last executing test programs: 9m7.453172488s ago: executing program 0 (id=750): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) openat$nmem0(0xffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0xfffc, 0x0, @empty, 0x4}, {0xa, 0x0, 0x0, @empty, 0xfffffffc}}}, 0x48) socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) syz_open_dev$radio(&(0x7f0000000100), 0x3, 0x2) eventfd(0x0) r3 = socket(0x848000000015, 0x805, 0x0) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x1a}}, 0x1c) eventfd(0x0) eventfd(0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x22, 0x301, 0x270bd24, 0x25dfdbfd, {0x1}}, 0x14}}, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000380)=ANY=[@ANYRES64=r2], 0x0) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0xa}, 0x20) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66b80e010f00d0b0060f21a20f01c40f009b2700000066b80c008ee00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a00b9730200000f32328fe858b660002fb90d090000b800680000ba000000000f30", 0x65}], 0x1, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$KVM_RUN(r7, 0xae80, 0x0) syz_emit_ethernet(0x66, &(0x7f0000001a40)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "1200b0", 0x30, 0x3a, 0x0, @empty, @mcast2, {[], @dest_unreach={0xa0, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "277382", 0x0, 0x0, 0x0, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}}}}}, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000340)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f00000002c0)=0x1, 0xffffffffffffffff, 0x0, 0x2, 0x4}}, 0x20) 9m0.248837584s ago: executing program 0 (id=754): pipe2(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80880) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100, 0x1}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) dup3(r3, r2, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) r5 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r5, 0xc01864c6, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r5, 0xc01864c6, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) dup3(r6, r5, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r7, 0xc01064c7, &(0x7f0000000200)={0x0, 0x0, 0x0}) r8 = mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f00000001c0)) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000004c0)="e0"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000480)={0x4c, 0x0, &(0x7f0000000200)=[@acquire, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000380)={0xc, 0x0, &(0x7f0000000b80)=[@free_buffer={0x40086303, r8}], 0x0, 0x0, 0x0}) r9 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$FUSE(r9, &(0x7f0000006380)={0x2020}, 0x2020) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)=@newtaction={0x90, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x7c, 0x1, [@m_ctinfo={0x48, 0x1, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18}]}, {0x4}, {0xc}, {0xc}}}, @m_mirred={0x30, 0x2, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x90}}, 0x0) connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x4, @none, 0xffff}, 0xe) r11 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) r12 = dup(r11) recvfrom$inet_nvme(r12, &(0x7f00000000c0)=""/68, 0x44, 0x12061, &(0x7f0000000140)=@caif, 0x80) ioctl$sock_inet_udp_SIOCINQ(r12, 0x541b, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 8m59.248380417s ago: executing program 0 (id=756): r0 = syz_clone(0x80a02000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$getsig(0x4202, r0, 0x80, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000180)=0x3, 0x12) syz_init_net_socket$rose(0xb, 0x5, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, &(0x7f0000000300)=0x100000001, 0x4) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r4, &(0x7f0000000340)='\b', 0x1, 0x0, 0x0, 0x0) sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r4, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x0, 0x0, 0xfffffffffffffd25) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) 8m57.657979957s ago: executing program 0 (id=763): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000100)='./file0\x00') open(&(0x7f00000002c0)='./file0\x00', 0x1c1042, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, &(0x7f0000000000)={0x0, @time, 0x0, {}, 0x0, 0x1, 0x2}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x5, 0x2, 0x8}) ioctl$TCFLSH(r0, 0x40384708, 0x20000000) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000006000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10) getsockopt$EBT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000100)={'nat\x00', 0x0, 0x0, 0x0, [0x3, 0x71, 0x2, 0x8, 0x8, 0x800]}, &(0x7f00000001c0)=0x50) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000006600), 0x0, 0x0) ioctl$TIOCSSOFTCAR(r2, 0x5453, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') r3 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000080)='.log\x00', 0x1810c0, 0x0) fchown(r3, 0xee01, 0xee01) mkdir(&(0x7f00000004c0)='./bus\x00', 0xd8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r6) sendmmsg$unix(r4, &(0x7f0000005740)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[@cred={{0x18, 0x1, 0x2, {0x0, r6}}}], 0x18, 0xc080}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x480c1}}], 0x3, 0x40040) 8m57.332072995s ago: executing program 0 (id=766): r0 = fsopen(&(0x7f0000000140)='binder\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='::::\x00', 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000ec0)=@raw={'raw\x00', 0x8, 0x3, 0x490, 0x0, 0xa, 0x148, 0x364, 0x60, 0x3fc, 0x2a8, 0x2a8, 0x3fc, 0x2a8, 0x3, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'bridge0\x00', 'rose0\x00'}, 0x0, 0x2f8, 0x364, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_to_team\x00', {0x0, 0x0, 0x2, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x8601, 0x6, './file0\x00'}}]}, @common=@unspec=@NFLOG={0x6c, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x1c, 0x0, "f2f7b9f28413d9d8ad470ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc2d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28}}], {{'\x00', 0xc8, 0x70, 0x94}, {0x24}}}}, 0x4ec) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(0xffffffffffffffff, 0xc0205710, &(0x7f0000000100)={0x0, 0x6f, 0x23, 0x0, 0x7}) r5 = socket$l2tp(0x2, 0x2, 0x73) r6 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000240), &(0x7f0000000140)=0x0) syz_io_uring_setup(0x4dce, &(0x7f00000003c0)={0x0, 0x80003, 0x80, 0x2, 0xdb, 0x0, r5}, &(0x7f0000000300)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r8, r7, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) io_uring_enter(r6, 0xa3d, 0x0, 0x0, 0x0, 0x0) r9 = socket(0x2b, 0x80801, 0x1) getsockopt$IP_VS_SO_GET_TIMEOUT(r9, 0x0, 0x30, &(0x7f0000000040), &(0x7f0000000080)=0xc) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="280500003d0007010000000000000000017c0000040000000c00018006000600800a000004050280ff0411"], 0x528}}, 0xc000) pselect6(0x40, &(0x7f0000000380)={0x1ff, 0x8, 0x0, 0x8, 0x3ff, 0x5, 0x10000, 0x1560}, &(0x7f0000000480)={0x7f, 0xf4e, 0xd7af, 0x0, 0x250, 0x3, 0xa0e, 0x5}, &(0x7f00000004c0)={0x9, 0x6, 0x2, 0x0, 0x8000, 0x80000001, 0x2}, &(0x7f0000000500)={0x77359400}, &(0x7f0000000580)={&(0x7f0000000540)={[0x3, 0xce6a]}, 0x8}) syz_init_net_socket$llc(0x1a, 0x1, 0x0) openat$sndseq(0xffffff9c, &(0x7f0000000340), 