last executing test programs: 10m11.026018358s ago: executing program 32 (id=1925): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000040)={0x7}, 0x4) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f0000000180)="b1", 0x1, 0x2004c850, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback={0xa00}, 0xffffffff}, 0x1c) 9m11.953880957s ago: executing program 33 (id=2146): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYRESDEC=r0], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0xa}, [@call={0x85, 0x0, 0x0, 0xbc}, @call={0x85, 0x0, 0x0, 0x2a}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x77) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r1}, 0x18) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x378b5ec3}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0x17}]}}}]}]}], {0x14}}, 0xd0}}, 0x0) 8m42.382669536s ago: executing program 34 (id=2216): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./file0/file1\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@metacopy_on}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@redirect_dir_follow}, {@volatile}, {@default_permissions}]}) r0 = openat2$dir(0xffffff9c, &(0x7f00000000c0)='./file0/file1\x00', &(0x7f0000000140)={0x40, 0x110, 0x2}, 0x18) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000808403df256d24010000000000000001000000fbff"]) close$binfmt(0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) mount$overlay(0x0, &(0x7f0000000040)='./file0/file1\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@metacopy_on}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@redirect_dir_follow}, {@volatile}, {@default_permissions}]}) (async) openat2$dir(0xffffff9c, &(0x7f00000000c0)='./file0/file1\x00', &(0x7f0000000140)={0x40, 0x110, 0x2}, 0x18) (async) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000808403df256d24010000000000000001000000fbff"]) (async) close$binfmt(0xffffffffffffffff) (async) 8m39.919084716s ago: executing program 35 (id=2233): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@ipv6_getaddr={0x2c, 0x16, 0x3c2be10bca706f15, 0x0, 0x0, {0x9}, [@IFA_ADDRESS={0x14, 0x1, @mcast1}]}, 0x2c}, 0x1, 0x1f}, 0x0) 8m19.401967026s ago: executing program 36 (id=2310): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001900)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_KEY={0x4}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x88}, 0x1, 0x0, 0x0, 0x4040054}, 0x0) 8m13.160926533s ago: executing program 37 (id=2348): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NG_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x4000}, @NFTA_NG_MODULUS={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xcc}}, 0x0) 8m12.823735576s ago: executing program 38 (id=2354): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000001c0)={0x5c, 0xa, 0x0, "b75c89e7a20c8eac82ad0416bb1844038d2cd97c945462f31638b5394c00"}) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r1, &(0x7f0000000100)={0x1a, 0x0, 0x0, 0x0, 0x0, 0xf5}, 0x10) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x4, 0x0, 0x0, 0x1000, &(0x7f0000004000/0x1000)=nil}) (async) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r3, 0x4020aed2, &(0x7f0000000000)={0x0, 0xe000, 0x8}) (async) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='attr/prev\x00') exit(0xffff) (async) read$FUSE(r4, 0x0, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) (async) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x4, 0x8, 0x1}, 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b7040000dd010000070000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={r9, r6, 0x25, 0x0, @void}, 0x10) (async) syz_emit_ethernet(0x2a, &(0x7f0000001140)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @local, @empty, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @empty}}}}, 0x0) (async) fcntl$getownex(r1, 0x10, &(0x7f0000000080)) (async) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f00000000c0)={0x0, 'veth1_to_batadv\x00', {0x1}, 0x7}) bind$llc(r1, 0x0, 0x0) (async) syz_emit_ethernet(0x60, &(0x7f0000000000)={@broadcast, @multicast, @val={@void, {0x8100, 0x1}}, {@llc_tr={0x11, {@snap={0x1, 0x1, "e00a", "555cc9", 0x6, "7c88c45efb2c4baade7d720a619b3309a357d0512f3317d119c271fc62c3e7c4cbdeb2501f7935bbe403bfabdbd8ce086b6edfadbb52bc6722fc98dca333777b861ac82a44"}}}}}, 0x0) 8m11.95222488s ago: executing program 39 (id=2357): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') pread64(r2, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_open_dev$sndctrl(&(0x7f0000000580), 0x2, 0x141240) recvmmsg(r3, &(0x7f000001ad80)=[{{&(0x7f0000019080)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, &(0x7f000001a380)=[{&(0x7f0000019100)=""/4096, 0x1000}, {&(0x7f000001a100)=""/44, 0x2c}, {&(0x7f000001a140)=""/167, 0xa7}, {0x0}, {&(0x7f000001a300)=""/122, 0x7a}], 0x5, &(0x7f000001a3c0)=""/216, 0xd8}, 0x5}, {{&(0x7f000001a4c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, &(0x7f000001a780)=[{&(0x7f000001a540)=""/131, 0x83}, {&(0x7f000001a600)=""/147, 0x93}, {&(0x7f000001a6c0)=""/135, 0x87}], 0x3, &(0x7f000001a7c0)=""/88, 0x58}, 0xfffff801}, {{&(0x7f000001a840)=@in={0x2, 0x0, @local}, 0x80, &(0x7f000001ac40)=[{&(0x7f000001a8c0)=""/111, 0x6f}, {&(0x7f000001a940)=""/90, 0x5a}, {&(0x7f000001a9c0)=""/145, 0x91}, {&(0x7f000001aa80)=""/33, 0x21}, {&(0x7f000001aac0)=""/83, 0x53}, {&(0x7f000001ab40)=""/219, 0xdb}], 0x6, &(0x7f000001ac80)=""/250, 0xfa}, 0x1}], 0x3, 0x1, &(0x7f000001ae00)) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_GET_TSC_KHZ_cpu(r6, 0xaea3) r7 = socket$alg(0x26, 0x5, 0x0) setsockopt$SO_TIMESTAMP(r7, 0x1, 0x1d, &(0x7f0000000380), 0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000900)={'bridge0\x00', @random="000000000100"}) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0xd) r9 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0xfffffffc}, 0x10) setsockopt$packet_tx_ring(r9, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2, 0x4}, 0x10) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$tipc(&(0x7f0000001ec0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r10, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001f00)={0x30, r11, 0x1, 0x0, 0x0, {{}, {}, {0x14, 0x19, {0x80000000, 0x1, 0x1, 0x5}}}}, 0x30}}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000400)) 8m2.810064342s ago: executing program 40 (id=2368): r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='smaps_rollup\x00') read$FUSE(r1, &(0x7f00000003c0)={0x2020}, 0xd5b) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000a40)={0x30, r2, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc}]}]}, 0x30}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000030000000400010005"], 0x48) close(0x3) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0e00000004000000040100000a"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000007200000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r5, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r6, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r5, 0x3b89, &(0x7f00000002c0)={0x28, 0x300, r7, r6, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_UNMAP(r1, 0x3b86, &(0x7f0000000200)={0x18, r6, 0x2, 0x8}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_OPER(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="010026bd7000ffdbdf25990b000008000300", @ANYRES32=r11], 0x1c}, 0x1, 0x0, 0x0, 0x4000040}, 0x800) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r4}, 0x10) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) r13 = syz_open_dev$video(&(0x7f0000000b40), 0x7, 0x20000) preadv(r13, &(0x7f0000001200)=[{&(0x7f0000000040)=""/113, 0x71}], 0x1, 0x4, 0xb) r14 = syz_open_dev$vim2m(&(0x7f0000000100), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r14, 0xc0cc5605, &(0x7f0000000180)={0x1, @vbi={0x0, 0x0, 0x34324142}}) ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, 0x0) sendmsg$NL80211_CMD_TESTMODE(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000002400)={0x380, r12, 0x19, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x41b, 0x40021}}}}, [@NL80211_ATTR_TESTDATA={0x3b, 0x45, "6633e733d0cbd984a93f2cebda29977f5f348c1de2a320299142e3e06b441fcec817550f8bf8094fa012dafa109ba33b49fabbe21a08aa"}, @NL80211_ATTR_TESTDATA={0x43, 0x45, "44acfa305c6c882c647bd0d4b34df4d4da8361eb73a6c573ea623d7d098a566c34dd8824d6b1812d3a1bbb63db87c80cfc4000"/63}, @NL80211_ATTR_TESTDATA={0x15, 0x45, "9c5457ab63472b7b785271089fdcf50cf0"}, @NL80211_ATTR_TESTDATA={0x9d, 0x45, "9daecc4ba15d6f3f53974530aee4018137d20c149f32900fc4a1aeac2433eea2f080a8708504191c266cea04c8da6969876f5e02aead3b77f182b46c541e6393db8e5a1ed705210c7244b51046a6b671a173266a07566096cb67d855e43823218ee78d1b6dba688cd922365881cbd68ff2fcd6e339889aa9c74151f45558134a130040acce7b62813733f46c072f5f06e37ec7bf32478ed153"}, @NL80211_ATTR_TESTDATA={0x93, 0x45, "3c13e75cdc5f4f55d95d020c2a6d55b51e076cb30fa6231f2ce1899be6fa15ce9e26af63b19f2a09756c3d23509effb1d62926f02858ec92126bc97cf9beac73ae09d1d5797bb14fd11719689b40344f60520cb4e65d24f89658a27833044d0f3c13f3178206d7885866287559595d15c210376b2f3bdc9e737d0447be31284a8fa95fbf760fdcbab9cc20d3892804"}, @NL80211_ATTR_TESTDATA={0xa4, 0x45, "8d5475eb4f4998ebe6c3f0b22f0ec7ff1be7a1d3a01b0c43a7594db4d931274053bbcdc30a4bcfbc8fe47bd6e978bd4479600440706afe8ee5bdf7f5e14872cc914e5e1b3b0b60a7e62d5d1d38e91a345c0e341d3c70eb1cb3e67467d6055547a1c388810f9af886060b6c250c7d0c2d432c12d67c11157a0fc0052158ad334a280a27415e63e3debf563a567b4fe1b882dd8a5213145966c07ebf0dca128a8d"}, @NL80211_ATTR_TESTDATA={0x8d, 0x45, "20c771c890f3b90991344727b4aa687a5575030e4d868904e1711db7fa498dfa347146497a6f67e04bf89358555502e1cfddaed522c28903c8f10567c3fbfe2c9c5fbb99244ddc344d9c21bfb8b0a8b842c5c8bb7fb6c386e7e34cc15ee7f4e8dc3665afcdc82c1b1ed0217b738787a4a0434f2eef6c2a817fd09ff7ddaec3a0e103162af3ea63a67c"}, @NL80211_ATTR_TESTDATA={0x5f, 0x45, "507b7da19065b2a9f58d5d76096fc9e11e1623c1d45fe7768ab9f8d1ab6b8487261029825096e58d97ebc8e29786259ff1dc3f3b177950f531242d4dc3d0fbc5c4aa3f2dbc7d0d9832e71483a4c3de3e5466f9b333e29408e5c8a0"}]}, 0x380}, 0x1, 0x0, 0x0, 0x4008001}, 0x40) 7m54.132705097s ago: executing program 41 (id=2424): r0 = socket(0x10, 0x80002, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=ANY=[@ANYBLOB="440000001800010000000000000000000a002000000000000000000718001600140001000100000000000000000010000070000008000400", @ANYRES32=r2, @ANYBLOB="0600150008"], 0x44}}, 0x0) 7m27.554744619s ago: executing program 42 (id=2629): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x8008af26, &(0x7f00000001c0)=0x304008000) openat$tun(0xffffffffffffff9c, 0x0, 0x24981, 0x0) socket$inet_udp(0x2, 0x2, 0x0) io_setup(0x30, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$kcm(0x11, 0xa, 0x300) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000700000000000000000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sock_rcvqueue_full\x00', r2}, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000040)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sock_rcvqueue_full\x00', r3}, 0x10) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6f94f90524fc6010000200d7070000053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="ff00000040ff21002300895459e880fbdbaf1e4c403cd7277f7d569d060d6e00"/44], 0x18}, 0x1, 0x0, 0x0, 0x8040}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, 0x0, 0x0) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r8 = socket$inet_sctp(0x2, 0x5, 0x84) r9 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x48, &(0x7f0000000480)=[@in={0x2, 0x4e23, @private=0xa010100}, @in6={0xa, 0x4e20, 0xfffffc00, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xb}, @in6={0xa, 0x4e21, 0x10, @mcast2, 0x503ccbec}]}, &(0x7f0000000180)=0xc) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r8, 0x84, 0x71, &(0x7f0000000500)={0x0, 0x8}, 0x0) r10 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r10, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r10, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r10, 0xc02064b6, &(0x7f00000001c0)={r11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r10, 0xc01064c8, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000000200)=[0x0]}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r10, 0xc02064b9, &(0x7f0000000040)={&(0x7f0000000300)=[0x0, 0x0, 0x0], &(0x7f0000000040), 0x3, r12, 0xcccccccc}) 7m24.38058778s ago: executing program 2 (id=2645): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000480)=ANY=[], 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x1fff, 0x6, @mcast2, 0x4}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='batadv0\x00', 0x10) write(r0, &(0x7f0000000140)="8f65000000000000", 0x5ac) 7m21.969359631s ago: executing program 2 (id=2654): openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000200), 0x42082) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x804000, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000080)='configfs\x00', 0x1000810, 0x0) r2 = getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x0, 0x0) r3 = epoll_create1(0x0) ptrace$getenv(0x4201, r2, 0x5, &(0x7f00000000c0)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5}, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @empty}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r6, 0x89f5, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000140)={'ip_vti0\x00', r7, 0x0, 0x0, 0x6, 0x6, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0xd}, @multicast2}}}}) r8 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r8, 0x89f5, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000200)={'gretap0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0xf, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0xd}, @multicast2, {[@lsrr={0x83, 0x27, 0xc7, [@private=0xa010102, @empty, @private=0xa010100, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010102, @empty, @dev={0xac, 0x14, 0x14, 0xb}, @private=0xa010101]}]}}}}}) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000003a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r9, 0x18000000000002a0, 0xe40, 0x2f, &(0x7f0000000500)="b958945d8ae49c4f19be14f06558", 0x0, 0x1cb0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x48) epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f0000000100)={0x20000014, 0x3f00}) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {0x1, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x5}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4044081}, 0x0) mount(&(0x7f0000000140)=@sg0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000300)='nsfs\x00', 0x40, &(0x7f0000000040)='syzkadler\x01/\n\x00') r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x1f, 0xc, &(0x7f0000000a40)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020692100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r11}, 0xc) renameat2(r0, &(0x7f0000000340)='./file0\x00', r1, &(0x7f0000000380)='./file0\x00', 0xc) 7m21.883770238s ago: executing program 43 (id=2654): openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000200), 0x42082) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x804000, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000080)='configfs\x00', 0x1000810, 0x0) r2 = getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x0, 0x0) r3 = epoll_create1(0x0) ptrace$getenv(0x4201, r2, 0x5, &(0x7f00000000c0)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5}, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @empty}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r6, 0x89f5, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000140)={'ip_vti0\x00', r7, 0x0, 0x0, 0x6, 0x6, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0xd}, @multicast2}}}}) r8 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r8, 0x89f5, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000200)={'gretap0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0xf, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0xd}, @multicast2, {[@lsrr={0x83, 0x27, 0xc7, [@private=0xa010102, @empty, @private=0xa010100, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010102, @empty, @dev={0xac, 0x14, 0x14, 0xb}, @private=0xa010101]}]}}}}}) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000003a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r9, 0x18000000000002a0, 0xe40, 0x2f, &(0x7f0000000500)="b958945d8ae49c4f19be14f06558", 0x0, 0x1cb0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x48) epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f0000000100)={0x20000014, 0x3f00}) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {0x1, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x5}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4044081}, 0x0) mount(&(0x7f0000000140)=@sg0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000300)='nsfs\x00', 0x40, &(0x7f0000000040)='syzkadler\x01/\n\x00') r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x1f, 0xc, &(0x7f0000000a40)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020692100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r11}, 0xc) renameat2(r0, &(0x7f0000000340)='./file0\x00', r1, &(0x7f0000000380)='./file0\x00', 0xc) 7m20.316904674s ago: executing program 44 (id=2660): r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000ff00000001000500050007000000000008000900000000001400200000000000000000000000e1ffe000000108000a0000000000060002000100000014001f"], 0x5c}, 0x1, 0x6c}, 0x0) 7m11.758902709s ago: executing program 45 (id=2705): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000000016000000", @ANYRES32=r2, @ANYBLOB="0000000200000000280012000c00010076657468"], 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@delchain={0x3c, 0x2c, 0xf31, 0x600, 0x25dfcbfb, {0x0, 0x0, 0x0, r5, {}, {0xfff2, 0xffff}, {0xffff, 0x1}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0x0, 0xe}}]}}]}, 0x3c}, 0x1, 0x6488, 0x0, 0x4008844}, 0x4010) 6m45.438399518s ago: executing program 46 (id=2892): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) prctl$PR_MCE_KILL(0x21, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000280)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) prlimit64(0x0, 0x8, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r4 = syz_open_dev$MSR(0x0, 0x0, 0x0) fchown(r4, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet_int(r0, 0x0, 0x3, 0x0, 0x0) 6m32.803696657s ago: executing program 0 (id=2985): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x3bc, 0x1e4, 0x9403, 0x0, 0x1e4, 0x2c0, 0x2f4, 0x3d8, 0x3d8, 0x2f4, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x1bc, 0x1e4, 0x0, {0x0, 0xc002}, [@common=@srh1={{0x8c}, {0x6, 0x8a, 0x1, 0xb, 0x3, @mcast2, @local, @local, [0x0, 0xffffffff, 0x0, 0xffffffff], [0xffffff00, 0xff000000, 0xffffff00, 0xff], [0xffffffff, 0xff000000, 0x0, 0x7550ccb710be24b3], 0x8, 0x2006}}, @common=@srh1={{0x8c}, {0x16, 0xb9, 0x50, 0x40, 0x3, @remote, @private2={0xfc, 0x2, '\x00', 0xfe}, @ipv4={'\x00', '\xff\xff', @remote}, [0xff, 0xffffff00, 0x0, 0xff000000], [0xffffff00, 0xff000000, 0xff000000], [0x0, 0xffffffff, 0x0, 0xff000000], 0x407, 0x1060}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff, 0x2, 0x1}, {0x2, 0x3}}}}, {{@uncond, 0x0, 0xc8, 0x110, 0x0, {}, [@inet=@rpfilter={{0x24}, {0x1}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x418) 6m32.803391297s ago: executing program 0 (id=2986): r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_DEST(0xffffffffffffffff, &(0x7f0000000fc0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001000)={&(0x7f0000001040)=ANY=[@ANYRESOCT=r0, @ANYRESOCT=r0, @ANYBLOB="81d68f268eaff09e62a0eca7132f30fbd6c963c9ab6a5b7c93c5d917e2162b7a27eb7f7f6e7405283297e0b05d98a7648d2299ad5a93bffbfea0dde89193ea0fb8fede076c25803413994cae92f977e2f12bcc6b14d850b991c1086ede9b9c7a1fb8ad3d709fd35b5f96f45c97e43f3e466066af7cc57e450cb270b90a103c4ef094b4cbb17d685d7a0822cc17d76fc6e7a4b2e91f734764b85253c8f3f8d7c46bb85a67e0c35f0830756b0ddda72b6d273f71360b75b24b0677d994ccc7a4a8556e80a2f99c155a2a18ba4a924a2d7e91497205c685758af12499d892539c16c34509061a11186681a2a11873ca05fbd98ce8fac935a942e1c7d5d0d4b867c94d374036044da6ea85a8bbf4c4ce3bd55166c87e9fbe19e553e26d0b52549bbe87b51c9f19b4ae80d980dda22eab1240de26b14001a013142ddac7ea6007f0b7fd9bed4ba6f26fa73723197fdb3eb32d8ae87a018e82aef2463c3fcf6027aac147f795ff23495c4c01059a58b471e37c081fb9f1899973d5dd4d0340fdbcd8b034461250a3dbbee85cccf8f06682394aa3bfb96ca2a06ff2139d0b49611d8cd1691dd1c7df4d02b269ecf4c91bc3e14c0f3d0b918795403e0d489bdfa61b568070bd8d28dfd42ebe08b32527ce63935dbea235e941cb72860835a7c97c6ee1e3e58986d4e5f6cebd799eae2d15034808f859f5f86e153f1e44a0a294b193024dbf834b01d5b632531c656f686d8924c0a5e4ef4815a5ae9ab37da9ac5b552ea41e93a7b3388be30f9da2aa7e65012de36bd7d535efea0a1fbca4d16d8c2204576a77ae25305d2234ef2061aec82ea877edd76fbbe089bae74aeeb974f751dd35031a0f08b17f20119332e352ff9022818baac040697fc6f012db1c7c6fe0ec0a67889e28658fc1a66dbefe60d9a42166d2cef46de362d7bc893ab589845191f24982c7259222d4838c604c9d42d8007dfd3588e69f30079474725ad364b73e0005bc7a7b315bf19fd402a432c4e55a9de0d66c09ed5d1a3a70796c30370ab184f1726ee767a928ec8f2b02bea1eb35c8889773a5482d5b870fcc66a226edc7b4c053c0d6bbce1e6f94b0ae7f3bdd00298d30b95776880238caf5f93b3012317a2e2586e9e52affd8b26ec73cf688d3c0ee91986d39ad15d533377b3cd10218f02975ddf04607518bc25ebd4438921ddee45372785ad99f04fbc4f136672ff8f6af2d0d730886743f8f05e37e4332272e9bcc98aec7ca6574f3003e35a79a4faa36a84adaf518ffa071ef7d4a288120ca3118c9a0c879a4ee8134a85f68c95c1e01c0199a5f53090edfa2b991c8377e1cdbc48456a840151abfcb2facc5ed9a47749335ac30fc7c08990eca0f4448334720bead0414a531ceedd743a1ef9c968ee3f3260fe5ab4677076869d3b271555544abdf1187d69c3c8a9a7563db2dbd9ee6595f53f34ae0c47303958166073ad6f2cce4486cfb0c2bb82f90559a915d70e61a59992ba5460aebf01dc79fc46ff01c640fc8b557b1080d593843abd86bb94a74667e64076a8e73e265913f1a0a114a1f6d4b068526952c64f26fd83bdfdc612f54482e8d2cbc696b2d5ec08bf09ddb9e762218b62127bc39b23ed472d745c1437fd039abd903169d7fa437d47eba810cdd39c5ff38bc45425d0a6d2dd98b42df3ef9feeaad930fe2e2708d114149f6707bf924193a53fc9917b0e3a56d8236eacc35d6c852a94da21e2e3de76e25f235d49e2bf6ec8fe4b58b3af031539acfbfe61394d64b9e8deb371d461103695cd8610a72bc67cfb1bcf2ed2544639ed80bd072345b5a299cd638b83bdcabbbd46e40ff83fade5537ced7fa38a4083f936d4815a45d9be02e5c62543af42e3d47532446f746dfb783582054d2514861638b4b7672dd4440340f18d92fe0a1f351bd19aeabc08e7a5ada858c7e06cecb640bf6291a24f5ba46dbe42d4cd9656d0d1b87cbd030c6f6b262a75e71f2061ec361885b4d188ed3968475a8c6a832c5d659b1b87e4e800d3b92d950a64fc4a72f5efc2340168afb1a0287959c8a0bbddeb55799d29eeea95801194aa08507f07703e484809859ca59e0185ae30ad3094fcf9894003b3c45a98cd8c5c98c91a5cd3c10c9b72b975d7e6200b3bb10fc84b3995fae8c38c5ccd3354ba0e7a33004297672c05d7bca47716a4eba25a4613f625c6178b2497619f5cb83fda5d623204e091a70fb0003786401dd1c426cec29fe40715cbad62c89b872fe52f1d08312306e6209f23dbde620ed2cd3c627a68d0c429cd34d0e1acedba972f406ed7e874db0100cf88c84027ef05ceb94b9ddc197485362252650ade9d6307ebea94a4c8866b5b370173bb1e6cf2a4623e0e32383d22a3db3fe209c2dcec8218132617c3a3cd816c0e9ddf4f0a023196ab1600ec79daa03a966acb65f0c7260d17c676dec33fd8526fe5a5814855fd9d69023e28fee26fd3ba1c015040b1eedccba4f954cce9fd23fda3f53e329310f9a474712b1ab76d5c8efe7dca0db6c6de0949c3f63f1925d9939cbd5afb6a6d8b128ed2675a57097da98cfc7e1891b3160922798292f92384105f2c4bc14fac0e514fb165522a84667e88fe72def3ccd4d9506bce8e45305330675b974f08f4463f43ae0ea9279d4c6590c6ea313db511829c57e98ddb4d02ea738b6a51461aed0b2a852f58daf9407d7e1bbd055ea94909cf9702edf5ef8bfc1077e094c2b6a73ece7919facacacf950cfbf0a0724fc976c4146aecf499c1bf73e54ab45a8f7012225b23a53ea83d64e6338ce752ca220397dc419bdc7c4279e20f3924439bf3936ea748973ffcdb6ecf50cbabce4d1ccdcafe74417497315ca75579a79b4e495ff8026effe871d21c0e87ae5bd79d85f5eef7771aeceb6ec53ea01df287109f8ec527bf4bb8a65fb88e323d6c900475db918652a5a2af130336329a7f9e3ff3b349b7667c2c392737d4a9c5195dac34d76b9c95365ec5f71fe450e492ea2f7de4a1ab9554793e03df8d348efc09076e793f963575c52d75091a17ed9f1ce01f5796828dbfa55671aa5c12d8228120784f4d2f75c10fdab940a4f45bdae722d007cc5f7b19f3c19ceeb4ac0f1079e1c3bf7fe180002b69ee9b736f0ad36daea233ef94e894aa296aa35c51afe1e3aaee580a973634a60e30f5b51e2282a60c05bfdfa150d6d1fedeb774b0ac9c2c3f869838372da3e2670e5f19edbdbe40307b1afff33b96e55fd723666a226629a3517f77cba62c7144806feb4d81b08d6e389bf6db6141bb1781d980a4a0d518842855f593faff141b06456e0f8a936a3d6d8819ca85350576592f1496734c6e6b0b98bc9e8450794036db3d12dc582a5740a94896b74c93bb44e59dae5eab69c838c7b897daae8a52d1a09ce83fe9598429fd4b96e09c7f42d6f1f598208f4222e941c1292576e32976c0c6a7e417de9f71b800a271a0456649324f17d34fa7cc0c30739addb05a5701f43a4bfb0804c011175d7e8aa79d67df8f626d9038988f314e9bd912b3e1bd13de3ec6b2e5fcc0a618ed39f0013df67bbf016213813bff15d546e29f56b66dfaff3f65556f52d36e45015221f87eb20c0b4b1a8e300e09b73f3f5ad02030a70f4b08b12e8ce5a9c583daab60e4d4bea976a36834d47aaf61d07848774dce0d9163d8b9c8e4711c2796fd3e2b3aebff79d59629bb48d076fb28868e0c09dc46d2f0848e3e1e9ab7cb03ab2b8e6cd24b6c3552db6eb3e5a04d3fa0bfa1a43802707395ab90e5cbf946fdff77e38344da1b5fd2da44cfeddf6fbb839e3c933b82460d349017cebf35e622f9279541b01a615b7a8bc131b40366dd5495e8d0663c863d8333bacd7f15b0addc08ff56fe5e369f28c937f41f734950ad92e45fd50260e9a75ffcad18a7e6d7d11998c81a53576ff106f94406651fe33852faffebe73720b36d4cfaa41c06e234c1fc8328435cbf9b4e75df411692ee3681624d526d4d7f6a45edfbdea04d96c417ef8a499b5a6baca8930227d3f1d02b00d016e315b45e84c5faeae0806f3181c91f593cacc506148555e513f7a45fce1ae21da1ea4e93b353e80b794b91eb1bb224f159a36a495aa6e467c1fc2742cf51480fa152bb4772d48bfc122e4c340b12016ccbb9dc01183680b969e44f3c81ea66f7ae5b2f796f5d6daefd5b67798608d3421984b16aa3a7dc7639cadea2c18d880e91e6e59e6e56e3eb88f4bcbf640be27c8bbb2213dbe1df1485a7ed6945a6b779a9c00ec37768a29178396084e79e3f63a2ac046681d7df4ed001e9b7f0f6807be181241e17d51ec7d3782d1095aa0330663529863886ace4c6a04c7a7d127246ea2a4786fb96468a9f622df05cc138ffb531fcbfed0a7e768b0ffed96fd6cbd1375d7989225f9e8fd2ddecdf0a1b120e0d6ec4c5c0984726da0665b624112fd5b7379c046b79f4a8b8824ca5b1f00360cfadf589ae4183e605207ac145fbe255a868ee72fa8933da01877ff1ee20362cbe5ac96ebfa7b906ab740ec48c825fdf7a5d1db4cad12b01c5918b4c7abd1552e71820b5931aa64e25e873edf78202af88fc8535f8d1b6772e04ce89ce5fea5a5a0e1c3879cd0ad99bd6346d7f15b01a8f0c2eb7cf7cd79b0ddc95dcd1293a0c53c51fd1adbc289070d7f4e42324216af5f8a938f699969e84c634e2ef8648309652dcaea9d916d2db4a5571b67e8a697cfc62acb9f3541c0a775e18836c7960a510b97050339a65fdd8b2db8341210e02261b941fd9b7971e61e7cfe308aee6349ecd6a902b9394f4f2c11532051b0df5448f78231d92fb42e0e8aa7810a4482903e73742d14935cf5b607337144d65de1d2d5fdf8c4d628652c73ee935762bf102c48b1b8d9b6badf3679b02ce47293262a94e34aa8299970ab5809d9bdb9c7c3f53324a20c64ef979e159676ccab73d35abe4197b161f89b7d39fa01c836c42e335dfecdd39886345479ddb165f9bad15458f1d05c92cf7e81a4f7f80727bd46b1d46fe5036318f5d1927b74810d857733e8f3f1b6b15fbd8517afd06664affa7535ce0d30fd0696368f6606794ea277bf13b059dc49fd79809c98d98fb16149f104e9e9907e9b3f7e093cf3ae61330a3e430d902d502af6e6daa69c2b4c3aa168cad7bff2887a90819d8c67384806758bcd54fbef3770d121356cf353571331ecac80ec00269ab8f5b65ccfa578e72609ae2dd995bd8a7fd4bcd447013f297dacd0a6a5e02c872853c3715b506bd796a9bf6daba1d6e498ac261b614dc4497f72879e68bd16c900cc0d991bd7182c41843beac3ed98ec1461f93597add8a5522bf5a25ad512b400489298b82623bc52156206910b74b0fd34725ce11331de66683f536c61c649106ac96c1cf5fecc8f21fd82829620bc31aa993d4dc9b07f08838d199d559910e7fc6490d0fa5ef3774dd4c2ea74a3dd537ed37465ab1fee833b47b08006760760bf588df3db38a124356efcb662415b659d4c1bcf94749e8508581ecf19345eaa45290ce9b3daabc534f8337128dad4dddeaf96f0eb41ae3440766be5681ceb16283c9d549aeb26da5cb84bb52ec1cd0f997eed2366b0c9f3bd0eb1667ff59a16ac8df0e657e1618b37eece411f5113a5a451f3fb49b3b5c36d52c227e4f12610aa00466c112c189277f5b877977144d88a738fa36059a96ab4f869fe574a8da31b956b796e0bb9782828ed6730fe77e0743725f01ae533e99bc71bdf48c553e677e49e4053a75809fb4b89fc96fb37f56873a229d5bdc2c2c345a08fe686b75b4740100af8", @ANYRESDEC=r0, @ANYRESOCT=r0, @ANYRESOCT], 0x8c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) socket$igmp6(0xa, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=@newtaction={0x94, 0x30, 0x1}, 0x94}, 0x1, 0x0, 0x0, 0x804}, 0x8001) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="8c00000010000104000000000300000000000000", @ANYRES32=0x0, @ANYBLOB="fab0817dbcb5f31a5800128011000100627269646765650000000040000580050019000300000005000900010000000500050000000000080025000000000006001f00d50000000400180005000600010000000600020001000000140003006272696467655f736c6176655f3000000000000000"], 0x8c}, 0x1, 0x0, 0x0, 0x20044010}, 0x4040) add_key(&(0x7f0000000000)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) r3 = io_uring_setup(0x61ad, 0x0) io_uring_register$IORING_REGISTER_CLOCK(r3, 0x1d, &(0x7f0000000240)={0x9}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x442401, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000001c0), 0x900000, 0xc0040) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) openat$6lowpan_control(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) openat$cuse(0xffffff9c, 0x0, 0x2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x7}) ioctl$sock_netdev_private(0xffffffffffffffff, 