last executing test programs: 22m38.912062304s ago: executing program 3 (id=3337): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20024090) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x400}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x2, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000400000000000000080003851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608faffffff0000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x1e}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r3, 0x2000002, 0xd, 0x0, &(0x7f0000000200)="df33c9f7b9a600000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x4c) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000000)) socket$nl_route(0x10, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_procs(r5, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f0000000c40), 0x12) 22m34.436697634s ago: executing program 3 (id=3341): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x88, 0x30, 0x2, 0x0, 0x0, {}, [{0x74, 0x1, [@m_ct={0x44, 0x800, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000005c0), &(0x7f0000000600)=0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0xb}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) r4 = socket$packet(0x11, 0x2, 0x300) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="30000000100001000000ce6bb9092919507f3400", @ANYRES32=0x0, @ANYRES32=r0, @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) recvmmsg(r4, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0x39}, 0x0, 0x1, 0x0, 0x4}, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r6, 0x400452c8, &(0x7f0000000100)) 22m30.889835438s ago: executing program 3 (id=3346): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x50401, 0x1b) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) add_key(&(0x7f0000000000)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) io_uring_setup(0x2cee, &(0x7f0000000200)={0x0, 0x93b0, 0x3, 0x0, 0x315}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$VIDIOC_G_SELECTION(r0, 0xc040565e, &(0x7f00000000c0)={0x3, 0x102, 0x2, {0xdf, 0x81, 0x3, 0xc4ea}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r3}]}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000180)={0x40000000, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[], 0x80}}, 0x20000000) sendmsg$key(r5, 0x0, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', 0x0, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) socket(0x22, 0x2, 0x4) 22m26.863090335s ago: executing program 3 (id=3349): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000a0000004200"], 0x50) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000304000000000000000000007400", @ANYRES32], 0x44}, 0x1, 0x0, 0x0, 0x40800}, 0x0) r1 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, r1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f00000001c0)=0x0) sched_setattr(r4, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) symlink(0x0, &(0x7f0000000000)='./file0\x00') rename(&(0x7f0000000580)='./file0\x00', &(0x7f0000000780)='./file2\x00') add_key$user(&(0x7f0000000040), 0x0, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffb) ioctl$IOC_WATCH_QUEUE_SET_SIZE(0xffffffffffffffff, 0x5760, 0x14) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) rseq(&(0x7f0000000240)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x4, 0x0) io_setup(0x4, &(0x7f00000000c0)) ioctl$TIOCVHANGUP(r5, 0x5437, 0x0) ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f0000000080)={{&(0x7f0000a4d000/0x1000)=nil, 0x20a4d000}}) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000080), 0x1003, r0}, 0x38) 22m25.291735682s ago: executing program 3 (id=3352): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x22, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x9}, 0x80}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x2004001) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'rfc7539esp(ctr-camellia-aesni,rmd256)\x00'}, 0x58) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x27}, 0x74) sendmmsg(r2, &(0x7f0000006380)=[{{&(0x7f0000000440)=@can, 0x80, &(0x7f00000006c0)=[{0x0}, {&(0x7f0000000600)="4f41857543b69aa4b302ca95240f22fcea10ed1dce11b32278b2bbdcceac2e363f1610de20ff195d7706f38330703e5e906de351e7a385707eda679b6a45fd63942674168670f15f592f4248fc7474c865ff6a5bbada07b9321c2a26056471344938bf9a0b447971d01dbf1e1d33b027306f0b6ca5a114d2f333e53cd3892aebb79dc048f8d7e094720a9455c5", 0x8d}], 0x2, &(0x7f0000000700)}}, {{&(0x7f0000000740)=@tipc=@nameseq={0x1e, 0x1, 0x1, {0x0, 0x0, 0x3}}, 0x80, &(0x7f0000000a40)=[{0x0}, {&(0x7f00000008c0)="ad2513d82bf682a2a3335982c708907203bca25307475df265c63edaedbf2a0ee5f7d149fa4d28ba2fdeb1d4eac149183f01916f09065742e6797a9a16dbdc297d1012a94501490190aae93b18a2c17d9316d2d3f7841e2cee77b69d9e0e", 0x5e}, {&(0x7f0000000940)="987156ea90df4b9dcdd0b38f8ac30b85dd289a320386f3f84795ae7e27c3950d36c51834b80c89a38164f97e1a6639baffd4089c861f49ac94a2b878fd29a343adf1d4e827385ea9bd22f46696824ca19555d213bdac045efc1af096616e5f5ca2e064e595dbc3c43c418848adad39873b804b8656d65bb62b6a53ee5d3f4b604f0b3ea5bf8533e45d6c3c0d60bcb1658cd926f4104f2971485bd43f1bc40c3550aed62e2e71d0df0b6605490b889ddf38a0da67e12abe6a4da1318703c04792634339da8a2b15ea846b", 0xca}], 0x3, &(0x7f0000000a80)=[{0x40, 0x10a, 0x8001, "2fbebb9ed1bb25742c6a03855660e0a6fd045a3f0e4b3b9fab8d8033a1e4aba797dfaa548449cd440c9be876915603ed575290"}, {0xc, 0x118, 0xed1b}], 0x4c}}, {{&(0x7f0000002100)=@xdp={0x2c, 0xd, 0x0, 0x1a}, 0x80, 0x0, 0x0, &(0x7f0000002240)}}, {{&(0x7f0000003380)=@pppoe={0x18, 0x0, {0x2, @remote, 'veth1_to_team\x00'}}, 0x80, &(0x7f0000004600)=[{0x0}, {&(0x7f0000003500)}, {0x0}], 0x3, &(0x7f0000004640)=[{0x14, 0x103, 0x6, "5277cfbbea7190"}, {0xc, 0x11, 0xffff}], 0x20}}, {{&(0x7f00000046c0)=@l2tp={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4}, 0x80, &(0x7f00000047c0)=[{&(0x7f0000004740)="56ad222703ba8d0421e3562af7aaa8686f8a124d17f3ce81a2659951ea00b7c5b519fb3e42b1f5dcbf7a6380be96d95713d700ba6f52a091dcb0e7088b8e76d9c56bb2c1cfe275b0490bac9c37585a6223d49521e54893d89c25", 0x5a}], 0x1, &(0x7f0000004800)=[{0x34, 0x117, 0x101, "89f58c2a4e7f17090a36e4c0a3e0665089f9392beb449664ed08e80acdbc1a7a0487d05bc79533f4"}, {0xc, 0xc, 0x800}, {0xc, 0x10e, 0x8}, {0xbc, 0x1, 0xfffffff7, "233b4fb0803b1a9587de62a4a657dfe1247159cbde84ccd3aee46cbf500e5739a6474d9d8ebd8518b54877d89babbf11b6f72524361ebebb1de2bd05d95afefcd5a6cfd4b85fd4006dc9da8c99add678644e404d92f5be27a324bd7598134d8c34d4b742f3d96ea4d81358062369569ffacd42c1105b01de0e699cd833d2ce26a79d12468e1acfa0f871d445e812ad6cc6b2e741668da87055a3d24fc471b0986c271a2b1656a6a141dc9c5bf2d8"}, {0xc, 0x110, 0x142e}, {0xc, 0x115, 0x25a31bc0}, {0xc, 0xff, 0x5f92}], 0x12c}}], 0x5, 0x8000) 22m24.152107767s ago: executing program 3 (id=3356): r0 = socket$alg(0x26, 0x5, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0x4008af12, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000640), 0xfffffffc, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x20000, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, 0x0) ioctl$TUNATTACHFILTER(r3, 0x400454d1, &(0x7f00000000c0)={0x0, 0x0}) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r4 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000240)=r4) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x1, r4}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/67, 0x0, 0x4}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f00000000c0)={0x1, 0x1, &(0x7f0000000380)=""/231, &(0x7f00000006c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0x73, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_SET_VRING_ERR(r2, 0x4008af22, &(0x7f00000002c0)={0x1, r4}) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800000f}, 0x94) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x800) 22m22.584071537s ago: executing program 2 (id=3358): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000a0000004200000040"], 0x50) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x40800}, 0x0) r1 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, r1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f00000001c0)=0x0) sched_setattr(r4, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) symlink(0x0, &(0x7f0000000000)='./file0\x00') rename(&(0x7f0000000580)='./file0\x00', &(0x7f0000000780)='./file2\x00') add_key$user(&(0x7f0000000040), 0x0, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffb) ioctl$IOC_WATCH_QUEUE_SET_SIZE(0xffffffffffffffff, 0x5760, 0x14) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) rseq(&(0x7f0000000240)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x4, 0x0) io_setup(0x4, &(0x7f00000000c0)) ioctl$TIOCVHANGUP(r5, 0x5437, 0x0) ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f0000000080)={{&(0x7f0000a4d000/0x1000)=nil, 0x20a4d000}}) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000080), 0x1003, r0}, 0x38) 22m21.218891394s ago: executing program 2 (id=3360): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x139b41, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080), 0x101403, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f00000001c0)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = dup(0xffffffffffffffff) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r3, 0x4010ae68, &(0x7f0000000000)={0x8000000}) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0xa, 0x8, 0x0, 0x3}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000009, 0x15031, 0xffffffffffffffff, 0x0) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x360}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_CONTINUE(r4, 0xc020aa08, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x11}, 0x8f) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) ioctl$SOUND_MIXER_READ_VOLUME(r0, 0x81044d03, &(0x7f0000000000)) 22m20.116938191s ago: executing program 2 (id=3361): setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioperm(0xa, 0xb6a, 0xffff8000) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[], &(0x7f0000000180), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x200000000000000) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, 0x0, 0x24040084) r4 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r4, &(0x7f0000000440), 0x10) listen(r4, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) writev(r5, &(0x7f0000000080)=[{&(0x7f0000000640)="1e35616b0e3c332845a81268ca6996efc87069828e43b9d2d57d5d79da3457b5c008b19ece88f8c0be2d62179a01ffffff", 0x31}], 0x1) r6 = accept4$unix(r4, 0x0, 0x0, 0x0) recvmsg(r6, &(0x7f0000000280)={0x0, 0xffffffffffffff6b, &(0x7f0000000000)=[{&(0x7f0000000480)=""/52, 0x34}], 0x1, 0x0, 0xfffffffffffffc54}, 0x4c2103a0) bind$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x14) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @remote}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000200)='cubic', 0x5) 22m15.784751943s ago: executing program 0 (id=3370): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) pipe(&(0x7f00000000c0)) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r1, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0x400003}, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) rt_sigaction(0x8, &(0x7f0000000080)={&(0x7f0000000200)="2437460f1c2bc4a2f99c9022000000c4a2f1002746c44179700d32233333a738e7c44240f29a3b470000a5c4c4a14d590c9736fe0d094e486ff5f5bb559a00000f75bed5370b1c2665d2950e000000db37", 0x88000007, 0x0}, 0x0, 0x8, &(0x7f0000000300)) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='stat\x00') lseek(r2, 0x9, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) write$6lowpan_control(0xffffffffffffffff, &(0x7f0000000180)='connect aa:aa:aa:aa:aa:11 0', 0x1b) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000015c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x3c, 0x1e, 0xa, 0x105, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xc0}}, 0x0) r5 = inotify_init1(0x0) inotify_add_watch(r5, &(0x7f0000000180)='./control\x00', 0xa4000960) ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000000000)=0xffff0018) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x4004000}, 0x40080) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0xffe, 0x0, 0x0) 22m15.016777676s ago: executing program 2 (id=3364): socket$nl_xfrm(0x10, 0x3, 0x6) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000006c0), 0x48200, 0x0) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) readv(r2, &(0x7f0000000400)=[{&(0x7f0000000300)=""/202, 0xca}], 0x1) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_int(r3, 0x0, 0xd, &(0x7f0000000040)=0xfffffffc, 0x4) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{}, 0x0, 0x0}, 0x20) recvmmsg(r3, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001900)=@newtaction={0xeb8, 0x30, 0xb, 0x0, 0x0, {}, [{0xea4, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0xb}}]}, {0x4}, {0xc}, {0xc}}}, @m_pedit={0xe58, 0x2, 0x0, 0x0, {{0xa}, {0xe2c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x1}, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x9, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x0, 0x0, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0xfffffffc}, {}, {}, {}, {0x0, 0xdac}, {}, {}, {}, {0x0, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {0x400}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x1000000}, {}, {}, {0x0, 0x800, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0x400000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x1}, {0x0, 0x3}, {0x0, 0x0, 0x3}, {}, {}, {0x0, 0x0, 0x200}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {0x0, 0x1}]}}, @TCA_PEDIT_KEYS_EX={0x8, 0x5, 0x0, 0x1, [{0x4}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xeb8}}, 0x4000) readv(0xffffffffffffffff, 0x0, 0x0) r5 = fsopen(&(0x7f0000000040)='binder\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) close(r5) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x4, 0x0, 0x0) 22m13.596885067s ago: executing program 2 (id=3365): syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') socket$packet(0x11, 0x3, 0x300) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) read$FUSE(r0, 0x0, 0x0) syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @pix={0x434c, 0x8, 0x584e4f53, 0x4, 0xc, 0x7, 0x0, 0x40000005, 0x1, 0x4, 0x2, 0x7}}) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/arp\x00') preadv(r1, &(0x7f0000000040)=[{&(0x7f0000000200)=""/233, 0xe9}], 0x1, 0xfff, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r3, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = socket$inet_smc(0x2b, 0x1, 0x0) r6 = syz_io_uring_setup(0x10d, &(0x7f0000000540)={0x0, 0xd4bb, 0x0, 0xfffffffd}, &(0x7f0000000380)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0x10000, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x80800}) io_uring_enter(r6, 0x3517, 0xc2de, 0x9, 0x0, 0x0) 22m12.500762695s ago: executing program 0 (id=3367): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x164, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x4e21, 0x2, 0xa, 0x0, 0x0, 0x6c, 0x0, 0xee00}, {@in6=@private1, 0xfe, 0x32}, @in6=@ipv4={'\x00', '\xff\xff', @remote}, {0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x5, 0x543}, {0x7, 0x7fffffffffffffff}, {}, 0x70bd2c, 0x3500, 0x2, 0x4, 0x0, 0x50}, [@algo_aead={0x5b, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x78, 0x60, "210466d38547aa140db9a200000000"}}, @encap={0x1c, 0x4, {0x2, 0x4e24, 0x4e24, @in6=@dev={0xfe, 0x80, '\x00', 0x2e}}}]}, 0x164}, 0x1, 0x0, 0x0, 0x880}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$key(0xf, 0x3, 0x2) socket(0x10, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0xc0b}, 0x94) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800"], 0x48) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=@newsa={0x138, 0x10, 0x1, 0x8000000, 0x0, {{@in6=@local, @in6=@empty}, {@in6=@mcast1, 0x0, 0x2b}, @in=@local, {0x20000000000}, {}, {0x10, 0xd29}, 0x0, 0x0, 0xa, 0x1}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x138}}, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r2}, 0x4) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000002, 0x11, r2, 0x5a718000) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0xd, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800"/15], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYRES8=r1], 0x20}, 0x1, 0x0, 0x0, 0x40880}, 0x814) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), r7) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r8, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000000c0)={0x38, r9, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r10}}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7ffb}]}, 0x38}}, 0x20000000) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r6, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040090}, 0xc0) 22m11.638163615s ago: executing program 0 (id=3369): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') r1 = socket(0x2, 0x2, 0x1) socket$inet_mptcp(0x2, 0x1, 0x106) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2, 0x8f}, 0x0) r2 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socket$igmp6(0xa, 0x3, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, 0x0, 0x0) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff024}, {0x20, 0x0, 0x0, 0xff}, {0x6, 0x0, 0x0, 0x6}]}, 0x8) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f000801}, 0x0) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r1, 0x8983, &(0x7f0000000000)={0x1, 'vlan1\x00', {}, 0x5832}) write$binfmt_misc(r0, 0x0, 0x0) 22m9.466092028s ago: executing program 0 (id=3372): r0 = socket$inet_smc(0x2b, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRES64=r0], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x19, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socket$kcm(0x29, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) prctl$PR_SET_PTRACER(0x59616d61, r1) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8c, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f0000006180)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r4, &(0x7f0000004180)="92756f43b31ffe542788ef586b7c5a344424e3acac2590be6bbe37adface4a8f2e534ffe76a83a93f0b3680a72fddfde83f96d01982384e8d689219cb9669b14dbaa1b799f82ea1fc926126a4163618e16d4f94143a4e0f27c44fcef3920a0b3805ed4e78098d8689cc7791bd86648070718d238664332948d87866c8d2590fc0f017f9853abd9ed60b99f1aa6ae2dbd24ab6dbcebdb055246815ace147cc50fa3b2861148fcda374d5b203e51d72c45e4dde3e9ee9a47ffe458baf7bb49035135a8194aa1f0a83fa2abed56398f90daff679634619453f533f22583a6e0a4dc09e9de46684d5e0136e229510f3702cf3a4cd0065d3e5d3c419e38a80b070ca55010e082a9c510fd18cc0b26bb5e8e459e747befbc5c6b60ace80bf41417b7b78cf57e5b3984f0cdddc615c5e0000454d3f4a196fb6d18aa629cf0b0245f95ba958d86dc175616f8cd3ac473057dc3a5ff7107973326350107f4468e7ecd48d689b82c12d22ae5f1858302a1b4cfde8fd347a99ddcde40d1c49d9b5099fbccf09e782212be4b2ce36a2bc3c9ee794abffe72a5501e6c4f3f7f68b74761ffd6620609224a3bf11f655dadb5c8a5813b02fb46830e9ac6825f5d0e89910352eb3a58c0dd82d094f94dd2c85666f684a8f437bbd0e66b9f4d366117b67a054d212c4fbc287848cb0578391335d5d616b14d99a2e3df8e8a152d5de99bcefcaab5bb5cc71f3ddd66b379c104648e190e0b28a180d3aecc5423575d4ba7dbf31215c717da7b87dd454b6efcd36c91aaa631127f5bd88723d221752f102bc0c7ac6c5c7a1ad6747af40d01b6d39eab7b0e1292b44683c586386ad00acf60fb8f9bac551a6eb5bab7317b5d89f64db10bd9018dfa6d65d93862e851afbc30fd70fe5f0de322462045177231852ca80e4e78da4fea0c79ba354333026c8bc77d308a8d256a19ec45d2088c196691d3f9aac28ded36004a65ee1ce49ba9599ceee84534bb61d02d04a6732f1e27d72962f74b59f3522bf844c5022986d55934e48b8681b7f5b7532391448caeef00315d28320a46d8bd7813544e1e4bf994e14a519c2654ff20b42bdb69c262897e28eca528f0999840b00ed8256597d27cfc20d71d5f40d0bbca759f7594c6034aa1e16a84ed152fad0fdc1c303a7f61225712714f823afc5ea241d482d3585759623af8c97ca6a84a2033b3d7314ea0ef7ba9b288b362a294c92c8b9736829c16f61c5a1ee04aca965d71162292274595ea62c9c2918e8279c99f5d2830c617c58211fd7452330184b9428d5ec1d5cd75ddcc6de3326fdc70e891104b3b013c30ffccfaf3308d9671b01f6b080a930dac2052c6f39817a662121d90d40d6a1facfb50bec7d408030b6d0ae3e744f3bcc327c35dc43cf86b743db78ff2e593b19923235ed6467f299b08718fe1840c16a748935dff941150fb08b30573b37bf9af5c86cc8d9e229a832e4ef25ec91f71120f2b3e9062485976c280a2d172386029e2f2a4801197fca0a13514edacf5ddbac5a62e8bb13dd1572657a821a8739297f72e29239d1cdddf3e30cbe9af3141f2275ee4ae85d86ec888fe9a6751f252057e95b8beb055e276439581afee93cd44f1e92f70e5f725451d3ab662918ffbb1269509fbd511e95a00ec717f9d60d643864abd6ad1cc4dd7f933379a6078a86c2158db8076e7b660366fca7b1c46d09d2c8e67a6494bfb4c2c6750e76593895b5e2b2bc78093840c3c4a807826bc2750a96b4e1dd5b82b492bb2215518c92064d1763c37132604e52e73fac3f4511f791753aeecfbb19816e0da7a1bfbea9eeaa0f256eaedcb119a61f7d0ea0f5cd4969d45cb014800f2c888d5c2217cf0f69a7507779883b57352bb8883cc584891950d6e792537074f4fc4337aa19b9bf60e18edd939d289fb4a6b7aa6c66da20774e249ca4f779d3c910b1a9a8e4c38af6adecc87d5481d181fd66023ffff246f4e2556b218fe8110acebe20b1675f1de6f265b6d1d8514a53522396bf0e2f2b153c498e48b36d16f8b9bd56f45d7f5b9397d7f1339117a176d0bad0b68e800682416d3e18fe2197c7f8dc20600feb95cc6ba86ad47f113e159bd4389e30eab2874bd27eebc56020c4dab9973b13f3e82aa62a7e0a151d73de48cb811e32be63ffd303f5a6ea6f097ed763fbf36c430821e451146de79922348354ce285af0997bf3c66e6ef02942e24b8f1ccdd542f09cfe65c0da0094c0b5fd26bbc061538b41e5ed2cbb390ee29b10a4b7a696009e1b5b86c44c0a561a257c15415feaeb1433ea275ed6e4b228503fe71ee5942665164faaed6697112206be0fe7863aebd4bbe951d5dea1da294dba0793196385f4d5141c9d6c4b0fa22b2e200cfb70b52aca31655e71e5a576ccb8ccb5b1364748aa981edbb81a813b1aebc67be1f7619e7e197622d981280429f6ca5145c5b3b05e6bace9191e5c58fbf140f71f594cbfd4db0e9f6923f1758ff9464a61a720a5d4f09c622c3ce3f5d0d3a1d191111168108f41f12b16e9eaf3617c353715cd35260560cbfd0555d51ce5c40bbdb7c95ceaeadadb8902974de50b0863348183864f5ea682e678286a06a6f396af29a7c7fb33a3579e25835963612f3c0d4cf369d85959a0adeda94d35824050e6fba7f83f90867583f713d7783323c7010e94c9be331f860db395dbde6face5bfdb616fcefa9c6b01f6963daa840a31ff554a458c0c50cb5e09f91f54f63234589decaf45bbfbaef0dcbff4ae6e65ca26a530261c491ef8eb9a855a1d7463391c9b66be96cf24c3c321ee5a5bdc857f60b582683c6ae1e3775b62a9f19ff8fa51380ca8a2a3c6de79012f5727ba12025e7e6723a23a81e067ca6e54c7b38ff64880d235d21e7ee5258953dcbf9e2a962f006ca4ffe870859242c850cbae4222b3b72c4f86934379ba2ead1dcde906241b994d95c88355af5a9a30ace9c933a6942f341ad221dd825846a8fd44c03e2eaa9311c26e15a1bd7cbba961a22ef23d7ebba0e34cec5ef09b1ce72814a97e33bd29f3d9ec80a4f45d1d29486accf15c11f1a800bd84918e7626f678275d7c7acb02cc0e6e34bb766ba6b75c3ad14fca9352e09c3b69390c045cfc842ff9ade8ca693c07fadc7047a946e6e570c3afc5b501c964103397f5ddadc2d59a048348dd42f07cfe31bc9b5ae453f5086bb41bba4c8a3e518e30