0x408280) socketpair$unix(0x1, 0x2, 0x0, 0x0) capset(&(0x7f0000000880)={0x20080522}, &(0x7f00000008c0)) r11 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r11, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000002000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94) r12 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r12, &(0x7f0000000200)=""/209, 0xd1) ioctl$SIOCX25GSUBSCRIP(r1, 0x89e0, &(0x7f0000000040)={'dummy0\x00', 0x2, 0x5}) 8m56.779073073s ago: executing program 0 (id=767): r0 = socket$inet6(0xa, 0x6, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) getpid() sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)}, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x4) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x2, 0x4}) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r7 = syz_open_pts(r6, 0x0) dup3(r7, r6, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000700)={0x0, &(0x7f0000000640)=[0x0], 0x0, 0x0, 0x0, 0x1}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000061196c00000000009500080400000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) process_madvise(0xffffffffffffffff, 0x0, 0xfffffffffffffe5f, 0x19, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 8m56.665113778s ago: executing program 32 (id=767): r0 = socket$inet6(0xa, 0x6, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) getpid() sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)}, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x4) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x2, 0x4}) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r7 = syz_open_pts(r6, 0x0) dup3(r7, r6, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000700)={0x0, &(0x7f0000000640)=[0x0], 0x0, 0x0, 0x0, 0x1}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000061196c00000000009500080400000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) process_madvise(0xffffffffffffffff, 0x0, 0xfffffffffffffe5f, 0x19, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 6m23.958133597s ago: executing program 2 (id=1094): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_vhci(&(0x7f0000000240)=ANY=[], 0x20) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x109142, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000100)=0x5) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000580)={0x14, r4, 0x1, 0x0, 0x0, {0x54}}, 0x14}}, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2004c8, 0x0, 0x0, 0x4000000000000]}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0x8090ae81, 0x0) listen(0xffffffffffffffff, 0x1) r6 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r6, 0x7a7, 0x0) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)}, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r6, 0x7a0, &(0x7f0000000140)={@local}) mmap(&(0x7f0000ffa000/0x6000)=nil, 0x6000, 0x1000000, 0x11013, 0xffffffffffffffff, 0x40000000) 6m23.837071821s ago: executing program 1 (id=1095): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000002004000b7080000000000007b8af8ff00000000b708000000020000"], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000240)={0x3, 0x4, 0x3, 0x6}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0xcc}, &(0x7f00000000c0)=0x0, &(0x7f0000000280)) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYBLOB="0000000000000000000000800080000014000091ff0f00004500f5ff06ff00010100fc5e15f4c3d3fbd80dad0000abfa"], 0x125) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r2 = openat$binder_debug(0xffffff9c, &(0x7f0000000340)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r3 = io_uring_setup(0x79ae, &(0x7f0000000340)={0x0, 0x1}) r4 = socket$inet6(0xa, 0x40000080806, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000020000000000000000000000850000000f000000850000000800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='ext4_writepages\x00', r5}, 0x10) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6) bind$inet6(r4, &(0x7f000047b000)={0xa, 0x4e20, 0x4, @loopback}, 0x1c) listen(r4, 0x20000005) r6 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000180)='wg0\x00', 0x10) r7 = accept4(r4, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000100), r7) close_range(r3, 0xffffffffffffffff, 0x0) sendmsg$key(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=ANY=[@ANYBLOB="020e0403027000fcdbdf25cee4627474bf179f5cc1c782a290d09eaaf7c36c6a0521422514e5babd949b65000b051906142cfb2f760690da4d5cc5fbed1c0d184d1b684b50aaa6c5b072a67f943371b37193132399819b7029fe887e32728706352a7b852cef5e64313d9683e51bcbb4112284762031a2aad9a6181eb350ab80a1f4cdcc6ef0d767a3d891c5a3fcf06df30bc24c99ccf400"/174], 0x10}}, 0x20000004) 6m23.598002616s ago: executing program 1 (id=1096): r0 = socket$inet6(0xa, 0x6, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) getpid() sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)}, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x4) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x2, 0x4}) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r7 = syz_open_pts(r6, 0x0) r8 = dup3(r7, r6, 0x0) ioctl$TIOCSTI(r8, 0x5412, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000700)={0x0, &(0x7f0000000640)=[0x0], 0x0, 0x0, 0x0, 0x1}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000061196c00000000009500080400000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) process_madvise(0xffffffffffffffff, 0x0, 0xfffffffffffffe5f, 0x19, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 6m23.297932914s ago: executing program 2 (id=1097): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = io_uring_setup(0x6281, &(0x7f0000000080)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) connect$ax25(r1, &(0x7f0000000040)={{0x3, @bcast, 0x8}, [@default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @bcast, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) r4 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x1ffffe, 0x10100, 0x0, 0x0, 0x0, r3}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r4, 0x2ded, 0x4000, 0x0, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000100)={0xffffffffffffffff}) splice(r8, 0x0, r7, 0x0, 0xffffffffffff8000, 0x0) r9 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r9, 0xc010640c, &(0x7f0000000300)={0x14}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000580), 0x880, 0x0) r11 = openat$nmem0(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r11, 0xc004500a, 0x0) r12 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) r13 = memfd_create(&(0x7f00000000c0)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00\x81Ks\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x14\xb1`\x87#X\\W`;\'_4\xc5\xc9\x921<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x00\x8aeh;F[\xe2\x1c\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\x9a{C|S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ', 0x6) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x0, 0x97052, r13, 0x0) ftruncate(r13, 0x0) ioctl$KDSETMODE(0xffffffffffffffff, 0x4b3a, 0x0) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4bfa, &(0x7f0000000080)) r14 = ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r14, 0x4008ae89, &(0x7f0000000200)=ANY=[]) 6m19.695751189s ago: executing program 1 (id=1102): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) io_setup(0x27, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffed850000006d000000a50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) syz_open_dev$sg(&(0x7f0000000380), 0x0, 0x80000) syz_emit_ethernet(0x86, &(0x7f0000000040)=ANY=[@ANYBLOB="ffffffffffff0180c200000086dd6012000800503a00fe8000000000000000000000000000bbfe8000000000000000000000000000aa02d34d144c41f7f5be5b29ab00001100fc0f000000000000000000000000000000000100000000000000000532000000000000fb36eeca6fad50b375a22a584d16ca5500"/134], 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/tcp_dsack\x00', 0x1, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x8, &(0x7f0000001b40)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x49) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='mmap_lock_acquire_returned\x00', r4}, 0x10) prctl$PR_SET_THP_DISABLE(0x29, 0xdffffffffffffffe) bind$bt_sco(0xffffffffffffffff, &(0x7f0000000080)={0x1f, @none}, 0x8) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x101, 0x4}) r5 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0xfffffd52, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(0xffffffffffffffff, 0xc01c64a3, &(0x7f0000000280)={0x3, r6, 0x3, 0x0, 0xa, 0x1ff, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR2(0xffffffffffffffff, 0xc02464bb, &(0x7f0000000080)={0x3, r6}) listen(0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r3, 0x4008af21, &(0x7f0000000240)={0x2, r3}) sched_setscheduler(0x0, 0x5, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) 6m19.465863915s ago: executing program 2 (id=1103): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000002004000b7080000000000007b8af8ff00000000b7080000000200007b8af0", @ANYBLOB="0000000000000000b70500000800000085000000a50000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000240)={0x3, 0x4, 0x3, 0x6}, 0x10, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000340)=[{0x0, 0x1, 0xa, 0xb}, {0x2, 0x2, 0xf, 0x7}, {0x0, 0x5, 0x5, 0x9}], 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = syz_clone(0x800c000, &(0x7f0000001480), 0x0, 0x0, 0x0, 0x0) kcmp(r1, r1, 0x2, 0xffffffffffffffff, r0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000079e02200850000006d00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r5, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c", 0xad) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x2, 0x13, 0x0, 0x0, 0x2}, 0x10}}, 0x0) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f00000001c0), 0x4) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r8 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x164f42) ioctl$LOOP_CONFIGURE(r8, 0x4c0a, &(0x7f0000001ac0)={r7, 0x0, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1c, "339f020bbe78b39843d601010000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323695c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200"}}) sendmsg$key(r6, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) 6m18.888128297s ago: executing program 1 (id=1105): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_vhci(&(0x7f0000000240)=ANY=[], 0x20) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x109142, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000100)=0x5) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000580)={0x14, r4, 0x1, 0x0, 0x0, {0x54}}, 0x14}}, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2004c8, 0x0, 0x0, 0x4000000000000]}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0x8090ae81, 0x0) listen(0xffffffffffffffff, 0x1) r6 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r6, 0x7a7, 0x0) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)}, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r6, 0x7a0, &(0x7f0000000140)={@local}) mmap(&(0x7f0000ffa000/0x6000)=nil, 0x6000, 0x1000000, 0x11013, 0xffffffffffffffff, 0x40000000) 6m18.82787118s ago: executing program 2 (id=1107): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = io_uring_setup(0x6281, &(0x7f0000000080)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) connect$ax25(r1, &(0x7f0000000040)={{0x3, @bcast, 0x8}, [@default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @bcast, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x1ffffe, 0x10100, 0x0, 0x0, 0x0, r3}, &(0x7f0000000180), &(0x7f00000001c0)) io_uring_enter(r4, 0x2ded, 0x4000, 0x0, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000100)={0xffffffffffffffff}) splice(r6, 0x0, r5, 0x0, 0xffffffffffff8000, 0x0) r7 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r7, 0xc010640c, &(0x7f0000000300)={0x14}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000580), 0x880, 0x0) r9 = openat$nmem0(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r9, 0xc004500a, 0x0) r10 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r11 = memfd_create(&(0x7f00000000c0)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00\x81Ks\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x14\xb1`\x87#X\\W`;\'_4\xc5\xc9\x921<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x00\x8aeh;F[\xe2\x1c\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\x9a{C|S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ', 0x6) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x0, 0x97052, r11, 0x0) ftruncate(r11, 0x0) ioctl$KDSETMODE(0xffffffffffffffff, 0x4b3a, 0x0) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4bfa, &(0x7f0000000080)) r12 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r12, 0x4008ae89, &(0x7f0000000200)=ANY=[]) 6m18.317921707s ago: executing program 1 (id=1110): r0 = socket$inet6(0xa, 0x6, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) getpid() sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)}, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x4) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x2, 0x4}) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r7 = syz_open_pts(r6, 0x0) r8 = dup3(r7, r6, 0x0) ioctl$TIOCSTI(r8, 0x5412, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000700)={0x0, &(0x7f0000000640)=[0x0], 0x0, 0x0, 0x0, 0x1}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000061196c00000000009500080400000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) process_madvise(0xffffffffffffffff, 0x0, 0xfffffffffffffe5f, 0x19, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 6m16.746738895s ago: executing program 1 (id=1114): sched_setscheduler(0x0, 0x2, 0x0) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r0, 0x8040450a, &(0x7f00000020c0)=""/4094) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0xa07, &(0x7f0000000200)={0x0, 0xcc72, 0x0, 0x3}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL) io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000100)='./file0\x00') mkdirat(0xffffffffffffff9c, 0x0, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) rename(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000280)='./file0\x00') r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x3f00) write$binfmt_script(r6, &(0x7f0000000080)={'#! ', './file0'}, 0xfffffffffffffcf3) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0x40305828, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1, 0x2}) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000040)) sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[], 0x5c}, 0x1, 0xf000, 0x0, 0x20000000}, 0x26061005) syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r7) 