0x8949, &(0x7f0000000000)) 6m32.279114882s ago: executing program 0 (id=2989): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x282c01, 0x0) (async) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x282c01, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000002c0)=0x7e) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000002c0)=0x7e) syz_clone3(0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x6) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) (async) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r3, {0x200}}, './file0\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r3, {0x200}}, './file0\x00'}) rseq(&(0x7f0000000300), 0x20, 0x0, 0x0) futex(&(0x7f0000004000), 0x5, 0x0, 0x0, &(0x7f00000003c0), 0x93020007) (async) futex(&(0x7f0000004000), 0x5, 0x0, 0x0, &(0x7f00000003c0), 0x93020007) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f0000000600)={'syztnl2\x00', &(0x7f0000000580)={'ip6tnl0\x00', 0x0, 0x4, 0xe, 0x3, 0x0, 0x2, @loopback, @private0, 0x1, 0x700, 0xfffffffe, 0x9}}) writev(r1, &(0x7f0000000140)=[{&(0x7f00000008c0)="42eb6df27340e1bb16002288269c2de01163ba7c1ce3e891888c4a9f8b03f208e8fcb5bf58a7a3e9547a03355f043468501afee58088c2a87cb97beb7fa74e557d82d80f2314079b1320c0e3606fea0e62b60565a6fa2ddd6bd01f4ba1bf598c6fb5bcbe7cd5f35fa30fb9b7a595ca791a978c819cfaf90be32fda1b6a4188c194f2903c9d0f3b13c285ad3464dbfbfd561d2e645873eab986f9cd83fd067cf318602ddfd7f91cde6d87162397cd122e12f4641b713bf039027862449479cfdad4695da4739134", 0xc7}, {&(0x7f0000000040)="233903a3a0fd8b776767994765d0213766cccb3f2e22c790ee202b2518e102", 0x1f}], 0x2) sendmsg$nl_route_sched(r5, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000640)=@delqdisc={0x16c, 0x25, 0x100, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xb, 0x9}, {0xa, 0x1}, {0xa, 0x7ff9}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x9}, @TCA_RATE={0x6, 0x5, {0x9, 0x35}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0xa599}, @TCA_STAB={0x118, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x2, 0x7, 0x0, 0x94f7, 0x1, 0x8, 0x4, 0x6}}, {0x10, 0x2, [0x1, 0xf9, 0x6, 0x976, 0x1, 0x1ff]}}, {{0x1c, 0x1, {0x5, 0xff, 0x3, 0xe, 0x0, 0x4968, 0x76c, 0x2}}, {0x8, 0x2, [0x2, 0x1]}}, {{0x1c, 0x1, {0x9, 0xa, 0x4, 0x9, 0x2, 0x937d, 0x4c8e, 0x2}}, {0x8, 0x2, [0x1, 0x4]}}, {{0x1c, 0x1, {0x5, 0x9, 0x2, 0x110, 0x1, 0x1, 0x3, 0x4}}, {0xc, 0x2, [0x7, 0xc99, 0x1ff, 0x4af]}}, {{0x1c, 0x1, {0x6, 0x4, 0x40, 0xfffffffc, 0x1, 0x41dcc05c, 0x4, 0x4}}, {0xc, 0x2, [0x9, 0x839, 0x1, 0x9]}}, {{0x1c, 0x1, {0xd, 0x7, 0x2, 0x80000000, 0x0, 0x9, 0x4, 0x1}}, {0x6, 0x2, [0xc]}}, {{0x1c, 0x1, {0xf, 0x6, 0x4, 0x5, 0x0, 0x8001, 0x8, 0x6}}, {0x10, 0x2, [0x8000, 0x8, 0xe0, 0x3, 0x8000, 0x7fff]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x100}, @qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x16c}, 0x1, 0x0, 0x0, 0x2800480c}, 0x20008041) (async) sendmsg$nl_route_sched(r5, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000640)=@delqdisc={0x16c, 0x25, 0x100, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xb, 0x9}, {0xa, 0x1}, {0xa, 0x7ff9}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x9}, @TCA_RATE={0x6, 0x5, {0x9, 0x35}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0xa599}, @TCA_STAB={0x118, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x2, 0x7, 0x0, 0x94f7, 0x1, 0x8, 0x4, 0x6}}, {0x10, 0x2, [0x1, 0xf9, 0x6, 0x976, 0x1, 0x1ff]}}, {{0x1c, 0x1, {0x5, 0xff, 0x3, 0xe, 0x0, 0x4968, 0x76c, 0x2}}, {0x8, 0x2, [0x2, 0x1]}}, {{0x1c, 0x1, {0x9, 0xa, 0x4, 0x9, 0x2, 0x937d, 0x4c8e, 0x2}}, {0x8, 0x2, [0x1, 0x4]}}, {{0x1c, 0x1, {0x5, 0x9, 0x2, 0x110, 0x1, 0x1, 0x3, 0x4}}, {0xc, 0x2, [0x7, 0xc99, 0x1ff, 0x4af]}}, {{0x1c, 0x1, {0x6, 0x4, 0x40, 0xfffffffc, 0x1, 0x41dcc05c, 0x4, 0x4}}, {0xc, 0x2, [0x9, 0x839, 0x1, 0x9]}}, {{0x1c, 0x1, {0xd, 0x7, 0x2, 0x80000000, 0x0, 0x9, 0x4, 0x1}}, {0x6, 0x2, [0xc]}}, {{0x1c, 0x1, {0xf, 0x6, 0x4, 0x5, 0x0, 0x8001, 0x8, 0x6}}, {0x10, 0x2, [0x8000, 0x8, 0xe0, 0x3, 0x8000, 0x7fff]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x100}, @qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x16c}, 0x1, 0x0, 0x0, 0x2800480c}, 0x20008041) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r5, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x10) r7 = socket$l2tp6(0xa, 0x2, 0x73) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r8, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r8, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) (async) setsockopt$inet_tcp_TCP_REPAIR(r8, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r8, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r8, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg(r8, &(0x7f0000001fc0)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000a00)='E', 0x1}], 0x1}}, {{0x0, 0x61, &(0x7f0000000540)=[{&(0x7f0000000580)='i', 0x1}, {&(0x7f0000000b00)="a57a62bbec6dba64d459d65c34996277a4e76cd1be27b1b35a85d8e8624335f59161d5f019544847283a3c281f7c8e43f608aa2a21c33cd506104fe72eab4883bcdf1b4265c6e91fd1a13be6b1967948678020c4c313a4700983a16068edec5cf2613c761f44a750eb947ec9c5bdaf227f2414b37ebc3d86e96b4c6f372883d628aa3ecfafa5fcadd95dd32ce99a79f70e27c0cd250e2392df6df6bdb1a8d299d9f6e6a2130ec0bfbaca3589ecdd81e919f58197c26ccd2d2e2a56ae6fc6dbe7218fdb94fb491f36b2e9"}, {&(0x7f0000000400)="a4d44659a090933108cc6d1043677c45b29e11088b07044f9698e4503ef8e99073c756ff835970f72268bfb300339a606c7dcadd8ad4086b9a3f8462b2b8d5dee1c498f9432ab0753b04da1e53368c198d4305adb26c662298c790c5b4d93736e231585719bf7c6d78a021c05147f25567996ae76e27599a9be1b42c7c36ddd4fdf6bdcec36e0009a8b2561244e11ca2c8979cd18e1c4ea4d4765eed266789f1f07a36fc7e642e7f08405c10443b21b21a37b258de28481bcfd63c6c"}, {&(0x7f0000000500)="17b3e1fec2a8518d252c27d5bcfd"}, {&(0x7f0000000c00)="fdbb3adb6f97abdc87c528f88667249a1c79f2e47ab63f2f83c37c7e36a029e88fed3ba0bf8a4c11dc035aafca254fb952f6b5038bd064568f3baf734ff84f4f7f29817abd7b8b908726fbd268b65136cbac6c95069183f767f7c5c3273814c7fefade7a97506b9e0a16ccdb253b24d463e5e00f7103a3e23f049c29d544ed0dea00e7d2fde6cbae00b26b42b79b9b5d3bc4aad179f29b89e928b6b0f1daf21938b7a0ecd540ac11def461b39efce0f967dbf01721bab619544cf336383884cdc7c79c37307e5b"}], 0x1, &(0x7f00000007c0)=[{0xc, 0x1, 0x5, "a40c879a0e0ccc27e70b"}], 0xc}}], 0x2, 0x4000045) (async) sendmmsg(r8, &(0x7f0000001fc0)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000a00)='E', 0x1}], 0x1}}, {{0x0, 0x61, &(0x7f0000000540)=[{&(0x7f0000000580)='i', 0x1}, {&(0x7f0000000b00)="a57a62bbec6dba64d459d65c34996277a4e76cd1be27b1b35a85d8e8624335f59161d5f019544847283a3c281f7c8e43f608aa2a21c33cd506104fe72eab4883bcdf1b4265c6e91fd1a13be6b1967948678020c4c313a4700983a16068edec5cf2613c761f44a750eb947ec9c5bdaf227f2414b37ebc3d86e96b4c6f372883d628aa3ecfafa5fcadd95dd32ce99a79f70e27c0cd250e2392df6df6bdb1a8d299d9f6e6a2130ec0bfbaca3589ecdd81e919f58197c26ccd2d2e2a56ae6fc6dbe7218fdb94fb491f36b2e9"}, {&(0x7f0000000400)="a4d44659a090933108cc6d1043677c45b29e11088b07044f9698e4503ef8e99073c756ff835970f72268bfb300339a606c7dcadd8ad4086b9a3f8462b2b8d5dee1c498f9432ab0753b04da1e53368c198d4305adb26c662298c790c5b4d93736e231585719bf7c6d78a021c05147f25567996ae76e27599a9be1b42c7c36ddd4fdf6bdcec36e0009a8b2561244e11ca2c8979cd18e1c4ea4d4765eed266789f1f07a36fc7e642e7f08405c10443b21b21a37b258de28481bcfd63c6c"}, {&(0x7f0000000500)="17b3e1fec2a8518d252c27d5bcfd"}, {&(0x7f0000000c00)="fdbb3adb6f97abdc87c528f88667249a1c79f2e47ab63f2f83c37c7e36a029e88fed3ba0bf8a4c11dc035aafca254fb952f6b5038bd064568f3baf734ff84f4f7f29817abd7b8b908726fbd268b65136cbac6c95069183f767f7c5c3273814c7fefade7a97506b9e0a16ccdb253b24d463e5e00f7103a3e23f049c29d544ed0dea00e7d2fde6cbae00b26b42b79b9b5d3bc4aad179f29b89e928b6b0f1daf21938b7a0ecd540ac11def461b39efce0f967dbf01721bab619544cf336383884cdc7c79c37307e5b"}], 0x1, &(0x7f00000007c0)=[{0xc, 0x1, 0x5, "a40c879a0e0ccc27e70b"}], 0xc}}], 0x2, 0x4000045) bind$l2tp6(r7, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) connect$l2tp6(r7, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) (async) connect$l2tp6(r7, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) sendmmsg$inet6(r7, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1b, 0x0}}], 0x17fd147c801ae9af, 0xff14) (async) sendmmsg$inet6(r7, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1b, 0x0}}], 0x17fd147c801ae9af, 0xff14) 6m31.833669973s ago: executing program 0 (id=2995): r0 = syz_open_dev$mouse(0x0, 0x2, 0x400000) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x62) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400), 0x10000, &(0x7f0000000180)=ANY=[@ANYBLOB='huge=always,mpol=interleave']) chdir(&(0x7f0000000240)='./file0\x00') syz_clone(0x4000000, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000240), 0x3af4701e) mount$overlay(0x0, &(0x7f00000004c0)='./bus\x00', &(0x7f0000000480), 0x240000, &(0x7f0000000500)) 6m31.70971288s ago: executing program 5 (id=2996): r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000640), 0x4000, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=@newlink={0x190, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_MTU={0x8, 0x4, 0x600}, @IFLA_VF_PORTS={0x158, 0x18, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "0cf31ea0d963a941c09c0f0540c38800"}]}, {0x78, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0x11, 0x2, '/dev/net/tun\x00'}, @IFLA_PORT_VF={0x8, 0x1, 0x101}, @IFLA_PORT_PROFILE={0x8, 0x2, 'ife\x00'}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "fc8332715c3cdcc593280523ecbf39f3"}, @IFLA_PORT_VF={0x8, 0x1, 0x1}, @IFLA_PORT_PROFILE={0x7, 0x2, '].\x00'}, @IFLA_PORT_PROFILE={0x9, 0x2, '\t#**\x00'}, @IFLA_PORT_PROFILE={0x9, 0x2, ':&{&\x00'}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "cca43344af6c56304dfd46cebfd6d709"}]}, {0x14, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xf, 0x2, '/dev/cdrom\x00'}]}, {0x6c, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0x5, 0x2, '\x00'}, @IFLA_PORT_REQUEST={0x5, 0x6, 0xb}, @IFLA_PORT_VF={0x8, 0x1, 0x1}, @IFLA_PORT_PROFILE={0x8, 0x2, 'ife\x00'}, @IFLA_PORT_VF={0x8, 0x1, 0x2}, @IFLA_PORT_VF={0x8, 0x1, 0xd915}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "e567ac5b3a3bef0bb93bf3dece26ef29"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "c2fd2bc093fa2b152f97ee5f88895fe6"}, @IFLA_PORT_PROFILE={0x5, 0x2, '\x00'}, @IFLA_PORT_PROFILE={0x6, 0x2, ':\x00'}]}, {0x44, 0x1, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "932066f93d918d83b7227c1d50c9ac1d"}, @IFLA_PORT_REQUEST={0x5, 0x6, 0xa}, @IFLA_PORT_REQUEST={0x5, 0x6, 0xb3}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "9fbe0122ecbdfe29c08f835b4a4483cd"}, @IFLA_PORT_PROFILE={0x5, 0x2, '\x00'}]}]}, @IFLA_LINK={0x8}]}, 0x190}}, 0x880) setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f00000000c0)=0x3, 0x4) sendto(r1, &(0x7f00000002c0)='%', 0x300000, 0x0, 0x0, 0x0) close(r1) open(&(0x7f00000001c0)='./file3\x00', 0x10d2fe, 0x20) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0xa, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) close(r0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r5 = open(&(0x7f00000000c0)='./bus\x00', 0x68042, 0x62) r6 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) write$dsp(r5, &(0x7f0000000640)="f2", 0x1) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000540)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) accept4(r7, 0x0, 0x0, 0x0) sendfile(r5, r6, 0x0, 0x1000000201005) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) 6m31.532274493s ago: executing program 0 (id=2998): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha12\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x20) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f00000001c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x20000800}], 0x1, 0x0) io_setup(0xff, &(0x7f0000000380)=0x0) io_submit(r2, 0x27f, &(0x7f0000001440)=[&(0x7f0000000200)={0x1000000, 0x0, 0x700000000000000, 0x0, 0x0, r1, &(0x7f0000000340), 0x41, 0x0, 0x0, 0x8dff}]) 6m31.103862113s ago: executing program 0 (id=2999): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) fcntl$setlease(r0, 0x400, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x2014800, 0x0) acct(&(0x7f0000000100)='./file0/bus\x00') read$FUSE(0xffffffffffffffff, 0x0, 0x0) mq_open(&(0x7f0000000140)='\x18\x00\x00vD\x17\rf\x90V\xf1X\xb3\x8fv\xa6\xa3UU\xf1P\xa9\xab\xcc.\xdd\xf8\xef\xf1\x92wc\x02\xeb\xb0\x8ba~\x10\xce\xab\xf8\xb93ytz\xf6\xa2<\x9b\x80\x89\xb5l\b\xa3Z^\xd8\x16\x11n\xc8V,\x1d\x18\xc7\x9b\xf2\xdb\x16\xbe\xd2l\\\xfb|\xfaC\xddL\x00\x00\x00\x00\x04\a\x12\xa9v\xa1\x0f\xa3|\x85\xa4\x8a\xb2\xa5j\xfbe\xd4\xc7-\xcff\x15\x10O\xceKRL\x84\xbb\xa0\xd0;\xc0\xf9j]\xecp\x11\xf4\xda(\xd7^\xc6\xfe\xc3\xc5;\xad\x94X\xda\xb5\xa2\xe8\r\x11\xa5m\xf3OC\x82\xed\x03=\xc5+A\xab\xb6y\xf9P8A\xa7\f\xcf6\xba\x9en\x11\nj\x90\xd3mp\x05\\;Z\x86j\xb2\x84\xea\x15\xef\xd8K\x9e\x98\xb8\xb7\x8a\x9e\xf9\x03\"a]\fm\xbe6\xbf\x897G', 0x40, 0x1b4, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000100)='./cgroup.net/cgroup.procs\x00', &(0x7f0000000140), 0x21c804, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r4}}) io_submit(0x0, 0x1, &(0x7f00000000c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0xa8002, 0x0) write$P9_RSTATu(r5, &(0x7f0000000ec0)={0x6f0, 0x7d, 0x4000, {{0x500, 0x366, 0x0, 0x40, {0x20, 0xffffffff, 0x6}, 0x1310000, 0x0, 0xc, 0x0, 0x10f, '\x04nodZ=\xbfd`\xd2\xc2\x97D,\x027\xfcb%\xff\xff\xff\x80\x05\xff\xff\xff\xfd\x00\x00\xff\x03\xff\x92\xe9\x16\x00\x05\x00\x00\x00,\x93\xcb=\xb6\xc21\xd1\x19\xaa\xa1ou\xc5\x8f\xa6\x88\x9f\xf3\xc8\xf7\xab\xc6\x1bY\xa1\xd2o\fJ\xf8\xe2\x93\xd3\xf8l\xcd\xc6o\xf5{\xe9\x00\x00\x00\x00\x00\x00\x00\x03\xd5\x89-\x8e\xfe\xbb\x9e\x05\xac\nk\xc5)`z\xc6\x8a8\x13\xaf\xe7\x9e\x85cj\xfdl]\x15\xb2\xae\xbb\xb7\xee;\x1e\xae\x8a\x7f\xbe.\x85\x88s\x14\xcb\xec\xf0\xa1\xa5\x124z\x8c\x15\xb3 \xd1\xe1\xc0\x10Uz\xaaw\x16^Q`208^|\'\x01\x00\xacB3\x00D\xa9\b=\xe5\xbe\xd8\xe0\xbd(h\"\x94\xf68\xc3\x8e%uj\xb0\xb0\x7fe\xdb\xd6$\xee\x95_}\xa7\x8e\xe1\x96I7?0\xe3\xf7\xb9d\xf0\xa2f\xc3\xac\x9ePwS\xa3\xc4\x03\xc8{\xf1Jv\x87%\x91h\xb4[\xbdz\x1f\xd8`\x0e\xa1.\x00\xdb\xfeL\x1a\xfe\xea\xaf\x9d{\xb4\xa7Z\x1c\x82\x18\x93\xf7\xf4|\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00\xcaY_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x06\xb4\x94\xe1H\xea\x97\x8b\xab\xa0\xfe5\xb3e\xdc\x81i\xea\x90\xb2\xcd\xef`\x107\t\xd4\xe0\xd61\x15pL\xba\xc2`\xa7\xe8\x0e\x04i(D\xddZ>n{\x1e\xdc\xc7\xebK\x89F\xa5!\x9d\xb2\x94\xe1\xb6|J\x04P\xe3\x81cX\xb2q]\xba`\xc8\xcc\xf0\xb2\x8di\xf1\x14\xff\xff\xcc\xeb?bF\xe3\xbaDys4\xf5_\xf7u\x82\xa6\xb7\x04\xe7H`\xd0\xca\x05Y-v\xc8\x99m\xd5\x9b\x80\b&.k8\xed\xa7z\xb9\xc6\x00\xb6\n\x9d\xd4\xc7\xe0\x97k\xeb\x90\xbf\x10\xb2=pn\xe9h0\xcd.\xf3r[?Cs+\xc2l\xaa\xde\t\xedWF\x9b\xf2p\x97\x88\x01L%!\xb3\x1c<\xf5\xff\xcd5\x18\xbd#LP\x9e\xcaA\a\xa1q,\xaa\x9d\xa5=\x05\x1c6\x88Ly\x18&a\xf3\xca6\xbc\xdb\xfb\xbd&q\t\xf81\x9d\x8d\xd5\xc0p\x99\xeb\x1b\x11\x03\x06U\xf5biOat=\x19B\x1bJ\x19\xef\x8b\x8bL\xe9\xc9\x93\xc7\xd6\xcb0\fNezNP\xa3[\\\xc1k\x8c\x16\x1a\x8e=\xf9\x03k\xbc\xf2\x8a\xdc\xd1\x9alL)\x17\t\xae\xe5\xab>[\xc5\xae)\xf4u\xe4\xd2D\b\xb5\x16}\x0f\xaf_\xc1Vkp\\\x8b`\xaf\xa8\xac\xa4/~\x04i\x18\x8a\x0e\xf0b\xca\x18\xe3\x8f\x9e\xe1\n\xc7}+~\xb9\xd6\x0e\xa7\x9f\xdbUd\x11H[\x1b\x13\xdb\xb8\xa2\xa6b.\xbc\xf8Lio\xa4\xda!\xba\xd22\r\rh\xe9\xbfCF\xf0ha\x19\xa3\x9e@\x03\x95\xc8\xf2\x82^\xa0i\xae\x0e\x14;\xd1\xa4Ay\xedlTp,^\x9a\x19\xcc\x7f\xfaP\x0f\xa4\x1bl\x80I\xbd\xe4X\'\xd5N\xc9\x01\xd2z\xd1%\x05h\x89\xb33k?\x06\x83\x8c[fz\xe2.\xfe;\xc1[\x82_\x7f\xbc\xe4\x80\'(\x1c\xf9\xfe\x8f\xc2\x1f\xc7|$=\xe2g\x051\x0e\xb8\x1c\xf7M\xe0)1\x92\xa1?j\xd0W\xdea\xfd\x8a\xba\x8e\xf4C\x9b\xc0jE\xb2\xb01bQZ#C:\xfe\xb5*\xed\xb5\xabo3FS8\x05\x15\xf7y\xf3]\xc8\xa7\x8c7w$\x92\xa2(L!\xd2\x13V\xd4s\xf0\x0f\x85\x13|{\xf0cou}5(\x86\x9b?\x00w5\xcf\xf8\\\x9d\x97\x8b\xf5]\xcc&\xd6-%\xe3\b\xf0\x88\'\xa9\x1f\xf4{\xec\x92\xf8\xe9\x1ey\bfT\x00\xaaN9\xb3Y\x86#\x9d\\{\x94\x92\xc5\xbb&\xbcU\xb5[I\xedpHnn}\xa3\x8c \x84P\xf9\xf7\x9e\x1bA\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00f\x81\xc4G\x80\x9d\xb7=9\xab\xe3\xfb\xf1\xac\xfd$\x88:\x1b\x7f\x167Sz\x86\v\x1aj\xcb\x94XNL(\xfeQQ,\x06\xf5L[\x11\x8ej\xaf\x1a\x9c\xde\xd2\xdd{%y\ta\xa6\b\xfc\xdd\f\r\xb9\x13\xd4\x98\xaf#\xfd\x91H\x9b\"@\x7f5|4*tO\xfba\xdb\xd8\xee\x11>\xe0\x99\x7f\\?#\x15\x9aB\x03\xa2\xc8\xd0\xe8\xb9<\xaf\x95F\xd4\xdc}\a\xcc\xd9\x9a\xe6\xa8', 0xffffffffffffffff, 0xee01}}, 0x6f0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000280)={0x8, 0x1, 0x62f, 0x7}, &(0x7f0000000380)=0x10) 6m30.952492208s ago: executing program 47 (id=2999): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) fcntl$setlease(r0, 0x400, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x2014800, 0x0) acct(&(0x7f0000000100)='./file0/bus\x00') read$FUSE(0xffffffffffffffff, 0x0, 0x0) mq_open(&(0x7f0000000140)='\x18\x00\x00vD\x17\rf\x90V\xf1X\xb3\x8fv\xa6\xa3UU\xf1P\xa9\xab\xcc.\xdd\xf8\xef\xf1\x92wc\x02\xeb\xb0\x8ba~\x10\xce\xab\xf8\xb93ytz\xf6\xa2<\x9b\x80\x89\xb5l\b\xa3Z^\xd8\x16\x11n\xc8V,\x1d\x18\xc7\x9b\xf2\xdb\x16\xbe\xd2l\\\xfb|\xfaC\xddL\x00\x00\x00\x00\x04\a\x12\xa9v\xa1\x0f\xa3|\x85\xa4\x8a\xb2\xa5j\xfbe\xd4\xc7-\xcff\x15\x10O\xceKRL\x84\xbb\xa0\xd0;\xc0\xf9j]\xecp\x11\xf4\xda(\xd7^\xc6\xfe\xc3\xc5;\xad\x94X\xda\xb5\xa2\xe8\r\x11\xa5m\xf3OC\x82\xed\x03=\xc5+A\xab\xb6y\xf9P8A\xa7\f\xcf6\xba\x9en\x11\nj\x90\xd3mp\x05\\;Z\x86j\xb2\x84\xea\x15\xef\xd8K\x9e\x98\xb8\xb7\x8a\x9e\xf9\x03\"a]\fm\xbe6\xbf\x897G', 0x40, 0x1b4, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000100)='./cgroup.net/cgroup.procs\x00', &(0x7f0000000140), 0x21c804, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r4}}) io_submit(0x0, 0x1, &(0x7f00000000c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0xa8002, 0x0) write$P9_RSTATu(r5, &(0x7f0000000ec0)={0x6f0, 0x7d, 0x4000, {{0x500, 0x366, 0x0, 0x40, {0x20, 0xffffffff, 0x6}, 0x1310000, 0x0, 0xc, 0x0, 0x10f, '\x04nodZ=\xbfd`\xd2\xc2\x97D,\x027\xfcb%\xff\xff\xff\x80\x05\xff\xff\xff\xfd\x00\x00\xff\x03\xff\x92\xe9\x16\x00\x05\x00\x00\x00,\x93\xcb=\xb6\xc21\xd1\x19\xaa\xa1ou\xc5\x8f\xa6\x88\x9f\xf3\xc8\xf7\xab\xc6\x1bY\xa1\xd2o\fJ\xf8\xe2\x93\xd3\xf8l\xcd\xc6o\xf5{\xe9\x00\x00\x00\x00\x00\x00\x00\x03\xd5\x89-\x8e\xfe\xbb\x9e\x05\xac\nk\xc5)`z\xc6\x8a8\x13\xaf\xe7\x9e\x85cj\xfdl]\x15\xb2\xae\xbb\xb7\xee;\x1e\xae\x8a\x7f\xbe.\x85\x88s\x14\xcb\xec\xf0\xa1\xa5\x124z\x8c\x15\xb3 \xd1\xe1\xc0\x10Uz\xaaw\x16^Q`208^|\'\x01\x00\xacB3\x00D\xa9\b=\xe5\xbe\xd8\xe0\xbd(h\"\x94\xf68\xc3\x8e%uj\xb0\xb0\x7fe\xdb\xd6$\xee\x95_}\xa7\x8e\xe1\x96I7?0\xe3\xf7\xb9d\xf0\xa2f\xc3\xac\x9ePwS\xa3\xc4\x03\xc8{\xf1Jv\x87%\x91h\xb4[\xbdz\x1f\xd8`\x0e\xa1.\x00\xdb\xfeL\x1a\xfe\xea\xaf\x9d{\xb4\xa7Z\x1c\x82\x18\x93\xf7\xf4|\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00\xcaY_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x06\xb4\x94\xe1H\xea\x97\x8b\xab\xa0\xfe5\xb3e\xdc\x81i\xea\x90\xb2\xcd\xef`\x107\t\xd4\xe0\xd61\x15pL\xba\xc2`\xa7\xe8\x0e\x04i(D\xddZ>n{\x1e\xdc\xc7\xebK\x89F\xa5!\x9d\xb2\x94\xe1\xb6|J\x04P\xe3\x81cX\xb2q]\xba`\xc8\xcc\xf0\xb2\x8di\xf1\x14\xff\xff\xcc\xeb?bF\xe3\xbaDys4\xf5_\xf7u\x82\xa6\xb7\x04\xe7H`\xd0\xca\x05Y-v\xc8\x99m\xd5\x9b\x80\b&.k8\xed\xa7z\xb9\xc6\x00\xb6\n\x9d\xd4\xc7\xe0\x97k\xeb\x90\xbf\x10\xb2=pn\xe9h0\xcd.\xf3r[?Cs+\xc2l\xaa\xde\t\xedWF\x9b\xf2p\x97\x88\x01L%!\xb3\x1c<\xf5\xff\xcd5\x18\xbd#LP\x9e\xcaA\a\xa1q,\xaa\x9d\xa5=\x05\x1c6\x88Ly\x18&a\xf3\xca6\xbc\xdb\xfb\xbd&q\t\xf81\x9d\x8d\xd5\xc0p\x99\xeb\x1b\x11\x03\x06U\xf5biOat=\x19B\x1bJ\x19\xef\x8b\x8bL\xe9\xc9\x93\xc7\xd6\xcb0\fNezNP\xa3[\\\xc1k\x8c\x16\x1a\x8e=\xf9\x03k\xbc\xf2\x8a\xdc\xd1\x9alL)\x17\t\xae\xe5\xab>[\xc5\xae)\xf4u\xe4\xd2D\b\xb5\x16}\x0f\xaf_\xc1Vkp\\\x8b`\xaf\xa8\xac\xa4/~\x04i\x18\x8a\x0e\xf0b\xca\x18\xe3\x8f\x9e\xe1\n\xc7}+~\xb9\xd6\x0e\xa7\x9f\xdbUd\x11H[\x1b\x13\xdb\xb8\xa2\xa6b.\xbc\xf8Lio\xa4\xda!\xba\xd22\r\rh\xe9\xbfCF\xf0ha\x19\xa3\x9e@\x03\x95\xc8\xf2\x82^\xa0i\xae\x0e\x14;\xd1\xa4Ay\xedlTp,^\x9a\x19\xcc\x7f\xfaP\x0f\xa4\x1bl\x80I\xbd\xe4X\'\xd5N\xc9\x01\xd2z\xd1%\x05h\x89\xb33k?\x06\x83\x8c[fz\xe2.\xfe;\xc1[\x82_\x7f\xbc\xe4\x80\'(\x1c\xf9\xfe\x8f\xc2\x1f\xc7|$=\xe2g\x051\x0e\xb8\x1c\xf7M\xe0)1\x92\xa1?j\xd0W\xdea\xfd\x8a\xba\x8e\xf4C\x9b\xc0jE\xb2\xb01bQZ#C:\xfe\xb5*\xed\xb5\xabo3FS8\x05\x15\xf7y\xf3]\xc8\xa7\x8c7w$\x92\xa2(L!\xd2\x13V\xd4s\xf0\x0f\x85\x13|{\xf0cou}5(\x86\x9b?\x00w5\xcf\xf8\\\x9d\x97\x8b\xf5]\xcc&\xd6-%\xe3\b\xf0\x88\'\xa9\x1f\xf4{\xec\x92\xf8\xe9\x1ey\bfT\x00\xaaN9\xb3Y\x86#\x9d\\{\x94\x92\xc5\xbb&\xbcU\xb5[I\xedpHnn}\xa3\x8c \x84P\xf9\xf7\x9e\x1bA\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00f\x81\xc4G\x80\x9d\xb7=9\xab\xe3\xfb\xf1\xac\xfd$\x88:\x1b\x7f\x167Sz\x86\v\x1aj\xcb\x94XNL(\xfeQQ,\x06\xf5L[\x11\x8ej\xaf\x1a\x9c\xde\xd2\xdd{%y\ta\xa6\b\xfc\xdd\f\r\xb9\x13\xd4\x98\xaf#\xfd\x91H\x9b\"@\x7f5|4*tO\xfba\xdb\xd8\xee\x11>\xe0\x99\x7f\\?#\x15\x9aB\x03\xa2\xc8\xd0\xe8\xb9<\xaf\x95F\xd4\xdc}\a\xcc\xd9\x9a\xe6\xa8', 0xffffffffffffffff, 0xee01}}, 0x6f0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000280)={0x8, 0x1, 0x62f, 0x7}, &(0x7f0000000380)=0x10) 6m30.698501985s ago: executing program 5 (id=3004): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}, 0x1, 0xffffff9e}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0) 6m30.613504124s ago: executing program 5 (id=3012): syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) io_setup(0x1, &(0x7f0000000380)=0x0) io_submit(r0, 0x1, &(0x7f0000000000)=[0x0]) syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x402) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x8012b9, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r1, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r3, 0x2ded, 0xef96, 0x53, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) io_setup(0x8, &(0x7f0000000680)=0x0) io_pgetevents(r4, 0x2, 0x0, &(0x7f00000000c0), &(0x7f0000000700)={0x0, 0x3938700}, 0x0) io_submit(r4, 0x2, &(0x7f0000000380)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0, 0x2, r2}, 0x0]) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000012c0)=ANY=[@ANYBLOB="1b000000000000000000000000000400000000", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000ffffffe500000000000000000000003f000000000000001000"], 0x50) 6m29.263216164s ago: executing program 5 (id=3008): r0 = syz_open_dev$mouse(0x0, 0x2, 0x400000) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x62) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400), 0x10000, &(0x7f0000000180)=ANY=[@ANYBLOB='huge=always,mpol=interleave']) chdir(&(0x7f0000000240)='./file0\x00') syz_clone(0x4000000, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000240), 0x3af4701e) mount$overlay(0x0, &(0x7f00000004c0)='./bus\x00', &(0x7f0000000480), 0x240000, &(0x7f0000000500)) 6m29.023479318s ago: executing program 5 (id=3010): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x5e, 0x526d630517582f20, 0x4}) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000200)={0x1c, 0x526d630517582f25, 0x4}) ioctl$MON_IOCX_GET(0xffffffffffffffff, 0x40189206, &(0x7f0000000340)={0x0, 0x0}) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x16, &(0x7f0000000540)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6f5, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}, @call={0x85, 0x0, 0x0, 0xcb}, @exit, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x23}, 0x94) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r2, r4, 0x25, 0x4, @val=@tcx={@void, @value=r2}}, 0x1c) syz_emit_ethernet(0x1e, &(0x7f0000000440)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x5a}, @void, {@can={0xc, {{0x3, 0x0, 0x1}, 0x6, 0x0, 0x0, 0x0, "84349b359fc0bacc"}}}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x3, &(0x7f0000000140)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000005580)=""/102392, 0x18ff8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x38011, r5, 0x0) r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x80c42, 0x0) read(r7, &(0x7f0000000040)=""/148, 0xffffff96) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000340)) 6m28.371760073s ago: executing program 5 (id=3016): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @broadcast}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001740)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {0x10}, {}, {0x2, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x2c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x1, 0x6, 0x7, 0x8, 0x6}, {0x67, 0x0, 0x3, 0x2, 0xf, 0x5}, 0x9, 0x7, 0x29c}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40098}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r7, &(0x7f00000005c0)="24785466124cebc6c81c38c136a9", 0xe, 0x40000c0, &(0x7f00000001c0)={0x11, 0xf8, r6, 0x1, 0xd8, 0x6, @remote}, 0x14) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r8) sendmsg$TIPC_CMD_ENABLE_BEARER(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000d0000000000010000000000030001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) 6m28.273076855s ago: executing program 48 (id=3016): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @broadcast}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001740)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {0x10}, {}, {0x2, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x2c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x1, 0x6, 0x7, 0x8, 0x6}, {0x67, 0x0, 0x3, 0x2, 0xf, 0x5}, 0x9, 0x7, 0x29c}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40098}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r7, &(0x7f00000005c0)="24785466124cebc6c81c38c136a9", 0xe, 0x40000c0, &(0x7f00000001c0)={0x11, 0xf8, r6, 0x1, 0xd8, 0x6, @remote}, 0x14) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r8) sendmsg$TIPC_CMD_ENABLE_BEARER(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000d0000000000010000000000030001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) 6m8.633458622s ago: executing program 8 (id=3121): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd0100000000001400000060883e0003082f00fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) 6m8.473066739s ago: executing program 8 (id=3124): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x600}, @IFLA_GROUP={0x8}]}, 0xfe61}, 0x1, 0x0, 0x0, 0x600}, 0x880) 6m8.382119724s ago: executing program 8 (id=3126): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 6m8.375812276s ago: executing program 8 (id=3128): r0 = syz_open_dev$mouse(0x0, 0x2, 0x400000) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[], 0x0}, 0x94) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x62) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400), 0x10000, &(0x7f0000000180)=ANY=[@ANYBLOB='huge=always,mpol=interleave']) chdir(&(0x7f0000000240)='./file0\x00') syz_clone(0x4000000, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000240), 0x3af4701e) mount$overlay(0x0, &(0x7f00000004c0)='./bus\x00', &(0x7f0000000480), 0x240000, &(0x7f0000000500)) 6m8.129007121s ago: executing program 8 (id=3132): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x4d, @rand_addr, 0x10000}, 0x1c) syz_emit_ethernet(0x38, &(0x7f00000001c0)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2a, 0x0, 0x0, 0x20, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x16, 0x0, @gue={{0x2, 0x1, 0x1, 0x7, 0x100, @val=0x4000000}, "d78ed2e82f63"}}}}}}, 0x0) 6m7.024048174s ago: executing program 8 (id=3134): r0 = openat$sequencer(0xffffff9c, &(0x7f0000000040), 0x2000, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x8c, 0x30, 0x401, 0x0, 0x0, {}, [{0x78, 0x1, [@m_ct={0x2c, 0x3, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000200)='\f\x8b\x8a\xa9\x16\x11O\xdd\xdfk(F\x99\xdf\x9a\xd5>oJ\x02u\x9b\x94a\xac\xfe6A\xc4\a\x9e\xbd\xa2\xfb\rD\xefq\x1f!\x01\xc3\xa5U\x98\xee\xcd;A\xe8\x00~V\xbf\xd4\x00\xd2,7\xa0\xfd7\xe8\xf9M\x02\xec\f3\xd4\xb8\xc3\x85\xda\xeb\xce7y%S\x1e\xa9\xe9\x92!\x95\xf1Ek\x95\x9bQ\x1d\xa4\xc2\xbb\xfa\x96\x14\x7f\xb9\x90\x9cn\xb5\x10\xd2\x84\xe9\x9e1\x9a\x9e\xa7\x9e\xcd\x1a\x86\x14%\xbaS\x90\xb1j\xf9\x00\xd7@D\x04\xaa\xb55\xd8x?z\xff\x85j3\xbe\axo\x05)\xcc\xcd\x9b\xb3\xe7w\x0e\x9f\xd3\aU\xf0M\xc1\xad\x17t\xeb\x1b\x11m\xec\x00\x00\x00\x00R\xb6v\x88\a\x82\x9e\x00\x00\x00\x10\x00\x00\x00\xa6!