b0855184b053f923025dd72ce1bcbf41231978b34a8547c71d7313992165078903c61d312b0d9469413c9fd97ccdf0ea270fb6c47ec8861a1c8d909eeace761b5a06ba46e25785ff87f867777abb237c6c980687991f1ed0157d58492260c712cec34c1fc0962103955db4d5090b6e8409cf3c3c79d0e691cf4fbc0b2251a016dcd456969cd32e5429533bf0d6f8bda84c05f0e2040de8b53bfb8676eec4b76c3df6f46b1e43732035dda577e75f640777f6ae90fd2f1af42ba462dac732019c599bfef01acd6a0d4d1796bcb8f58519d6f9ad9a3206704a94d472516b988141f44ecd2e6f28a49aa0c449db87972fc995a97379914546ea43143ea2cf779a9cbe81f111fe89129db3610492164ab2598eca7e60d9a6963d8ba03a86729db86e420fd96d61b8fb11edc2b339b57a740074ae5b775eaf60cd85dc934e604bf2b4bd58ee01205b4df57ac20ff8db45a05982b579643882407050c005102a2e71f1e56dc76dbf5331112e83e48bfb5cf2a78a893190d78426175c162ffaa7278a43b9932318fc17fb8cb0dfac610b1ad235b91f9cb7623b155117e07f7b876a3c37627aa31eafed141cc0c5491c4f621a66b6d837a144d78719c46511c04a093cf65fce9fabe5bd6d499eceb63538ece3cf19053550a239bf978c08c879f9954485a4e3e0d5bedb84b407ced85c4dfc4d75af116815992c29f0bc927c4a990c38ae4fcc9feb90fec1b1b555e04d010423010855394d5ccfc8ed21164190cd8f83be5debb70290c3547f07e4dc42814f1e001798e6ceee2558b0c6ff8c1759f90269ee226131116332b99ac8dd104c92088e1f91ace3198c0f59bfb75c4e4a697660eed43a29c831a552de37fce6dce96fa51b6e2111f3071a4e94422d15e102e5f67da7ca6cae6bed7743ebffacb8a811a143605791d17232181a517e872f71262c3c73668f0ef83aad498f67fa26bae698cf78f24c2dbecd399a190e6b8d0684e929f2e8083765eb2c67793a1adbb89d36b58bfb197cdc5f3c894ac9d886e8f3b0936fabd233c09de8fab8099f72a74d908ba5c5e4d39790b0bf9e45b710f5587b7c937c76690c5c5fce621a53a9fd03b0a4ee6d8d1abbe2ed561820a77f12a08cad0755540ab6dd1604b7c30a8652995ab80b85e919011de9438a4637eb0291124ed4b745e782cff98510cb03be79c2a81351abf276584d75cdd96b9c97e73eb71000b3ab7c3c19c2cab4497298fcb3052b5d4503d05e7f310318be6f848547b1a4f4db82caee190801478be28065036aa4d91f290c1f396343e73a5fe8bb5ccf0a317177ed1f77acda1a4a49dccfcab8d1b5d79f015f788b6d5e9f8228a8bcdc0696e6b19f5edffbcd7e9509c87fbe1f726b93bf8c6d8d37428763e142560c46c9e894f7317859000c25abc4f3691ebcd020171e0d4911b5d97a238109aedeb00b2eb475c1e7b45175f8aa85193b5c0f43b434c15de01610c4d022646cd6e3637f349a434a77f571ac1c5d698452d1b991e267f78dca5e592ecd31ccafcad84e4e98d134b4adc525b81bd6843428883023a6ea407201738c8bf16b541ff7280274a34d4cf14819f2dbae167ca0cae8471c495e006b45194ad91c4516f21cbb10e0d26fd5d734cd7725df5b3fbe92955f4a9bb3b9b813aeeff79d6ed5db92def19d060a208c3ec8c42c110786f1e1496c50a7249b03fc792764366894a35320b99d0bef9fd0b6a246c36a357c6b985dc83a37a8d9b8b9ad643dea94860cbe763bb73cc8422b69d4d12332242c8954075fb7117a6679638073617abcdb4619855b2036af160647f66b3531645a3bf047ae290d6ae2249f114e7a8464278bae1486022bcc7c37390c8d9a0efb0e1cfa0da8ef7a5e072f99a47ecc75e4e442880375193db49bb82ba34901286ca473ed5b63e4048db4dc455e74b3fdd2e7898ca3f4c3a02d435cde6141eea645055123a7dcf0d22057f8d425701afc55859f5147954e719d58c7486b1e02ac16cb799b77632c66bb78e6e52e11017c1736424fa4d433f1e19b4c881d23f0b2a12d5fae3ae24339088088d9b496ad97bd9f6e20a8597d1452a0c72dcf43dbbda8f18166585c06d21fbffe5fe7b55f71c9b9f1b34a02bd05ca63c7c1b1bebbb9dd24fb10291b04c665d45154dd28b85d821ce7e613119128996785e1006a8dabc4899b10d2671107d5a0658ed363b9d4b39d02f8cc5e350fbf0a31048adecd1f9e2ca749bd86f195eb48e9b4605f050de03d642940d79184618f7f88a9a0a4683ad84d6134e395305bc1d4d9d17cc334b97653529d6682a87a5fac80a6d46d6e72fc22e58be7b8f8617b3372ef2622110ab1ec448717118b257acffe55d18c7855e9e8710ad977a6792b2315a189eb4468c68641e9b60c0dab7016ac1ad63cd8004b6eca8fc88b1e4263acc00499255c16b11487a0af858075f9c892dc8044c4146e5a5677c4a2cb24bde5e078985020d4ab1e4c87492e76b7e6f4bbd71d84bab1885c9702849e70cf728776b1a94c2a8fb8c7ca01b6111ef6f2032a290949bfe473fe215273b8b5b3ad540f187490f63077dccbca6f62f0a7a66717c596cdef412f2560b10685ede967b3ee68b8c951959aeb1d7564c3b9d806b2ce858381393a79916b78f7e90beadae30ffc0b2b614380f1c2cc551a44565209db3516be379ef566ab00c673fd8aaeeecdcf1168c1960e9a477b9e13757498a44ff089351d1f27abf9fd76816f924504647d1247715ca861ebe624172c322146d66eb2b247f8ecb3e1b5ddca89b287c57510cec40fcf89d802cf4368a861af320e01e34f7a6177d4bc549181b5e87ecdfe02f78c9a59a3bf91ebb6364023ec06410e7b4476ec4e3685bfa3bfe9ef9ecc12dcd899abe0f3c7f16b4686801c0c0a949aa26bed57df56f2bc54ef19af7fcbc7b0d691075f42a4a67acf980b568acb2342f42249f7c1ee3527c13182b096064ecd250887a942d26f637e1c4041b139659d2462a68680bb04387a3b399e396b9fe74de10356125fa47d0a20827370cbf36a79b6fffade91c439dd6cfff4bbe0dd3efefb61c491ee32f935d62307cba369ac8c20f6fe3d4857ce6d240ece5e4d149f0587155a8350fcc18efae2ff11cdbe15218a82499a1996df8b5462ee170b284321e76bbe5c3f4158387644d95f087c598e3d46fbe27f63fa784bda239512113424045a2c5dbc6bc3662ca730a86d13cf8f6fe2743224ca7b535caf6b4701a7dae9cfad3d7290104bbba15b6a064ae6e909a099f75fbe47c9e654d8e3b8dc0f3dbffe829e6c56f7a241e565136812a857f59ab565a9991c6b1d8abcc94c6b33bba314f6e5060e657e4647f969a551dd6c51dfca0ff5d9e4f401fedbc2c927eb1ed95ef25f4e5accba4999322ba1539499310dd5875433a22835cfd42fd77fd4680b7fe767d7aa5c33acde04a65bd3a663fcde4c80e9f2af498f13bf9abbaa1c1265edc691e94abdcc92270c05811cd2a8104eb18efbfec9e4ba9ae5cde211b9b93082ce034b6cd5fbe9cfbac4f7e2404ef159766124f73017cc3600f3c81cd78db25fc3459629eaf20dfdb062c7e502aa69412381d847a9d254d5befc451cda3606f0bc8ae62e0aee928f9ed0b21d705a8d31b899e16445ee064563d32f7b6bb5ad197023cf528d9b329ec67815c6ddf27d2a6ffa7328bb993407cde3d166159fd49fe469254b84c2916daea8df9d69bef019f1351b9bce193e30278835b82ea5f60dc0bdd7f7452b7a820ae7cd6dc29d7ac6a6c1b6411711a96338b1e769146b2a385d282bfaae61b041166efafab2d89a4567b9460cc22d752f8e9aacaaa0db7c84879f5359662d55df6570d4214740851c74574ced733807cbb54571110410892394c3dea07bd4154d0e5689d57c3360207dac951f96a358e9c466a5c5113f3a632e184f57f075edef4dcc9721b963beb95df09dedf848260cbc1ebfdc7408218eaba6d2c51928cd37c4c0c9f321fbb0994a56947cfd9643056db5dbea60a241f8f004c932bc8e645b2ec2eb9bc4e9e2f4156293234d05e70cb26b8a370b0206c756bda6defc11c5eb386640f535a4ffb714168defc6d82f40d8f5ba8768537ead5773c53bd779ca899a2dd31c9138569ff5107c2fb12b804375c3b3dc9b828bfd550328adf358f71e86a0c49fb119f5ef9e06c13855cbfc7d1a62ca2ea655ed912a6dc7bb8b18656e8923fc7a1702ab36947d79384d681c31923e98cf40209f776bc2b219a7ccd139e756a905aa351e6eaae90770c8a193f96cd5c66e4d77a357985556e14333716d80204a5c390e0d76f4081afe917f99ad8a0976b3342f51854b374b4baa9a7f22124d2b82749446e30d9795acb9c3c3a305a6d273ac528e8e9c95c37a78e765fdda55982c2961fbc85a14fc095a78b4654ee6dfc3298749a639ab9c8e155af3a77f8a409ce174532a492ef550a140f774d77d732b3b4ca5bc41fa4488ce5957ce219b032ae1f585273748d81b19edcf3e6cb9a93ec24e41c6b3c472f9baf3ca46cb8b9a91df18acebe7d83bd4473750c4f26806da2f95b9ea48b342460af729ab15e9f033eda67feec645f985d4b9489cf6ceec1b100d007bf46c74be53c7ea17296f9c5b5cbae736491213c93b513009ebdecfcd60d46d7b86c6e3b5e288f2ba5867c07936e7bd1b00de52191eb8630ff82ccafb27a59295164751811bf74eff1e5e2abdf3c93bc5dc9814be83b2562477935e2fa30db7ebb6ec380170cf10c1f98f8c5eb71c730c2b31b55a1dd1c12a64802ab95b63c529e0a96cec8f38680221d6089926d8309796c79994d63b67bfb62f66b4a502f30ed12be41e896e88bc45a160a526fbd5f002e677322f116ec5740d7563cd23ee853c008b84998e38fdf158556e28a532573956e7c00f91f08ca245c295a3d5e003a99ea727f61d12893b435d4c8f2f5cce00c6a3091e2a47f290c07168975c53d7529b71d10faf42d2bac9db8d53669cf59c709c25e9e40b5feaed4c37dde8b84c4961c00712326fb6aaa06e80d766b40b72480f3971def61d1d129676df2478e778d899ed317426ec33e496d1fdd2ec27128f8faee92828e13da72d6aee8330a7988ea1cc8b64ec4d8b20990864c16c52c4be6d00b304b87d97bffdd9c66a740b517223089d9f3f414abedc53c768dab9220b980e6c18d5f20ba8994cc8886d7bdee213442f456d79fce1b1eb48fbf600a666c8ade24d118e6328251cf7b57a6285c650e019850f392b1c29aec5c8fc489a3819d60d5de377d4c11b8ee5625b7c02c5d50d2af3397006f2e2a41a06f039229eef5878ed91f9f6be7e988924dbaeb8455f616275e8698d93fb536e2c839b203aa69bceceddbf9c53f8addba53d50ca0f7a4729a42ac6eb757f1b408ad4a0147546173e62f7621eb18a9e1681510cceb48e0a30ab7a1bf71d56742d5f034f2d725e7ea68a011dbb100fa6eefe4ee093873de366d34f4240ca027a25c5b979c9ac47dd1dcb6ed82c4aee09dcc23cf329a8644f89b5cf00e5683934b1837574e9b39b31b1009f276e15aa040959fdf100838ca3f5ab17e45036668d06044e3a13f3a0a6f68579e50d5b0164f900d7bcfcde78396cf30f0b1dff76dc397ab1a5a44b207eb1eaaf73b945c575029ae2dce20724991e6550155ded6a42672609f2439c5aab4882b2ffaf7da787b71d05d15516bd68c6f1a9d79b675395845f24ee853f877e72c14b6c6702f7b8775ca1bfabbbcf4019f7bccf07f1c211531dfc66a7a1df79e92a20dd1cbe1b22e1209e7e3ecb9d3c2450fc22a57bfe09bd735f61c361cdac2488ae0adc7885edc0712655daaf535e1de96ccbe7869d531d8bf3db512fbd17c772332a3f8cf1e052ee0202eb99a36a0f8d7219888acbb57090cdaf3b28e1e62e8fc2ec237bdf18592a7afe4d8390dcb5e7fcc31bf4f797e6f5710070902265cc2e8c459b7da1451046abd6c8c5b02c0be2d2f505a65376266563ac7b59ef3b4e2570a6cb0bd94d46ad861317c743ce1de12bfa2295a98cdded4414d87a1580b1e4675bbdf73a22cac4a1d8d456d089e0b60cbfd16158f073bd1dac481db49fa5d8801d0fb0844b4afec1bab4e61fa0f381fa667880a1cd8163953be7b591cc9dfd7f91902370b783ae8a0f3c7cbefa7d229a37c00f523529e159b11d2e240629b64af2d11404773e991207a722c320221ce23baed7cbe40a440c5680814b122cfba9092fe03478f85adcbdeacb76d6cbf2491eafae98327b278e267821a0e1cd06ef90cb0328e246c19d8c63b9332291a89bc9f989effc675c79a870ac024756c6f5a7e32babd69625d61487ae7399490b70dd0fade7d70ad9b0757300a2dde77abaff4f63a0303853589d44efa968e10d36561f04408ad0cc227fc6b2f904cead189a0fcca9b2e6cbde5498652e0b3bc9d8b7921474403718feb5cc750dc70f5a9b1a0ae2c642015b6a1a8ab0572182b4e39e0c869cbdc60c9465f5d564d18ba2f5b3bc3e05a458744077430c5ea031ee02dd8f0a65d7dd8d90dd9b8717f77d202239a5778719423fb2aec7ca86eb07c39de65a34b988d65377a7473e9145f16d79593e96903330bbf3a8024fc15519d9baa0fae2018786f4b1846fca355ff0fccf65cccad1896309a5ccf2056dd542c929850cc91cd655962360fe316557ab3fb378328f77a07d9da24447d3fa2020b382ed2e808ec9529a01273434c64b0b7c35a06a019e4ab51cdc9c0f266ab25b6984338a0ba910d1060283b636c5d7e8a3f969c1ee1c99b54bba7ff3679fbeecbb70349f076480a867cc4ee4cacaea39c80f642533599486d2ffb77b8c9109a9d25fa0b06e58eca764f7d56469eb9547036bbea9d5c3d35b4c1fbc3d39a372c2b7ad184965cad3819c8928f1588d00949949c0c4c93d30ac7f6665247c0108bd89dff3aafe780ac66febfacc8c6a3cc387d09da6de700487a80e2c8d56df94d7ebd3e1d9e06411a6c5f7eb6da41c6f52997b5ad47ba985261103fdf12eb4a2828b248f652ef00b6abccab2eb161b878b9dbc0aa911405b6f67adda83c16187748d7b524ffe6381f489f432d592e6171bd9ccb2cd52f977143f57fbf2ab0b823d449ae55f02440972334344cda01837b93afa4f46a2fdefe27e92764cf9596780846de2e3b1ea83e62ee43b1c05aee675e25363504addfaa68e7c53ed685413f5ba951f120d0a646e474872c81e5a887464c19f8460ae814ffff24cb51dd2dca28d597ab2ea60949f8dbbe67f263e722fdb51bce4e328a19f5ff1218e1f63b8da6d40dbd5490964499b2522ea323310634893ead661407966207a66ab13adfcf1a725ed14339c46011c0e0401f2386b47cd9f902fdf84bc85e74d3ae7cc544e4d65670a554a537712c6ee9f75191631d2a4c4da06fc38423b1d5b828d7201235b2974164f52aa16bee70ee509250752f4fdd6b9f8d021943df8320682a6f80ff0d67ab7a4ceea807bd5b3b7b6380b0c7f0caa67b0208ba71317f0355a3b755af0e2c007186389438615df80b7b25104a733fc90625b62682198733c0f1625dfaa08cf81e3df043094b7b5a098b3b36f803b5b0f10a057bf814ae3579932c0a5f208985bab3d817f975283b8838ae5cb709be72b58df7425e059fdbf4e0ee51b3da01fe0b44963c1196baee5ec5909ad80d9d1660f3edd90374952a0bf8b3bece2c2f944593f4de7de5e05ded096b8f4f05d65dfc2e806f78220d84b3db564fb12f4e5e8f5eab316591f004e9374cce8e787263bc3827affe6793c130b8621d3bbb2a86fd87f070ea21718281ee7aec4bb3bb71af4bf5721cecd139c4be8c9df4ec8dfb09a5cf1d86a25d39faa9f064a997c214f334e4410917fc3b4d67ada8d87a38c0f86b02bf653dddaeb5b75b300f8bcfd792858bef8ab23e063421939c59212964c9ed5dd56e215db58cef53d31a966bb8ce4ed56287fecb3a85ba435e0b41b20ba1164b9c9f2c49fa0f7b17a89e0ec47eefe992d63ee29c8c0a1ece2664fee8edadd43636a54c48519b4fcf55b0d9103602b92441a5f85cf8c5e406d0f5815f8f37309934bd78fbc2acf0a03b051b4528db4f7c09de7d0aabafca3736b8259c818ca338ca6754e0747717c2794d664a1cacc1e9c52764a308e6df73d975638630b74cce6c49b1bac16454e96852c4f9d8ed118e86d2f1c8dc33bccd4a07be128db5e80f5684ddcc1158e744411acde590f902f0987cfb750bb5bfeed53bff076868986b566d7701f48ddfcacbd325c8d930bcef26713bf60585d5c991e2a6cc33ccbc27f7ddfba18f998497c2eb378cc8f2cc07a1b4f141c5e0fb6f52e18242e505bcf6dd20e33a469d056a0b4fd5e72d0da9d0bcce1e2f9e9dc7d1c7b6cb0f3604287eca", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x1, {0x6, 0x2, 0xffffffffffffeffe, 0xfffffffffffffffd, 0x0, 0x0, {0x40, 0x8, 0xb, 0xffff, 0x0, 0x1, 0x0, 0x0, 0x120, 0x2000, 0x0, r6, r7, 0x501, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0d000003005a"], 0x50) write$FUSE_INIT(r4, &(0x7f0000000440)={0x50, 0x0, r5, {0x7, 0x29, 0x0, 0x1004cc80, 0x40, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}}, 0x50) r8 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x300000d, 0x1) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r8, 0x40104d14, &(0x7f0000000040)={'syztnl1\x00', 0x0}) 22m9.038159206s ago: executing program 32 (id=3356): r0 = socket$alg(0x26, 0x5, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0x4008af12, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000640), 0xfffffffc, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x20000, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, 0x0) ioctl$TUNATTACHFILTER(r3, 0x400454d1, &(0x7f00000000c0)={0x0, 0x0}) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r4 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000240)=r4) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x1, r4}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/67, 0x0, 0x4}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f00000000c0)={0x1, 0x1, &(0x7f0000000380)=""/231, &(0x7f00000006c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0x73, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_SET_VRING_ERR(r2, 0x4008af22, &(0x7f00000002c0)={0x1, r4}) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800000f}, 0x94) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x800) 22m3.947342247s ago: executing program 0 (id=3374): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x60, 0x30, 0x2, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x0, 0xffffffff}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000005c0), &(0x7f0000000600)=0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0xb}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) r4 = socket$packet(0x11, 0x2, 0x300) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="30000000100001000000ce6bb9092919507f3400", @ANYRES32=0x0, @ANYRES32=r0, @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) recvmmsg(r4, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0x39}, 0x0, 0x1, 0x0, 0x4}, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r6, 0x400452c8, &(0x7f0000000100)) 21m58.968759049s ago: executing program 2 (id=3377): ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @vbi={0x6, 0x2, 0xc7a, 0x38414762, [0x3, 0x7], [0x2, 0x6], 0x2}}) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYRES64], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x0) read$msr(r0, &(0x7f0000019540)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xe160, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) writev(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) syz_open_dev$usbfs(&(0x7f0000000480), 0xd, 0x141341) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x40) pwrite64(r1, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) socket(0x10, 0x80002, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, 0x0, 0x5a) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600), 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$binfmt_aout(r2, &(0x7f0000000340)=ANY=[], 0xff2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, 0xffffffffffffffff, 0x0, 0x8}, 0x18) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip_tables_matches\x00') pread64(r3, &(0x7f0000000040)=""/9, 0x9, 0x100) ioctl$TCXONC(r2, 0x540a, 0x2) 21m58.83203432s ago: executing program 0 (id=3378): syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') socket$packet(0x11, 0x3, 0x300) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) read$FUSE(r0, 0x0, 0x0) syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/arp\x00') preadv(r1, &(0x7f0000000040)=[{&(0x7f0000000200)=""/233, 0xe9}], 0x1, 0xfff, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r3, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = socket$inet_smc(0x2b, 0x1, 0x0) r6 = syz_io_uring_setup(0x10d, &(0x7f0000000540)={0x0, 0xd4bb, 0x0, 0xfffffffd}, &(0x7f0000000380)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0x10000, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x80800}) io_uring_enter(r6, 0x3517, 0xc2de, 0x9, 0x0, 0x0) 21m43.477039969s ago: executing program 33 (id=3378): syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') socket$packet(0x11, 0x3, 0x300) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) read$FUSE(r0, 0x0, 0x0) syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/arp\x00') preadv(r1, &(0x7f0000000040)=[{&(0x7f0000000200)=""/233, 0xe9}], 0x1, 0xfff, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r3, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = socket$inet_smc(0x2b, 0x1, 0x0) r6 = syz_io_uring_setup(0x10d, &(0x7f0000000540)={0x0, 0xd4bb, 0x0, 0xfffffffd}, &(0x7f0000000380)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0x10000, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x80800}) io_uring_enter(r6, 0x3517, 0xc2de, 0x9, 0x0, 0x0) 21m43.368678591s ago: executing program 34 (id=3377): ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @vbi={0x6, 0x2, 0xc7a, 0x38414762, [0x3, 0x7], [0x2, 0x6], 0x2}}) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYRES64], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x0) read$msr(r0, &(0x7f0000019540)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xe160, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) writev(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) syz_open_dev$usbfs(&(0x7f0000000480), 0xd, 0x141341) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x40) pwrite64(r1, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) socket(0x10, 0x80002, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, 0x0, 0x5a) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600), 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$binfmt_aout(r2, &(0x7f0000000340)=ANY=[], 0xff2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, 0xffffffffffffffff, 0x0, 0x8}, 0x18) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip_tables_matches\x00') pread64(r3, &(0x7f0000000040)=""/9, 0x9, 0x100) ioctl$TCXONC(r2, 0x540a, 0x2) 8.825162543s ago: executing program 5 (id=6670): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) syz_open_dev$tty20(0xc, 0x4, 0x1) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) read$FUSE(r4, &(0x7f00000021c0)={0x2020}, 0x2020) r5 = memfd_create(&(0x7f0000000280)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\x86\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) gettid() timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @thr={&(0x7f0000000600)="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", &(0x7f00000003c0)="4dd1e07351c832d455d3411f2019e119d65b66ea3e3a280c5fea8f2b4b5c8431b80558b3bb5ad386b66bc9bae8c1c30f13f229a4e126f9e5d7730ee338266cf53f57fd9b697086b426f48b"}}, &(0x7f0000000280)) timer_settime(0x0, 0x1, &(0x7f0000000000)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r3, &(0x7f0000000040)=0x1c8, 0x12) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) sendto$inet6(r4, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) iopl(0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r6, 0xfffff000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x4c) 5.45963575s ago: executing program 6 (id=6681): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$rxrpc(0x21, 0x2, 0xa) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r5, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r6 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r6, 0x400448c8, &(0x7f0000000340)={r5, r5, 0x8, 0x0, 0x0, 0x9, 0x1, 0xc45, 0x1012, 0xc7, 0x2, 0x7, 'syz0\x00'}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000180)={@private2, 0x800, 0x0, 0x2, 0x1}, 0x20) r7 = socket$nl_route(0x10, 0x3, 0x0) get_mempolicy(0x0, 0x0, 0x73e, &(0x7f0000419000/0x8000)=nil, 0x3) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'veth1_vlan\x00', 0x0}) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x48, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x38, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x14, 0x5, 0x0, 0x1, @meta={{0x9}, @val={0x4}}}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x94}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getchain={0x24, 0x11, 0x839, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r9, {0x1, 0x6}, {0xd}, {0x11, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x84}, 0x0) 4.334103133s ago: executing program 5 (id=6684): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) syz_open_dev$tty20(0xc, 0x4, 0x1) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) read$FUSE(r4, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) r6 = memfd_create(&(0x7f0000000280)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\x86\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002080)=@newtfilter={0x4c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xb, 0xfff3}, {}, {0x7, 0xffff}}, [@filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x25cb}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_MASK={0x8, 0x6, 0x419}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20041090}, 0xd0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000180)=@gcm_256={{0x303}, "c4915c7f49541ce8", "9b84f987950ff3df25fa8f46983d34157e047d27ae4a66a6d15608a32cbaa5bc", '\x00', "be0ea450d5a5fd03"}, 0x38) recvmmsg(r0, &(0x7f0000000b80)=[{{0x0, 0x0, 0x0}, 0xb00}, {{0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000940)=""/99, 0x63}], 0x1}, 0xd6}], 0x2, 0x10020, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r5 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r5, 0xc1105517, &(0x7f0000000140)={{0xbffffffd, 0x0, 0x7fffffff, 0x55614638, 'syz1\x00', 0x20}, 0x2, 0x100, 0x409, 0x0, 0x0, 0x4ff, 'syz0\x00', 0x0}) creat(&(0x7f0000000040)='./file0\x00', 0x4b) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB='Ux\x00'/19, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r6}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='fdinfo/3\x00') read$eventfd(r7, &(0x7f0000000080), 0x8) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r8}, 0x2c, {'rootmode', 0x3d, 0x8000}}) listxattr(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x2c, r9, 0x801, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x18, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008000}, 0x8000) 2.952748631s ago: executing program 1 (id=6692): socket$l2tp6(0xa, 0x2, 0x73) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x7, 0x10, 0x0, 0x0, 0xb47, 0x9, 0x8, 0xffffeffc, 0x3}, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) mknod$loop(0x0, 0x0, 0x1) r3 = socket(0x8000000010, 0x2, 0x0) write(r3, &(0x7f00000002c0)="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", 0xfc) r4 = syz_open_procfs$pagemap(0x0, 0x0) ioctl$PAGEMAP_SCAN(r4, 0xc0606610, 0x0) r5 = socket(0x840000000002, 0x3, 0x100) connect$inet(r5, 0x0, 0x0) sendmmsg$inet(r5, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r6, 0x8955, &(0x7f0000000180)={{0x2, 0x4e23, @empty}, {0x20000010304, @local}, 0x4, {0x2, 0x4e20, @rand_addr=0x64010102}}) shutdown(0xffffffffffffffff, 0x1) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000481000/0x1000)=nil) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x8000, 0x0, 0x0, 0x2) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x2000c450) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) 2.803176416s ago: executing program 6 (id=6693): fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000000580), 0x100007, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc044560f, &(0x7f0000000380)=@mmap={0x0, 0x1, 0x4, 0x2, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "37bb54f0"}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x3, &(0x7f0000000540)=ANY=[], &(0x7f0000000280)='GPL\x00', 0xa, 0xb9, &(0x7f0000000140)=""/185, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x18, 0x0, 0x0) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2002) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(0xffffffffffffffff, &(0x7f00000004c0)={0x2, 0x4e24, @multicast2}, 0x10) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00002e6a9f0772881a00"/35], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x15, 0xf, &(0x7f0000000040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000240)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, @sk_reuseport=0x28, 0x0, 0x8300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000100)=0x1) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000080)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000005000000014d564b00000000af"]) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0xeeee0000, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r7, 0xae80, 0x0) 2.474589661s ago: executing program 5 (id=6694): r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x801, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x40803, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000480), 0x129540, 0x0) r1 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000100)) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$dri(0x0, 0xffff, 0x30640) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x13, 0x6, 0x1, 0x1, 0x4000, r0, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x5}, 0x50) bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000140)={0x0, 0xdffffffe, 0x80, 0xffffffff, 0x0, "8100e1c8e80b598c36ff000800"}) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x102800) r4 = openat$hpet(0xffffff9c, &(0x7f00000009c0), 0x0, 0x0) preadv(r4, &(0x7f0000000c00)=[{&(0x7f0000000a00)=""/152, 0x98}], 0x1, 0xc096, 0x2) ioctl$TCFLSH(r3, 0x540b, 0x2) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r6 = syz_open_dev$dri(&(0x7f00000008c0), 0x1, 0x400) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r6, 0xc06864a1, &(0x7f0000000d40)={0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0x806}) close_range(r2, 0xffffffffffffffff, 0x0) 2.434228836s ago: executing program 4 (id=6695): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x40000}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)="af4fd7", 0x3, 0x840, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000340)=0x20000000, 0x4) socket$tipc(0x1e, 0x5, 0x0) close(0xffffffffffffffff) openat$rfkill(0xffffffffffffff9c, 0x0, 0x400000, 0x0) ioctl$VIDIOC_S_PARM(0xffffffffffffffff, 0xc0cc5616, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000100), 0x8000000000000001, 0x40) ioctl$HIDIOCSREPORT(r1, 0x400c4808, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r2 = fsopen(&(0x7f0000000080)='fusectl\x00', 0x0) r3 = fsmount(r2, 0x0, 0x0) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180), 0x20801, 0x0) write$rfkill(r4, &(0x7f0000000100)={0x0, 0x2, 0x3, 0x1}, 0x8) openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0), 0x40040, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) read$char_usb(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r5, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) fchdir(r3) syz_clone3(&(0x7f00000005c0)={0x80000000, 0x0, &(0x7f0000000380), &(0x7f00000003c0), {0x40}, &(0x7f0000000400)=""/71, 0x47, &(0x7f0000000480)=""/233, &(0x7f0000000580)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x7, {r3}}, 0x58) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000680)) 2.404310114s ago: executing program 5 (id=6696): socket$l2tp6(0xa, 0x2, 0x73) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x7, 0x10, 0x0, 0x0, 0xb47, 0x9, 0x8, 0xffffeffc, 0x3}, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) mknod$loop(0x0, 0x0, 0x1) r3 = socket(0x8000000010, 0x2, 0x0) write(r3, &(0x7f00000002c0)="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", 0xfc) r4 = syz_open_procfs$pagemap(0x0, 0x0) ioctl$PAGEMAP_SCAN(r4, 0xc0606610, 0x0) r5 = socket(0x840000000002, 0x3, 0x100) connect$inet(r5, 0x0, 0x0) sendmmsg$inet(r5, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r6, 0x8955, &(0x7f0000000180)={{0x2, 0x4e23, @empty}, {0x20000010304, @local}, 0x4, {0x2, 0x4e20, @rand_addr=0x64010102}}) shutdown(0xffffffffffffffff, 0x1) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000481000/0x1000)=nil) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x8000, 0x0, 0x0, 0x2) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x2000c450) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) 1.792124019s ago: executing program 1 (id=6697): r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x801, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x40803, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000480), 0x129540, 0x0) r1 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000100)) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$dri(0x0, 0xffff, 0x30640) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x13, 0x6, 0x1, 0x1, 0x4000, r0, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x5}, 0x50) bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x102800) r4 = openat$hpet(0xffffff9c, &(0x7f00000009c0), 0x0, 0x0) preadv(r4, &(0x7f0000000c00)=[{&(0x7f0000000a00)=""/152, 0x98}], 0x1, 0xc096, 0x2) ioctl$TCFLSH(r3, 0x540b, 0x2) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r6 = syz_open_dev$dri(&(0x7f00000008c0), 0x1, 0x400) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r6, 0xc06864a1, &(0x7f0000000d40)={0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0x806}) close_range(r2, 0xffffffffffffffff, 0x0) 1.710633216s ago: executing program 1 (id=6698): r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x801, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x40803, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000480), 0x129540, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000100)) writev(r1, &(0x7f0000000840)=[{0x0}], 0x1) syz_open_dev$dri(0x0, 0xffff, 0x30640) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x13, 0x6, 0x1, 0x1, 0x4000, r0, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x5}, 0x50) bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000140)={0x0, 0xdffffffe, 0x80, 0xffffffff, 0x0, "8100e1c8e80b598c36ff000800"}) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x102800) openat$hpet(0xffffff9c, &(0x7f00000009c0), 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r4 = syz_open_dev$dri(&(0x7f00000008c0), 0x1, 0x400) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f0000000d40)={0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0x806}) 1.674920494s ago: executing program 1 (id=6699): socket$inet_udp(0x2, 0x2, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x1, 0x48001) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000e00)=ANY=[@ANYBLOB="180000000000000000000095000000000010009c07b346cb5e13f8772644f4971e732de04fedad572bac3404f614c6921cc6566233111a04388a1dd9abd53082a556d3870cc36484b7afd31929aee457d4af6b6ec2d0aec2be5822d676d4d9c11f086b9ee55435fa635bf655e9a79e6ef3c3e8ad04cf1da9c1a928f766b975a31f0c49d8b56581c9304a570a7c27812e5da8d9143ea1ecc8e0f700befc1d70bf4fa9b153672e1e6924fddc5f747e8013"], &(0x7f0000000140)='syzkaller\x00'}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x3, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x4040001) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) writev(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000080)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb0100", 0x25}, {&(0x7f0000000040)="aa1d484ea0a00000f7fc08fcd111fbdf23ea32db0e8f21d5bc27bd49eb067a0689fff2a41cfb", 0x26}], 0x2) r0 = getpid() bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="1c0000005e007f029e3b470d649b72ab25399cd956c07dead6a93690", 0x1c}], 0x1}, 0x0) recvmsg(r3, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x2062) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_int(r4, 0x29, 0x16, &(0x7f0000fcb000), 0x4) r5 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_int(r5, 0x29, 0x16, &(0x7f0000fcb000), 0x4) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r6, 0xffffffffffffffff, 0x0) 1.400699397s ago: executing program 5 (id=6700): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$rxrpc(0x21, 0x2, 0xa) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r5, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r6 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r6, 0x400448c8, &(0x7f0000000340)={r5, r5, 0x8, 0x0, 0x0, 0x9, 0x1, 0xc45, 0x1012, 0xc7, 0x2, 0x7, 'syz0\x00'}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000180)={@private2, 0x800, 0x0, 0x2, 0x1}, 0x20) r7 = socket$nl_route(0x10, 0x3, 0x0) get_mempolicy(0x0, 0x0, 0x73e, &(0x7f0000419000/0x8000)=nil, 0x3) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'veth1_vlan\x00', 0x0}) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x48, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x38, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x14, 0x5, 0x0, 0x1, @meta={{0x9}, @val={0x4}}}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x94}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getchain={0x24, 0x11, 0x839, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r9, {0x1, 0x6}, {0xd}, {0x11, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x84}, 0x0) 1.400539837s ago: executing program 6 (id=6701): socket$inet6(0xa, 0x4, 0x4) readlink(&(0x7f0000002580)='./bus\x00', 0x0, 0x0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) syz_emit_ethernet(0x2a, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) iopl(0x3) syz_usbip_server_init(0x4) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, &(0x7f0000001540), 0x0) open_tree(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x1801) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x1, 0x400}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = mq_open(&(0x7f0000000000)='!selinu\xff\x7f\x00\x00inux\x00T\x8b\xb5\xf3\xcb\xdd\xe3\xbf2\x86\x01\x84\xdd\x8a\x8f_l\xa1L\xb1\xef\xb2\xc9\xf7+C\xb2\x8e9\xb8\xec\x1a\xe5\xaeq\x8fZ\xff\xbcY+\xaf0<\xa3\xb8\"Zm\x1c\x18\x11\x93\xb5z \xc2\x8b\xa9\xc5\x9es\t\xfe\x002\xa0-\xaf\xcdP\x9f\xe5Iv\xce*\xa8\xa3\x14i\x05\x8f\x9b\x1eB\x9f\x9d#E\x19\xdc\xfe\xc7\xeb\xb5\xcd\xc8\xe2U\xce\x00\x00', 0x6e93ebbbcc0884f2, 0x2c, &(0x7f0000000300)={0x0, 0x1, 0x3}) mq_timedsend(r1, 0x0, 0x0, 0x0, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_TABLE(r2, 0x0, 0xcf, 0x0, 0x0) mq_timedsend(r1, 0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000140)}) bpf$MAP_CREATE(0x0, 0x0, 0x50) socket$kcm(0x10, 0x2, 0x0) mq_notify(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x1b, 0x2}) mq_timedreceive(r1, &(0x7f0000000340)=""/200, 0xc8, 0x0, 0x0) 1.233723951s ago: executing program 4 (id=6702): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000080), 0x4) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002080)=@newtfilter={0x4c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xb, 0xfff3}, {}, {0x7, 0xffff}}, [@filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x25cb}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_MASK={0x8, 0x6, 0x419}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20041090}, 0xd0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000180)=@gcm_256={{0x303}, "c4915c7f49541ce8", "9b84f987950ff3df25fa8f46983d34157e047d27ae4a66a6d15608a32cbaa5bc", '\x00', "be0ea450d5a5fd03"}, 0x38) recvmmsg(r0, &(0x7f0000000b80)=[{{0x0, 0x0, 0x0}, 0xb00}, {{0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000940)=""/99, 0x63}], 0x1}, 0xd6}], 0x2, 0x10020, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r5 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r5, 0xc1105517, &(0x7f0000000140)={{0xbffffffd, 0x0, 0x7fffffff, 0x55614638, 'syz1\x00', 0x20}, 0x2, 0x100, 0x409, 0x0, 0x0, 0x4ff, 'syz0\x00', 0x0}) creat(&(0x7f0000000040)='./file0\x00', 0x4b) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYBLOB='Ux\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r6}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='fdinfo/3\x00') read$eventfd(r7, &(0x7f0000000080), 0x8) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r8}, 0x2c, {'rootmode', 0x3d, 0x8000}}) listxattr(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x2c, r9, 0x801, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x18, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008000}, 0x8000) 1.025580112s ago: executing program 4 (id=6703): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) syz_open_dev$tty20(0xc, 0x4, 0x1) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) read$FUSE(r4, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) r6 = memfd_create(&(0x7f0000000280)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\x86\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x7, 0x10, 0x0, 0x0, 0xb47, 0x9, 0x8, 0xffffeffc, 0x3}, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) mknod$loop(0x0, 0x0, 0x1) r3 = socket(0x8000000010, 0x2, 0x0) write(r3, &(0x7f00000002c0)="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", 0xfc) r4 = syz_open_procfs$pagemap(0x0, 0x0) ioctl$PAGEMAP_SCAN(r4, 0xc0606610, 0x0) r5 = socket(0x840000000002, 0x3, 0x100) connect$inet(r5, 0x0, 0x0) sendmmsg$inet(r5, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r6, 0x8955, &(0x7f0000000180)={{0x2, 0x4e23, @empty}, {0x20000010304, @local}, 0x4, {0x2, 0x4e20, @rand_addr=0x64010102}}) shutdown(0xffffffffffffffff, 0x1) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000481000/0x1000)=nil) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x8000, 0x0, 0x0, 0x2) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x2000c450) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) 0s ago: executing program 1 (id=6706): socket(0x10, 0x803, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) socket$alg(0x26, 0x5, 0x0) munmap(&(0x7f0000901000/0x3000)=nil, 0x3000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x25dfdbff, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x800, 0xff, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}, @m_ife={0x48, 0x3ffa, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sendto$inet(0xffffffffffffffff, &(0x7f0000000300)="cd9b45bf31b898b6bb11efb4942c5706f8f450a0042f90bc9001c449997d8d995a96ff3f5cf6f3824cc509e6b5b235ea0603a3c9ae64743888cb7dd7fcd1b1300a88c3fae201452dc552f75e8ab8ac0fdaf2db8e8f54e856cc6f0b4a2b0fe9cdd26047025c409a99de8bc65abb2d3b6583c5522979", 0x75, 0x4000000, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r6 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) readv(r6, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/218, 0xda}, {0x0, 0x20}], 0x2) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="79610400d80e000000007e000000"], 0x14}}, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000001a00)='./file1\x00', 0x141040, 0x42) mount(&(0x7f0000000000)=@sr0, &(0x7f0000004a00)='./file1\x00', &(0x7f0000000040)='udf\x00', 0x100080f, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'team_slave_1\x00'}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) kernel console output (not intermixed with test programs): ipc: MTU too low for tipc bearer [ 2319.576414][T31664] netlink: 'syz.5.5590': attribute type 12 has an invalid length. [ 2321.005238][T30042] usb usb48-port1: attempt power cycle [ 2321.445164][ T40] audit: type=1804 audit(2000004651.985:14425): pid=31682 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.5595" name="/newroot/532/bus/bus" dev="overlay" ino=2926 res=1 errno=0 [ 2321.465038][ T40] audit: type=1804 audit(2000004652.005:14426): pid=31682 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.5595" name="/newroot/532/bus/bus" dev="overlay" ino=2926 res=1 errno=0 [ 2321.598391][T30042] usb usb48-port1: unable to enumerate USB device [ 2323.559608][T31693] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5599'. [ 2323.587420][T31693] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2323.978828][T31706] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5596'. [ 2323.999534][T31706] wireguard0: entered promiscuous mode [ 2324.001462][T31706] wireguard0: entered allmulticast mode [ 2325.583670][T31736] rdma_rxe: rxe_newlink: failed to add syz_tun [ 2325.752303][ T40] audit: type=1804 audit(2000004656.295:14427): pid=31739 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.6.5607" name="/newroot/524/bus/bus" dev="overlay" ino=2906 res=1 errno=0 [ 2325.827490][ T40] audit: type=1804 audit(2000004656.325:14428): pid=31739 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.5607" name="/newroot/524/bus/bus" dev="overlay" ino=2906 res=1 errno=0 [ 2325.844609][T31742] 9pnet_fd: Insufficient options for proto=fd [ 2326.158865][T31736] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2326.164611][T31736] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2326.185938][T31741] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5609'. [ 2326.236887][T31736] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2326.240855][T31736] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2326.325003][T31736] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2326.329610][T31736] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2326.395870][T31736] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2326.400681][T31736] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2326.419633][T31742] Process accounting resumed [ 2326.716088][T31751] netlink: 'syz.4.5610': attribute type 12 has an invalid length. [ 2326.835409][T31400] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 2326.839090][T31400] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2326.866033][T31400] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 2326.869746][T31400] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2326.883410][T31400] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 2326.886658][T31400] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2326.904635][T31400] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 2326.908005][T31400] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2326.926984][T31755] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5612'. [ 2326.962662][T31755] netlink: 3 bytes leftover after parsing attributes in process `syz.6.5612'. [ 2326.981009][T31755] batadv0: entered allmulticast mode [ 2328.887812][T31784] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5619'. [ 2329.692337][T31793] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(5) [ 2329.694589][T31793] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2329.697693][T31793] vhci_hcd vhci_hcd.0: Device attached [ 2330.107799][T30042] usb 50-1: SetAddress Request (82) to port 0 [ 2330.110020][T30042] usb 50-1: new SuperSpeed USB device number 82 using vhci_hcd [ 2330.910775][T31804] netlink: 'syz.4.5624': attribute type 12 has an invalid length. [ 2330.946988][T31794] vhci_hcd: connection reset by peer [ 2330.950928][ T61] vhci_hcd: stop threads [ 2330.952842][ T61] vhci_hcd: release socket [ 2330.954948][ T61] vhci_hcd: disconnect device [ 2331.305686][ T40] audit: type=1326 audit(2000004661.845:14429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31809 comm="syz.5.5626" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad579 code=0x7ffc0000 [ 2331.314198][ T40] audit: type=1326 audit(2000004661.845:14430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31809 comm="syz.5.5626" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad579 code=0x7ffc0000 [ 2331.321274][ T40] audit: type=1326 audit(2000004661.845:14431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31809 comm="syz.5.5626" exe="/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf70ad579 code=0x7ffc0000 [ 2331.328221][ T40] audit: type=1326 audit(2000004661.845:14432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31809 comm="syz.5.5626" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad579 code=0x7ffc0000 [ 2331.335171][ T40] audit: type=1326 audit(2000004661.845:14433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31809 comm="syz.5.5626" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad579 code=0x7ffc0000 [ 2331.343131][ T40] audit: type=1326 audit(2000004661.885:14434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31809 comm="syz.5.5626" exe="/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf70ad579 code=0x7ffc0000 [ 2331.350700][ T40] audit: type=1326 audit(2000004661.895:14435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31809 comm="syz.5.5626" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad579 code=0x7ffc0000 [ 2331.585462][ T40] audit: type=1326 audit(2000004661.905:14436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31809 comm="syz.5.5626" exe="/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf70ad579 code=0x7ffc0000 [ 2331.596115][ T40] audit: type=1326 audit(2000004661.905:14437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31809 comm="syz.5.5626" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad579 code=0x7ffc0000 [ 2331.606536][ T40] audit: type=1326 