6m16.557840224s ago: executing program 2 (id=1115): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000002004000b7080000000000007b8af8ff00000000b7080000000200007b8af0", @ANYBLOB="0000000000000000b70500000800000085000000a50000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000240)={0x3, 0x4, 0x3, 0x6}, 0x10, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000340)=[{0x0, 0x1, 0xa, 0xb}, {0x2, 0x2, 0xf, 0x7}, {0x0, 0x5, 0x5, 0x9}], 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = syz_clone(0x800c000, &(0x7f0000001480), 0x0, 0x0, 0x0, 0x0) kcmp(r1, r1, 0x2, 0xffffffffffffffff, r0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000079e02200850000006d00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r5, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002", 0x8a) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x2, 0x13, 0x0, 0x0, 0x2}, 0x10}}, 0x0) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f00000001c0), 0x4) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r8 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x164f42) ioctl$LOOP_CONFIGURE(r8, 0x4c0a, &(0x7f0000001ac0)={r7, 0x0, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1c, "339f020bbe78b39843d601010000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323695c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200"}}) sendmsg$key(r6, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) 6m15.787688255s ago: executing program 2 (id=1116): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000002004000b7080000000000007b8af8ff00000000b7080000000200007b8af0", @ANYBLOB="0000000000000000b70500000800000085000000a50000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000240)={0x3, 0x4, 0x3, 0x6}, 0x10, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000340)=[{0x0, 0x1, 0xa, 0xb}, {0x2, 0x2, 0xf, 0x7}, {0x0, 0x5, 0x5, 0x9}], 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = syz_clone(0x800c000, &(0x7f0000001480), 0x0, 0x0, 0x0, 0x0) kcmp(r1, r1, 0x2, 0xffffffffffffffff, r0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000079e02200850000006d00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r5, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce", 0xb3) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x2, 0x13, 0x0, 0x0, 0x2}, 0x10}}, 0x0) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f00000001c0), 0x4) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r8 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x164f42) ioctl$LOOP_CONFIGURE(r8, 0x4c0a, &(0x7f0000001ac0)={r7, 0x0, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1c, "339f020bbe78b39843d601010000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323695c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200"}}) sendmsg$key(r6, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) 5m53.048728645s ago: executing program 33 (id=1114): sched_setscheduler(0x0, 0x2, 0x0) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r0, 0x8040450a, &(0x7f00000020c0)=""/4094) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0xa07, &(0x7f0000000200)={0x0, 0xcc72, 0x0, 0x3}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL) io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000100)='./file0\x00') mkdirat(0xffffffffffffff9c, 0x0, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) rename(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000280)='./file0\x00') r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x3f00) write$binfmt_script(r6, &(0x7f0000000080)={'#! ', './file0'}, 0xfffffffffffffcf3) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0x40305828, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1, 0x2}) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000040)) sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[], 0x5c}, 0x1, 0xf000, 0x0, 0x20000000}, 0x26061005) syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r7) 5m53.048487972s ago: executing program 34 (id=1116): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000002004000b7080000000000007b8af8ff00000000b7080000000200007b8af0", @ANYBLOB="0000000000000000b70500000800000085000000a50000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000240)={0x3, 0x4, 0x3, 0x6}, 0x10, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000340)=[{0x0, 0x1, 0xa, 0xb}, {0x2, 0x2, 0xf, 0x7}, {0x0, 0x5, 0x5, 0x9}], 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = syz_clone(0x800c000, &(0x7f0000001480), 0x0, 0x0, 0x0, 0x0) kcmp(r1, r1, 0x2, 0xffffffffffffffff, r0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000079e02200850000006d00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r5, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce", 0xb3) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x2, 0x13, 0x0, 0x0, 0x2}, 0x10}}, 0x0) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f00000001c0), 0x4) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r8 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x164f42) ioctl$LOOP_CONFIGURE(r8, 0x4c0a, &(0x7f0000001ac0)={r7, 0x0, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1c, "339f020bbe78b39843d601010000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323695c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200"}}) sendmsg$key(r6, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) 8.494307328s ago: executing program 4 (id=2548): getuid() openat$dsp(0xffffffffffffff9c, 0x0, 0x2002, 0x0) r0 = openat$dlm_monitor(0xffffff9c, &(0x7f00000000c0), 0x2300, 0x0) r1 = io_uring_setup(0x7fdb, &(0x7f0000000080)) mknodat$null(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x103) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x1000}}) r3 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) fstat(r3, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r5 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x84, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r5, 0x40045542, 0x0) syz_open_dev$dmmidi(&(0x7f0000000080), 0x200, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8983, &(0x7f0000000140)={0x6, 'bridge_slave_1\x00', {0x200}, 0x2}) capset(&(0x7f0000000240)={0x19980330}, &(0x7f0000000280)={0x0, 0xfffffffe, 0x0, 0xfffff0f4, 0x9, 0x1}) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000002500)=ANY=[@ANYBLOB="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"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$F2FS_IOC_MOVE_RANGE(r6, 0xc020f509, &(0x7f0000000040)={r6, 0x7fffffff, 0x4, 0x9b}) socket$nl_generic(0x10, 0x3, 0x10) getpid() sendmsg$MPTCP_PM_CMD_REMOVE(0xffffffffffffffff, 0x0, 0x20000045) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r7, 0x0, 0x1f00) sendmmsg$sock(r8, &(0x7f0000003bc0)=[{{0x0, 0xfe3d, 0x0}}, {{0x0, 0x0, 0x0}}], 0x4000000000002ca, 0x4040014) 5.444667554s ago: executing program 4 (id=2560): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x8, 0xb4, &(0x7f0000000140)=""/180, 0x41100, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffe94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0865ab350000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a40)={0xffffffffffffffff, 0xe0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f0000000880), &(0x7f00000008c0), 0x8, 0x0, 0x8, 0x0, 0x0}}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0x3, 0x9, 0x0, 0x8, 