\xb3\xa8\xe7[&\x165\x84\xce\xa5\xc4wT\xf2E\tj\x92G\x14\x04\x93\xa4\xba\xcb\xce\"Y\xd68\xeb\x01\xc9/\x19\x85\xc6\x8do\xcb\x17\xb5\xffW\xe6\x8a\xfb\a\xf6', 0x2) write$binfmt_misc(r2, &(0x7f0000000280), 0xff9d) (async, rerun: 32) sendfile(r1, r2, &(0x7f0000000100), 0x2) (rerun: 32) fcntl$addseals(r2, 0x409, 0x8) (async, rerun: 64) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) (async, rerun: 64) r3 = getpid() (async) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000f80)=0x0) sendmsg$nl_xfrm(r4, &(0x7f0000001000)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000001240)=ANY=[@ANYBLOB="d00200001b0020002cbd7000fedbdf25ffffffff000000000000000000000000ac1414280000000000000000000000004e2000004e2000040a0080a040000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=r5, @ANYBLOB="0000000000000000feffffffffffffff05000000000100000000000000008000a9d2790d008b000000000000000f6e00000000000006000000000000002d030000000000000900000000000000ff030000000000004000000000000000a22b0000b26b6e0001010302"], 0x2d0}, 0x1, 0x0, 0x0, 0x40080}, 0x24004811) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async, rerun: 64) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) (rerun: 64) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r6, &(0x7f0000000000), 0x0, 0x2, 0x0) (async) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) (async) r8 = socket$netlink(0x10, 0x3, 0xa) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) (async, rerun: 32) sendmsg$nl_route_sched(r8, 0x0, 0x880) (async, rerun: 32) connect$inet(0xffffffffffffffff, &(0x7f0000001980)={0x2, 0x1, @dev={0xac, 0x14, 0x14, 0x10}}, 0xc) (async) ioctl$SNDCTL_SEQ_GETOUTCOUNT(r0, 0x80045104, &(0x7f0000000080)) 6m6.988306039s ago: executing program 49 (id=3134): r0 = openat$sequencer(0xffffff9c, &(0x7f0000000040), 0x2000, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x8c, 0x30, 0x401, 0x0, 0x0, {}, [{0x78, 0x1, [@m_ct={0x2c, 0x3, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000200)='\f\x8b\x8a\xa9\x16\x11O\xdd\xdfk(F\x99\xdf\x9a\xd5>oJ\x02u\x9b\x94a\xac\xfe6A\xc4\a\x9e\xbd\xa2\xfb\rD\xefq\x1f!\x01\xc3\xa5U\x98\xee\xcd;A\xe8\x00~V\xbf\xd4\x00\xd2,7\xa0\xfd7\xe8\xf9M\x02\xec\f3\xd4\xb8\xc3\x85\xda\xeb\xce7y%S\x1e\xa9\xe9\x92!\x95\xf1Ek\x95\x9bQ\x1d\xa4\xc2\xbb\xfa\x96\x14\x7f\xb9\x90\x9cn\xb5\x10\xd2\x84\xe9\x9e1\x9a\x9e\xa7\x9e\xcd\x1a\x86\x14%\xbaS\x90\xb1j\xf9\x00\xd7@D\x04\xaa\xb55\xd8x?z\xff\x85j3\xbe\axo\x05)\xcc\xcd\x9b\xb3\xe7w\x0e\x9f\xd3\aU\xf0M\xc1\xad\x17t\xeb\x1b\x11m\xec\x00\x00\x00\x00R\xb6v\x88\a\x82\x9e\x00\x00\x00\x10\x00\x00\x00\xa6!\xb3\xa8\xe7[&\x165\x84\xce\xa5\xc4wT\xf2E\tj\x92G\x14\x04\x93\xa4\xba\xcb\xce\"Y\xd68\xeb\x01\xc9/\x19\x85\xc6\x8do\xcb\x17\xb5\xffW\xe6\x8a\xfb\a\xf6', 0x2) write$binfmt_misc(r2, &(0x7f0000000280), 0xff9d) (async, rerun: 32) sendfile(r1, r2, &(0x7f0000000100), 0x2) (rerun: 32) fcntl$addseals(r2, 0x409, 0x8) (async, rerun: 64) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) (async, rerun: 64) r3 = getpid() (async) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000f80)=0x0) sendmsg$nl_xfrm(r4, &(0x7f0000001000)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000001240)=ANY=[@ANYBLOB="d00200001b0020002cbd7000fedbdf25ffffffff000000000000000000000000ac1414280000000000000000000000004e2000004e2000040a0080a040000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=r5, @ANYBLOB="0000000000000000feffffffffffffff05000000000100000000000000008000a9d2790d008b000000000000000f6e00000000000006000000000000002d030000000000000900000000000000ff030000000000004000000000000000a22b0000b26b6e0001010302"], 0x2d0}, 0x1, 0x0, 0x0, 0x40080}, 0x24004811) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async, rerun: 64) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) (rerun: 64) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r6, &(0x7f0000000000), 0x0, 0x2, 0x0) (async) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) (async) r8 = socket$netlink(0x10, 0x3, 0xa) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) (async, rerun: 32) sendmsg$nl_route_sched(r8, 0x0, 0x880) (async, rerun: 32) connect$inet(0xffffffffffffffff, &(0x7f0000001980)={0x2, 0x1, @dev={0xac, 0x14, 0x14, 0x10}}, 0xc) (async) ioctl$SNDCTL_SEQ_GETOUTCOUNT(r0, 0x80045104, &(0x7f0000000080)) 6m4.461077128s ago: executing program 4 (id=3155): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x6) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x10, @mcast2}, 0x1c) sendmmsg$inet6(r3, &(0x7f00000015c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000a40)}}, {{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000bc0)="b37e8d8e2701c513ff18766901d2a16406cbd2bf7405b3b3e3ea25b31806", 0x1e}, {&(0x7f0000000dc0)="11b2f23552dbee5fdb5ce9f9ef0f34941be1b8d0cad6145b", 0x18}], 0x2}}, {{0x0, 0x0, &(0x7f0000001100)=[{&(0x7f0000000f00)="e8b5880486801e29aac1506ea21503664e4d6c408ee727aabae8f5e0ce9405fe5989baf51b2959cfba7dc341aef71a3fe3db7850827c331ac8ab17f3ee859f4a912321efca0c5a34a94dfcb1fb0cf43342e36c7faa7e0245bbb46ef714fc54601e7307b7e760a03dc5f40ae2509f6885fd394b9901a8434ce1084743c0ec70f5bfca1bfdf57aa010f39beefafb6b81805c61b8606d3077452491a22b15c844135f3c11d4", 0xa4}, {0x0}], 0x2}}], 0x4, 0x400c404) sendmmsg$inet6(r3, &(0x7f00000055c0)=[{{0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f0000000c00)='s', 0x1}], 0x1}}], 0x1, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x14, &(0x7f0000000700)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a58000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$netlink(0x10, 0x3, 0x0) sched_setscheduler(0xffffffffffffffff, 0x2, &(0x7f0000000640)) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x10, 0x0, @mcast2}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000380)=ANY=[@ANYBLOB="0b000000000000000a00000000000000ff02000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006000000000000000000000000000000000000000000000000000000000000000002000000"], 0x190) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000005c0)={0xffffffffffffffff, &(0x7f00000004c0)="36beea094dd52da13db3581bee661f0b2ec66ddaa325208727ed26972328507327187867ad25136de174a37dd92c13d58c9bdd990a70a50591123570516ca881798724ed3c9d141d44f77a04cf5490eb9cf0fcf5f69af351f3b3e0177127f760ec391e608c6ffb79bb2400c1f7a7b26d1cade4730583c0f86cda", &(0x7f00000002c0)=""/9, 0x4}, 0x1c) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x800) recvmmsg(r4, &(0x7f0000007700), 0x318, 0xfc0, 0x0) r6 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0xfd], 0x0, [0x4, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x0, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x10000, {0x0, 0x0, 0x0, r7, {0x0, 0x5}, {0x1, 0xffff}, {0x2, 0x3}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8041}, 0x800) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/softlockup_count', 0x0, 0x0) preadv(r8, &(0x7f0000001840)=[{&(0x7f0000001640)=""/16, 0x10}], 0x1, 0x2, 0x5) ioctl$KVM_CAP_SPLIT_IRQCHIP(r8, 0x4068aea3, &(0x7f0000000440)={0x79, 0x0, 0x9cd}) 6m4.293823116s ago: executing program 1 (id=3157): socket$unix(0x1, 0x5, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/mdstat\x00', 0x0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x800, 0x40000000, 0x100000}, 0x0, &(0x7f0000000040)={0x1f, 0x0, 0x0, 0x0, 0xfffffdfe, 0x0, 0x6a9}, &(0x7f0000000000)={0x0, 0x3938700}, 0x0) 6m4.161846794s ago: executing program 1 (id=3158): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="1400000010000100000000000000000000f5ff0a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}, 0x1, 0x0, 0x0, 0x8053}, 0x0) 6m4.102498499s ago: executing program 1 (id=3159): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi0\x00', 0x400, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) capset(0x0, &(0x7f0000000140)) r6 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)="5c00000012006bab9e3fe3d86e6c1d000014a10d00003f00000004b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dffefffffffffffffff60a64c9f4080003fe060100000400020011b53631", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x44010) prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ffd000/0x2000)=nil) dup(0xffffffffffffffff) r7 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYBUF(r7, 0xc044560f, &(0x7f0000000080)=@mmap={0x0, 0x2, 0x4, 0x0, 0x7, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "10110401"}}) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000000)={0xa, 0x4e24, 0x8, @ipv4={'\x00', '\xff\xff', @local}, 0x2}, 0x1c, &(0x7f0000000380)=[{0x0}], 0x1}, 0x4048043) dup(0xffffffffffffffff) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f00000000c0)={'comedi_bond\x00', [0x2f, 0x80, 0x10006, 0x4, 0x1, 0xcc7, 0x8, 0x17, 0xa, 0x24c, 0xfff, 0x7, 0x5, 0x5, 0x4, 0x105, 0x8, 0x2, 0x2009, 0x1, 0x89, 0x6, 0x0, 0x20001e5a, 0x1000b, 0x7, 0x9, 0x8, 0x6, 0x401, 0xfffffffd]}) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r8, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x503, 0x70bd2d, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @gre={{0x8}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x2000000) lseek(r0, 0x9, 0x0) 6m1.915087347s ago: executing program 1 (id=3161): r0 = syz_open_dev$mouse(0x0, 0x2, 0x400000) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[], &(0x7f0000000080)='GPL\x00'}, 0x94) openat$misdntimer(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x62) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400), 0x10000, &(0x7f0000000180)=ANY=[@ANYBLOB='huge=always,mpol=interleave']) chdir(&(0x7f0000000240)='./file0\x00') syz_clone(0x4000000, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000240), 0x3af4701e) mount$overlay(0x0, &(0x7f00000004c0)='./bus\x00', &(0x7f0000000480), 0x240000, &(0x7f0000000500)) 6m1.552057585s ago: executing program 1 (id=3163): syz_emit_ethernet(0xbe, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001280)=[{{0x0, 0x0, &(0x7f0000001480)=[{&(0x7f0000000040)="f550b36301e9a32630461b1edea61a15dc8e30", 0x13}], 0x1}}], 0x1, 0x20044000) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd00000080190000000000000000000300", [0x8, 0xffffffff9673e35d]}}) 6m0.923213107s ago: executing program 1 (id=3164): r0 = openat$iommufd(0xffffff9c, &(0x7f0000000000), 0x440000, 0x0) ioctl$IOMMU_DESTROY$stdev(r0, 0x3b80, &(0x7f0000000040)={0x8}) openat$kvm(0xffffff9c, &(0x7f0000000080), 0x10000, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000100)={0xffffffffffffffff}, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000180)={0x10, 0x30, 0xfa00, {&(0x7f00000000c0), 0x3, {0xa, 0x4e20, 0x5, @remote, 0x3}, r1}}, 0x38) r2 = syz_open_dev$vcsa(&(0x7f00000001c0), 0x8, 0x101001) write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000240)={0x1, 0x10, 0xfa00, {&(0x7f0000000200), r1}}, 0x18) read$FUSE(r2, &(0x7f0000000300)={0x2020, 0x0, 0x0, 0x0}, 0x2020) read$FUSE(r2, &(0x7f0000002340)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), 0x14a050, &(0x7f0000004380)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x3000}, 0x2c, {'user_id', 0x3d, r4}, 0x2c, {'group_id', 0x3d, r5}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x200}}, {@max_read={'max_read', 0x3d, 0x8}}, {@default_permissions}, {@default_permissions}, {@default_permissions}, {@blksize={'blksize', 0x3d, 0x1e00}}, {@blksize={'blksize', 0x3d, 0x1400}}, {@blksize={'blksize', 0x3d, 0x800}}, {@allow_other}], [{@obj_user}, {@euid_gt={'euid>', 0xee00}}, {@smackfsroot={'smackfsroot', 0x3d, '/dev/vcsa#\x00'}}]}}) getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000004500)=0x7, &(0x7f0000004540)=0x2) r6 = openat$rdma_cm(0xffffff9c, &(0x7f0000004580), 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r6, &(0x7f00000045c0)={0xf, 0x8, 0xfa00, {r1, 0x10}}, 0x10) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r6, 0xf501, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(r2, 0x641f) write$FUSE_STATX(r2, &(0x7f0000004600)={0x130, 0x0, r3, {0x100000000, 0x5, 0x0, '\x00', {0x200, 0x5, 0x9, 0x5, r4, r5, 0x8000, '\x00', 0x80, 0xca, 0x5, 0x401, {0x5635, 0x3}, {}, {0x9, 0xe4be}, {0x4, 0x795ee73d}, 0x80000000, 0x1, 0x50753495, 0xe}}}, 0x130) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000004780), r2) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000004880)={&(0x7f0000004740)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000004840)={&(0x7f00000047c0)={0x44, r7, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x5}, {0x6, 0x11, 0x7}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x8010) r8 = openat$rdma_cm(0xffffff9c, &(0x7f00000048c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r8, &(0x7f0000004900)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e24, 0x9, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x9}, r1}}, 0x30) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000004bc0)={'syztnl0\x00', &(0x7f0000004b00)={'gretap0\x00', 0x0, 0x7, 0x8, 0xfff, 0xa1f5, {{0x1a, 0x4, 0x0, 0x3, 0x68, 0x68, 0x0, 0x5, 0x8b2117366841c390, 0x0, @empty, @empty, {[@timestamp_prespec={0x44, 0x2c, 0x28, 0x3, 0x3, [{@broadcast, 0x1}, {@broadcast, 0x3fdf4b26}, {@loopback, 0x7fffffff}, {@rand_addr=0x64010101, 0xfffffffd}, {@broadcast, 0x101}]}, @noop, @generic={0x44, 0x9, "405f4849ead970"}, @ra={0x94, 0x4, 0x1}, @cipso={0x86, 0x19, 0x3, [{0x0, 0xa, "1604ec5e9ff89025"}, {0x2, 0x7, "33ab6a9ae8"}, {0x7, 0x2}]}]}}}}}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000004d80)={r2, 0x20, &(0x7f0000004d40)={&(0x7f0000004c80)=""/65, 0x41, 0x0, &(0x7f0000004d00)=""/56, 0x38}}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000004e80)=@bpf_lsm={0x1d, 0x10, &(0x7f0000004940)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7f}, [@cb_func={0x18, 0x1, 0x4, 0x0, 0xfffffffffffffffb}, @exit, @map_fd={0x18, 0x4, 0x1, 0x0, r2}, @jmp={0x5, 0x1, 0x0, 0x0, 0x3, 0x8, 0xfffffffffffffff0}, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @cb_func={0x18, 0x2, 0x4, 0x0, 0x7}]}, &(0x7f00000049c0)='syzkaller\x00', 0x1000, 0xda, &(0x7f0000004a00)=""/218, 0x40f00, 0x7, '\x00', r9, 0x1b, r2, 0x8, &(0x7f0000004c00)={0x4, 0x5}, 0x8, 0x10, &(0x7f0000004c40)={0x5, 0x10, 0x0, 0xd5db}, 0x10, r10, 0x0, 0x5, &(0x7f0000004dc0)=[r2, r2, r2], &(0x7f0000004e00)=[{0x0, 0x1, 0x0, 0xa}, {0x5, 0x1, 0xe}, {0x3, 0x5, 0x10, 0x1}, {0x2, 0x3, 0x4}, {0x5, 0x5, 0xc}], 0x10, 0x2}, 0x94) r11 = dup3(r0, r2, 0x80000) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc0f8565c, &(0x7f0000004f40)={0x7, 0x8, 0x4, {0x8, @sliced={0x7, [0x1, 0xef2, 0x9, 0x8, 0x7, 0x7, 0x29, 0x3, 0x2, 0x43, 0x3, 0x101, 0x2, 0xefc, 0x47a, 0x64, 0x3c02, 0x7, 0x3ff, 0x44bf, 0x2, 0xa582, 0xa542, 0xc61b, 0xa, 0x1, 0x5d9, 0x7, 0x795, 0xf9b, 0x4, 0xfc01, 0x4, 0x5, 0x400, 0xaece, 0x3, 0x1ff, 0xff, 0xd9b, 0x3, 0xc478, 0xf8, 0x1, 0x7f, 0x5, 0x0, 0x400], 0x2}}, 0x101}) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000005080)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000005040), 0x111, 0xa}}, 0x20) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) fstat(r11, &(0x7f00000050c0)) poll(&(0x7f0000005140)=[{r2, 0xc180}, {0xffffffffffffffff, 0x180}], 0x2, 0xdc1c) 6m0.762168202s ago: executing program 50 (id=3164): r0 = openat$iommufd(0xffffff9c, &(0x7f0000000000), 0x440000, 0x0) ioctl$IOMMU_DESTROY$stdev(r0, 0x3b80, &(0x7f0000000040)={0x8}) openat$kvm(0xffffff9c, &(0x7f0000000080), 0x10000, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000100)={0xffffffffffffffff}, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000180)={0x10, 0x30, 0xfa00, {&(0x7f00000000c0), 0x3, {0xa, 0x4e20, 0x5, @remote, 0x3}, r1}}, 0x38) r2 = syz_open_dev$vcsa(&(0x7f00000001c0), 0x8, 0x101001) write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000240)={0x1, 0x10, 0xfa00, {&(0x7f0000000200), r1}}, 0x18) read$FUSE(r2, &(0x7f0000000300)={0x2020, 0x0, 0x0, 0x0}, 0x2020) read$FUSE(r2, &(0x7f0000002340)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), 0x14a050, &(0x7f0000004380)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x3000}, 0x2c, {'user_id', 0x3d, r4}, 0x2c, {'group_id', 0x3d, r5}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x200}}, {@max_read={'max_read', 0x3d, 0x8}}, {@default_permissions}, {@default_permissions}, {@default_permissions}, {@blksize={'blksize', 0x3d, 0x1e00}}, {@blksize={'blksize', 0x3d, 0x1400}}, {@blksize={'blksize', 0x3d, 0x800}}, {@allow_other}], [{@obj_user}, {@euid_gt={'euid>', 0xee00}}, {@smackfsroot={'smackfsroot', 0x3d, '/dev/vcsa#\x00'}}]}}) getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000004500)=0x7, &(0x7f0000004540)=0x2) r6 = openat$rdma_cm(0xffffff9c, &(0x7f0000004580), 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r6, &(0x7f00000045c0)={0xf, 0x8, 0xfa00, {r1, 0x10}}, 0x10) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r6, 0xf501, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(r2, 0x641f) write$FUSE_STATX(r2, &(0x7f0000004600)={0x130, 0x0, r3, {0x100000000, 0x5, 0x0, '\x00', {0x200, 0x5, 0x9, 0x5, r4, r5, 0x8000, '\x00', 0x80, 0xca, 0x5, 0x401, {0x5635, 0x3}, {}, {0x9, 0xe4be}, {0x4, 0x795ee73d}, 0x80000000, 0x1, 0x50753495, 0xe}}}, 0x130) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000004780), r2) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000004880)={&(0x7f0000004740)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000004840)={&(0x7f00000047c0)={0x44, r7, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x5}, {0x6, 0x11, 0x7}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x8010) r8 = openat$rdma_cm(0xffffff9c, &(0x7f00000048c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r8, &(0x7f0000004900)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e24, 0x9, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x9}, r1}}, 0x30) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000004bc0)={'syztnl0\x00', &(0x7f0000004b00)={'gretap0\x00', 0x0, 0x7, 0x8, 0xfff, 0xa1f5, {{0x1a, 0x4, 0x0, 0x3, 0x68, 0x68, 0x0, 0x5, 0x8b2117366841c390, 0x0, @empty, @empty, {[@timestamp_prespec={0x44, 0x2c, 0x28, 0x3, 0x3, [{@broadcast, 0x1}, {@broadcast, 0x3fdf4b26}, {@loopback, 0x7fffffff}, {@rand_addr=0x64010101, 0xfffffffd}, {@broadcast, 0x101}]}, @noop, @generic={0x44, 0x9, "405f4849ead970"}, @ra={0x94, 0x4, 0x1}, @cipso={0x86, 0x19, 0x3, [{0x0, 0xa, "1604ec5e9ff89025"}, {0x2, 0x7, "33ab6a9ae8"}, {0x7, 0x2}]}]}}}}}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000004d80)={r2, 0x20, &(0x7f0000004d40)={&(0x7f0000004c80)=""/65, 0x41, 0x0, &(0x7f0000004d00)=""/56, 0x38}}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000004e80)=@bpf_lsm={0x1d, 0x10, &(0x7f0000004940)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7f}, [@cb_func={0x18, 0x1, 0x4, 0x0, 0xfffffffffffffffb}, @exit, @map_fd={0x18, 0x4, 0x1, 0x0, r2}, @jmp={0x5, 0x1, 0x0, 0x0, 0x3, 0x8, 0xfffffffffffffff0}, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @cb_func={0x18, 0x2, 0x4, 0x0, 0x7}]}, &(0x7f00000049c0)='syzkaller\x00', 0x1000, 0xda, &(0x7f0000004a00)=""/218, 0x40f00, 0x7, '\x00', r9, 0x1b, r2, 0x8, &(0x7f0000004c00)={0x4, 0x5}, 0x8, 0x10, &(0x7f0000004c40)={0x5, 0x10, 0x0, 0xd5db}, 0x10, r10, 0x0, 0x5, &(0x7f0000004dc0)=[r2, r2, r2], &(0x7f0000004e00)=[{0x0, 0x1, 0x0, 0xa}, {0x5, 0x1, 0xe}, {0x3, 0x5, 0x10, 0x1}, {0x2, 0x3, 0x4}, {0x5, 0x5, 0xc}], 0x10, 0x2}, 0x94) r11 = dup3(r0, r2, 0x80000) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc0f8565c, &(0x7f0000004f40)={0x7, 0x8, 0x4, {0x8, @sliced={0x7, [0x1, 0xef2, 0x9, 0x8, 0x7, 0x7, 0x29, 0x3, 0x2, 0x43, 0x3, 0x101, 0x2, 0xefc, 0x47a, 0x64, 0x3c02, 0x7, 0x3ff, 0x44bf, 0x2, 0xa582, 0xa542, 0xc61b, 0xa, 0x1, 0x5d9, 0x7, 0x795, 0xf9b, 0x4, 0xfc01, 0x4, 0x5, 0x400, 0xaece, 0x3, 0x1ff, 0xff, 0xd9b, 0x3, 0xc478, 0xf8, 0x1, 0x7f, 0x5, 0x0, 0x400], 0x2}}, 0x101}) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000005080)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000005040), 0x111, 0xa}}, 0x20) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) fstat(r11, &(0x7f00000050c0)) poll(&(0x7f0000005140)=[{r2, 0xc180}, {0xffffffffffffffff, 0x180}], 0x2, 0xdc1c) 5m59.337997423s ago: executing program 2 (id=3135): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x4) write$uinput_user_dev(r0, &(0x7f0000000ec0)={'syz0\x00', {}, 0x26, [0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000b, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffc, 0xffffffff, 0x0, 0x0, 0x7, 0xfe], [0x0, 0x0, 0x2, 0xb56, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0xe, 0x0, 0x2, 0x0, 0x0, 0x0, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x8, 0x0, 0x0, 0x548, 0xffffc], [0x9, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4002, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x2, 0xe, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfefffffd, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000a40)={'syz0\x00', {0x2f00}, 0x4d, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0xffff], [0xffffffff, 0x3, 0x3, 0x0, 0x0, 0x40400, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x400000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c], [0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffffffff, 0x0, 0x3, 0x8000000, 0x0, 0x0, 0x6, 0x0, 0x3, 0x4, 0x80, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x85, 0x0, 0x5d30, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0xc7, 0xfffffff1, 0x5, 0x401, 0x0, 0x0, 0x0, 0x0, 0x764, 0x0, 0x4, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x40000000, 0x1, 0x0, 0xb, 0x8, 0x0, 0x2, 0x0, 0x98, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe58b, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1ff, 0xffffffff]}, 0x45c) 5m59.198297773s ago: executing program 2 (id=3170): r0 = syz_open_dev$mouse(0x0, 0x2, 0x400000) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[], &(0x7f0000000080)='GPL\x00'}, 0x94) openat$misdntimer(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x62) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400), 0x10000, &(0x7f0000000180)=ANY=[@ANYBLOB='huge=always,mpol=interleave']) chdir(&(0x7f0000000240)='./file0\x00') syz_clone(0x4000000, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000240), 0x3af4701e) mount$overlay(0x0, &(0x7f00000004c0)='./bus\x00', &(0x7f0000000480), 0x240000, &(0x7f0000000500)) 5m58.93289519s ago: executing program 2 (id=3171): r0 = openat$rdma_cm(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0x8, @remote, 0x3}, {0xa, 0x4e24, 0x5, @mcast1, 0x9}, r1, 0x9}}, 0x48) close_range(r0, r0, 0x0) (async) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x40, @mcast2, 0x200}, r1}}, 0x30) (async) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000180)={0xffffffffffffffff}, 0x13f, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000200)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e20, 0x9, @empty, 0x3}, r2}}, 0x30) (async) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0186405, &(0x7f0000000240)={0x3, 0x100, {0xffffffffffffffff}, {}, 0x3, 0x246}) sched_setscheduler(r3, 0x0, &(0x7f0000000280)=0x8) (async) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r0, &(0x7f0000000340)={0x10, 0x30, 0xfa00, {&(0x7f0000000300)={0xffffffffffffffff}, 0x4, {0xa, 0x4e24, 0xffffffff, @empty, 0xfffffffc}, r1}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f0000000380)={0x11, 0x10, 0xfa00, {&(0x7f00000002c0), r4}}, 0x18) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000400), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_LBT_MODE(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x4c, r5, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_LBT_MODE={0x5}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) (async) r7 = open(&(0x7f0000000580)='./file0\x00', 0x4a00, 0x51) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000600), r7) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r7, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x34, r8, 0x0, 0x70bd2b, 0x25dfdbff, {}, [@ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x3}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x4}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0xa55}]}, 0x34}, 0x1, 0x0, 0x0, 0x843}, 0x20000015) (async) getpgrp(r3) (async) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000700), 0xc, &(0x7f0000000840)={&(0x7f0000000740)={0xcc, r5, 0x4, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_SEC_DEVKEY={0x10, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}]}, @NL802154_ATTR_SEC_DEVKEY={0x64, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xfffffff7}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x6}, @NL802154_DEVKEY_ATTR_ID={0x28, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x10000}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x4930}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x4}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0xcc}}, 0x8080) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f00000008c0)={'batadv0\x00', 0x0}) stat(&(0x7f0000000900)='./file0\x00', &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f00000009c0)={{{@in=@multicast2, @in=@multicast1, 0x4e24, 0xac, 0x4e24, 0x4, 0x2, 0x90, 0x20, 0x67, r9, r10}, {0x3, 0x6, 0x0, 0x1, 0xd, 0x2, 0x7, 0xfffffffffffffff8}, {0x7, 0x8, 0x7, 0x9}, 0x6, 0x6e6bb7, 0x1, 0x1, 0x2, 0x3}, {{@in=@local, 0x4d3, 0x32}, 0xa, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3500, 0x0, 0x2, 0x7, 0x0, 0xd, 0x8}}, 0xe4) (async) r11 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000ac0)={0x1b, 0x0, 0x0, 0x7ff, 0x0, r7, 0x8, '\x00', r9, r7, 0x1, 0x4, 0x1}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x18, 0x2c, &(0x7f0000000b40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r11}}, {}, [@alu={0x7, 0x0, 0x8, 0x8, 0x2, 0xffffffffffffffff}, @map_val={0x18, 0x4, 0x2, 0x0, r7, 0x0, 0x0, 0x0, 0x29a}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @tail_call={{0x18, 0x2, 0x1, 0x0, r7}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r7}}, @cb_func={0x18, 0x4, 0x4, 0x0, 0xfffffffffffffffb}, @call={0x85, 0x0, 0x0, 0xc8}, @initr0, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @ldst={0x2, 0x3, 0x0, 0x9, 0x5, 0xfffffffffffffff8, 0x10}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000cc0)='GPL\x00', 0x9, 0x8d, &(0x7f0000000d00)=""/141, 0x41100, 0x1d, '\x00', r9, 0x0, r7, 0x8, &(0x7f0000000dc0)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000e00)={0x4, 0x7, 0x5, 0x8}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000e40)=[{0x1, 0x5, 0x10, 0xa}, {0x4, 0x3, 0xffffffff, 0x5}], 0x10, 0xffff}, 0x94) (async) r12 = accept4$inet(r0, &(0x7f0000000f40)={0x2, 0x0, @initdev}, &(0x7f0000000f80)=0x10, 0x800) getsockopt(r12, 0xfffffff8, 0x6, &(0x7f0000000fc0)=""/62, &(0x7f0000001000)=0x3e) (async) ioctl$sock_ifreq(r7, 0x8994, &(0x7f0000001040)={'veth0_to_bridge\x00', @ifru_names='veth1\x00'}) (async) mq_timedsend(r7, &(0x7f0000001080)="019b3bdfe80dfb2ecd3d476f3ebcc867ade6de0491d819273187220a9064f4f2c3232f096ecae383f752cd929a6c9ceb16d9d0b78aad72edfcd06f304911de98aee6157d5f84edd8b06643f08955751f5097ef468ac48bac9f9090142efa0ec4e91a89c6a62a67e0ca588f99f9a7a91007bec2241270178c9449ce021025798ca6b4c0a6b8d1c95685ea9d226dc3b7d8bf13cdaa7b54dc7de66389cab73eb6925381c58c9c24a0a4d8bd67b43fe69ac93513d1c3d633420f006b923c61f107cc1e4d6c5bd8344c5332f2ca0189", 0xcd, 0x421b, &(0x7f0000001180)={0x0, 0x989680}) (async) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001200), r7) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r7, &(0x7f0000001300)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000012c0)={&(0x7f0000001280)={0x28, r13, 0x10, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x18000, 0x7f}}}}, ["", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x24044055}, 0x80) 5m58.429164648s ago: executing program 4 (id=3173): r0 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x40042) write$binfmt_aout(r0, &(0x7f0000000480)=ANY=[@ANYBLOB="00000000f5ffffff000000800080000014000091ff0f00004500f5ff06ff00010100fc5e15f4"], 0x125) 5m58.351167672s ago: executing program 4 (id=3175): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 5m57.990064286s ago: executing program 2 (id=3177): r0 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x6d53, &(0x7f0000000480)={0x0, 0x200003, 0x10100}, &(0x7f00000007c0)=0x0, &(0x7f00000001c0)=0x0) r5 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) mmap$KVM_VCPU(&(0x7f0000ffb000/0x4000)=nil, 0x930, 0x300000f, 0x12, r5, 0x0) dup3(r5, r2, 0x80000) syz_io_uring_submit(r3, r4, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}) io_uring_enter(r2, 0x2def, 0x4000, 0x0, 0x0, 0x0) r6 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) preadv(r6, &(0x7f0000000040)=[{&(0x7f0000000300)=""/213, 0xd5}], 0x1, 0xfffffffe, 0x10a2) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) r7 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r7, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) epoll_create1(0x0) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r8, &(0x7f0000000640)="c9", 0x1, 0x40821, &(0x7f0000000400)={0xa, 0x0, 0x8, @local, 0x7}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r8, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x4, 0x0, 0x3}, 0xe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, &(0x7f0000000100)) shutdown(r8, 0x1) setsockopt$SO_TIMESTAMPING(r8, 0x1, 0x25, &(0x7f0000000000)=0x41dc, 0x4) recvmmsg(r8, &(0x7f0000000880)=[{{0x0, 0xfffffffffffffe90, 0x0}}, {{&(0x7f0000000500)=@rc, 0x80, &(0x7f0000000440)=[{&(0x7f00000000c0)=""/12, 0xc}, {&(0x7f0000000280)=""/7, 0x7}], 0x2, &(0x7f0000000680)=""/240, 0xf0}, 0xfffffffe}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000580)=""/180, 0xb4}], 0x1, &(0x7f0000000800)=""/52, 0x34}, 0xfffffff7}], 0x3, 0x10507, 0x0) syz_io_uring_setup(0xc97, 0x0, &(0x7f00000003c0), &(0x7f0000000140)) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'wg2\x00'}) 5m57.989772654s ago: executing program 4 (id=3178): r0 = syz_open_dev$mouse(0x0, 0x2, 0x400000) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[], &(0x7f0000000080)='GPL\x00'}, 0x94) openat$misdntimer(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x62) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400), 