audit(2000004661.905:14438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31809 comm="syz.5.5626" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad579 code=0x7ffc0000 [ 2332.030427][T31822] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5627'. [ 2332.068381][T31822] netlink: 3 bytes leftover after parsing attributes in process `syz.4.5627'. [ 2332.088618][T31822] batadv0: entered allmulticast mode [ 2332.791349][T31829] trusted_key: encrypted_key: key user:syz not found [ 2332.798837][T31829] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5629'. [ 2332.961561][T31833] loop6: detected capacity change from 0 to 7 [ 2332.965141][T31409] Dev loop6: unable to read RDB block 7 [ 2332.967589][T31409] loop6: AHDI p3 p4 [ 2332.969094][T31409] loop6: partition table partially beyond EOD, truncated [ 2332.972086][T31409] loop6: p3 start 1886353253 is beyond EOD, truncated [ 2333.117984][T31833] Dev loop6: unable to read RDB block 7 [ 2333.119990][T31833] loop6: AHDI p3 p4 [ 2333.121375][T31833] loop6: partition table partially beyond EOD, truncated [ 2333.139258][T31838] netlink: 'syz.6.5631': attribute type 12 has an invalid length. [ 2333.237998][T31833] loop6: p3 start 1886353253 is beyond EOD, truncated [ 2335.070837][T31870] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5636'. [ 2335.548589][T30042] usb 50-1: device descriptor read/8, error -110 [ 2336.019134][T30042] usb usb50-port1: attempt power cycle [ 2336.191178][T31899] netlink: 'syz.6.5640': attribute type 1 has an invalid length. [ 2336.638118][T30042] usb usb50-port1: unable to enumerate USB device [ 2336.860550][T31886] netlink: 'syz.4.5637': attribute type 12 has an invalid length. [ 2336.973984][T31911] tipc: MTU too low for tipc bearer [ 2337.632986][T31936] netlink: 'syz.6.5653': attribute type 12 has an invalid length. [ 2337.798614][T31938] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 2337.800788][T31938] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2337.804445][T31938] vhci_hcd vhci_hcd.0: Device attached [ 2338.144041][T31948] overlayfs: failed to clone upperpath [ 2338.157523][T30042] usb 46-1: SetAddress Request (106) to port 0 [ 2338.159708][T30042] usb 46-1: new SuperSpeed USB device number 106 using vhci_hcd [ 2338.410481][ T40] kauditd_printk_skb: 26 callbacks suppressed [ 2338.410687][ T40] audit: type=1804 audit(2000004668.895:14465): pid=31948 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.5646" name="bus" dev="tmpfs" ino=8196 res=1 errno=0 [ 2338.578044][T31939] vhci_hcd: connection reset by peer [ 2338.582390][T21071] vhci_hcd: stop threads [ 2338.583949][T21071] vhci_hcd: release socket [ 2338.585528][T21071] vhci_hcd: disconnect device [ 2339.327674][T31961] netlink: 'syz.5.5650': attribute type 1 has an invalid length. [ 2339.609811][T31958] netlink: 'syz.1.5649': attribute type 1 has an invalid length. [ 2339.782110][T31972] rdma_rxe: rxe_newlink: failed to add syz_tun [ 2340.582410][T31979] sp0: Synchronizing with TNC [ 2341.788312][T31978] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5654'. [ 2342.386265][T31999] netlink: 'syz.1.5660': attribute type 1 has an invalid length. [ 2342.437920][T31997] tipc: MTU too low for tipc bearer [ 2343.697485][T30042] usb 46-1: device descriptor read/8, error -110 [ 2345.811014][T30042] usb usb46-port1: attempt power cycle [ 2346.227728][T32024] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2346.371521][T30042] usb usb46-port1: unable to enumerate USB device [ 2347.206063][T32039] tipc: MTU too low for tipc bearer [ 2347.984395][T32043] netlink: 'syz.1.5670': attribute type 1 has an invalid length. [ 2349.538413][T32066] 9pnet_fd: Insufficient options for proto=fd [ 2350.102630][ T1417] ieee802154 phy0 wpan0: encryption failed: -22 [ 2350.726744][T32082] netlink: 'syz.1.5679': attribute type 1 has an invalid length. [ 2350.829694][T32081] netlink: 'syz.6.5680': attribute type 1 has an invalid length. [ 2350.864305][T32082] bond7: (slave vxcan1): The slave device specified does not support setting the MAC address [ 2350.869781][T32082] bond7: (slave vxcan1): Error -95 calling set_mac_address [ 2350.915098][T32090] gretap1: entered promiscuous mode [ 2350.920843][T32090] bond7: (slave gretap1): making interface the new active one [ 2350.924276][T32090] bond7: (slave gretap1): Enslaving as an active interface with an up link [ 2350.979972][T32079] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5679'. [ 2351.222842][T32090] macvlan5: entered promiscuous mode [ 2351.225223][T32090] macvlan5: entered allmulticast mode [ 2351.228773][T32090] bond7: entered promiscuous mode [ 2351.231767][T32090] 8021q: adding VLAN 0 to HW filter on device macvlan5 [ 2351.237242][T32090] bond7: (slave macvlan5): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 2351.249358][T32090] bond7: left promiscuous mode [ 2351.777898][T32106] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5683'. [ 2351.798108][T32106] macvlan2: entered allmulticast mode [ 2351.800080][T32106] veth1_vlan: entered allmulticast mode [ 2351.805742][T32106] veth1_vlan: left allmulticast mode [ 2352.194138][T32107] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5682'. [ 2352.260303][T32107] netlink: 3 bytes leftover after parsing attributes in process `syz.1.5682'. [ 2352.432302][T32107] batadv2: entered allmulticast mode [ 2352.808000][T32122] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(7) [ 2352.810524][T32122] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 2352.826495][T32122] vhci_hcd vhci_hcd.0: Device attached [ 2353.057645][T15951] usb 49-1: new high-speed USB device number 11 using vhci_hcd [ 2353.320808][T32123] vhci_hcd: connection reset by peer [ 2353.323487][ T95] vhci_hcd: stop threads [ 2353.325428][ T95] vhci_hcd: release socket [ 2353.341290][ T95] vhci_hcd: disconnect device [ 2353.998655][T32135] netlink: 'syz.4.5686': attribute type 10 has an invalid length. [ 2354.015329][T32135] team0: Cannot enslave team device to itself [ 2356.370623][T32173] netlink: 'syz.4.5696': attribute type 12 has an invalid length. [ 2358.178467][T15951] vhci_hcd: vhci_device speed not set [ 2358.912339][T32204] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5701'. [ 2358.919496][T32204] netlink: 3 bytes leftover after parsing attributes in process `syz.6.5701'. [ 2358.927447][T32204] batadv0: entered allmulticast mode [ 2359.122850][T32206] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2360.510545][T15174] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 2360.714508][T32226] netlink: 'syz.6.5707': attribute type 12 has an invalid length. [ 2362.212682][T32248] netlink: 'syz.4.5711': attribute type 1 has an invalid length. [ 2363.402701][T32262] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2364.317729][T32263] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 2364.320672][T32263] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2364.324310][T32263] vhci_hcd vhci_hcd.0: Device attached [ 2364.720677][T32272] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(5) [ 2364.723556][T32272] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2364.727468][T32272] vhci_hcd vhci_hcd.0: Device attached [ 2364.859317][T32275] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5716'. [ 2364.873942][T32275] netlink: 3 bytes leftover after parsing attributes in process `syz.1.5716'. [ 2364.899217][T32275] batadv2: entered allmulticast mode [ 2364.901382][T30042] usb 48-1: SetAddress Request (94) to port 0 [ 2364.904740][T30042] usb 48-1: new SuperSpeed USB device number 94 using vhci_hcd [ 2365.017570][T15951] usb 50-1: SetAddress Request (86) to port 0 [ 2365.019817][T15951] usb 50-1: new SuperSpeed USB device number 86 using vhci_hcd [ 2365.338621][T32273] vhci_hcd: connection reset by peer [ 2365.341268][ T13] vhci_hcd: stop threads [ 2365.343146][ T13] vhci_hcd: release socket [ 2365.345197][ T13] vhci_hcd: disconnect device [ 2365.560339][T32264] vhci_hcd: connection reset by peer [ 2365.562652][T21071] vhci_hcd: stop threads [ 2365.564783][T21071] vhci_hcd: release socket [ 2365.566993][T21071] vhci_hcd: disconnect device [ 2366.218533][T32291] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(6) [ 2366.221229][T32291] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2366.237534][T32291] vhci_hcd vhci_hcd.0: Device attached [ 2366.396569][T32301] netlink: 'syz.1.5721': attribute type 12 has an invalid length. [ 2366.927017][T32292] vhci_hcd: connection closed [ 2366.927874][T21071] vhci_hcd: stop threads [ 2366.932602][T21071] vhci_hcd: release socket [ 2366.934723][T21071] vhci_hcd: disconnect device [ 2367.452703][T32310] tipc: MTU too low for tipc bearer [ 2367.475042][T32314] overlayfs: failed to resolve './file0': -2 [ 2367.543245][T32318] bond0: (slave syz_tun): Releasing backup interface [ 2367.552209][T32318] bond0: (slave batadv0): Releasing backup interface [ 2367.973350][T32318] bond1: (slave veth0_to_bond): Releasing active interface [ 2367.980292][T32318] bond0: (slave batadv_slave_0): Releasing backup interface [ 2367.987122][T32318] bond0: (slave veth0_to_hsr): Releasing backup interface [ 2367.994947][T32318] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 2368.079981][T32318] netlink: 'syz.1.5728': attribute type 10 has an invalid length. [ 2368.102868][T32318] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5728'. [ 2368.502450][ T40] audit: type=1804 audit(2000004698.985:14466): pid=32333 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.5729" name="/newroot/565/bus/bus" dev="overlay" ino=3106 res=1 errno=0 [ 2368.511294][ T40] audit: type=1804 audit(2000004699.005:14467): pid=32333 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.5729" name="/newroot/565/bus/bus" dev="overlay" ino=3106 res=1 errno=0 [ 2369.555383][T32342] tipc: MTU too low for tipc bearer [ 2370.081962][T30042] usb 48-1: device descriptor read/8, error -110 [ 2370.101060][T15951] usb 50-1: device descriptor read/8, error -110 [ 2371.158512][T15951] usb usb50-port1: attempt power cycle [ 2371.359172][T30042] usb usb48-port1: attempt power cycle [ 2371.493021][T32359] netlink: 'syz.4.5736': attribute type 1 has an invalid length. [ 2371.848470][T15951] usb usb50-port1: unable to enumerate USB device [ 2372.052979][T30042] usb usb48-port1: unable to enumerate USB device [ 2372.552147][T32370] ceph: No mds server is up or the cluster is laggy [ 2372.553690][T30042] libceph: connect (1)[c::]:6789 error -101 [ 2372.554348][T30042] libceph: mon0 (1)[c::]:6789 connect error [ 2372.887186][T32378] wlan0 speed is unknown, defaulting to 1000 [ 2372.892630][T32378] lo speed is unknown, defaulting to 1000 [ 2372.895175][T32378] lo speed is unknown, defaulting to 1000 [ 2372.946233][T32382] wlan0 speed is unknown, defaulting to 1000 [ 2373.013246][T32378] lo speed is unknown, defaulting to 1000 [ 2373.174407][T32382] lo speed is unknown, defaulting to 1000 [ 2373.177243][T32382] lo speed is unknown, defaulting to 1000 [ 2374.543339][T32382] lo speed is unknown, defaulting to 1000 [ 2374.792637][T32414] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5745'. [ 2374.833717][T32414] netlink: 3 bytes leftover after parsing attributes in process `syz.6.5745'. [ 2374.965686][T32414] batadv0: entered allmulticast mode [ 2375.536221][T32426] netlink: 'syz.1.5748': attribute type 12 has an invalid length. [ 2376.808358][T32444] netlink: 'syz.6.5753': attribute type 1 has an invalid length. [ 2377.113874][T32449] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 2377.139663][T32450] netlink: 'syz.4.5750': attribute type 1 has an invalid length. [ 2377.172853][T32449] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 2377.437235][T32444] gretap1: entered promiscuous mode [ 2377.484118][T32444] bond4: (slave gretap1): making interface the new active one [ 2377.492963][T32444] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 2377.503021][T32449] macvlan2: entered promiscuous mode [ 2377.505676][T32449] macvlan2: entered allmulticast mode [ 2377.519654][T32449] bond4: entered promiscuous mode [ 2377.531106][T32449] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 2377.582772][T32449] bond4: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 2377.592828][T32449] bond4: left promiscuous mode [ 2377.658807][T32453] netlink: 32 bytes leftover after parsing attributes in process `syz.6.5753'. [ 2378.225147][T32479] netlink: 'syz.6.5758': attribute type 10 has an invalid length. [ 2378.245183][T32479] team0: Cannot enslave team device to itself [ 2378.252415][T32480] netlink: 'syz.5.5760': attribute type 12 has an invalid length. [ 2379.381582][T32492] overlayfs: failed to clone upperpath [ 2379.569279][T32499] netlink: 'syz.5.5771': attribute type 12 has an invalid length. [ 2380.724608][ T40] audit: type=1326 audit(2000004711.265:14468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32506 comm="syz.5.5774" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad579 code=0x7ffc0000 [ 2380.734462][ T40] audit: type=1326 audit(2000004711.265:14469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32506 comm="syz.5.5774" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad579 code=0x7ffc0000 [ 2380.747512][ T40] audit: type=1326 audit(2000004711.265:14470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32506 comm="syz.5.5774" exe="/syz-executor" sig=0 arch=40000003 syscall=394 compat=1 ip=0xf70ad579 code=0x7ffc0000 [ 2380.756402][ T40] audit: type=1326 audit(2000004711.265:14471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32506 comm="syz.5.5774" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad579 code=0x7ffc0000 [ 2380.764832][ T40] audit: type=1326 audit(2000004711.265:14472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32506 comm="syz.5.5774" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad579 code=0x7ffc0000 [ 2380.774050][ T40] audit: type=1326 audit(2000004711.265:14473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32506 comm="syz.5.5774" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf70ad579 code=0x7ffc0000 [ 2380.784039][ T40] audit: type=1326 audit(2000004711.265:14474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32506 comm="syz.5.5774" exe="/syz-executor" sig=0 arch=40000003 syscall=346 compat=1 ip=0xf70ad579 code=0x7ffc0000 [ 2380.793940][ T40] audit: type=1326 audit(2000004711.265:14475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32506 comm="syz.5.5774" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf70ad579 code=0x7ffc0000 [ 2380.803996][ T40] audit: type=1326 audit(2000004711.265:14476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32506 comm="syz.5.5774" exe="/syz-executor" sig=0 arch=40000003 syscall=346 compat=1 ip=0xf70ad579 code=0x7ffc0000 [ 2380.813101][ T40] audit: type=1326 audit(2000004711.265:14477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32506 comm="syz.5.5774" exe="/syz-executor" sig=0 arch=40000003 syscall=6 compat=1 ip=0xf70ad579 code=0x7ffc0000 [ 2381.167049][T32520] netlink: 'syz.4.5767': attribute type 1 has an invalid length. [ 2381.203592][T32520] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 2381.208320][T32520] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 2381.254340][T32523] gretap1: entered promiscuous mode [ 2381.259526][T32523] bond3: (slave gretap1): making interface the new active one [ 2381.263312][T32523] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 2381.300112][T32520] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5767'. [ 2381.310991][T32520] macvlan2: entered promiscuous mode [ 2381.313357][T32520] macvlan2: entered allmulticast mode [ 2381.316360][T32520] bond3: entered promiscuous mode [ 2381.319896][T32520] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 2381.324386][T32520] bond3: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 2381.329676][T32520] bond3: left promiscuous mode [ 2382.891540][T32545] netlink: 'syz.5.5775': attribute type 12 has an invalid length. [ 2384.846940][T32562] tipc: MTU too low for tipc bearer [ 2384.941106][T32569] tipc: MTU too low for tipc bearer [ 2384.982332][T32570] [U]  [ 2384.983680][T32570] [U] K{‘ [ 2384.985266][T32570] [U] ät Ž1ÊàŠªFìÇÄfËŠî`GÊJç˜Ügö毹¬¡—þÈoÕñ/ümCç [ 2385.004158][T32570] [U] tžØ–/,~ˆÄœ­‹jõÿÊ}8îÊþ'o1Ü"™7-î‚JQœK—¤Wºïqé5c%"¬H12–¦Y“„‰ž€ÊXÍ`ˆ‚íè¼`+³û(·â¿!(éûéz'àtXln»I®gÅj– °üÝ­·på~÷7í!‘Õò"ø¨Î ¾ª(È5ˆObü¤‡ÍƒJÖ [ 2385.028521][T32570] [U] ±k\&—}6£6œXîHX ¥ôµ„Ìþ.`¸a“$Û40|϶¿9°øÞ¨„¯À ÏU‚ò4ôä®VbzÃð}ÌwÔM”TºŽíQŸýΦr’ 4”ÿ [ 2385.041893][T32570] [U] ".h6øÞ"Ökã‡[›‰¤ŒJá4çØIn¨™[Z(•„C|Të]z{â3Ÿc=»¨xîôžë…î4ßw‰)\T‘XJøSH{q;ì¹¢…ötÔÇ+‹¦÷gíèÿ®d„.Ë‚³>yž÷éwUh„fN—ŽÇhl]SÔ2ŠÇÙ\g%ŠO¼&z)µðš'¨pul‚_<㠢ذ‰ò®Ôå`Ò±TÔÁþœÐËþ;_ô"(‘u{7jœ¿2X ‘/€'ÝÙcÑÌõIº©ÀÏH¿cÕ³žV¦=‘AiÇ%w¼Esž RšŸjŠîœƒÚ”gÂ÷rÁ¹í¡hI˜¢œaïì6-úDúV¨á i"øånæ¨ þÚAsc~4Áª¹8cø*­OO5/ÿœJš~º§¡w—vK+¬®‰Œ3èÇY)Ž¹M°¸æv¶Ìyqæ½€DTr¯Otpem%f×ÊejÍA5æÔT_-X~ ^aaÛ‚ò˜½qÖå [ 2385.086960][T32570] [U] +w‰G?]£Ó'a: »Ú)Õïó™“' B>t¢ ¡f/™÷<'èUÓ'–¼h§ié.+]eŸ.½-É¿ÿ¿Ò%÷è>2`¶^Uÿ8F.Š6¤Å3ÓØ+ËA¾Â««„°g3ÓpÂó6:^0Àtéèv÷'Eõt¼€ûâYC‰n¾þrÏ©ÞnèPj× ;æZ†êôñû‘8!¯È\ù…¸AØÊ–2Á£$ðµ™Â­wi.Íç#ŠÈ/Bai¼Ä`ðá4j’ôdîy@Óz„ügW÷5Ë¿BÄ µÙœ Nóy"vI2ûÌ [ 2385.133128][T32570] [U] ôT¦_K5¸t¬YJÐþÎ9ðÕcÊ$brŸLúNul ¶ü9wÈýÍ|žGå"ʃÆ%Çú¶êCªØ°¶ºqîÙ ŸÇ3‹Æq¯ôN^HP*½Ü$ µ.Î7yÓ±œ2³ [ 2385.146426][T32570] [U] ½?©ÿ hüä*ÙÁ”Î3í7Üé¾^#Q"0~‡ ‚ð(éoïX LŒb£,'vîÓ=‹ÝëCÌS«…’G‚S¶Þ0•Ö‚‹Ù`˜›žÙ‡Ÿ†=1(÷î¾™÷p#ò2DO*Ƀ [ 2385.167174][T32570] [U] ©s¹“gžµ²¶“˜GuÐÔd-{¸™â|&“®ŸŸñ2µ›LÞc_©œ!`¨ÍozÖ¥¢B¶³%>êrñ¶öwï‡ýŽSsÂH"£yA4£O.šYÙÛä„RTÔ¶ŒBÚ[+/<yž÷éwUh„fN—ŽÇhl]SÔ2ŠÇÙ\g%ŠO¼&z)µðš'¨pul‚_<㠢ذ‰ò®Ôå`Ò±TÔÁþœÐËþ;_ô"(‘u{7jœ¿2X ‘/€'ÝÙcÑÌõIº©ÀÏH¿cÕ³žV¦=‘AiÇ%w¼Esž RšŸjŠîœƒÚ”gÂ÷rÁ¹í¡hI˜¢œaïì6-úDúV¨á i"øånæ¨ þÚAsc~4Áª¹8cø*­OO5/ÿœJš~º§¡w—vK+¬®‰Œ3èÇY)Ž¹M°¸æv¶Ìyqæ½€DTr¯Otpem%f×ÊejÍA5æÔT_-X~ ^aaÛ‚ò˜½qÖå [ 2394.322987][T32664] [U] +w‰G?]£Ó'a: »Ú)Õïó™“' B>t¢ ¡f/™÷<'èUÓ'–¼h§ié.+]eŸ.½-É¿ÿ¿Ò%÷è>2`¶^Uÿ8F.Š6¤Å3ÓØ+ËA¾Â««„°g3ÓpÂó6:^0Àtéèv÷'Eõt¼€ûâYC‰n¾þrÏ©ÞnèPj× ;æZ†êôñû‘8!¯È\ù…¸AØÊ–2Á£$ðµ™Â­wi.Íç#ŠÈ/Bai¼Ä`ðá4j’ôdîy@Óz„ügW÷5Ë¿BÄ µÙœ Nóy"vI2ûÌ [ 2394.332073][T32664] [U] ôT¦_K5¸t¬YJÐþÎ9ðÕcÊ$brŸLúNul ¶ü9wÈýÍ|žGå"ʃÆ%Çú¶êCªØ°¶ºqîÙ ŸÇ3‹Æq¯ôN^HP*½Ü$ µ.Î7yÓ±œ2³ [ 2394.337896][T32664] [U] ½?©ÿ hüä*ÙÁ”Î3í7Üé¾^#Q"0~‡ ‚ð(éoïX LŒb£,'vîÓ=‹ÝëCÌS«…’G‚S¶Þ0•Ö‚‹Ù`˜›žÙ‡Ÿ†=1(÷î¾™÷p#ò2DO*Ƀ [ 2394.343001][T32664] [U] ©s¹“gžµ²¶“˜GuÐÔd-{¸™â|&“®ŸŸñ2µ›LÞc_©œ!`¨ÍozÖ¥¢B¶³%>êrñ¶öwï‡ýŽSsÂH"£yA4£O.šYÙÛä„RTÔ¶ŒBÚ[+/<>—¡{q¢Ú×_²ÕLX8ÊU„ÇØî{ðZ³íø)ÿÒ7?ËrR;ÿcßr hײڣỨè1Å>)©Măâ‰Ït§²Ú(ìÇaÏ„}9·Ú¥ãJ*MÑœ¥Ä¡«'L¹£q ìDWŸòø¸=ؽ|q¬ ÏÆ™W;5æÙŽª!ñdB¸x`é§ö/÷ÂE`ƦM¢Xîâ"ä\ [ 2394.380159][T32664] [U] {;Ž õ¥ÂÙ˜_ˆo2«Ñ)îo®›.2ÐW2겨ðyùÃãx_ HPϱœSªD­¦ø:]‚{Ë©ÔÝæè½ [ 2394.383763][T32664] [U] I,Ç>Çó¤ îÙ51ñ÷^1òN4¯oǶþ'0ý?Ö’iÙ9w.ï_.¶WŠa¼ŠVˆ±`)ÑZ¬ïæc6GiÓ¹²a»¬XL[¢›½¡Fü*ÀñO‰W)+‡Ç'\nÆ[K@ÑëÄü2çǬ–®¡p"^`Á‰í øß [ 2394.389467][T32664] [U] 22½“Æ©Ðû©x?0;3u± [ 2394.391039][T32664] [U] ÞœÕæósObx 8”Wˆ4á‘(ð~/§¿íKÇUžãÔ–oQËe+·G®-yµgY_•>v¢ÜÈë—3.hÁÓ™]Í„²2‘”)™DË, ‘Ä þD~×d©£¡+Ãw; A\˜FPÉþȘ|$ºø)KØI³éÐÉ¿kñYT^RÍüù癵“ËA=±#–Üœ ÝíßËae©tå1·Îݯ4K¯.e"RÚS|ðŸÀsÖ’Á:•ù>p ™…rÐ"z‰ú­ûúé#P!˜KY"›}ÃÆF¿N84ü³ƒÅhÞ±£o•Èsߙ̫%DlwÙmæ²Ç [ 2394.400382][T32664] [U] [ª['xn€'²÷ á¿Ü,mr¦«/žšœâ1D=!DŽx91Bùwç»R—lf…ƒÆKì¤Zõê# `ì‘ lØ›§Ëœ»×b~åmÒÔÖ [ 2394.404572][T32664] [U] ™LÖ>ñd+ˆd¯§—®Ì"5Žêh3<ª¨ÅiR=F^”fnõóÜÀ‰¿û­vÛ÷œDÁOIOÚ:Uö>ÖYâ [ 2394.408460][T32664] [U] 'B—6vý20³ä·çž¥·×Œï"t8Ñ{9ÆFW]ôÊäì© [ 2394.411006][T32664] [U] ù72þ‰ïÂÃuþC6™îüÔÏ„I]8cª£tÛ¨QSkYÞîIÒÀâ¹ ¿|V'ÛTV/ùÅg•$[â 9kh`ú"ü‘úõ}€ñ[^=ˆú0á]½ã%ÆÌ‚T“Šž¹ØFì_vö4C¸òÅ [ 2394.416464][T32664] [U] ¹ ec [ 2394.417897][T32664] [U] —”|‚Êì<äî:^ü3$7nK~Ø-™@÷¦?Ÿ–/mtl·Û¾©Iˆwè¬@g~tØ{êÜPß+Æ$ªjp|µ ŽçIÛRiópmð õ·YÓ ú”8ìtÉÐÞVžÙÿÆë,îlâ,Õ [ 2394.499520][T32667] comedi comedi0: Minor 47 could not be opened [ 2394.506968][T32667] netlink: 'syz.4.5815': attribute type 1 has an invalid length. [ 2394.577107][T32667] bond4: entered promiscuous mode [ 2394.580533][T32667] 8021q: adding VLAN 0 to HW filter on device bond4 [ 2394.624726][T32667] 8021q: adding VLAN 0 to HW filter on device bond4 [ 2394.628590][T32667] bond4: (slave gre1): The slave device specified does not support setting the MAC address [ 2394.633074][T32667] bond4: (slave gre1): Setting fail_over_mac to active for active-backup mode [ 2394.646633][T32667] bond4: (slave gre1): making interface the new active one [ 2394.650016][T32667] gre1: entered promiscuous mode [ 2394.656464][T32667] bond4: (slave gre1): Enslaving as an active interface with an up link [ 2394.931807][T32656] [U] ˆKÌúÛõ‰)0ÄÄÝ~ü³ÊªÁiP'ífóòœzÚÞr¬™ÿ @BÓ]Â5ÝÊ{­©Ê¼ô'à8åÆ¥F‡¹UTqUdÇ©¤K;7íª0c[„ãy–¼ÈYC¦¶»Ø°mª™Lò8’T…ÍšÎ5³ýýrx™¶ðWí x¤²óoQhVi'8œ¥Î…Lµ [ 2398.942574][T32713] netlink: 'syz.1.5820': attribute type 1 has an invalid length. [ 2398.967086][T32713] bond8: (slave xfrm1): The slave device specified does not support setting the MAC address [ 2398.971735][T32713] bond8: (slave xfrm1): Setting fail_over_mac to active for active-backup mode [ 2398.978762][T32713] bond8: (slave xfrm1): making interface the new active one [ 2398.982203][T32713] bond8: (slave xfrm1): Enslaving as an active interface with an up link [ 2398.994382][T32713] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5820'. [ 2399.024597][T32713] bond8 (unregistering): (slave xfrm1): Releasing backup interface [ 2399.038162][T32713] bond8 (unregistering): Released all slaves [ 2399.268879][T32713] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5820'. [ 2399.268904][T32713] netlink: 'syz.1.5820': attribute type 30 has an invalid length. [ 2399.280760][T14539] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 2399.280863][T14539] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 2399.280895][T14539] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 2399.280912][T14539] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 2400.515496][T32726] wlan0 speed is unknown, defaulting to 1000 [ 2400.564634][T32726] lo speed is unknown, defaulting to 1000 [ 2400.655768][T32726] lo speed is unknown, defaulting to 1000 [ 2401.551645][T32741] ceph: No mds server is up or the cluster is laggy [ 2401.554645][T15951] libceph: connect (1)[c::]:6789 error -101 [ 2401.556916][T15951] libceph: mon0 (1)[c::]:6789 connect error [ 2401.574901][T32726] lo speed is unknown, defaulting to 1000 [ 2401.893519][T25270] Bluetooth: hci3: unexpected event for opcode 0x204e [ 2403.902874][T32762] [U]  [ 2403.904172][T32762] [U] K{‘ [ 2403.905587][T32762] [U] ät Ž1ÊàŠªFìÇÄfËŠî`GÊJç˜Ügö毹¬¡—þÈoÕñ/ümCç [ 2403.908753][T32762] [U] tžØ–/,~ˆÄœ­‹jõÿÊ}8îÊþ'o1Ü"™7-î‚JQœK—¤Wºïqé5c%"¬H12–¦Y“„‰ž€ÊXÍ`ˆ‚íè¼`+³û(·â¿!(éûéz'àtXln»I®gÅj– °üÝ­·på~÷7í!‘Õò"ø¨Î ¾ª(È5ˆObü¤‡ÍƒJÖ [ 2403.915462][T32762] [U] ±k\&—}6£6œXîHX ¥ôµ„Ìþ.