0xffffff89}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r0}, {}, {0x46, 0x0, 0x0, 0x76}}], {{}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000940)={r3, 0xe0, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r4 = getpid() sched_setscheduler(r4, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) ioprio_set$pid(0x3, 0x0, 0x4004) r7 = syz_io_uring_setup(0x16d2, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000040), &(0x7f0000000140)) io_uring_register$IORING_REGISTER_BUFFERS2(r7, 0xf, &(0x7f00000003c0)={0x1, 0xf4, 0x0, &(0x7f0000000340)=[{0x0}], 0x0}, 0x20) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) socket$inet6(0xa, 0x1, 0x0) r8 = socket$nl_rdma(0x10, 0x3, 0x14) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r9}, 0x4) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r9, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r10}, 0x10) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000f4fc9c0400000051000000653254e50188ba7861e3841f133b36c854c06dcba9aed9317d3a1e098f22cd36377257129a9375131c86f9ab6765e0478a69d9ea8c607964b6c4c104e1a9612100c0a3", @ANYRES32=0x1, @ANYRES64=r2, @ANYRES8=r8, @ANYRES32, @ANYBLOB="034000000100"/20], 0x50) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'bond0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x810}, 0x20000000) r11 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r11, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x2dc, 0x1b4, 0x0, 0x148, 0x1b4, 0x148, 0x248, 0x240, 0x240, 0x248, 0x240, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0x190, 0x1b4, 0x0, {}, [@common=@inet=@recent0={{0xf4}, {0x11e, 0x10, 0x2, 0x0, 'syz1\x00'}}, @common=@addrtype={{0x2c}}]}, @common=@inet=@SYNPROXY={0x24}}, {{@uncond, 0x0, 0x70, 0x94}, @common=@unspec=@STANDARD={0x24, '\x00', 0x0, 0xfffffffffffffffc}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x338) 5.334211579s ago: executing program 6 (id=2561): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, 0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r1, 0x0, 0x1, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) socket$caif_stream(0x25, 0x1, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = syz_io_uring_setup(0x117, &(0x7f0000000100), &(0x7f0000000280)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, 0xc}) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB=',useq']) io_uring_enter(r5, 0x47f6, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_int(r1, 0x0, 0x18, 0x0, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r8, 0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000440), r9) 4.587273904s ago: executing program 4 (id=2565): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) socket$inet_udp(0x2, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) syz_init_net_socket$llc(0x1a, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x2000000000000376, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0xa, 0x4}, 0x8, 0x10, &(0x7f0000000240)={0x3, 0x6, 0x7, 0x6}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000016c0), 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x800005d, 0x4810) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000a00), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x24, r5, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x24}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r6, &(0x7f0000000440)={0x0, 0x6, &(0x7f0000000340)={&(0x7f0000000180)={0x1c, r7, 0x209, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}]}, 0x1c}}, 0x0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="170329bd080d0000000003"], 0x24}, 0x1, 0x0, 0x0, 0x4004c81}, 0x0) write$cgroup_int(r3, &(0x7f0000000200)=0x1, 0x12) 4.446717319s ago: executing program 6 (id=2566): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) io_setup(0x27, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffed850000006d000000a50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) syz_open_dev$sg(&(0x7f0000000380), 0x0, 0x80000) syz_emit_ethernet(0x86, &(0x7f0000000040)=ANY=[@ANYBLOB="ffffffffffff0180c200000086dd6012000800503a00fe8000000000000000000000000000bbfe8000000000000000000000000000aa02d34d144c41f7f5be5b29ab00001100fc0f000000000000000000000000000000000100000000000000000532000000000000fb36eeca6fad50b375a22a584d16ca5500"/134], 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/tcp_dsack\x00', 0x1, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x8, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='mmap_lock_acquire_returned\x00', r4}, 0x10) prctl$PR_SET_THP_DISABLE(0x29, 0xdffffffffffffffe) bind$bt_sco(0xffffffffffffffff, &(0x7f0000000080)={0x1f, @none}, 0x8) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x101, 0x4}) r6 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0xfffffd52, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r5, 0xc01c64a3, &(0x7f0000000280)={0x3, r7, 0x3, 0x0, 0xa, 0x1ff, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR2(r5, 0xc02464bb, &(0x7f0000000080)={0x3, r7}) listen(0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r3, 0x4008af21, &(0x7f0000000240)={0x2, r3}) sched_setscheduler(0x0, 0x5, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) 3.994216794s ago: executing program 3 (id=2568): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendto$inet(r0, 0x0, 0x0, 0x60008004, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c0002800500"], 0x64}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$sndmidi(&(0x7f0000000340), 0x4, 0x4cce00) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0xfffffffffffffeb1}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1f, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x1, 0x0, 0x0, 0x1}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x34, 0x0, 0x8, 0x301, 0x0, 0x0, {}, [@CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_TIME_WAIT={0x8}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6}]}, 0x34}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000020000000000000001000004080000000000000002000000200000000000000000000009030000000000000000000004"], 0x0, 0x4a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000100)=0x2) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000040)=0x11) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_GET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)={0x28, r8, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'vlan1\x00'}}]}]}, 0x28}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="ac000000000101040000000000000000020000003c0001802c00018014000300ff0200000000000000fffffffffffffff8000400fe8000000000000000000000000000aa0c0002800500010000000000440002801400018008000100e000000108000200e00000012c00018014000300fe80000000000000000000000000001814000400ff0100000000000000000000000000010800074000000000100006800c0003800600020000000000"], 0xac}, 0x1, 0x0, 0x0, 0x800}, 0x0) socket$netlink(0x10, 0x3, 0x0) 3.844119364s ago: executing program 5 (id=2569): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) socket$kcm(0x29, 0x2, 0x0) memfd_create(&(0x7f0000000000)='e\xf4E\x88-\x00', 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x2, 0x50, r2, 0xb5725000) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r5 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) mknodat(r5, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) chdir(&(0x7f00000000c0)='./bus\x00') r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000240)='./bus\x00', 