last executing test programs: 6m52.69145446s ago: executing program 0 (id=1499): openat$cdrom(0xffffff9c, &(0x7f0000000100), 0x2400, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x80400, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x7, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000140000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$FUSE_NOTIFY_INVAL_INODE(r3, &(0x7f00000002c0)={0x28, 0x2, 0x0, {0x1, 0x8001, 0x3}}, 0x28) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) rmdir(&(0x7f00000001c0)='./bus\x00') r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup(r4, &(0x7f0000000080)='syz1\x00', 0x1ff) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="130000001000000008"], 0x50) 6m51.758287776s ago: executing program 0 (id=1506): bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000140)={0x18, 0x0, {0xfffe, @multicast, 'bond0\x00'}}, 0x1e) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @local, 'geneve0\x00'}}, 0x1e) close(r0) 6m51.758045775s ago: executing program 0 (id=1507): r0 = syz_io_uring_setup(0x70e4, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0}}) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB=')'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 6m51.691577654s ago: executing program 0 (id=1508): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000041c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) mount$bind(&(0x7f0000000080)='./file0/../file0/file0\x00', &(0x7f0000000140)='./file0/../file0/file0\x00', 0x0, 0x801004, 0x0) write$FUSE_INIT(r0, &(0x7f0000000380)={0x50, 0x0, r1, {0x7, 0x27, 0x1, 0x2241100, 0x66d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000a280)="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", 0x2000, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)={0x90, 0x0, 0x8, {0x3, 0x100000000000, 0x100000003, 0x0, 0x0, 0x3881fffc, {0x5, 0xff, 0x1, 0x0, 0x3, 0x0, 0xa, 0x0, 0x0, 0x8000, 0x1, r2, r3, 0x2, 0x8009}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) 6m51.602676571s ago: executing program 0 (id=1509): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newtfilter={0x70, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xf}, {}, {0x7, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x40, 0x2, [@TCA_FLOW_EMATCHES={0x3c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x2c, 0x1, 0x0, 0x0, {{0x8, 0x9, 0x40}, [@TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x2}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x3}, @TCA_EM_IPT_MATCH_DATA={0x4}, @TCA_EM_IPT_MATCH_NAME={0xb}]}}]}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x10}, 0x2008c014) 6m51.309063885s ago: executing program 0 (id=1516): openat$cdrom(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = socket$inet(0x2, 0x4000000000080001, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r2, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) recvmmsg(r0, 0x0, 0x0, 0x12140, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/power/resume_offset', 0x101a02, 0x0) sendfile(r5, r5, 0x0, 0x101) fdatasync(r4) mount(0x0, 0x0, &(0x7f0000000080)='proc\x00', 0x0, 0x0) getdents(0xffffffffffffffff, &(0x7f0000001280)=""/4075, 0xffb) getsockopt$inet_mreqsrc(r0, 0x0, 0x28, 0x0, &(0x7f00000002c0)) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$ARPT_SO_GET_INFO(r6, 0x0, 0x60, &(0x7f0000000700)={'filter\x00', 0x0, [0x9, 0x9]}, &(0x7f0000000780)=0x44) r7 = memfd_create(&(0x7f0000000300)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xae\xd1md\xc8\x85\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;2\xb5\xe1jS\xeb\xbf%||\xa0\x8e\x01\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x4) execveat(r7, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) symlink(&(0x7f00000049c0)='.\x00', &(0x7f00000059c0)='./file0\x00') syz_init_net_socket$ax25(0x3, 0xe935773f26c2ec5d, 0xc4) 6m51.24659921s ago: executing program 32 (id=1516): openat$cdrom(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = socket$inet(0x2, 0x4000000000080001, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r2, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) recvmmsg(r0, 0x0, 0x0, 0x12140, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/power/resume_offset', 0x101a02, 0x0) sendfile(r5, r5, 0x0, 0x101) fdatasync(r4) mount(0x0, 0x0, &(0x7f0000000080)='proc\x00', 0x0, 0x0) getdents(0xffffffffffffffff, &(0x7f0000001280)=""/4075, 0xffb) getsockopt$inet_mreqsrc(r0, 0x0, 0x28, 0x0, &(0x7f00000002c0)) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$ARPT_SO_GET_INFO(r6, 0x0, 0x60, &(0x7f0000000700)={'filter\x00', 0x0, [0x9, 0x9]}, &(0x7f0000000780)=0x44) r7 = memfd_create(&(0x7f0000000300)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xae\xd1md\xc8\x85\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;2\xb5\xe1jS\xeb\xbf%||\xa0\x8e\x01\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x4) execveat(r7, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) symlink(&(0x7f00000049c0)='.\x00', &(0x7f00000059c0)='./file0\x00') syz_init_net_socket$ax25(0x3, 0xe935773f26c2ec5d, 0xc4) 5m29.621243611s ago: executing program 3 (id=2249): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) ioperm(0x0, 0x8, 0x4) r2 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000), &(0x7f0000000380)=0x0) syz_io_uring_setup(0x5e2, &(0x7f00000003c0), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r4, r3, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) io_uring_enter(r2, 0xa3d, 0x0, 0x0, 0x0, 0x0) r5 = mq_open(&(0x7f000084dff0)='!sali\x1cqxte&\xac\xe87x\x00', 0x6e93ebbbcc0884f2, 0x12e, &(0x7f0000000300)={0x0, 0x1, 0x7}) mq_timedsend(r5, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r5, 0x0, 0x0, 0x0, 0x0) 5m29.193891089s ago: executing program 3 (id=2253): openat$cdrom(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = socket$inet(0x2, 0x4000000000080001, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="200000000514210600000000000011000800010000000000080005"], 0x20}}, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) recvmmsg(r0, 0x0, 0x0, 0x12140, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/power/resume_offset', 0x101a02, 0x0) sendfile(r5, r5, 0x0, 0x101) fdatasync(r4) mount(0x0, 0x0, &(0x7f0000000080)='proc\x00', 0x0, 0x0) getdents(0xffffffffffffffff, &(0x7f0000001280)=""/4075, 0xffb) getsockopt$inet_mreqsrc(r0, 0x0, 0x28, 0x0, &(0x7f00000002c0)) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$ARPT_SO_GET_INFO(r6, 0x0, 0x60, &(0x7f0000000700)={'filter\x00', 0x0, [0x9, 0x9]}, &(0x7f0000000780)=0x44) r7 = memfd_create(&(0x7f0000000300)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xae\xd1md\xc8\x85\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;2\xb5\xe1jS\xeb\xbf%||\xa0\x8e\x01\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x4) execveat(r7, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) symlink(0x0, &(0x7f00000059c0)='./file0\x00') syz_init_net_socket$ax25(0x3, 0xe935773f26c2ec5d, 0xc4) 5m28.288523524s ago: executing program 3 (id=2260): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000013c0)=0x80000000001, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x0) sendto$inet6(r0, &(0x7f00000002c0)="e8", 0xfffffffffffffd79, 0x2000c850, 0x0, 0x4d) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup3(r0, r1, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000001f00)=""/4106, 0xfffffffffffffccb, 0x0, 0x0}, &(0x7f0000000080)=0x40) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000001400)=""/200, 0xfffffffffffffecd, 0x0, 0x0}, &(0x7f0000001380)=0x40) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, &(0x7f0000000000)=0x40) 5m28.21610598s ago: executing program 3 (id=2265): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x21c0, 0xc) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) mount$bind(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0) mount$bind(&(0x7f00000000c0)='.\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x80700a, 0x0) 5m28.059690478s ago: executing program 3 (id=2267): openat$cdrom(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = socket$inet(0x2, 0x4000000000080001, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="200000000514210600000000000011000800010000000000080005"], 0x20}}, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) recvmmsg(r0, 0x0, 0x0, 0x12140, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/power/resume_offset', 0x101a02, 0x0) sendfile(r5, r5, 0x0, 0x101) fdatasync(r4) mount(0x0, 0x0, &(0x7f0000000080)='proc\x00', 0x0, 0x0) getdents(0xffffffffffffffff, &(0x7f0000001280)=""/4075, 0xffb) getsockopt$inet_mreqsrc(r0, 0x0, 0x28, 0x0, &(0x7f00000002c0)) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$ARPT_SO_GET_INFO(r6, 0x0, 0x60, &(0x7f0000000700)={'filter\x00', 0x0, [0x9, 0x9]}, &(0x7f0000000780)=0x44) r7 = memfd_create(&(0x7f0000000300)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xae\xd1md\xc8\x85\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;2\xb5\xe1jS\xeb\xbf%||\xa0\x8e\x01\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x4) execveat(r7, 0x0, 0x0, 0x0, 0x1000) symlink(&(0x7f00000049c0)='.\x00', &(0x7f00000059c0)='./file0\x00') syz_init_net_socket$ax25(0x3, 0xe935773f26c2ec5d, 0xc4) 5m27.518550448s ago: executing program 3 (id=2270): openat$cdrom(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = socket$inet(0x2, 0x4000000000080001, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="200000000514210600000000000011000800010000000000080005"], 0x20}}, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) recvmmsg(r0, 0x0, 0x0, 0x12140, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/power/resume_offset', 0x101a02, 0x0) sendfile(r5, r5, 0x0, 0x101) fdatasync(r4) mount(0x0, 0x0, &(0x7f0000000080)='proc\x00', 0x0, 0x0) getdents(0xffffffffffffffff, &(0x7f0000001280)=""/4075, 0xffb) getsockopt$inet_mreqsrc(r0, 0x0, 0x28, 0x0, &(0x7f00000002c0)) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$ARPT_SO_GET_INFO(r6, 0x0, 0x60, &(0x7f0000000700)={'filter\x00', 0x0, [0x9, 0x9]}, &(0x7f0000000780)=0x44) r7 = memfd_create(&(0x7f0000000300)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xae\xd1md\xc8\x85\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;2\xb5\xe1jS\xeb\xbf%||\xa0\x8e\x01\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x4) execveat(r7, 0x0, 0x0, 0x0, 0x1000) symlink(&(0x7f00000049c0)='.\x00', &(0x7f00000059c0)='./file0\x00') syz_init_net_socket$ax25(0x3, 0xe935773f26c2ec5d, 0xc4) 5m27.421598157s ago: executing program 33 (id=2270): openat$cdrom(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = socket$inet(0x2, 0x4000000000080001, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="200000000514210600000000000011000800010000000000080005"], 0x20}}, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) recvmmsg(r0, 0x0, 0x0, 0x12140, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/power/resume_offset', 0x101a02, 0x0) sendfile(r5, r5, 0x0, 0x101) fdatasync(r4) mount(0x0, 0x0, &(0x7f0000000080)='proc\x00', 0x0, 0x0) getdents(0xffffffffffffffff, &(0x7f0000001280)=""/4075, 0xffb) getsockopt$inet_mreqsrc(r0, 0x0, 0x28, 0x0, &(0x7f00000002c0)) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$ARPT_SO_GET_INFO(r6, 0x0, 0x60, &(0x7f0000000700)={'filter\x00', 0x0, [0x9, 0x9]}, &(0x7f0000000780)=0x44) r7 = memfd_create(&(0x7f0000000300)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xae\xd1md\xc8\x85\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;2\xb5\xe1jS\xeb\xbf%||\xa0\x8e\x01\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x4) execveat(r7, 0x0, 0x0, 0x0, 0x1000) symlink(&(0x7f00000049c0)='.\x00', &(0x7f00000059c0)='./file0\x00') syz_init_net_socket$ax25(0x3, 0xe935773f26c2ec5d, 0xc4) 4m55.788747652s ago: executing program 2 (id=2491): unshare(0x72030280) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x20, 0x1) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000004200)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x8, 0x140400c, 0x0, 0x0, 0x4}}, 0x50) syz_fuse_handle_req(r1, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) acct(&(0x7f00000001c0)='./file0\x00') acct(0x0) umount2(&(0x7f0000000000)='./file0\x00', 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 4m55.447808899s ago: executing program 2 (id=2493): prctl$PR_SCHED_CORE(0x3e, 0x4, 0x0, 0x3, 0x0) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYRES32=r0, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) add_key(0x0, 0x0, &(0x7f0000001480)="aeffa4486aa84c5cd1276d91eecdfccfb963910470b7fbea31521973580a6311fb47d40700e353de4e219eb4802eb77ce0d6016e584d552b5ccea8207888668e4b1c5d8e464389b41a7db270bcf39bd9e94fa051110e00cbf0a42159e717046d42be7bb0af9d94fc977ffa26577997b6c08a1b17ab4dd123fe7aa034d4d36f56ba3f438a0e6c356c0fad29e66a202cd90c08eb053f04f5b1aa50f6a115de7b6b61edd701777a7a6612f0310d2c1b0b9fabc21b67cecd727c6e05f18a639e9277b2813694267b7d134f89bedd55c711587c8ce6489474edd2f7b23243c0e2166aa7249592ea", 0xe5, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) io_uring_enter(0xffffffffffffffff, 0x50d4, 0x4000, 0x50, 0x0, 0x20) kexec_load(0x5, 0x3, &(0x7f0000001080), 0x3e0000) 4m53.677687455s ago: executing program 2 (id=2500): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) landlock_create_ruleset(0x0, 0x0, 0x2) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x2239, &(0x7f0000000380)={0x0, 0x1ffffe, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f00000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r5, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x230}}) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) r6 = socket(0x1d, 0x2, 0x7) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r6, 0x6b, 0x8, 0x0, 0x0) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9) io_uring_enter(r2, 0x7866, 0x4000, 0x0, 0x0, 0x0) clock_nanosleep(0x1, 0x1, &(0x7f0000000000)={0x77359400}, 0x0) 4m52.803768522s ago: executing program 2 (id=2504): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) chdir(&(0x7f0000000140)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYRES32=r1], 0x0, 0x8, 0x28, 0x0, 0x0, 0x50, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x40049366, &(0x7f0000000180)) 4m51.843596081s ago: executing program 2 (id=2513): mknod(&(0x7f00000000c0)='./file0\x00', 0x0, 0xffffffff) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0xc, &(0x7f0000000480)=@assoc_value, &(0x7f0000000040)=0x8) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) ioctl$AUTOFS_IOC_EXPIRE(r0, 0x810c9365, &(0x7f00000004c0)={{0x1, 0x8}, 0x100, './file0\x00'}) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'veth1\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="46060900000000001c00128009000100766c616e000000000c000280060001000400000008000500", @ANYRES32=r8, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6, @ANYBLOB='r'], 0x4c}, 0x1, 0x0, 0x0, 0x600}, 0x0) 4m51.746971668s ago: executing program 2 (id=2514): socket$netlink(0x10, 0x3, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x200ce0c0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r0, 0xfffffffc) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) bind$netlink(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000000), 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r3, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x1802, &(0x7f00000003c0)={&(0x7f00000004c0)={0x30, r5, 0x1, 0x70bd2c, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x1c}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}, 0x1, 0xff07}, 0x2000000) 4m51.688435118s ago: executing program 34 (id=2514): socket$netlink(0x10, 0x3, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x200ce0c0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r0, 0xfffffffc) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) bind$netlink(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000000), 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r3, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x1802, &(0x7f00000003c0)={&(0x7f00000004c0)={0x30, r5, 0x1, 0x70bd2c, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x1c}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}, 0x1, 0xff07}, 0x2000000) 32.789728943s ago: executing program 6 (id=3043): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000002c0), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd8073a46b08b94214d816f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb4147000001000000008f2b9000f22425e4097ed62cbc891061017cfa6f61"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]}) r3 = open(&(0x7f0000000040)='./file0\x00', 0x400, 0x43) mknodat$loop(r3, &(0x7f00000002c0)='./file1\x00', 0x10, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') linkat(r3, &(0x7f0000000100)='./file1\x00', r3, &(0x7f0000000240)='./file0\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000a00)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', 0x2) lstat(0x0, &(0x7f00000004c0)) close(0x3) close(r2) r4 = userfaultfd(0x80001) rename(&(0x7f00000001c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[], 0x50) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000140)) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0x30}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) sendto$inet6(r5, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r5, 0x2) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000001ec0)='./binderfs/binder-control\x00', 0x2, 0x0) 30.957060645s ago: executing program 6 (id=3050): mq_open(0x0, 0x42, 0x0, 0x0) openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r0 = syz_open_dev$media(&(0x7f0000000040), 0x7ffffffe, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f0000000080)) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) pselect6(0x40, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0, 0x2}, 0x0, 0x0, 0x0, 0x0) unshare(0x22020600) r3 = fsopen(0x0, 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140), 0x4) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) 29.919485012s ago: executing program 6 (id=3054): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x0, 0x50313134, 0x0, 0xa, [{}, {0x10}, {}, {}, {0x6}]}}) socket(0x2c, 0x803, 0x0) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$vim2m(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r4, 0xc0cc5640, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000140)={0x0, &(0x7f0000000280)}, 0x10) socket$netlink(0x10, 0x3, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) pipe2(0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x482, &(0x7f0000000300)={0x84, @loopback, 0x4e22, 0x1, 'nq\x00', 0x0, 0x10000}, 0x2c) setsockopt$IP_VS_SO_SET_DEL(r7, 0x0, 0x483, 0x0, 0x0) 27.127519953s ago: executing program 6 (id=3060): mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000080)=0x40) r2 = socket$nl_generic(0x10, 0x3, 0x10) open_by_handle_at(r2, &(0x7f0000000480)=ANY=[@ANYRESDEC, @ANYRESHEX=r2, @ANYRES32=r0], 0x6fd3d0b4f5cc8e94) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x124}, 0x1, 0x0, 0x0, 0x24006000}, 0x488c0) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0xfffffffffffffe01, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) signalfd(r3, &(0x7f0000000180)={[0x1b33d2db, 0x80000001]}, 0x8) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000006c0)={0x55, 0x101, 0x870, {0x3, 0x1}, {0x41, 0x402}, @period={0x5c, 0x780, 0x10, 0x2, 0x5, {0x0, 0x0, 0x860, 0x5}, 0x5, &(0x7f0000000140)=[0x7, 0x7ff, 0x9, 0x7fff, 0x2]}}) r5 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x8c2b01) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) syz_emit_ethernet(0x11c, &(0x7f0000000000)={@random="cf702e8cf675", @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0xe6, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @dev, @dev, [{0x2, 0x17, "703b744dc5c6a05fed0c0a28a5c04ec93b15911c51d9f1f265deed8eccd95784a601a0b0e6a4c3111b910f0173045fa2141e5b4595c5c99a9e655650a618f1e1b87d92c6bdc8822504781c5a026526818ceac3312187ff298ddd0b51e329a0555c732fabd5572626bc738bf5440cf57f442ac9bd7656e69c22df50f22d2bbe513c01be63f88b0536f418ebe0bf8f7e1c7ec73cf47ec436ed1d6060a46f881e8d701f56440e5259da2369e350ab54d342e18ac1fc323c56eee2eef13f"}]}}}}}}, 0x0) write$char_usb(r5, &(0x7f0000000040)="e2", 0x12d8) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x13, 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_GET_DEVICE_ATTR_vm(r6, 0x4018aee2, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000180)={0xac1d, 0x4}}) syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$EVIOCGKEY(r5, 0x80404518, 0x0) 25.143583719s ago: executing program 6 (id=3062): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_inet6_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, &(0x7f00000000c0)) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000300)={0x0, 0x0}) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f0000000340)=r2) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x20002, 0x0) semget$private(0x0, 0x1, 0x398) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r3], 0x40}}, 0x0) ioctl$PPPIOCSFLAGS1(r3, 0x40047459, &(0x7f0000000140)) r6 = io_uring_setup(0x3403, &(0x7f0000000240)={0x0, 0xfbe4, 0x400, 0x1, 0x3b2, 0x0, r5}) r7 = syz_io_uring_setup(0x8d5, &(0x7f00000000c0)={0x0, 0x0, 0x3010, 0x0, 0x0, 0x0, r6}, &(0x7f0000000040)=0x0, &(0x7f00000001c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r9, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) connect$inet6(r9, &(0x7f00000001c0)={0xa, 0x4e21, 0x1, @remote, 0x4}, 0x1c) r10 = io_uring_setup(0xbbc, &(0x7f0000000280)={0x0, 0x0, 0x2, 0x0, 0x15a}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r11, &(0x7f00000bd000), 0x318, 0x0) io_uring_enter(r10, 0x100000, 0x2, 0xf, &(0x7f0000000000), 0x18) setsockopt$inet6_tcp_TCP_REPAIR(r9, 0x6, 0x13, &(0x7f0000000140), 0x4) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmsg(r12, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPSET_CMD_LIST(r12, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001540)=ANY=[@ANYBLOB="1c0000000706010800000000000000000a0000040500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) io_uring_enter(r7, 0x47ba, 0x3e80, 0x0, 0x0, 0x0) 23.671459703s ago: executing program 6 (id=3065): socket$netlink(0x10, 0x3, 0x15) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x800, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="030000000400000004000000", @ANYRES32], 0x50) iopl(0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(0xffffffffffffffff, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbfb, 0x10000}, 0x17) r3 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x20}, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4e22, 0x0, 0x0, 0x0, 0xa}, {0x4, 0x0, 0x10}, {}, 0x0, 0x0, 0x1}, {{@in=@private=0xa010101, 0x0, 0x33}, 0x0, @in=@dev, 0x200, 0x0, 0x0, 0x7, 0x94}}, 0xe4) socket$inet6(0xa, 0xa, 0x5) sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, 