`¸a“$Û40|϶¿9°øÞ¨„¯À ÏU‚ò4ôä®VbzÃð}ÌwÔM”TºŽíQŸýΦr’ 4”ÿ [ 2403.922154][T32762] [U] ".h6øÞ"Ökã‡[›‰¤ŒJá4çØIn¨™[Z(•„C|Të]z{â3Ÿc=»¨xîôžë…î4ßw‰)\T‘XJøSH{q;ì¹¢…ötÔÇ+‹¦÷gíèÿ®d„.Ë‚³>yž÷éwUh„fN—ŽÇhl]SÔ2ŠÇÙ\g%ŠO¼&z)µðš'¨pul‚_<㠢ذ‰ò®Ôå`Ò±TÔÁþœÐËþ;_ô"(‘u{7jœ¿2X ‘/€'ÝÙcÑÌõIº©ÀÏH¿cÕ³žV¦=‘AiÇ%w¼Esž RšŸjŠîœƒÚ”gÂ÷rÁ¹í¡hI˜¢œaïì6-úDúV¨á i"øånæ¨ þÚAsc~4Áª¹8cø*­OO5/ÿœJš~º§¡w—vK+¬®‰Œ3èÇY)Ž¹M°¸æv¶Ìyqæ½€DTr¯Otpem%f×ÊejÍA5æÔT_-X~ ^aaÛ‚ò˜½qÖå [ 2403.942847][T32762] [U] +w‰G?]£Ó'a: »Ú)Õïó™“' B>t¢ ¡f/™÷<'èUÓ'–¼h§ié.+]eŸ.½-É¿ÿ¿Ò%÷è>2`¶^Uÿ8F.Š6¤Å3ÓØ+ËA¾Â««„°g3ÓpÂó6:^0Àtéèv÷'Eõt¼€ûâYC‰n¾þrÏ©ÞnèPj× ;æZ†êôñû‘8!¯È\ù…¸AØÊ–2Á£$ðµ™Â­wi.Íç#ŠÈ/Bai¼Ä`ðá4j’ôdîy@Óz„ügW÷5Ë¿BÄ µÙœ Nóy"vI2ûÌ [ 2403.956297][T32762] [U] ôT¦_K5¸t¬YJÐþÎ9ðÕcÊ$brŸLúNul ¶ü9wÈýÍ|žGå"ʃÆ%Çú¶êCªØ°¶ºqîÙ ŸÇ3‹Æq¯ôN^HP*½Ü$ µ.Î7yÓ±œ2³ [ 2403.962092][T32762] [U] ½?©ÿ hüä*ÙÁ”Î3í7Üé¾^#Q"0~‡ ‚ð(éoïX LŒb£,'vîÓ=‹ÝëCÌS«…’G‚S¶Þ0•Ö‚‹Ù`˜›žÙ‡Ÿ†=1(÷î¾™÷p#ò2DO*Ƀ [ 2403.967081][T32762] [U] ©s¹“gžµ²¶“˜GuÐÔd-{¸™â|&“®ŸŸñ2µ›LÞc_©œ!`¨ÍozÖ¥¢B¶³%>êrñ¶öwï‡ýŽSsÂH"£yA4£O.šYÙÛä„RTÔ¶ŒBÚ[+/< HID v0.03 Device [syz1] on syz1 [ 2459.927569][ T1157] netlink: 72 bytes leftover after parsing attributes in process `syz.4.6017'. [ 2460.075397][ T1154] vhci_hcd: cannot find the pending unlink 4294967287 [ 2460.107780][ T56] usb 46-1: SetAddress Request (114) to port 0 [ 2460.110629][ T56] usb 46-1: new SuperSpeed USB device number 114 using vhci_hcd [ 2460.163024][ T1157] syz.4.6017 (1157): drop_caches: 2 [ 2460.166697][ T1157] syz.4.6017 (1157): drop_caches: 2 [ 2460.742204][ T1154] vhci_hcd: connection closed [ 2460.757615][ T1155] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 2460.785743][ T1159] fido_id[1159]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 2460.959238][ T95] vhci_hcd: stop threads [ 2460.961243][ T95] vhci_hcd: release socket [ 2460.963738][ T95] vhci_hcd: disconnect device [ 2461.716848][ T1183] netlink: 'syz.5.6021': attribute type 1 has an invalid length. [ 2463.248324][ T1216] netlink: 'syz.1.6026': attribute type 12 has an invalid length. [ 2463.398635][ T1220] netlink: 'syz.5.6025': attribute type 4 has an invalid length. [ 2463.436253][ T1220] netlink: 'syz.5.6025': attribute type 4 has an invalid length. [ 2463.887888][ T1233] comedi comedi0: Minor 47 could not be opened [ 2463.892186][ T1233] netlink: 'syz.6.6035': attribute type 1 has an invalid length. [ 2464.075181][ T1233] bond6: entered promiscuous mode [ 2464.077568][ T1233] 8021q: adding VLAN 0 to HW filter on device bond6 [ 2465.341157][ T1257] netlink: 'syz.1.6038': attribute type 12 has an invalid length. [ 2465.697836][ T56] usb 46-1: device descriptor read/8, error -110 [ 2466.088445][ T56] usb usb46-port1: attempt power cycle [ 2466.529020][ T1276] netlink: 'syz.5.6033': attribute type 1 has an invalid length. [ 2466.648338][ T56] usb usb46-port1: unable to enumerate USB device [ 2467.669052][ T1294] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(6) [ 2467.671241][ T1294] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2467.703228][ T1294] vhci_hcd vhci_hcd.0: Device attached [ 2467.997583][T30042] usb 50-1: SetAddress Request (94) to port 0 [ 2467.999736][T30042] usb 50-1: new SuperSpeed USB device number 94 using vhci_hcd [ 2468.072189][ T1309] netlink: 'syz.4.6040': attribute type 12 has an invalid length. [ 2468.286003][T18361] Bluetooth: hci3: command 0x0406 tx timeout [ 2468.805380][ T1329] tipc: MTU too low for tipc bearer [ 2469.652362][ T1295] vhci_hcd: connection reset by peer [ 2469.655104][T31400] vhci_hcd: stop threads [ 2469.656995][T31400] vhci_hcd: release socket [ 2469.662062][T31400] vhci_hcd: disconnect device [ 2469.746674][ T1353] rdma_rxe: rxe_newlink: failed to add syz_tun [ 2471.273151][ T1370] qnx6: unable to read the first superblock [ 2471.322767][ T1370] gfs2: Unknown parameter 'norecovery™Û;fçÓáöšOŠŸ¹`¦A›u 4Þþ墅JÛŒŠ$«fhÑYo’‹Ýn1ylJ8(áK1' [ 2471.350558][ T1371] netlink: 'syz.6.6048': attribute type 1 has an invalid length. [ 2471.557589][ T40] audit: type=1326 audit(2000004801.835:14534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1359 comm="syz.1.6047" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa7579 code=0x7ffc0000 [ 2471.565353][ T40] audit: type=1326 audit(2000004801.835:14535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1359 comm="syz.1.6047" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa7579 code=0x7ffc0000 [ 2471.573270][ T40] audit: type=1326 audit(2000004801.835:14536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1359 comm="syz.1.6047" exe="/syz-executor" sig=0 arch=40000003 syscall=21 compat=1 ip=0xf7fa7579 code=0x7ffc0000 [ 2471.583391][ T40] audit: type=1326 audit(2000004801.835:14537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1359 comm="syz.1.6047" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa7579 code=0x7ffc0000 [ 2471.591890][ T40] audit: type=1326 audit(2000004801.835:14538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1359 comm="syz.1.6047" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa7579 code=0x7ffc0000 [ 2471.600239][ T40] audit: type=1326 audit(2000004801.845:14539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1359 comm="syz.1.6047" exe="/syz-executor" sig=0 arch=40000003 syscall=352 compat=1 ip=0xf7fa7579 code=0x7ffc0000 [ 2471.610152][ T40] audit: type=1326 audit(2000004801.845:14540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1359 comm="syz.1.6047" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa7579 code=0x7ffc0000 [ 2471.620160][ T40] audit: type=1326 audit(2000004801.845:14541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1359 comm="syz.1.6047" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa7579 code=0x7ffc0000 [ 2471.648388][ T40] audit: type=1326 audit(2000004801.855:14542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1359 comm="syz.1.6047" exe="/syz-executor" sig=0 arch=40000003 syscall=296 compat=1 ip=0xf7fa7579 code=0x7ffc0000 [ 2471.657052][ T40] audit: type=1326 audit(2000004801.865:14543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1359 comm="syz.1.6047" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa7579 code=0x7ffc0000 [ 2472.557902][ T1384] tipc: MTU too low for tipc bearer [ 2472.983334][ T1417] ieee802154 phy0 wpan0: encryption failed: -22 [ 2473.067644][T30042] usb 50-1: device descriptor read/8, error -110 [ 2473.647268][T30042] usb usb50-port1: attempt power cycle [ 2474.242344][T30042] usb usb50-port1: unable to enumerate USB device [ 2474.459847][ T1416] netlink: 'syz.4.6059': attribute type 12 has an invalid length. [ 2475.030212][ T1427] qnx6: unable to read the first superblock [ 2475.106387][ T1427] gfs2: Unknown parameter 'norecovery™Û;fçÓáöšOŠŸ¹`¦A›u 4Þþ墅JÛŒŠ$«fhÑYo’‹Ýn1ylJ8(áK1' [ 2475.209401][ T1428] netlink: 'syz.1.6061': attribute type 1 has an invalid length. [ 2475.615101][ T1438] netlink: 168 bytes leftover after parsing attributes in process `syz.5.6063'. [ 2475.637692][ T1438] syz.5.6063 (1438): drop_caches: 2 [ 2476.222696][ T1443] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2476.396518][ T1443] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2476.442024][ T1443] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2476.610186][ T1449] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6066'. [ 2476.618305][ T1449] program syz.4.6066 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2476.838503][ T1111] ata1.00: exception Emask 0x0 SAct 0x0 SErr 0x0 action 0x0 [ 2476.841818][ T1111] ata1.00: irq_stat 0x40000000 [ 2476.845241][ T1111] ata1.00: failed command: ZAC MANAGEMENT OUT [ 2476.846864][ T1443] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2476.853633][ T1111] ata1.00: cmd 9f/02:00:00:00:00/00:00:00:00:00/40 tag 0 [ 2476.853633][ T1111] res 41/04:00:00:00:00/00:00:00:00:00/40 Emask 0x1 (device error) [ 2476.862224][ T1111] ata1.00: status: { DRDY ERR } [ 2476.863924][ T1111] ata1.00: error: { ABRT } [ 2476.865968][ T1111] ata1.00: device reported invalid CHS sector 0 [ 2476.869484][ C3] ata1: illegal qc_active transition (00000000->00004000) [ 2476.976167][T31400] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 2476.989259][T31400] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 2477.001232][T31400] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 2477.014570][T14539] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 2477.194503][ T1111] ata1: SATA link up 1.5 Gbps (SStatus 113 SControl 300) [ 2477.202945][ T1111] ata1.00: configured for UDMA/100 [ 2478.349923][ T1467] batman_adv: batadv0: Adding interface: dummy0 [ 2478.352264][ T1467] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2478.365161][ T1467] batman_adv: batadv0: Interface activated: dummy0 [ 2478.387227][ T1467] batadv0: mtu less than device minimum [ 2478.392752][ T1467] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 2478.399594][ T1467] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 2478.405881][ T1467] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 2478.411571][ T1467] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 2478.416637][ T1467] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 2478.422198][ T1467] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 2478.427784][ T1467] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 2478.433343][ T1467] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 2478.438845][ T1467] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 2478.924918][ T1476] netlink: 'syz.1.6074': attribute type 1 has an invalid length. [ 2479.383307][ T1487] netlink: 'syz.4.6075': attribute type 4 has an invalid length. [ 2479.397794][ T1487] netlink: 'syz.4.6075': attribute type 4 has an invalid length. [ 2480.238393][ T1494] overlayfs: failed to clone upperpath [ 2480.510185][ T1510] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 2480.512174][ T1510] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2480.514972][ T1510] vhci_hcd vhci_hcd.0: Device attached [ 2480.777569][T15951] usb 48-1: SetAddress Request (106) to port 0 [ 2480.780267][T15951] usb 48-1: new SuperSpeed USB device number 106 using vhci_hcd [ 2481.902947][T30042] libceph: connect (1)[c::]:6789 error -101 [ 2481.906108][T30042] libceph: mon0 (1)[c::]:6789 connect error [ 2481.930785][ T1527] ceph: No mds server is up or the cluster is laggy [ 2483.006874][ T1511] vhci_hcd: connection reset by peer [ 2483.009798][ T61] vhci_hcd: stop threads [ 2483.011721][ T61] vhci_hcd: release socket [ 2483.013421][ T61] vhci_hcd: disconnect device [ 2484.313071][ T1546] net_ratelimit: 11 callbacks suppressed [ 2484.313088][ T1546] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 2484.795509][ T1563] netlink: 'syz.1.6096': attribute type 1 has an invalid length. [ 2484.878938][ T1563] bond8: entered promiscuous mode [ 2484.882311][ T1563] 8021q: adding VLAN 0 to HW filter on device bond8 [ 2485.071858][ T1564] 8021q: adding VLAN 0 to HW filter on device bond8 [ 2485.076756][ T1564] bond8: (slave gre1): The slave device specified does not support setting the MAC address [ 2485.081272][ T1564] bond8: (slave gre1): Setting fail_over_mac to active for active-backup mode [ 2485.097999][ T1564] bond8: (slave gre1): making interface the new active one [ 2485.100851][ T1564] gre1: entered promiscuous mode [ 2485.106624][ T1564] bond8: (slave gre1): Enslaving as an active interface with an up link [ 2485.857521][T15951] usb 48-1: device descriptor read/8, error -110 [ 2486.248555][T15951] usb usb48-port1: attempt power cycle [ 2486.989279][ T1581] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6090'. [ 2486.993670][ T1581] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6090'. [ 2487.464230][T15951] usb usb48-port1: unable to enumerate USB device [ 2487.656595][ T1588] netlink: 'syz.4.6093': attribute type 12 has an invalid length. [ 2487.759129][ T1581] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6090'. [ 2487.763181][ T1581] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6090'. [ 2487.766981][ T1590] tipc: MTU too low for tipc bearer [ 2488.863701][ T1581] Process accounting resumed [ 2489.312553][ T1611] netlink: 52 bytes leftover after parsing attributes in process `syz.1.6102'. [ 2489.329729][ T1611] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6102'. [ 2490.326903][ T1628] netlink: 'syz.4.6105': attribute type 12 has an invalid length. [ 2491.483972][T30326] hid_parser_main: 65 callbacks suppressed [ 2491.483991][T30326] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 2491.490537][T30326] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 2491.493715][T30326] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 2491.497057][T30326] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 2491.499617][T30326] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 2491.502056][T30326] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 2491.505196][T30326] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 2491.508062][T30326] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 2491.511313][T30326] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 2491.514106][T30326] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 2491.555711][T30326] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.03 Device [syz1] on syz1 [ 2491.987953][ T1669] netlink: 32 bytes leftover after parsing attributes in process `syz.5.6111'. [ 2491.991649][ T1669] netlink: 32 bytes leftover after parsing attributes in process `syz.5.6111'. [ 2492.032736][ T1669] netlink: 32 bytes leftover after parsing attributes in process `syz.5.6111'. [ 2492.036128][ T1669] netlink: 32 bytes leftover after parsing attributes in process `syz.5.6111'. [ 2492.317438][ T1669] netlink: 32 bytes leftover after parsing attributes in process `syz.5.6111'. [ 2492.321544][ T1669] netlink: 32 bytes leftover after parsing attributes in process `syz.5.6111'. [ 2492.594565][ T1673] Process accounting resumed [ 2492.646644][ T1685] netlink: 'syz.1.6117': attribute type 12 has an invalid length. [ 2492.834315][ T1688] netlink: 'syz.5.6118': attribute type 39 has an invalid length. [ 2493.421381][ T1700] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 2493.423608][ T1700] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2493.426908][ T1700] vhci_hcd vhci_hcd.0: Device attached [ 2493.768253][T15951] usb 48-1: SetAddress Request (110) to port 0 [ 2493.771827][T15951] usb 48-1: new SuperSpeed USB device number 110 using vhci_hcd [ 2493.998021][ T1701] vhci_hcd: connection reset by peer [ 2494.008273][T32405] vhci_hcd: stop threads [ 2494.010278][T32405] vhci_hcd: release socket [ 2494.012461][T32405] vhci_hcd: disconnect device [ 2494.352491][T25270] Bluetooth: hci3: unexpected event for opcode 0x0809 [ 2494.357244][T25270] Bluetooth: hci3: unexpected event for opcode 0x0419 [ 2495.980305][ T1721] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 2496.184256][ T1738] netlink: 168 bytes leftover after parsing attributes in process `syz.6.6125'. [ 2496.212823][ T1738] syz.6.6125 (1738): drop_caches: 2 [ 2498.457436][T25270] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 2498.461697][T25270] Bluetooth: hci3: Injecting HCI hardware error event [ 2498.469073][T25270] Bluetooth: hci3: hardware error 0x00 [ 2498.828271][T15951] usb 48-1: device descriptor read/8, error -110 [ 2500.349441][T15951] usb usb48-port1: attempt power cycle [ 2500.507613][T25270] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 2500.800466][ T1775] tipc: Failed to remove unknown binding: 66,1,1/50535899:3453296826/3453296828 [ 2500.806802][ T1775] tipc: Failed to remove unknown binding: 66,1,1/50535899:3453296826/3453296828 [ 2500.819065][ T1775] tipc: Failed to remove unknown binding: 66,1,1/50535899:3453296826/3453296828 [ 2500.893332][ T1779] netlink: 'syz.4.6137': attribute type 12 has an invalid length. [ 2500.944775][T15951] usb usb48-port1: unable to enumerate USB device [ 2501.017910][ T1783] netlink: 'syz.6.6146': attribute type 21 has an invalid length. [ 2502.115203][ T1790] comedi comedi0: Minor 47 could not be opened [ 2502.119702][ T1790] netlink: 'syz.4.6139': attribute type 1 has an invalid length. [ 2502.148224][ T1790] bond5: entered promiscuous mode [ 2502.150166][ T1790] 8021q: adding VLAN 0 to HW filter on device bond5 [ 2502.222477][ T1796] netlink: 'syz.5.6140': attribute type 1 has an invalid length. [ 2504.673309][ T1833] netlink: 'syz.4.6149': attribute type 12 has an invalid length. [ 2506.222161][ T1862] netlink: 52 bytes leftover after parsing attributes in process `syz.4.6155'. [ 2506.267094][ T1862] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6155'. [ 2507.753606][ T1884] overlayfs: failed to clone upperpath [ 2507.810394][ T1880] comedi comedi0: Minor 7 could not be opened [ 2507.935725][ T1886] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 2511.620724][ T1931] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6173'. [ 2512.857254][ T1950] netlink: 'syz.4.6177': attribute type 1 has an invalid length. [ 2513.609074][ T1964] netlink: 'syz.4.6184': attribute type 12 has an invalid length. [ 2513.712936][ T1969] xt_CT: You must specify a L4 protocol and not use inversions on it [ 2514.917888][ T1995] overlayfs: failed to clone upperpath [ 2514.964207][ T40] kauditd_printk_skb: 1 callbacks suppressed [ 2514.964218][ T40] audit: type=1804 audit(2000004845.505:14545): pid=1995 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.6189" name="bus" dev="tmpfs" ino=9085 res=1 errno=0 [ 2515.729245][ T1996] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 2515.731565][ T1996] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2515.734888][ T1996] vhci_hcd vhci_hcd.0: Device attached [ 2515.844473][ T2006] rdma_rxe: rxe_newlink: failed to add syz_tun [ 2516.037417][ T56] usb 46-1: SetAddress Request (118) to port 0 [ 2516.039564][ T56] usb 46-1: new SuperSpeed USB device number 118 using vhci_hcd [ 2516.047258][ T2006] tipc: Resetting bearer [ 2516.721313][ T2002] vhci_hcd: connection reset by peer [ 2516.723594][T32405] vhci_hcd: stop threads [ 2516.725493][T32405] vhci_hcd: release socket [ 2516.727965][T32405] vhci_hcd: disconnect device [ 2516.954603][ T2029] netlink: 'syz.6.6193': attribute type 1 has an invalid length. [ 2519.045451][ T2056] netlink: 'syz.5.6204': attribute type 10 has an invalid length. [ 2519.050001][ T2056] batman_adv: batadv0: Interface deactivated: team0 [ 2521.138107][ T56] usb 46-1: device descriptor read/8, error -110 [ 2521.314158][ T2075] tipc: MTU too low for tipc bearer [ 2521.491295][ T2081] netlink: 'syz.6.6205': attribute type 1 has an invalid length. [ 2521.528851][ T56] usb usb46-port1: attempt power cycle [ 2521.749196][ T2087] netlink: 'syz.4.6209': attribute type 12 has an invalid length. [ 2522.109071][ T56] usb usb46-port1: unable to enumerate USB device [ 2523.875162][ T2119] netlink: 'syz.5.6217': attribute type 12 has an invalid length. [ 2524.787591][ T2136] netlink: 'syz.6.6218': attribute type 1 has an invalid length. [ 2524.906031][ T2138] netlink: 'syz.5.6219': attribute type 12 has an invalid length. [ 2525.549837][ T2146] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6221'. [ 2526.328878][ T2153] kernel profiling enabled (shift: 17) [ 2526.469189][ T2163] tipc: Failed to remove unknown binding: 66,1,1/0:1211776982/1211776984 [ 2526.483106][ T2163] tipc: Failed to remove unknown binding: 66,1,1/0:1211776982/1211776984 [ 2526.486628][ T2163] tipc: Failed to remove unknown binding: 66,1,1/0:1211776982/1211776984 [ 2526.645354][ T2163] loop2: detected capacity change from 0 to 7 [ 2526.665664][ C2] blk_print_req_error: 138 callbacks suppressed [ 2526.665682][ C2] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2526.672643][ C2] buffer_io_error: 7 callbacks suppressed [ 2526.672656][ C2] Buffer I/O error on dev loop2, logical block 0, async page read [ 2526.679270][ C2] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2526.683186][ C2] Buffer I/O error on dev loop2, logical block 0, async page read [ 2526.686049][ C2] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2526.689132][ C2] Buffer I/O error on dev loop2, logical block 0, async page read [ 2526.699333][ C2] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2526.702620][ C2] Buffer I/O error on dev loop2, logical block 0, async page read [ 2526.714335][ C2] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2526.718468][ C2] Buffer I/O error on dev loop2, logical block 0, async page read [ 2526.724766][ C2] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2526.725534][ T2165] comedi comedi0: dt2815: I/O port conflict (0x4f27,2) [ 2526.728921][ C2] Buffer I/O error on dev loop2, logical block 0, async page read [ 2526.739899][ C2] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2526.743129][ C2] Buffer I/O error on dev loop2, logical block 0, async page read [ 2526.746574][ T2163] ldm_validate_partition_table(): Disk read failed. [ 2526.756987][ C2] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2526.761146][ C2] Buffer I/O error on dev loop2, logical block 0, async page read [ 2526.767279][ C2] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2526.771377][ C2] Buffer I/O error on dev loop2, logical block 0, async page read [ 2526.775511][ C2] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 2526.779895][ C2] Buffer I/O error on dev loop2, logical block 0, async page read [ 2526.827899][ T2163] Dev loop2: unable to read RDB block 0 [ 2526.832277][ T2163] loop2: unable to read partition table [ 2526.834279][ T2163] loop2: partition table beyond EOD, truncated [ 2526.837791][ T2163] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 2527.410200][ T2176] netlink: 'syz.5.6228': attribute type 12 has an invalid length. [ 2527.922032][ T2182] comedi comedi0: Minor 7 could not be opened [ 2529.248650][ T2190] netlink: 'syz.1.6231': attribute type 12 has an invalid length. [ 2529.650165][ T2195] netlink: 3 bytes leftover after parsing attributes in process `syz.6.6233'. [ 2529.675695][ T2195] batadv0: entered allmulticast mode [ 2529.950634][ T2198] tipc: MTU too low for tipc bearer [ 2530.883793][ T40] audit: type=1800 audit(2000004861.425:14546): pid=2216 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.6238" name="bus" dev="overlay" ino=3705 res=0 errno=0 [ 2530.902514][ T2215] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6240'. [ 2533.957424][ T2245] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6247'. [ 2534.429483][ T1417] ieee802154 phy0 wpan0: encryption failed: -22 [ 