0x0) chdir(&(0x7f00000003c0)='./bus\x00') renameat2(r6, &(0x7f00000001c0)='./file0\x00', r6, &(0x7f0000000200)='./bus/file0\x00', 0x0) link(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='./bus\x00') r7 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents64(r7, &(0x7f0000000180)=""/105, 0x69) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) 3.544691887s ago: executing program 4 (id=2570): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000040000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000050900010073797a31000000004c000000050a01020000100000000000010020000c00024000000000000000010900010073797a310000000020000480140003006e657464657673696d300000000000000800014000000005"], 0xd4}}, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) timer_settime(0x0, 0x0, &(0x7f00000008c0)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) epoll_create1(0x80000) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x13, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)=0x0) timer_settime(r2, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000580)) openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/diskstats\x00', 0x0, 0x0) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/mdstat\x00', 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000340)={0x0, 0x0}) getpgrp(r4) pipe(0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000080)) 3.4445136s ago: executing program 6 (id=2571): socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) socket$igmp6(0xa, 0x3, 0x2) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x82602, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1e, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r5 = syz_io_uring_setup(0x117, &(0x7f0000000100), &(0x7f0000000280)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, 0xc}) io_uring_enter(r5, 0x47f6, 0x0, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000780)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000002000000000000000200000408000000000000000300000000000000000000000200000000000000000000000000000200000000000000000000000700"], 0x0, 0x56, 0x0, 0x0, 0x0, 0x0, @void, @value=0x12}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r8}, {}, {}, {0x85, 0x0, 0x0, 0x6d}}, {{0x6, 0x0, 0xb, 0x9, 0x0, 0x4}, {0x65, 0x0, 0x6, 0x9}}, [@printk={@ld, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0x2, 0xa, 0x9}, {0x4, 0x0, 0x3, 0x9}, {}, {}, {0x15}}], {{0x5, 0x1, 0x3, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000040)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 3.272721249s ago: executing program 5 (id=2572): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) socket$kcm(0x29, 0x2, 0x0) memfd_create(&(0x7f0000000000)='e\xf4E\x88-\x00', 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x2, 0x50, r2, 0xb5725000) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r5 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r5, 0x0, 0x0, 0x0) chdir(&(0x7f00000000c0)='./bus\x00') r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000240)='./bus\x00', 0x0) chdir(&(0x7f00000003c0)='./bus\x00') renameat2(r6, &(0x7f00000001c0)='./file0\x00', r6, &(0x7f0000000200)='./bus/file0\x00', 0x0) link(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='./bus\x00') r7 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents64(r7, &(0x7f0000000180)=""/105, 0x69) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) 3.074857827s ago: executing program 3 (id=2573): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) socket$inet_udp(0x2, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) syz_init_net_socket$llc(0x1a, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x2000000000000376, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0xa, 0x4}, 0x8, 0x10, &(0x7f0000000240)={0x3, 0x6, 0x7, 0x6}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000016c0), 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x800005d, 0x4810) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000a00), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x24, r5, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x24}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r6, &(0x7f0000000440)={0x0, 0x6, &(0x7f0000000340)={&(0x7f0000000180)={0x1c, r7, 0x209, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}]}, 0x1c}}, 0x0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="170329bd080d0000000003"], 0x24}, 0x1, 0x0, 0x0, 0x4004c81}, 0x0) write$cgroup_int(r3, &(0x7f0000000200)=0x1, 0x12) 2.621692091s ago: executing program 5 (id=2574): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, 0x0, &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340), 0x10, 0x37, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000ffffffff008000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYBLOB="fcffffbc56e0827c61f89d00"/28], 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000180)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000240)={0x1d, r4, 0x2}, 0x18) connect$can_j1939(r3, &(0x7f0000000200)={0x1d, r4}, 0x18) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r5, &(0x7f0000000040)={0x1f, 0x5, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x2}, 0xe) connect(r5, &(0x7f00000004c0)=@rc={0x1f, @none, 0x8}, 0x80) sendmmsg(r3, &(0x7f00000038c0)=[{{0x0, 0x0, 0x0}}], 0x3ffffffffffff06, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) syz_io_uring_setup(0x2c0c, 0x0, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0x32, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="da142ace35eb9ca86a10749d839924a8ed1e4068180139ba8912538a211964d8543b08c22b31aa8d80116533a2fa3c63b3769b93f87f1a3b8ac90566c4f8d92e26aba788d2fdf13d160dbc257e261857b75e0fffe5954503eb6b99cdad0ecc58addc4d595ab7f7f7971b0620dbd847a2e0530ed124b953b44304e518695fc58668c030ce1d880c362c4901364a5caedef1578060c0fe3364dfda4215635af6e0b4d80ec2f6d41e7ca2058c0a088f25d1e64122d73c185c65", @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r7, r0}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r9, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_MM(0x23, 0x9, &(0x7f0000961000/0x4000)=nil) 2.567580803s ago: executing program 6 (id=2575): ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x10, 0x1, 0x384c4150, 0x4, 0x1, [{0x1, 0xc2}, {0x4, 0xa9}, {0x6, 0x100}, {0xb3, 0x76d2}, {0x1, 0xfffff801}, {0x3, 0x2}, {0x10, 0x2}, {0xd9, 0x8}], 0x69, 0xf, 0x8, 0x2, 0x2}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_VLAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYRESDEC=r0, @ANYRES16, @ANYRES64=0xffffffffffffffff, @ANYRES8, @ANYRES64=r0], 0x1c}}, 0x48000) syz_usbip_server_init(0x4) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000), 0x4) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800"/15], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffb, @void, @value}, 0x94) mkdir(&(0x7f00000008c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000340)='adfs\x00', 0x4, 0x0) utimes(&(0x7f0000000300)='./file0\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r5}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x15) syz_emit_vhci(&(0x7f0000000540)=ANY=[], 0x22) syz_emit_vhci(0x0, 0xfffffe10) socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYRES64=r2, @ANYRES8=r2, @ANYRESDEC=r3, @ANYRES32=0x0], 