0x0, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000400)={0x0}}, 0x0) r4 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x4, 0x610701) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r4, 0xc1105511, &(0x7f0000000180)={{0xb, 0x0, 0x0, 0x2, 'syz1\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 'syz1\x00', 0x0}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x10a, 0x1}) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r5 = syz_usb_connect(0x2, 0x3f, &(0x7f00000007c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r6, 0xc0105b08, &(0x7f0000000040)) 12.166218972s ago: executing program 1 (id=3087): mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000080)=0x40) r2 = socket$nl_generic(0x10, 0x3, 0x10) open_by_handle_at(r2, &(0x7f0000000480)=ANY=[@ANYRESDEC, @ANYRESHEX=r2, @ANYRES32=r0], 0x6fd3d0b4f5cc8e94) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x124}, 0x1, 0x0, 0x0, 0x24006000}, 0x488c0) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0xfffffffffffffe01, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) signalfd(r3, &(0x7f0000000180)={[0x1b33d2db, 0x80000001]}, 0x8) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000006c0)={0x55, 0x101, 0x870, {0x3, 0x1}, {0x41, 0x402}, @period={0x5c, 0x780, 0x10, 0x2, 0x5, {0x0, 0x0, 0x860, 0x5}, 0x5, &(0x7f0000000140)=[0x7, 0x7ff, 0x9, 0x7fff, 0x2]}}) r5 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x8c2b01) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) syz_emit_ethernet(0x11c, &(0x7f0000000000)={@random="cf702e8cf675", @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0xe6, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @dev, @dev, [{0x2, 0x17, "703b744dc5c6a05fed0c0a28a5c04ec93b15911c51d9f1f265deed8eccd95784a601a0b0e6a4c3111b910f0173045fa2141e5b4595c5c99a9e655650a618f1e1b87d92c6bdc8822504781c5a026526818ceac3312187ff298ddd0b51e329a0555c732fabd5572626bc738bf5440cf57f442ac9bd7656e69c22df50f22d2bbe513c01be63f88b0536f418ebe0bf8f7e1c7ec73cf47ec436ed1d6060a46f881e8d701f56440e5259da2369e350ab54d342e18ac1fc323c56eee2eef13f"}]}}}}}}, 0x0) write$char_usb(r5, &(0x7f0000000040)="e2", 0x12d8) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x13, 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_GET_DEVICE_ATTR_vm(r6, 0x4018aee2, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000180)={0xac1d, 0x4}}) ioctl$VIDIOC_ENUM_DV_TIMINGS(0xffffffffffffffff, 0xc0945662, &(0x7f0000000500)={0x1, 0x0, '\x00', {0x0, @bt={0xfffffff1, 0x8, 0x0, 0x0, 0xfff, 0x6, 0x280000, 0x3, 0x0, 0x5, 0xd, 0x9, 0x93f, 0x0, 0x4, 0x34, {0x4, 0xe2a4}, 0xca, 0x8}}}) ioctl$EVIOCGKEY(r5, 0x80404518, 0x0) 11.16728512s ago: executing program 1 (id=3090): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'lblcr\x00'}, 0x2c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xb3, &(0x7f0000000140)=""/179, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f0000002540)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff, 0x3c, 0x0, @void}, 0x10) r4 = shmget$private(0x0, 0x9000, 0x0, &(0x7f0000ff7000/0x9000)=nil) shmat(r4, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r4, &(0x7f0000ff9000/0x1000)=nil, 0x5000) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8001, &(0x7f0000000000)=0x6, 0x8, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x90}, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x0, {0x21, @broadcast, 'vlan1\x00'}}, 0x1e) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="30000000190001000000000000000000021800000000ff00"], 0x30}}, 0x8000) r6 = syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x9300) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) ioctl$HIDIOCGRDESC(r6, 0x90044802, &(0x7f0000000240)) 9.242377561s ago: executing program 5 (id=3092): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="600000000206010800008603000000000000fffc14000780080011400000010008000640000000020500010006000000050005000a000000050004000000000012000300686173683a6e65742c706f7274000000090002"], 0x60}, 0x1, 0x0, 0x0, 0x21}, 0x20000000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4001, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, 0xe}, 0x1c) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000100)={0x50, 0x0, r3, {0x7, 0x1f, 0x0, 0x8000}}, 0x50) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r4, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) syz_fuse_handle_req(r2, &(0x7f0000002100)="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", 0x2000, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x20, 0x0, 0x0, {0x0, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) io_submit(r6, 0x12, &(0x7f0000000780)=[&(0x7f0000000440)={0xfffffffe, 0x20011004, 0x4, 0x1, 0x0, r5, &(0x7f00000000c0)='!', 0xb7f40, 0x0, 0x0, 0x2000000}]) dup3(r5, r2, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0a4295edf266f6215a200900000000000000c7d0a24967b7623b36f706b64b837ee9113e64040e0000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) r9 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r9, 0x10e, 0xc, &(0x7f0000000180)={0xfffffc}, 0x10) write(r9, &(0x7f0000000000)="240000001a005f0214f9f407000901000000000000000005000000000800040001000000", 0x24) sendto$inet_nvme_pdu(r9, &(0x7f0000000380)=@cmd={{0x4, 0x8, 0x48, 0x6}, {@auth_common={0x7f, 0x6, 0x9, 0x8, "f0b74f1b4053280c266c5892b9fb7d0da9b1ca", @ksgl={0xffffffffffff394c, "a3e6ab", "ddccc085", 0xff}, 0x2e, 0x8, 0xe, 0xed, 0x6, "e54c372e9c6f6f1453eb4dfa59c66c60"}}}, 0x80, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r8, 0x84, 0x4, &(0x7f0000000000), &(0x7f00000000c0)=0x4) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c3a00000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000008000085000000720000", @ANYRES32=r7], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) recvmmsg(r1, &(0x7f00000019c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) 9.126686089s ago: executing program 1 (id=3093): syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161142, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x8, 0x0, &(0x7f00000023c0)) socket$igmp(0x2, 0x3, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x70bd2d, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x4, 0xf}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1001, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x5, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000440)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000040)={0x5, 0x6576, 0x9}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r4, 0x100000) bpf$MAP_CREATE(0x300000000000000, 0x0, 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x1d0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[]) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x101000, 0xd5) 7.789850429s ago: executing program 4 (id=3095): mkdir(0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id']) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d00000085"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x0, 0x70bd26, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x0, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=@newtaction={0x4c, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x38, 0x1, [@m_tunnel_key={0x34, 0x1, 0x0, 0x0, {{0xf}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x4c}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x3) ioctl$KVM_GET_DEBUGREGS(r1, 0x8080aea1, &(0x7f0000000640)) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, 0x0) ioctl$TIOCSETD(r6, 0x5423, 0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_SCRNMAP(r7, 0x4b41, &(0x7f00000005c0)="698b795025046c56fdae1c35e2d2b943a92669976742fb747b7124e23cf31ca8a1b2f9b93ecc4487d1cffe823c43d669d45cd0ce87eef19fff81e324c082899cc3b724451fcadf572bbf496026") ioctl$TIOCVHANGUP(r6, 0x5437, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[]) chdir(&(0x7f0000000100)='./file0\x00') 7.754185482s ago: executing program 5 (id=3096): socket(0x1d, 0x1, 0x9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x20000840) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='environ\x00') read$qrtrtun(r1, &(0x7f00000004c0)=""/57, 0x39) setrlimit(0x0, &(0x7f0000000100)={0x6, 0xa}) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read$FUSE(r5, &(0x7f0000009780)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_DIRENTPLUS(r5, &(0x7f0000000840)=ANY=[@ANYBLOB="b0000000daffffff", @ANYRES64=0x3, @ANYBLOB="040000000000000000000000000000000000000000000080040000000000000000000000ff0000000100000000000000060000000000000005000000000000009c0000000000000081000000000000007e0000000000000000000000070000006e04000000800000508c0000", @ANYRES32=r6, @ANYRES32=r7, @ANYBLOB="04000000810036000000000000000000000000000002000000000000010400"/44], 0xb0) socket$nl_netfilter(0x10, 0x3, 0xc) dup(0xffffffffffffffff) r8 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r8, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10) setsockopt$SO_BINDTODEVICE_wg(r8, 0x1, 0x19, &(0x7f0000000080)='wg1\x00', 0x4) sendto$inet(r8, &(0x7f0000000040)="e5", 0xffffffe4, 0x0, 0x0, 0x0) unshare(0x40020000) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x42) 7.348438619s ago: executing program 35 (id=3065): socket$netlink(0x10, 0x3, 0x15) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x800, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="030000000400000004000000", @ANYRES32], 0x50) iopl(0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(0xffffffffffffffff, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbfb, 0x10000}, 0x17) r3 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x20}, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4e22, 0x0, 0x0, 0x0, 0xa}, {0x4, 0x0, 0x10}, {}, 0x0, 0x0, 0x1}, {{@in=@private=0xa010101, 0x0, 0x33}, 0x0, @in=@dev, 0x200, 0x0, 0x0, 0x7, 0x94}}, 0xe4) socket$inet6(0xa, 0xa, 0x5) sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, 0x0, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000400)={0x0}}, 0x0) r4 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x4, 0x610701) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r4, 0xc1105511, &(0x7f0000000180)={{0xb, 0x0, 0x0, 0x2, 'syz1\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 'syz1\x00', 0x0}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x10a, 0x1}) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r5 = syz_usb_connect(0x2, 0x3f, &(0x7f00000007c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r6, 0xc0105b08, &(0x7f0000000040)) 5.541692434s ago: executing program 1 (id=3098): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x70bd26, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x40000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = syz_io_uring_setup(0x23c, &(0x7f0000000380)={0x0, 0x1ffefe, 0x10100, 0x7ffff}, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x4, 0x1}) io_uring_enter(r0, 0x2ded, 0x25d2, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) lsetxattr(&(0x7f0000000180)='./file0\x00', &(0x7f0000000280)=ANY=[@ANYBLOB="938f6c3566025d2447"], &(0x7f0000000340)='-&/)),]\x00', 0x8, 0x2) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000440)={0x2, 'syzkaller1\x00', 0x3}, 0x18) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r6, &(0x7f000000e280)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r6, &(0x7f000000c280)="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", 0x2000, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x90, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0xc9, 0x0, 0x8000000, 0x0, 0x0, 0x81, 0x1000, 0x2000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r6, &(0x7f0000000380)={0x50, 0x0, r7, {0x7, 0x29, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x6}}, 0x50) syz_fuse_handle_req(r6, &(0x7f00000041c0)="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", 0x2000, &(0x7f0000001280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000d00)={0x90, 0x0, 0x9, {0x0, 0x0, 0x7, 0x3, 0xfffffff0, 0xa5, {0x0, 0xb43d, 0x3, 0x9, 0x8000000000000001, 0x9, 0x4, 0x800, 0x40, 0x6000, 0x4, 0x0, 0x0, 0xffffffff, 0xfff}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) link(&(0x7f0000000280)='./file0/../file0/file0\x00', &(0x7f0000000400)='./file0/../file0/file0\x00') syz_fuse_handle_req(r6, &(0x7f000000a280)="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", 0x2000, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x90, 0x0, 0x0, {0x3, 0x2, 0x0, 0xffffffffffffffff, 0xfffffffb, 0xfffffffe, {0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, r8}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_DV_TIMINGS_CAP(r9, 0xc0905664, 0x0) 4.490398722s ago: executing program 5 (id=3099): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x11, 0xc, &(0x7f0000000380)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x1, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x80) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$SNDRV_PCM_IOCTL_USER_PVERSION(0xffffffffffffffff, 0x40044104, &(0x7f0000000280)=0x8a8) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) r5 = socket(0x10, 0x80002, 0x0) sendmsg(r5, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000040)="24000000180003041dfffd946f610500020100000005fe060c10880008000f00fff3c00e140000001a00ffffba16a0aa1c091dbfa1090000", 0x38}], 0x1}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r5) connect$phonet_pipe(r4, &(0x7f0000002200)={0x23, 0x0, 0x0, 0x1d}, 0x10) sendmsg$IPSET_CMD_SAVE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[], 0x1c}}, 0x24000050) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(0xffffffffffffffff, 0xc0a45320, 0x0) readv(0xffffffffffffffff, &(0x7f0000000700)=[{&(0x7f0000000080)=""/63, 0x3f}], 0x1) openat$sequencer(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) 4.245198883s ago: executing program 1 (id=3100): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) openat$audio(0xffffff9c, 0x0, 0x402, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_open_dev$radio(&(0x7f0000000240), 0x2, 0x2) sched_getattr(0x0, &(0x7f00000004c0)={0x38}, 0x38, 0x0) membarrier(0x10, 0x0) poll(0x0, 0x0, 0x1) prctl$PR_MCE_KILL(0x21, 0x1, 0x0) prctl$PR_MCE_KILL_GET(0x22) r2 = socket(0x10, 0x80002, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000017dcb4401e040c4098af00000001090212"], 0x0) add_key$user(&(0x7f0000000180), 0x0, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010e7010000000000000000000000000a20000000000a03000000000000000000070000000c00044000000000000000021c000000090a010400000000000000000700000008000a4000000003"], 0x64}, 0x1, 0x0, 0x0, 0x4004001}, 0x0) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff0000000000010902240001"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000200), 0x0}, 0x0) r4 = syz_open_dev$hiddev(0x0, 0x0, 0x0) ioctl$HIDIOCGREPORTINFO(r4, 0xc00c4809, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x40d, 0x70bd25, 0x25ffdbfc, {0x0, 0x0, 0x0, 0x0, 0x10}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_HELLO_TIME={0x8, 0x2, 0x6}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmmsg$alg(r2, &(0x7f00000000c0), 0x492492492492627, 0x0) recvfrom$inet(r2, &(0x7f0000000380)=""/42, 0x2a, 0x121, &(0x7f0000000280)={0x2, 0x4e20, @remote}, 0x10) socket(0x28, 0x5, 0x0) socket$netlink(0x10, 0x3, 0x8) 4.101516235s ago: executing program 4 (id=3101): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@local, 0x2}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000002b80)={0xfffffffc}, 0x8) socket$inet6(0xa, 0x6, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) connect$inet(r3, &(0x7f0000000280)={0x2, 0x0, @dev}, 0x10) socket(0x18, 0x4, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r6, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x5, 0x0, 0x1, '\x00', 0xfffffffffffffffc}) r7 = socket$nl_route(0x10, 0x3, 0x0) socket(0x5, 0x2, 0x2) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f00000001c0)={0x6, "3256a2f0e799fe091a6c9f139c5d9a227798a083c15ad22920fd489fdb7a921a"}) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x3c}}, 0x0) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000019400)="2e0417ba1071c69e4017a7ff6a5c67481893017007463b8609091ba8f23295c6269b88196491db127901b653fb", 0x2d) setsockopt$SO_TIMESTAMPING(r8, 0x1, 0x25, 0x0, 0xfffffffffffffd48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 2.58737868s ago: executing program 4 (id=3102): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x141800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c20000000800450000b00000000000119078000000000000000000004e20009c907801000000000000007b4b143b7461fd777b1c012bd146fb9f49fcdb8f080c26a04883ad5c8c82b8af584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424dbcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b9649a3bfbc1f39cb307b3472eb9cdb042d2643fcbb2c5a57df67d544af6e8dafe09"], 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, @void, @value}, 0x94) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r2, &(0x7f00000057c0)=[{{0x0, 0x4000, 0x0}, 0x3}, {{0x0, 0x0, &(0x7f0000002cc0)=[{0x0, 0x94}, {&(0x7f00000017c0)=""/130, 0x94}], 0x2}, 0xa1}], 0x2, 0x0, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0x5}) r5 = eventfd2(0x0, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000000)={r5}) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000100)=ANY=[@ANYBLOB="01000000000000000000000002"]) write$eventfd(r5, &(0x7f00000000c0)=0x33482a8d, 0x8) r6 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r7 = openat$rfkill(0xffffff9c, &(0x7f0000000040), 0x8080, 0x0) poll(&(0x7f0000000080)=[{r7, 0x212c}], 0x1, 0xf0) openat$nci(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = openat$null(0xffffff9c, &(0x7f0000000380), 0xde2180c77f10f35, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r9, 0x89e0, &(0x7f00000003c0)={r8, r3}) r10 = syz_io_uring_setup(0x113, &(0x7f00000002c0), &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r11, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) syz_io_uring_submit(r11, r12, &(0x7f00000004c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x40, 0x0, r13, 0x0, 0x0, 0x0, 0x102, 0x1, {0x3}}) io_uring_enter(r10, 0x8aa, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000010001fff000002ea0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000200012800b000100697036746e6c00001000028004001300050009002900000008000400"], 0x48}}, 0x0) syz_emit_ethernet(0x9d, &(0x7f0000000200)={@broadcast, @random="56b6378053d1", @val={@val={0x88a8, 0x6, 0x0, 0x4}, {0x8100, 0x4, 0x0, 0x2}}, {@mpls_mc={0x8848, {[{0x4}, {0x7}, {0x80}, {0x1}, {0x7, 0x0, 0x1}, {0xffffa, 0x0, 0x1}], @generic="235541d1b47003e8d6714a45d3c38b81c3c16e48497ee3509716e6ae7196a36679d74b27189052b495d25a83d817075d5aa14ba4b38823019f3188ecf13b738b638477a472fbf305264fdc47db8c5ce942618a8dab2123b0ec0375ead3f43598b12eb2fbbaa0623838d78bcdad638f"}}}}, &(0x7f0000000340)={0x1, 0x3, [0x4, 0xba, 0xf03, 0x3bf]}) close_range(r6, 0xffffffffffffffff, 0x0) 2.424718221s ago: executing program 5 (id=3103): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x3, &(0x7f00000004c0)=ANY=[@ANYRES16=r0, @ANYRESDEC=r0, @ANYRES32=r0, @ANYRESDEC], &(0x7f0000000280)='GPL\x00', 0xa, 0xb9, &(0x7f0000000140)=""/185, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card0/oss_mixer\x00', 0x0, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) r6 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r6, 0x8922, &(0x7f0000000440)={'syz_tun\x00', 0x101}) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a181000b00000000010000000000000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x0) close(r5) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r4, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) writev(r4, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x4}}, 0x20040051) 1.340942186s ago: executing program 4 (id=3104): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x84, @loopback, 0x4e25, 0x3, 'lblc\x00', 0x1, 0x2, 0x6e}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'lc\x00', 0xc, 0x9, 0x77}, {@rand_addr=0x64010102, 0x4e23, 0x2, 0x100000cd, 0x12d5f, 0x3}}, 0x44) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x200000100000011, 0x1, 0x5) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'syz_tun\x00'}) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NFC_CMD_FW_DOWNLOAD(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="01002cbd7000000000101500000008000100", @ANYRES16=r0, @ANYBLOB="4b69482939b776f2da73538c3ec2559d8e2bd70fe64dfa5dc91e93be5744a12f5e9a551b8f1b114b81"], 0x1c}, 0x1, 0x200000000000000, 0x0, 0x30004010}, 0x24000880) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_bt_hidp_HIDPCONNADD(r4, 0x400448c8, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) mkdir(&(0x7f0000000200)='./file0\x00', 0x1c2) r7 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r7, &(0x7f0000000080)='./file1\x00', 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000340001002dbd7000fedbdb2501000000080007000200000036203f13f911ca884a2e80586794f652d80f978e75ba20cc5217aae926b6d0ccf303248e7cd0ff3493ee53edc25763521a978d9d2e05000000"], 0x1c}, 0x1, 0x0, 0x0, 0x50}, 0x40400c0) r9 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000003600000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000008850000000700000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r10, 0x0, 0xe, 0x0, &(0x7f00000002c0)="7706137a95ff52ffef94a5c781cf", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x4c) ptrace(0x10, r9) sendmsg$NFNL_MSG_ACCT_NEW(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="a80000000007000000000000000000000a000002080046c2d32daf320540000000022c000780080002400000000608000140801afda74b3c7074fcd8000000080002400000000808000140fffffffc08000240000000005400078008000240000000060800024000000002080001400000000b08000140000000f1080002400000000308000240000000070800024000000000080002400000259f080002400000000508000240000000050c0006400000"], 0xa8}, 0x1, 0x0, 0x0, 0x80}, 0x4060014) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff}, 0x18) ptrace$pokeuser(0x6, r9, 0x118, 0x40000089) 976.48172ms ago: executing program 5 (id=3105): r0 = dup(0xffffffffffffffff) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x10000, 0x200080, 0x9, 0xffff, 0x101, 0xfffffffa, 0x0, 0x0, 0x4, 0xb}}, 0x50) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x3c8) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r2, &(0x7f0000000200), 0x2, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x1000, 0x2}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) setsockopt$inet6_tcp_int(r5, 0x6, 0x2000000000000022, 0x0, 0x0) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) io_setup(0x6, 0x0) setsockopt$SO_BINDTODEVICE_wg(r5, 0x1, 0x19, &(0x7f0000000080)='wg0\x00', 0x4) io_submit(0x0, 0x4, &(0x7f0000000600)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x5, r1, &(0x7f00000001c0)="e43076524bb960ddc39200dd28fbfa6999c94b177b082468a5fbd61b05af3f0ca8e09132993aa659ce303f2495d024e76dc5b2deb4", 