2535.355430][ T2248] netlink: 'syz.4.6244': attribute type 1 has an invalid length. [ 2536.720519][ T2276] can: request_module (can-proto-0) failed. [ 2536.787498][ T2276] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6255'. [ 2537.626220][ T40] audit: type=1804 audit(2000004868.165:14547): pid=2309 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.6256" name="/newroot/683/file0" dev="tmpfs" ino=3776 res=1 errno=0 [ 2537.995405][ T40] audit: type=1804 audit(2000004868.515:14548): pid=2310 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.6259" name="/newroot/682/bus/bus" dev="overlay" ino=3745 res=1 errno=0 [ 2538.003069][ T40] audit: type=1804 audit(2000004868.525:14549): pid=2310 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.6259" name="/newroot/682/bus/bus" dev="overlay" ino=3745 res=1 errno=0 [ 2538.010300][ T40] audit: type=1800 audit(2000004868.525:14550): pid=2310 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.6259" name="bus" dev="overlay" ino=3745 res=0 errno=0 [ 2538.648131][ T2318] tipc: MTU too low for tipc bearer [ 2541.174427][ T2353] netlink: 'syz.5.6281': attribute type 12 has an invalid length. [ 2542.589819][ T40] audit: type=1800 audit(2000004872.945:14551): pid=2370 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.6275" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 2543.660370][ T2379] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 2543.662692][ T2379] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2543.666840][ T2379] vhci_hcd vhci_hcd.0: Device attached [ 2543.947457][T15951] usb 48-1: SetAddress Request (114) to port 0 [ 2543.949596][T15951] usb 48-1: new SuperSpeed USB device number 114 using vhci_hcd [ 2544.008887][ T2385] netlink: 'syz.6.6280': attribute type 4 has an invalid length. [ 2544.103621][ T2380] vhci_hcd: connection reset by peer [ 2544.124413][ T61] vhci_hcd: stop threads [ 2544.126635][ T61] vhci_hcd: release socket [ 2544.129118][ T61] vhci_hcd: disconnect device [ 2546.043313][ T2415] netlink: 'syz.4.6286': attribute type 10 has an invalid length. [ 2547.039694][ T2423] netlink: 'syz.1.6290': attribute type 12 has an invalid length. [ 2548.936143][T25270] block nbd4: Receive control failed (result -32) [ 2548.948101][ T2440] block nbd4: shutting down sockets [ 2549.299112][T15951] usb 48-1: device descriptor read/8, error -110 [ 2549.687886][T15951] usb usb48-port1: attempt power cycle [ 2550.559121][T15951] usb usb48-port1: unable to enumerate USB device [ 2550.876123][ T40] audit: type=1804 audit(2000004881.415:14552): pid=2463 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.6299" name="/newroot/690/bus/bus" dev="overlay" ino=3820 res=1 errno=0 [ 2550.887900][ T40] audit: type=1804 audit(2000004881.435:14553): pid=2463 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.6.6299" name="/newroot/690/bus/bus" dev="overlay" ino=3820 res=1 errno=0 [ 2550.897026][ T40] audit: type=1800 audit(2000004881.435:14554): pid=2463 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.6299" name="bus" dev="overlay" ino=3820 res=0 errno=0 [ 2551.525019][ T2476] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 2551.527196][ T2476] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2551.530956][ T2476] vhci_hcd vhci_hcd.0: Device attached [ 2551.573356][ T2475] netlink: 'syz.1.6300': attribute type 10 has an invalid length. [ 2551.817834][T15951] usb 48-1: SetAddress Request (118) to port 0 [ 2551.827428][T15951] usb 48-1: new SuperSpeed USB device number 118 using vhci_hcd [ 2552.203305][ T2477] vhci_hcd: connection reset by peer [ 2552.207919][ T61] vhci_hcd: stop threads [ 2552.218026][ T61] vhci_hcd: release socket [ 2552.220194][ T61] vhci_hcd: disconnect device [ 2552.527507][ T2486] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6312'. [ 2552.573260][ T2486] overlayfs: missing 'lowerdir' [ 2556.897689][T15951] usb 48-1: device descriptor read/8, error -110 [ 2557.422617][T15951] usb usb48-port1: attempt power cycle [ 2558.414373][ T2562] IPVS: sync thread started: state = BACKUP, mcast_ifn = tunl0, syncid = 4, id = 0 [ 2558.741511][ T2569] netlink: 3 bytes leftover after parsing attributes in process `syz.4.6321'. [ 2558.767895][ T2569] batadv0: entered allmulticast mode [ 2558.777947][T15951] usb usb48-port1: unable to enumerate USB device [ 2558.793585][ T2567] netlink: 'syz.6.6322': attribute type 1 has an invalid length. [ 2559.030571][ T2578] bridge0: port 1(erspan0) entered blocking state [ 2559.038774][ T2578] bridge0: port 1(erspan0) entered disabled state [ 2559.041861][ T2578] erspan0: entered allmulticast mode [ 2559.045695][ T2578] erspan0: entered promiscuous mode [ 2559.131928][ T2578] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6323'. [ 2559.419431][ T2582] bond2: left promiscuous mode [ 2559.426665][ T2582] bond3: left promiscuous mode [ 2559.436988][ T2582] ipip0: left promiscuous mode [ 2559.440257][ T2582] ipip0: left allmulticast mode [ 2559.446229][ T2582] bond5: left promiscuous mode [ 2559.449018][ T2582] gre1: left promiscuous mode [ 2559.462164][ T1142] netdevsim netdevsim5 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 2559.465915][ T1142] netdevsim netdevsim5 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2559.472109][ T1142] netdevsim netdevsim5 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 2559.475749][ T1142] netdevsim netdevsim5 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2559.479572][ T1142] netdevsim netdevsim5 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 2559.483896][ T1142] netdevsim netdevsim5 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2559.503872][ T1142] netdevsim netdevsim5 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 2559.507985][ T1142] netdevsim netdevsim5 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2559.801491][ T2587] can: request_module (can-proto-0) failed. [ 2559.807951][ T2587] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6325'. [ 2559.871455][ T2592] binder: 2586:2592 ioctl 81e8943c 80000500 returned -22 [ 2561.315841][ T2623] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6331'. [ 2563.285635][ T2648] netlink: 'syz.5.6336': attribute type 1 has an invalid length. [ 2563.338412][ T2651] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6337'. [ 2563.886253][ T2662] tipc: MTU too low for tipc bearer [ 2563.997461][ T2665] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 2563.999724][ T2665] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2564.002527][ T2665] vhci_hcd vhci_hcd.0: Device attached [ 2564.267905][T30042] usb 48-1: SetAddress Request (122) to port 0 [ 2564.270822][T30042] usb 48-1: new SuperSpeed USB device number 122 using vhci_hcd [ 2564.367782][ T2680] netlink: 'syz.4.6342': attribute type 12 has an invalid length. [ 2564.954230][ T2666] vhci_hcd: connection reset by peer [ 2564.956998][ T1142] vhci_hcd: stop threads [ 2564.959523][ T1142] vhci_hcd: release socket [ 2564.961470][ T1142] vhci_hcd: disconnect device [ 2565.112925][ T2677] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2565.191097][ T2677] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2565.251992][ T2677] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2565.304285][ T2690] netlink: 20 bytes leftover after parsing attributes in process `syz.6.6344'. [ 2565.312560][ T2677] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2565.427576][ T61] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 2565.431177][ T61] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 2565.468226][ T1142] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 2565.497927][ T61] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 2566.217678][ T2710] netlink: 3 bytes leftover after parsing attributes in process `syz.5.6347'. [ 2566.246371][ T2710] batadv1: entered allmulticast mode [ 2566.564168][ T2713] netlink: 'syz.6.6348': attribute type 1 has an invalid length. [ 2567.098766][T15951] libceph: connect (1)[c::]:6789 error -101 [ 2567.101513][T15951] libceph: mon0 (1)[c::]:6789 connect error [ 2567.369118][T15951] libceph: connect (1)[c::]:6789 error -101 [ 2567.372123][T15951] libceph: mon0 (1)[c::]:6789 connect error [ 2567.809290][ T2738] tipc: MTU too low for tipc bearer [ 2567.847162][ T2725] ceph: No mds server is up or the cluster is laggy [ 2567.886313][T15951] libceph: connect (1)[c::]:6789 error -101 [ 2567.889534][T15951] libceph: mon0 (1)[c::]:6789 connect error [ 2568.515424][ T2756] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6354'. [ 2568.687821][ T2755] wireguard0: entered promiscuous mode [ 2568.690204][ T2755] wireguard0: entered allmulticast mode [ 2568.783827][ T2759] libceph: resolve ' [ 2568.783827][ T2759] -&õÌ×fÍY¹Ç²a×ïÅ2iˆ [ 2568.783827][ T2759] .ÖúÕ?Çý&*»§&' (ret=-3): failed [ 2568.917151][ T2754] wg1: left promiscuous mode [ 2568.919699][ T2754] wg1: left allmulticast mode [ 2569.056993][ T2754] bridge1: left allmulticast mode [ 2569.082059][ T2754] bond1: left promiscuous mode [ 2569.085625][ T2754] bond2: left promiscuous mode [ 2569.091531][ T2754] gretap1: left promiscuous mode [ 2569.094898][ T2754] bond4: left promiscuous mode [ 2569.096599][ T2754] gre1: left promiscuous mode [ 2569.104188][ T2754] geneve2: left promiscuous mode [ 2569.106045][ T2754] geneve2: left allmulticast mode [ 2569.112309][ T2754] bond5: left promiscuous mode [ 2569.207786][ T61] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 2569.212053][ T61] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2569.214820][ T61] netdevsim netdevsim4 eth0: unset [1, 1] type 2 family 0 port 256 - 0 [ 2569.219499][ T61] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 2569.223382][ T61] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2569.229411][ T61] netdevsim netdevsim4 eth1: unset [1, 1] type 2 family 0 port 256 - 0 [ 2569.233092][ T61] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 2569.238106][ T61] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2569.241680][ T61] netdevsim netdevsim4 eth2: unset [1, 1] type 2 family 0 port 256 - 0 [ 2569.245253][ T61] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 2569.251665][ T61] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2569.255958][ T61] netdevsim netdevsim4 eth3: unset [1, 1] type 2 family 0 port 256 - 0 [ 2569.297588][T30042] usb 48-1: device descriptor read/8, error -110 [ 2569.739555][T30042] usb usb48-port1: attempt power cycle [ 2570.331365][T30042] usb usb48-port1: unable to enumerate USB device [ 2571.146225][ T2786] overlay: ./file1 is not a directory [ 2571.653446][ T2775] netlink: 'syz.4.6358': attribute type 10 has an invalid length. [ 2571.656903][ T2775] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6358'. [ 2571.664818][ T2775] team0: Port device geneve0 added [ 2571.667249][ T61] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2571.671060][ T61] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2571.674781][ T61] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2571.679115][ T61] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2572.688473][ T2805] netlink: 'syz.5.6360': attribute type 1 has an invalid length. [ 2576.616219][ T2840] netlink: 'syz.6.6371': attribute type 4 has an invalid length. [ 2576.860731][ T2850] netlink: 'syz.4.6373': attribute type 12 has an invalid length. [ 2579.930107][ T2883] netlink: 'syz.5.6377': attribute type 1 has an invalid length. [ 2579.936865][ T2884] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(5) [ 2579.939779][ T2884] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2579.946842][ T2884] vhci_hcd vhci_hcd.0: Device attached [ 2580.324367][T30042] usb 50-1: SetAddress Request (98) to port 0 [ 2580.326529][T30042] usb 50-1: new SuperSpeed USB device number 98 using vhci_hcd [ 2580.497646][ T2885] vhci_hcd: connection reset by peer [ 2580.500647][ T1142] vhci_hcd: stop threads [ 2580.503042][ T1142] vhci_hcd: release socket [ 2580.505356][ T1142] vhci_hcd: disconnect device [ 2581.097607][ T40] audit: type=1804 audit(2000004911.645:14555): pid=2898 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.6381" name="file0" dev="tmpfs" ino=9366 res=1 errno=0 [ 2582.681337][ T2921] netlink: 'syz.5.6385': attribute type 12 has an invalid length. [ 2584.564440][ T2932] 9pnet_fd: Insufficient options for proto=fd [ 2585.377630][T30042] usb 50-1: device descriptor read/8, error -110 [ 2585.778398][T30042] usb usb50-port1: attempt power cycle [ 2585.862172][ T2964] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 2585.864374][ T2964] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2585.867590][ T2964] vhci_hcd vhci_hcd.0: Device attached [ 2586.148054][T15951] usb 48-1: SetAddress Request (126) to port 0 [ 2586.150861][T15951] usb 48-1: new SuperSpeed USB device number 126 using vhci_hcd [ 2586.573275][ T2984] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2586.593817][ T2965] vhci_hcd: connection reset by peer [ 2586.596668][T20337] vhci_hcd: stop threads [ 2586.598789][T20337] vhci_hcd: release socket [ 2586.601123][T20337] vhci_hcd: disconnect device [ 2586.626741][T30042] usb usb50-port1: unable to enumerate USB device [ 2586.653607][ T2984] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2586.740103][ T2984] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2586.832114][ T2984] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2586.932438][ T1142] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2586.939016][ T2988] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6403'. [ 2586.945702][ T1142] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2587.038259][T20337] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2587.077600][T20337] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2587.845111][ T3006] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(5) [ 2587.847815][ T3006] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2587.851794][ T3006] vhci_hcd vhci_hcd.0: Device attached [ 2588.153685][T30042] usb 50-1: SetAddress Request (102) to port 0 [ 2588.155890][T30042] usb 50-1: new SuperSpeed USB device number 102 using vhci_hcd [ 2589.090564][ T40] audit: type=1804 audit(2000004919.635:14556): pid=3017 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.6399" name="/newroot/715/file0" dev="tmpfs" ino=3919 res=1 errno=0 [ 2589.135199][ T3007] vhci_hcd: connection reset by peer [ 2589.138518][T20337] vhci_hcd: stop threads [ 2589.140408][T20337] vhci_hcd: release socket [ 2589.142444][T20337] vhci_hcd: disconnect device [ 2591.227566][T15951] usb 48-1: device descriptor read/8, error -110 [ 2591.388477][ T3042] tipc: Started in network mode [ 2591.390297][ T3042] tipc: Node identity 080211000001, cluster identity 4711 [ 2591.393447][ T3042] tipc: Enabled bearer , priority 0 [ 2591.399874][ T3042] mac80211_hwsim hwsim22 syzkaller0: entered promiscuous mode [ 2591.402992][ T3042] mac80211_hwsim hwsim22 syzkaller0: entered allmulticast mode [ 2591.422984][ T3042] tipc: Resetting bearer [ 2592.244492][T15951] usb usb48-port1: attempt power cycle [ 2592.397418][T30326] tipc: Node number set to 134418688 [ 2592.818119][T15951] usb usb48-port1: unable to enumerate USB device [ 2593.217579][T30042] usb 50-1: device descriptor read/8, error -110 [ 2593.511359][ T3056] netlink: 3 bytes leftover after parsing attributes in process `syz.1.6406'. [ 2593.545409][ T3056] batadv2: entered allmulticast mode [ 2593.618507][T30042] usb usb50-port1: attempt power cycle [ 2594.177385][ T3064] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 2594.180101][ T3064] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2594.188039][T30042] usb usb50-port1: unable to enumerate USB device [ 2594.200693][ T3064] vhci_hcd vhci_hcd.0: Device attached [ 2594.378512][ T3069] netlink: 'syz.5.6411': attribute type 1 has an invalid length. [ 2594.487460][T30042] usb 46-1: SetAddress Request (122) to port 0 [ 2594.490124][T30042] usb 46-1: new SuperSpeed USB device number 122 using vhci_hcd [ 2594.580444][ T3065] vhci_hcd: connection reset by peer [ 2594.582790][T20337] vhci_hcd: stop threads [ 2594.584542][T20337] vhci_hcd: release socket [ 2594.586377][T20337] vhci_hcd: disconnect device [ 2595.439051][ T3082] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 2595.441533][ T3082] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2595.445195][ T3082] vhci_hcd vhci_hcd.0: Device attached [ 2595.652166][ T3085] ubi: mtd0 is already attached to ubi8 [ 2595.760998][T15951] usb 48-1: SetAddress Request (4) to port 0 [ 2595.763241][T15951] usb 48-1: new SuperSpeed USB device number 4 using vhci_hcd [ 2595.859842][ T1417] ieee802154 phy0 wpan0: encryption failed: -22 [ 2596.039254][ T3083] vhci_hcd: connection reset by peer [ 2596.043754][T31400] vhci_hcd: stop threads [ 2596.045707][T31400] vhci_hcd: release socket [ 2596.047876][T31400] vhci_hcd: disconnect device [ 2597.191150][ T3104] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6420'. [ 2597.296557][ T3102] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 2597.299539][ T3102] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2597.304279][ T3102] vhci_hcd vhci_hcd.0: Device attached [ 2599.157509][ T3107] vhci_hcd: connection closed [ 2599.158256][ T1142] vhci_hcd: stop threads [ 2599.177747][ T1142] vhci_hcd: release socket [ 2599.180423][ T1142] vhci_hcd: disconnect device [ 2599.545013][ T3124] netlink: 'syz.4.6423': attribute type 4 has an invalid length. [ 2599.594626][T30042] usb 46-1: device descriptor read/8, error -110 [ 2599.773082][ T3126] netlink: 3 bytes leftover after parsing attributes in process `syz.1.6422'. [ 2599.806352][ T3126] batadv2: entered allmulticast mode [ 2600.039822][T30042] usb usb46-port1: attempt power cycle [ 2600.853011][T15951] usb 48-1: device descriptor read/8, error -110 [ 2601.238048][T30042] usb usb46-port1: unable to enumerate USB device [ 2601.350842][ T3135] tipc: MTU too low for tipc bearer [ 2601.358403][T15951] usb usb48-port1: attempt power cycle [ 2601.941182][T15951] usb usb48-port1: unable to enumerate USB device [ 2601.965693][ T3146] 9pnet_fd: Insufficient options for proto=fd [ 2603.861028][ T3169] tipc: MTU too low for tipc bearer [ 2603.972495][ T3163] Device name cannot be null; rc = [-22] [ 2604.631017][ T3176] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6435'. [ 2605.285907][T20337] Bluetooth: Error in BCSP hdr checksum [ 2605.398184][ T3211] input: syz0 as /devices/virtual/input/input38 [ 2605.722321][T20337] Bluetooth: Error in BCSP hdr checksum [ 2606.977433][ T1752] Bluetooth: hci0: command 0x1003 tx timeout [ 2606.979925][T25270] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 2607.716962][ T3252] overlayfs: failed to clone upperpath [ 2608.609849][ T3264] Device name cannot be null; rc = [-22] [ 2609.769767][ T3280] tmpfs: Bad value for 'mpol' [ 2609.783584][ T3280] bond0: (slave bond_slave_1): Releasing backup interface [ 2610.138211][ T3285] tipc: MTU too low for tipc bearer [ 2610.367498][ T2100] usb 10-1: new full-speed USB device number 8 using dummy_hcd [ 2611.460840][ T2100] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2611.464969][ T2100] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2611.469714][ T2100] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2611.473809][ T2100] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2611.691133][ T2100] usb 10-1: usb_control_msg returned -32 [ 2611.693953][ T2100] usbtmc 10-1:16.0: can't read capabilities [ 2611.700857][ T3298] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6455'. [ 2611.737503][ T3298] wireguard0: entered promiscuous mode [ 2611.740026][ T3298] wireguard0: entered allmulticast mode [ 2613.741195][ T56] usb 10-1: USB disconnect, device number 8 [ 2613.931234][ T3315] netlink: 'syz.6.6459': attribute type 1 has an invalid length. [ 2614.474033][ T3327] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6461'. [ 2615.145995][ T3340] tipc: MTU too low for tipc bearer [ 2615.787851][ T56] usb 11-1: new full-speed USB device number 4 using dummy_hcd [ 2615.941129][ T56] usb 11-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2615.944444][ T56] usb 11-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2615.949070][ T56] usb 11-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2615.952317][ T56] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2616.172866][ T56] usb 11-1: usb_control_msg returned -32 [ 2616.174905][ T56] usbtmc 11-1:16.0: can't read capabilities [ 2616.249244][ T3366] netlink: 'syz.4.6471': attribute type 1 has an invalid length. [ 2617.760789][ T3380] netlink: 'syz.4.6474': attribute type 1 has an invalid length. [ 2618.568853][ T2100] usb 11-1: USB disconnect, device number 4 [ 2618.789231][ T3391] tipc: MTU too low for tipc bearer [ 2619.891248][ T3402] tipc: MTU too low for tipc bearer [ 2623.218730][ T3431] netlink: 'syz.1.6482': attribute type 1 has an invalid length. [ 2624.176079][ T3442] tipc: MTU too low for tipc bearer [ 2624.368218][ T3445] tipc: MTU too low for tipc bearer [ 2624.793296][ T3457] netlink: 'syz.5.6499': attribute type 1 has an invalid length. [ 2625.624458][ T3469] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6493'. [ 2625.642403][ T3469] wireguard0: entered promiscuous mode [ 2625.644838][ T3469] wireguard0: entered allmulticast mode [ 2625.738075][ T3468] tipc: MTU too low for tipc bearer [ 2627.112208][ T3484] netlink: 'syz.5.6497': attribute type 10 has an invalid length. [ 2627.115708][ T3484] netlink: 40 bytes leftover after parsing attributes in process `syz.5.6497'. [ 2627.190444][ T3484] team0: Port device geneve0 added [ 2627.195982][ T61] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2627.208910][ T61] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2627.216940][ T61] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2627.223006][ T61] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2629.070441][ T3515] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2629.134248][ T3515] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2629.265792][ T3515] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2629.346755][ T3515] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2629.485683][T20337] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2629.508968][T20337] Bluetooth: Error in BCSP hdr checksum [ 2629.529014][ T95] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2629.547110][ T3521] netlink: 'syz.6.6506': attribute