0x17) r6 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r6, r7) sendmsg$NL80211_CMD_JOIN_MESH(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) setsockopt$bt_BT_SECURITY(r4, 0x112, 0x4, &(0x7f0000003000)={0x2}, 0x2) 2.164579174s ago: executing program 3 (id=2576): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) socket$netlink(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xb4, &(0x7f0000000140)=""/180, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f00000005c0)={0xb, {'syz1\x00', 'syz1\x00', 'syz0\x00', 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "80"}}, 0x119) ioctl$LOOP_SET_CAPACITY(0xffffffffffffffff, 0x4c07) r3 = fanotify_init(0x0, 0x0) r4 = fanotify_init(0x20, 0x80000) r5 = fanotify_init(0x4, 0x0) r6 = epoll_create1(0x0) r7 = fcntl$dupfd(r6, 0x2, 0xffffffffffffffff) fanotify_mark(r5, 0x1, 0x8000011, r7, 0x0) r8 = epoll_create1(0x0) r9 = fcntl$dupfd(r8, 0x2, 0xffffffffffffffff) fanotify_mark(r4, 0x1, 0x8000011, r9, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xc, 0x12, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) socket$packet(0x11, 0x2, 0x300) 1.798013924s ago: executing program 3 (id=2577): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendto$inet(r0, 0x0, 0x0, 0x60008004, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c0002800500"], 0x64}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$sndmidi(&(0x7f0000000340), 0x4, 0x4cce00) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0xfffffffffffffeb1}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1f, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x1, 0x0, 0x0, 0x1}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x34, 0x0, 0x8, 0x301, 0x0, 0x0, {}, [@CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_TIME_WAIT={0x8}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6}]}, 0x34}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000020000000000000001000004080000000000000002000000200000000000000000000009030000000000000000000004"], 0x0, 0x4a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000100)=0x2) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000040)=0x11) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_GET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)={0x28, r8, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'vlan1\x00'}}]}]}, 0x28}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="ac000000000101040000000000000000020000003c0001802c00018014000300ff0200000000000000fffffffffffffff8000400fe8000000000000000000000000000aa0c0002800500010000000000440002801400018008000100e000000108000200e00000012c00018014000300fe80000000000000000000000000001814000400ff0100000000000000000000000000010800074000000000100006800c0003800600020000000000"], 0xac}, 0x1, 0x0, 0x0, 0x800}, 0x0) socket$netlink(0x10, 0x3, 0x0) 1.459009796s ago: executing program 5 (id=2578): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) socket$kcm(0x29, 0x2, 0x0) memfd_create(&(0x7f0000000000)='e\xf4E\x88-\x00', 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x2, 0x50, r2, 0xb5725000) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r5 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r5, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) chdir(&(0x7f00000000c0)='./bus\x00') r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000240)='./bus\x00', 0x0) chdir(0x0) renameat2(r6, &(0x7f00000001c0)='./file0\x00', r6, 0x0, 0x0) link(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='./bus\x00') r7 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents64(r7, &(0x7f0000000180)=""/105, 0x69) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) 1.26950455s ago: executing program 6 (id=2579): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) io_setup(0x27, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffed850000006d000000a50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) syz_open_dev$sg(&(0x7f0000000380), 0x0, 0x80000) syz_emit_ethernet(0x86, &(0x7f0000000040)=ANY=[@ANYBLOB="ffffffffffff0180c200000086dd6012000800503a00fe8000000000000000000000000000bbfe8000000000000000000000000000aa02d34d144c41f7f5be5b29ab00001100fc0f000000000000000000000000000000000100000000000000000532000000000000fb36eeca6fad50b375a22a584d16ca5500"/134], 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/tcp_dsack\x00', 0x1, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x8, &(0x7f0000001b40)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='mmap_lock_acquire_returned\x00', r4}, 0x10) prctl$PR_SET_THP_DISABLE(0x29, 0xdffffffffffffffe) bind$bt_sco(0xffffffffffffffff, &(0x7f0000000080)={0x1f, @none}, 0x8) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x101, 0x4}) r6 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0xfffffd52, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r5, 0xc01c64a3, &(0x7f0000000280)={0x3, r7, 0x3, 0x0, 0xa, 0x1ff, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR2(r5, 0xc02464bb, &(0x7f0000000080)={0x3, r7}) listen(0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r3, 0x4008af21, &(0x7f0000000240)={0x2, r3}) sched_setscheduler(0x0, 0x5, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) 1.053720219s ago: executing program 5 (id=2580): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) socket$kcm(0x29, 0x2, 0x0) memfd_create(&(0x7f0000000000)='e\xf4E\x88-\x00', 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x2, 0x50, r2, 0xb5725000) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r5 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) mknodat(r5, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) chdir(&(0x7f00000000c0)='./bus\x00') r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000240)='./bus\x00', 0x0) chdir(&(0x7f00000003c0)='./bus\x00') renameat2(r6, &(0x7f00000001c0)='./file0\x00', r6, &(0x7f0000000200)='./bus/file0\x00', 0x0) link(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='./bus\x00') r7 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents64(r7, &(0x7f0000000180)=""/105, 0x69) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) 854.391204ms ago: executing program 3 (id=2581): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendto$inet(r0, 0x0, 0x0, 0x60008004, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c0002800500"], 0x64}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$sndmidi(&(0x7f0000000340), 0x4, 0x4cce00) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0xfffffffffffffeb1}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1f, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x1, 0x0, 0x0, 0x1}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x34, 0x0, 0x8, 0x301, 0x0, 0x0, {}, [@CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_TIME_WAIT={0x8}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6}]}, 0x34}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000020000000000000001000004080000000000000002000000200000000000000000000009030000000000000000000004"], 0x0, 0x4a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000100)=0x2) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000040)=0x11) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_GET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)={0x28, r8, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'vlan1\x00'}}]}]}, 