0x10000, &(0x7f0000000180)=ANY=[@ANYBLOB='huge=always,mpol=interleave']) chdir(&(0x7f0000000240)='./file0\x00') syz_clone(0x4000000, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000240), 0x3af4701e) mount$overlay(0x0, &(0x7f00000004c0)='./bus\x00', &(0x7f0000000480), 0x240000, &(0x7f0000000500)) 5m57.772709209s ago: executing program 51 (id=3177): r0 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x6d53, &(0x7f0000000480)={0x0, 0x200003, 0x10100}, &(0x7f00000007c0)=0x0, &(0x7f00000001c0)=0x0) r5 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) mmap$KVM_VCPU(&(0x7f0000ffb000/0x4000)=nil, 0x930, 0x300000f, 0x12, r5, 0x0) dup3(r5, r2, 0x80000) syz_io_uring_submit(r3, r4, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}) io_uring_enter(r2, 0x2def, 0x4000, 0x0, 0x0, 0x0) r6 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) preadv(r6, &(0x7f0000000040)=[{&(0x7f0000000300)=""/213, 0xd5}], 0x1, 0xfffffffe, 0x10a2) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) r7 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r7, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) epoll_create1(0x0) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r8, &(0x7f0000000640)="c9", 0x1, 0x40821, &(0x7f0000000400)={0xa, 0x0, 0x8, @local, 0x7}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r8, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x4, 0x0, 0x3}, 0xe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, &(0x7f0000000100)) shutdown(r8, 0x1) setsockopt$SO_TIMESTAMPING(r8, 0x1, 0x25, &(0x7f0000000000)=0x41dc, 0x4) recvmmsg(r8, &(0x7f0000000880)=[{{0x0, 0xfffffffffffffe90, 0x0}}, {{&(0x7f0000000500)=@rc, 0x80, &(0x7f0000000440)=[{&(0x7f00000000c0)=""/12, 0xc}, {&(0x7f0000000280)=""/7, 0x7}], 0x2, &(0x7f0000000680)=""/240, 0xf0}, 0xfffffffe}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000580)=""/180, 0xb4}], 0x1, &(0x7f0000000800)=""/52, 0x34}, 0xfffffff7}], 0x3, 0x10507, 0x0) syz_io_uring_setup(0xc97, 0x0, &(0x7f00000003c0), &(0x7f0000000140)) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'wg2\x00'}) 5m57.642022712s ago: executing program 4 (id=3182): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a09040000000000000000020000004c000480300001800e000100696d6d6564696174650000001c000280100002800c00028008000180000000000800014000000000180001800d00010073796e70726f787900000000040002800900010073797a30000000000900020073797a320000000014000000110001"], 0xa0}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a14000000020aff010000000000f4ff000200000114000000110001"], 0x3c}, 0x1, 0x0, 0x0, 0x4011}, 0x40440c4) 5m57.223131022s ago: executing program 4 (id=3188): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000240)=@newlink={0x50, 0x10, 0x503, 0x70bd28, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc, 0x23, 0x6}, @IFLA_BR_NF_CALL_IP6TABLES={0x5, 0x25, 0x1}, @IFLA_BR_MCAST_SNOOPING={0x5, 0x17, 0x1}]}}}]}, 0x50}, 0x1, 0x3f00}, 0x0) 5m57.180414532s ago: executing program 52 (id=3188): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000240)=@newlink={0x50, 0x10, 0x503, 0x70bd28, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc, 0x23, 0x6}, @IFLA_BR_NF_CALL_IP6TABLES={0x5, 0x25, 0x1}, @IFLA_BR_MCAST_SNOOPING={0x5, 0x17, 0x1}]}}}]}, 0x50}, 0x1, 0x3f00}, 0x0) 10.090122786s ago: executing program 7 (id=5551): r0 = socket(0xa, 0x3, 0x3) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f0000000bc0)={0x0, 0x0, "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", "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"}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000b80)={'syztnl2\x00', &(0x7f0000000a40)={'tunl0\x00', 0x0, 0x7800, 0x700, 0x3, 0xff, {{0x5, 0x4, 0x0, 0x4, 0x14, 0x68, 0x0, 0x5, 0x4, 0x0, @loopback, @empty}}}}) 10.089903086s ago: executing program 7 (id=5552): socket$packet(0x11, 0x2, 0x300) r0 = fsopen(&(0x7f0000000000)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x9}}, './file0\x00'}) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f00000003c0)="1200004000005b050000a10ef73e3fe3621947e6e0a195af7f5bdf31b4d9a10ad37fc9f565f2cee629d73cbd5023da9e6543ed7e10c64d3341cbfe57c43fa00d3d9bdeebb663a0a5ec34e28bccaefa745944f11200191c1d8d577b73963b815d8587663fb8d1b5aab367b2496b04757d00"/125, 0x7d, 0xc841, 0x0, 0xed) syz_clone3(0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x6) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$adsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) r5 = eventfd(0xffffffff) ioctl$VHOST_SET_LOG_FD(r4, 0x4004af07, 0x0) ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f0000000040)={0x1, r5}) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/66, 0x0, 0x100000}) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/71}) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000600)={0x2, 0x0, [{0x2, 0x1d, &(0x7f00000001c0)=""/29}, {0xeeee8000, 0x5a, &(0x7f0000000680)=""/90}]}) ioctl$VHOST_SET_VRING_ERR(r4, 0x4008af22, &(0x7f00000002c0)={0x1, r5}) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f0000000000)=0x1) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x6000, 0x0) 9.080296953s ago: executing program 7 (id=5554): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYBLOB="90000000100003052cbd70000000000000001200", @ANYRES32=0x0, @ANYBLOB="05030200000000006800128009000100766c616e00000000580002800c000200140000000400000006000100040000000600050081000000340004800c00010006000000000200000c00010024000000010000000c00010007000000040000000c000100030000006f0300000400038008000500", @ANYRES32=r1], 0x90}}, 0x20000000) 9.009879972s ago: executing program 7 (id=5555): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x39, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000004000000a20000000000a010100000000000000000a0000000900010073797a300000000048000000030a010200000000000000000a0000000900010073797a30000000000900030073797a3100000000080007006e617400140004800800014000000004080002400000000000010000020a0500000000000000000000000004090001"], 0x190}}, 0x0) 8.950227442s ago: executing program 7 (id=5556): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000190095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) (async) syz_open_dev$video4linux(&(0x7f0000000040), 0x0, 0x0) 8.880298406s ago: executing program 7 (id=5557): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d10300001400"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) 2.629426245s ago: executing program 6 (id=5578): openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x75, r0}, 0x38) r1 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x4800) set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) r4 = memfd_create(&(0x7f0000000bc0)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\xd8\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\x01\xf0\xff\xff\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1B\xd7\xaf\x99\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xe6\x94\xed\xf8\xe9\xd8\xe9\x95\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0) io_submit(r7, 0x1, &(0x7f0000001d00)=[&(0x7f0000001a80)={0x0, 0x0, 0x0, 0x5, 0x0, r6, 0x0}]) creat(&(0x7f00000001c0)='./file0\x00', 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, &(0x7f0000000140)={0x3, {{0x2, 0x4e21, @local}}, {{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x23}}}}, 0x108) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) 2.465745679s ago: executing program 9 (id=5582): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0xf000, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0xa0, 0x30, 0x9, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{0x60}, {}, {0x3}, {}, {0x0, 0x0, 0x0, 0x4}, {}, {0x6}]}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x80000000}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0xa0}}, 0x0) 2.410441222s ago: executing program 9 (id=5583): openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = mq_open(&(0x7f00000000c0)='${$\x00', 0x840, 0x0, 0x0) r2 = syz_io_uring_setup(0x9e, &(0x7f0000000700)={0x0, 0x3ca9, 0x10, 0x0, 0x10002da}, &(0x7f0000000280)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r1, 0x6, &(0x7f0000000380), 0x0, 0x4}) io_uring_enter(r2, 0x847ba, 0x0, 0xe, 0x0, 0x0) 2.308459448s ago: executing program 9 (id=5584): r0 = syz_io_uring_setup(0x1d2d, 0x0, 0x0, 0x0) r1 = fsopen(&(0x7f0000000080)='gadgetfs\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r1, 0x2, &(0x7f0000000040)='ro\x00', &(0x7f0000000140)="a6", 0x1) r2 = syz_io_uring_setup(0x275c, &(0x7f0000001280)={0x0, 0x5bce, 0x80, 0xffffffff, 0x40001c8, 0x0, r0}, &(0x7f0000001300), &(0x7f0000001180)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r3 = syz_io_uring_setup(0x53f, &(0x7f0000000440)={0x0, 0xaf53, 0x400, 0xfffffff8, 0xfe}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) io_uring_enter(r3, 0x47bc, 0x0, 0x0, 0x0, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r6, r5, &(0x7f0000002080)=0x3a, 0x23b) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, &(0x7f00000011c0)={'ni_labpc\x00', [0x8ead, 0x0, 0x8, 0x300, 0x3ff, 0x0, 0x4, 0x1, 0x6f6, 0x1, 0x3, 0x5, 0xfffffff9, 0x8, 0x348, 0x80000001, 0x2, 0x5, 0x7, 0x9f1, 0x96, 0xffffffff, 0x5, 0x100, 0x101, 0xde, 0xe39e, 0x6, 0x3, 0x4, 0x0, 0x3]}) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000002300)=[{&(0x7f0000000140)=""/4096, 0x1000}], 0x3100) io_uring_register$IORING_UNREGISTER_BUFFERS(r2, 0x1, 0x0, 0x0) getsockname$packet(r5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000001140)=0x14) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000001340)={@local, r7}, 0x14) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x29, &(0x7f00000000c0), 0x4) syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), 0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x600, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r8 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r8, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$vicodec0(0xffffff9c, &(0x7f0000001200), 0x2, 0x0) 2.299859704s ago: executing program 6 (id=5585): r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r1, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'veth1\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="5c00000010000304000000000000001200000000", @ANYRES32=0x0, @ANYBLOB="46060900000000002c00128009000100766c616e000000001c000280060001000200ed00100003800c000100071900000800000008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4], 0x5c}, 0x1, 0x0, 0x0, 0x600}, 0x0) 2.11387376s ago: executing program 9 (id=5586): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a80)=ANY=[@ANYBLOB="140000001000010000000000000000000000120a1c000000120a0003000000000000000007000006080003400000000a60000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000308000640ffffff00080003400000000808000f"], 0x210}}, 0x0) 2.113663927s ago: executing program 6 (id=5587): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x18, 0x6, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000f000000000000000ffffff80e500020000000000e500fcff000000008500feffd10000009500"], &(0x7f00000000c0)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) 2.113103943s ago: executing program 9 (id=5588): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @broadcast}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001740)=@newqdisc={0x838, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {0x10}, {}, {0x2, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x80c, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x1, 0x1, 0x1, 0x8000, 0x3, 0x5, 0x5, 0xb762, 0x6, 0x7, 0x8, 0xf, 0x2, 0x80000001, 0x400, 0x800, 0xffff8000, 0x6, 0x401, 0x9, 0xb89, 0xffffe4f5, 0xd6, 0x4, 0xffff, 0x7, 0x0, 0x2, 0x101, 0x1, 0xfffffffc, 0x4, 0x1, 0x1, 0x9, 0xc, 0x1000, 0x2, 0x2, 0x7, 0x4, 0x99, 0x9, 0x5, 0x6, 0x7, 0xfffffff7, 0x1, 0x2, 0x5, 0x9, 0x44, 0x8, 0x8, 0x1, 0x4, 0x7ff, 0x8, 0x7, 0x80000001, 0x400, 0x8, 0xfffffa72, 0xcd, 0xffffff80, 0x80000000, 0xc, 0x4, 0x65, 0x91, 0x659, 0x9, 0xf, 0x7, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x5, 0x10001, 0x3, 0x1, 0x4, 0x8, 0x8, 0x7, 0x1, 0x1, 0x1, 0x7, 0x40, 0x7, 0xe, 0x8000, 0x1, 0x4dc, 0x80, 0x3, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x2, 0xfffffffd, 0x3, 0x1000, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4, 0x2, 0x80000000, 0x1966f9ab, 0x5, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa89, 0x40, 0x2, 0x7, 0x7, 0x101, 0x2d5421e8, 0x7, 0x10000, 0xffffffff, 0x6, 0x3ff, 0xf04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x3, 0xfffffffb, 0x1, 0x0, 0x0, 0x2, 0x5, 0x8, 0x3, 0x4, 0x800, 0x2, 0x8, 0x7ff, 0x1, 0x9, 0x6, 0x5, 0x5, 0x4d15, 0x1ff, 0xfffff060, 0x3, 0x469, 0x3, 0x0, 0x200, 0x5, 0x7, 0x1, 0x8, 0x42ba, 0x4, 0x9, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0xfff, 0x1ff, 0x8000, 0x3, 0x8, 0x3, 0x9, 0x9a6, 0xe4cb, 0x402, 0x1, 0x1ff, 0x3e, 0x9b4, 0x1, 0x8, 0x0, 0x8, 0x0, 0x9, 0x0, 0x4, 0x10, 0x901, 0x5, 0x2, 0x7b, 0xfffffeff, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x4, 0x1, 0x6, 0x200, 0x2]}, @TCA_TBF_PTAB={0x404, 0x3, [0x7, 0x6, 0xd, 0x400, 0x0, 0x3, 0x5, 0x10000, 0x7, 0x4, 0x81, 0x0, 0x7, 0x0, 0x9, 0x5, 0xc0000, 0x8001, 0x1, 0x2000, 0x1, 0x8da5, 0x1, 0x4, 0x2, 0x6, 0x58, 0x7, 0x6f, 0x8, 0x3, 0x4, 0x9, 0x1000, 0x4, 0x9, 0x6, 0x80000001, 0x3, 0x1, 0xd4, 0x100, 0xa, 0xfff, 0x8, 0x9, 0x7, 0x7fffffff, 0xf4b3, 0x1, 0x0, 0x8, 0x8, 0x6, 0xd815, 0xfffffff9, 0x2, 0x401, 0x9, 0x36, 0xf, 0x74, 0xbbc, 0x9, 0xfffffffd, 0x6, 0x8, 0x5, 0x6, 0xb, 0x5, 0x5, 0x4e3, 0x200, 0x0, 0x9, 0x8001, 0x2, 0x1000, 0x7fffffff, 0x46a3, 0x6, 0x2, 0x1dd50645, 0x401, 0x5, 0x101, 0xbf, 0x0, 0x9, 0x3, 0x65, 0xffffff13, 0x2, 0x30, 0x1a3f, 0x2, 0x389f, 0x4, 0x3, 0x3ff, 0x4, 0x4, 0x6, 0xf3bb, 0x1ff, 0x7, 0xf, 0xb, 0x401, 0x4, 0x1000, 0x1, 0x8, 0x1, 0x7ff, 0x7fff, 0x8, 0xd, 0x3ff, 0x4, 0x1, 0xffff, 0x7fff, 0x2, 0x9, 0x1, 0xfff, 0xddad, 0xfffffffe, 0x4, 0x0, 0x101, 0x78f0, 0xf, 0x7, 0x0, 0x3, 0x7, 0x100, 0x3, 0xffffffff, 0xfffffffe, 0xffffff7f, 0x3, 0x8, 0x6, 0xd, 0x3, 0xa, 0xd0, 0x200, 0x0, 0x400, 0x9, 0x6, 0x132f, 0xaba3, 0x1, 0x3, 0x1, 0x5, 0x6f780000, 0xc, 0x1ff, 0x40, 0x8, 0x3, 0x2, 0x1, 0x0, 0x71, 0xb13, 0x4, 0xbc5, 0x0, 0x7, 0xffff, 0x100, 0x7b58, 0x1, 0x7, 0x1ff, 0x3, 0x400, 0x80000000, 0x1000, 0x3, 0xfffffffa, 0x9a5, 0x8, 0x5, 0x1, 0x9, 0x3, 0x9, 0x7, 0x2, 0x1, 0x101, 0x2, 0x6, 0x598f, 0x5, 0x8e, 0x0, 0xa, 0x9, 0x1000, 0x8, 0xd00f, 0x2, 0x1, 0x6, 0x2a, 0x7, 0x100, 0x24e, 0xbd, 0x2, 0x2800000, 0x4, 0x0, 0x401, 0x6, 0x2, 0x9, 0x7039, 0x4, 0x1, 0x9, 0x1, 0xb18, 0x2, 0xfffffffe, 0x26e, 0x6, 0x5c, 0x8, 0x100, 0x3ff, 0x1, 0x0, 0xb, 0x10000, 0x8, 0x6, 0x2, 0x6, 0x7, 0x2, 0x7ff, 0x1, 0x4, 0x8001, 0x3]}]}}]}, 0x838}, 0x1, 0x0, 0x0, 0x40098}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r7, &(0x7f00000005c0)="24785466124cebc6c81c38c136a9", 0xe, 0x40000c0, &(0x7f00000001c0)={0x11, 0xf8, r6, 0x1, 0xd8, 0x6, @remote}, 0x14) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r8) sendmsg$TIPC_CMD_ENABLE_BEARER(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000d00a1ffffff010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) 2.040133416s ago: executing program 6 (id=5589): r0 = getpid() syz_pidfd_open(r0, 0x0) r1 = openat$sequencer(0xffffff9c, &(0x7f0000000040), 0x2000, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x401, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) prlimit64(r2, 0xc, &(0x7f0000000180)={0x8, 0x6}, &(0x7f0000000f80)) sendmsg$nl_route_sched(r5, 0x0, 0x880) connect$inet(0xffffffffffffffff, &(0x7f0000001980)={0x2, 0x1, @loopback}, 0x10) ioctl$SNDCTL_SEQ_GETOUTCOUNT(r1, 0x80045104, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r6, 0x541b, 0x0) r7 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet_nvme_icreq_pdu(r7, &(0x7f0000000080)={{0x0, 0x8, 0x80, 0x6}, 0x0, 0x0, 0x2, 0x3}, 0x80, 0x0, 0x0, 0x0) socket$inet6(0x10, 0x3, 0x0) 1.076377898s ago: executing program 6 (id=5590): r0 = socket$kcm(0x2, 0x5, 0x84) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000009b000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002300000095"], &(0x7f0000000080)='GPL\x00'}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async) r2 = memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) lseek(r2, 0xfffffffe, 0x3) (async) mmap(&(0x7f0000048000/0x1000)=nil, 0x1000, 0xb, 0x31, 0xffffffffffffffff, 0x0) futex(&(0x7f000000cffc)=0x4, 0xb, 0x4, 0x0, &(0x7f00000001c0), 0x0) (async) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000000)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$sock_attach_bpf(r0, 0x84, 0x7, &(0x7f00000007c0), 0x4) (async) sendmsg$inet(r0, &(0x7f00000003c0)={&(0x7f0000000000)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000100)="9b", 0x1}], 0x1}, 0x4000051) 886.993287ms ago: executing program 6 (id=5591): syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) io_uring_setup(0x7dfa, &(0x7f0000000300)={0x0, 0x5c07, 0x1, 0x2, 0x100002d1}) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000600)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x40, 0x0, r0, 0x0, 0x0, 0x0, 0x100, 0x1}) io_uring_enter(0xffffffffffffffff, 0x46f3, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000340)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r4, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) syz_usbip_server_init(0x6) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) 464.816395ms ago: executing program 3 (id=5592): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a30000000005c000000030a0300000000fff5000000050005000900010073797a30000000000900030073797a300000000008000a400000006a"], 0xa4}}, 0x0) 387.74021ms ago: executing program 3 (id=5593): unshare(0x64000600) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r4, &(0x7f00000009c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x118) 80.278236ms ago: executing program 3 (id=5594): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8=0x0, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) 79.966859ms ago: executing program 9 (id=5595): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) writev(r2, &(0x7f0000000040)=[{&(0x7f00000000c0)="57c8", 0x2}], 0x1) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) sendmmsg$inet6(r3, &(0x7f00000075c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40804) arch_prctl$ARCH_SET_GS(0x1001, 0x0) 79.819875ms ago: executing program 3 (id=5596): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) sendmmsg$inet6(r2, &(0x7f00000075c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40804) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f00000009c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000240)={'gre0\x00', 0x0}) sendto$packet(r4, &(0x7f0000000340)="05030006e8fe091c6202a0ffffffff006003000000007f141434e3177f43055762cb8094886411", 0x27, 0x0, &(0x7f0000000a80)={0x11, 0x88a8, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) 242.012µs ago: executing program 3 (id=5597): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='io.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x5e22, 0x0, @empty}, 0x1c) listen(r3, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000380)={0x2, 0x4e22, @empty}, 0x10) listen(r4, 0x0) 0s ago: executing program 3 (id=5598): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x1]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, 0x0) kernel console output (not intermixed with test programs): 87138][T18808] hsr_slave_0: left promiscuous mode [ 632.399379][T18808] hsr_slave_1: left promiscuous mode [ 632.403294][T18808] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 632.408086][T18808] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 632.413893][T18808] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 632.416600][T18808] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 632.455509][T18808] veth1_macvtap: left promiscuous mode [ 632.457440][T18808] veth0_macvtap: left promiscuous mode [ 632.468574][T18808] veth1_vlan: left promiscuous mode [ 632.470549][T18808] veth0_vlan: left promiscuous mode [ 632.788347][T16459] Bluetooth: hci2: command tx timeout [ 633.188352][T16459] Bluetooth: hci3: command tx timeout [ 633.353908][T18808] team0 (unregistering): Port device team_slave_1 removed [ 633.451453][T18808] team0 (unregistering): Port device team_slave_0 removed [ 634.243305][T19380] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 634.250639][T19380] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 634.352949][T18811] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 634.358020][T18811] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 634.384914][T18811] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 634.388043][T18811] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 634.439507][T19116] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 634.507093][T19149] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 634.668787][T19116] veth0_vlan: entered promiscuous mode [ 634.679890][T19116] veth1_vlan: entered promiscuous mode [ 634.707620][T19116] veth0_macvtap: entered promiscuous mode [ 634.715448][T19116] veth1_macvtap: entered promiscuous mode [ 634.741854][T19116] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 634.754649][T19116] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 634.771981][T18798] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 634.780631][T18798] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 634.785133][T18798] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 634.797678][T18798] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 634.821339][T19149] veth0_vlan: entered promiscuous mode [ 634.853558][T19149] veth1_vlan: entered promiscuous mode [ 634.884642][T18798] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 634.889177][T18798] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 634.919911][ T1147] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 634.920254][T19149] veth0_macvtap: entered promiscuous mode [ 634.923702][ T1147] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 634.932315][T19149] veth1_macvtap: entered promiscuous mode [ 634.957946][T19149] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 634.975088][T19149] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 634.985854][ T1147] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 634.992266][ T1147] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 634.997296][ T1147] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 635.008684][ T1147] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 635.104234][ T1147] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 635.107935][ T1147] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 635.172760][ T1142] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 635.176370][ T1142] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 635.367122][T19448] siw: device registration error -23 [ 635.536597][T19457] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3225'. [ 635.893354][T19472] netlink: 'syz.7.3229': attribute type 1 has an invalid length. [ 635.899481][T19472] netlink: 224 bytes leftover after parsing attributes in process `syz.7.3229'. [ 636.569885][T16459] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 636.573068][T16459] Bluetooth: hci1: Injecting HCI hardware error event [ 636.578400][T16459] Bluetooth: hci1: hardware error 0x00 [ 636.593906][T19502] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3234'. [ 636.648782][T19507] loop2: detected capacity change from 0 to 7 [ 636.653240][T18232] Dev loop2: unable to read RDB block 7 [ 636.655853][T18232] loop2: unable to read partition table [ 636.659205][T18232] loop2: partition table beyond EOD, truncated [ 636.683416][T19507] Dev loop2: unable to read RDB block 7 [ 636.687579][T19507] loop2: unable to read partition table [ 636.693675][T19507] loop2: partition table beyond EOD, truncated [ 636.696984][T19507] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 636.778574][ C3] net_ratelimit: 11 callbacks suppressed [ 636.778587][ C3] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17 [ 637.769553][T19537] 9pnet_fd: Insufficient options for proto=fd [ 638.343959][T19554] netlink: 'syz.3.3242': attribute type 11 has an invalid length. [ 638.698525][T16459] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 638.706641][T19567] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3247'. [ 638.768765][T19568] netlink: 96 bytes leftover after parsing attributes in process `syz.3.3244'. [ 638.847196][T19576] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3246'. [ 639.350164][T19583] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 639.442439][T19597] bond0: (slave caif0): Error: Device type is different from other slaves [ 639.530093][T19583] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 639.573451][T19604] input: syz0 as /devices/virtual/input/input31 [ 639.635268][T19605] comedi comedi0: Minor 47 could not be opened [ 639.643228][T19605] netlink: 'syz.7.3250': attribute type 1 has an invalid length. [ 640.071214][T19583] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 640.496066][T19612] kthread_run failed with err -4 [ 640.611348][T19621] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3257'. [ 640.617182][T19583] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 640.769332][ T40] audit: type=1326 audit(1763469877.712:6739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19625 comm="syz.9.3259" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f55579 code=0x0 [ 641.155591][T18804] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 641.168326][T18804] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 641.196422][T18804] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 641.204152][T18804] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 642.607971][T19688] tipc: Enabled bearer , priority 10 [ 642.625321][T19690] block device autoloading is deprecated and will be removed. [ 643.618468][ T7508] tipc: Node number set to 2580701283 [ 643.632560][T19723] netlink: 'syz.9.3278': attribute type 27 has an invalid length. [ 644.721393][T19751] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3277'. [ 645.062992][T19758] syzkaller0: entered promiscuous mode [ 645.064927][T19758] syzkaller0: entered allmulticast mode [ 645.115956][T19758] tipc: Started in network mode [ 645.118869][T19758] tipc: Node identity b67880bfdc12, cluster identity 4711 [ 645.122033][T19758] tipc: Enabled bearer , priority 0 [ 645.134211][T19757] tipc: Resetting bearer [ 645.152728][T19757] tipc: Disabling bearer [ 645.902703][T19780] comedi comedi0: Minor 47 could not be opened [ 645.907051][T19780] netlink: 'syz.7.3283': attribute type 1 has an invalid length. [ 646.906495][T19793] comedi comedi0: Minor 47 could not be opened [ 646.913514][T19793] netlink: 'syz.9.3286': attribute type 1 has an invalid length. [ 646.960012][T19793] bond3: entered promiscuous mode [ 646.962317][T19793] 8021q: adding VLAN 0 to HW filter on device bond3 [ 648.850320][T19811] syzkaller0: entered promiscuous mode [ 648.853564][T19811] syzkaller0: entered allmulticast mode [ 648.878685][T19811] tipc: Enabled bearer , priority 0 [ 648.884005][T19810] tipc: Resetting bearer [ 648.899800][T19810] tipc: Disabling bearer [ 648.909033][T19801] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 648.911668][T19801] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 648.918362][T19801] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 648.940336][T19801] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 648.943147][T19801] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 648.946836][T19801] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 648.950235][T19814] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3293'. [ 648.986004][T19812] can: request_module (can-proto-0) failed. [ 649.017771][T19819] vlan2: entered promiscuous mode [ 649.020496][T19819] mac80211_hwsim hwsim51 wlan0: entered promiscuous mode [ 649.026976][T19819] vlan2: entered allmulticast mode [ 649.036980][T19819] mac80211_hwsim hwsim51 wlan0: entered allmulticast mode [ 649.690532][T19837] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3301'. [ 649.729169][T19839] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3302'. [ 649.879031][T14257] usb 11-1: new high-speed USB device number 2 using dummy_hcd [ 649.971489][T19854] loop7: detected capacity change from 0 to 16384 [ 650.018971][T14257] usb 11-1: device descriptor read/64, error -71 [ 650.188458][T19857] loop7: detected capacity change from 16384 to 0 [ 650.278342][T14257] usb 11-1: new high-speed USB device number 3 using dummy_hcd [ 650.352701][T19863] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3305'. [ 650.403228][T19865] netlink: 'syz.9.3306': attribute type 1 has an invalid length. [ 650.406686][T19865] netlink: 224 bytes leftover after parsing attributes in process `syz.9.3306'. [ 650.408410][T14257] usb 11-1: device descriptor