0x35, 0x7, 0x0, 0x2, r0}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x9, 0x55e, r1, &(0x7f0000000280)="8246f39b5c4a929f9dbe3633896af94bf0de42509db6220e4b228adddb5be4ee00b012245b7ce4e4414a3536bc59b423319da9d35c11d4ce06abad628711c17382061413bf868a17eea3f9962708994a6e6bc922452dfc9533900d842a4aa00a29fe18efa8f5116e62119db23302985eb356a376b4f80e674dff4ad17f7c66d700d359a14773f0880d5d0bcf489622683ee30365b9734a", 0x97, 0x0, 0x0, 0x1}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x3, r1, &(0x7f0000000480)="7a9ed77a676175205fcd399ea5b51e7a3ee887bc7969c36d9c7ecc8d16953ae6c11af46d4427dcb0a5da495745386c8c0d8d10124de50c0fdd3f9891340ba552a113e9835adaf8b0a3d71c347ad8aaf45ff604cf76a7740264f758f69c89ddd98d550129b2f8a3555ececdc8f589978f9b9dd51cb871250cbe59a7baf73928fabc376f19682efcc3e49b0b3fc514d8497daa4fb6f11df0e757318020589c4363534380f45d4d602a25bbad5fcf6701fdb049", 0xb2, 0x3, 0x0, 0x3}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0xf, r0, &(0x7f0000002800)="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", 0x1000, 0x2}]) r6 = dup3(r4, r3, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r7, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000780)={0x44, 0x0, &(0x7f0000000900)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) syz_open_dev$sndmidi(&(0x7f00000012c0), 0xf, 0x4000) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000001440)={0x34, 0x0, &(0x7f0000001300)=[@clear_death={0x400c630f, 0x1}, @increfs_done, @request_death], 0xb2, 0x0, &(0x7f0000001340)="0e9849f1332c3a4f7cd80c990e6bb6b5979749a4fbaef24bc5bcc03ac73ad01da6441277f5ac3b4d0ab075522859b01dff8f24e16cd420439da93470adbb7411843f018e01848aec434d0395f241ae92dd0cf3938e77f47df6f809906c0b786554dc0a6c7b8bc7fb9cb6ef0a0f1e289e6f4b052caf63b0e8aa3ac1152a98ca42d9b635d74b1dc45c5b22064826b60e6d255449d2be489592a47b5d637360e10ee0435b501bcf51b1e96c8d97cd0318336eab"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 690.160479ms ago: executing program 4 (id=3106): getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000080)={0x0, @remote, @loopback}, &(0x7f0000000180)=0xc) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000a00)=ANY=[@ANYBLOB="0a000000c0000000b30000007f"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x19, 0x2, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000780)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYRESOCT=r1], 0xa) r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) syz_init_net_socket$ax25(0x3, 0x5, 0x6) connect$bt_rfcomm(r2, &(0x7f0000000040)={0x1f, @any, 0x2}, 0xa) r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r4, 0x84, 0xc, 0x0, 0x0) connect$bt_rfcomm(r3, &(0x7f00000001c0)={0x1f, @any, 0x1}, 0xa) shutdown(r2, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, 0x0, &(0x7f0000000000)='GPL\x00', 0xa, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$packet(0x11, 0x3, 0x300) r5 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r5, 0x0, 0x0) connect$bt_rfcomm(r5, &(0x7f0000000180)={0x1f, @any, 0x4}, 0xa) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000500)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x0, 0x2, 0x2, 0x3}}, 0x2e) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) bind$can_raw(r0, &(0x7f0000000000), 0x10) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) 305.424933ms ago: executing program 1 (id=3107): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000000)=ANY=[@ANYRES16=r1, @ANYRES16=r1, @ANYRESDEC=0x0], 0x38}}, 0x20000000) socket$nl_generic(0x10, 0x3, 0x10) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x15) chdir(&(0x7f0000000080)='./file0\x00') sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x94, 0x30, 0x1, 0x0, 0x0, {}, [{0x80, 0x1, [@m_ct={0x44, 0x12, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x80000000, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_tunnel_key={0x38, 0xf, 0x0, 0x0, {{0xf}, {0x4}, {0x6, 0x6, "ccbd"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x957d6e28f24f8add, 0x3}}}}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x804}, 0x4000090) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setpriority(0x2, 0x0, 0x17) r5 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000300)={0x0, 0x500, &(0x7f0000001200)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) r6 = socket(0x10, 0x3, 0x0) sendto$inet6(r6, &(0x7f0000000000)="7800000018002507b9409b14ffff00000204be04020506050e0204094300080004000000040010000d0068d0bf46d32345653600648d0a0012000200000049935ade4a460c89b6ec0cff3959547f509058ba86c902000000004a32000400160005000a0000000000e000e218d1ddf66ed538f25232500000", 0x78, 0x0, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={0xffffffffffffffff, 0x58, &(0x7f0000000340)}, 0x44) r7 = syz_open_dev$midi(&(0x7f00000001c0), 0xac, 0x20800) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r7, 0xc0205710, 0x0) r8 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$DVD_WRITE_STRUCT(r8, 0x2284, &(0x7f0000000d40)=@manufact={0x4, 0x3, 0x800, "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"}) openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 289.581451ms ago: executing program 4 (id=3108): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_crypto(0x10, 0x3, 0x15) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000540)={0x0, 0x1, 0x0, 0x1000, &(0x7f0000fef000/0x1000)=nil}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f00000001c0)={0x943b, 0xa, 0x204, 0x80000000, 0xffffffff, 0x80000000, 0x7a, 0x5}, 0x20) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x2, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xe}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x4) syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, 0x0) write$binfmt_script(r5, &(0x7f0000000100), 0xfffffd9d) r6 = socket(0x1e, 0x4, 0x0) connect$tipc(r6, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x1, 0x4}}, 0x10) sendfile(r6, r5, 0x0, 0x8010002b) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @rand_addr, 0x983a}, 0x1c) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r7, 0x0, 0x406f413, 0x0) 0s ago: executing program 5 (id=3109): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0) readv(r0, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0xf4}], 0x1) r1 = syz_open_pts(r0, 0x101) dup3(r1, r0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x2, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x6, 0xf}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x5}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x27}}, 0x1c) r5 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x41, &(0x7f0000000200), 0x4) sendto$inet6(r5, 0x0, 0x0, 0x24000800, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @local}, 0x1c) recvmmsg(r5, &(0x7f00000066c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001fc0)=""/148, 0x94}}], 0x1, 0x2000, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$binfmt_aout(r6, &(0x7f00000001c0)=ANY=[], 0xff2e) ioctl$TCSETS(r6, 0x40045431, &(0x7f0000000dc0)={0x0, 0x3, 0x0, 0xfffffffe, 0x15, "0062af7d82000000160000000000f738096304"}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001140)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) kernel console output (not intermixed with test programs): ns disabled [ 329.202588][T12721] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2068'. [ 329.277283][T12693] Set syz1 is full, maxelem 65536 reached [ 330.455745][T12768] overlayfs: failed to clone upperpath [ 331.088163][T12783] binder_alloc: 12782: binder_alloc_buf size 8 failed, no address space [ 331.091431][T12783] binder_alloc: allocated: 12288 (num: 1 largest: 12288), free: 0 (num: 0 largest: 0) [ 331.337648][T12789] binder: 12788:12789 unknown command 0 [ 331.339450][T12789] binder: 12788:12789 ioctl c0306201 80000080 returned -22 [ 331.785610][T12826] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 333.288436][ T40] audit: type=1800 audit(1748198897.732:1931): pid=12842 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2107" name="/" dev="fuse" ino=0 res=0 errno=0 [ 333.718593][ T40] audit: type=1800 audit(1748198898.162:1932): pid=12859 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2113" name="/" dev="fuse" ino=0 res=0 errno=0 [ 334.492621][T12901] kvm: pic: non byte read [ 334.506106][T12901] kvm: pic: non byte read [ 334.508812][T12901] kvm: pic: non byte read [ 334.511557][T12901] kvm: pic: non byte read [ 334.514346][T12901] kvm: pic: non byte read [ 334.517097][T12901] kvm: pic: level sensitive irq not supported [ 334.517368][T12901] kvm: pic: non byte read [ 334.523215][T12901] kvm: pic: non byte read [ 334.526416][T12901] kvm: pic: non byte read [ 334.529057][T12901] kvm: pic: non byte read [ 335.370030][T12922] pim6reg1: entered promiscuous mode [ 335.372007][T12922] pim6reg1: entered allmulticast mode syzkaller syzkaller login: [ 336.194151][ T10] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 336.355782][ T10] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 336.361866][ T10] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 336.367677][ T10] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 336.370496][ T10] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 336.374569][ T10] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 336.386606][ T10] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 336.389483][ T10] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 336.391965][ T10] usb 6-1: Product: syz [ 336.393310][ T10] usb 6-1: Manufacturer: syz [ 336.408789][ T10] cdc_wdm 6-1:1.0: skipping garbage [ 336.410526][ T10] cdc_wdm 6-1:1.0: skipping garbage [ 336.415147][ T10] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 336.417030][ T10] cdc_wdm 6-1:1.0: Unknown control protocol [ 336.505440][T12951] lo speed is unknown, defaulting to 1000 [ 336.512630][T12951] lo speed is unknown, defaulting to 1000 [ 336.681323][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 336.683623][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 336.685840][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 336.687981][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 336.690403][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 336.692485][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 336.694755][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 336.696818][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 336.698899][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 336.700982][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 336.703107][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 336.705358][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 336.707467][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 336.709543][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 336.711643][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 336.713776][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 336.715992][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 336.718045][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 336.720129][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 336.722160][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 336.724997][ T10] usb 6-1: USB disconnect, device number 15 [ 336.725049][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 337.613668][ C3] vcan0: j1939_tp_rxtimer: 0xffff88805bd11800: rx timeout, send abort [ 337.617408][ C3] vcan0: j1939_xtp_rx_abort_one: 0xffff88805bd11800: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 337.840015][ T40] audit: type=1326 audit(1748198902.282:1933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12986 comm="syz.4.2154" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fe2579 code=0x0 [ 338.444140][ T6482] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 338.594084][ T6482] usb 6-1: Using ep0 maxpacket: 16 [ 338.604684][ T6482] usb 6-1: config 0 has no interfaces? [ 338.681896][ T6482] usb 6-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 338.689193][ T6482] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 338.694712][ T6482] usb 6-1: Product: syz [ 338.698298][ T6482] usb 6-1: Manufacturer: syz [ 338.702722][ T6482] usb 6-1: SerialNumber: syz [ 338.713767][ T6482] usb 6-1: config 0 descriptor?? [ 338.926846][ T64] usb 6-1: USB disconnect, device number 16 [ 339.517492][T13036] tipc: Enabled bearer , priority 0 [ 339.524089][T13035] tipc: Resetting bearer [ 340.501607][T13051] binder: 13050:13051 ioctl c0306201 80000280 returned -14 [ 340.738324][T13035] tipc: Disabling bearer [ 340.869674][T13064] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2176'. [ 341.848342][T13116] syzkaller0: entered allmulticast mode [ 342.033476][T13129] lo speed is unknown, defaulting to 1000 [ 342.036741][T13129] lo speed is unknown, defaulting to 1000 [ 342.113448][T13133] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2193'. [ 343.191495][T13157] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 343.195486][T13157] batadv_slave_0: entered promiscuous mode [ 343.885676][T13177] lo speed is unknown, defaulting to 1000 [ 343.888325][T13177] lo speed is unknown, defaulting to 1000 [ 343.933218][ T40] audit: type=1326 audit(1748198908.372:1934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13176 comm="syz.3.2204" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f05579 code=0x0 [ 344.065068][T13181] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2205'. [ 344.773574][T13204] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2214'. [ 345.440164][T13227] overlayfs: failed to clone upperpath [ 345.574653][T13233] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2222'. [ 345.596845][T13232] netlink: 'syz.4.2223': attribute type 9 has an invalid length. [ 345.599606][T13232] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2223'. [ 346.073017][T13258] lo speed is unknown, defaulting to 1000 [ 346.075894][T13258] lo speed is unknown, defaulting to 1000 [ 346.916305][T13275] Invalid option length (1048347) for dns_resolver key [ 347.893797][T13304] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2247'. [ 347.897905][T13304] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2247'. [ 347.969134][ T40] audit: type=1800 audit(1748198912.412:1935): pid=13283 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2242" name="/" dev="fuse" ino=0 res=0 errno=0 [ 348.518690][T13328] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 349.036217][T13351] syz_tun: entered allmulticast mode [ 349.097040][T13351] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2258'. [ 349.112114][T13351] syz_tun (unregistering): left allmulticast mode [ 349.170603][T13356] bridge0: port 3(batadv0) entered disabled state [ 349.177869][T13356] bridge_slave_0: left allmulticast mode [ 349.179831][T13356] bridge0: port 1(bridge_slave_0) entered disabled state [ 349.184277][T13356] bridge_slave_1: left allmulticast mode [ 349.186769][T13356] bridge_slave_1: left promiscuous mode [ 349.188907][T13356] bridge0: port 2(bridge_slave_1) entered disabled state [ 349.193740][T13356] bond0: (slave bond_slave_0): Releasing backup interface [ 349.202699][T13356] bond0: (slave bond_slave_1): Releasing backup interface [ 349.222110][T13356] team0: Port device team_slave_0 removed [ 349.230144][T13356] team0: Port device team_slave_1 removed [ 349.233188][T13356] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 349.238498][T13356] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 349.242638][T13356] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 349.245141][T13356] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 349.262804][T13357] team0: Mode changed to "broadcast" [ 349.306629][T13356] tipc: Enabled bearer , priority 0 [ 349.379722][T13363] kvm: pic: non byte read [ 349.382726][T13363] kvm: pic: non byte read [ 349.388452][T13363] kvm: pic: non byte read [ 349.397100][T13363] kvm: pic: non byte read [ 349.402128][T13363] kvm: pic: non byte read [ 349.406305][T13363] kvm: pic: non byte read [ 349.410092][T13363] kvm: pic: non byte read [ 349.412851][T13363] kvm: pic: non byte read [ 350.373340][ T5941] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 350.378441][ T5941] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 350.382152][ T5941] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 350.389796][ T5941] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 350.396737][ T5941] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 350.421872][T13388] lo speed is unknown, defaulting to 1000 [ 350.426009][T13388] lo speed is unknown, defaulting to 1000 [ 350.530254][T13388] chnl_net:caif_netlink_parms(): no params data found [ 350.624808][T13388] bridge0: port 1(bridge_slave_0) entered blocking state [ 350.627186][T13388] bridge0: port 1(bridge_slave_0) entered disabled state [ 350.630031][T13388] bridge_slave_0: entered allmulticast mode [ 350.632753][T13388] bridge_slave_0: entered promiscuous mode [ 350.639478][T13388] bridge0: port 2(bridge_slave_1) entered blocking state [ 350.641920][T13388] bridge0: port 2(bridge_slave_1) entered disabled state [ 350.644258][T13388] bridge_slave_1: entered allmulticast mode [ 350.647996][T13388] bridge_slave_1: entered promiscuous mode [ 350.705335][T13388] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 350.712717][T13388] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 350.759752][T13388] team0: Port device team_slave_0 added [ 350.764425][T13388] team0: Port device team_slave_1 added [ 350.838277][T13388] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 350.840410][T13388] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 350.849288][T13388] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 350.854442][T13388] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 350.856637][T13388] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 350.865512][T13388] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 350.911746][T13388] hsr_slave_0: entered promiscuous mode [ 350.915177][T13388] hsr_slave_1: entered promiscuous mode [ 350.919431][T13388] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 350.922936][T13388] Cannot create hsr debugfs directory [ 351.136722][T13388] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 351.143601][T13388] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 351.148755][T13388] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 351.155810][T13388] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 351.179205][T13388] bridge0: port 2(bridge_slave_1) entered blocking state [ 351.181518][T13388] bridge0: port 2(bridge_slave_1) entered forwarding state [ 351.183929][T13388] bridge0: port 1(bridge_slave_0) entered blocking state [ 351.186292][T13388] bridge0: port 1(bridge_slave_0) entered forwarding state [ 351.251487][T13388] 8021q: adding VLAN 0 to HW filter on device bond0 [ 351.272223][ T1136] bridge0: port 1(bridge_slave_0) entered disabled state [ 351.279903][ T1136] bridge0: port 2(bridge_slave_1) entered disabled state [ 351.301931][T13388] 8021q: adding VLAN 0 to HW filter on device team0 [ 351.312756][ T1136] bridge0: port 1(bridge_slave_0) entered blocking state [ 351.315783][ T1136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 351.334400][ T65] bridge0: port 2(bridge_slave_1) entered blocking state [ 351.336773][ T65] bridge0: port 2(bridge_slave_1) entered forwarding state [ 351.570090][T13388] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 351.781548][T13388] veth0_vlan: entered promiscuous mode [ 351.786979][T13388] veth1_vlan: entered promiscuous mode [ 351.810303][T13388] veth0_macvtap: entered promiscuous mode [ 351.820209][T13388] veth1_macvtap: entered promiscuous mode [ 351.830699][T13388] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 351.838365][T13388] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 351.845205][T13388] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.848051][T13388] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.850944][T13388] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.853659][T13388] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.020273][ T79] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 352.022720][ T79] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 352.039658][ T79] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 352.042066][ T79] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 352.161722][T13437] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 352.484366][ T5951] Bluetooth: hci0: command tx timeout [ 352.532730][T13453] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 353.288771][T13481] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 353.377397][T13484] netlink: zone id is out of range [ 353.381169][T13484] netlink: zone id is out of range [ 353.384521][T13484] netlink: zone id is out of range [ 353.386158][T13484] netlink: zone id is out of range [ 353.387871][T13484] netlink: zone id is out of range [ 353.389493][T13484] netlink: zone id is out of range [ 353.391154][T13484] netlink: zone id is out of range [ 353.393018][T13484] netlink: del zone limit has 4 unknown bytes [ 353.434041][ T7895] usb 10-1: new full-speed USB device number 2 using dummy_hcd [ 353.846257][ T7895] usb 10-1: config 1 interface 0 has no altsetting 0 [ 353.850521][ T7895] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 353.853511][ T7895] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 353.856275][ T7895] usb 10-1: Product: syz [ 353.857612][ T7895] usb 10-1: Manufacturer: syz [ 353.859140][ T7895] usb 10-1: SerialNumber: syz [ 354.369429][ T7895] usblp 10-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 354.564076][ T5951] Bluetooth: hci0: command tx timeout [ 355.976301][ T40] audit: type=1326 audit(1748198920.422:1936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13536 comm="syz.2.2305" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf707e579 code=0x0 [ 356.095748][T13540] lo speed is unknown, defaulting to 1000 [ 356.098684][T13540] lo speed is unknown, defaulting to 1000 [ 356.334641][ C2] usblp0: nonzero write bulk status received: -71 [ 356.334979][ T64] usb 10-1: USB disconnect, device number 2 [ 356.347295][ T64] usblp0: removed [ 356.634116][ T5951] Bluetooth: hci0: command tx timeout [ 356.729037][ C3] vkms_vblank_simulate: vblank timer overrun [ 357.712489][ C3] vkms_vblank_simulate: vblank timer overrun [ 358.111117][T13585] Bluetooth: MGMT ver 1.23 [ 358.203714][T13590] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2319'. [ 358.329813][T13593] tipc: Enabling of bearer rejected, failed to enable media [ 358.375810][T13595] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 358.714227][ T5941] Bluetooth: hci0: command 0x0419 tx timeout [ 359.178776][ C3] vkms_vblank_simulate: vblank timer overrun [ 359.661095][T13619] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2326'. [ 