_sys_mount+0x10/0x10 [ 1178.266030][T13261] ? ksys_write+0x1ac/0x250 [ 1178.266049][T13261] ? __pfx_ksys_write+0x10/0x10 [ 1178.266072][T13261] __do_fast_syscall_32+0xe7/0x970 [ 1178.266140][T13261] ? lockdep_hardirqs_on+0x78/0x100 [ 1178.266168][T13261] do_fast_syscall_32+0x32/0x70 [ 1178.266222][T13261] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1178.266248][T13261] RIP: 0023:0xf708efec [ 1178.266274][T13261] Code: Unable to access opcode bytes at 0xf708efc2. [ 1178.266292][T13261] RSP: 002b:00000000f545c50c EFLAGS: 00000292 ORIG_RAX: 0000000000000015 [ 1178.266312][T13261] RAX: ffffffffffffffda RBX: 0000000080000300 RCX: 0000000080000000 [ 1178.266323][T13261] RDX: 0000000080000500 RSI: 0000000000000000 RDI: 0000000080000540 [ 1178.266334][T13261] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1178.266345][T13261] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1178.266355][T13261] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1178.266384][T13261] [ 1178.811087][T13275] Invalid ELF header magic: != ELF [ 1179.223815][ T8297] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1179.226835][ T867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1179.338586][T13285] tipc: Failed to remove unknown binding: 66,0,0/0:204097446/204097447 [ 1179.341772][T13285] tipc: Failed to remove unknown binding: 66,0,0/0:204097446/204097447 [ 1179.459835][T13287] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1179.472032][T13287] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1179.474288][T13287] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1179.506605][T13287] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1179.539370][T13287] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1179.542143][T13287] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1179.591479][T13287] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1179.604369][T13287] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1179.606141][T13287] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1179.617314][T13287] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1179.726797][T13294] tipc: Enabled bearer , priority 0 [ 1179.729942][T13294] syzkaller0: entered promiscuous mode [ 1179.732066][T13294] syzkaller0: entered allmulticast mode [ 1179.761960][T13294] tipc: Resetting bearer [ 1179.769244][T13293] tipc: Resetting bearer [ 1179.801611][T13293] tipc: Disabling bearer [ 1180.264382][T13132] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1180.269107][T29868] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1180.270744][T13118] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1180.277436][ T8297] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1181.463664][T13305] 9p: Bad value for 'wfdno' [ 1181.474138][T28768] Bluetooth: hci2: command 0x0406 tx timeout [ 1181.553805][T28768] Bluetooth: hci0: command 0x0c1a tx timeout [ 1181.554505][T11453] Bluetooth: hci3: command 0x0c1a tx timeout [ 1181.625401][T11453] Bluetooth: hci1: command 0x0c1a tx timeout [ 1182.014024][T13323] Invalid ELF header magic: != ELF [ 1182.017477][ T42] audit: type=1800 audit(1786376080.619:1698): pid=13324 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.8021" name="power" dev="configfs" ino=150382 res=0 errno=0 [ 1182.081341][T13326] tipc: Enabling of bearer rejected, failed to enable media [ 1182.562105][T13335] binder_alloc: 13334: binder_alloc_buf size 4294966592 failed, no address space [ 1182.572714][T13335] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 1182.778135][T13342] Invalid ELF header magic: != ELF [ 1183.363211][T13348] tipc: Failed to remove unknown binding: 66,0,0/0:2990316621/2990316622 [ 1183.375952][T13348] tipc: Failed to remove unknown binding: 66,0,0/0:2990316621/2990316622 [ 1183.384492][ T5837] net_ratelimit: 8 callbacks suppressed [ 1183.384511][ T5837] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1183.390362][ T867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1183.623662][T11453] Bluetooth: hci3: command 0x0c1a tx timeout [ 1183.633608][T11453] Bluetooth: hci0: command 0x0c1a tx timeout [ 1183.703656][T11453] Bluetooth: hci1: command 0x0c1a tx timeout [ 1183.718140][T13360] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1183.944369][ T37] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1183.947460][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1183.951210][T13113] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1183.958686][T29870] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1183.976816][T29870] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1184.165400][T13373] jffs2: notice: (13373) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1184.319536][T13375] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(8) [ 1184.322318][T13375] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1184.378059][T13375] vhci_hcd vhci_hcd.0: Device attached [ 1184.424355][ T867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1184.427957][ T5837] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1184.500421][T13380] geneve2: entered allmulticast mode [ 1184.617838][T13388] syzkaller0: entered promiscuous mode [ 1184.619662][T13388] syzkaller0: entered allmulticast mode [ 1184.653785][T29868] usb 52-1: SetAddress Request (2) to port 0 [ 1184.657944][T29868] usb 52-1: new SuperSpeed USB device number 2 using vhci_hcd [ 1184.976353][ T42] audit: type=1326 audit(1786376083.579:1699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13395 comm="syz.8.8043" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708efec code=0x7ffc0000 [ 1184.985198][ T42] audit: type=1326 audit(1786376083.579:1700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13395 comm="syz.8.8043" exe="/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf708efec code=0x7ffc0000 [ 1184.994225][ T42] audit: type=1326 audit(1786376083.579:1701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13395 comm="syz.8.8043" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708efec code=0x7ffc0000 [ 1185.017058][ T42] audit: type=1326 audit(1786376083.579:1702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13395 comm="syz.8.8043" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708efec code=0x7ffc0000 [ 1185.028665][ T42] audit: type=1326 audit(1786376083.579:1703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13395 comm="syz.8.8043" exe="/syz-executor" sig=0 arch=40000003 syscall=358 compat=1 ip=0xf708efec code=0x7ffc0000 [ 1185.038965][ T42] audit: type=1326 audit(1786376083.579:1704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13395 comm="syz.8.8043" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708efec code=0x7ffc0000 [ 1185.048268][ T42] audit: type=1326 audit(1786376083.579:1705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13395 comm="syz.8.8043" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf708efec code=0x7ffc0000 [ 1185.057714][ T42] audit: type=1326 audit(1786376083.579:1706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13395 comm="syz.8.8043" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708efec code=0x7ffc0000 [ 1185.067025][ T42] audit: type=1326 audit(1786376083.579:1707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13395 comm="syz.8.8043" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf708efec code=0x7ffc0000 [ 1185.082361][T13399] Invalid ELF header magic: != ELF [ 1185.350690][T13376] vhci_hcd: connection reset by peer [ 1185.379196][ T6963] vhci_hcd vhci_hcd.7: stop threads [ 1185.380923][ T6963] vhci_hcd vhci_hcd.7: release socket [ 1185.383041][ T6963] vhci_hcd vhci_hcd.7: disconnect device [ 1185.464184][ T8297] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1185.521093][T13404] FAULT_INJECTION: forcing a failure. [ 1185.521093][T13404] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1185.527334][T13404] CPU: 0 UID: 0 PID: 13404 Comm: syz.5.8045 Tainted: G L syzkaller #0 PREEMPT(full) [ 1185.527364][T13404] Tainted: [L]=SOFTLOCKUP [ 1185.527371][T13404] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1185.527383][T13404] Call Trace: [ 1185.527390][T13404] [ 1185.527401][T13404] dump_stack_lvl+0x100/0x190 [ 1185.527438][T13404] should_fail_ex.cold+0x5/0xa [ 1185.527463][T13404] _copy_to_user+0x32/0xd0 [ 1185.527495][T13404] simple_read_from_buffer+0xcb/0x170 [ 1185.527529][T13404] proc_fail_nth_read+0x1af/0x230 [ 1185.527575][T13404] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1185.527605][T13404] ? rw_verify_area+0xce/0x6d0 [ 1185.527633][T13404] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1185.527659][T13404] vfs_read+0x1e4/0xb40 [ 1185.527681][T13404] ? __pfx_vfs_read+0x10/0x10 [ 1185.527697][T13404] ? find_held_lock+0x2b/0x80 [ 1185.527733][T13404] ? __fget_files+0x215/0x3d0 [ 1185.527755][T13404] ? __fget_files+0x21f/0x3d0 [ 1185.527780][T13404] ksys_read+0x12a/0x250 [ 1185.527798][T13404] ? __pfx_ksys_read+0x10/0x10 [ 1185.527814][T13404] ? arch_syscall_is_vdso_sigreturn+0x19b/0x200 [ 1185.527843][T13404] ? syscall_user_dispatch+0x76/0x130 [ 1185.527870][T13404] do_int80_emulation+0x14b/0x720 [ 1185.527903][T13404] asm_int80_emulation+0x1a/0x20 [ 1185.527923][T13404] RIP: 0023:0xf71a74eb [ 1185.527939][T13404] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 1185.527956][T13404] RSP: 002b:00000000f545d4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 1185.527975][T13404] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f545d5d0 [ 1185.527987][T13404] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 1185.527998][T13404] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1185.528009][T13404] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1185.528020][T13404] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1185.528045][T13404] [ 1185.703643][T11453] Bluetooth: hci0: command 0x0c1a tx timeout [ 1185.706337][T11453] Bluetooth: hci3: command 0x0c1a tx timeout [ 1185.794110][T28768] Bluetooth: hci1: command 0x0c1a tx timeout [ 1186.056929][T13422] tipc: Started in network mode [ 1186.058926][T13422] tipc: Node identity , cluster identity 4711 [ 1186.061303][T13422] tipc: Failed to obtain node identity [ 1186.063764][T13422] tipc: Enabling of bearer rejected, failed to enable media [ 1186.085745][T13424] Invalid ELF header magic: != ELF [ 1186.245857][T13428] loop5: detected capacity change from 0 to 7 [ 1186.392524][T13428] Dev loop5: unable to read RDB block 7 [ 1186.395494][T13428] loop5: unable to read partition table [ 1186.399277][T13428] loop5: partition table beyond EOD, truncated [ 1186.402187][T13428] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1186.463849][T13438] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(8) [ 1186.466524][T13438] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1186.475590][T13438] vhci_hcd vhci_hcd.0: Device attached [ 1187.133776][T13446] macvtap1: entered promiscuous mode [ 1187.135928][T13446] dummy0: entered promiscuous mode [ 1187.138728][T13446] macvtap1: entered allmulticast mode [ 1187.140943][T13446] dummy0: entered allmulticast mode [ 1187.217471][T13439] vhci_hcd: connection closed [ 1187.217752][T28122] vhci_hcd vhci_hcd.7: stop threads [ 1187.222341][T28122] vhci_hcd vhci_hcd.7: release socket [ 1187.224207][T28122] vhci_hcd vhci_hcd.7: disconnect device [ 1187.560015][T13461] netlink: 168 bytes leftover after parsing attributes in process `syz.5.8063'. [ 1187.865034][T12274] usb 10-1: new high-speed USB device number 19 using dummy_hcd [ 1188.082731][T12274] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1188.102289][T12274] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1188.112839][T12274] usb 10-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1188.125799][T12274] usb 10-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1188.134336][T12274] usb 10-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 1188.143810][T12274] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1188.146651][T12274] usb 10-1: Product: syz [ 1188.148537][T12274] usb 10-1: Manufacturer: syz [ 1188.151685][T12274] usb 10-1: SerialNumber: syz [ 1188.195407][T12274] cdc_mbim 10-1:1.0: skipping garbage [ 1188.276597][T13468] pim6reg: entered allmulticast mode [ 1188.375720][T13463] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1188.402197][T13467] pim6reg: left allmulticast mode [ 1188.583795][ T8297] net_ratelimit: 10 callbacks suppressed [ 1188.583810][ T8297] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1188.993765][ T5837] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1189.075436][T13485] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8070'. [ 1189.277181][T12274] cdc_mbim 10-1:1.0: bind() failure [ 1189.348752][T12274] cdc_ncm 10-1:1.1: CDC Union missing and no IAD found [ 1189.364630][T12274] cdc_ncm 10-1:1.1: bind() failure [ 1189.370708][T12274] usb 10-1: USB disconnect, device number 19 [ 1189.627519][ T8297] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1189.707749][T29868] usb 52-1: device descriptor read/8, error -110 [ 1189.710883][T13118] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1189.714657][ T8297] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1189.732079][T12274] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1190.027195][ T8297] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1190.115733][T29868] usb usb52-port1: attempt power cycle [ 1190.361857][T13504] usb_phy_generic usb_phy_generic.2.auto: dummy supplies not allowed for exclusive requests (id=vbus) [ 1190.366243][T13118] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1190.382253][ T8297] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1190.382793][T13504] dwc2 dwc2.3.auto: supply vusb_d not found, using dummy regulator [ 1190.390371][T13508] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1190.391418][T19628] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1190.436258][T13508] kvm: pic: non byte read [ 1190.439722][T13508] kvm: pic: level sensitive irq not supported [ 1190.440141][T13508] kvm: pic: non byte read [ 1190.445863][T13508] kvm: pic: level sensitive irq not supported [ 1190.446129][T13508] kvm: pic: non byte read [ 1190.459359][T13508] kvm: pic: level sensitive irq not supported [ 1190.459695][T13508] kvm: pic: non byte read [ 1190.462073][T13504] dwc2 dwc2.3.auto: supply vusb_a not found, using dummy regulator [ 1190.464267][T13508] kvm: pic: level sensitive irq not supported [ 1190.467901][T13508] kvm: pic: non byte read [ 1190.469881][T13504] dwc2 dwc2.3.auto: Configuration mismatch. dr_mode forced to host [ 1190.469941][T13504] dwc2 dwc2.3.auto: Bad value for GSNPSID: 0xd2540012 [ 1190.794964][T29868] usb usb52-port1: unable to enumerate USB device [ 1191.713356][T13524] can0: slcan on ttyS3. [ 1192.267473][T13535] can0 (unregistered): slcan