read/64, error -71 [ 650.460548][T19867] binder: BINDER_SET_CONTEXT_MGR already set [ 650.462842][T19867] binder: 19866:19867 ioctl 4018620d 800002c0 returned -16 [ 650.518697][T14257] usb usb11-port1: attempt power cycle [ 650.868414][T14257] usb 11-1: new high-speed USB device number 4 using dummy_hcd [ 650.889138][T14257] usb 11-1: device descriptor read/8, error -71 [ 650.938599][T16459] Bluetooth: hci2: command 0x0c1a tx timeout [ 651.018665][T16459] Bluetooth: hci3: command 0x0c1a tx timeout [ 651.138317][T14257] usb 11-1: new high-speed USB device number 5 using dummy_hcd [ 651.169203][T14257] usb 11-1: device descriptor read/8, error -71 [ 651.288620][T14257] usb usb11-port1: unable to enumerate USB device [ 651.320460][T19883] tipc: Enabled bearer , priority 10 [ 651.565267][T19895] siw: device registration error -23 [ 652.441936][T19909] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 652.470946][T15116] tipc: Node number set to 4155069063 [ 652.617602][T19909] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 652.702262][T19924] binder: BINDER_SET_CONTEXT_MGR already set [ 652.704403][T19924] binder: 19923:19924 ioctl 4018620d 800002c0 returned -16 [ 652.720246][T19909] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 652.796755][T19909] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 652.890530][ T1147] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 652.901696][ T1147] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 652.915997][ T1147] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 652.927346][ T1147] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 653.018317][T16459] Bluetooth: hci2: command 0x0c1a tx timeout [ 653.062855][T19930] loop2: detected capacity change from 0 to 7 [ 653.066632][T19930] Dev loop2: unable to read RDB block 7 [ 653.069723][T19930] loop2: unable to read partition table [ 653.072284][T19930] loop2: partition table beyond EOD, truncated [ 653.075350][T19930] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 653.098699][T16459] Bluetooth: hci3: command 0x0c1a tx timeout [ 653.325459][T19938] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3320'. [ 653.330275][T19938] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3320'. [ 653.769906][T19945] netlink: 44 bytes leftover after parsing attributes in process `syz.9.3322'. [ 653.788115][T19947] netlink: 'syz.6.3324': attribute type 1 has an invalid length. [ 653.846973][T19947] 8021q: adding VLAN 0 to HW filter on device bond1 [ 653.857515][T19954] vlan3: entered allmulticast mode [ 653.860536][T19954] veth1: entered allmulticast mode [ 653.866273][T19954] bond1: (slave vlan3): making interface the new active one [ 653.871322][T19954] bond1: (slave vlan3): Enslaving as an active interface with an up link [ 654.153910][T19966] 9pnet_fd: Insufficient options for proto=fd [ 655.003483][T19965] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 655.098962][T16459] Bluetooth: hci2: command 0x0c1a tx timeout [ 655.123082][T19996] vlan2: entered promiscuous mode [ 655.125511][T19996] mac80211_hwsim hwsim43 wlan0: entered promiscuous mode [ 655.132834][T19996] vlan2: entered allmulticast mode [ 655.134581][T19996] mac80211_hwsim hwsim43 wlan0: entered allmulticast mode [ 655.157975][T19965] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 655.194745][T19999] syzkaller0: entered promiscuous mode [ 655.196603][T19999] syzkaller0: entered allmulticast mode [ 655.207960][T16459] Bluetooth: hci3: command 0x0c1a tx timeout [ 655.214123][T20004] sg_write: data in/out 327388/251 bytes for SCSI command 0x15-- guessing data in; [ 655.214123][T20004] program syz.6.3336 not setting count and/or reply_len properly [ 655.232297][T19999] tipc: Enabled bearer , priority 0 [ 655.236981][T19997] tipc: Resetting bearer [ 655.270132][T19997] tipc: Disabling bearer [ 655.280773][T20009] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3337'. [ 655.313009][T19965] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 656.550005][T19965] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 656.796259][T18798] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 656.836450][T18798] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 656.850752][T18811] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 656.925749][ T46] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 656.933588][T20041] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3342'. [ 656.978326][ T7508] usb 14-1: new high-speed USB device number 2 using dummy_hcd [ 657.194887][T20050] syzkaller0: entered promiscuous mode [ 657.197427][T20050] syzkaller0: entered allmulticast mode [ 657.212697][T20050] tipc: Enabled bearer , priority 0 [ 657.217158][T20048] tipc: Resetting bearer [ 657.238100][T20048] tipc: Disabling bearer [ 657.306677][T20057] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3344'. [ 657.400532][T20061] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3346'. [ 658.098130][T20086] binder: 20085:20086 ioctl c0306201 0 returned -14 [ 658.100802][T20087] netlink: 'syz.7.3351': attribute type 9 has an invalid length. [ 658.107551][ T7495] IPVS: starting estimator thread 0... [ 658.109024][T20087] tipc: Started in network mode [ 658.111507][T20087] tipc: Node identity ac1414aa, cluster identity 4711 [ 658.115079][T20087] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 658.119665][T20087] tipc: Enabled bearer , priority 10 [ 658.122500][T20084] tipc: Enabling of bearer rejected, already enabled [ 658.190268][T20091] netlink: 16 bytes leftover after parsing attributes in process `syz.9.3353'. [ 658.203063][T20091] ip6erspan0: entered allmulticast mode [ 658.218578][T20088] IPVS: using max 28 ests per chain, 67200 per kthread [ 658.258356][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 658.408300][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 658.558293][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 658.708777][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 658.848400][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 658.998311][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 659.027230][T20121] sctp: [Deprecated]: syz.6.3362 (pid 20121) Use of int in max_burst socket option deprecated. [ 659.027230][T20121] Use struct sctp_assoc_value instead [ 659.138886][ T7559] tipc: Node number set to 2886997162 [ 659.181949][T20125] syzkaller0: entered promiscuous mode [ 659.184330][T20125] syzkaller0: entered allmulticast mode [ 659.204864][T20125] tipc: Enabled bearer , priority 0 [ 659.218516][T20124] tipc: Resetting bearer [ 659.234282][T20124] tipc: Disabling bearer [ 659.288281][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 659.322948][T20127] batman_adv: batadv0: Adding interface: vlan2 [ 659.325634][T20127] batman_adv: batadv0: The MTU of interface vlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 659.337495][T20127] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 659.342862][T20127] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 659.347298][T20127] batman_adv: batadv0: Not using interface vlan2 (retrying later): interface not active [ 659.397770][T20131] loop2: detected capacity change from 0 to 7 [ 659.403517][T20131] Dev loop2: unable to read RDB block 7 [ 659.407801][T20131] loop2: unable to read partition table [ 659.410675][T20131] loop2: partition table beyond EOD, truncated [ 659.416554][T20131] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 659.484455][T20144] binder: 20143:20144 ioctl c0306201 0 returned -14 [ 659.558317][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 660.088313][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 661.042682][T20174] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3376'. [ 661.475172][T20178] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3377'. [ 661.479977][T20178] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3377'. [ 661.484026][T20180] netlink: 'syz.6.3380': attribute type 1 has an invalid length. [ 661.565787][T20180] 8021q: adding VLAN 0 to HW filter on device bond2 [ 661.574860][T20178] vlan3: entered promiscuous mode [ 661.577123][T20178] bridge0: entered promiscuous mode [ 661.582544][T20178] vlan3: entered allmulticast mode [ 661.584867][T20178] bridge0: entered allmulticast mode [ 661.647800][T20185] input: syz0 as /devices/virtual/input/input33 [ 661.756458][T20191] sg_write: data in/out 589788/251 bytes for SCSI command 0x15-- guessing data in; [ 661.756458][T20191] program syz.6.3383 not setting count and/or reply_len properly [ 661.762581][T20190] syzkaller0: entered promiscuous mode [ 661.766449][T20190] syzkaller0: entered allmulticast mode [ 661.810651][T20190] tipc: Enabled bearer , priority 0 [ 661.821545][T20188] tipc: Resetting bearer [ 661.950879][T20188] tipc: Disabling bearer [ 662.224194][T20202] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3390'. [ 662.292206][T20204] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3391'. [ 662.405344][T20218] syzkaller0: entered promiscuous mode [ 662.407717][T20218] syzkaller0: entered allmulticast mode [ 662.427734][T20218] tipc: Enabled bearer , priority 0 [ 662.434851][T20217] tipc: Resetting bearer [ 662.453269][T20217] tipc: Disabling bearer [ 662.522381][T20224] bond1: entered promiscuous mode [ 662.571860][T20229] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3400'. [ 662.806801][T20236] netlink: 'syz.3.3402': attribute type 4 has an invalid length. [ 662.818289][T20236] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3402'. [ 662.989401][T20242] IPVS: Error connecting to the multicast addr [ 663.003124][T20242] trusted_key: syz.7.3405 sent an empty control message without MSG_MORE. [ 663.013783][T20242] wg1: entered promiscuous mode [ 663.015640][T20242] wg1: entered allmulticast mode [ 663.178314][ C1] net_ratelimit: 3 callbacks suppressed [ 663.178325][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 663.203343][T20250] openvswitch: netlink: Key type 31 is not supported [ 663.262026][T20252] tipc: Enabling of bearer rejected, already enabled [ 663.276444][T20254] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3410'. [ 663.291594][T20254] ip6erspan0: entered allmulticast mode [ 664.228297][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 664.662309][T20299] syzkaller0: entered promiscuous mode [ 664.664306][T20299] syzkaller0: entered allmulticast mode [ 664.684068][T20299] tipc: Enabled bearer , priority 0 [ 664.689029][T20295] tipc: Resetting bearer [ 664.719357][T20295] tipc: Disabling bearer [ 665.268293][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 665.308807][T20308] loop2: detected capacity change from 0 to 7 [ 665.312507][T20308] Dev loop2: unable to read RDB block 7 [ 665.314306][T20308] loop2: unable to read partition table [ 665.316133][T20308] loop2: partition table beyond EOD, truncated [ 665.318140][T20308] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 665.523900][T20324] netlink: 32 bytes leftover after parsing attributes in process `syz.7.3426'. [ 665.887370][T20337] syzkaller0: entered promiscuous mode [ 665.890180][T20337] syzkaller0: entered allmulticast mode [ 665.984448][T20342] gfs2: error -5 reading superblock [ 666.224108][T20348] siw: device registration error -23 [ 666.308283][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 666.528161][T20359] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3442'. [ 666.532304][T20359] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3442'. [ 666.550855][T20359] vlan3: entered promiscuous mode [ 666.553247][T20359] bridge2: entered promiscuous mode [ 666.555597][T20359] vlan3: entered allmulticast mode [ 666.557756][T20359] bridge2: entered allmulticast mode [ 666.696042][T20360] netlink: 96 bytes leftover after parsing attributes in process `syz.9.3441'. [ 666.700340][T20360] netlink: 24 bytes leftover after parsing attributes in process `syz.9.3441'. [ 666.705900][T20360] netlink: 32 bytes leftover after parsing attributes in process `syz.9.3441'. [ 666.710120][T20360] netlink: 32 bytes leftover after parsing attributes in process `syz.9.3441'. [ 666.742765][T20360] netlink: 32 bytes leftover after parsing attributes in process `syz.9.3441'. [ 666.746775][T20360] netlink: 32 bytes leftover after parsing attributes in process `syz.9.3441'. [ 666.793469][T20367] vlan4: entered promiscuous mode [ 666.795716][T20367] mac80211_hwsim hwsim53 wlan0: entered promiscuous mode [ 666.801662][T20367] vlan4: entered allmulticast mode [ 666.803954][T20367] mac80211_hwsim hwsim53 wlan0: entered allmulticast mode [ 666.837155][T20360] netlink: 32 bytes leftover after parsing attributes in process `syz.9.3441'. [ 666.843498][T20360] netlink: 32 bytes leftover after parsing attributes in process `syz.9.3441'. [ 667.028778][T20380] sg_write: data in/out 851932/251 bytes for SCSI command 0x15-- guessing data in; [ 667.028778][T20380] program syz.3.3448 not setting count and/or reply_len properly [ 667.102656][T20384] 9pnet_fd: Insufficient options for proto=fd [ 667.207447][T20385] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 667.209706][T20385] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 667.288336][T20385] vhci_hcd vhci_hcd.0: Device attached [ 667.338343][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 667.570739][T20387] vhci_hcd: connection closed [ 667.570991][ T1150] vhci_hcd: stop threads [ 667.574492][ T1150] vhci_hcd: release socket [ 667.576165][ T1150] vhci_hcd: disconnect device [ 668.378360][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 668.499367][ T40] audit: type=1400 audit(1763469905.442:6740): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-22 profile="unconfined" name="&" pid=20424 comm="syz.3.3465" [ 669.428272][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 669.484970][T20451] syzkaller0: entered promiscuous mode [ 669.487200][T20451] syzkaller0: entered allmulticast mode [ 669.504519][T20451] tipc: Enabled bearer , priority 0 [ 669.510655][T20450] tipc: Resetting bearer [ 669.529516][T20450] tipc: Disabling bearer [ 669.542207][T20455] loop2: detected capacity change from 0 to 7 [ 669.546552][T18232] Dev loop2: unable to read RDB block 7 [ 669.549987][T18232] loop2: unable to read partition table [ 669.552673][T18232] loop2: partition table beyond EOD, truncated [ 669.558681][T20455] Dev loop2: unable to read RDB block 7 [ 669.561367][T20455] loop2: unable to read partition table [ 669.564122][T20455] loop2: partition table beyond EOD, truncated [ 669.569589][T20455] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 669.720357][T20463] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 669.723101][T20463] @0Ù: renamed from bond_slave_1 (while UP) [ 670.005032][T20469] infiniband syz1: set active [ 670.010179][T20469] infiniband syz1: added syz_tun [ 670.012624][T20469] syz1: rxe_create_cq: returned err = -12 [ 670.015315][T20469] infiniband syz1: Couldn't create ib_mad CQ [ 670.018519][T20469] infiniband syz1: Couldn't open port 1 [ 670.035926][T20469] RDS/IB: syz1: added [ 670.044069][T20469] smc: adding ib device syz1 with port count 1 [ 670.048345][T20469] smc: ib device syz1 port 1 has no pnetid [ 670.148733][T20481] comedi comedi0: Minor 47 could not be opened [ 670.152978][T20481] netlink: 'syz.6.3483': attribute type 1 has an invalid length. [ 670.305635][T20481] bond3: entered promiscuous mode [ 670.309787][T20481] 8021q: adding VLAN 0 to HW filter on device bond3 [ 670.379326][T20484] 8021q: adding VLAN 0 to HW filter on device bond3 [ 670.384685][T20484] bond3: (slave gre1): The slave device specified does not support setting the MAC address [ 670.389264][T20484] bond3: (slave gre1): Setting fail_over_mac to active for active-backup mode [ 670.406794][T20484] bond3: (slave gre1): making interface the new active one [ 670.410187][T20484] gre1: entered promiscuous mode [ 670.421801][T20484] bond3: (slave gre1): Enslaving as an active interface with an up link [ 670.468278][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 671.498303][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 671.727053][T20496] loop7: detected capacity change from 0 to 16384 [ 671.784725][T20501] __nla_validate_parse: 3 callbacks suppressed [ 671.784738][T20501] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3490'. [ 671.791143][T20501] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3490'. [ 671.874137][T20507] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3493'. [ 671.940679][T20504] loop7: detected capacity change from 16384 to 0 [ 671.947628][ C3] I/O error, dev loop7, sector 4992 op 0x0:(READ) flags 0x80700 phys_seg 27 prio class 2 [ 672.548276][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 673.578301][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 673.621952][T20527] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3499'. [ 673.625986][T20527] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3499'. [ 673.644328][T20527] veth3: entered promiscuous mode [ 673.707782][T20530] syzkaller0: entered promiscuous mode [ 673.711474][T20530] syzkaller0: entered allmulticast mode [ 673.825960][T20532] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3498'. [ 674.618439][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 675.117883][T20554] binder: BINDER_SET_CONTEXT_MGR already set [ 675.120853][T20554] binder: 20553:20554 ioctl 4018620d 80004a80 returned -16 [ 675.223207][T20558] x_tables: duplicate underflow at hook 2 [ 675.668313][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 676.140870][T20572] netlink: 224 bytes leftover after parsing attributes in process `syz.6.3512'. [ 676.708291][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 677.738360][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 678.779567][T20637] Cannot find del_set index 2 as target [ 678.788410][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 679.264384][T20645] 9pnet_fd: Insufficient options for proto=fd [ 679.803093][T20664] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3538'. [ 679.828254][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 679.904893][T20668] syzkaller0: entered promiscuous mode [ 679.906748][T20668] syzkaller0: entered allmulticast mode [ 679.948870][T20668] tipc: Enabled bearer , priority 0 [ 679.975220][T20667] tipc: Resetting bearer [ 680.043997][T20667] tipc: Disabling bearer [ 680.276021][ T40] audit: type=1326 audit(1763469917.212:6741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20680 comm="syz.7.3545" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f95579 code=0x7ffc0000 [ 680.292764][ T40] audit: type=1326 audit(1763469917.232:6742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20680 comm="syz.7.3545" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f95579 code=0x7ffc0000 [ 680.304055][ T40] audit: type=1326 audit(1763469917.232:6743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20680 comm="syz.7.3545" exe="/syz-executor" sig=0 arch=40000003 syscall=174 compat=1 ip=0xf7f95579 code=0x7ffc0000 [ 680.314124][ T40] audit: type=1326 audit(1763469917.232:6744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20680 comm="syz.7.3545" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f95579 code=0x7ffc0000 [ 680.323637][ T40] audit: type=1326 audit(1763469917.242:6745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20680 comm="syz.7.3545" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f95579 code=0x7ffc0000 [ 680.334520][ T40] audit: type=1326 audit(1763469917.242:6746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20680 comm="syz.7.3545" exe="/syz-executor" sig=0 arch=40000003 syscall=168 compat=1 ip=0xf7f95579 code=0x7ffc0000 [ 680.344992][ T40] audit: type=1326 audit(1763469917.252:6747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20680 comm="syz.7.3545" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f95579 code=0x7ffc0000 [ 680.356115][ T40] audit: type=1326 audit(1763469917.252:6748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20680 comm="syz.7.3545" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f95579 code=0x7ffc0000 [ 680.365446][ T40] audit: type=1326 audit(1763469917.252:6749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20680 comm="syz.7.3545" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f95579 code=0x7ffc0000 [ 680.374601][ T40] audit: type=1326 audit(1763469917.252:6750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20680 comm="syz.7.3545" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f95579 code=0x7ffc0000 [ 680.510723][ T7513] IPVS: starting estimator thread 0... [ 680.618888][T20690] IPVS: using max 31 ests per chain, 74400 per kthread [ 680.680676][T20703] input: syz0 as /devices/virtual/input/input35 [ 680.684620][T20699] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(10) [ 680.687401][T20699] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 680.705669][T20707] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3554'. [ 680.707174][T20699] vhci_hcd vhci_hcd.0: Device attached [ 680.858368][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 680.929491][T20713] udevd[20713]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 680.955718][T20713] udevd[20713]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 681.000425][T14257] usb 43-1: new high-speed USB device number 3 using vhci_hcd [ 681.327267][T20728] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(6) [ 681.330227][T20728] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 681.342046][T20728] vhci_hcd vhci_hcd.0: Device attached [ 681.421469][T20732] netlink: 224 bytes leftover after parsing attributes in process `syz.7.3561'. [ 681.433143][T20701] vhci_hcd: connection reset by peer [ 681.435076][T18796] vhci_hcd: stop threads [ 681.436494][T18796] vhci_hcd: release socket [ 681.438101][T18796] vhci_hcd: disconnect device [ 681.648327][ T7559] usb 50-1: SetAddress Request (2) to port 0 [ 681.650983][ T7559] usb 50-1: new SuperSpeed USB device number 2 using vhci_hcd [ 681.898366][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 682.938325][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 683.305938][T20729] vhci_hcd: connection reset by peer [ 683.308525][T18812] vhci_hcd: stop threads [ 683.311305][T18812] vhci_hcd: release socket [ 683.318378][T18812] vhci_hcd: disconnect device [ 683.350969][T20763] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 683.353700][T20763] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 683.358635][T20763] vhci_hcd vhci_hcd.0: Device attached [ 683.447988][T20762] netlink: 14528 bytes leftover after parsing attributes in process `syz.7.3564'. [ 683.954204][T20764] vhci_hcd: connection closed [ 683.955862][T18798] vhci_hcd: stop threads [ 683.965746][T18798] vhci_hcd: release socket [ 683.970519][T18798] vhci_hcd: disconnect device [ 683.978302][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 684.185619][T20786] netlink: 'syz.9.3577': attribute type 1 has an invalid length. [ 684.202222][T20786] 8021q: adding VLAN 0 to HW filter on device bond4 [ 684.251801][T20790] qrtr: Invalid version 0 [ 684.270810][T20786] vlan4: entered allmulticast mode [ 684.273185][T20786] veth1: entered allmulticast mode [ 684.277708][T20786] bond4: (slave vlan4): making interface the new active one [ 684.281663][T20786] bond4: (slave vlan4): Enslaving as an active interface with an up link [ 684.320833][T20792] loop7: detected capacity change from 0 to 16384 [ 684.382070][T20794] workqueue: name exceeds WQ_NAME_LEN. Truncating to: .ÿÿÿÿ0xffffffffffffffff00000000 [ 685.015920][T20799] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9) [ 685.018542][T20799] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 685.021596][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 685.027686][T20799] vhci_hcd vhci_hcd.0: Device attached [ 685.534051][T20821] mkiss: ax0: crc mode is auto. [ 685.657602][T20800] vhci_hcd: connection closed [ 685.658608][T18798] vhci_hcd: stop threads [ 685.662557][T18798] vhci_hcd: release socket [ 685.665363][T18798] vhci_hcd: disconnect device [ 686.058494][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 686.128313][T14257] vhci_hcd: vhci_device speed not set [ 686.185209][T20825] 9pnet_fd: Insufficient options for proto=fd [ 686.364118][T20832] syzkaller0: entered promiscuous mode [ 686.366714][T20832] syzkaller0: entered allmulticast mode [ 686.388509][T20832] tipc: Enabled bearer , priority 0 [ 686.393472][T20831] tipc: Resetting bearer [ 686.416079][T20831] tipc: Disabling bearer [ 686.496940][T20830] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3589'. [ 686.677836][T20840] tipc: Enabling of bearer rejected, already enabled [ 686.698635][ T7559] usb 50-1: device descriptor read/8, error -110 [ 686.741204][T20844] Cannot find del_set index 2 as target [ 686.853019][ T40] kauditd_printk_skb: 162 callbacks suppressed [ 686.853037][ T40] audit: type=1326 audit(1763469923.792:6913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20855 comm="syz.3.3600" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d579 code=0x7ffc0000 [ 686.867759][ T40] audit: type=1326 audit(1763469923.792:6914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20855 comm="syz.3.3600" exe="/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf707d579 code=0x7ffc0000 [ 686.880801][ T40] audit: type=1326 audit(1763469923.792:6915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20855 comm="syz.3.3600" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d579 code=0x7ffc0000 [ 686.894186][ T40] audit: type=1326 audit(1763469923.792:6916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20855 comm="syz.3.3600" exe="/syz-executor" sig=0 arch=40000003 syscall=260 compat=1 ip=0xf707d579 code=0x7ffc0000 [ 686.911277][ T40] audit: type=1326 audit(1763469923.792:6917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20855 comm="syz.3.3600" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf707d598 code=0x7ffc0000 [ 686.942379][ T40] audit: type=1326 audit(1763469923.792:6918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20855 comm="syz.3.3600" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d579 code=0x7ffc0000 [ 686.986456][ T40] audit: type=1326 audit(1763469923.792:6919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20855 comm="syz.3.3600" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d579 code=0x7ffc0000 [ 686.987362][T20862] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3602'. [ 687.000890][ T40] audit: type=1326 audit(1763469923.792:6920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20855 comm="syz.3.3600" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf707d598 code=0x7ffc0000 [ 687.010308][ T40] audit: type=1326 audit(1763469923.792:6921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20855 comm="syz.3.3600" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf707d598 code=0x7ffc0000 [ 687.023826][ T40] audit: type=1326 audit(1763469923.792:6922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20855 comm="syz.3.3600" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf707d598 code=0x7ffc0000 [ 687.098289][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 687.103457][ T7559] usb usb50-port1: attempt power cycle [ 687.105989][T20856] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3600'. [ 687.550783][T20879] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3607'. [ 687.569829][T20879] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3607'. [ 687.670786][T20879] vlan4: entered promiscuous mode [ 687.673242][T20879] bridge1: entered promiscuous mode [ 687.677380][T20879] vlan4: entered allmulticast mode [ 687.681612][T20879] bridge1: entered allmulticast mode [ 687.995638][ T7559] usb usb50-port1: unable to enumerate USB device [ 688.138276][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 688.225138][T14546] usb usb44-port1: attempt power cycle [ 688.279078][T20872] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 688.281985][T20872] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 688.288720][T20872] vhci_hcd vhci_hcd.0: Device attached [ 688.327020][T20887] vhci_hcd: connection closed [ 688.328358][T18811] vhci_hcd: stop threads [ 688.332005][T18811] vhci_hcd: release socket [ 688.333884][T18811] vhci_hcd: disconnect device [ 688.368526][T14546] usb 44-1: enqueue for inactive port 0 [ 688.745990][T20899] comedi comedi0: Minor 47 could not be opened [ 688.750708][T20899] netlink: 'syz.7.3612': attribute type 1 has an invalid length. [ 688.913843][T20899] bond2: entered promiscuous mode [ 688.917350][T20899] 8021q: adding VLAN 0 to HW filter on device bond2 [ 688.982630][T20901] 8021q: adding VLAN 0 to HW filter on device bond2 [ 688.987354][T20901] bond2: (slave gre1): The slave device specified does not support setting the MAC address [ 688.991906][T20901] bond2: (slave gre1): Setting