359.896698][T13626] overlayfs: failed to clone upperpath [ 360.094738][T13636] evm: overlay not supported [ 360.654101][ T63] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 360.794182][ T5941] Bluetooth: hci0: command 0x0419 tx timeout [ 360.806240][ T63] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 360.809968][ T63] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 360.812841][ T63] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 360.815844][ T63] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 360.819925][ T63] usb 6-1: config 0 descriptor?? [ 361.034431][ T64] usb 6-1: USB disconnect, device number 17 [ 361.814203][ T64] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 361.982983][ T64] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 361.986900][ T64] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 361.991158][ T64] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 361.995591][ T64] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 362.001603][ T64] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 362.010601][ T64] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 362.014630][ T64] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 362.017882][ T64] usb 6-1: Product: syz [ 362.019643][ T64] usb 6-1: Manufacturer: syz [ 362.035903][ T64] cdc_wdm 6-1:1.0: skipping garbage [ 362.037578][ T64] cdc_wdm 6-1:1.0: skipping garbage [ 362.041205][ T64] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 362.043163][ T64] cdc_wdm 6-1:1.0: Unknown control protocol [ 362.324828][ T63] usb 6-1: USB disconnect, device number 18 [ 362.515928][T13678] lo speed is unknown, defaulting to 1000 [ 362.521318][T13678] lo speed is unknown, defaulting to 1000 [ 363.143113][T13669] kexec: Could not allocate control_code_buffer [ 363.265255][T13695] trusted_key: encrypted_key: master key parameter 'trusted:' is invalid [ 364.765917][T13731] lo speed is unknown, defaulting to 1000 [ 364.768964][T13731] lo speed is unknown, defaulting to 1000 [ 364.780910][T13733] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 364.912716][T13739] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 365.094936][T13746] lo speed is unknown, defaulting to 1000 [ 365.104342][T13746] lo speed is unknown, defaulting to 1000 [ 365.533460][T13755] befs: (nullb0): No write support. Marking filesystem read-only [ 365.541418][T13755] befs: (nullb0): invalid magic header [ 366.170116][T13775] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 366.825369][T13786] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2376'. [ 366.826885][T13787] overlayfs: failed to clone upperpath [ 366.835704][T13786] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 366.845165][T13786] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2376'. [ 367.052173][T13796] kvm: kvm [13795]: vcpu0, guest rIP: 0x28e Unhandled WRMSR(0x11e) = 0x3 [ 368.060747][T13815] autofs: Bad value for 'fd' [ 369.380723][T13843] 9pnet_fd: Insufficient options for proto=fd [ 369.477920][T13847] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2395'. [ 369.481682][T13847] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2395'. [ 369.995985][T13864] netlink: 71 bytes leftover after parsing attributes in process `syz.4.2401'. [ 371.062886][T13902] autofs: Bad value for 'fd' [ 371.098205][T13904] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2414'. [ 371.102404][T13904] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2414'. [ 371.241060][T13912] vlan0: entered promiscuous mode [ 371.243452][T13912] vlan0: entered allmulticast mode [ 371.246551][T13912] hsr_slave_1: entered allmulticast mode [ 371.256734][T13912] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2418'. [ 371.364311][ T5980] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 371.534130][ T5980] usb 10-1: Using ep0 maxpacket: 32 [ 371.541216][ T5980] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 371.556902][ T5980] usb 10-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 371.568971][ T5980] usb 10-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 371.580221][ T5980] usb 10-1: Product: syz [ 371.583553][ T5980] usb 10-1: Manufacturer: syz [ 371.589175][ T5980] usb 10-1: SerialNumber: syz [ 371.597431][ T5980] usb 10-1: config 0 descriptor?? [ 371.599700][T13906] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 371.604537][ T5980] hub 10-1:0.0: bad descriptor, ignoring hub [ 371.606649][ T5980] hub 10-1:0.0: probe with driver hub failed with error -5 [ 371.914467][ T5980] usb 10-1: USB disconnect, device number 3 [ 374.731637][T13985] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2438'. [ 374.759533][T13990] lo speed is unknown, defaulting to 1000 [ 374.763303][T13990] lo speed is unknown, defaulting to 1000 [ 375.375748][T14017] kvm: kvm [14016]: vcpu0, guest rIP: 0x1a3 Unhandled WRMSR(0xc1) = 0x8000 [ 375.740584][T14034] lo speed is unknown, defaulting to 1000 [ 375.743816][T14034] lo speed is unknown, defaulting to 1000 [ 377.085994][ T6482] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 377.274689][ T6482] usb 7-1: Using ep0 maxpacket: 16 [ 377.286880][ T6482] usb 7-1: config 64 has an invalid interface number: 176 but max is 0 [ 377.290277][ T6482] usb 7-1: config 64 has no interface number 0 [ 377.292949][ T6482] usb 7-1: config 64 interface 176 has no altsetting 0 [ 377.301785][ T6482] usb 7-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=14.8d [ 377.305645][ T6482] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 377.309108][ T6482] usb 7-1: Product: syz [ 377.310876][ T6482] usb 7-1: Manufacturer: syz [ 377.312536][ T6482] usb 7-1: SerialNumber: syz [ 377.581815][ T6482] peak_usb 7-1:64.176 can0: unable to request usb[type=0 value=1] err=-71 [ 377.589912][ T6482] peak_usb 7-1:64.176: unable to read PCAN-USB X6 firmware info (err -71) [ 377.705512][ T6482] peak_usb 7-1:64.176: probe with driver peak_usb failed with error -71 [ 377.727005][ T6482] usb 7-1: USB disconnect, device number 23 [ 379.714340][T14102] bond1: entered allmulticast mode [ 379.750746][T14102] bond1 (unregistering): Released all slaves [ 379.755844][T14105] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2474'. [ 379.816010][T14108] netlink: 'syz.5.2475': attribute type 1 has an invalid length. [ 379.830060][T14108] 8021q: adding VLAN 0 to HW filter on device bond1 [ 379.850291][T14108] ip6erspan0: entered promiscuous mode [ 379.854428][T14108] bond1: (slave ip6erspan0): making interface the new active one [ 379.866246][T14108] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link [ 379.938711][T14115] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2477'. [ 379.946107][T14115] vlan2: entered promiscuous mode [ 379.948296][T14115] bond0: entered promiscuous mode [ 379.950500][T14115] bond_slave_0: entered promiscuous mode [ 379.953750][T14115] bond_slave_1: entered promiscuous mode [ 380.077164][ T40] audit: type=1326 audit(1748294124.528:1937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14116 comm="syz.4.2478" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe2579 code=0x7fc00000 [ 380.172549][ T40] audit: type=1326 audit(1748294124.618:1938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14116 comm="syz.4.2478" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf7fe2579 code=0x7fc00000 [ 380.189285][ T40] audit: type=1326 audit(1748294124.618:1939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14116 comm="syz.4.2478" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf7fe25a7 code=0x7fc00000 [ 380.255869][T14123] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2480'. [ 380.764313][ T834] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 380.944092][ T834] usb 7-1: Using ep0 maxpacket: 8 [ 380.947120][ T834] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 380.949732][ T834] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 380.952889][ T834] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 380.956645][ T834] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 380.959721][ T834] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 380.963867][ T834] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 380.967221][ T834] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 381.181906][ T834] usb 7-1: usb_control_msg returned -32 [ 381.191861][ T834] usbtmc 7-1:16.0: can't read capabilities [ 381.204644][ T834] usb 7-1: USB disconnect, device number 24 [ 383.850636][T14168] kexec: Could not allocate control_code_buffer [ 385.147166][T14222] netlink: 'syz.4.2508': attribute type 1 has an invalid length. [ 385.167299][T14222] 8021q: adding VLAN 0 to HW filter on device bond1 [ 385.191995][T14222] ip6erspan0: entered promiscuous mode [ 385.195785][T14222] bond1: (slave ip6erspan0): making interface the new active one [ 385.198955][T14222] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link [ 385.404121][ T833] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 385.555618][ T833] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 385.558728][ T833] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 385.561905][ T833] usb 10-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 385.568076][ T833] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 385.570892][ T833] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 385.573533][ T833] usb 10-1: Product: syz [ 385.575017][ T833] usb 10-1: Manufacturer: syz [ 385.576494][ T833] usb 10-1: SerialNumber: syz [ 385.798246][ T833] usblp 10-1:1.0: usblp0: USB Unidirectional printer dev 4 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 386.091406][T14233] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 386.139422][ T5951] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 386.149948][ T5951] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 386.157117][T14236] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 386.209970][ T5951] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 386.222711][ C3] vkms_vblank_simulate: vblank timer overrun [ 386.263291][ T9] usb 10-1: USB disconnect, device number 4 [ 386.295518][ T5951] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 386.318460][ C3] vkms_vblank_simulate: vblank timer overrun [ 386.342470][ T5951] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 386.394634][ C3] vkms_vblank_simulate: vblank timer overrun [ 386.414497][T14220] usblp0: removed [ 386.482399][ C3] vkms_vblank_simulate: vblank timer overrun [ 386.526700][T14234] lo speed is unknown, defaulting to 1000 [ 386.529898][T14234] lo speed is unknown, defaulting to 1000 [ 386.847509][T14234] chnl_net:caif_netlink_parms(): no params data found [ 387.483254][ C3] vkms_vblank_simulate: vblank timer overrun [ 387.522233][ C3] vkms_vblank_simulate: vblank timer overrun [ 387.564247][T14234] bridge0: port 1(bridge_slave_0) entered blocking state [ 387.567970][T14234] bridge0: port 1(bridge_slave_0) entered disabled state [ 387.571490][T14234] bridge_slave_0: entered allmulticast mode [ 387.590359][T14234] bridge_slave_0: entered promiscuous mode [ 387.596942][T14234] bridge0: port 2(bridge_slave_1) entered blocking state [ 387.599910][T14234] bridge0: port 2(bridge_slave_1) entered disabled state [ 387.630705][T14234] bridge_slave_1: entered allmulticast mode [ 387.645493][T14234] bridge_slave_1: entered promiscuous mode [ 387.722177][ C3] vkms_vblank_simulate: vblank timer overrun [ 387.855428][ C3] vkms_vblank_simulate: vblank timer overrun [ 387.890390][T14234] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 387.933411][T14234] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 388.064761][ C3] vkms_vblank_simulate: vblank timer overrun [ 388.150143][ C3] vkms_vblank_simulate: vblank timer overrun [ 388.234194][T14234] team0: Port device team_slave_0 added [ 388.243263][T14234] team0: Port device team_slave_1 added [ 388.366104][ C3] vkms_vblank_simulate: vblank timer overrun [ 388.396773][T14234] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 388.399712][T14234] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 388.435764][T14234] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 388.458935][T14234] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 388.461697][T14234] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 388.474301][ T5951] Bluetooth: hci3: command tx timeout [ 388.481084][T14234] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 388.706169][ C3] vkms_vblank_simulate: vblank timer overrun [ 389.476144][T14234] hsr_slave_0: entered promiscuous mode [ 389.480634][T14234] hsr_slave_1: entered promiscuous mode [ 389.485827][T14234] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 389.489039][T14234] Cannot create hsr debugfs directory [ 389.865940][T14287] netlink: 161716 bytes leftover after parsing attributes in process `syz.1.2528'. [ 389.898144][ C3] vkms_vblank_simulate: vblank timer overrun [ 390.050207][ C3] vkms_vblank_simulate: vblank timer overrun [ 390.051157][T14289] openvswitch: netlink: Flow key attr not present in new flow. [ 390.205190][T14289] bond2: entered promiscuous mode [ 390.349905][T14234] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 390.397837][T14234] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 390.406311][T14234] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 390.433524][T14234] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 390.562890][ T5951] Bluetooth: hci3: command tx timeout [ 390.689622][T14234] 8021q: adding VLAN 0 to HW filter on device bond0 [ 390.707702][T14234] 8021q: adding VLAN 0 to HW filter on device team0 [ 390.717820][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 390.720787][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 390.780397][ C3] vkms_vblank_simulate: vblank timer overrun [ 390.805938][ T1184] bridge0: port 2(bridge_slave_1) entered blocking state [ 390.822345][ T1184] bridge0: port 2(bridge_slave_1) entered forwarding state [ 391.182248][ C3] vkms_vblank_simulate: vblank timer overrun [ 391.848000][T14234] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 392.501927][T14234] veth0_vlan: entered promiscuous mode [ 392.535907][T14234] veth1_vlan: entered promiscuous mode [ 392.580915][T14234] veth0_macvtap: entered promiscuous mode [ 392.597528][T14234] veth1_macvtap: entered promiscuous mode [ 392.638692][T14234] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 392.643248][ T5951] Bluetooth: hci3: command tx timeout [ 392.698854][T14234] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 392.707951][T14234] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.716995][T14234] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.734318][T14234] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.740291][T14234] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.951022][ T65] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 392.955591][ T65] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 393.014137][ C3] vkms_vblank_simulate: vblank timer overrun [ 393.056414][ T1200] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 393.106140][ T1200] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 393.256851][T14330] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2537'. [ 394.715339][ T5951] Bluetooth: hci3: command tx timeout [ 394.926960][T14358] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2543'. [ 394.978686][T14358] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2543'. [ 394.983541][T14358] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2543'. [ 394.989716][T14358] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2543'. [ 395.912578][T14369] netlink: zone id is out of range [ 395.931659][T14369] netlink: zone id is out of range [ 395.946672][T14369] netlink: zone id is out of range [ 395.949482][T14369] netlink: zone id is out of range [ 395.952664][T14369] netlink: zone id is out of range [ 395.967322][T14369] netlink: zone id is out of range [ 395.971463][T14369] netlink: zone id is out of range [ 396.011802][ C3] vkms_vblank_simulate: vblank timer overrun [ 396.057540][T14369] netlink: del zone limit has 4 unknown bytes [ 396.282919][T14368] netlink: 112 bytes leftover after parsing attributes in process `syz.4.2546'. [ 396.878157][ C3] vkms_vblank_simulate: vblank timer overrun [ 397.205658][ C3] vkms_vblank_simulate: vblank timer overrun [ 397.646028][ C3] vkms_vblank_simulate: vblank timer overrun [ 398.634045][ C3] vkms_vblank_simulate: vblank timer overrun [ 398.782091][ C3] vkms_vblank_simulate: vblank timer overrun [ 399.294085][ C3] vkms_vblank_simulate: vblank timer overrun [ 399.366019][ C3] vkms_vblank_simulate: vblank timer overrun [ 400.683456][T14411] random: crng reseeded on system resumption [ 401.011369][T14420] [ 402.244249][ T833] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 402.434142][ T833] usb 10-1: Using ep0 maxpacket: 16 [ 402.444077][ T833] usb 10-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 402.453941][ T833] usb 10-1: config 7 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 402.466567][ T833] usb 10-1: config 7 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 402.476015][ T833] usb 10-1: config 7 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 402.502217][ T833] usb 10-1: config 7 interface 0 has no altsetting 0 [ 402.506755][ T833] usb 10-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 402.513357][ T833] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 403.073047][ T833] input: HID 0458:5010 as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:7.0/0003:0458:5010.000C/input/input32 [ 403.074222][T14374] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 403.091985][ T833] kye 0003:0458:5010.000C: input,hiddev0,hidraw1: USB HID v2.00 Device [HID 0458:5010] on usb-dummy_hcd.5-1/input0 [ 403.212100][ C2] vkms_vblank_simulate: vblank timer overrun [ 403.477006][T14448] xt_CT: You must specify a L4 protocol and not use inversions on it [ 403.506496][T14374] usb 6-1: Using ep0 maxpacket: 8 [ 403.536019][T14374] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 403.542076][T14374] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 403.551031][T14374] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 403.565805][ C2] vkms_vblank_simulate: vblank timer overrun [ 403.572990][T14374] usb 6-1: config 0 descriptor?? [ 403.629995][ C2] vkms_vblank_simulate: vblank timer overrun [ 403.857634][T14374] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior1 [ 403.862070][ C2] vkms_vblank_simulate: vblank timer overrun [ 403.928148][ C2] vkms_vblank_simulate: vblank timer overrun [ 404.063411][T14374] usb 6-1: USB disconnect, device number 19 [ 404.122199][ T63] usb 10-1: USB disconnect, device number 5 [ 404.230228][ C2] vkms_vblank_simulate: vblank timer overrun [ 405.041988][ C2] vkms_vblank_simulate: vblank timer overrun [ 405.394004][ C2] vkms_vblank_simulate: vblank timer overrun [ 406.173907][ C2] vkms_vblank_simulate: vblank timer overrun [ 406.246035][ C2] vkms_vblank_simulate: vblank timer overrun [ 406.286139][ C2] vkms_vblank_simulate: vblank timer overrun [ 406.345782][T14468] lo speed is unknown, defaulting to 1000 [ 406.406620][T14468] lo speed is unknown, defaulting to 1000 [ 406.846017][T14478] wg1: entered promiscuous mode [ 406.897233][T14478] wg1: entered allmulticast mode [ 408.297991][ C2] vkms_vblank_simulate: vblank timer overrun [ 409.193938][ C2] vkms_vblank_simulate: vblank timer overrun [ 409.789976][ C2] vkms_vblank_simulate: vblank timer overrun [ 410.108162][T14515] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2589'. [ 411.219457][ C2] vkms_vblank_simulate: vblank timer overrun [ 412.308047][ C2] vkms_vblank_simulate: vblank timer overrun [ 412.368048][ C2] vkms_vblank_simulate: vblank timer overrun [ 414.214063][ C2] vkms_vblank_simulate: vblank timer overrun [ 414.961901][ C2] vkms_vblank_simulate: vblank timer overrun [ 416.054529][ C2] vkms_vblank_simulate: vblank timer overrun [ 416.761276][ C2] vkms_vblank_simulate: vblank timer overrun [ 417.101981][ C2] vkms_vblank_simulate: vblank timer overrun [ 417.341980][ C2] vkms_vblank_simulate: vblank timer overrun [ 417.410388][ C2] vkms_vblank_simulate: vblank timer overrun [ 418.313938][ C2] vkms_vblank_simulate: vblank timer overrun [ 419.079452][ C2] vkms_vblank_simulate: vblank timer overrun [ 420.140168][T14641] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2621'. [ 422.774902][ C2] vkms_vblank_simulate: vblank timer overrun [ 423.437847][ C2] vkms_vblank_simulate: vblank timer overrun [ 423.969964][ C2] vkms_vblank_simulate: vblank timer overrun [ 424.833819][ C2] vkms_vblank_simulate: vblank timer overrun [ 425.055419][T14680] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 425.146123][T14697] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2637'. [ 426.327596][T14709] hfs: unable to load iocharset "io#harset" [ 427.626059][ C2] vkms_vblank_simulate: vblank timer overrun [ 427.817883][ C2] vkms_vblank_simulate: vblank timer overrun [ 427.979230][ C2] vkms_vblank_simulate: vblank timer overrun [ 428.021825][ C2] vkms_vblank_simulate: vblank timer overrun [ 428.904055][T14745] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2650'. [ 428.915176][T14745] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2650'. [ 428.977861][ C2] vkms_vblank_simulate: vblank timer overrun [ 431.944704][T14782] lo speed is unknown, defaulting to 1000 [ 431.949030][T14782] lo speed is unknown, defaulting to 1000 [ 433.552353][T14806] netlink: 'syz.4.2669': attribute type 2 has an invalid length. [ 436.520653][T14866] syz.5.2676: attempt to access beyond end of device [ 436.520653][T14866] nbd5: rw=0, sector=64, nr_sectors = 2 limit=0 [ 436.579931][T14866] syz.5.2676: attempt to access beyond end of device [ 436.579931][T14866] nbd5: rw=0, sector=512, nr_sectors = 2 limit=0 [ 436.585991][T14866] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 436.609774][T14866] syz.5.2676: attempt to access beyond end of device [ 436.609774][T14866] nbd5: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 436.620444][T14863] nbd5: detected capacity change from 0 to 67108884 [ 436.624773][T14866] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 436.647649][T14866] block nbd5: Send control failed (result -89) [ 436.650703][T14866] block nbd5: Request send failed, requeueing [ 436.671728][ T5951] block nbd5: Receive control failed (result -32) [ 436.684032][T14063] block nbd5: Dead connection, failed to find a fallback [ 436.687316][T14063] block nbd5: shutting down sockets [ 436.690042][T14063] blk_print_req_error: 127 callbacks suppressed [ 436.690054][T14063] I/O error, dev nbd5, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 436.746280][T14866] I/O error, dev nbd5, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 