off ttyS3. [ 1192.332016][T13545] Invalid ELF header magic: != ELF [ 1192.350416][T13542] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1192.388392][T13542] kvm: pic: non byte read [ 1192.391843][T13542] kvm: pic: level sensitive irq not supported [ 1192.392436][T13542] kvm: pic: non byte read [ 1192.399231][T13542] kvm: pic: level sensitive irq not supported [ 1192.399520][T13542] kvm: pic: non byte read [ 1192.412700][T13542] kvm: pic: level sensitive irq not supported [ 1192.414553][T13542] kvm: pic: non byte read [ 1192.426690][T13542] kvm: pic: level sensitive irq not supported [ 1192.426998][T13542] kvm: pic: non byte read [ 1192.867901][T13563] wlan0 speed is unknown, defaulting to 1000 [ 1192.883711][ T5837] IPVS: starting estimator thread 0... [ 1192.993561][T13566] IPVS: using max 45 ests per chain, 108000 per kthread [ 1193.048497][ T42] kauditd_printk_skb: 32 callbacks suppressed [ 1193.048510][ T42] audit: type=1800 audit(1786376091.649:1740): pid=13572 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.8087" name="local" dev="configfs" ino=152752 res=0 errno=0 [ 1193.062881][ T42] audit: type=1800 audit(1786376091.659:1741): pid=13572 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.8087" name="scan_secs" dev="configfs" ino=152754 res=0 errno=0 [ 1193.785896][ T8297] net_ratelimit: 10 callbacks suppressed [ 1193.785910][ T8297] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1194.183980][T12274] usb 12-1: new high-speed USB device number 19 using dummy_hcd [ 1194.194110][ T5837] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1194.334081][T12274] usb 12-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1194.339204][T12274] usb 12-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1194.342661][T12274] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1194.349780][T12274] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1194.365180][T12274] usb 12-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1194.368300][T11130] usb 10-1: new high-speed USB device number 20 using dummy_hcd [ 1194.386192][T12274] usb 12-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1194.389520][T12274] usb 12-1: Manufacturer: syz [ 1194.397041][T12274] usb 12-1: config 0 descriptor?? [ 1194.543879][T11130] usb 10-1: Using ep0 maxpacket: 8 [ 1194.546302][T11130] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1194.557961][T11130] usb 10-1: config index 0 descriptor too short (expected 301, got 45) [ 1194.560808][T11130] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1194.568752][T11130] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1194.579217][T11130] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1194.583377][T11130] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1194.588983][T11130] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1194.837219][ T8297] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1194.842749][T11130] usb 10-1: usb_control_msg returned -32 [ 1194.845675][T12274] appleir 0003:05AC:8243.0045: unknown main item tag 0x0 [ 1194.851172][T11130] usbtmc 10-1:16.0: can't read capabilities [ 1194.936374][T12274] appleir 0003:05AC:8243.0045: hiddev1,hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.7-1/input0 [ 1195.052373][T12274] usb 10-1: USB disconnect, device number 20 [ 1195.223889][ T8297] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1195.867940][ T8297] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1196.033918][T13132] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1196.036843][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1196.146592][T13608] Invalid ELF header magic: != ELF [ 1196.264317][ T5837] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1196.910753][ T8297] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1197.004217][T19628] usb 12-1: USB disconnect, device number 19 [ 1197.012654][ T42] audit: type=1800 audit(1786376095.609:1742): pid=13618 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.8097" name="local" dev="configfs" ino=152849 res=0 errno=0 [ 1197.021156][ T42] audit: type=1800 audit(1786376095.619:1743): pid=13618 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.8097" name="scan_secs" dev="configfs" ino=151942 res=0 errno=0 [ 1197.132151][ T42] audit: type=1326 audit(1786376095.729:1744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13624 comm="syz.3.8099" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc8fec code=0x7ffc0000 [ 1197.146674][ T42] audit: type=1326 audit(1786376095.729:1745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13624 comm="syz.3.8099" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc8fec code=0x7ffc0000 [ 1197.156199][ T42] audit: type=1326 audit(1786376095.749:1746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13624 comm="syz.3.8099" exe="/syz-executor" sig=0 arch=40000003 syscall=114 compat=1 ip=0xf7fc8fec code=0x7ffc0000 [ 1197.257262][ T42] audit: type=1326 