fail_over_mac to active for active-backup mode [ 689.014147][T20903] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3613'. [ 689.017343][T20901] bond2: (slave gre1): making interface the new active one [ 689.017406][T20901] gre1: entered promiscuous mode [ 689.021103][T20903] netlink: 'syz.6.3613': attribute type 11 has an invalid length. [ 689.028723][T20901] bond2: (slave gre1): Enslaving as an active interface with an up link [ 689.045078][T20903] netlink: 56 bytes leftover after parsing attributes in process `syz.6.3613'. [ 689.178369][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 689.182406][T20907] sg_write: data in/out 16449500/251 bytes for SCSI command 0x15-- guessing data in; [ 689.182406][T20907] program syz.6.3615 not setting count and/or reply_len properly [ 689.707660][T14546] usb usb44-port1: unable to enumerate USB device [ 690.218295][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 690.651049][T20917] lo speed is unknown, defaulting to 1000 [ 690.696248][T20918] netlink: 750 bytes leftover after parsing attributes in process `syz.7.3617'. [ 690.699472][T20918] bond_slave_0: entered promiscuous mode [ 690.701619][T20918] bond_slave_1: entered promiscuous mode [ 691.041035][T20921] syzkaller0: entered promiscuous mode [ 691.042966][T20921] syzkaller0: entered allmulticast mode [ 691.057682][T20921] tipc: Enabled bearer , priority 0 [ 691.062962][T20920] tipc: Resetting bearer [ 691.077079][T20920] tipc: Disabling bearer [ 691.258326][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 691.789441][T20936] siw: device registration error -23 [ 692.298326][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 692.402390][T20949] syzkaller0: entered promiscuous mode [ 692.404937][T20949] syzkaller0: entered allmulticast mode [ 692.425252][T20949] tipc: Enabled bearer , priority 0 [ 692.432792][T20948] tipc: Resetting bearer [ 692.476101][T20948] tipc: Disabling bearer [ 692.508970][T20959] tipc: Enabling of bearer rejected, already enabled [ 692.536243][T20962] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 692.550568][T20962] input: syz1 as /devices/virtual/input/input36 [ 692.645305][T20964] mkiss: ax0: crc mode is auto. [ 692.953696][T20986] input: syz0 as /devices/virtual/input/input38 [ 693.143982][T20976] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 693.152507][T20973] 9pnet_fd: Insufficient options for proto=fd [ 693.338315][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 693.515560][T21010] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(7) [ 693.518579][T21010] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 693.530363][T21010] vhci_hcd vhci_hcd.0: Device attached [ 693.538109][T21009] ubi31: detaching mtd0 [ 693.564089][T21009] ubi31: mtd0 is detached [ 693.587820][ T40] kauditd_printk_skb: 83 callbacks suppressed [ 693.587837][ T40] audit: type=1400 audit(1763469930.522:7006): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-22 profile="unconfined" name="&" pid=21014 comm="syz.7.3652" [ 693.808406][T14546] usb 56-1: SetAddress Request (2) to port 0 [ 693.811193][T14546] usb 56-1: new SuperSpeed USB device number 2 using vhci_hcd [ 693.973767][T21011] vhci_hcd: connection reset by peer [ 693.977208][T18812] vhci_hcd: stop threads [ 693.979320][T18812] vhci_hcd: release socket [ 693.981459][T18812] vhci_hcd: disconnect device [ 694.084693][T21022] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3653'. [ 694.388491][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 695.010353][T21037] netlink: 16 bytes leftover after parsing attributes in process `syz.9.3657'. [ 695.221058][T21047] netlink: 'syz.3.3660': attribute type 27 has an invalid length. [ 695.418308][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 696.493233][T21077] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3669'. [ 696.496606][T21077] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3669'. [ 696.649111][ T7559] usb 14-1: new high-speed USB device number 3 using dummy_hcd [ 696.680284][T21087] syzkaller0: entered promiscuous mode [ 696.682664][T21087] syzkaller0: entered allmulticast mode [ 696.700663][T21087] tipc: Enabled bearer , priority 0 [ 696.705358][T21086] tipc: Resetting bearer [ 696.720327][T21086] tipc: Disabling bearer [ 696.828700][ T7559] usb 14-1: Using ep0 maxpacket: 8 [ 696.839807][ T7559] usb 14-1: config 1 has an invalid interface number: 44 but max is 0 [ 696.843476][ T7559] usb 14-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 696.847921][ T7559] usb 14-1: config 1 has no interface number 0 [ 696.854337][ T7559] usb 14-1: config 1 interface 44 altsetting 2 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 696.863052][ T7559] usb 14-1: config 1 interface 44 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 15 [ 696.870748][ T7559] usb 14-1: config 1 interface 44 has no altsetting 0 [ 696.875921][ T7559] usb 14-1: New USB device found, idVendor=05ef, idProduct=8884, bcdDevice=a3.c1 [ 696.880092][ T7559] usb 14-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 696.885960][ T7559] usb 14-1: Product: syz [ 696.888002][ T7559] usb 14-1: Manufacturer: syz [ 696.894590][ T7559] usb 14-1: SerialNumber: syz [ 696.929547][T21097] netlink: 'syz.7.3679': attribute type 1 has an invalid length. [ 696.932951][T21097] netlink: 224 bytes leftover after parsing attributes in process `syz.7.3679'. [ 697.361329][T21107] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(12) [ 697.364247][T21107] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 697.368130][T21107] vhci_hcd vhci_hcd.0: Device attached [ 697.387883][T21108] vhci_hcd: connection closed [ 697.388642][T18812] vhci_hcd: stop threads [ 697.393381][T18812] vhci_hcd: release socket [ 697.395378][T18812] vhci_hcd: disconnect device [ 697.508283][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 698.184245][T21120] binder: 21119:21120 ioctl c0306201 0 returned -14 [ 698.227148][T21122] binder: BINDER_SET_CONTEXT_MGR already set [ 698.229427][T21122] binder: 21121:21122 ioctl 4018620d 80000140 returned -16 [ 698.233304][T21122] binder: BINDER_SET_CONTEXT_MGR already set [ 698.235702][T21122] binder: 21121:21122 ioctl 4018620d 80000040 returned -16 [ 698.548286][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 698.553620][T21132] 9pnet_fd: Insufficient options for proto=fd [ 698.689743][T21135] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3691'. [ 698.795520][T21137] vlan2: entered promiscuous mode [ 698.797556][T21137] mac80211_hwsim hwsim49 wlan0: entered promiscuous mode [ 698.801156][T21137] vlan2: entered allmulticast mode [ 698.803054][T21137] mac80211_hwsim hwsim49 wlan0: entered allmulticast mode [ 698.837973][ T40] audit: type=1400 audit(1763469935.772:7007): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-22 profile="unconfined" name="&" pid=21138 comm="syz.3.3693" [ 698.858555][T14546] usb 56-1: device descriptor read/8, error -110 [ 699.269419][T14546] usb usb56-port1: attempt power cycle [ 699.331418][T21144] binder: 21143:21144 ioctl c0306201 0 returned -14 [ 699.384028][T21147] loop2: detected capacity change from 0 to 7 [ 699.389050][T21147] Dev loop2: unable to read RDB block 7 [ 699.393249][T21147] loop2: unable to read partition table [ 699.395910][T21147] loop2: partition table beyond EOD, truncated [ 699.399601][T21147] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 699.433759][ T7559] usb 14-1: USB disconnect, device number 3 [ 699.490932][T21153] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3699'. [ 699.497355][ T40] audit: type=1326 audit(1763469936.432:7008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21152 comm="syz.6.3699" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf70dd579 code=0x0 [ 699.504690][T21155] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3700'. [ 699.560979][T21157] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3700'. [ 699.578372][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 699.610902][T21155] vlan5: entered promiscuous mode [ 699.612817][T21155] bridge1: entered promiscuous mode [ 699.614625][T21155] vlan5: entered allmulticast mode [ 699.616325][T21155] bridge1: entered allmulticast mode [ 699.754079][T21166] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3704'. [ 699.771879][T21169] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3705'. [ 699.830628][T14546] usb usb56-port1: unable to enumerate USB device [ 699.915947][T21166] hsr_slave_0 (unregistering): left promiscuous mode [ 700.005004][T21177] netlink: 'syz.7.3707': attribute type 1 has an invalid length. [ 700.020835][T21177] netlink: 228 bytes leftover after parsing attributes in process `syz.7.3707'. [ 700.618396][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 700.761053][T21189] netlink: 'syz.3.3712': attribute type 10 has an invalid length. [ 700.764085][T21189] batman_adv: batadv0: Adding interface: netdevsim0 [ 700.766286][T21189] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1568 would solve the problem. [ 700.774855][T21189] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 700.808615][T21196] sg_write: data in/out 16774364/251 bytes for SCSI command 0x15-- guessing data in; [ 700.808615][T21196] program syz.3.3713 not setting count and/or reply_len properly [ 700.850029][T21201] binder: BINDER_SET_CONTEXT_MGR already set [ 700.852063][T21201] binder: 21199:21201 ioctl 4018620d 80000100 returned -16 [ 700.855923][T21201] binder: BINDER_SET_CONTEXT_MGR already set [ 700.857916][T21201] binder: 21199:21201 ioctl 4018620d 80004a80 returned -16 [ 701.189886][T21212] random: crng reseeded on system resumption [ 701.195971][T21212] netlink: 20 bytes leftover after parsing attributes in process `syz.9.3719'. [ 701.200359][T21212] netlink: 20 bytes leftover after parsing attributes in process `syz.9.3719'. [ 701.668261][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 702.016939][T21220] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3721'. [ 702.021121][T21220] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3721'. [ 702.372228][ T40] audit: type=1326 audit(1763469939.252:7009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21231 comm="syz.9.3726" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f55579 code=0x7ffc0000 [ 702.381048][ T40] audit: type=1326 audit(1763469939.252:7010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21231 comm="syz.9.3726" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f55579 code=0x7ffc0000 [ 702.391334][ T40] audit: type=1326 audit(1763469939.252:7011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21231 comm="syz.9.3726" exe="/syz-executor" sig=0 arch=40000003 syscall=136 compat=1 ip=0xf7f55579 code=0x7ffc0000 [ 702.400571][ T40] audit: type=1326 audit(1763469939.252:7012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21231 comm="syz.9.3726" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f55579 code=0x7ffc0000 [ 702.415455][ T40] audit: type=1326 audit(1763469939.252:7013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21231 comm="syz.9.3726" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f55579 code=0x7ffc0000 [ 702.577945][ T40] audit: type=1326 audit(1763469939.252:7014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21231 comm="syz.9.3726" exe="/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf7f55579 code=0x7ffc0000 [ 702.577990][ T40] audit: type=1326 audit(1763469939.262:7015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21231 comm="syz.9.3726" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f55579 code=0x7ffc0000 [ 702.578026][ T40] audit: type=1326 audit(1763469939.262:7016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21231 comm="syz.9.3726" exe="/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf7f55579 code=0x7ffc0000 [ 702.698295][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 703.436606][T21267] comedi comedi0: Minor 47 could not be opened [ 703.441200][T21267] netlink: 'syz.6.3732': attribute type 1 has an invalid length. [ 703.512374][T21267] bond4: entered promiscuous mode [ 703.515863][T21267] 8021q: adding VLAN 0 to HW filter on device bond4 [ 703.738378][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 703.824104][T21287] syzkaller0: entered promiscuous mode [ 703.826187][T21287] syzkaller0: entered allmulticast mode [ 703.843789][T21287] tipc: Enabled bearer , priority 0 [ 703.847707][T21286] tipc: Resetting bearer [ 703.866026][T21286] tipc: Disabling bearer [ 704.126125][T21295] vlan3: entered promiscuous mode [ 704.128465][T21295] bridge0: entered promiscuous mode [ 704.130908][T21295] vlan3: entered allmulticast mode [ 704.133346][T21295] bridge0: entered allmulticast mode [ 704.434919][T21304] lo speed is unknown, defaulting to 1000 [ 704.572695][T21305] lo speed is unknown, defaulting to 1000 [ 704.778310][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 705.384151][T21323] 9pnet_fd: Insufficient options for proto=fd [ 705.702342][T21326] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(7) [ 705.704557][T21326] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 705.707502][T21326] vhci_hcd vhci_hcd.0: Device attached [ 705.729317][T21330] loop7: detected capacity change from 0 to 16384 [ 705.818264][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 706.011042][ T7558] usb 50-1: SetAddress Request (6) to port 0 [ 706.013349][ T7558] usb 50-1: new SuperSpeed USB device number 6 using vhci_hcd [ 706.018393][T21331] loop7: detected capacity change from 16384 to 0 [ 706.028402][T21327] vhci_hcd: connection closed [ 706.028575][T21328] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 706.032421][ T1147] vhci_hcd: stop threads [ 706.033903][ T1147] vhci_hcd: release socket [ 706.035442][ T1147] vhci_hcd: disconnect device [ 706.050306][T21335] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 706.610783][T21372] __nla_validate_parse: 6 callbacks suppressed [ 706.610800][T21372] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3767'. [ 706.858258][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 707.219238][T21384] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3772'. [ 707.728008][T21400] binder: BINDER_SET_CONTEXT_MGR already set [ 707.732194][T21400] binder: 21399:21400 ioctl 4018620d 80000100 returned -16 [ 707.737889][T21400] binder: BINDER_SET_CONTEXT_MGR already set [ 707.741131][T21400] binder: 21399:21400 ioctl 4018620d 800002c0 returned -16 [ 707.760225][T21402] syzkaller0: entered promiscuous mode [ 707.762792][T21402] syzkaller0: entered allmulticast mode [ 707.882459][T21408] binder: BINDER_SET_CONTEXT_MGR already set [ 707.883215][T21409] netlink: 272 bytes leftover after parsing attributes in process `syz.9.3781'. [ 707.886354][T21408] binder: 21406:21408 ioctl 4018620d 80000140 returned -16 [ 707.889780][T21409] openvswitch: netlink: Flow key attr not present in new flow. [ 707.897765][T21408] binder: BINDER_SET_CONTEXT_MGR already set [ 707.898274][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 707.902627][T21408] binder: 21406:21408 ioctl 4018620d 80000040 returned -16 [ 707.956137][T21412] IPVS: set_ctl: invalid protocol: 58 172.20.20.170:0 [ 707.997618][T21414] syzkaller0: entered promiscuous mode [ 708.000716][T21414] syzkaller0: entered allmulticast mode [ 708.040611][T21414] tipc: Enabled bearer , priority 0 [ 708.058806][T21413] tipc: Resetting bearer [ 708.097098][T21413] tipc: Disabling bearer [ 708.196641][T21422] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3786'. [ 708.200602][T21422] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3786'. [ 708.213345][T21422] vlan5: entered promiscuous mode [ 708.215136][T21422] bridge3: entered promiscuous mode [ 708.216966][T21422] vlan5: entered allmulticast mode [ 708.219956][T21422] bridge3: entered allmulticast mode [ 708.311530][T21425] netlink: 'syz.3.3785': attribute type 10 has an invalid length. [ 708.317618][T21425] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 708.327843][T21425] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 708.361239][T21435] tipc: Enabling of bearer rejected, already enabled [ 708.444967][T21440] netlink: 224 bytes leftover after parsing attributes in process `syz.9.3792'. [ 708.797549][T21456] siw: device registration error -23 [ 708.938390][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 709.462712][T21465] Bluetooth: MGMT ver 1.23 [ 709.665389][T21472] comedi comedi0: Minor 47 could not be opened [ 709.668476][T21472] netlink: 'syz.7.3799': attribute type 1 has an invalid length. [ 709.763055][T21472] bond3: entered promiscuous mode [ 709.765496][T21472] 8021q: adding VLAN 0 to HW filter on device bond3 [ 709.978315][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 710.355485][T21480] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3804'. [ 711.018297][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 711.224189][ T7558] usb 50-1: device descriptor read/8, error -110 [ 711.311014][T21503] binder: BINDER_SET_CONTEXT_MGR already set [ 711.313845][T21503] binder: 21502:21503 ioctl 4018620d 80000100 returned -16 [ 711.320056][T21503] binder: BINDER_SET_CONTEXT_MGR already set [ 711.322689][T21503] binder: 21502:21503 ioctl 4018620d 800002c0 returned -16 [ 711.499552][T21493] lo speed is unknown, defaulting to 1000 [ 711.622664][ T7558] usb usb50-port1: attempt power cycle [ 711.681944][T21508] netlink: 220 bytes leftover after parsing attributes in process `syz.7.3811'. [ 711.685709][T21508] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3811'. [ 711.689607][T21508] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3811'. [ 711.693153][T21508] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3811'. [ 711.696047][T21508] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3811'. [ 711.719662][T21515] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3813'. [ 711.723085][T21515] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3813'. [ 711.761231][T21515] macvlan3: entered allmulticast mode [ 711.833595][T21523] binder: BINDER_SET_CONTEXT_MGR already set [ 711.835576][T21523] binder: 21521:21523 ioctl 4018620d 80000080 returned -16 [ 711.851225][T21523] binder_alloc: 21143: binder_alloc_buf, no vma [ 712.058414][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 712.189303][ T7558] usb usb50-port1: unable to enumerate USB device [ 712.333852][T21540] syzkaller0: entered promiscuous mode [ 712.335986][T21540] syzkaller0: entered allmulticast mode [ 712.626425][T21552] netlink: 220 bytes leftover after parsing attributes in process `syz.3.3823'. [ 712.633928][T21552] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3823'. [ 712.638831][T21552] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3823'. [ 712.672392][T21545] lo speed is unknown, defaulting to 1000 [ 712.680720][T21532] lo speed is unknown, defaulting to 1000 [ 712.810585][T21556] bond5: option arp_interval: invalid value (18446744073709551615) [ 712.814028][T21556] bond5: option arp_interval: allowed values 0 - 2147483647 [ 712.819601][T21556] bond5 (unregistering): Released all slaves [ 713.066777][T21565] siw: device registration error -23 [ 713.098309][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 713.800931][T21576] netlink: 'syz.6.3832': attribute type 1 has an invalid length. [ 714.148254][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 715.188321][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 715.209154][T21615] random: crng reseeded on system resumption [ 715.874345][T21627] 9pnet_fd: Insufficient options for proto=fd [ 716.228278][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 717.126393][T21657] binder: BINDER_SET_CONTEXT_MGR already set [ 717.129510][T21657] binder: 21656:21657 ioctl 4018620d 80000140 returned -16 [ 717.134985][T21657] binder: BINDER_SET_CONTEXT_MGR already set [ 717.137645][T21657] binder: 21656:21657 ioctl 4018620d 80000040 returned -16 [ 717.239134][T21658] lo speed is unknown, defaulting to 1000 [ 717.268341][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 717.344902][T21655] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(3) [ 717.347763][T21655] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 717.371195][T21655] vhci_hcd vhci_hcd.0: Device attached [ 717.390614][T21665] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 0 [ 717.467990][ T40] kauditd_printk_skb: 33 callbacks suppressed [ 717.468008][ T40] audit: type=1326 audit(1763469954.402:7050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21643 comm="syz.3.3856" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf707d579 code=0x0 [ 717.548399][T14285] vhci_hcd: vhci_device speed not set [ 717.571434][T18811] vhci_hcd: stop threads [ 717.573447][T18811] vhci_hcd: release socket [ 717.575552][T18811] vhci_hcd: disconnect device [ 717.608452][T14285] usb 51-1: new full-speed USB device number 2 using vhci_hcd [ 717.611838][T14285] usb 51-1: enqueue for inactive port 0 [ 717.678354][T14285] vhci_hcd: vhci_device speed not set [ 717.945594][T21677] __nla_validate_parse: 9 callbacks suppressed [ 717.945610][T21677] netlink: 224 bytes leftover after parsing attributes in process `syz.9.3867'. [ 718.204121][T21690] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(5) [ 718.207045][T21690] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 718.211435][T21690] vhci_hcd vhci_hcd.0: Device attached [ 718.308315][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 718.574276][T21698] netlink: 20 bytes leftover after parsing attributes in process `syz.9.3875'. [ 718.625843][T21698] netlink: 'syz.9.3875': attribute type 3 has an invalid length. [ 718.736896][T21705] loop2: detected capacity change from 0 to 7 [ 718.740157][T21705] Dev loop2: unable to read RDB block 7 [ 718.742131][T21705] loop2: unable to read partition table [ 718.745635][T21705] loop2: partition table beyond EOD, truncated [ 718.747850][T21705] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 718.905946][T21692] vhci_hcd: connection closed [ 718.906300][T18804] vhci_hcd: stop threads [ 718.910203][T18804] vhci_hcd: release socket [ 718.912064][T18804] vhci_hcd: disconnect device [ 719.109210][ T7559] libceph: connect (1)[c::]:6789 error -101 [ 719.112158][ T7559] libceph: mon0 (1)[c::]:6789 connect error [ 719.320670][T21722] netlink: 'syz.6.3881': attribute type 1 has an invalid length. [ 719.323233][T21722] netlink: 224 bytes leftover after parsing attributes in process `syz.6.3881'. [ 719.338403][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 719.558928][ T7559] libceph: connect (1)[c::]:6789 error -101 [ 719.563439][ T7559] libceph: mon0 (1)[c::]:6789 connect error [ 719.623461][T21715] ceph: No mds server is up or the cluster is laggy [ 719.766382][T21727] input: syz0 as /devices/virtual/input/input41 [ 719.863035][T21730] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3884'. [ 719.934094][T21733] netlink: 'syz.7.3885': attribute type 1 has an invalid length. [ 719.972781][T21733] 8021q: adding VLAN 0 to HW filter on device bond4 [ 719.995110][T21733] vlan6: entered allmulticast mode [ 719.997511][T21733] veth1: entered allmulticast mode [ 720.003552][T21733] bond4: (slave vlan6): making interface the new active one [ 720.011415][T21733] bond4: (slave vlan6): Enslaving as an active interface with an up link [ 720.388466][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 720.563248][T21748] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3890'. [ 720.774611][T21755] netlink: 72 bytes leftover after parsing attributes in process `syz.6.3893'. [ 721.109605][T21769] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3899'. [ 721.418337][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 721.455218][T21778] 9pnet_fd: Insufficient options for proto=fd [ 722.223027][ T40] audit: type=1400 audit(1763469959.162:7051): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-22 profile="unconfined" name="&" pid=21785 comm="syz.6.3905" [ 722.238192][ T40] audit: type=1326 audit(1763469959.162:7052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21787 comm="syz.3.3906" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d579 code=0x7ffc0000 [ 722.248466][ T40] audit: type=1326 audit(1763469959.162:7053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21787 comm="syz.3.3906" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d579 code=0x7ffc0000 [ 722.257905][ T40] audit: type=1326 audit(1763469959.162:7054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21787 comm="syz.3.3906" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf707d579 code=0x7ffc0000 [ 722.260243][T21788] netlink: 'syz.3.3906': attribute type 21 has an invalid length. [ 722.267196][ T40] audit: type=1326 audit(1763469959.162:7055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21787 comm="syz.3.3906" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d579 code=0x7ffc0000 [ 722.269868][T21788] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3906'. [ 722.279512][ T40] audit: type=1326 audit(1763469959.162:7056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21787 comm="syz.3.3906" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d579 code=0x7ffc0000 [ 722.281544][T21788] netlink: 'syz.3.3906': attribute type 5 has an invalid length. [ 722.293202][T21788] netlink: 3 bytes leftover after parsing attributes in process `syz.3.3906'. [ 722.309595][ T40] audit: type=1326 audit(1763469959.162:7057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21787 comm="syz.3.3906" exe="/syz-executor" sig=0 arch=40000003 syscall=228 compat=1 ip=0xf707d579 code=0x7ffc0000 [ 722.330506][ T40] audit: type=1326 audit(1763469959.162:7058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21787 comm="syz.3.3906" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d579 code=0x7ffc0000 [ 722.338543][ T40] audit: type=1326 audit(1763469959.162:7059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21787 comm="syz.3.3906" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d579 code=0x7ffc0000 [ 722.468289][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 723.108506][T21809] bridge0: entered promiscuous mode [ 723.110560][T21809] macvlan2: entered promiscuous mode [ 723.113649][T21811] tipc: Enabling of bearer rejected, already enabled [ 723.269182][T21809] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3911'. [ 723.290953][T21809] netlink: 'syz.6.3911': attribute type 3 has an invalid length. [ 723.480288][T21826] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3916'. [ 723.498314][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 723.743001][T21838] random: crng reseeded on system resumption [ 723.777780][T21838] netlink: 32 bytes leftover after parsing attributes in process `syz.9.3915'. [ 723.782557][T21838] netlink: 32 bytes leftover after parsing attributes in process `syz.9.3915'. [ 723.789165][T21840] netlink: 'syz.3.3924': attribute type 1 has an invalid length. [ 723.792402][T21840] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3924'. [ 723.826587][T21838] netlink: 32 bytes leftover after parsing attributes in process `syz.9.3915'. [ 723.839031][T21838] netlink: 32 bytes leftover after parsing attributes in process `syz.9.3915'. [ 723.871748][T21848] openvswitch: netlink: Flow actions attr not present in new flow. [ 723.903794][T21849] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(12) [ 723.906335][T21849] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 723.914063][T21849] vhci_hcd vhci_hcd.0: Device attached [ 723.933114][T21850] vhci_hcd: connection closed [ 723.937274][T18798] vhci_hcd: stop threads [ 723.942543][T18798] vhci_hcd: release socket [ 723.944494][T18798] vhci_hcd: disconnect device [ 723.959931][T21846] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 723.971054][T21856] netlink: 'syz.3.3927': attribute type 1 has an invalid length. [ 723.974127][T21838] netlink: 32 bytes leftover after parsing attributes in process `syz.9.3915'. [ 723.979047][T21838] netlink: 32 bytes leftover after parsing attributes in process `syz.9.3915'. [ 723.985436][T21856] 8021q: adding VLAN 0 to HW filter on device bond1 [ 723.995418][T21856] vlan5: entered allmulticast mode [ 723.997248][T21856] veth1: entered allmulticast mode [ 724.000393][T21856] bond1: (slave vlan5): Opening slave failed [ 724.304757][T21846] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 724.474915][T21846] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 724.482157][T21868] siw: device registration error -23 [ 724.538329][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 724.615081][T21846] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 725.051811][T18796] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 725.062920][ T1150] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 725.139737][T18811] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 