436.748243][ T6123] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 436.764118][ T6123] buffer_io_error: 87 callbacks suppressed [ 436.764131][ T6123] Buffer I/O error on dev nbd5, logical block 0, async page read [ 436.783729][T14866] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 436.792358][T14866] I/O error, dev nbd5, sector 67108880 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 436.820987][ T6123] I/O error, dev nbd5, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 436.825182][T14866] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=16777220, location=16777220 [ 436.900673][ T6123] Buffer I/O error on dev nbd5, logical block 1, async page read [ 436.904385][ T6123] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 436.920539][ T6123] Buffer I/O error on dev nbd5, logical block 0, async page read [ 436.943293][ T6123] I/O error, dev nbd5, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 437.006776][ T6123] Buffer I/O error on dev nbd5, logical block 1, async page read [ 437.016119][ T6123] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 437.021028][ T6123] Buffer I/O error on dev nbd5, logical block 0, async page read [ 437.024672][ T6123] I/O error, dev nbd5, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 437.031855][ T6123] Buffer I/O error on dev nbd5, logical block 1, async page read [ 437.035259][ T6123] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 437.042206][ T6123] Buffer I/O error on dev nbd5, logical block 0, async page read [ 437.045480][ T6123] Buffer I/O error on dev nbd5, logical block 1, async page read [ 437.049446][ T6123] Buffer I/O error on dev nbd5, logical block 0, async page read [ 437.053398][ T6123] Buffer I/O error on dev nbd5, logical block 1, async page read [ 437.057097][ T6123] ldm_validate_partition_table(): Disk read failed. [ 437.101533][T14866] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=16776964, location=16776964 [ 437.144263][T14866] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=16777219, location=16777219 [ 437.146929][ T6123] Dev nbd5: unable to read RDB block 0 [ 437.149037][T14866] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=16776963, location=16776963 [ 437.170955][ T6123] nbd5: unable to read partition table [ 437.250090][T14866] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=16777218, location=16777218 [ 437.287741][ T6123] ldm_validate_partition_table(): Disk read failed. [ 437.293392][ T6123] Dev nbd5: unable to read RDB block 0 [ 437.324510][ T6123] nbd5: unable to read partition table [ 437.541427][T14875] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(10) [ 437.546122][T14875] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 437.556769][T14875] vhci_hcd vhci_hcd.0: Device attached [ 437.563724][T14875] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 437.603320][T14866] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=16776962, location=16776962 [ 437.614964][T14875] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(14) [ 437.618880][T14875] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 437.624404][T14875] vhci_hcd vhci_hcd.0: Device attached [ 437.631749][T14866] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=16777070, location=16777070 [ 437.631934][T14866] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=16776814, location=16776814 [ 437.633627][T14866] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=16777068, location=16777068 [ 437.653157][T14875] vhci_hcd vhci_hcd.0: pdev(1) rhport(3) sockfd(16) [ 437.679666][T14875] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 437.682419][T14866] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=16776812, location=16776812 [ 437.712142][T14875] vhci_hcd vhci_hcd.0: Device attached [ 437.762347][T14866] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 437.774807][ T63] vhci_hcd: vhci_device speed not set [ 437.785700][T14883] vhci_hcd vhci_hcd.0: pdev(1) rhport(4) sockfd(18) [ 437.790241][T14883] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 437.799059][T14875] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 437.800641][T14883] vhci_hcd vhci_hcd.0: Device attached [ 437.811096][T14875] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 437.838980][ T63] usb 39-1: new full-speed USB device number 3 using vhci_hcd [ 437.870772][T14866] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 437.880547][T14866] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=8388609, location=8388609 [ 437.888448][T14866] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=8388353, location=8388353 [ 437.904601][T14881] vhci_hcd: connection closed [ 437.905661][ T1200] vhci_hcd: stop threads [ 437.905783][T14879] vhci_hcd: connection closed [ 437.907566][ T1200] vhci_hcd: release socket [ 437.907657][ T1200] vhci_hcd: disconnect device [ 437.908852][T14866] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=8388608, location=8388608 [ 437.909827][T14876] vhci_hcd: connection reset by peer [ 437.910165][ T1200] vhci_hcd: stop threads [ 437.910176][ T1200] vhci_hcd: release socket [ 437.910243][ T1200] vhci_hcd: disconnect device [ 437.912654][T14866] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=8388352, location=8388352 [ 437.917461][ T12] vhci_hcd: stop threads [ 437.932332][T14866] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=8388607, location=8388607 [ 437.938014][ T12] vhci_hcd: release socket [ 437.947043][T14866] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=8388351, location=8388351 [ 437.955262][ T12] vhci_hcd: disconnect device [ 437.972361][T14866] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=8388459, location=8388459 [ 437.977158][T14866] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=8388203, location=8388203 [ 438.006876][T14884] vhci_hcd: connection closed [ 438.010303][T14866] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=8388457, location=8388457 [ 438.026738][ T12] vhci_hcd: stop threads [ 438.028670][ T12] vhci_hcd: release socket [ 438.044531][ T12] vhci_hcd: disconnect device [ 438.109300][T14866] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=8388201, location=8388201 [ 438.115897][T14866] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 438.133791][T14866] UDF-fs: warning (device nbd5): udf_fill_super: No partition found (1) [ 439.110764][T14896] netlink: 'syz.1.2683': attribute type 2 has an invalid length. [ 441.009686][ C2] vkms_vblank_simulate: vblank timer overrun [ 441.378920][T14929] (unnamed net_device) (uninitialized): Unable to set up delay as MII monitoring is disabled [ 441.555008][T14921] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2689'. [ 441.618976][T14933] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 442.461855][ C2] vkms_vblank_simulate: vblank timer overrun [ 442.609624][T14952] overlayfs: failed to clone upperpath [ 443.291233][ T63] vhci_hcd: vhci_device speed not set [ 443.368525][T14962] IPVS: length: 4096 != 8 [ 443.406209][ C2] vkms_vblank_simulate: vblank timer overrun [ 443.806138][T14972] fuse: Bad value for 'fd' [ 443.836471][ C2] vkms_vblank_simulate: vblank timer overrun [ 443.885648][ C2] vkms_vblank_simulate: vblank timer overrun [ 444.257582][ C2] vkms_vblank_simulate: vblank timer overrun [ 444.401349][ C2] vkms_vblank_simulate: vblank timer overrun [ 444.546736][ C2] vkms_vblank_simulate: vblank timer overrun [ 444.664873][T14968] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(9) [ 444.679914][T14968] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 444.710982][T14968] vhci_hcd vhci_hcd.0: Device attached [ 444.725643][ C2] vkms_vblank_simulate: vblank timer overrun [ 445.005173][T14975] vhci_hcd: connection closed [ 445.018851][ T1200] vhci_hcd: stop threads [ 445.038414][ T1200] vhci_hcd: release socket [ 445.056442][ T1200] vhci_hcd: disconnect device [ 445.111317][T14374] vhci_hcd: vhci_device speed not set [ 445.409595][ C2] vkms_vblank_simulate: vblank timer overrun [ 445.793772][ C2] vkms_vblank_simulate: vblank timer overrun [ 446.157617][ C2] vkms_vblank_simulate: vblank timer overrun [ 446.218277][T14999] overlayfs: failed to clone upperpath [ 446.261649][ C2] vkms_vblank_simulate: vblank timer overrun [ 446.293584][T14994] netlink: 'syz.1.2707': attribute type 20 has an invalid length. [ 446.566673][T15003] 8021q: adding VLAN 0 to HW filter on device bond0 [ 446.576369][T15003] bond0: (slave rose0): Enslaving as an active interface with an up link [ 448.485677][T15050] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(4) [ 448.489020][T15050] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 448.537813][T15050] vhci_hcd vhci_hcd.0: Device attached [ 449.227344][T15059] syz.6.2716 (15059) used greatest stack depth: 19896 bytes left [ 449.560578][T14374] usb 47-1: new high-speed USB device number 3 using vhci_hcd [ 450.025213][T15072] lo speed is unknown, defaulting to 1000 [ 450.030927][T15072] lo speed is unknown, defaulting to 1000 [ 451.115398][T15080] 9pnet_virtio: no channels available for device syz [ 451.311096][T15051] vhci_hcd: connection reset by peer [ 451.316765][ T12] vhci_hcd: stop threads [ 451.318848][ T12] vhci_hcd: release socket [ 451.321170][ T12] vhci_hcd: disconnect device [ 452.249861][T15085] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2721'. [ 452.606026][T15093] lo speed is unknown, defaulting to 1000 [ 452.616340][T15093] lo speed is unknown, defaulting to 1000 [ 452.862364][ T40] audit: type=1326 audit(1748294194.194:1940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15090 comm="syz.6.2725" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fc4579 code=0x0 [ 453.527119][T15115] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2728'. [ 455.029522][T14374] vhci_hcd: vhci_device speed not set [ 459.102555][ T7895] usb 11-1: new high-speed USB device number 2 using dummy_hcd [ 459.288584][ T7895] usb 11-1: config 0 has no interfaces? [ 459.291101][ T7895] usb 11-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 459.320444][ T7895] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 459.345556][ T7895] usb 11-1: config 0 descriptor?? [ 459.864930][ T9] usb 11-1: USB disconnect, device number 2 [ 459.990092][T15184] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2741'. [ 461.300408][ T5951] Bluetooth: hci3: link tx timeout [ 461.303559][ T5951] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 461.778329][T15200] Bluetooth: hci3: link tx timeout [ 461.781115][T15200] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 461.904465][ T6123] udevd[6123]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 463.650218][T15200] Bluetooth: hci3: command 0x0405 tx timeout [ 464.241907][T15218] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2748'. [ 465.621629][ T10] usb 11-1: new high-speed USB device number 3 using dummy_hcd [ 465.967786][ T10] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 465.972547][ T10] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 465.976468][ T10] usb 11-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 466.003686][ T10] usb 11-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 466.009420][ T10] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 466.235129][ T10] usb 11-1: config 0 descriptor?? [ 467.168141][T15240] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 467.200522][T15240] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 467.354245][ T10] usbhid 11-1:0.0: can't add hid device: -71 [ 467.382444][ T10] usbhid 11-1:0.0: probe with driver usbhid failed with error -71 [ 467.398791][ T10] usb 11-1: USB disconnect, device number 3 [ 468.838310][T15280] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2766'. [ 468.878518][T15280] netlink: 'syz.1.2766': attribute type 1 has an invalid length. [ 468.882512][T15280] netlink: 'syz.1.2766': attribute type 2 has an invalid length. [ 471.110669][T15310] syz.5.2772: attempt to access beyond end of device [ 471.110669][T15310] nbd5: rw=0, sector=64, nr_sectors = 2 limit=0 [ 471.116291][T15310] syz.5.2772: attempt to access beyond end of device [ 471.116291][T15310] nbd5: rw=0, sector=512, nr_sectors = 2 limit=0 [ 471.182521][T15310] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 471.189454][T15310] syz.5.2772: attempt to access beyond end of device [ 471.189454][T15310] nbd5: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 471.221563][T15309] nbd5: detected capacity change from 0 to 67108884 [ 471.245995][ T6123] block nbd5: Send control failed (result -89) [ 471.261988][ T6123] block nbd5: Request send failed, requeueing [ 471.265928][T15310] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 471.272708][ T5951] block nbd5: Receive control failed (result -32) [ 471.318938][ T6090] block nbd5: Dead connection, failed to find a fallback [ 471.334740][ T6090] block nbd5: shutting down sockets [ 471.337166][ T6090] blk_print_req_error: 83 callbacks suppressed [ 471.337179][ T6090] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 471.338280][ T6123] I/O error, dev nbd5, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 471.339868][ T6090] buffer_io_error: 56 callbacks suppressed [ 471.339881][ T6090] Buffer I/O error on dev nbd5, logical block 0, async page read [ 471.352219][ T6123] Buffer I/O error on dev nbd5, logical block 1, async page read [ 471.421893][ T6123] I/O error, dev nbd5, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 471.447118][ T6123] Buffer I/O error on dev nbd5, logical block 2, async page read [ 471.450503][ T6123] I/O error, dev nbd5, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 471.455725][ T6123] Buffer I/O error on dev nbd5, logical block 3, async page read [ 471.466990][ T6123] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 471.475501][ T6123] Buffer I/O error on dev nbd5, logical block 0, async page read [ 471.480386][ T6123] I/O error, dev nbd5, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 471.486366][ T6123] Buffer I/O error on dev nbd5, logical block 1, async page read [ 471.490552][ T6123] I/O error, dev nbd5, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 471.495620][ T6123] Buffer I/O error on dev nbd5, logical block 2, async page read [ 471.500161][ T6123] I/O error, dev nbd5, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 471.505153][ T6123] Buffer I/O error on dev nbd5, logical block 3, async page read [ 471.512778][T15310] I/O error, dev nbd5, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 471.519334][ T6123] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 471.524702][ T6123] Buffer I/O error on dev nbd5, logical block 0, async page read [ 471.529670][ T6123] Buffer I/O error on dev nbd5, logical block 1, async page read [ 471.534457][ T6123] ldm_validate_partition_table(): Disk read failed. [ 471.536016][T15310] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 471.548654][ T6123] Dev nbd5: unable to read RDB block 0 [ 471.554659][T15310] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=16777220, location=16777220 [ 471.557846][ T6123] nbd5: unable to read partition table [ 471.560879][T15310] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=16776964, location=16776964 [ 471.579760][T15310] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=16777219, location=16777219 [ 471.585287][T15310] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=16776963, location=16776963 [ 471.592214][ T6123] ldm_validate_partition_table(): Disk read failed. [ 471.596106][ T6123] Dev nbd5: unable to read RDB block 0 [ 471.608038][ T6123] nbd5: unable to read partition table [ 471.636401][T15310] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=16777218, location=16777218 [ 471.644367][T15310] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=16776962, location=16776962 [ 471.650735][ T6123] ldm_validate_partition_table(): Disk read failed. [ 471.653695][T15310] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=16777070, location=16777070 [ 471.659161][ T6123] Dev nbd5: unable to read RDB block 0 [ 471.660559][T15310] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=16776814, location=16776814 [ 471.664046][ T6123] nbd5: unable to read partition table [ 471.679986][T15310] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=16777068, location=16777068 [ 471.687096][T15310] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=16776812, location=16776812 [ 471.694025][T15310] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 471.702711][T15310] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 471.711031][T15310] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=8388609, location=8388609 [ 471.722004][T15310] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=8388353, location=8388353 [ 471.733770][T15310] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=8388608, location=8388608 [ 471.738928][ T6149] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 471.744012][T15310] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=8388352, location=8388352 [ 471.760963][T15310] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=8388607, location=8388607 [ 471.762038][ T6123] ldm_validate_partition_table(): Disk read failed. [ 471.767910][T15310] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=8388351, location=8388351 [ 471.768081][T15310] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=8388459, location=8388459 [ 471.791926][ T6123] Dev nbd5: unable to read RDB block 0 [ 471.794479][T15310] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=8388203, location=8388203 [ 471.798005][ T6123] nbd5: unable to read partition table [ 471.803933][T15310] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=8388457, location=8388457 [ 471.804087][T15310] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=8388201, location=8388201 [ 471.804251][T15310] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 471.804269][T15310] UDF-fs: warning (device nbd5): udf_fill_super: No partition found (1) [ 472.173057][ T6149] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 472.620940][ T6149] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 472.637080][ T6149] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 472.644649][ T6149] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 472.652037][ T6149] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 472.660022][ T6149] usb 6-1: config 0 descriptor?? [ 472.864933][T15332] wg1: entered promiscuous mode [ 472.881480][T15332] wg1: entered allmulticast mode [ 473.494359][T15312] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 473.502414][T15312] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 473.996693][ T6149] usbhid 6-1:0.0: can't add hid device: -71 [ 474.001303][ T6149] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 474.034638][ T6149] usb 6-1: USB disconnect, device number 20 [ 474.110364][ T7895] IPVS: starting estimator thread 0... [ 474.233631][T15346] IPVS: using max 27 ests per chain, 64800 per kthread [ 474.830664][T15353] syz.1.2784: attempt to access beyond end of device [ 474.830664][T15353] nbd1: rw=0, sector=64, nr_sectors = 1 limit=0 [ 474.838077][T15353] syz.1.2784: attempt to access beyond end of device [ 474.838077][T15353] nbd1: rw=0, sector=256, nr_sectors = 1 limit=0 [ 474.878849][T15353] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 474.904342][T15353] syz.1.2784: attempt to access beyond end of device [ 474.904342][T15353] nbd1: rw=0, sector=512, nr_sectors = 1 limit=0 [ 474.909726][T15353] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 474.943671][T15353] syz.1.2784: attempt to access beyond end of device [ 474.943671][T15353] nbd1: rw=0, sector=64, nr_sectors = 2 limit=0 [ 474.956332][T15353] syz.1.2784: attempt to access beyond end of device [ 474.956332][T15353] nbd1: rw=0, sector=512, nr_sectors = 2 limit=0 [ 474.981970][T15353] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 475.003900][T15353] syz.1.2784: attempt to access beyond end of device [ 475.003900][T15353] nbd1: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 475.009379][T15353] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 475.015986][T15353] syz.1.2784: attempt to access beyond end of device [ 475.015986][T15353] nbd1: rw=0, sector=64, nr_sectors = 4 limit=0 [ 475.024327][T15353] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 475.029623][T15353] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 475.036175][T15353] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 475.042872][T15353] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 475.049170][T15353] UDF-fs: warning (device nbd1): udf_fill_super: No partition found (1) [ 475.851172][T15361] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2785'. [ 475.857312][T15361] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2785'. [ 475.862755][T15361] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2785'. [ 475.868565][T15361] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2785'. [ 475.876328][T15361] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2785'. [ 475.882796][T15361] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2785'. [ 475.886599][T15361] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2785'. [ 475.890740][T15361] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2785'. [ 475.895683][T15361] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2785'. [ 475.901371][T15361] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2785'. [ 476.044000][T15365] netlink: 'syz.6.2786': attribute type 1 has an invalid length. [ 476.072579][T15365] netlink: 'syz.6.2786': attribute type 1 has an invalid length. [ 476.617548][T15373] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(8) [ 476.622550][T15373] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 476.734102][T15377] vhci_hcd vhci_hcd.0: pdev(5) rhport(1) sockfd(11) [ 476.743073][T15377] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 476.759086][T15373] vhci_hcd vhci_hcd.0: Device attached [ 476.785352][T15372] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 476.791401][T15377] vhci_hcd vhci_hcd.0: Device attached [ 476.802549][T15372] vhci_hcd vhci_hcd.0: pdev(5) rhport(3) sockfd(17) [ 476.806751][T15372] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 476.822679][T15372] vhci_hcd vhci_hcd.0: Device attached [ 476.879373][T15372] vhci_hcd vhci_hcd.0: pdev(5) rhport(4) sockfd(13) [ 476.882290][T15372] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 476.888491][T15372] vhci_hcd vhci_hcd.0: Device attached [ 476.928860][T15372] vhci_hcd vhci_hcd.0: pdev(5) rhport(5) sockfd(20) [ 476.933330][T15372] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 476.936958][T15372] vhci_hcd vhci_hcd.0: Device attached [ 476.940531][T15372] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 