audit(1786376095.859:1747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13624 comm="syz.3.8099" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7fc9008 code=0x7ffc0000 [ 1197.266023][ T42] audit: type=1326 audit(1786376095.859:1748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13624 comm="syz.3.8099" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc8fec code=0x7ffc0000 [ 1197.274448][ T42] audit: type=1326 audit(1786376095.859:1749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13624 comm="syz.3.8099" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc8fec code=0x7ffc0000 [ 1197.347794][ T5837] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1197.465010][T13639] Invalid ELF header magic: != ELF [ 1197.483633][ T8297] usb 13-1: new high-speed USB device number 4 using dummy_hcd [ 1197.633569][ T8297] usb 13-1: Using ep0 maxpacket: 32 [ 1197.639402][ T8297] usb 13-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 1197.645109][ T8297] usb 13-1: config 0 has an invalid interface number: 1 but max is 0 [ 1197.647759][ T8297] usb 13-1: config 0 has no interface number 0 [ 1197.651530][ T8297] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1197.655070][ T8297] usb 13-1: Product: syz [ 1197.656471][ T8297] usb 13-1: Manufacturer: syz [ 1197.658040][ T8297] usb 13-1: SerialNumber: syz [ 1197.675602][ T8297] usb 13-1: config 0 descriptor?? [ 1197.679482][ T8297] usb 13-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1197.682377][ T8297] usb 13-1: selecting invalid altsetting 1 [ 1197.684895][ T8297] usb 13-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1197.695021][ T8297] usb 13-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1197.698442][ T8297] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1197.701081][ T8297] usb 13-1: media controller created [ 1197.707672][ T8297] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1197.992638][T13650] kvm: apic: phys broadcast and lowest prio [ 1198.192977][T13650] ================================================================== [ 1198.196339][T13650] BUG: KASAN: slab-use-after-free in __release_resource+0x276/0x2c0 [ 1198.199716][T13650] Read of size 8 at addr ffff8880267ece38 by task syz.8.8102/13650 [ 1198.204094][T13650] [ 1198.205829][T13650] CPU: 2 UID: 0 PID: 13650 Comm: syz.8.8102 Tainted: G L syzkaller #0 PREEMPT(full) [ 1198.205855][T13650] Tainted: [L]=SOFTLOCKUP [ 1198.205861][T13650] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1198.205871][T13650] Call Trace: [ 1198.205877][T13650] [ 1198.205883][T13650] dump_stack_lvl+0x100/0x190 [ 1198.205912][T13650] print_report+0x13d/0x4b0 [ 1198.205937][T13650] ? __virt_addr_valid+0x239/0x430 [ 1198.205955][T13650] ? __release_resource+0x276/0x2c0 [ 1198.205973][T13650] kasan_report+0xdf/0x1c0 [ 1198.205996][T13650] ? __release_resource+0x276/0x2c0 [ 1198.206023][T13650] __release_resource+0x276/0x2c0 [ 1198.206046][T13650] release_resource+0x26/0x40 [ 1198.206068][T13650] pci_remove_bus_device+0x2d3/0x3b0 [ 1198.206138][T13650] pci_stop_and_remove_bus_device_locked+0x1a/0x20 [ 1198.206163][T13650] remove_store+0x123/0x140 [ 1198.206187][T13650] ? __pfx_remove_store+0x10/0x10 [ 1198.206211][T13650] ? find_held_lock+0x2b/0x80 [ 1198.206235][T13650] ? sysfs_file_kobj+0xe4/0x290 [ 1198.206260][T13650] ? sysfs_file_kobj+0xe4/0x290 [ 1198.206285][T13650] ? __pfx_remove_store+0x10/0x10 [ 1198.206309][T13650] dev_attr_store+0x58/0x80 [ 1198.206376][T13650] ? __pfx_dev_attr_store+0x10/0x10 [ 1198.206402][T13650] sysfs_kf_write+0xf2/0x150 [ 1198.206427][T13650] kernfs_fop_write_iter+0x3e0/0x5f0 [ 1198.206449][T13650] ? __pfx_sysfs_kf_write+0x10/0x10 [ 1198.206474][T13650] vfs_write+0x6ac/0x1050 [ 1198.206491][T13650] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 1198.206517][T13650] ? __pfx_vfs_write+0x10/0x10 [ 1198.206533][T13650] ? find_held_lock+0x2b/0x80 [ 1198.206562][T13650] ksys_write+0x12a/0x250 [ 1198.206578][T13650] ? __pfx_ksys_write+0x10/0x10 [ 1198.206597][T13650] __do_fast_syscall_32+0xe7/0x970 [ 1198.206628][T13650] do_fast_syscall_32+0x32/0x70 [ 1198.206654][T13650] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1198.206677][T13650] RIP: 0023:0xf708efec [ 1198.206692][T13650] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 1198.206711][T13650] RSP: 002b:00000000f545c50c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 1198.206730][T13650] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 0000000080000140 [ 1198.206740][T13650] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 1198.206748][T13650] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1198.206758][T13650] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1198.206768][T13650] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1198.206795][T13650] [ 1198.206801][T13650] [ 1198.312479][T13650] Allocated by task 13504: [ 1198.314415][T13650] kasan_save_stack+0x30/0x50 [ 