725.147800][T18811] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 725.588337][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 726.491898][T21909] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 726.494207][T21909] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 726.497873][T21909] vhci_hcd vhci_hcd.0: Device attached [ 726.503384][T21912] binder: BINDER_SET_CONTEXT_MGR already set [ 726.505597][T21912] binder: 21908:21912 ioctl 4018620d 80000080 returned -16 [ 726.519975][T21912] binder_alloc: 21143: binder_alloc_buf, no vma [ 726.618309][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 726.788527][ T7558] usb 44-1: SetAddress Request (44) to port 0 [ 726.791376][ T7558] usb 44-1: new SuperSpeed USB device number 44 using vhci_hcd [ 726.821263][T21910] vhci_hcd: connection reset by peer [ 726.891089][ T1150] vhci_hcd: stop threads [ 726.892969][ T1150] vhci_hcd: release socket [ 726.894966][ T1150] vhci_hcd: disconnect device [ 726.903977][T21922] netlink: 40 bytes leftover after parsing attributes in process `syz.7.3947'. [ 727.197724][T21937] syzkaller0: entered promiscuous mode [ 727.199678][T21937] syzkaller0: entered allmulticast mode [ 727.272638][T21938] 9pnet_fd: Insufficient options for proto=fd [ 727.319168][T21937] tipc: Enabled bearer , priority 0 [ 727.337195][T21936] tipc: Resetting bearer [ 727.366877][T21936] tipc: Disabling bearer [ 727.668643][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 728.163394][T21952] syzkaller0: entered promiscuous mode [ 728.165226][T21952] syzkaller0: entered allmulticast mode [ 728.211969][T21952] tipc: Enabled bearer , priority 0 [ 728.215899][T21951] tipc: Resetting bearer [ 728.232743][T21951] tipc: Disabling bearer [ 728.264096][T21957] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 728.539441][T21961] binder: BINDER_SET_CONTEXT_MGR already set [ 728.541453][T21961] binder: 21960:21961 ioctl 4018620d 80000100 returned -16 [ 728.546956][T21961] binder: BINDER_SET_CONTEXT_MGR already set [ 728.549616][T21961] binder: 21960:21961 ioctl 4018620d 800002c0 returned -16 [ 728.698320][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 728.876838][T21964] lo speed is unknown, defaulting to 1000 [ 729.048013][T21970] __nla_validate_parse: 2 callbacks suppressed [ 729.048030][T21970] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3964'. [ 729.070709][T21970] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3964'. [ 729.073899][T21972] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3965'. [ 729.089216][T21970] vlan5: entered promiscuous mode [ 729.091463][T21970] bridge1: entered promiscuous mode [ 729.093839][T21970] vlan5: entered allmulticast mode [ 729.096021][T21970] bridge1: entered allmulticast mode [ 729.257559][T21987] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3971'. [ 729.301938][T21993] syzkaller0: entered promiscuous mode [ 729.304330][T21993] syzkaller0: entered allmulticast mode [ 729.340526][T21993] tipc: Enabled bearer , priority 0 [ 729.344700][T21995] syzkaller0: entered promiscuous mode [ 729.347049][T21995] syzkaller0: entered allmulticast mode [ 729.363931][T21992] tipc: Resetting bearer [ 729.375472][T21992] tipc: Disabling bearer [ 729.385583][T21995] tipc: Enabled bearer , priority 0 [ 729.405677][T21994] tipc: Resetting bearer [ 729.446717][T21994] tipc: Disabling bearer [ 729.748383][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 729.905127][T22016] siw: device registration error -23 [ 730.227570][T22022] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(12) [ 730.230597][T22022] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 730.234368][T22022] vhci_hcd vhci_hcd.0: Device attached [ 730.234441][T22023] vhci_hcd: connection closed [ 730.241062][T18811] vhci_hcd: stop threads [ 730.245709][T18811] vhci_hcd: release socket [ 730.248104][T18811] vhci_hcd: disconnect device [ 730.298368][T16459] Bluetooth: hci0: command tx timeout [ 730.417299][T22035] Cannot find del_set index 2 as target [ 730.702164][T22047] loop7: detected capacity change from 0 to 16384 [ 730.788352][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 730.828464][T22049] loop7: detected capacity change from 16384 to 0 [ 730.829495][ C3] I/O error, dev loop7, sector 512 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 2 [ 731.467538][T22045] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 731.562261][T22069] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3995'. [ 731.599483][T22072] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3996'. [ 731.602660][T22072] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3996'. [ 731.610370][T22072] macvlan4: entered allmulticast mode [ 731.629758][T22070] netlink: 'syz.7.3993': attribute type 21 has an invalid length. [ 731.638335][T22070] netlink: 'syz.7.3993': attribute type 1 has an invalid length. [ 731.641739][T22070] netlink: 100 bytes leftover after parsing attributes in process `syz.7.3993'. [ 731.818341][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 731.831388][ T7558] usb 44-1: device descriptor read/8, error -110 [ 732.311174][ T7558] usb usb44-port1: attempt power cycle [ 732.355270][T22084] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(12) [ 732.357631][T22084] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 732.366552][T22084] vhci_hcd vhci_hcd.0: Device attached [ 732.409028][T22085] vhci_hcd: connection closed [ 732.409311][ T1150] vhci_hcd: stop threads [ 732.413317][ T1150] vhci_hcd: release socket [ 732.415307][ T1150] vhci_hcd: disconnect device [ 732.868326][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 732.879783][ T7558] usb usb44-port1: unable to enumerate USB device [ 733.703181][T22105] 9pnet_fd: Insufficient options for proto=fd [ 733.898309][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 734.122275][T22100] batman_adv: batadv0: Removing interface: netdevsim0 [ 734.938364][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 735.691133][T22138] 9pnet_fd: Insufficient options for proto=fd [ 735.732952][T22141] loop7: detected capacity change from 0 to 16384 [ 735.978388][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 736.138543][T22142] loop7: detected capacity change from 16384 to 0 [ 736.374019][T22146] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4018'. [ 736.433665][ T40] kauditd_printk_skb: 48 callbacks suppressed [ 736.433681][ T40] audit: type=1400 audit(1763469973.372:7108): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-22 profile="unconfined" name="&" pid=22151 comm="syz.7.4017" [ 736.589299][T22158] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4021'. [ 736.871658][T22165] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4019'. [ 736.888417][T22165] wireguard0: entered promiscuous mode [ 736.891250][T22165] wireguard0: entered allmulticast mode [ 736.969245][T22167] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(8) [ 736.972224][T22167] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 737.008312][T22167] vhci_hcd vhci_hcd.0: Device attached [ 737.018443][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 737.238487][ T7558] usb 55-1: new low-speed USB device number 2 using vhci_hcd [ 737.606481][T22168] vhci_hcd: connection reset by peer [ 737.608673][T18812] vhci_hcd: stop threads [ 737.610115][T18812] vhci_hcd: release socket [ 737.611638][T18812] vhci_hcd: disconnect device [ 737.680532][T22174] syz_tun: entered allmulticast mode [ 737.690599][T22174] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 737.699939][T22178] loop7: detected capacity change from 0 to 16384 [ 737.898887][T22181] loop7: detected capacity change from 16384 to 0 [ 737.902062][ C3] I/O error, dev loop7, sector 15984 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 738.058381][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 738.111667][T22186] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(12) [ 738.114635][T22186] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 738.123455][T22186] vhci_hcd vhci_hcd.0: Device attached [ 738.187024][T22190] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4029'. [ 738.408361][T14546] usb 52-1: SetAddress Request (7) to port 0 [ 738.448364][T14546] usb 52-1: new SuperSpeed USB device number 7 using vhci_hcd [ 738.610864][T22194] syzkaller0: entered promiscuous mode [ 738.613350][T22194] syzkaller0: entered allmulticast mode [ 738.633161][T22194] tipc: Enabled bearer , priority 0 [ 738.638035][T22193] tipc: Resetting bearer [ 738.651884][T22193] tipc: Disabling bearer [ 738.660510][T22187] vhci_hcd: connection reset by peer [ 738.662600][T18812] vhci_hcd: stop threads [ 738.665638][T18812] vhci_hcd: release socket [ 738.669370][T18812] vhci_hcd: disconnect device [ 738.701300][T22199] loop2: detected capacity change from 0 to 7 [ 738.708122][T20713] Dev loop2: unable to read RDB block 7 [ 738.711531][T20713] loop2: unable to read partition table [ 738.718319][T20713] loop2: partition table beyond EOD, truncated [ 738.723090][T22199] Dev loop2: unable to read RDB block 7 [ 738.725480][T22199] loop2: unable to read partition table [ 738.727455][T22199] loop2: partition table beyond EOD, truncated [ 738.730299][T22199] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 739.086326][T22213] siw: device registration error -23 [ 739.098427][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 739.494037][T22214] 9pnet_fd: Insufficient options for proto=fd [ 740.012690][T22228] binder: BINDER_SET_CONTEXT_MGR already set [ 740.015555][T22228] binder: 22227:22228 ioctl 4018620d 80000100 returned -16 [ 740.030419][T22228] binder: BINDER_SET_CONTEXT_MGR already set [ 740.033099][T22228] binder: 22227:22228 ioctl 4018620d 800002c0 returned -16 [ 740.138329][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 740.230379][T22234] binder: BINDER_SET_CONTEXT_MGR already set [ 740.233110][T22234] binder: 22233:22234 ioctl 4018620d 80000080 returned -16 [ 740.239858][T22234] binder_alloc: 21119: binder_alloc_buf, no vma [ 740.339899][T22244] netlink: 40 bytes leftover after parsing attributes in process `syz.6.4045'. [ 740.948845][T22259] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(12) [ 740.951130][T22259] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 740.955198][T22258] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(12) [ 740.957811][T22258] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 740.961074][T22259] vhci_hcd vhci_hcd.0: Device attached [ 740.997611][T22258] vhci_hcd vhci_hcd.0: Device attached [ 741.166342][T22263] vhci_hcd: connection closed [ 741.166710][ T1150] vhci_hcd: stop threads [ 741.178334][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 741.183672][ T1150] vhci_hcd: release socket [ 741.185987][ T1150] vhci_hcd: disconnect device [ 741.278464][ T53] usb 50-1: SetAddress Request (10) to port 0 [ 741.281372][ T53] usb 50-1: new SuperSpeed USB device number 10 using vhci_hcd [ 741.902157][T22260] vhci_hcd: connection reset by peer [ 741.926091][ T46] vhci_hcd: stop threads [ 741.927762][ T46] vhci_hcd: release socket [ 741.930226][ T46] vhci_hcd: disconnect device [ 742.142964][T22276] 9pnet_fd: Insufficient options for proto=fd [ 742.218323][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 742.388559][ T7558] vhci_hcd: vhci_device speed not set [ 742.412270][T22287] binder: BINDER_SET_CONTEXT_MGR already set [ 742.415128][T22287] binder: 22286:22287 ioctl 4018620d 80000140 returned -16 [ 742.423306][T22287] binder: BINDER_SET_CONTEXT_MGR already set [ 742.425770][T22287] binder: 22286:22287 ioctl 4018620d 80000040 returned -16 [ 742.592054][T22299] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4063'. [ 742.690564][T22307] binder: BINDER_SET_CONTEXT_MGR already set [ 742.693094][T22307] binder: 22305:22307 ioctl 4018620d 80000100 returned -16 [ 742.697785][T22307] binder: BINDER_SET_CONTEXT_MGR already set [ 742.703718][T22307] binder: 22305:22307 ioctl 4018620d 800002c0 returned -16 [ 742.768342][ T7260] usb 12-1: new high-speed USB device number 3 using dummy_hcd [ 742.918338][ T7260] usb 12-1: Using ep0 maxpacket: 32 [ 742.921473][ T7260] usb 12-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 742.925395][ T7260] usb 12-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 742.932816][ T7260] usb 12-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=4d.a7 [ 742.936624][ T7260] usb 12-1: New USB device strings: Mfr=152, Product=158, SerialNumber=3 [ 742.939767][ T7260] usb 12-1: Product: syz [ 742.941548][ T7260] usb 12-1: Manufacturer: syz [ 742.943129][ T7260] usb 12-1: SerialNumber: syz [ 742.946531][ T7260] usb 12-1: config 0 descriptor?? [ 743.258292][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 743.266383][T14643] usb 12-1: USB disconnect, device number 3 [ 743.498449][T14546] usb 52-1: device descriptor read/8, error -110 [ 743.566654][T16459] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 743.711611][ T7559] usb usb56-port1: attempt power cycle [ 743.747959][T22339] binder: BINDER_SET_CONTEXT_MGR already set [ 743.750891][T22339] binder: 22338:22339 ioctl 4018620d 80000240 returned -16 [ 743.760429][T22339] binder: BINDER_SET_CONTEXT_MGR already set [ 743.763818][T22339] binder: 22338:22339 ioctl 4018620d 80004a80 returned -16 [ 743.830471][T22340] comedi comedi0: Minor 47 could not be opened [ 743.834917][T22340] netlink: 'syz.9.4073': attribute type 1 has an invalid length. [ 743.879789][T22340] bond5: entered promiscuous mode [ 743.882099][T22340] 8021q: adding VLAN 0 to HW filter on device bond5 [ 744.009684][T14546] usb usb52-port1: attempt power cycle [ 744.009843][T22343] syzkaller0: entered promiscuous mode [ 744.014767][T22343] syzkaller0: entered allmulticast mode [ 744.038749][T22343] tipc: Enabled bearer , priority 0 [ 744.053911][T22341] tipc: Resetting bearer [ 744.077340][T22341] tipc: Disabling bearer [ 744.221908][T22352] binder: BINDER_SET_CONTEXT_MGR already set [ 744.224728][T22352] binder: 22351:22352 ioctl 4018620d 80000100 returned -16 [ 744.233304][T22352] binder: BINDER_SET_CONTEXT_MGR already set [ 744.236166][T22352] binder: 22351:22352 ioctl 4018620d 800002c0 returned -16 [ 744.308305][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 744.513085][ T7559] usb usb56-port1: unable to enumerate USB device [ 745.201832][T14546] usb usb52-port1: unable to enumerate USB device [ 745.293235][T22364] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4083'. [ 745.338286][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 745.660784][T22383] netlink: 'syz.7.4089': attribute type 1 has an invalid length. [ 745.664453][T22383] netlink: 224 bytes leftover after parsing attributes in process `syz.7.4089'. [ 745.799557][T22386] hub 8-0:1.0: USB hub found [ 745.802825][T22386] hub 8-0:1.0: 1 port detected [ 745.822980][T22386] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4084'. [ 745.826920][T22386] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4084'. [ 745.831537][T22386] netlink: 'syz.3.4084': attribute type 12 has an invalid length. [ 745.968318][T16460] usb 12-1: new high-speed USB device number 4 using dummy_hcd [ 746.148331][T16460] usb 12-1: Using ep0 maxpacket: 8 [ 746.159965][T16460] usb 12-1: config 0 interface 0 has no altsetting 0 [ 746.168761][T16460] usb 12-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 746.174557][T16460] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 746.202299][T16460] usb 12-1: config 0 descriptor?? [ 746.360165][T22398] syzkaller0: entered promiscuous mode [ 746.362055][T22398] syzkaller0: entered allmulticast mode [ 746.379061][T22398] tipc: Enabled bearer , priority 0 [ 746.383586][T22397] tipc: Resetting bearer [ 746.388340][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 746.391571][ T53] usb 50-1: device descriptor read/8, error -110 [ 746.405274][T22397] tipc: Disabling bearer [ 746.547436][T22405] loop2: detected capacity change from 0 to 7 [ 746.558451][T20713] Dev loop2: unable to read RDB block 7 [ 746.568298][T20713] loop2: unable to read partition table [ 746.570514][T20713] loop2: partition table beyond EOD, truncated [ 746.581610][T22405] Dev loop2: unable to read RDB block 7 [ 746.583903][T22405] loop2: unable to read partition table [ 746.585902][T22405] loop2: partition table beyond EOD, truncated [ 746.590853][T22405] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 746.651712][T16460] mcp2221 0003:04D8:00DD.0006: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.7-1/input0 [ 746.789731][ T53] usb usb50-port1: attempt power cycle [ 746.800714][T22419] Cannot find del_set index 2 as target [ 747.178435][T22429] loop7: detected capacity change from 0 to 16384 [ 747.379267][ T53] usb usb50-port1: unable to enumerate USB device [ 747.428326][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 747.448449][T22431] loop7: detected capacity change from 16384 to 0 [ 747.451656][ C3] I/O error, dev loop7, sector 11520 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 2 [ 748.019661][ T53] usb 11-1: new high-speed USB device number 6 using dummy_hcd [ 748.091291][ T7495] usb 12-1: USB disconnect, device number 4 [ 748.178345][ T53] usb 11-1: Using ep0 maxpacket: 32 [ 748.182794][ T53] usb 11-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 748.189704][ T53] usb 11-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 748.193651][ T53] usb 11-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 748.197172][ T53] usb 11-1: Product: syz [ 748.207166][ T53] usb 11-1: Manufacturer: syz [ 748.209693][ T53] usb 11-1: SerialNumber: syz [ 748.213993][ T53] usb 11-1: config 0 descriptor?? [ 748.216976][T22435] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 748.424381][T22435] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 748.428746][T22435] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 748.436498][T22435] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 748.441165][T22435] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 748.446232][T14643] usb 11-1: USB disconnect, device number 6 [ 748.458617][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 748.713997][T22458] netlink: 40 bytes leftover after parsing attributes in process `syz.6.4113'. [ 748.772275][T22460] binder: BINDER_SET_CONTEXT_MGR already set [ 748.775044][T22460] binder: 22459:22460 ioctl 4018620d 80000100 returned -16 [ 748.782777][T22460] binder: BINDER_SET_CONTEXT_MGR already set [ 748.785444][T22460] binder: 22459:22460 ioctl 4018620d 800002c0 returned -16 [ 748.879714][T22466] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(12) [ 748.881982][T22466] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 748.885216][T22466] vhci_hcd vhci_hcd.0: Device attached [ 748.894675][T22468] vhci_hcd: connection closed [ 748.894872][T18811] vhci_hcd: stop threads [ 748.898124][T18811] vhci_hcd: release socket [ 748.900013][T18811] vhci_hcd: disconnect device [ 748.954364][T22472] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4118'. [ 748.957321][T22472] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4118'. [ 749.498283][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 749.777481][T22491] binder: BINDER_SET_CONTEXT_MGR already set [ 749.780383][T22491] binder: 22490:22491 ioctl 4018620d 80000100 returned -16 [ 749.786958][T22491] binder: BINDER_SET_CONTEXT_MGR already set [ 749.789484][T22491] binder: 22490:22491 ioctl 4018620d 80004a80 returned -16 [ 749.996051][T22501] binder: BINDER_SET_CONTEXT_MGR already set [ 749.999666][T22501] binder: 22499:22501 ioctl 4018620d 80000100 returned -16 [ 750.006777][T22501] binder: BINDER_SET_CONTEXT_MGR already set [ 750.009545][T22501] binder: 22499:22501 ioctl 4018620d 800002c0 returned -16 [ 750.082538][T22504] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(12) [ 750.085121][T22504] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 750.091070][T22504] vhci_hcd vhci_hcd.0: Device attached [ 750.209375][T22511] netlink: 224 bytes leftover after parsing attributes in process `syz.7.4128'. [ 750.388922][ T7260] usb 44-1: SetAddress Request (48) to port 0 [ 750.391361][ T7260] usb 44-1: new SuperSpeed USB device number 48 using vhci_hcd [ 750.548429][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 750.603267][T22507] vhci_hcd: connection reset by peer [ 750.606644][ T1150] vhci_hcd: stop threads [ 750.608666][ T1150] vhci_hcd: release socket [ 750.610761][ T1150] vhci_hcd: disconnect device [ 751.245620][T22523] binder: BINDER_SET_CONTEXT_MGR already set [ 751.248134][T22523] binder: 22522:22523 ioctl 4018620d 80000240 returned -16 [ 751.251410][T22518] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(12) [ 751.252639][T22523] binder: BINDER_SET_CONTEXT_MGR already set [ 751.254326][T22518] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 751.256804][T22523] binder: 22522:22523 ioctl 4018620d 80004a80 returned -16 [ 751.260167][T22518] vhci_hcd vhci_hcd.0: Device attached [ 751.290054][T22524] vhci_hcd: connection closed [ 751.290393][T13530] vhci_hcd: stop threads [ 751.294663][T13530] vhci_hcd: release socket [ 751.296669][T13530] vhci_hcd: disconnect device [ 751.578280][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 751.985102][T22539] syzkaller0: entered promiscuous mode [ 751.987644][T22539] syzkaller0: entered allmulticast mode [ 752.012396][T22539] tipc: Enabled bearer , priority 0 [ 752.036006][T22538] tipc: Resetting bearer [ 752.051009][T22538] tipc: Disabling bearer [ 752.084989][ T40] audit: type=1326 audit(1763469989.022:7109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22540 comm="syz.6.4139" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd579 code=0x7ffc0000 [ 752.095687][ T40] audit: type=1326 audit(1763469989.022:7110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22540 comm="syz.6.4139" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd579 code=0x7ffc0000 [ 752.106157][ T40] audit: type=1326 audit(1763469989.022:7111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22540 comm="syz.6.4139" exe="/syz-executor" sig=0 arch=40000003 syscall=65 compat=1 ip=0xf70dd579 code=0x7ffc0000 [ 752.115627][ T40] audit: type=1326 audit(1763469989.022:7112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22540 comm="syz.6.4139" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd579 code=0x7ffc0000 [ 752.125416][ T40] audit: type=1326 audit(1763469989.022:7113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22540 comm="syz.6.4139" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd579 code=0x7ffc0000 [ 752.135354][ T40] audit: type=1326 audit(1763469989.022:7114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22540 comm="syz.6.4139" exe="/syz-executor" sig=0 arch=40000003 syscall=26 compat=1 ip=0xf70dd579 code=0x7ffc0000 [ 752.145105][ T40] audit: type=1326 audit(1763469989.022:7115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22540 comm="syz.6.4139" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd579 code=0x7ffc0000 [ 752.152796][ T40] audit: type=1326 audit(1763469989.032:7116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22540 comm="syz.6.4139" exe="/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf70dd579 code=0x7ffc0000 [ 752.164615][ T40] audit: type=1326 audit(1763469989.032:7117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22540 comm="syz.6.4139" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd579 code=0x7ffc0000 [ 752.171845][ T40] audit: type=1326 audit(1763469989.032:7118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22540 comm="syz.6.4139" exe="/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf70dd579 code=0x7ffc0000 [ 752.172006][T22543] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4140'. [ 752.447326][T22558] comedi comedi0: Minor 47 could not be opened [ 752.454299][T22558] netlink: 'syz.9.4141': attribute type 1 has an invalid length. [ 752.628327][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 753.658317][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 753.727077][T22575] siw: device registration error -23 [ 754.698311][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 754.758059][T22558] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 754.897103][T22584] syzkaller0: entered promiscuous mode [ 754.908368][T22584] syzkaller0: entered allmulticast mode [ 754.933832][T22590] loop2: detected capacity change from 0 to 7 [ 754.957798][T22590] Dev loop2: unable to read RDB block 7 [ 754.962597][T22590] loop2: unable to read partition table [ 754.965763][T22590] loop2: partition table beyond EOD, truncated [ 754.970156][T22584] tipc: Enabled bearer , priority 0 [ 754.972275][T22590] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 754.977249][T22583] tipc: Resetting bearer [ 754.987048][T22592] Cannot find del_set index 2 as target [ 754.992911][T22583] tipc: Disabling bearer [ 755.436160][ T7260] usb 44-1: device descriptor read/8, error -110 [ 755.738280][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 755.824126][T22598] sp0: Synchronizing with TNC [ 755.832290][T22598] sp0: Found TNC [ 755.852981][T22596] [U] è` [ 755.892806][ T7260] usb usb44-port1: attempt power cycle [ 756.040251][T22609] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4158'. [ 756.074823][T22610] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(8) [ 756.076909][T22610] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 756.143385][T22610] vhci_hcd vhci_hcd.0: Device attached [ 756.157114][T22618] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4159'. [ 756.168564][T22618] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4159'. [ 756.509266][ T7260] usb usb44-port1: unable to enumerate USB device [ 756.568311][T14546] usb 55-1: new low-speed USB device number 3 using vhci_hcd [ 756.627374][T22639] siw: device registration error -23 [ 756.714589][T22638] 9pnet_fd: Insufficient options for proto=fd [ 756.788256][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 756.909094][T22611] vhci_hcd: connection reset by peer [ 756.911297][ T1147] vhci_hcd: stop threads [ 756.912901][ T1147] vhci_hcd: release socket [ 756.914666][ T1147] vhci_hcd: disconnect device [ 757.229370][T22641] binder: BINDER_SET_CONTEXT_MGR already set [ 757.231366][T22641] binder: 22640:22641 ioctl 4018620d 80000100 returned -16 [ 757.235215][T22641] binder: BINDER_SET_CONTEXT_MGR already set [ 757.237281][T22641] binder: 22640:22641 ioctl 4018620d 800002c0 returned -16 [ 757.610657][T22653] netlink: 224 bytes leftover after parsing attributes in process `syz.9.4169'. [ 757.743373][T22659] netlink: 'syz.9.4172': attribute type 1 has an invalid length. [ 757.763287][T22659] 8021q: adding VLAN 0 to HW filter on device bond6 [ 757.828283][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 758.009998][T22665] sp0: Synchronizing with TNC [ 758.018925][T22665] sp0: Found TNC [ 758.040989][T22664] [U] è` [ 758.397935][T22679] syzkaller0: entered promiscuous mode [ 758.400282][T22679] syzkaller0: entered allmulticast mode [ 758.429546][T22679] tipc: Enabled bearer , priority 0 [ 758.477044][T22678] tipc: Resetting bearer [ 758.524357][T22678] tipc: Disabling bearer [ 758.858301][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 758.987672][T22690] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(8) [ 758.990551][T22690] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 759.028517][T22690] vhci_hcd vhci_hcd.0: Device attached [ 759.069600][T22696] binder: BINDER_SET_CONTEXT_MGR already set [ 759.072473][T22696] binder: 22695:22696 ioctl 4018620d 80000100 returned -16 [ 759.190047][T22701] tipc: Enabling of bearer rejected, already enabled [ 759.268368][ T7260] usb 49-1: new low-speed USB device number 2 using vhci_hcd [ 759.308282][T22705] netlink: 'syz.7.4187': attribute type 1 has an invalid length. [ 759.311905][T22705] netlink: 224 bytes leftover after parsing attributes in process `syz.7.4187'. [ 759.780113][T22714] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4181'. [ 759.898342][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 760.158274][T22691] vhci_hcd: connection reset by peer [ 760.161674][ T1147] vhci_hcd: stop threads [ 760.165949][ T1147] vhci_hcd: release socket [ 760.169424][ T1147] vhci_hcd: disconnect device [ 760.565159][T22726] binder: BINDER_SET_CONTEXT_MGR already set [ 760.567832][T22726] binder: 22725:22726 ioctl 4018620d 80000100 returned -16 [ 760.761551][T22738] overlay: filesystem on ./bus not supported as upperdir [ 760.929452][T22745] 9pnet_fd: Insufficient options for proto=fd [ 760.948289][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 760.963874][T22746] loop7: detected capacity change from 0 to 16384 [ 761.128395][T22747] loop7: detected capacity change from 16384 to 0 [ 761.128835][ C0] I/O error, dev loop7, sector 16 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 761.135648][ C0] I/O error, dev