476.953410][T15372] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 476.966925][T13435] vhci_hcd: vhci_device speed not set [ 476.970428][T15372] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 476.994589][T15378] vhci_hcd: connection closed [ 476.994845][T15382] vhci_hcd: connection closed [ 476.995013][ T1200] vhci_hcd: stop threads [ 476.999337][T15385] vhci_hcd: connection closed [ 477.000270][T15388] vhci_hcd: connection closed [ 477.002610][ T1200] vhci_hcd: release socket [ 477.009050][ T1200] vhci_hcd: disconnect device [ 477.009370][T15375] vhci_hcd: connection closed [ 477.014136][ T1200] vhci_hcd: stop threads [ 477.017602][ T1200] vhci_hcd: release socket [ 477.019635][ T1200] vhci_hcd: disconnect device [ 477.045800][ T1200] vhci_hcd: stop threads [ 477.060149][T13435] usb 47-1: new full-speed USB device number 4 using vhci_hcd [ 477.078077][ T1200] vhci_hcd: release socket [ 477.078165][ T1200] vhci_hcd: disconnect device [ 477.078253][ T1200] vhci_hcd: stop threads [ 477.102696][T15376] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 477.105554][ T1200] vhci_hcd: release socket [ 477.108412][ T1200] vhci_hcd: disconnect device [ 477.111313][ T1200] vhci_hcd: stop threads [ 477.114105][ T1200] vhci_hcd: release socket [ 477.321483][ T1200] vhci_hcd: disconnect device [ 478.145286][ C1] vkms_vblank_simulate: vblank timer overrun [ 478.191359][ T10] IPVS: starting estimator thread 0... [ 478.312297][T15404] IPVS: using max 31 ests per chain, 74400 per kthread [ 480.561321][ C1] vkms_vblank_simulate: vblank timer overrun [ 481.321394][ C1] vkms_vblank_simulate: vblank timer overrun [ 481.616323][T15447] __nla_validate_parse: 43 callbacks suppressed [ 481.616389][T15447] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2801'. [ 481.875446][T15451] lo speed is unknown, defaulting to 1000 [ 481.928762][T15451] lo speed is unknown, defaulting to 1000 [ 482.482929][T15200] Bluetooth: hci0: command 0x0419 tx timeout [ 482.569745][T13435] vhci_hcd: vhci_device speed not set [ 482.794498][T15462] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2804'. [ 482.994160][ C1] vkms_vblank_simulate: vblank timer overrun [ 483.161475][ C1] vkms_vblank_simulate: vblank timer overrun [ 490.839312][T15515] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 491.687628][T15517] netlink: 44 bytes leftover after parsing attributes in process `syz.6.2819'. [ 491.772017][ T1114] sr 2:0:0:0: [sr0] tag#17 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 491.848165][ T1114] sr 2:0:0:0: [sr0] tag#17 Sense Key : Illegal Request [current] [ 491.851412][ T1114] sr 2:0:0:0: [sr0] tag#17 Add. Sense: Invalid command operation code [ 491.856369][ T1114] sr 2:0:0:0: [sr0] tag#17 CDB: Write(10) 2a 00 00 00 00 00 00 00 04 00 [ 491.897326][ T1114] blk_print_req_error: 136 callbacks suppressed [ 491.897344][ T1114] critical target error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 2 prio class 0 [ 491.910108][ T1114] buffer_io_error: 109 callbacks suppressed [ 491.910121][ T1114] Buffer I/O error on dev sr0, logical block 0, lost async page write [ 491.928876][ T1114] Buffer I/O error on dev sr0, logical block 1, lost async page write [ 494.004183][T15540] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 494.358134][T15539] netlink: 'syz.6.2823': attribute type 10 has an invalid length. [ 494.381650][T15539] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2823'. [ 494.460744][T15540] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 494.756965][T15539] team0: Port device geneve0 added [ 495.079889][T15540] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 495.412127][T15540] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 496.395112][T15540] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 496.450760][T15540] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 496.476469][T15540] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 496.495371][T15540] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 497.253111][T15559] ALSA: mixer_oss: invalid OSS volume '18446744073709551615' [ 497.369494][T15570] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2839'. [ 497.600650][T15572] netlink: 452 bytes leftover after parsing attributes in process `syz.1.2839'. [ 497.612028][T15572] netlink: 452 bytes leftover after parsing attributes in process `syz.1.2839'. [ 498.694001][T15574] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2832'. [ 502.354869][ T57] Process accounting resumed [ 505.629058][T15642] bio_check_eod: 5 callbacks suppressed [ 505.629079][T15642] syz.1.2847: attempt to access beyond end of device [ 505.629079][T15642] nbd1: rw=0, sector=64, nr_sectors = 2 limit=0 [ 505.637989][T15642] syz.1.2847: attempt to access beyond end of device [ 505.637989][T15642] nbd1: rw=0, sector=512, nr_sectors = 2 limit=0 [ 505.659239][T15642] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 505.666020][T15642] syz.1.2847: attempt to access beyond end of device [ 505.666020][T15642] nbd1: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 505.670972][T15638] nbd1: detected capacity change from 0 to 67108884 [ 505.678210][T15642] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 505.682913][T15642] block nbd1: Send control failed (result -89) [ 505.685739][T15642] block nbd1: Request send failed, requeueing [ 505.695427][ T5951] block nbd1: Receive control failed (result -32) [ 505.696530][T15578] block nbd1: Dead connection, failed to find a fallback [ 505.737970][T15578] block nbd1: shutting down sockets [ 505.740765][ T6078] I/O error, dev nbd1, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 505.749422][T15578] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 505.752854][T15642] I/O error, dev nbd1, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 505.755178][T15578] Buffer I/O error on dev nbd1, logical block 0, async page read [ 505.810127][T15642] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 505.815746][T15642] I/O error, dev nbd1, sector 67108880 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 505.826397][T15642] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=16777220, location=16777220 [ 505.833386][T15578] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 505.836250][T15642] I/O error, dev nbd1, sector 67107856 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 505.840830][T15578] Buffer I/O error on dev nbd1, logical block 1, async page read [ 505.852386][T15578] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 505.855235][T15642] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=16776964, location=16776964 [ 505.860210][T15578] Buffer I/O error on dev nbd1, logical block 0, async page read [ 505.872905][T15642] I/O error, dev nbd1, sector 67108876 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 505.880206][T15578] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 505.880296][T15578] Buffer I/O error on dev nbd1, logical block 1, async page read [ 505.892087][T15642] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=16777219, location=16777219 [ 505.898351][T15578] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 505.903735][T15578] Buffer I/O error on dev nbd1, logical block 0, async page read [ 505.915005][T15578] Buffer I/O error on dev nbd1, logical block 1, async page read [ 505.920413][T15578] Buffer I/O error on dev nbd1, logical block 0, async page read [ 505.925051][T15578] Buffer I/O error on dev nbd1, logical block 1, async page read [ 505.927710][T15642] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=16776963, location=16776963 [ 505.938486][T15578] Buffer I/O error on dev nbd1, logical block 0, async page read [ 505.939882][T15642] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=16777218, location=16777218 [ 505.954732][T15578] Buffer I/O error on dev nbd1, logical block 1, async page read [ 505.959088][T15642] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=16776962, location=16776962 [ 505.969591][T15578] ldm_validate_partition_table(): Disk read failed. [ 505.979243][T15642] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=16777070, location=16777070 [ 505.984318][T15578] Dev nbd1: unable to read RDB block 0 [ 505.998010][T15642] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=16776814, location=16776814 [ 506.007853][T15578] nbd1: unable to read partition table [ 506.018483][T15642] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=16777068, location=16777068 [ 506.026298][T15642] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=16776812, location=16776812 [ 506.035391][T15642] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 506.042908][T15642] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 506.054306][T15642] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=8388609, location=8388609 [ 506.064346][T15642] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=8388353, location=8388353 [ 506.081079][T15642] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=8388608, location=8388608 [ 506.082355][T15578] ldm_validate_partition_table(): Disk read failed. [ 506.089658][T15642] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=8388352, location=8388352 [ 506.089815][T15642] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=8388607, location=8388607 [ 506.089956][T15642] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=8388351, location=8388351 [ 506.090097][T15642] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=8388459, location=8388459 [ 506.090230][T15642] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=8388203, location=8388203 [ 506.090350][T15642] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=8388457, location=8388457 [ 506.090479][T15642] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=8388201, location=8388201 [ 506.090732][T15642] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 506.090748][T15642] UDF-fs: warning (device nbd1): udf_fill_super: No partition found (1) [ 506.205147][T15578] Dev nbd1: unable to read RDB block 0 [ 506.210793][T15578] nbd1: unable to read partition table [ 507.050227][T15654] netlink: 'syz.6.2851': attribute type 2 has an invalid length. [ 507.340544][T15657] netlink: 'syz.1.2852': attribute type 1 has an invalid length. [ 507.407786][T15657] 8021q: adding VLAN 0 to HW filter on device bond1 [ 507.548867][T15657] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2852'. [ 507.589068][ C0] vkms_vblank_simulate: vblank timer overrun [ 507.616599][T15656] bond1: (slave gretap1): making interface the new active one [ 507.650238][ C0] vkms_vblank_simulate: vblank timer overrun [ 507.668163][T15656] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 507.801076][ C0] vkms_vblank_simulate: vblank timer overrun [ 508.305934][T15666] xt_CT: You must specify a L4 protocol and not use inversions on it [ 508.428977][ C0] vkms_vblank_simulate: vblank timer overrun [ 508.698744][ C0] vkms_vblank_simulate: vblank timer overrun [ 508.742345][ C0] vkms_vblank_simulate: vblank timer overrun [ 508.957451][ C0] vkms_vblank_simulate: vblank timer overrun [ 509.729047][ C0] vkms_vblank_simulate: vblank timer overrun [ 509.949115][ C0] vkms_vblank_simulate: vblank timer overrun [ 510.490785][T15680] syz.1.2855 (15680): drop_caches: 1 [ 510.593625][T15683] syz.1.2855 (15683): drop_caches: 1 [ 510.842556][T15680] syz.1.2855 (15680): drop_caches: 1 [ 510.892222][T15696] fuse: Bad value for 'fd' [ 511.501127][ C0] vkms_vblank_simulate: vblank timer overrun [ 511.882329][ C0] vkms_vblank_simulate: vblank timer overrun [ 512.074999][ C0] vkms_vblank_simulate: vblank timer overrun [ 512.122085][ T7895] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX [ 512.128988][ C0] vkms_vblank_simulate: vblank timer overrun [ 512.800608][T15723] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2862'. [ 523.759307][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 523.772419][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 523.953521][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 523.957804][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 524.100369][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 524.105313][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 524.223143][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 524.237527][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 524.490576][ T12] bridge_slave_1: left allmulticast mode [ 524.494031][ T12] bridge_slave_1: left promiscuous mode [ 524.498444][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 524.510524][ T12] bridge_slave_0: left allmulticast mode [ 524.513471][ T12] bridge_slave_0: left promiscuous mode [ 524.516210][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 527.305575][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 527.315620][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 527.321197][ T12] bond0 (unregistering): Released all slaves [ 527.431118][ T57] usb 6-1: new low-speed USB device number 21 using dummy_hcd [ 527.771290][ T57] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 527.786259][ T57] usb 6-1: config 0 has no interface number 0 [ 527.809055][ T57] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 527.826920][ T57] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 527.831316][ T57] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 527.849199][ T57] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 527.873142][ T57] usb 6-1: config 0 descriptor?? [ 527.879137][T15751] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 527.887320][ T57] iowarrior 6-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 528.244238][T15770] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 528.260193][ T12] tipc: Disabling bearer [ 528.288396][ T12] tipc: Disabling bearer [ 528.314213][ T12] tipc: Left network mode [ 528.517643][T15780] syz.5.2868: attempt to access beyond end of device [ 528.517643][T15780] nbd5: rw=0, sector=64, nr_sectors = 8 limit=0 [ 528.523668][T15780] syz.5.2868: attempt to access beyond end of device [ 528.523668][T15780] nbd5: rw=0, sector=120, nr_sectors = 8 limit=0 [ 528.530333][T15780] Mount JFS Failure: -5 [ 529.537482][ T5980] usb 6-1: USB disconnect, device number 21 [ 530.431445][T15798] fuse: Bad value for 'fd' [ 530.437087][ T12] hsr_slave_0: left promiscuous mode [ 530.457478][ T12] hsr_slave_1: left promiscuous mode [ 530.464736][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 530.477481][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 530.527185][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 530.530496][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 530.668428][ T12] veth1_macvtap: left promiscuous mode [ 530.674048][ T12] veth0_macvtap: left promiscuous mode [ 530.699995][ T12] veth1_vlan: left promiscuous mode [ 530.704435][ T12] veth0_vlan: left promiscuous mode [ 531.485296][T15810] syz.6.2873: attempt to access beyond end of device [ 531.485296][T15810] nbd6: rw=0, sector=64, nr_sectors = 2 limit=0 [ 531.520140][T15810] syz.6.2873: attempt to access beyond end of device [ 531.520140][T15810] nbd6: rw=0, sector=512, nr_sectors = 2 limit=0 [ 531.544130][T15803] nbd6: detected capacity change from 0 to 67108884 [ 531.627736][T15810] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=256, location=256 [ 531.647279][T15810] block nbd6: Send control failed (result -89) [ 531.660488][T15810] block nbd6: Request send failed, requeueing [ 531.665324][ T35] block nbd6: Dead connection, failed to find a fallback [ 531.665492][ T5951] block nbd6: Receive control failed (result -32) [ 531.675263][ T35] block nbd6: shutting down sockets [ 531.680251][ T35] blk_print_req_error: 66 callbacks suppressed [ 531.680272][ T35] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 531.695235][T15810] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=0, location=0 [ 531.699701][T15745] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 531.710265][T15745] buffer_io_error: 39 callbacks suppressed [ 531.710278][T15745] Buffer I/O error on dev nbd6, logical block 0, async page read [ 531.719703][T15745] I/O error, dev nbd6, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 531.726091][T15745] Buffer I/O error on dev nbd6, logical block 1, async page read [ 531.732610][T15745] I/O error, dev nbd6, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 531.741434][T15745] Buffer I/O error on dev nbd6, logical block 2, async page read [ 531.747955][T15745] I/O error, dev nbd6, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 531.756950][T15745] Buffer I/O error on dev nbd6, logical block 3, async page read [ 531.763321][T15745] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 531.790523][T15745] Buffer I/O error on dev nbd6, logical block 0, async page read [ 531.795484][T15745] I/O error, dev nbd6, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 531.800857][T15745] Buffer I/O error on dev nbd6, logical block 1, async page read [ 531.806096][T15745] I/O error, dev nbd6, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 531.813519][T15745] Buffer I/O error on dev nbd6, logical block 2, async page read [ 531.818264][T15745] I/O error, dev nbd6, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 531.823457][T15745] Buffer I/O error on dev nbd6, logical block 3, async page read [ 531.831661][T15810] I/O error, dev nbd6, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 531.837477][T15810] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=1, location=1 [ 531.842258][T15745] Buffer I/O error on dev nbd6, logical block 0, async page read [ 531.845688][T15745] Buffer I/O error on dev nbd6, logical block 1, async page read [ 531.849024][T15810] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=512, location=512 [ 531.868756][T15745] ldm_validate_partition_table(): Disk read failed. [ 531.891401][T15745] Dev nbd6: unable to read RDB block 0 [ 531.895478][T15810] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=256, location=256 [ 531.900018][T15810] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=16777220, location=16777220 [ 531.917564][T15745] nbd6: unable to read partition table [ 531.956311][T15817] netlink: 244 bytes leftover after parsing attributes in process `syz.1.2874'. [ 531.965119][T15811] Cannot find del_set index 3 as target [ 531.977316][T15810] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=16776964, location=16776964 [ 532.022558][T15810] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=16777219, location=16777219 [ 532.039263][T15745] ldm_validate_partition_table(): Disk read failed. [ 532.053086][T15745] Dev nbd6: unable to read RDB block 0 [ 532.090401][T15745] nbd6: unable to read partition table [ 532.142883][T15810] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=16776963, location=16776963 [ 532.148507][T15810] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=16777218, location=16777218 [ 532.165156][T15810] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=16776962, location=16776962 [ 532.176461][T15810] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=16777070, location=16777070 [ 532.191662][T15810] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=16776814, location=16776814 [ 532.206399][T15810] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=16777068, location=16777068 [ 532.230923][T15810] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=16776812, location=16776812 [ 532.235576][T15810] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=512, location=512 [ 532.243666][T15810] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=256, location=256 [ 532.259041][T15810] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=8388609, location=8388609 [ 532.263301][T15810] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=8388353, location=8388353 [ 532.267789][T15810] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=8388608, location=8388608 [ 532.273190][T15810] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=8388352, location=8388352 [ 532.296765][T15810] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=8388607, location=8388607 [ 532.303100][T15810] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=8388351, location=8388351 [ 532.310152][T15810] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=8388459, location=8388459 [ 532.336207][T15810] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=8388203, location=8388203 [ 532.343161][T15810] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=8388457, location=8388457 [ 532.349499][T15810] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=8388201, location=8388201 [ 532.356687][T15810] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=512, location=512 [ 532.363235][T15810] UDF-fs: warning (device nbd6): udf_fill_super: No partition found (1) [ 532.541024][T15809] Cannot find del_set index 3 as target [ 532.782977][T15815] siw: device registration error -23 [ 532.786626][T15815] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2876'. [ 535.621648][ T12] team0 (unregistering): Port device team_slave_1 removed [ 535.993818][ T12] team0 (unregistering): Port device team_slave_0 removed [ 538.977719][ T64] lo speed is unknown, defaulting to 1000 [ 539.127467][T15809] netlink: 244 bytes leftover after parsing attributes in process `syz.5.2875'. [ 539.293102][ T64] infiniband syz0: ib_query_port failed (-19) [ 540.932280][T15851] fuse: Bad value for 'fd' [ 541.380968][T15860] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2883'. [ 542.165353][T15874] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2885'. [ 542.184450][T15874] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2885'. [ 542.205242][T15874] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2885'. [ 542.211656][T15874] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2885'. [ 542.246571][T15874] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2885'. [ 542.518667][T15876] hfs: unable to load iocharset "io#harset" [ 543.420450][T15891] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2889'. [ 543.426183][T15891] netlink: 312 bytes leftover after parsing attributes in process `syz.6.2889'. [ 543.829463][T15898] netlink: 'syz.5.2888': attribute type 10 has an invalid length. [ 543.875797][T15898] veth0_vlan: left promiscuous mode [ 543.918913][T15898] veth0_vlan: entered promiscuous mode [ 543.983885][T15898] team0: Device veth0_vlan failed to register rx_handler [ 545.601122][T15918] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2891'. [ 545.730671][ T5979] libceph: connect (1)[c::]:6789 error -101 [ 545.733154][ T5979] libceph: mon0 (1)[c::]:6789 connect error [ 545.780531][T15918] ceph: No mds server is up or the cluster is laggy [ 545.835171][ T5979] libceph: connect (1)[c::]:6789 error -101 [ 