1198.316472][T13650] kasan_save_track+0x14/0x30 [ 1198.318534][T13650] __kasan_kmalloc+0xaa/0xb0 [ 1198.320586][T13650] __kmalloc_node_track_caller_noprof+0x331/0x830 [ 1198.323380][T13650] kmemdup_noprof+0x29/0x60 [ 1198.325374][T13650] platform_device_add_resources+0x37/0x100 [ 1198.327987][T13650] dwc2_pci_probe+0x1d3/0x360 [ 1198.330103][T13650] local_pci_probe+0xdd/0x1b0 [ 1198.332208][T13650] pci_call_probe+0x176/0x800 [ 1198.334304][T13650] pci_device_probe+0x1cd/0x370 [ 1198.336444][T13650] really_probe+0x241/0xa60 [ 1198.338455][T13650] __driver_probe_device+0x20e/0x450 [ 1198.340765][T13650] device_driver_attach+0xd1/0x220 [ 1198.342954][T13650] bind_store+0xf4/0x190 [ 1198.344809][T13650] drv_attr_store+0x74/0xb0 [ 1198.346817][T13650] sysfs_kf_write+0xf2/0x150 [ 1198.348873][T13650] kernfs_fop_write_iter+0x3e0/0x5f0 [ 1198.351195][T13650] vfs_write+0x6ac/0x1050 [ 1198.353096][T13650] ksys_write+0x12a/0x250 [ 1198.355003][T13650] __do_fast_syscall_32+0xe7/0x970 [ 1198.357238][T13650] do_fast_syscall_32+0x32/0x70 [ 1198.359415][T13650] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1198.362187][T13650] [ 1198.363230][T13650] Freed by task 13650: [ 1198.365013][T13650] kasan_save_stack+0x30/0x50 [ 1198.367101][T13650] kasan_save_track+0x14/0x30 [ 1198.369216][T13650] kasan_save_free_info+0x3b/0x70 [ 1198.371332][T13650] __kasan_slab_free+0x5f/0x80 [ 1198.373330][T13650] kfree+0x22b/0x6c0 [ 1198.374921][T13650] platform_device_release+0x8a/0xb0 [ 1198.377223][T13650] device_release+0xd2/0x270 [ 1198.379245][T13650] kobject_put+0x1f7/0x640 [ 1198.381199][T13650] put_device+0x1f/0x30 [ 1198.382991][T13650] platform_device_unregister+0x45/0x50 [ 1198.385332][T13650] dwc2_pci_remove+0x55/0xd0 [ 1198.387375][T13650] pci_device_remove+0xb2/0x1d0 [ 1198.389513][T13650] device_remove+0xcb/0x180 [ 1198.391519][T13650] device_release_driver_internal+0x44e/0x620 [ 1198.394176][T13650] pci_stop_bus_device+0x120/0x160 [ 1198.396390][T13650] pci_stop_and_remove_bus_device+0x58/0xa0 [ 1198.398973][T13650] pci_stop_and_remove_bus_device_locked+0x1a/0x20 [ 1198.401823][T13650] remove_store+0x123/0x140 [ 1198.403823][T13650] dev_attr_store+0x58/0x80 [ 1198.405820][T13650] sysfs_kf_write+0xf2/0x150 [ 1198.407882][T13650] kernfs_fop_write_iter+0x3e0/0x5f0 [ 1198.410212][T13650] vfs_write+0x6ac/0x1050 [ 1198.412093][T13650] ksys_write+0x12a/0x250 [ 1198.413879][T13650] __do_fast_syscall_32+0xe7/0x970 [ 1198.415993][T13650] do_fast_syscall_32+0x32/0x70 [ 1198.418049][T13650] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1198.420703][T13650] [ 1198.421773][T13650] The buggy address belongs to the object at ffff8880267ece00 [ 1198.421773][T13650] which belongs to the cache kmalloc-128 of size 128 [ 1198.427591][T13650] The buggy address is located 56 bytes inside of [ 1198.427591][T13650] freed 128-byte region [ffff8880267ece00, ffff8880267ece80) [ 1198.433395][T13650] [ 1198.434482][T13650] The buggy address belongs to the physical page: [ 1198.437172][T13650] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8880267ec700 pfn:0x267ec [ 1198.441114][T13650] flags: 0xfff00000000200(workingset|node=0|zone=1|lastcpupid=0x7ff) [ 1198.444263][T13650] page_type: f5(slab) [ 1198.445917][T13650] raw: 00fff00000000200 ffff88801bc42a00 ffffea0000a95c50 ffffea000090c250 [ 1198.449537][T13650] raw: ffff8880267ec700 000000080010000a 00000000f5000000 0000000000000000 [ 1198.453152][T13650] page dumped because: kasan: bad access detected [ 1198.455890][T13650] page_owner tracks the page as allocated [ 1198.458233][T13650] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x252800(GFP_NOWAIT|__GFP_NORETRY|__GFP_COMP|__GFP_THISNODE), pid 5738, tgid 5738 (syz-executor), ts 93129593999, free_ts 85694886317 [ 1198.465921][T13650] post_alloc_hook+0xfd/0x120 [ 1198.467826][T13650] get_page_from_freelist+0xf48/0x3530 [ 1198.470128][T13650] __alloc_frozen_pages_noprof+0x6ab/0x2dc0 [ 1198.472493][T13650] new_slab+0xa2/0x640 [ 1198.474128][T13650] ___slab_alloc+0x5d1/0x800 [ 1198.476030][T13650] __kmalloc_flags_noprof+0x473/0x8b0 [ 1198.478202][T13650] alloc_slab_obj_exts+0x5a/0x160 [ 1198.480224][T13650] __memcg_slab_post_alloc_hook+0x3d4/0x1160 [ 1198.482635][T13650] kmem_cache_alloc_noprof+0x587/0x6a0 [ 1198.484869][T13650] copy_process+0x2e05/0x8030 [ 1198.486809][T13650] kernel_clone+0x176/0x9d0 [ 1198.488650][T13650] __do_compat_sys_ia32_clone+0xd4/0x120 [ 1198.491005][T13650] __do_fast_syscall_32+0xe7/0x970 [ 1198.493144][T13650] do_fast_syscall_32+0x32/0x70 [ 1198.495116][T13650] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1198.497584][T13650] page last free pid 5885 tgid 5885 stack trace: [ 1198.500249][T13650] __free_frozen_pages+0x79f/0x1090 [ 1198.502337][T13650] kasan_depopulate_vmalloc_pte+0x5d/0x80 [ 1198.504683][T13650] __apply_to_page_range+0xb1d/0x1520 [ 1198.506948][T13650] __kasan_release_vmalloc+0xd7/0xe0 [ 1198.509208][T13650] purge_vmap_node+0x210/0xb40 [ 