loop7, sector 4224 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 2 [ 761.151708][T22751] binder: BINDER_SET_CONTEXT_MGR already set [ 761.154610][T22751] binder: 22749:22751 ioctl 4018620d 80000100 returned -16 [ 761.162434][T22751] binder: BINDER_SET_CONTEXT_MGR already set [ 761.165280][T22751] binder: 22749:22751 ioctl 4018620d 800002c0 returned -16 [ 761.393341][T22762] input: syz0 as /devices/virtual/input/input42 [ 761.728360][T14546] vhci_hcd: vhci_device speed not set [ 761.834404][T22775] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(12) [ 761.837125][T22775] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 761.895055][T22775] vhci_hcd vhci_hcd.0: Device attached [ 761.953984][T22778] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(12) [ 761.956782][T22778] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 761.978311][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 761.985918][T22778] vhci_hcd vhci_hcd.0: Device attached [ 762.208331][ T53] usb 52-1: SetAddress Request (11) to port 0 [ 762.210380][ T53] usb 52-1: new SuperSpeed USB device number 11 using vhci_hcd [ 762.363626][T22776] vhci_hcd: connection reset by peer [ 762.369079][T18798] vhci_hcd: stop threads [ 762.370541][T18798] vhci_hcd: release socket [ 762.372057][T18798] vhci_hcd: disconnect device [ 762.387384][T22788] Cannot find del_set index 2 as target [ 762.500978][T22790] binder: BINDER_SET_CONTEXT_MGR already set [ 762.503687][T22790] binder: 22789:22790 ioctl 4018620d 80000100 returned -16 [ 762.509164][T22790] binder: BINDER_SET_CONTEXT_MGR already set [ 762.511830][T22790] binder: 22789:22790 ioctl 4018620d 800002c0 returned -16 [ 762.568412][ T7559] usb 56-1: SetAddress Request (10) to port 0 [ 762.570617][ T7559] usb 56-1: new SuperSpeed USB device number 10 using vhci_hcd [ 762.589246][T22780] vhci_hcd: connection reset by peer [ 762.592121][T18804] vhci_hcd: stop threads [ 762.594094][T18804] vhci_hcd: release socket [ 762.596159][T18804] vhci_hcd: disconnect device [ 762.805842][ T40] kauditd_printk_skb: 2 callbacks suppressed [ 762.805858][ T40] audit: type=1400 audit(1763469999.742:7121): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-22 profile="unconfined" name="&" pid=22796 comm="syz.3.4216" [ 763.018285][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 763.120241][T22800] 9pnet_fd: Insufficient options for proto=fd [ 763.184598][T22803] binder: BINDER_SET_CONTEXT_MGR already set [ 763.187158][T22803] binder: 22802:22803 ioctl 4018620d 80000100 returned -16 [ 763.219652][T22803] binder: BINDER_SET_CONTEXT_MGR already set [ 763.222653][T22803] binder: 22802:22803 ioctl 4018620d 800002c0 returned -16 [ 763.769891][T22810] netlink: 40 bytes leftover after parsing attributes in process `syz.6.4220'. [ 764.058350][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 764.418373][ T7260] vhci_hcd: vhci_device speed not set [ 764.528663][T22835] binder: BINDER_SET_CONTEXT_MGR already set [ 764.530870][T22835] binder: 22834:22835 ioctl 4018620d 80000240 returned -16 [ 764.538399][T22835] binder: BINDER_SET_CONTEXT_MGR already set [ 764.540724][T22835] binder: 22834:22835 ioctl 4018620d 80004a80 returned -16 [ 764.571751][T22836] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(12) [ 764.574438][T22836] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 764.578656][T22836] vhci_hcd vhci_hcd.0: Device attached [ 764.812800][T22847] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4232'. [ 764.820765][T22847] ip6erspan0: entered allmulticast mode [ 765.098349][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 765.116724][T22858] netlink: 'syz.3.4234': attribute type 21 has an invalid length. [ 765.456572][T22859] netlink: 224 bytes leftover after parsing attributes in process `syz.6.4233'. [ 765.967482][T22837] vhci_hcd: connection closed [ 765.967717][ T46] vhci_hcd: stop threads [ 765.971272][ T46] vhci_hcd: release socket [ 765.973049][ T46] vhci_hcd: disconnect device [ 766.138293][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 767.178310][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 767.428436][ T53] usb 52-1: device descriptor read/8, error -110 [ 767.533809][T22883] tipc: Enabling of bearer rejected, already enabled [ 767.615462][T22874] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(12) [ 767.618504][T22874] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 767.622444][T22874] vhci_hcd vhci_hcd.0: Device attached [ 767.642386][T22888] vhci_hcd: connection closed [ 767.642605][T18796] vhci_hcd: stop threads [ 767.645810][T18796] vhci_hcd: release socket [ 767.647345][T18796] vhci_hcd: disconnect device [ 767.658360][ T7559] usb 56-1: device descriptor read/8, error -110 [ 767.830896][ T53] usb usb52-port1: attempt power cycle [ 768.015191][T22905] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 768.018378][T22905] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 768.023284][T22905] vhci_hcd vhci_hcd.0: Device attached [ 768.117773][T22902] netlink: 'syz.9.4250': attribute type 4 has an invalid length. [ 768.130287][T22902] netlink: 25 bytes leftover after parsing attributes in process `syz.9.4250'. [ 768.194468][ T7559] usb usb56-port1: attempt power cycle [ 768.218310][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 768.434920][ T7260] usb 44-1: SetAddress Request (52) to port 0 [ 768.437695][ T7260] usb 44-1: new SuperSpeed USB device number 52 using vhci_hcd [ 768.479296][ T53] usb usb52-port1: unable to enumerate USB device [ 768.528417][T22914] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(12) [ 768.531241][T22914] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 768.595384][T22914] vhci_hcd vhci_hcd.0: Device attached [ 768.753930][T22906] vhci_hcd: connection reset by peer [ 768.756086][T18796] vhci_hcd: stop threads [ 768.757578][T18796] vhci_hcd: release socket [ 768.759453][T18796] vhci_hcd: disconnect device [ 768.959996][ T53] usb 52-1: SetAddress Request (15) to port 0 [ 768.965929][ T53] usb 52-1: new SuperSpeed USB device number 15 using vhci_hcd [ 769.028453][ T7559] usb usb56-port1: unable to enumerate USB device [ 769.228513][T22915] vhci_hcd: connection reset by peer [ 769.230385][T22940] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(12) [ 769.230535][T18796] vhci_hcd: stop threads [ 769.233309][T22940] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 769.234707][T18796] vhci_hcd: release socket [ 769.238826][T22940] vhci_hcd vhci_hcd.0: Device attached [ 769.239957][T18796] vhci_hcd: disconnect device [ 769.258423][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 769.308475][T22941] vhci_hcd: connection closed [ 769.309159][T18796] vhci_hcd: stop threads [ 769.312483][T18796] vhci_hcd: release socket [ 769.314386][T18796] vhci_hcd: disconnect device [ 769.887505][T22947] binder: BINDER_SET_CONTEXT_MGR already set [ 769.890639][T22947] binder: 22946:22947 ioctl 4018620d 80000100 returned -16 [ 769.896120][T22947] binder: BINDER_SET_CONTEXT_MGR already set [ 769.898131][T22947] binder: 22946:22947 ioctl 4018620d 800002c0 returned -16 [ 770.298303][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 770.604266][ T40] audit: type=1400 audit(1763470007.542:7122): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-22 profile="unconfined" name="&" pid=22968 comm="syz.7.4269" [ 770.708392][T22971] comedi comedi0: Minor 47 could not be opened [ 770.711589][T22971] netlink: 'syz.3.4265': attribute type 1 has an invalid length. [ 770.759579][T22971] bond2: entered promiscuous mode [ 770.761996][T22971] 8021q: adding VLAN 0 to HW filter on device bond2 [ 770.944288][T22971] 8021q: adding VLAN 0 to HW filter on device bond2 [ 770.947386][T22971] bond2: (slave gre1): The slave device specified does not support setting the MAC address [ 770.950841][T22971] bond2: (slave gre1): Setting fail_over_mac to active for active-backup mode [ 770.958864][T22971] bond2: (slave gre1): making interface the new active one [ 770.961398][T22971] gre1: entered promiscuous mode [ 770.964753][T22971] bond2: (slave gre1): Enslaving as an active interface with an up link [ 771.305092][T22978] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(12) [ 771.307487][T22978] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 771.314319][T22978] vhci_hcd vhci_hcd.0: Device attached [ 771.338286][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 771.589411][T22979] vhci_hcd: connection closed [ 771.593275][T18798] vhci_hcd: stop threads [ 771.596888][T18798] vhci_hcd: release socket [ 771.598977][T18798] vhci_hcd: disconnect device [ 771.608863][T14546] usb 50-1: enqueue for inactive port 0 [ 771.786354][T22989] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(12) [ 771.789322][T22989] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 771.794708][T22989] vhci_hcd vhci_hcd.0: Device attached [ 771.873086][T22990] vhci_hcd: connection closed [ 771.874188][T13530] vhci_hcd: stop threads [ 771.877224][T13530] vhci_hcd: release socket [ 771.878889][T13530] vhci_hcd: disconnect device [ 772.378319][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 772.398901][T14546] usb usb50-port1: attempt power cycle [ 772.471817][T22997] netlink: 'syz.6.4274': attribute type 1 has an invalid length. [ 772.477779][T22988] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(12) [ 772.480013][T22988] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 772.483027][T22988] vhci_hcd vhci_hcd.0: Device attached [ 772.487015][T22998] vhci_hcd: connection closed [ 772.490327][ T1147] vhci_hcd: stop threads [ 772.493343][ T1147] vhci_hcd: release socket [ 772.500914][T22997] 8021q: adding VLAN 0 to HW filter on device bond5 [ 772.501018][ T1147] vhci_hcd: disconnect device [ 772.686861][T23009] syzkaller0: entered promiscuous mode [ 772.688872][T23009] syzkaller0: entered allmulticast mode [ 772.703949][T23009] tipc: Enabled bearer , priority 0 [ 772.707536][T23008] tipc: Resetting bearer [ 772.719750][T23008] tipc: Disabling bearer [ 772.828346][T14796] usb 11-1: new high-speed USB device number 7 using dummy_hcd [ 772.983912][T14546] usb usb50-port1: unable to enumerate USB device [ 773.055558][T14796] usb 11-1: config index 0 descriptor too short (expected 39, got 27) [ 773.058660][T14796] usb 11-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 773.062401][T14796] usb 11-1: config 0 interface 0 has no altsetting 0 [ 773.087877][T14796] usb 11-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 773.093757][T14796] usb 11-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 773.096572][T14796] usb 11-1: Product: syz [ 773.116087][T23014] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4281'. [ 773.122825][T23014] netlink: 64 bytes leftover after parsing attributes in process `syz.9.4281'. [ 773.125493][T14796] usb 11-1: Manufacturer: syz [ 773.128480][T14796] usb 11-1: SerialNumber: syz [ 773.148820][T14796] usb 11-1: config 0 descriptor?? [ 773.176629][T14796] hub 11-1:0.0: bad descriptor, ignoring hub [ 773.334284][T14796] hub 11-1:0.0: probe with driver hub failed with error -5 [ 773.376566][T23006] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4278'. [ 773.418331][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 773.589171][ T7260] usb 44-1: device descriptor read/8, error -110 [ 774.018449][T23022] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(12) [ 774.021810][T23022] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 774.024218][T23026] binder: BINDER_SET_CONTEXT_MGR already set [ 774.027768][T23022] vhci_hcd vhci_hcd.0: Device attached [ 774.028114][T23026] binder: 23023:23026 ioctl 4018620d 80000140 returned -16 [ 774.033893][T14796] usb 11-1: selecting invalid altsetting 0 [ 774.054965][T23026] binder: BINDER_SET_CONTEXT_MGR already set [ 774.057651][T23026] binder: 23023:23026 ioctl 4018620d 80000040 returned -16 [ 774.078675][T14796] usb 11-1: USB disconnect, device number 7 [ 774.138526][ T53] usb 52-1: device descriptor read/8, error -110 [ 774.190377][T23024] vhci_hcd: connection closed [ 774.191067][T18798] vhci_hcd: stop threads [ 774.195046][T18798] vhci_hcd: release socket [ 774.197127][T18798] vhci_hcd: disconnect device [ 774.204373][T23029] loop7: detected capacity change from 0 to 16384 [ 774.338777][T23038] loop7: detected capacity change from 16384 to 0 [ 774.338947][ C3] I/O error, dev loop7, sector 10240 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 2 [ 774.364479][ T7260] usb usb44-port1: attempt power cycle [ 774.458364][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 774.688381][ T53] usb usb52-port1: attempt power cycle [ 775.445640][T23063] input: syz0 as /devices/virtual/input/input43 [ 775.498281][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 775.560872][ T7260] usb usb44-port1: unable to enumerate USB device [ 775.709221][ T53] usb usb52-port1: unable to enumerate USB device [ 775.726055][T23073] binder: BINDER_SET_CONTEXT_MGR already set [ 775.729146][T23073] binder: 23072:23073 ioctl 4018620d 80000080 returned -16 [ 775.735156][T23073] binder_alloc: 22284: binder_alloc_buf, no vma [ 775.885242][T23071] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(12) [ 775.887469][T23071] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 775.891133][T23071] vhci_hcd vhci_hcd.0: Device attached [ 776.019112][T23081] loop2: detected capacity change from 0 to 7 [ 776.023744][T20713] Dev loop2: unable to read RDB block 7 [ 776.026559][T20713] loop2: unable to read partition table [ 776.030774][T20713] loop2: partition table beyond EOD, truncated [ 776.036364][T23081] Dev loop2: unable to read RDB block 7 [ 776.038860][T23081] loop2: unable to read partition table [ 776.041419][T23081] loop2: partition table beyond EOD, truncated [ 776.049939][T23081] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 776.056695][ T5355] Dev loop2: unable to read RDB block 7 [ 776.060187][ T5355] loop2: unable to read partition table [ 776.063950][ T5355] loop2: partition table beyond EOD, truncated [ 776.139974][T23083] Cannot find del_set index 2 as target [ 776.178729][T23085] loop2: detected capacity change from 0 to 7 [ 776.181427][T23085] Dev loop2: unable to read RDB block 7 [ 776.183409][T23085] loop2: unable to read partition table [ 776.185233][T23085] loop2: partition table beyond EOD, truncated [ 776.189984][T23085] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 776.197080][ T53] usb 50-1: SetAddress Request (18) to port 0 [ 776.201670][ T53] usb 50-1: new SuperSpeed USB device number 18 using vhci_hcd [ 776.269157][T23086] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4301'. [ 776.548276][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 776.580836][T23078] vhci_hcd: connection reset by peer [ 776.586428][ T1147] vhci_hcd: stop threads [ 776.587907][ T1147] vhci_hcd: release socket [ 776.599797][ T1147] vhci_hcd: disconnect device [ 776.852178][T23097] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(12) [ 776.854386][T23097] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 776.858871][T23097] vhci_hcd vhci_hcd.0: Device attached [ 777.138491][ T7260] usb 56-1: SetAddress Request (15) to port 0 [ 777.143616][ T7260] usb 56-1: new SuperSpeed USB device number 15 using vhci_hcd [ 777.245030][T23098] vhci_hcd: connection reset by peer [ 777.247714][T18796] vhci_hcd: stop threads [ 777.249802][T18796] vhci_hcd: release socket [ 777.251901][T18796] vhci_hcd: disconnect device [ 777.414349][T23107] syzkaller0: entered promiscuous mode [ 777.417678][T23107] syzkaller0: entered allmulticast mode [ 777.437040][T23107] tipc: Enabled bearer , priority 0 [ 777.441875][T23106] tipc: Resetting bearer [ 777.457467][T23106] tipc: Disabling bearer [ 777.468829][T23110] netlink: 52 bytes leftover after parsing attributes in process `syz.3.4309'. [ 777.578686][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 777.828336][ T7559] usb 11-1: new full-speed USB device number 8 using dummy_hcd [ 777.989921][ T7559] usb 11-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 0, changing to 4 [ 777.994616][ T7559] usb 11-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023 [ 778.000118][ T7559] usb 11-1: config 0 interface 0 has no altsetting 0 [ 778.005110][ T7559] usb 11-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 778.009654][ T7559] usb 11-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 778.013212][ T7559] usb 11-1: Product: syz [ 778.015098][ T7559] usb 11-1: Manufacturer: syz [ 778.017181][ T7559] usb 11-1: SerialNumber: syz [ 778.022022][ T7559] usb 11-1: config 0 descriptor?? [ 778.028937][ T7559] usb 11-1: selecting invalid altsetting 0 [ 778.230425][T23116] usb 11-1: cannot submit urb 0, error -2: endpoint not enabled [ 778.236967][T14796] usb 11-1: USB disconnect, device number 8 [ 778.562167][ T40] audit: type=1400 audit(1763470015.502:7123): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-22 profile="unconfined" name="&" pid=23134 comm="syz.7.4318" [ 778.628371][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 779.171874][T23142] binder: BINDER_SET_CONTEXT_MGR already set [ 779.174455][T23142] binder: 23141:23142 ioctl 4018620d 80000100 returned -16 [ 779.179278][T23142] binder: BINDER_SET_CONTEXT_MGR already set [ 779.182026][T23142] binder: 23141:23142 ioctl 4018620d 800002c0 returned -16 [ 779.232163][T23146] binder: BINDER_SET_CONTEXT_MGR already set [ 779.234745][T23146] binder: 23145:23146 ioctl 4018620d 80000100 returned -16 [ 779.240479][T23146] binder: BINDER_SET_CONTEXT_MGR already set [ 779.243321][T23146] binder: 23145:23146 ioctl 4018620d 80004a80 returned -16 [ 779.624542][T23163] syzkaller0: entered promiscuous mode [ 779.626514][T23163] syzkaller0: entered allmulticast mode [ 779.658586][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 779.961458][T23165] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4329'. [ 779.978158][T23165] vlan2: left promiscuous mode [ 779.980461][T23165] mac80211_hwsim hwsim49 wlan0: left promiscuous mode [ 779.983657][T23165] vlan2: left allmulticast mode [ 779.985888][T23165] mac80211_hwsim hwsim49 wlan0: left allmulticast mode [ 779.996212][T23165] vlan3: left promiscuous mode [ 779.999116][T23165] bridge0: left promiscuous mode [ 780.001597][T23165] vlan3: left allmulticast mode [ 780.004500][T23165] bridge0: left allmulticast mode [ 780.015590][T23165] vlan5: left promiscuous mode [ 780.018598][T23165] bridge1: left promiscuous mode [ 780.021253][T23165] vlan5: left allmulticast mode [ 780.023550][T23165] bridge1: left allmulticast mode [ 780.040961][T23165] ip6erspan0: left allmulticast mode [ 780.054733][T23165] bond2: left promiscuous mode [ 780.059359][T23165] gre1: left promiscuous mode [ 780.387704][T23186] binder: BINDER_SET_CONTEXT_MGR already set [ 780.389836][T23186] binder: 23185:23186 ioctl 4018620d 800002c0 returned -16 [ 780.395329][T23182] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4335'. [ 780.698470][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 780.813777][T23201] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(12) [ 780.816569][T23201] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 780.825486][T23201] vhci_hcd vhci_hcd.0: Device attached [ 781.128533][ T7559] usb 44-1: SetAddress Request (56) to port 0 [ 781.131100][ T7559] usb 44-1: new SuperSpeed USB device number 56 using vhci_hcd [ 781.158598][T23212] netlink: 'syz.6.4344': attribute type 1 has an invalid length. [ 781.171199][T23212] 8021q: adding VLAN 0 to HW filter on device bond6 [ 781.255989][T23217] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4346'. [ 781.268350][ T53] usb 50-1: device descriptor read/8, error -110 [ 781.377888][T23202] vhci_hcd: connection reset by peer [ 781.385008][ T46] vhci_hcd: stop threads [ 781.386870][ T46] vhci_hcd: release socket [ 781.388766][ T46] vhci_hcd: disconnect device [ 781.738298][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 782.048024][ T53] usb usb50-port1: attempt power cycle [ 782.218414][ T7260] usb 56-1: device descriptor read/8, error -110 [ 782.246923][T23236] loop7: detected capacity change from 0 to 16384 [ 782.498511][T23237] loop7: detected capacity change from 16384 to 0 [ 782.502019][ C0] I/O error, dev loop7, sector 14336 op 0x0:(READ) flags 0x80700 phys_seg 2 prio class 2 [ 782.610580][T23247] binder: BINDER_SET_CONTEXT_MGR already set [ 782.613611][T23247] binder: 23246:23247 ioctl 4018620d 800002c0 returned -16 [ 782.778362][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 782.802590][ T7260] usb usb56-port1: attempt power cycle [ 782.949788][T23263] input: syz0 as /devices/virtual/input/input45 [ 782.989442][ T53] usb usb50-port1: unable to enumerate USB device [ 782.992607][T23267] Cannot find del_set index 2 as target [ 783.391506][ T7260] usb usb56-port1: unable to enumerate USB device [ 783.636928][T23276] binder: BINDER_SET_CONTEXT_MGR already set [ 783.641322][T23276] binder: 23275:23276 ioctl 4018620d 800000c0 returned -16 [ 783.645604][T23276] binder: 23275:23276 unknown command 0 [ 783.648085][T23276] binder: 23275:23276 ioctl c0306201 80000080 returned -22 [ 783.652268][T23276] binder: BINDER_SET_CONTEXT_MGR already set [ 783.654435][T23276] binder: 23275:23276 ioctl 4018620d 80000040 returned -16 [ 783.658163][T23276] syzkaller0: entered promiscuous mode [ 783.660702][T23276] syzkaller0: entered allmulticast mode [ 783.667831][T23276] tmpfs: Bad value for 'mpol' [ 783.671071][T23276] __vm_enough_memory: pid: 23276, comm: syz.7.4366, bytes: 4294963200 not enough memory for the allocation [ 783.818323][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 784.037307][T23288] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4370'. [ 784.043065][T23288] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4370'. [ 784.359515][T23294] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(12) [ 784.361980][T23294] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 784.365237][T23294] vhci_hcd vhci_hcd.0: Device attached [ 784.373963][T23295] vhci_hcd: connection closed [ 784.374266][ T1150] vhci_hcd: stop threads [ 784.389177][ T1150] vhci_hcd: release socket [ 784.391261][ T1150] vhci_hcd: disconnect device [ 784.412283][T23299] netlink: 156 bytes leftover after parsing attributes in process `syz.7.4373'. [ 784.511637][T23304] binder: BINDER_SET_CONTEXT_MGR already set [ 784.514119][T23304] binder: 23303:23304 ioctl 4018620d 800002c0 returned -16 [ 784.740178][T23317] netlink: 40 bytes leftover after parsing attributes in process `syz.9.4378'. [ 784.868416][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 785.101249][ T40] audit: type=1400 audit(1763470022.042:7124): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-22 profile="unconfined" name="&" pid=23329 comm="syz.9.4383" [ 981.991356][T18804] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 981.994445][T18804] CPU: 0 UID: 0 PID: 18804 Comm: kworker/u32:23 Not tainted syzkaller #0 PREEMPT(full) [ 982.000808][T18804] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 982.005357][T18804] Workqueue: netns cleanup_net [ 982.007403][T18804] Call Trace: [ 982.008823][T18804] [ 982.010116][T18804] dump_stack_lvl+0x3d/0x1f0 [ 982.012082][T18804] vpanic+0x640/0x6f0 [ 982.013817][T18804] ? xfrm6_tunnel_net_exit+0x9f/0x160 [ 982.016155][T18804] panic+0xca/0xd0 [ 982.017774][T18804] ? __pfx_panic+0x10/0x10 [ 982.019842][T18804] ? check_panic_on_warn+0x1f/0xb0 [ 982.022217][T18804] check_panic_on_warn+0xab/0xb0 [ 982.024376][T18804] __warn+0xf6/0x3c0 [ 982.026113][T18804] ? xfrm6_tunnel_net_exit+0x9f/0x160 [ 982.028495][T18804] report_bug+0x3c3/0x580 [ 982.030428][T18804] ? xfrm6_tunnel_net_exit+0x9f/0x160 [ 982.032709][T18804] handle_bug+0x184/0x210 [ 982.034591][T18804] exc_invalid_op+0x17/0x50 [ 982.036600][T18804] asm_exc_invalid_op+0x1a/0x20 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 982.038718][T18804] RIP: 0010:xfrm6_tunnel_net_exit+0x9f/0x160 [ 982.041375][T18804] Code: 00 00 00 49 8d 3c dc 48 89 f8 48 c1 e8 03 42 80 3c 28 00 0f 85 bd 00 00 00 89 e8 49 8b 04 c4 48 85 c0 74 ab e8 12 4d 9e f7 90 <0f> 0b 90 eb a0 4d 8d ac 24 00 08 00 00 31 db 49 be 00 00 00 00 00 [ 982.049702][T18804] RSP: 0018:ffffc90002d6fa90 EFLAGS: 00010293 [ 982.052424][T18804] RAX: 0000000000000000 RBX: 000000000000007e RCX: ffffffff8a1e0a2a [ 982.055804][T18804] RDX: ffff888024ffc900 RSI: ffffffff8a1e0a6e RDI: ffff8880625383f0 [ 982.059233][T18804] RBP: 000000000000007e R08: 0000000000000005 R09: 0000000000000100 [ 982.062642][T18804] R10: 000000000000007e R11: 0000000000000001 R12: ffff888062538000 [ 982.066047][T18804] R13: dffffc0000000000 R14: fffffbfff205e6a8 R15: ffffffff902f3520 [ 982.069605][T18804] ? xfrm6_tunnel_net_exit+0x5a/0x160 [ 982.071794][T18804] ? xfrm6_tunnel_net_exit+0x9e/0x160 [ 982.074149][T18804] ? __pfx_xfrm6_tunnel_net_exit+0x10/0x10 [ 982.076713][T18804] ops_undo_list+0x2ee/0xab0 [ 982.078782][T18804] ? __pfx_ops_undo_list+0x10/0x10 [ 982.080930][T18804] ? cleanup_net+0x347/0x8b0 [ 982.082917][T18804] ? idr_destroy+0x62/0x2e0 [ 982.084865][T18804] cleanup_net+0x41b/0x8b0 [ 982.086812][T18804] ? __pfx_cleanup_net+0x10/0x10 [ 982.088948][T18804] ? rcu_is_watching+0x12/0xc0 [ 982.090991][T18804] process_one_work+0x9cf/0x1b70 [ 982.093072][T18804] ? __pfx_cleanup_net+0x10/0x10 [ 982.095208][T18804] ? __pfx_process_one_work+0x10/0x10 [ 982.097516][T18804] ? assign_work+0x1a0/0x250 [ 982.099571][T18804] worker_thread+0x6c8/0xf10 [ 982.101595][T18804] ? __pfx_worker_thread+0x10/0x10 [ 982.103895][T18804] kthread+0x3c5/0x780 [ 982.105721][T18804] ? __pfx_kthread+0x10/0x10 [ 982.107807][T18804] ? rcu_is_watching+0x12/0xc0 [ 982.109918][T18804] ? __pfx_kthread+0x10/0x10 [ 982.111985][T18804] ret_from_fork+0x675/0x7d0 [ 982.114053][T18804] ? __pfx_kthread+0x10/0x10 [ 982.116059][T18804] ret_from_fork_asm+0x1a/0x30 [ 982.118190][T18804] [ 982.120222][T18804] Kernel Offset: disabled [ 982.122192][T18804] Rebooting in 86400 seconds.. VM DIAGNOSIS: 12:46:03 Registers: info registers vcpu 0 CPU#0 RAX=000000000000006f RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85269d55 RDI=ffffffff9adc5de0 RBP=ffffffff9adc5da0 RSP=ffffc90002d6f2d8 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000001 R12=0000000000000000 R13=000000000000006f R14=ffffffff9adc5da0 R15=ffffffff85269cf0 RIP=ffffffff85269d7f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88809780d000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f6f83e5de9c CR3=00000000543c9000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000e000000000 0000000200000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=00000000027b6b17 RBX=0000000000000001 RCX=ffffffff8b5d92a9 RDX=0000000000000000 RSI=ffffffff8da2917b RDI=ffffffff8bf078c0 RBP=ffffed1003b5a490 RSP=ffffc9000046fde8 R8 =0000000000000001 R9 =ffffed1005666655 R10=ffff88802b3332ab R11=0000000000000001 R12=0000000000000001 R13=ffff88801dad2480 R14=ffffffff90824ad0 R15=0000000000000000 RIP=ffffffff8b5d7d5f RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88809790d000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000ffcdae80 CR3=0000000073651000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=ffffffff84526330 RBX=ffff888025070000 RCX=ffffffff845370b2 RDX=ffff888025070000 RSI=0000000000000002 RDI=ffff8880768fb5c0 RBP=ffffffff8dcd1380 RSP=ffffc90002fdf798 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001 R12=dffffc0000000000 R13=ffff8880768fb5c0 R14=0000000000000002 R15=ffff8880768fb5c0 RIP=ffffffff84526346 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888097a0d000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f09ad5cf43c CR3=0000000076bc0000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00ff00ffffffff00 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00010001010100ff ffffffffffffffff ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5f4342494c470033 2e325f4342494c47 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000000002e 322e325f4342494c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4c4700362e322e32 5f4342494c470035 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f09ad5ce6b0 00007f09ad5ce0c0 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f09ad8ccab0 00007f09ad8cc580 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f09ad8cbb20 00007f09ad8cc050 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=ffffc90000415110 RBX=0000000000000000 RCX=1ffff11004ed3407 RDX=0000000000000008 RSI=ffffc90000415100 RDI=ffff88802769a038 RBP=ffff88802769a400 RSP=ffffc900005e8e48 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001 R12=dffffc0000000000 R13=0000000000000001 R14=ffffed1004ed348a R15=ffff8880276d8000 RIP=ffffffff86300aff RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888097b0d000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f72ea95c CR3=0000000063b89000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000