type 1 has an invalid length. [ 2629.559254][T20337] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2629.586940][ T95] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2629.907124][ T3524] tipc: MTU too low for tipc bearer [ 2630.067778][ T3527] tipc: MTU too low for tipc bearer [ 2630.951688][ T3555] netlink: 'syz.1.6514': attribute type 12 has an invalid length. [ 2631.058312][T25270] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 2631.061723][ T1752] Bluetooth: hci0: command 0x1003 tx timeout [ 2631.833101][ T3566] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2631.894621][ T3566] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2632.709530][ T3572] tipc: MTU too low for tipc bearer [ 2632.778857][ T3566] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2633.080221][ T3566] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2633.161027][ T95] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 2633.190286][ T95] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 2633.193833][ T95] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 2633.196552][ T95] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 2633.204724][ T3586] tipc: MTU too low for tipc bearer [ 2633.320599][ T3592] netlink: 'syz.5.6522': attribute type 1 has an invalid length. [ 2633.412482][ T3601] netlink: 'syz.4.6525': attribute type 12 has an invalid length. [ 2634.419835][ T3609] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 2634.422001][ T3609] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2634.425176][ T3609] vhci_hcd vhci_hcd.0: Device attached [ 2634.621263][ T3613] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8) [ 2634.624227][ T3613] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2634.639041][ T3613] vhci_hcd vhci_hcd.0: Device attached [ 2634.689265][ T3613] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6527'. [ 2634.707477][T30042] usb 48-1: SetAddress Request (8) to port 0 [ 2634.709721][T30042] usb 48-1: new SuperSpeed USB device number 8 using vhci_hcd [ 2634.865884][ T3611] vhci_hcd: connection reset by peer [ 2634.868111][T20337] vhci_hcd: stop threads [ 2634.869965][T20337] vhci_hcd: release socket [ 2634.872134][T20337] vhci_hcd: disconnect device [ 2635.107158][ T3625] tipc: MTU too low for tipc bearer [ 2635.107494][T15951] usb 46-1: SetAddress Request (126) to port 0 [ 2635.111688][T15951] usb 46-1: new SuperSpeed USB device number 126 using vhci_hcd [ 2635.254395][ T3627] tipc: MTU too low for tipc bearer [ 2635.313419][ T3614] vhci_hcd: connection reset by peer [ 2635.316210][T20337] vhci_hcd: stop threads [ 2635.318389][T20337] vhci_hcd: release socket [ 2635.320717][T20337] vhci_hcd: disconnect device [ 2635.736051][ T3638] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6533'. [ 2635.801645][ T3640] netlink: 'syz.5.6533': attribute type 4 has an invalid length. [ 2635.804953][ T3640] netlink: 17 bytes leftover after parsing attributes in process `syz.5.6533'. [ 2635.890694][ T3642] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6532'. [ 2635.963669][ T3643] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(5) [ 2635.965856][ T3643] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2635.981885][ T3643] vhci_hcd vhci_hcd.0: Device attached [ 2636.102976][ T3646] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6534'. [ 2636.111246][ T3646] netlink: 'syz.6.6534': attribute type 18 has an invalid length. [ 2636.297507][ T29] usb 50-1: SetAddress Request (106) to port 0 [ 2636.300496][ T29] usb 50-1: new SuperSpeed USB device number 106 using vhci_hcd [ 2636.464884][ T3633] delete_channel: no stack [ 2636.572821][ T3644] vhci_hcd: connection reset by peer [ 2636.574856][ T1142] vhci_hcd: stop threads [ 2636.576610][ T1142] vhci_hcd: release socket [ 2636.580006][ T1142] vhci_hcd: disconnect device [ 2636.778648][ T3650] netlink: 'syz.5.6535': attribute type 12 has an invalid length. [ 2637.654131][ T3666] tipc: MTU too low for tipc bearer [ 2638.261603][ T3672] tipc: MTU too low for tipc bearer [ 2639.459823][ T3689] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 2639.462743][ T3689] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2639.466999][ T3689] vhci_hcd vhci_hcd.0: Device attached [ 2639.687561][ T3694] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6545'. [ 2639.975268][ T3690] vhci_hcd: connection reset by peer [ 2639.977848][ T95] vhci_hcd: stop threads [ 2639.979341][ T95] vhci_hcd: release socket [ 2639.980935][ T95] vhci_hcd: disconnect device [ 2639.980958][T30042] usb 48-1: device descriptor read/8, error -110 [ 2640.177495][T15951] usb 46-1: device descriptor read/8, error -110 [ 2640.373155][T30042] usb usb48-port1: attempt power cycle [ 2640.398994][ T3698] netlink: 'syz.6.6546': attribute type 21 has an invalid length. [ 2640.655269][T15951] usb usb46-port1: attempt power cycle [ 2640.679101][ T3702] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 2640.681316][ T3702] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2640.695715][ T3702] vhci_hcd vhci_hcd.0: Device attached [ 2640.881033][ T3706] tipc: MTU too low for tipc bearer [ 2641.218239][T15951] usb 46-1: SetAddress Request (2) to port 0 [ 2641.221327][T15951] usb 46-1: new SuperSpeed USB device number 2 using vhci_hcd [ 2641.302112][ T3711] netlink: 'syz.5.6549': attribute type 12 has an invalid length. [ 2641.377522][ T29] usb 50-1: device descriptor read/8, error -110 [ 2641.387669][ T3703] vhci_hcd: connection reset by peer [ 2641.389882][ T61] vhci_hcd: stop threads [ 2641.391660][ T61] vhci_hcd: release socket [ 2641.393441][ T61] vhci_hcd: disconnect device [ 2641.428327][T30042] usb usb48-port1: unable to enumerate USB device [ 2641.955317][ T29] usb usb50-port1: attempt power cycle [ 2642.167176][ T3718] wlan0 speed is unknown, defaulting to 1000 [ 2642.208234][ T3718] lo speed is unknown, defaulting to 1000 [ 2642.218489][ T3718] lo speed is unknown, defaulting to 1000 [ 2642.410325][ T3718] lo speed is unknown, defaulting to 1000 [ 2642.970873][ T3725] bridge6: entered promiscuous mode [ 2642.973520][ T3725] bridge6: entered allmulticast mode [ 2643.128431][ T29] usb usb50-port1: unable to enumerate USB device [ 2643.338164][ T3733] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6554'. [ 2643.343904][ T3733] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6554'. [ 2643.528598][ T3740] netlink: 'syz.5.6563': attribute type 12 has an invalid length. [ 2643.671921][ T3746] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(5) [ 2643.674266][ T3746] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2643.685114][ T3746] vhci_hcd vhci_hcd.0: Device attached [ 2644.017776][ T29] usb 50-1: SetAddress Request (110) to port 0 [ 2644.021184][ T29] usb 50-1: new SuperSpeed USB device number 110 using vhci_hcd [ 2645.281449][ T3747] vhci_hcd: connection reset by peer [ 2645.284435][T20337] vhci_hcd: stop threads [ 2645.285989][T20337] vhci_hcd: release socket [ 2645.288307][T20337] vhci_hcd: disconnect device [ 2646.235272][ T3768] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6561'. [ 2646.239229][ T3768] netlink: 'syz.1.6561': attribute type 5 has an invalid length. [ 2646.242606][ T3768] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6561'. [ 2646.267569][T15951] usb 46-1: device descriptor read/8, error -110 [ 2646.468300][ T3778] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(5) [ 2646.471407][ T3778] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2646.485568][ T3778] vhci_hcd vhci_hcd.0: Device attached [ 2646.678427][T15951] usb usb46-port1: unable to enumerate USB device [ 2647.069991][ T3779] vhci_hcd: connection closed [ 2647.072070][T20337] vhci_hcd: stop threads [ 2647.075612][T20337] vhci_hcd: release socket [ 2647.078316][T20337] vhci_hcd: disconnect device [ 2647.179585][ T3793] netlink: 'syz.1.6567': attribute type 12 has an invalid length. [ 2647.287719][ T56] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 2647.727776][ T56] usb 10-1: Using ep0 maxpacket: 32 [ 2647.987742][ T3797] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 2647.990172][ T3797] overlayfs: failed to set xattr on upper [ 2647.992579][ T3797] overlayfs: ...falling back to redirect_dir=nofollow. [ 2647.994965][ T3797] overlayfs: ...falling back to index=off. [ 2647.997434][ T3797] overlayfs: ...falling back to uuid=null. [ 2648.027401][ T56] usb 10-1: config 0 has an invalid interface number: 12 but max is 0 [ 2648.030663][ T56] usb 10-1: config 0 has no interface number 0 [ 2648.032992][ T56] usb 10-1: config 0 interface 12 has no altsetting 0 [ 2648.036716][ T56] usb 10-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 2648.040236][ T56] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2648.042853][ T56] usb 10-1: Product: syz [ 2648.044249][ T56] usb 10-1: Manufacturer: syz [ 2648.046106][ T56] usb 10-1: SerialNumber: syz [ 2648.050142][ T56] usb 10-1: config 0 descriptor?? [ 2648.473148][ T56] f81534 10-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 2648.475740][ T56] f81534 10-1:0.12: f81534_find_config_idx: read failed: -71 [ 2648.478802][ T56] f81534 10-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 2648.481373][ T56] f81534 10-1:0.12: probe with driver f81534 failed with error -71 [ 2648.488479][ T56] usb 10-1: USB disconnect, device number 9 [ 2648.898890][ T3813] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 2648.901086][ T3813] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2648.903925][ T3813] vhci_hcd vhci_hcd.0: Device attached [ 2649.057502][ T29] usb 50-1: device descriptor read/8, error -110 [ 2649.247504][T15951] usb 46-1: SetAddress Request (4) to port 0 [ 2649.249729][T15951] usb 46-1: new SuperSpeed USB device number 4 using vhci_hcd [ 2649.458474][ T29] usb usb50-port1: attempt power cycle [ 2650.484701][ T29] usb usb50-port1: unable to enumerate USB device [ 2650.733007][ T3833] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 2650.735806][ T3833] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2650.768235][ T3833] vhci_hcd vhci_hcd.0: Device attached [ 2651.147001][ T3814] vhci_hcd: connection reset by peer [ 2651.150321][ T61] vhci_hcd: stop threads [ 2651.152026][ T61] vhci_hcd: release socket [ 2651.153966][ T61] vhci_hcd: disconnect device [ 2651.217456][ T29] usb 48-1: SetAddress Request (12) to port 0 [ 2651.219889][ T29] usb 48-1: new SuperSpeed USB device number 12 using vhci_hcd [ 2651.287164][ T3834] vhci_hcd: connection reset by peer [ 2651.290298][ T61] vhci_hcd: stop threads [ 2651.291977][ T61] vhci_hcd: release socket [ 2651.293748][ T61] vhci_hcd: disconnect device [ 2653.152891][ T3864] tipc: MTU too low for tipc bearer [ 2654.391624][T15951] usb 46-1: device descriptor read/8, error -110 [ 2654.778428][T15951] usb usb46-port1: attempt power cycle [ 2655.372360][T15951] usb usb46-port1: unable to enumerate USB device [ 2655.467269][ T3894] tipc: MTU too low for tipc bearer [ 2656.735114][ T29] usb 48-1: device descriptor read/8, error -110 [ 2656.788913][ T3910] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(5) [ 2656.791315][ T3910] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2656.795101][ T3910] vhci_hcd vhci_hcd.0: Device attached [ 2656.968384][ T3911] vhci_hcd: connection closed [ 2657.002893][T32405] vhci_hcd: stop threads [ 2657.006238][T32405] vhci_hcd: release socket [ 2657.007943][T32405] vhci_hcd: disconnect device [ 2657.057441][T15951] usb 50-1: enqueue for inactive port 0 [ 2657.301762][ T1417] ieee802154 phy0 wpan0: encryption failed: -22 [ 2657.855320][ T29] usb usb48-port1: attempt power cycle [ 2658.249966][T15951] usb usb50-port1: attempt power cycle [ 2658.536649][ T3939] tipc: MTU too low for tipc bearer [ 2658.538309][ T29] usb usb48-port1: unable to enumerate USB device [ 2658.818517][T15951] usb usb50-port1: unable to enumerate USB device [ 2659.007787][ T3951] tipc: MTU too low for tipc bearer [ 2659.767771][ T3964] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6610'. [ 2659.770907][ T3964] netlink: 'syz.1.6610': attribute type 18 has an invalid length. [ 2663.478974][ T3997] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(5) [ 2663.478995][ T3997] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2663.479228][ T3997] vhci_hcd vhci_hcd.0: Device attached [ 2663.777594][ T2100] usb 50-1: SetAddress Request (118) to port 0 [ 2663.780358][ T2100] usb 50-1: new SuperSpeed USB device number 118 using vhci_hcd [ 2665.778106][ T3999] vhci_hcd: connection reset by peer [ 2665.780418][T32405] vhci_hcd: stop threads [ 2665.781910][T32405] vhci_hcd: release socket [ 2665.783435][T32405] vhci_hcd: disconnect device [ 2666.020448][ T4018] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6620'. [ 2666.097758][ T4022] netlink: 'syz.4.6620': attribute type 4 has an invalid length. [ 2666.107467][ T4022] netlink: 17 bytes leftover after parsing attributes in process `syz.4.6620'. [ 2667.029734][ T4011] delete_channel: no stack [ 2668.817485][ T2100] usb 50-1: device descriptor read/8, error -110 [ 2669.487913][ T2100] usb usb50-port1: attempt power cycle [ 2669.545352][ T4066] wlan0 speed is unknown, defaulting to 1000 [ 2669.553917][ T4066] lo speed is unknown, defaulting to 1000 [ 2669.562526][ T4066] lo speed is unknown, defaulting to 1000 [ 2669.605738][ T4068] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 2669.608252][ T4068] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2669.613975][ T4068] vhci_hcd vhci_hcd.0: Device attached [ 2669.917477][ T29] usb 46-1: SetAddress Request (8) to port 0 [ 2669.920274][ T29] usb 46-1: new SuperSpeed USB device number 8 using vhci_hcd [ 2669.934341][ T4066] lo speed is unknown, defaulting to 1000 [ 2670.038633][ T4067] netlink: 'syz.1.6636': attribute type 13 has an invalid length. [ 2670.058321][ T2100] usb usb50-port1: unable to enumerate USB device [ 2670.080751][ T4075] netlink: 'syz.5.6637': attribute type 1 has an invalid length. [ 2670.257491][ T4069] vhci_hcd: connection reset by peer [ 2670.266492][ T1142] vhci_hcd: stop threads [ 2670.407760][ T1142] vhci_hcd: release socket [ 2670.409925][ T1142] vhci_hcd: disconnect device [ 2670.576118][ T4067] syz.1.6636: vmalloc error: size 2625536, failed to allocated page array size 5128, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz1,mems_allowed=0-1 [ 2670.584706][ T4067] CPU: 3 UID: 0 PID: 4067 Comm: syz.1.6636 Not tainted syzkaller #0 PREEMPT(full) [ 2670.584732][ T4067] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 2670.584743][ T4067] Call Trace: [ 2670.584750][ T4067] [ 2670.584757][ T4067] dump_stack_lvl+0x16c/0x1f0 [ 2670.584786][ T4067] warn_alloc+0x248/0x3a0 [ 2670.584808][ T4067] ? __pfx_warn_alloc+0x10/0x10 [ 2670.584838][ T4067] ? pfifo_fast_change_tx_queue_len+0x15a/0xb90 [ 2670.584868][ T4067] ? __vmalloc_node_noprof+0xad/0xf0 [ 2670.584899][ T4067] __vmalloc_node_range_noprof+0xfe2/0x1480 [ 2670.584935][ T4067] ? pfifo_fast_change_tx_queue_len+0x15a/0xb90 [ 2670.584969][ T4067] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 2670.585001][ T4067] ? ___kmalloc_large_node+0xed/0x160 [ 2670.585032][ T4067] __kvmalloc_node_noprof+0x431/0x9c0 [ 2670.585054][ T4067] ? pfifo_fast_change_tx_queue_len+0x15a/0xb90 [ 2670.585085][ T4067] ? pfifo_fast_change_tx_queue_len+0x15a/0xb90 [ 2670.585120][ T4067] ? pfifo_fast_change_tx_queue_len+0x15a/0xb90 [ 2670.585148][ T4067] pfifo_fast_change_tx_queue_len+0x15a/0xb90 [ 2670.585179][ T4067] ? __pfx_dev_deactivate_many+0x10/0x10 [ 2670.585198][ T4067] ? ib_device_get_by_netdev+0x1b1/0x520 [ 2670.585217][ T4067] ? vxlan_netdevice_event+0x11f/0x370 [ 2670.585238][ T4067] ? __pfx_ib_device_get_by_netdev+0x10/0x10 [ 2670.585261][ T4067] ? __pfx_pfifo_fast_change_tx_queue_len+0x10/0x10 [ 2670.585288][ T4067] ? dev_deactivate+0x15c/0x1c0 [ 2670.585315][ T4067] ? __pfx_pfifo_fast_change_tx_queue_len+0x10/0x10 [ 2670.585342][ T4067] dev_qdisc_change_tx_queue_len+0x169/0x380 [ 2670.585368][ T4067] netif_change_tx_queue_len+0x1a1/0x1e0 [ 2670.585388][ T4067] ? __pfx_netif_change_tx_queue_len+0x10/0x10 [ 2670.585412][ T4067] ? netif_change_flags+0x10d/0x160 [ 2670.585433][ T4067] do_setlink.constprop.0+0xd00/0x4380 [ 2670.585464][ T4067] ? __pfx_do_setlink.constprop.0+0x10/0x10 [ 2670.585485][ T4067] ? __pfx_bpf_trace_run2+0x10/0x10 [ 2670.585508][ T4067] ? __lock_acquire+0xb8a/0x1c90 [ 2670.585537][ T4067] ? rtnl_newlink+0x600/0x2000 [ 2670.585554][ T4067] ? __bpf_trace_contention_begin+0xc9/0x110 [ 2670.585580][ T4067] ? __pfx___bpf_trace_contention_begin+0x10/0x10 [ 2670.585608][ T4067] ? __mutex_trylock_common+0xe9/0x250 [ 2670.585634][ T4067] ? __pfx___mutex_trylock_common+0x10/0x10 [ 2670.585661][ T4067] ? __pfx___might_resched+0x10/0x10 [ 2670.585684][ T4067] ? rcu_is_watching+0x12/0xc0 [ 2670.585709][ T4067] ? trace_contention_end+0xdd/0x130 [ 2670.585760][ T4067] ? __mutex_lock+0x1c5/0x1060 [ 2670.585785][ T4067] ? __nla_validate_parse+0x600/0x2880 [ 2670.585809][ T4067] ? rcu_is_watching+0x12/0xc0 [ 2670.585831][ T4067] ? __pfx___mutex_lock+0x10/0x10 [ 2670.585873][ T4067] rtnl_newlink+0x18e0/0x2000 [ 2670.585902][ T4067] ? __pfx_rtnl_newlink+0x10/0x10 [ 2670.585927][ T4067] ? kmem_cache_free+0x2d4/0x6c0 [ 2670.585946][ T4067] ? kfree_skbmem+0x1a4/0x1f0 [ 2670.585975][ T4067] ? kfree_skbmem+0x1a4/0x1f0 [ 2670.586003][ T4067] ? __lock_acquire+0x622/0x1c90 [ 2670.586030][ T4067] ? rcu_is_watching+0x12/0xc0 [ 2670.586060][ T4067] ? find_held_lock+0x2b/0x80 [ 2670.586077][ T4067] ? __pfx_rtnl_newlink+0x10/0x10 [ 2670.586096][ T4067] ? __pfx_rtnl_newlink+0x10/0x10 [ 2670.586114][ T4067] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 2670.586135][ T4067] ? __pfx_rtnl_newlink+0x10/0x10 [ 2670.586156][ T4067] rtnetlink_rcv_msg+0x95e/0xe90 [ 2670.586179][ T4067] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 2670.586207][ T4067] ? ref_tracker_free+0x37c/0x830 [ 2670.586228][ T4067] netlink_rcv_skb+0x158/0x420 [ 2670.586249][ T4067] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 2670.586272][ T4067] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 2670.586303][ T4067] ? netlink_deliver_tap+0x1ae/0xd30 [ 2670.586328][ T4067] netlink_unicast+0x5aa/0x870 [ 2670.586353][ T4067] ? __pfx_netlink_unicast+0x10/0x10 [ 2670.586385][ T4067] netlink_sendmsg+0x8c8/0xdd0 [ 2670.586411][ T4067] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2670.586436][ T4067] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 2670.586468][ T4067] ____sys_sendmsg+0xa98/0xc70 [ 2670.586496][ T4067] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2670.586534][ T4067] ? get_compat_msghdr+0x11a/0x170 [ 2670.586558][ T4067] ? __pfx_futex_wake_mark+0x10/0x10 [ 2670.586607][ T4067] ___sys_sendmsg+0x134/0x1d0 [ 2670.586629][ T4067] ? __pfx____sys_sendmsg+0x10/0x10 [ 2670.586662][ T4067] ? find_held_lock+0x2b/0x80 [ 2670.586706][ T4067] __sys_sendmsg+0x16d/0x220 [ 2670.586727][ T4067] ? __pfx___sys_sendmsg+0x10/0x10 [ 2670.586745][ T4067] ? __ia32_sys_futex_time32+0x1d9/0x460 [ 2670.586786][ T4067] ? rcu_is_watching+0x12/0xc0 [ 2670.586810][ T4067] __do_fast_syscall_32+0x7c/0x300 [ 2670.586838][ T4067] do_fast_syscall_32+0x32/0x80 [ 2670.586863][ T4067] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2670.586885][ T4067] RIP: 0023:0xf7fa7579 [ 2670.586901][ T4067] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 2670.586919][ T4067] RSP: 002b:00000000f547555c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 2670.586937][ T4067] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000180 [ 2670.586948][ T4067] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2670.586959][ T4067] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2670.586970][ T4067] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 2670.586982][ T4067] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2670.587011][ T4067] [ 2670.587033][ T4067] Mem-Info: [ 2670.615228][ T4081] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(5) [ 2670.624174][ T4067] active_anon:11962 inactive_anon:1588 isolated_anon:6 [ 2670.624174][ T4067] active_file:2705 inactive_file:2316 isolated_file:1 [ 2670.624174][ T4067] unevictable:1769 dirty:780 writeback:0 [ 2670.624174][ T4067] slab_reclaimable:7316 slab_unreclaimable:81023 [ 2670.624174][ T4067] mapped:35925 shmem:13239 pagetables:1958 [ 2670.624174][ T4067] sec_pagetables:350 bounce:0 [ 2670.624174][ T4067] kernel_misc_reclaimable:0 [ 2670.624174][ T4067] free:41265 free_pcp:711 free_cma:0 [ 2670.625570][ T4081] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2670.629307][ T4067] Node 0 active_anon:1136kB inactive_anon:560kB active_file:4260kB inactive_file:228kB unevictable:3540kB isolated(anon):0kB isolated(file):0kB mapped:2272kB dirty:1256kB writeback:0kB shmem:17356kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7440kB pagetables:1588kB sec_pagetables:1220kB all_unreclaimable? yes Balloon:0kB [ 2670.717584][ T4081] vhci_hcd vhci_hcd.0: Device attached [ 2670.719555][ T4067] Node 1 active_anon:46392kB inactive_anon:5788kB active_file:6568kB inactive_file:9036kB unevictable:3536kB isolated(anon):524kB isolated(file):4kB mapped:144908kB dirty:1864kB writeback:0kB shmem:35676kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8344kB pagetables:6208kB sec_pagetables:180kB all_unreclaimable? no Balloon:0kB [ 2670.856227][ T4067] Node 0 DMA free:2120kB boost:0kB min:760kB low:948kB high:1136kB reserved_highatomic:0KB free_highatomic:0KB active_anon:32kB inactive_anon:0kB active_file:76kB inactive_file:0kB unevictable:0kB writepending:4kB zspages:24kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2670.869889][ T4067] lowmem_reserve[]: 0 294 294 294 294 [ 2670.872313][ T4067] Node 0 DMA32 free:17972kB boost:2048kB min:15496kB low:18856kB high:22216kB reserved_highatomic:0KB free_highatomic:0KB active_anon:1104kB inactive_anon:560kB active_file:4184kB inactive_file:228kB unevictable:3540kB writepending:1252kB zspages:1708kB present:1032196kB managed:301132kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2670.886939][ T4067] lowmem_reserve[]: 0 0 0 0 0 [ 2670.889762][ T4067] Node 1 DMA32 free:147104kB boost:0kB min:47144kB low:58928kB high:70712kB reserved_highatomic:0KB free_highatomic:0KB active_anon:45720kB inactive_anon:5576kB active_file:6568kB inactive_file:9020kB unevictable:3536kB writepending:1864kB zspages:4680kB present:1048432kB managed:948220kB mlocked:0kB bounce:0kB free_pcp:2100kB local_pcp:0kB