1198.511223][T13650] __purge_vmap_area_lazy+0x90a/0xc00 [ 1198.513400][T13650] drain_vmap_area_work+0x27/0x40 [ 1198.515516][T13650] process_one_work+0xa23/0x1940 [ 1198.517575][T13650] worker_thread+0x5ef/0xe50 [ 1198.519415][T13650] kthread+0x370/0x450 [ 1198.520921][T13650] ret_from_fork+0x72b/0xd50 [ 1198.522815][T13650] ret_from_fork_asm+0x1a/0x30 [ 1198.524829][T13650] [ 1198.525851][T13650] Memory state around the buggy address: [ 1198.528033][T13650] ffff8880267ecd00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1198.531321][T13650] ffff8880267ecd80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1198.534582][T13650] >ffff8880267ece00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1198.537707][T13650] ^ [ 1198.540186][T13650] ffff8880267ece80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1198.543517][T13650] ffff8880267ecf00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1198.546557][T13650] ================================================================== [ 1198.550907][T13650] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1198.554024][T13650] CPU: 2 UID: 0 PID: 13650 Comm: syz.8.8102 Tainted: G L syzkaller #0 PREEMPT(full) [ 1198.558556][T13650] Tainted: [L]=SOFTLOCKUP [ 1198.560414][T13650] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1198.564577][T13650] Call Trace: [ 1198.565893][T13650] [ 1198.567187][T13650] dump_stack_lvl+0x100/0x190 [ 1198.569229][T13650] vpanic+0x552/0x970 [ 1198.570966][T13650] ? __pfx_vpanic+0x10/0x10 [ 1198.572785][T13650] ? mark_held_locks+0x40/0x70 [ 1198.574834][T13650] ? irqentry_exit+0x24d/0xa00 [ 1198.576896][T13650] ? __release_resource+0x276/0x2c0 [ 1198.579059][T13650] panic+0xd1/0xe0 [ 1198.580552][T13650] ? __pfx_panic+0x10/0x10 [ 1198.582474][T13650] check_panic_on_warn.cold+0x19/0x34 [ 1198.584778][T13650] end_report.part.0+0x3a/0x90 [ 1198.586864][T13650] kasan_report.cold+0xe/0x18 [ 1198.588953][T13650] ? __release_resource+0x276/0x2c0 [ 1198.591198][T13650] __release_resource+0x276/0x2c0 [ 1198.593317][T13650] release_resource+0x26/0x40 [ 1198.595357][T13650] pci_remove_bus_device+0x2d3/0x3b0 [ 1198.597596][T13650] pci_stop_and_remove_bus_device_locked+0x1a/0x20 [ 1198.600337][T13650] remove_store+0x123/0x140 [ 1198.602316][T13650] ? __pfx_remove_store+0x10/0x10 [ 1198.604540][T13650] ? find_held_lock+0x2b/0x80 [ 1198.606512][T13650] ? sysfs_file_kobj+0xe4/0x290 [ 1198.608621][T13650] ? sysfs_file_kobj+0xe4/0x290 [ 1198.610718][T13650] ? __pfx_remove_store+0x10/0x10 [ 1198.612856][T13650] dev_attr_store+0x58/0x80 [ 1198.614848][T13650] ? __pfx_dev_attr_store+0x10/0x10 [ 1198.617078][T13650] sysfs_kf_write+0xf2/0x150 [ 1198.619111][T13650] kernfs_fop_write_iter+0x3e0/0x5f0 [ 1198.621337][T13650] ? __pfx_sysfs_kf_write+0x10/0x10 [ 1198.623233][T13650] vfs_write+0x6ac/0x1050 [ 1198.624816][T13650] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 1198.627227][T13650] ? __pfx_vfs_write+0x10/0x10 [ 1198.629295][T13650] ? find_held_lock+0x2b/0x80 [ 1198.631320][T13650] ksys_write+0x12a/0x250 [ 1198.633183][T13650] ? __pfx_ksys_write+0x10/0x10 [ 1198.635263][T13650] __do_fast_syscall_32+0xe7/0x970 [ 1198.637447][T13650] do_fast_syscall_32+0x32/0x70 [ 1198.639567][T13650] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1198.642266][T13650] RIP: 0023:0xf708efec [ 1198.643931][T13650] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 1198.651718][T13650] RSP: 002b:00000000f545c50c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 1198.655226][T13650] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 0000000080000140 [ 1198.658349][T13650] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 1198.661700][T13650] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1198.664967][T13650] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1198.668197][T13650] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1198.671526][T13650] [ 1198.673578][T13650] Kernel Offset: disabled [ 1198.675451][T13650] Rebooting in 86400 seconds.. VM DIAGNOSIS: 15:34:52 Registers: info registers vcpu 0 CPU#0 RAX=00000000d8c6d4f9 RBX=ffff88801d385648 RCX=0000000000000200 RDX=00000000d8c6d4f9 RSI=d8c6d4f9c155e39c RDI=00000000c155e39c RBP=ffff88801d384a80 RSP=ffffc900044a7088 R8 =0000000000000000 R9 =0000000000000001 R10=0000000000000000 R11=0000000000000000 R12=0000000000000007 R13=0000000000000001 R14=0000000000000000 R15=0000000000000001 RIP=ffffffff81e567bc RFL=00000807 [-O---PC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888096bf3000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f7452a78 CR3=0000000025249000 CR4=00352ef0 DR0=000000006000003f DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a000000000 0000000400000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=00000000030fdc77 RBX=ffff88801c742540 RCX=ffffffff8bb82335 RDX=0000000000000000 RSI=ffffffff8e1a2c97 RDI=ffffffff8c3fe580 RBP=ffffed10038e84a8 RSP=ffffc9000046fe00 R8 =0000000000000001 R9 =ffffed100566678d R10=ffff88802b333c6b R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=1ffff9200008dfc4 R15=dffffc0000000000 RIP=ffffffff8bb808ff RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888096cf3000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000080023000 CR3=00000000002ce000 CR4=00352ef0 DR0=000000006000003f DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000104080 Opmask01=000000000000003f Opmask02=00000000fffdffbf Opmask03=0000000000000000 Opmask04=00000000ffffffff Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 44455a494c414954 494e495f43455355 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005574c62bb320 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005574c62bad40 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f553c3f1b20 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00ff00ffff000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 49074c440a48495e 17532a5e444f5c4f ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5f050404051e6946 45585e444549051e ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 302e32303a30303a 303030302f30303a 303030306963702f 736563697665642f ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 540018534b4e494c 56454400184d4554 5359534255530018 4854415056454400 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 003832313a363131 632f302e313a313a 302d6273752d372e 6463685f796d0035 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005574c62ca6a0 00005574c62c9280 00005574c62db4f0 00005574c62c9510 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005574c62f8b50 00005574c62d8460 00005574c62d83e0 00005574c62c7fd0 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005574c62cb9c0 00005574c62dcc40 00005574c62cd040 00005574c62e00c0 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005574c62e0040 00005574c62d37d0 00005574c62cfb30 00005574c62cfab0 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7265747369676572 6e755f7665647465 6e2e65726f632e74 656e2e6c74637379 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000700 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=00000000000003f9 RCX=0000000000000000 RDX=00000000000003f9 RSI=ffffffff85a0f5c5 RDI=ffffffff9b9e3520 RBP=ffffffff9b9e34e0 RSP=ffffc9000441f510 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=3230383838666666 R12=0000000000000000 R13=0000000000000000 R14=ffffffff9b6e31e0 R15=0000000000000000 RIP=ffffffff85a0f5ef RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888096df3000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000000c460550 CR3=000000005beff000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fcfeffd0 Opmask01=0000000000004211 Opmask02=000000007ffeffff Opmask03=0000000000000000 Opmask04=00000000ffffffff Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 44455a494c414954 494e495f43455355 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005574c62bb320 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f553c3f1b20 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f553c3f1b20 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00ff00ffff000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 49074c440a48495e 17532a5e444f5c4f ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5f050404051e6946 45585e444549051e ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 656c696620732520 6465746165726300 0a73253a47000a73 253d73253a45000a ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 40494c4305560005 4140514440574600 0a56001f47000a56 001856001f45000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 003832313a363131 632f302e313a313a 302d6273752d372e 6463685f796d0035 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005574c62ca6a0 00005574c62c9280 00005574c62db4f0 00005574c62c9510 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005574c62f8b50 00005574c62d8460 00005574c62d83e0 00005574c62c7fd0 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005574c62cb9c0 00005574c62dcc40 00005574c62cd040 00005574c62e00c0 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005574c62e0040 00005574c62d37d0 00005574c62cfb30 00005574c62cfab0 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7265747369676572 6e755f7665647465 6e2e65726f632e74 656e2e6c74637379 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000700 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=000002d6b0a390ed RBX=ffff88802b523d80 RCX=00000000000006e0 RDX=00000000000002d6 RSI=ffffffff81f98f65 RDI=ffff88801c7fa540 RBP=00000116f3751d17 RSP=ffffc900005e8e90 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=1ffff920000bd1dc R13=0000000000000001 R14=0000000000000001 R15=ffff88802b523dc0 RIP=ffffffff81f98f78 RFL=00000003 [------C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888096ef3000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f728ea06 CR3=00000000783f9000 CR4=00352ef0 DR0=000000006000003f DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000