545.861186][ T5979] libceph: mon0 (1)[c::]:6789 connect error [ 547.953916][T15946] AppArmor: change_hat: Invalid input, NULL hat and NULL magic [ 547.963839][T15946] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2894'. [ 547.985338][T15946] netlink: 'syz.5.2894': attribute type 10 has an invalid length. [ 547.989698][T15946] veth0_vlan: left promiscuous mode [ 547.993474][T15946] veth0_vlan: entered promiscuous mode [ 548.014752][T15946] team0: Device veth0_vlan failed to register rx_handler [ 549.317322][T15975] vivid-003: ================= START STATUS ================= [ 549.326547][T15975] vivid-003: RDS Tx I/O Mode: Controls [ 549.329863][T15975] vivid-003: RDS Program ID: 32904 [ 549.332487][T15975] vivid-003: RDS Program Type: 3 [ 549.334552][T15975] vivid-003: RDS PS Name: VIVID-TX [ 549.336445][T15975] vivid-003: RDS Radio Text: This is a VIVID default Radio Text template text, change at will [ 549.351673][T15975] vivid-003: RDS Stereo: true [ 549.363428][T15975] vivid-003: RDS Artificial Head: false [ 549.366118][T15975] vivid-003: RDS Compressed: false [ 549.369290][T15975] vivid-003: RDS Dynamic PTY: false [ 549.386099][T15975] vivid-003: RDS Traffic Announcement: false [ 549.389065][T15975] vivid-003: RDS Traffic Program: true [ 549.392094][T15975] vivid-003: RDS Music: true [ 549.394624][T15975] vivid-003: ================== END STATUS ================== [ 550.195457][T15985] netlink: 'syz.4.2898': attribute type 25 has an invalid length. [ 550.381148][T15988] 9pnet_virtio: no channels available for device ./file0/file0 [ 550.554600][T15993] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 550.569876][T15993] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2901'. [ 552.348012][T16030] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2899'. [ 552.442833][T16031] tipc: Enabling of bearer rejected, already enabled [ 552.731014][T16030] bridge0: port 2(bridge_slave_1) entered disabled state [ 552.737759][T16030] bridge0: port 1(bridge_slave_0) entered disabled state [ 553.508344][ T5951] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 553.585789][T16039] Cannot find del_set index 3 as target [ 554.512190][T16052] block nbd0: server does not support multiple connections per device. [ 554.694000][T16052] block nbd0: shutting down sockets [ 554.733169][T16062] 9pnet: Unknown protocol version 9p20\++} [ 556.137092][T16064] ip6tnl1: entered promiscuous mode [ 556.140205][T16064] ip6tnl1: entered allmulticast mode [ 556.177215][T16064] team0: Device ip6tnl1 is up. Set it down before adding it as a team port [ 560.389813][T16127] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2919'. [ 560.454129][T16128] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2919'. [ 562.591769][T16148] fuse: Unknown parameter 'group_i00000000000000000000' [ 562.842474][ T40] audit: type=1804 audit(1748294297.004:1941): pid=16152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.2923" name="/newroot/138/file0/file0" dev="9p" ino=36306977 res=1 errno=0 [ 562.869672][T16152] tmpfs: Unknown parameter 'grpquota+½p' [ 563.247549][T16154] ipvlan2: entered promiscuous mode [ 563.375115][T16158] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2925'. [ 564.439826][ T40] audit: type=1326 audit(1748294298.491:1942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16178 comm="syz.4.2929" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe2579 code=0x7ffc0000 [ 564.458630][ T40] audit: type=1326 audit(1748294298.491:1943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16178 comm="syz.4.2929" exe="/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf7fe2579 code=0x7ffc0000 [ 564.597614][ T40] audit: type=1326 audit(1748294298.557:1944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16178 comm="syz.4.2929" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe2579 code=0x7ffc0000 [ 564.641573][ T40] audit: type=1326 audit(1748294298.557:1945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16178 comm="syz.4.2929" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe2579 code=0x7ffc0000 [ 564.693997][ T40] audit: type=1326 audit(1748294298.557:1946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16178 comm="syz.4.2929" exe="/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf7fe2579 code=0x7ffc0000 [ 564.702537][ T40] audit: type=1326 audit(1748294298.557:1947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16178 comm="syz.4.2929" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe2579 code=0x7ffc0000 [ 564.712345][ T40] audit: type=1326 audit(1748294298.557:1948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16178 comm="syz.4.2929" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe2579 code=0x7ffc0000 [ 564.735425][ T40] audit: type=1326 audit(1748294298.557:1949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16178 comm="syz.4.2929" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7fe2579 code=0x7ffc0000 [ 564.756505][ T40] audit: type=1326 audit(1748294298.557:1950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16178 comm="syz.4.2929" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe2579 code=0x7ffc0000 [ 566.731089][ C2] hrtimer: interrupt took 5853888 ns [ 570.513486][T16269] fuse: Bad value for 'fd' [ 571.085869][T16277] syz.1.2939 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 571.097520][T16277] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 571.104959][T16277] Error validating options; rc = [-22] [ 572.737775][T16291] netlink: 'syz.4.2941': attribute type 1 has an invalid length. [ 573.073268][T16294] 8021q: adding VLAN 0 to HW filter on device bond3 [ 575.222989][T16315] fuse: Bad value for 'fd' [ 576.710687][T16333] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2950'. [ 576.746334][T16333] lo speed is unknown, defaulting to 1000 [ 577.948739][ T7895] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX [ 578.559753][T16355] netlink: 'syz.1.2951': attribute type 10 has an invalid length. [ 578.885144][T16355] veth0_vlan: left promiscuous mode [ 579.025743][T16355] veth0_vlan: entered promiscuous mode [ 579.897994][T16355] team0: Device veth0_vlan failed to register rx_handler [ 580.313173][T16373] fuse: Unknown parameter 'group_id00000000000000000000' [ 581.786175][T16377] lo speed is unknown, defaulting to 1000 [ 581.788702][T16377] lo speed is unknown, defaulting to 1000 [ 581.791494][T16377] lo speed is unknown, defaulting to 1000 [ 581.806563][T16377] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 581.947866][T16377] lo speed is unknown, defaulting to 1000 [ 581.960181][T16377] lo speed is unknown, defaulting to 1000 [ 581.973628][T16377] lo speed is unknown, defaulting to 1000 [ 582.002236][T16377] lo speed is unknown, defaulting to 1000 [ 582.007424][T16377] lo speed is unknown, defaulting to 1000 [ 590.988755][ T64] usb 11-1: new high-speed USB device number 4 using dummy_hcd [ 591.033912][T16408] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 591.180454][ T64] usb 11-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 591.190338][ T64] usb 11-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 591.206905][ T64] usb 11-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 72 [ 591.375322][ T64] usb 11-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 591.381465][ T64] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 591.387398][ T64] usb 11-1: Product: syz [ 591.390205][ T64] usb 11-1: Manufacturer: syz [ 591.404123][ T64] usb 11-1: SerialNumber: syz [ 591.422295][ T5979] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 591.886204][T16404] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 592.154859][ T5979] usb 10-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 592.161589][ T5979] usb 10-1: New USB device strings: Mfr=17, Product=2, SerialNumber=3 [ 592.166717][ T5979] usb 10-1: Product: syz [ 592.170012][ T5979] usb 10-1: Manufacturer: syz [ 592.173521][ T5979] usb 10-1: SerialNumber: syz [ 592.190908][ T5979] usb 10-1: config 0 descriptor?? [ 592.237975][ T64] usblp 11-1:1.0: usblp0: USB Bidirectional printer dev 4 if 0 alt 0 proto 3 vid 0x0525 pid 0xA4A8 [ 592.472660][T16417] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 592.573826][T16417] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2962'. [ 592.750158][T16421] netlink: 'syz.1.2962': attribute type 10 has an invalid length. [ 592.760262][T16421] mac80211_hwsim hwsim5 wlan1: left allmulticast mode [ 592.916541][T16421] 8021q: adding VLAN 0 to HW filter on device bond0 [ 592.939220][T16421] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 593.597073][ T5979] usb 10-1: f81604_read: reg: 105 failed: -EPROTO [ 593.600092][ T5979] f81604 10-1:0.0: Setting termination of CH#0 failed: -EPROTO [ 593.751509][ T5979] f81604 10-1:0.0: probe with driver f81604 failed with error -71 [ 593.770854][ T5979] usb 10-1: USB disconnect, device number 6 [ 594.151961][T16431] tipc: Resetting bearer [ 594.588851][T16415] xt_CT: You must specify a L4 protocol and not use inversions on it [ 595.247311][T16440] fuse: Unknown parameter 'group_id00000000000000000000' [ 595.969626][ T24] usb 11-1: USB disconnect, device number 4 [ 595.978746][ T24] usblp0: removed [ 597.397626][T16451] netlink: 'syz.6.2966': attribute type 10 has an invalid length. [ 597.474570][T16451] team0: Device veth0_vlan failed to register rx_handler [ 597.917913][ T5951] Bluetooth: hci3: command 0x0405 tx timeout [ 605.594881][T16488] loop6: detected capacity change from 0 to 524287999 [ 608.811699][T16534] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2979'. [ 608.977679][T16530] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2978'. [ 609.013395][T16538] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2980'. [ 609.017018][ T40] kauditd_printk_skb: 4 callbacks suppressed [ 609.017035][ T40] audit: type=1326 audit(1748294340.247:1955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16527 comm="syz.1.2980" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 609.029369][ T40] audit: type=1326 audit(1748294340.247:1956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16527 comm="syz.1.2980" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 609.112639][ T40] audit: type=1326 audit(1748294340.247:1957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16527 comm="syz.1.2980" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 609.161167][ T40] audit: type=1326 audit(1748294340.247:1958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16527 comm="syz.1.2980" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 609.198445][ T40] audit: type=1326 audit(1748294340.247:1959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16527 comm="syz.1.2980" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 609.246374][ T40] audit: type=1326 audit(1748294340.247:1960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16527 comm="syz.1.2980" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 609.277456][ T40] audit: type=1326 audit(1748294340.247:1961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16527 comm="syz.1.2980" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 609.290320][ T40] audit: type=1326 audit(1748294340.247:1962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16527 comm="syz.1.2980" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 609.329522][ T40] audit: type=1326 audit(1748294340.247:1963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16527 comm="syz.1.2980" exe="/syz-executor" sig=0 arch=40000003 syscall=296 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 609.375042][ T40] audit: type=1326 audit(1748294340.247:1964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16527 comm="syz.1.2980" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 610.378508][T16559] overlayfs: missing 'lowerdir' [ 610.910277][T16562] 9pnet: Unknown protocol version 9p20\++} [ 611.543734][T16569] ip6tnl1: entered promiscuous mode [ 611.546246][T16569] ip6tnl1: entered allmulticast mode [ 611.553623][T16569] team0: Device ip6tnl1 is of different type [ 614.912303][T16599] ip6t_srh: unknown srh invflags 6BE9 [ 614.917489][T16599] ubi: mtd0 is already attached to ubi31 [ 616.000787][T16607] overlayfs: missing 'lowerdir' [ 618.374828][T16626] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2996'. [ 623.670171][T16643] afs: Unknown parameter '' [ 623.674917][T16643] overlayfs: overlapping lowerdir path [ 624.194732][T16656] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3001'. [ 627.358206][T16679] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3008'. [ 627.372151][T16679] bridge_slave_1: left allmulticast mode [ 627.375380][T16679] bridge_slave_1: left promiscuous mode [ 627.378734][T16679] bridge0: port 2(bridge_slave_1) entered disabled state [ 627.791064][T16679] bridge_slave_0: left allmulticast mode [ 627.801879][T16679] bridge_slave_0: left promiscuous mode [ 627.806877][T16679] bridge0: port 1(bridge_slave_0) entered disabled state [ 628.566468][T16688] e1000e 0000:00:02.0 eth1: NIC Link is Down [ 628.582940][T16695] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3010'. [ 630.532430][T16712] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3014'. [ 630.602475][T16700] hub 2-0:1.0: USB hub found [ 630.615546][T16700] hub 2-0:1.0: 2 ports detected [ 630.836744][T16728] hub 2-0:1.0: USB hub found [ 631.063740][T16728] hub 2-0:1.0: 2 ports detected [ 631.640391][T16743] netlink: 18128 bytes leftover after parsing attributes in process `syz.4.3017'. [ 631.668792][T16743] /dev/nullb0: Can't lookup blockdev [ 634.187860][ C0] vkms_vblank_simulate: vblank timer overrun [ 634.415893][ C0] vkms_vblank_simulate: vblank timer overrun [ 634.509882][T16781] block device autoloading is deprecated and will be removed. [ 634.631676][T15200] Bluetooth: hci3: command 0x0405 tx timeout [ 634.939212][ C0] vkms_vblank_simulate: vblank timer overrun [ 635.683936][ C0] vkms_vblank_simulate: vblank timer overrun [ 635.799184][T16796] fuse: Bad value for 'user_id' [ 635.802758][T16796] fuse: Bad value for 'user_id' [ 636.015443][T16790] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3025'. [ 636.019613][T16790] netlink: 'syz.6.3025': attribute type 5 has an invalid length. [ 636.033336][T16790] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3025'. [ 636.202369][T16790] netdevsim netdevsim6 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 636.260585][T16790] netdevsim netdevsim6 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 636.263984][T16790] netdevsim netdevsim6 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 636.270595][T16790] netdevsim netdevsim6 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 636.275655][T16790] geneve2: entered promiscuous mode [ 636.279288][T16790] geneve2: entered allmulticast mode [ 636.495878][T16800] netlink: 'syz.1.3027': attribute type 32 has an invalid length. [ 636.498670][T16800] netlink: 'syz.1.3027': attribute type 32 has an invalid length. [ 636.639022][ C0] vkms_vblank_simulate: vblank timer overrun [ 636.727622][ C0] vkms_vblank_simulate: vblank timer overrun [ 636.990064][ C0] vkms_vblank_simulate: vblank timer overrun [ 637.076017][ C0] vkms_vblank_simulate: vblank timer overrun [ 638.130664][T16811] 9pnet_virtio: no channels available for device syz [ 639.195268][T16822] netlink: 18128 bytes leftover after parsing attributes in process `syz.5.3029'. [ 639.666234][T16824] overlayfs: failed to clone upperpath [ 640.342311][T16835] trusted_key: encrypted_key: key user:syz not found [ 641.952691][T16824] netlink: 96 bytes leftover after parsing attributes in process `syz.4.3033'. [ 643.043477][T15200] Bluetooth: hci1: SCO packet for unknown connection handle 201 [ 643.732307][T16862] overlayfs: failed to clone upperpath [ 644.983520][T16877] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 645.714489][T16887] siw: device registration error -23 [ 645.974884][T16887] lo speed is unknown, defaulting to 1000 [ 645.979600][T16887] lo speed is unknown, defaulting to 1000 [ 646.993950][T16900] lo speed is unknown, defaulting to 1000 [ 647.068704][T16900] lo speed is unknown, defaulting to 1000 [ 647.637387][T16911] batman_adv: batadv0: Adding interface: ip6gretap1 [ 647.640127][T16911] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 647.657241][T16911] batman_adv: batadv0: Interface activated: ip6gretap1 [ 648.157393][T16927] lo speed is unknown, defaulting to 1000 [ 648.163095][T16927] lo speed is unknown, defaulting to 1000 [ 648.165776][T16927] lo speed is unknown, defaulting to 1000 [ 648.378071][T16927] infiniband syj0: RDMA CMA: cma_listen_on_dev, error -98 [ 648.499328][T16927] lo speed is unknown, defaulting to 1000 [ 648.503458][T16927] lo speed is unknown, defaulting to 1000 [ 648.507466][T16927] lo speed is unknown, defaulting to 1000 [ 648.511349][T16927] lo speed is unknown, defaulting to 1000 [ 648.535282][T16927] lo speed is unknown, defaulting to 1000 [ 648.539562][T16927] lo speed is unknown, defaulting to 1000 [ 648.666380][T16930] netlink: 'syz.1.3057': attribute type 10 has an invalid length. [ 649.227128][T16930] syz_tun: entered promiscuous mode [ 650.153354][T16940] lo speed is unknown, defaulting to 1000 [ 650.166794][T16940] lo speed is unknown, defaulting to 1000 [ 650.218160][T16940] lo speed is unknown, defaulting to 1000 [ 650.906285][T16954] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3060'. [ 652.736295][T16963] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3062'. [ 653.162242][T16975] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3061'. [ 653.446634][ C1] vkms_vblank_simulate: vblank timer overrun [ 654.356100][T16482] usb 11-1: new full-speed USB device number 5 using dummy_hcd [ 654.460529][T16991] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3067'. [ 654.565884][T16482] usb 11-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 654.572759][ C1] vkms_vblank_simulate: vblank timer overrun [ 654.577409][T16482] usb 11-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 654.642002][T16993] ip6t_srh: unknown srh invflags 6BE9 [ 654.654883][T16482] usb 11-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 654.689858][T16482] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 655.129405][T16482] usb 11-1: usb_control_msg returned -32 [ 655.251803][ C1] vkms_vblank_simulate: vblank timer overrun [ 655.341214][T16482] usbtmc 11-1:16.0: can't read capabilities [ 655.341615][ C1] vkms_vblank_simulate: vblank timer overrun [ 655.385098][ C1] vkms_vblank_simulate: vblank timer overrun [ 655.938234][ C1] vkms_vblank_simulate: vblank timer overrun [ 656.044924][ C1] vkms_vblank_simulate: vblank timer overrun [ 656.220469][ C1] vkms_vblank_simulate: vblank timer overrun [ 656.299769][T17001] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 656.436926][T17001] UDF-fs: Scanning with blocksize 512 failed [ 656.486178][T17001] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 656.501393][T17001] UDF-fs: Scanning with blocksize 1024 failed [ 656.504948][T17001] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 656.508516][T17001] UDF-fs: Scanning with blocksize 2048 failed [ 656.539244][T17001] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 656.542982][T17001] UDF-fs: Scanning with blocksize 4096 failed [ 656.663690][ C1] vkms_vblank_simulate: vblank timer overrun [ 656.788297][ C1] vkms_vblank_simulate: vblank timer overrun [ 657.399810][ C1] vkms_vblank_simulate: vblank timer overrun [ 657.551755][ C1] vkms_vblank_simulate: vblank timer overrun [ 657.611640][ C1] vkms_vblank_simulate: vblank timer overrun [ 657.775940][ C1] vkms_vblank_simulate: vblank timer overrun [ 657.799801][ C1] vkms_vblank_simulate: vblank timer overrun [ 657.955708][ C1] vkms_vblank_simulate: vblank timer overrun [ 658.057725][ T40] kauditd_printk_skb: 22 callbacks suppressed [ 658.057742][ T40] audit: type=1326 audit(1748294615.142:1987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17010 comm="syz.4.3072" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe2579 code=0x7ffc0000 [ 658.137727][ T40] audit: type=1326 audit(1748294615.189:1988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17010 comm="syz.4.3072" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe2579 code=0x7ffc0000 [ 658.212294][ T40] audit: type=1326 audit(1748294615.282:1989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17010 comm="syz.4.3072" exe="/syz-executor" sig=0 arch=40000003 syscall=282 compat=1 ip=0xf7fe2579 code=0x7ffc0000 [ 658.268118][ T40] audit: type=1326 audit(1748294615.282:1990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17010 comm="syz.4.3072" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe2579 code=0x7ffc0000 [ 658.275200][T17013] lo speed is unknown, defaulting to 1000 [ 658.285028][ T40] audit: type=1326 audit(1748294615.282:1991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17010 comm="syz.4.3072" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe2579 code=0x7ffc0000 [ 658.350766][ T40] audit: type=1326 audit(1748294615.395:1992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17010 comm="syz.4.3072" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7fe2579 code=0x7ffc0000 [ 658.358124][T17017] syz.5.3074: attempt to access beyond end of device [ 658.358124][T17017] nbd5: rw=0, sector=64, nr_sectors = 2 limit=0 [ 658.370173][ T40] audit: type=1326 audit(1748294615.395:1993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17010 comm="syz.4.3072" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe2579 code=0x7ffc0000 [ 658.389528][T17017] syz.5.3074: attempt to access beyond end of device [ 658.389528][T17017] nbd5: rw=0, sector=512, nr_sectors = 2 limit=0 [ 658.389707][T17017] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 658.389869][T17017] syz.5.3074: attempt to access beyond end of device [ 658.389869][T17017] nbd5: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 658.389925][T17017] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 658.392272][T17017] syz.5.3074: attempt to access beyond end of device [ 658.392272][T17017] nbd5: rw=0, sector=64, nr_sectors = 4 limit=0 [ 658.403157][ T40] audit: type=1326 audit(1748294615.395:1994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17010 comm="syz.4.3072" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe2579 code=0x7ffc0000 [ 658.403203][ T40] audit: type=1326 audit(1748294615.395:1995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17010 comm="syz.4.3072" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7fe2579 code=0x7ffc0000 [ 658.403236][ T40] audit: type=1326 audit(1748294615.395:1996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17010 comm="syz.4.3072" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe2579 code=0x7ffc0000 [ 658.426708][T17013] lo speed