free_cma:0kB [ 2670.904769][ T4067] lowmem_reserve[]: 0 0 0 0 0 [ 2670.907035][ T4067] Node 0 DMA: 4*4kB (UM) 15*8kB (U) 8*16kB (UM) 4*32kB (U) 1*64kB (M) 1*128kB (M) 0*256kB 1*512kB (M) 1*1024kB (M) 0*2048kB 0*4096kB = 2120kB [ 2670.913592][ T4067] Node 0 DMA32: 571*4kB (UME) 185*8kB (UME) 108*16kB (UME) 108*32kB (UME) 41*64kB (UME) 24*128kB (UME) 7*256kB (ME) 3*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 17972kB [ 2670.920968][ T4067] Node 1 DMA32: 83*4kB (UME) 216*8kB (ME) 208*16kB (ME) 180*32kB (UME) 190*64kB (UME) 166*128kB (UME) 134*256kB (UME) 61*512kB (UME) 34*1024kB (UM) 1*2048kB (M) 0*4096kB = 146956kB [ 2670.929112][ T4067] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2670.933408][ T4067] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2670.938408][ T4067] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2670.942612][ T4067] Node 1 hugepages_total=4 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 2670.946795][ T4067] 18581 total pagecache pages [ 2670.949943][ T4067] 1486 pages in swap cache [ 2670.952107][ T4067] Free swap = 37196kB [ 2670.953946][ T4067] Total swap = 124996kB [ 2670.955799][ T4067] 524155 pages RAM [ 2670.958253][ T4067] 0 pages HighMem/MovableOnly [ 2670.960481][ T4067] 207977 pages reserved [ 2670.962613][ T4067] 0 pages cma reserved [ 2670.973953][ T4067] syz_tun: refused to change device tx_queue_len [ 2670.977100][ T4067] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 2671.027405][T15951] usb 50-1: SetAddress Request (122) to port 0 [ 2671.029596][T15951] usb 50-1: new SuperSpeed USB device number 122 using vhci_hcd [ 2671.279478][ T4082] vhci_hcd: connection reset by peer [ 2671.281611][ T1142] vhci_hcd: stop threads [ 2671.283059][ T1142] vhci_hcd: release socket [ 2671.284861][ T1142] vhci_hcd: disconnect device [ 2671.652194][ T4093] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 2671.654518][ T4093] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2671.659023][ T4093] vhci_hcd vhci_hcd.0: Device attached [ 2671.683869][ T40] audit: type=1800 audit(2000005002.225:14557): pid=4093 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.6640" name="SYSV00000000" dev="hugetlbfs" ino=33 res=0 errno=0 [ 2672.281797][ T4094] vhci_hcd: connection closed [ 2672.281996][ T1142] vhci_hcd: stop threads [ 2672.285107][ T1142] vhci_hcd: release socket [ 2672.286854][ T1142] vhci_hcd: disconnect device [ 2672.681446][ T4111] tipc: MTU too low for tipc bearer [ 2672.754909][ T4112] tipc: MTU too low for tipc bearer [ 2673.248120][ T4121] tipc: MTU too low for tipc bearer [ 2673.348123][ T4124] netlink: 'syz.1.6647': attribute type 1 has an invalid length. [ 2674.168114][ T4140] xt_CT: You must specify a L4 protocol and not use inversions on it [ 2674.228081][ T4146] tipc: MTU too low for tipc bearer [ 2674.232993][ T4144] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(5) [ 2674.235918][ T4144] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2674.240375][ T4144] vhci_hcd vhci_hcd.0: Device attached [ 2674.264982][ T4141] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 2674.279466][ T4141] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 2674.778166][ T4145] vhci_hcd: connection closed [ 2674.778631][ T1142] vhci_hcd: stop threads [ 2674.782044][ T1142] vhci_hcd: release socket [ 2674.783719][ T1142] vhci_hcd: disconnect device [ 2674.977507][ T29] usb 46-1: device descriptor read/8, error -110 [ 2675.368875][ T29] usb usb46-port1: attempt power cycle [ 2675.605229][ T4168] netlink: 'syz.5.6660': attribute type 1 has an invalid length. [ 2675.694794][ T4170] overlay: ./file1 is not a directory [ 2675.938072][ T29] usb usb46-port1: unable to enumerate USB device [ 2676.097450][T15951] usb 50-1: device descriptor read/8, error -110 [ 2676.487943][T15951] usb usb50-port1: attempt power cycle [ 2677.059052][T15951] usb usb50-port1: unable to enumerate USB device [ 2677.846471][ T4195] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 2677.847183][ T4202] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 2677.849199][ T4195] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2677.852089][ T4202] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2677.856049][ T4195] vhci_hcd vhci_hcd.0: Device attached [ 2677.874645][ T4202] vhci_hcd vhci_hcd.0: Device attached [ 2677.974125][ T4208] tipc: MTU too low for tipc bearer [ 2678.078652][ T4209] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6668'. [ 2678.137626][ T29] usb 48-1: SetAddress Request (16) to port 0 [ 2678.139868][ T29] usb 48-1: new SuperSpeed USB device number 16 using vhci_hcd [ 2678.187498][T15174] usb 46-1: SetAddress Request (12) to port 0 [ 2678.190146][T15174] usb 46-1: new SuperSpeed USB device number 12 using vhci_hcd [ 2678.329864][ T4215] netlink: 'syz.6.6673': attribute type 1 has an invalid length. [ 2678.716278][ T4204] vhci_hcd: connection reset by peer [ 2678.718855][ T61] vhci_hcd: stop threads [ 2678.720656][ T61] vhci_hcd: release socket [ 2678.722669][ T61] vhci_hcd: disconnect device [ 2679.259781][ T4203] vhci_hcd: connection reset by peer [ 2679.267456][ T1142] vhci_hcd: stop threads [ 2679.277890][ T1142] vhci_hcd: release socket [ 2679.279594][ T1142] vhci_hcd: disconnect device [ 2679.545684][ T4228] overlayfs: failed to clone upperpath [ 2680.550434][ T4232] netlink: 'syz.1.6677': attribute type 1 has an invalid length. [ 2681.472589][ T4250] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6681'. [ 2681.944210][ T4254] qnx6: unable to read the first superblock [ 2682.668472][ T4263] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 2682.671398][ T4263] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2682.675823][ T4263] vhci_hcd vhci_hcd.0: Device attached [ 2682.990739][ T4264] vhci_hcd: connection closed [ 2682.991042][ T61] vhci_hcd: stop threads [ 2682.995448][ T61] vhci_hcd: release socket [ 2682.999137][ T61] vhci_hcd: disconnect device [ 2683.289592][ T29] usb 48-1: device descriptor read/8, error -110 [ 2683.298086][ T4273] netlink: 'syz.1.6690': attribute type 1 has an invalid length. [ 2683.307486][T15174] usb 46-1: device descriptor read/8, error -110 [ 2683.521713][ T4278] tipc: MTU too low for tipc bearer [ 2683.612120][ T4286] netlink: 'syz.1.6692': attribute type 12 has an invalid length. [ 2683.819319][ T29] usb usb48-port1: attempt power cycle [ 2684.209836][ T4298] netlink: 'syz.5.6696': attribute type 12 has an invalid length. [ 2684.228912][T15174] usb usb46-port1: attempt power cycle [ 2684.388057][ T29] usb usb48-port1: unable to enumerate USB device [ 2684.808339][T15174] usb usb46-port1: unable to enumerate USB device [ 2685.017673][ T4315] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(3) [ 2685.020571][ T4315] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 2685.029109][ T4315] vhci_hcd vhci_hcd.0: Device attached [ 2685.207631][T15174] vhci_hcd: vhci_device speed not set [ 2685.277439][T15174] usb 49-1: new full-speed USB device number 12 using vhci_hcd [ 2685.299528][ T4321] tipc: MTU too low for tipc bearer [ 2685.420959][ T4316] vhci_hcd: connection reset by peer [ 2685.423058][T14539] vhci_hcd: stop threads [ 2685.424520][T14539] vhci_hcd: release socket [ 2685.426209][T14539] vhci_hcd: disconnect device [ 2685.548804][ T4325] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6700'. [ 2685.664681][ T4330] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 2685.667455][ T4330] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2685.689988][ T4330] vhci_hcd vhci_hcd.0: Device attached [ 2686.087825][T30042] usb 46-1: SetAddress Request (16) to port 0 [ 2686.090748][T30042] usb 46-1: new SuperSpeed USB device number 16 using vhci_hcd [ 2686.310990][ T4331] vhci_hcd: connection reset by peer [ 2686.313722][ T61] vhci_hcd: stop threads [ 2686.315618][ T61] vhci_hcd: release socket [ 2686.318431][ T61] vhci_hcd: disconnect device [ 2686.555056][ T61] smc: removing ib device syz2 [ 2686.711654][ T4345] /dev/sr0: Can't lookup blockdev [ 2687.088039][ T4338] netlink: 'syz.6.6705': attribute type 12 has an invalid length. [ 2687.092122][ T2100] ================================================================== [ 2687.095640][ T2100] BUG: KASAN: slab-use-after-free in __ethtool_get_link_ksettings+0x1bf/0x200 [ 2687.099515][ T2100] Read of size 8 at addr ffff88804aef62e8 by task kworker/2:0/2100 [ 2687.103590][ T2100] [ 2687.105781][ T2100] CPU: 2 UID: 0 PID: 2100 Comm: kworker/2:0 Not tainted syzkaller #0 PREEMPT(full) [ 2687.105803][ T2100] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 2687.105817][ T2100] Workqueue: events smc_ib_port_event_work [ 2687.105845][ T2100] Call Trace: [ 2687.105852][ T2100] [ 2687.105860][ T2100] dump_stack_lvl+0x116/0x1f0 [ 2687.105884][ T2100] print_report+0xcd/0x630 [ 2687.105906][ T2100] ? __virt_addr_valid+0x81/0x610 [ 2687.105930][ T2100] ? __phys_addr+0xe8/0x180 [ 2687.105953][ T2100] ? __ethtool_get_link_ksettings+0x1bf/0x200 [ 2687.105977][ T2100] kasan_report+0xe0/0x110 [ 2687.106001][ T2100] ? __ethtool_get_link_ksettings+0x1bf/0x200 [ 2687.106028][ T2100] __ethtool_get_link_ksettings+0x1bf/0x200 [ 2687.106052][ T2100] __ethtool_get_link_ksettings+0x148/0x200 [ 2687.106077][ T2100] ib_get_eth_speed+0x122/0xb50 [ 2687.106106][ T2100] ? __pfx_ib_get_eth_speed+0x10/0x10 [ 2687.106132][ T2100] ? __pfx___mutex_lock+0x10/0x10 [ 2687.106160][ T2100] ? do_raw_spin_unlock+0x172/0x230 [ 2687.106181][ T2100] rxe_query_port+0x108/0x330 [ 2687.106202][ T2100] ib_query_port+0x441/0x8a0 [ 2687.106229][ T2100] smc_ib_port_event_work+0x12f/0xbf0 [ 2687.106254][ T2100] ? rcu_is_watching+0x12/0xc0 [ 2687.106276][ T2100] process_one_work+0x9cf/0x1b70 [ 2687.106309][ T2100] ? __pfx_process_one_work+0x10/0x10 [ 2687.106339][ T2100] ? assign_work+0x1a0/0x250 [ 2687.106374][ T2100] worker_thread+0x6c8/0xf10 [ 2687.106394][ T2100] ? __kthread_parkme+0x19e/0x250 [ 2687.106415][ T2100] ? __pfx_worker_thread+0x10/0x10 [ 2687.106442][ T2100] kthread+0x3c5/0x780 [ 2687.106466][ T2100] ? __pfx_kthread+0x10/0x10 [ 2687.106492][ T2100] ? rcu_is_watching+0x12/0xc0 [ 2687.106511][ T2100] ? __pfx_kthread+0x10/0x10 [ 2687.106537][ T2100] ret_from_fork+0x675/0x7d0 [ 2687.106562][ T2100] ? __pfx_kthread+0x10/0x10 [ 2687.106587][ T2100] ret_from_fork_asm+0x1a/0x30 [ 2687.106615][ T2100] [ 2687.106621][ T2100] [ 2687.187200][ T2100] Allocated by task 21014: [ 2687.189160][ T2100] kasan_save_stack+0x33/0x60 [ 2687.191234][ T2100] kasan_save_track+0x14/0x30 [ 2687.193293][ T2100] __kasan_kmalloc+0xaa/0xb0 [ 2687.195350][ T2100] __kvmalloc_node_noprof+0x3a3/0x9c0 [ 2687.197719][ T2100] alloc_netdev_mqs+0xd7/0x1550 [ 2687.199848][ T2100] rtnl_create_link+0xc08/0xf90 [ 2687.201742][ T2100] rtnl_newlink+0xb69/0x2000 [ 2687.203701][ T2100] rtnetlink_rcv_msg+0x95e/0xe90 [ 2687.205888][ T2100] netlink_rcv_skb+0x158/0x420 [ 2687.208002][ T2100] netlink_unicast+0x5aa/0x870 [ 2687.210099][ T2100] netlink_sendmsg+0x8c8/0xdd0 [ 2687.212202][ T2100] __sys_sendto+0x4a3/0x520 [ 2687.214214][ T2100] __ia32_compat_sys_socketcall+0x625/0x770 [ 2687.216828][ T2100] __do_fast_syscall_32+0x7c/0x300 [ 2687.219082][ T2100] do_fast_syscall_32+0x32/0x80 [ 2687.221204][ T2100] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2687.223978][ T2100] [ 2687.225046][ T2100] Freed by task 4325: [ 2687.226866][ T2100] kasan_save_stack+0x33/0x60 [ 2687.228847][ T2100] kasan_save_track+0x14/0x30 [ 2687.230974][ T2100] __kasan_save_free_info+0x3b/0x60 [ 2687.233239][ T2100] __kasan_slab_free+0x5f/0x80 [ 2687.235337][ T2100] kfree+0x2b8/0x6d0 [ 2687.237078][ T2100] device_release+0xa4/0x240 [ 2687.239109][ T2100] kobject_put+0x1e7/0x5a0 [ 2687.241061][ T2100] netdev_run_todo+0x7e9/0x1320 [ 2687.243200][ T2100] rtnl_dellink+0x3e4/0xa90 [ 2687.245188][ T2100] rtnetlink_rcv_msg+0x95e/0xe90 [ 2687.247536][ T2100] netlink_rcv_skb+0x158/0x420 [ 2687.249864][ T2100] netlink_unicast+0x5aa/0x870 [ 2687.252115][ T2100] netlink_sendmsg+0x8c8/0xdd0 [ 2687.254303][ T2100] ____sys_sendmsg+0xa98/0xc70 [ 2687.256415][ T2100] ___sys_sendmsg+0x134/0x1d0 [ 2687.258382][ T2100] __sys_sendmsg+0x16d/0x220 [ 2687.260403][ T2100] __do_fast_syscall_32+0x7c/0x300 [ 2687.262654][ T2100] do_fast_syscall_32+0x32/0x80 [ 2687.264786][ T2100] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2687.267563][ T2100] [ 2687.268627][ T2100] The buggy address belongs to the object at ffff88804aef6000 [ 2687.268627][ T2100] which belongs to the cache kmalloc-cg-4k of size 4096 [ 2687.274745][ T2100] The buggy address is located 744 bytes inside of [ 2687.274745][ T2100] freed 4096-byte region [ffff88804aef6000, ffff88804aef7000) [ 2687.280743][ T2100] [ 2687.281869][ T2100] The buggy address belongs to the physical page: [ 2687.284670][ T2100] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x4aef0 [ 2687.288468][ T2100] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 2687.292042][ T2100] memcg:ffff88804b4fcfc1 [ 2687.293903][ T2100] flags: 0x4fff00000000040(head|node=1|zone=1|lastcpupid=0x7ff) [ 2687.297113][ T2100] page_type: f5(slab) [ 2687.298894][ T2100] raw: 04fff00000000040 ffff88801b44c280 dead000000000122 0000000000000000 [ 2687.302628][ T2100] raw: 0000000000000000 0000000000040004 00000000f5000000 ffff88804b4fcfc1 [ 2687.306248][ T2100] head: 04fff00000000040 ffff88801b44c280 dead000000000122 0000000000000000 [ 2687.309989][ T2100] head: 0000000000000000 0000000000040004 00000000f5000000 ffff88804b4fcfc1 [ 2687.313749][ T2100] head: 04fff00000000003 ffffea00012bbc01 00000000ffffffff 00000000ffffffff [ 2687.317448][ T2100] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 2687.321177][ T2100] page dumped because: kasan: bad access detected [ 2687.324005][ T2100] page_owner tracks the page as allocated [ 2687.326481][ T2100] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 21012, tgid 21012 (syz-executor), ts 1408596197704, free_ts 1408356319612 [ 2687.335927][ T2100] post_alloc_hook+0x1af/0x220 [ 2687.338064][ T2100] get_page_from_freelist+0x10a3/0x3a30 [ 2687.340483][ T2100] __alloc_frozen_pages_noprof+0x25f/0x2470 [ 2687.343174][ T2100] alloc_pages_mpol+0x1fb/0x550 [ 2687.345325][ T2100] new_slab+0x24a/0x360 [ 2687.347192][ T2100] ___slab_alloc+0xd79/0x1a50 [ 2687.349272][ T2100] __slab_alloc.constprop.0+0x63/0x110 [ 2687.351689][ T2100] __kmalloc_cache_noprof+0x477/0x780 [ 2687.354079][ T2100] ipv6_add_dev+0x6af/0x15f0 [ 2687.356174][ T2100] addrconf_notify+0x53e/0x19e0 [ 2687.358356][ T2100] notifier_call_chain+0xbc/0x410 [ 2687.360588][ T2100] call_netdevice_notifiers_info+0xbe/0x140 [ 2687.363130][ T2100] register_netdevice+0x182e/0x2270 [ 2687.365406][ T2100] ipvlan_link_new+0x3c3/0xcb0 [ 2687.367516][ T2100] rtnl_newlink+0xc45/0x2000 [ 2687.369569][ T2100] rtnetlink_rcv_msg+0x95e/0xe90 [ 2687.371791][ T2100] page last free pid 21141 tgid 21141 stack trace: [ 2687.374636][ T2100] __free_frozen_pages+0x7df/0x1160 [ 2687.376987][ T2100] __folio_put+0x329/0x450 [ 2687.378996][ T2100] skb_release_data+0x81a/0x9e0 [ 2687.381164][ T2100] kfree_skb_list_reason+0x2c4/0x4c0 [ 2687.383519][ T2100] skb_release_data+0x788/0x9e0 [ 2687.385679][ T2100] sk_skb_reason_drop+0x129/0x1a0 [ 2687.387827][ T2100] kcm_release+0x178/0x740 [ 2687.389783][ T2100] __sock_release+0xb3/0x270 [ 2687.391823][ T2100] sock_close+0x1c/0x30 [ 2687.393671][ T2100] __fput+0x402/0xb70 [ 2687.395452][ T2100] task_work_run+0x150/0x240 [ 2687.397509][ T2100] exit_to_user_mode_loop+0xec/0x130 [ 2687.399858][ T2100] __do_fast_syscall_32+0x240/0x300 [ 2687.402159][ T2100] do_fast_syscall_32+0x32/0x80 [ 2687.404301][ T2100] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2687.407120][ T2100] [ 2687.408195][ T2100] Memory state around the buggy address: [ 2687.410643][ T2100] ffff88804aef6180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2687.414117][ T2100] ffff88804aef6200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2687.417610][ T2100] >ffff88804aef6280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2687.421070][ T2100] ^ [ 2687.424302][ T2100] ffff88804aef6300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2687.427823][ T2100] ffff88804aef6380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2687.431300][ T2100] ================================================================== [ 2687.467955][ T2100] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 2687.471110][ T2100] CPU: 2 UID: 0 PID: 2100 Comm: kworker/2:0 Not tainted syzkaller #0 PREEMPT(full) [ 2687.475061][ T2100] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 2687.479774][ T2100] Workqueue: events smc_ib_port_event_work [ 2687.482435][ T2100] Call Trace: [ 2687.484071][ T2100] [ 2687.485389][ T2100] dump_stack_lvl+0x3d/0x1f0 [ 2687.487482][ T2100] vpanic+0x640/0x6f0 [ 2687.489263][ T2100] panic+0xca/0xd0 [ 2687.490932][ T2100] ? __pfx_panic+0x10/0x10 [ 2687.492906][ T2100] ? __ethtool_get_link_ksettings+0x1bf/0x200 [ 2687.495553][ T2100] ? preempt_schedule_common+0x44/0xc0 [ 2687.497997][ T2100] ? preempt_schedule_thunk+0x16/0x30 [ 2687.500375][ T2100] ? check_panic_on_warn+0x1f/0xb0 [ 2687.502656][ T2100] check_panic_on_warn+0xab/0xb0 [ 2687.504844][ T2100] end_report+0x107/0x170 [ 2687.506798][ T2100] kasan_report+0xee/0x110 [ 2687.508811][ T2100] ? __ethtool_get_link_ksettings+0x1bf/0x200 [ 2687.511232][ T2100] __ethtool_get_link_ksettings+0x1bf/0x200 [ 2687.513865][ T2100] __ethtool_get_link_ksettings+0x148/0x200 [ 2687.516496][ T2100] ib_get_eth_speed+0x122/0xb50 [ 2687.518689][ T2100] ? __pfx_ib_get_eth_speed+0x10/0x10 [ 2687.521094][ T2100] ? __pfx___mutex_lock+0x10/0x10 [ 2687.523372][ T2100] ? do_raw_spin_unlock+0x172/0x230 [ 2687.525698][ T2100] rxe_query_port+0x108/0x330 [ 2687.527816][ T2100] ib_query_port+0x441/0x8a0 [ 2687.529894][ T2100] smc_ib_port_event_work+0x12f/0xbf0 [ 2687.532297][ T2100] ? rcu_is_watching+0x12/0xc0 [ 2687.534452][ T2100] process_one_work+0x9cf/0x1b70 [ 2687.536698][ T2100] ? __pfx_process_one_work+0x10/0x10 [ 2687.539065][ T2100] ? assign_work+0x1a0/0x250 [ 2687.541107][ T2100] worker_thread+0x6c8/0xf10 [ 2687.543158][ T2100] ? __kthread_parkme+0x19e/0x250 [ 2687.545372][ T2100] ? __pfx_worker_thread+0x10/0x10 [ 2687.547615][ T2100] kthread+0x3c5/0x780 [ 2687.549436][ T2100] ? __pfx_kthread+0x10/0x10 [ 2687.551508][ T2100] ? rcu_is_watching+0x12/0xc0 [ 2687.553614][ T2100] ? __pfx_kthread+0x10/0x10 [ 2687.555632][ T2100] ret_from_fork+0x675/0x7d0 [ 2687.557741][ T2100] ? __pfx_kthread+0x10/0x10 [ 2687.559841][ T2100] ret_from_fork_asm+0x1a/0x30 [ 2687.562012][ T2100] [ 2687.564183][ T2100] Kernel Offset: disabled [ 2687.566110][ T2100] Rebooting in 86400 seconds.. VM DIAGNOSIS: 10:08:01 Registers: info registers vcpu 0 CPU#0 RAX=000000000284ff45 RBX=0000000000000000 RCX=ffffffff8b5d92a9 RDX=0000000000000000 RSI=ffffffff8da2917b RDI=ffffffff8bf078c0 RBP=fffffbfff1c12f40 RSP=ffffffff8e007df8 R8 =0000000000000001 R9 =ffffed1005646655 R10=ffff88802b2332ab R11=0000000000000001 R12=0000000000000000 R13=ffffffff8e097a00 R14=ffffffff90824ad0 R15=0000000000000000 RIP=ffffffff8b5d7d5f RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88809780d000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f7389154 CR3=0000000055463000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=000000000000000e DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 EAX=f6a14fe8 EBX=ffffffff ECX=00000000 EDX=892524cc ESI=89252433 EDI=ffffffff EBP=f6a12500 ESP=fff375a0 EIP=f70d7f31 EFL=00000297 [--S-APC] CPL=3 II=0 A20=1 SMM=0 HLT=0 ES =002b 00000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0023 00000000 ffffffff 00c0fb00 DPL=3 CS32 [-RA] SS =002b 00000000 ffffffff 00c0f300 DPL=3 DS [-WA] DS =002b 00000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 00000000 ffffffff 00c00000 GS =0063 57e4a440 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 00000000 ffffffff 00c00000 TR =0040 0004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000306dfff8 CR3=000000006ea2f000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=000000000000000e DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000037 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85269d55 RDI=ffffffff9adc5de0 RBP=ffffffff9adc5da0 RSP=ffffc90003087430 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000030313254 R12=0000000000000000 R13=0000000000000037 R14=ffffffff9adc5da0 R15=ffffffff85269cf0 RIP=ffffffff85269d7f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888097a0d000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000002de05ff8 CR3=0000000049607000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000000 RBX=ffff88802b442540 RCX=ffffffff81b05361 RDX=ffff88805aee0000 RSI=ffffffff81b0533b RDI=0000000000000005 RBP=0000000000000003 RSP=ffffc90006c87280 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001 R12=dffffc0000000000 R13=ffffed10056884a9 R14=0000000000000001 R15=0000000000000002 RIP=ffffffff81b0533d RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888097b0d000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f5873577 CR3=000000000e182000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000001 Opmask01=0000000000000001 Opmask02=0000000060000000 Opmask03=0000000000000000 Opmask04=00000000dfffffff Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffdeb3ca62b 00007ffdeb3ca62b ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffdeb3cab30 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffdeb3cab30 0000003000000018 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7274735f64656570 7320293628646565 7073202930286469 766564203a302e00 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7274735564656570 7320233622646565 7073202330226463 7665642030302400 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6f6f746874655f5f 206e692065657266 2d72657466612d65 73752d62616c7320 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 303d6f6e72726520 303d736572203333 3d6f6e6920227366 626c746567756822 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3d76656420223030 3030303030305653 5953223d656d616e 2022303436362e34 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2e7a7973223d6d6d 6f632064656c6961 663d657375616320 617461645f746365 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6c6c6f633d706f20 64656e69666e6f63 6e753d6a62757320 3539323736393439 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7365727020426b30 3836343a73656761 70737a20426b3436 38313a676e69646e ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000