is unknown, defaulting to 1000 [ 658.431957][T17017] syz.5.3074: attempt to access beyond end of device [ 658.431957][T17017] nbd5: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 658.434875][T17013] lo speed is unknown, defaulting to 1000 [ 658.460090][ C1] vkms_vblank_simulate: vblank timer overrun [ 658.557534][ C1] vkms_vblank_simulate: vblank timer overrun [ 658.560053][T17017] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 658.568899][T17017] syz.5.3074: attempt to access beyond end of device [ 658.568899][T17017] nbd5: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 658.611419][T17017] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 658.618068][T17017] syz.5.3074: attempt to access beyond end of device [ 658.618068][T17017] nbd5: rw=0, sector=64, nr_sectors = 8 limit=0 [ 658.625419][T17017] syz.5.3074: attempt to access beyond end of device [ 658.625419][T17017] nbd5: rw=0, sector=2048, nr_sectors = 8 limit=0 [ 658.661944][T17017] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 658.666616][T17017] syz.5.3074: attempt to access beyond end of device [ 658.666616][T17017] nbd5: rw=0, sector=4096, nr_sectors = 8 limit=0 [ 658.684753][T17017] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 658.689794][T17017] UDF-fs: warning (device nbd5): udf_fill_super: No partition found (1) [ 658.826509][ C1] vkms_vblank_simulate: vblank timer overrun [ 658.872851][T17016] block nbd5: shutting down sockets [ 659.943711][ C1] vkms_vblank_simulate: vblank timer overrun [ 660.038120][ C1] vkms_vblank_simulate: vblank timer overrun [ 660.559685][ C1] vkms_vblank_simulate: vblank timer overrun [ 661.343686][ C1] vkms_vblank_simulate: vblank timer overrun [ 663.467766][T17061] 9pnet_virtio: no channels available for device ./file0/file0 [ 663.874478][T17068] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3083'. [ 663.944446][T17068] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 664.788573][T17076] siw: device registration error -23 [ 665.678820][ T5951] Bluetooth: hci3: command 0x0405 tx timeout [ 665.754381][T17085] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3087'. [ 666.552400][T17091] netlink: 'syz.5.3088': attribute type 27 has an invalid length. [ 667.215340][T17096] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3090'. [ 668.814477][T17107] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3094'. [ 669.429902][T17110] afs: Unknown parameter '' [ 669.434426][T17110] overlayfs: overlapping lowerdir path [ 670.915244][ T5951] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 670.930997][ T5951] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 670.951467][ T5951] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 670.970671][ T5951] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 671.007724][T17122] lo speed is unknown, defaulting to 1000 [ 671.009503][ T5951] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 671.032946][T17122] lo speed is unknown, defaulting to 1000 [ 671.052667][T17122] lo speed is unknown, defaulting to 1000 [ 671.173169][T17123] lo speed is unknown, defaulting to 1000 [ 671.178235][T17123] lo speed is unknown, defaulting to 1000 [ 671.184879][T17123] lo speed is unknown, defaulting to 1000 [ 671.486349][T17123] chnl_net:caif_netlink_parms(): no params data found [ 672.233340][T17123] bridge0: port 1(bridge_slave_0) entered blocking state [ 672.237927][T17123] bridge0: port 1(bridge_slave_0) entered disabled state [ 672.245752][T17123] bridge_slave_0: entered allmulticast mode [ 672.265277][T17123] bridge_slave_0: entered promiscuous mode [ 672.275978][T17123] bridge0: port 2(bridge_slave_1) entered blocking state [ 672.279101][T17123] bridge0: port 2(bridge_slave_1) entered disabled state [ 672.282673][T17123] bridge_slave_1: entered allmulticast mode [ 672.291308][T17123] bridge_slave_1: entered promiscuous mode [ 672.398173][T17123] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 672.425011][T17123] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 672.889686][T17123] team0: Port device team_slave_0 added [ 672.906044][T17123] team0: Port device team_slave_1 added [ 673.043025][T17123] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 673.049173][T17123] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 673.073195][T17123] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 673.086923][T17123] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 673.102061][T17123] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 673.121580][T17123] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 673.291542][T15200] Bluetooth: hci4: command tx timeout [ 673.485698][T17123] hsr_slave_0: entered promiscuous mode [ 673.497653][T17123] hsr_slave_1: entered promiscuous mode [ 674.026943][T14374] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 674.257860][T14374] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 674.263991][T14374] usb 6-1: config 0 has no interfaces? [ 674.264133][T17123] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 674.266932][T14374] usb 6-1: New USB device found, idVendor=041e, idProduct=400c, bcdDevice=af.98 [ 674.297670][T17123] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 674.304691][T14374] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 674.314019][T17123] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 674.341711][T14374] usb 6-1: config 0 descriptor?? [ 674.389906][T17123] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 674.745280][T17152] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 674.808470][T17152] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 674.832286][T17152] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3100'. [ 675.207870][T14374] usb 11-1: USB disconnect, device number 5 [ 675.378159][T17152] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 675.396239][T17152] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 675.400960][T17152] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 675.409092][T17152] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 675.432804][T17152] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 675.436551][T17152] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 675.443204][T17152] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 675.453798][T17152] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 675.491922][T15200] Bluetooth: hci4: command tx timeout [ 675.854397][T17123] 8021q: adding VLAN 0 to HW filter on device bond0 [ 675.928703][T17167] netlink: 'syz.5.3103': attribute type 10 has an invalid length. [ 676.005356][T17167] syz_tun: entered promiscuous mode [ 676.012118][T17167] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 676.032110][T17123] 8021q: adding VLAN 0 to HW filter on device team0 [ 676.078004][ T1136] bridge0: port 1(bridge_slave_0) entered blocking state [ 676.082844][ T1136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 676.160367][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 676.164205][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 676.354609][ T5979] IPVS: starting estimator thread 0... [ 676.549738][T17176] IPVS: using max 34 ests per chain, 81600 per kthread [ 676.660686][T17175] netlink: 'syz.4.3104': attribute type 7 has an invalid length. [ 676.747956][T17123] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 677.103726][ T834] usb 6-1: USB disconnect, device number 22 [ 677.346370][T17123] veth0_vlan: entered promiscuous mode [ 677.357786][T17123] veth1_vlan: entered promiscuous mode [ 677.472582][T17123] veth0_macvtap: entered promiscuous mode [ 677.499284][T17123] veth1_macvtap: entered promiscuous mode [ 677.563065][T17123] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 677.613933][T17123] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 677.699042][T17123] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 677.709783][T17123] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 677.779064][T15200] Bluetooth: hci4: command tx timeout [ 677.920332][T17204] siw: device registration error -23 [ 677.927719][T17204] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3107'. [ 677.940915][T17123] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 677.945390][T17123] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 678.496907][ T1200] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 678.505005][ T1200] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 678.508734][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 678.508755][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 678.736056][ C1] ================================================================== [ 678.741817][ C1] BUG: KASAN: global-out-of-bounds in __find_rr_leaf+0xbcb/0xe00 [ 678.746046][ C1] Read of size 4 at addr ffffffff9af85c44 by task kworker/1:2/14374 [ 678.766774][ C1] [ 678.767646][ C1] CPU: 1 UID: 0 PID: 14374 Comm: kworker/1:2 Not tainted 6.15.0-rc7-syzkaller-00152-gd0c22de9995b #0 PREEMPT(full) [ 678.767668][ C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 678.767682][ C1] Workqueue: mld mld_ifc_work [ 678.767708][ C1] Call Trace: [ 678.767714][ C1] [ 678.767720][ C1] dump_stack_lvl+0x116/0x1f0 [ 678.767742][ C1] print_report+0xc3/0x670 [ 678.767759][ C1] ? __virt_addr_valid+0x5e/0x590 [ 678.767777][ C1] ? __phys_addr+0xc6/0x150 [ 678.767795][ C1] ? __find_rr_leaf+0xbcb/0xe00 [ 678.767813][ C1] kasan_report+0xe0/0x110 [ 678.767829][ C1] ? __find_rr_leaf+0xbcb/0xe00 [ 678.767854][ C1] __find_rr_leaf+0xbcb/0xe00 SYZFAIL: failed to recv rpc [ 678.767872][ C1] ? __pfx___find_rr_leaf+0x10/0x10 fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 678.767890][ C1] ? __pfx___find_rr_leaf+0x10/0x10 [ 678.767907][ C1] ? fib6_node_lookup+0x12d/0x190 [ 678.767923][ C1] ? __pfx_fib6_node_lookup+0x10/0x10 [ 678.767946][ C1] fib6_table_lookup+0x7b3/0xa30 [ 678.767970][ C1] ? __pfx_fib6_table_lookup+0x10/0x10 [ 678.767996][ C1] ip6_pol_route+0x1cc/0x1230 [ 678.768017][ C1] ? find_held_lock+0x2b/0x80 [ 678.768031][ C1] ? __pfx_ip6_pol_route+0x10/0x10 [ 678.768055][ C1] ? __pfx_ip6_pol_route_input+0x10/0x10 [ 678.768074][ C1] fib6_rule_lookup+0x536/0x720 [ 678.768090][ C1] ? ieee80211_rx_mesh_data+0x13b/0x2250 [ 678.768109][ C1] ? __pfx_fib6_rule_lookup+0x10/0x10 [ 678.768126][ C1] ? __asan_memcpy+0x3c/0x60 [ 678.768139][ C1] ? eth_type_trans+0x335/0x7a0 [ 678.768159][ C1] ? __asan_memset+0x23/0x50 [ 678.768171][ C1] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 678.768192][ C1] ip6_route_input+0x662/0xc00 [ 678.768212][ C1] ? __pfx_ip6_route_input+0x10/0x10 [ 678.768230][ C1] ? ieee80211_rx_handlers+0xe7f/0x9c80 [ 678.768254][ C1] ? find_held_lock+0x2b/0x80 [ 678.768268][ C1] ip6_rcv_finish_core.constprop.0+0x1a0/0x5d0 [ 678.768291][ C1] ip6_list_rcv_finish.constprop.0+0x20f/0xb50 [ 678.768313][ C1] ? __pfx_ip6_list_rcv_finish.constprop.0+0x10/0x10 [ 678.768333][ C1] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 678.768355][ C1] ipv6_list_rcv+0x339/0x450 [ 678.768375][ C1] ? __pfx_ipv6_list_rcv+0x10/0x10 [ 678.768396][ C1] ? __pfx_ipv6_list_rcv+0x10/0x10 [ 678.768415][ C1] __netif_receive_skb_list_core+0x556/0x950 [ 678.768435][ C1] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 678.768450][ C1] ? lock_acquire+0x179/0x350 [ 678.768470][ C1] netif_receive_skb_list_internal+0x752/0xdb0 [ 678.768487][ C1] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 678.768503][ C1] ? __pfx_ieee80211_rx_list+0x10/0x10 [ 678.768520][ C1] ? __lock_acquire+0xaa4/0x1ba0 [ 678.768539][ C1] ? find_held_lock+0x2b/0x80 [ 678.768553][ C1] netif_receive_skb_list+0x4d/0x4b0 [ 678.768568][ C1] ieee80211_rx_napi+0x384/0x410 [ 678.768587][ C1] ? __pfx_ieee80211_rx_napi+0x10/0x10 [ 678.768605][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 678.768625][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 678.768644][ C1] ieee80211_handle_queued_frames+0xd5/0x130 [ 678.768662][ C1] tasklet_action_common+0x284/0x400 [ 678.768681][ C1] handle_softirqs+0x216/0x8e0 [ 678.768698][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 678.768714][ C1] ? __dev_queue_xmit+0x896/0x43e0 [ 678.768728][ C1] do_softirq+0xb2/0xf0 [ 678.768743][ C1] [ 678.768747][ C1] [ 678.768752][ C1] __local_bh_enable_ip+0x100/0x120 [ 678.768767][ C1] ? __dev_queue_xmit+0x896/0x43e0 [ 678.768780][ C1] __dev_queue_xmit+0x8ab/0x43e0 [ 678.768798][ C1] ? ip6mr_fib_lookup+0x136/0x1a0 [ 678.768816][ C1] ? __pfx___dev_queue_xmit+0x10/0x10 [ 678.768830][ C1] ? register_lock_class+0x41/0x4c0 [ 678.768855][ C1] ? __lock_acquire+0x5ca/0x1ba0 [ 678.768873][ C1] ? __lock_acquire+0xaa4/0x1ba0 [ 678.768895][ C1] ? find_held_lock+0x2b/0x80 [ 678.768910][ C1] ip6_finish_output2+0xe98/0x2020 [ 678.768932][ C1] ip6_finish_output+0x3f9/0x1360 [ 678.768952][ C1] ip6_output+0x1f9/0x540 [ 678.768970][ C1] mld_sendpack+0x9e9/0x1220 [ 678.768991][ C1] ? __pfx_mld_sendpack+0x10/0x10 [ 678.769016][ C1] mld_ifc_work+0x740/0xca0 [ 678.769038][ C1] process_one_work+0x9cf/0x1b70 [ 678.769062][ C1] ? __pfx_process_one_work+0x10/0x10 [ 678.769085][ C1] ? assign_work+0x1a0/0x250 [ 678.769104][ C1] worker_thread+0x6c8/0xf10 [ 678.769127][ C1] ? __kthread_parkme+0x19e/0x250 [ 678.769144][ C1] ? __pfx_worker_thread+0x10/0x10 [ 678.769164][ C1] kthread+0x3c2/0x780 [ 678.769184][ C1] ? __pfx_kthread+0x10/0x10 [ 678.769202][ C1] ? __pfx_kthread+0x10/0x10 [ 678.769219][ C1] ? __pfx_kthread+0x10/0x10 [ 678.769237][ C1] ? __pfx_kthread+0x10/0x10 [ 678.769255][ C1] ? rcu_is_watching+0x12/0xc0 [ 678.769269][ C1] ? __pfx_kthread+0x10/0x10 [ 678.769287][ C1] ret_from_fork+0x48/0x80 [ 678.769300][ C1] ? __pfx_kthread+0x10/0x10 [ 678.769319][ C1] ret_from_fork_asm+0x1a/0x30 [ 678.769342][ C1] [ 678.769347][ C1] [ 679.141635][ C1] The buggy address belongs to the variable: [ 679.146350][ C1] binder_deferred_list+0x24/0x40 [ 679.152191][ C1] [ 679.160219][ C1] The buggy address belongs to the physical page: [ 679.163638][ C1] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1af85 [ 679.169880][ C1] flags: 0xfff00000002000(reserved|node=0|zone=1|lastcpupid=0x7ff) [ 679.179742][ C1] raw: 00fff00000002000 ffffea00006be148 ffffea00006be148 0000000000000000 [ 679.190939][ C1] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 679.195717][ C1] page dumped because: kasan: bad access detected [ 679.200853][ C1] page_owner info is not present (never set?) [ 679.212255][ C1] [ 679.213579][ C1] Memory state around the buggy address: [ 679.216670][ C1] ffffffff9af85b00: f9 f9 f9 f9 00 f9 f9 f9 f9 f9 f9 f9 00 f9 f9 f9 [ 679.230825][ C1] ffffffff9af85b80: f9 f9 f9 f9 00 f9 f9 f9 f9 f9 f9 f9 00 f9 f9 f9 [ 679.236151][ C1] >ffffffff9af85c00: f9 f9 f9 f9 00 f9 f9 f9 f9 f9 f9 f9 00 00 f9 f9 [ 679.240601][ C1] ^ [ 679.247969][ C1] ffffffff9af85c80: f9 f9 f9 f9 00 f9 f9 f9 f9 f9 f9 f9 00 00 00 00 [ 679.256245][ C1] ffffffff9af85d00: 00 00 00 00 00 00 00 00 00 00 00 f9 f9 f9 f9 f9 [ 679.264956][ C1] ================================================================== [ 679.275557][ C1] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 679.289468][ C1] CPU: 1 UID: 0 PID: 14374 Comm: kworker/1:2 Not tainted 6.15.0-rc7-syzkaller-00152-gd0c22de9995b #0 PREEMPT(full) [ 679.303870][ C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 679.316289][ C1] Workqueue: mld mld_ifc_work [ 679.330196][ C1] Call Trace: [ 679.332288][ C1] [ 679.334036][ C1] dump_stack_lvl+0x3d/0x1f0 [ 679.336857][ C1] panic+0x71c/0x800 [ 679.339172][ C1] ? __pfx_panic+0x10/0x10 [ 679.351117][ C1] ? irqentry_exit+0x3b/0x90 [ 679.354411][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 679.358398][ C1] ? __find_rr_leaf+0xbcb/0xe00 [ 679.361881][ C1] ? check_panic_on_warn+0x1f/0xb0 [ 679.370258][ C1] ? __find_rr_leaf+0xbcb/0xe00 [ 679.373154][ C1] check_panic_on_warn+0xab/0xb0 [ 679.381139][ C1] end_report+0x107/0x170 [ 679.383855][ C1] kasan_report+0xee/0x110 [ 679.390051][ C1] ? __find_rr_leaf+0xbcb/0xe00 [ 679.393565][ C1] __find_rr_leaf+0xbcb/0xe00 [ 679.401165][ C1] ? __pfx___find_rr_leaf+0x10/0x10 [ 679.404390][ C1] ? __pfx___find_rr_leaf+0x10/0x10 [ 679.412578][ C1] ? fib6_node_lookup+0x12d/0x190 [ 679.416253][ C1] ? __pfx_fib6_node_lookup+0x10/0x10 [ 679.422335][ C1] fib6_table_lookup+0x7b3/0xa30 [ 679.432875][ C1] ? __pfx_fib6_table_lookup+0x10/0x10 [ 679.437199][ C1] ip6_pol_route+0x1cc/0x1230 [ 679.442887][ C1] ? find_held_lock+0x2b/0x80 [ 679.451754][ C1] ? __pfx_ip6_pol_route+0x10/0x10 [ 679.454883][ C1] ? __pfx_ip6_pol_route_input+0x10/0x10 [ 679.461116][ C1] fib6_rule_lookup+0x536/0x720 [ 679.463220][ C1] ? ieee80211_rx_mesh_data+0x13b/0x2250 [ 679.465517][ C1] ? __pfx_fib6_rule_lookup+0x10/0x10 [ 679.468156][ C1] ? __asan_memcpy+0x3c/0x60 [ 679.480635][ C1] ? eth_type_trans+0x335/0x7a0 [ 679.482839][ C1] ? __asan_memset+0x23/0x50 [ 679.485049][ C1] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 679.487854][ C1] ip6_route_input+0x662/0xc00 [ 679.500812][ C1] ? __pfx_ip6_route_input+0x10/0x10 [ 679.503402][ C1] ? ieee80211_rx_handlers+0xe7f/0x9c80 [ 679.505725][ C1] ? find_held_lock+0x2b/0x80 [ 679.511187][ C1] ip6_rcv_finish_core.constprop.0+0x1a0/0x5d0 [ 679.533386][ C1] ip6_list_rcv_finish.constprop.0+0x20f/0xb50 [ 679.536009][ C1] ? __pfx_ip6_list_rcv_finish.constprop.0+0x10/0x10 [ 679.539551][ C1] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 679.542083][ C1] ipv6_list_rcv+0x339/0x450 [ 679.545163][ C1] ? __pfx_ipv6_list_rcv+0x10/0x10 [ 679.552219][ C1] ? __pfx_ipv6_list_rcv+0x10/0x10 [ 679.562604][ C1] __netif_receive_skb_list_core+0x556/0x950 [ 679.566488][ C1] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 679.575805][ C1] ? lock_acquire+0x179/0x350 [ 679.591593][ C1] netif_receive_skb_list_internal+0x752/0xdb0 [ 679.595038][ C1] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 679.598480][ C1] ? __pfx_ieee80211_rx_list+0x10/0x10 [ 679.601786][ C1] ? __lock_acquire+0xaa4/0x1ba0 [ 679.604730][ C1] ? find_held_lock+0x2b/0x80 [ 679.607733][ C1] netif_receive_skb_list+0x4d/0x4b0 [ 679.628488][ C1] ieee80211_rx_napi+0x384/0x410 [ 679.644606][ C1] ? __pfx_ieee80211_rx_napi+0x10/0x10 [ 679.646876][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 679.649094][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 679.651895][ C1] ieee80211_handle_queued_frames+0xd5/0x130 [ 679.654322][ C1] tasklet_action_common+0x284/0x400 [ 679.656294][ C1] handle_softirqs+0x216/0x8e0 [ 679.658070][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 679.660638][ C1] ? __dev_queue_xmit+0x896/0x43e0 [ 679.664438][ C1] do_softirq+0xb2/0xf0 [ 679.667017][ C1] [ 679.668699][ C1] [ 679.688012][ C1] __local_bh_enable_ip+0x100/0x120 [ 679.690250][ C1] ? __dev_queue_xmit+0x896/0x43e0 [ 679.692465][ C1] __dev_queue_xmit+0x8ab/0x43e0 [ 679.694628][ C1] ? ip6mr_fib_lookup+0x136/0x1a0 [ 679.710826][ C1] ? __pfx___dev_queue_xmit+0x10/0x10 [ 679.713233][ C1] ? register_lock_class+0x41/0x4c0 [ 679.715541][ C1] ? __lock_acquire+0x5ca/0x1ba0 [ 679.727518][ C1] ? __lock_acquire+0xaa4/0x1ba0 [ 679.733700][ C1] ? find_held_lock+0x2b/0x80 [ 679.745330][ C1] ip6_finish_output2+0xe98/0x2020 [ 679.752943][ C1] ip6_finish_output+0x3f9/0x1360 [ 679.755866][ C1] ip6_output+0x1f9/0x540 [ 679.760528][ C1] mld_sendpack+0x9e9/0x1220 [ 679.769353][ C1] ? __pfx_mld_sendpack+0x10/0x10 [ 679.775495][ C1] mld_ifc_work+0x740/0xca0 [ 679.788221][ C1] process_one_work+0x9cf/0x1b70 [ 679.802630][ C1] ? __pfx_process_one_work+0x10/0x10 [ 679.806442][ C1] ? assign_work+0x1a0/0x250 [ 679.809457][ C1] worker_thread+0x6c8/0xf10 [ 679.812947][ C1] ? __kthread_parkme+0x19e/0x250 [ 679.837258][ C1] ? __pfx_worker_thread+0x10/0x10 [ 679.841133][ C1] kthread+0x3c2/0x780 [ 679.852085][ C1] ? __pfx_kthread+0x10/0x10 [ 679.854421][ C1] ? __pfx_kthread+0x10/0x10 [ 679.857159][ C1] ? __pfx_kthread+0x10/0x10 [ 679.861825][ C1] ? __pfx_kthread+0x10/0x10 [ 679.864946][ C1] ? rcu_is_watching+0x12/0xc0 [ 679.871657][ C1] ? __pfx_kthread+0x10/0x10 [ 679.891593][ C1] ret_from_fork+0x48/0x80 [ 679.895416][ C1] ? __pfx_kthread+0x10/0x10 [ 679.897735][ C1] ret_from_fork_asm+0x1a/0x30 [ 679.900986][ C1] [ 679.957295][ C1] Kernel Offset: disabled [ 679.959656][ C1] Rebooting in 86400 seconds.. VM DIAGNOSIS: 18:54:03 Registers: info registers vcpu 0 CPU#0 RAX=00000000007c8e17 RBX=0000000000000000 RCX=ffffffff8b69a3e9 RDX=0000000000000000 RSI=ffffffff8dbde8d7 RDI=ffffffff8bf48ea0 RBP=fffffbfff1c12ee8 RSP=ffffffff8e007e10 R8 =0000000000000001 R9 =ffffed10056465bd R10=ffff88802b232deb R11=0000000000000000 R12=0000000000000000 R13=ffffffff8e097740 R14=ffffffff90854f10 R15=0000000000000000 RIP=ffffffff8b698c7f RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880977e7000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f7425994 CR3=0000000078a4b000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000005000000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000020 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff854c6a35 RDI=ffffffff9ade4c80 RBP=ffffffff9ade4c40 RSP=ffffc9000058fd98 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=6139666666666652 R12=0000000000000000 R13=0000000000000020 R14=ffffffff9ade4c40 R15=ffffffff854c69d0 RIP=ffffffff854c6a5f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880978e7000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000030c0aff8 CR3=000000006aaa9000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000005000000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=ffff88804b40b300 RCX=fffff520000a1e0b RDX=ffff88801bf38000 RSI=ffffffff89db0f55 RDI=ffff88804b40b300 RBP=ffff88804b40b5b0 RSP=ffffc9000050f108 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=ffff88804b40b5b0 R13=ffff88805a2c5da2 R14=1ffff920000a1e2a R15=0000000000000000 RIP=ffffffff89dafde0 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880979e7000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f70e50a0 CR3=0000000070cb6000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=000000000000000e DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000ff ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4e4f4954504f5f4e 4153410063657865 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=00000000006d88cf RBX=0000000000000003 RCX=ffffffff8b69a3e9 RDX=0000000000000000 RSI=ffffffff8dbde8d7 RDI=ffffffff8bf48ea0 RBP=ffffed10037e4000 RSP=ffffc9000048fdf8 R8 =0000000000000001 R9 =ffffed10056a65bd R10=ffff88802b532deb R11=0000000000000000 R12=0000000000000003 R13=ffff88801bf20000 R14=ffffffff90854f10 R15=0000000000000000 RIP=ffffffff8b698c7f RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888097ae7000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f73b1478 CR3=0000000052003000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=000000000000000e DR6=00000000ffff0ff0 DR7=0000000000000600 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000003800000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000