0x28}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="ac000000000101040000000000000000020000003c0001802c00018014000300ff0200000000000000fffffffffffffff8000400fe8000000000000000000000000000aa0c0002800500010000000000440002801400018008000100e000000108000200e00000012c00018014000300fe80000000000000000000000000001814000400ff0100000000000000000000000000010800074000000000100006800c0003800600020000000000"], 0xac}, 0x1, 0x0, 0x0, 0x800}, 0x0) socket$netlink(0x10, 0x3, 0x0) 853.791445ms ago: executing program 6 (id=2582): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) socket$inet_udp(0x2, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) syz_init_net_socket$llc(0x1a, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x2000000000000376, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0xa, 0x4}, 0x8, 0x10, &(0x7f0000000240)={0x3, 0x6, 0x7, 0x6}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000016c0), 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x800005d, 0x4810) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$fou(&(0x7f0000000a00), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x24, r6, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x24}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r7, &(0x7f0000000440)={0x0, 0x6, &(0x7f0000000340)={&(0x7f0000000180)={0x1c, r8, 0x209, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}]}, 0x1c}}, 0x0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="170329bd080d0000000003"], 0x24}, 0x1, 0x0, 0x0, 0x4004c81}, 0x0) write$cgroup_int(r4, &(0x7f0000000200)=0x1, 0x12) 402.902785ms ago: executing program 4 (id=2583): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) socket$kcm(0x29, 0x2, 0x0) memfd_create(&(0x7f0000000000)='e\xf4E\x88-\x00', 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x2, 0x50, r2, 0xb5725000) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r5 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r5, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) chdir(0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000240)='./bus\x00', 0x0) chdir(&(0x7f00000003c0)='./bus\x00') renameat2(r6, &(0x7f00000001c0)='./file0\x00', r6, &(0x7f0000000200)='./bus/file0\x00', 0x0) link(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='./bus\x00') r7 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents64(r7, &(0x7f0000000180)=""/105, 0x69) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) 271.202038ms ago: executing program 4 (id=2584): socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x14000000}, 0x24000000) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) ioctl$SNDCTL_SYNTH_ID(r1, 0xc08c5114, &(0x7f0000000480)={"a4da51ae8786000000000000003f9b2c681a0100", 0xfff, 0x0, 0x0, 0x8, 0x400, 0x96, 0xfffffff9, 0x1, [0x1, 0x3, 0xffffffff, 0x2, 0x8, 0xffff60e0, 0xffff, 0x5, 0xa0, 0x2a9, 0x100, 0x1, 0x8001, 0x0, 0x0, 0x0, 0x400, 0x5, 0x80]}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_HEADER(r3, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x40, 0xc, 0x6, 0x3, 0x0, 0x0, {0x2, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x48045}, 0x20000001) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) setsockopt$sock_linger(r5, 0x1, 0xd, &(0x7f0000000380)={0x0, 0x2}, 0x8) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000180)=0x3, 0x12) syz_init_net_socket$rose(0xb, 0x5, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r6, 0x84, 0x12, &(0x7f00000002c0)=0x2, 0x4) r7 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r7, &(0x7f0000000080)={&(0x7f0000000100)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e20, 0x9c000000, @dev={0xfe, 0x80, '\x00', 0x30}, 0x1df}}, 0x80, 0x0, 0x0, &(0x7f0000001240)=[{0x10, 0x110, 0x1, "dc"}], 0x10}, 0x0) ioperm(0x4, 0x2534, 0x8) finit_module(0xffffffffffffffff, 0x0, 0x7fb1fdb2d16f7eb4) sendto$inet6(r6, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) ioctl$SNDCTL_TMR_TEMPO(r0, 0xc0045405, 0x0) 546.592µs ago: executing program 5 (id=2585): syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, @any, 0x3}, 0xfffffffffffffcc1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000c80)=[{0x20, 0xfc, 0x0, 0xfffff00c}]}, 0x8) r2 = fcntl$dupfd(r0, 0x0, r1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) cachestat(r3, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) setresuid(0xee01, 0x0, 0x0) keyctl$session_to_parent(0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x2, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, @void, @value}, 0x94) r4 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r4, 0xab00, r5) r7 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) ioctl$NBD_SET_SOCK(r4, 0xab00, r4) ioctl$NBD_SET_FLAGS(r7, 0xab0a, 0x1000001000104) ioctl$NBD_SET_SOCK(r7, 0xab00, r5) ioctl$NBD_DO_IT(r4, 0xab03) ioctl$NBD_CLEAR_SOCK(r7, 0xab04) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r2, 0x0, 0x67e}, 0x18) r8 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x0, 0xd4181) r9 = dup(r8) write$6lowpan_enable(r9, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$usbfs(&(0x7f0000000100), 0x10, 0x1a5601) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/tcp_timestamps\x00', 0x1, 0x0) writev(r6, &(0x7f00000000c0)=[{&(0x7f0000000200)='2', 0x1}], 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$OSF_MSG_ADD(0xffffffffffffffff, 0x0, 0x0) 0s ago: executing program 3 (id=2586): ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xcfb}}, './file0\x00'}) ioctl$PPPOEIOCDFWD(r0, 0xb101, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000340)=[{0x0, 0x1, 0xa, 0xb}, {0x5, 0x2, 0x13, 0x2}, {0x5, 0x5, 0x5, 0x9}], 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), 0x0, 0x0, 0xfffffffffffffffd) r6 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000004380), 0x101602, 0x0) read$FUSE(r6, &(0x7f00000020c0)={0x2020}, 0xffffffffffffff5c) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'veth0_to_team\x00'}) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b040000000000000000020000000900010073797a30000000000900020073797a320000000014000000110001"], 0x54}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_DELRULE={0x58, 0x6, 0xa, 0x135cfb4307d517, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x2}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_HASH_TYPE={0x8}]}}}]}]}], {0x14}}, 0x80}}, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049e9) mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) socket$can_j1939(0x1d, 0x2, 0x7) kernel console output (not intermixed with test programs): 1753'. [ 585.570788][ T9] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 585.725871][ T9] usb 9-1: config 1 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 64, changing to 10 [ 585.729587][ T9] usb 9-1: config 1 interface 0 has no altsetting 0 [ 585.734907][ T9] usb 9-1: New USB device found, idVendor=1b1c, idProduct=1c04, bcdDevice= 0.40 [ 585.738027][ T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 585.743599][ T9] usb 9-1: Product: ఄ [ 585.745192][ T9] usb 9-1: Manufacturer: ࡊ假迎㖅钂衑ᱬ蟢帰㥿뢙蹊ᚙ會觮ꫴ뱕捫槓鋙뱓쩏鮧㆑僢걄ݹ [ 585.749077][ T9] usb 9-1: SerialNumber: syz [ 585.760479][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 585.925808][T14027] VFS: could not find a valid V7 on nullb0. [ 585.932824][ T39] kauditd_printk_skb: 4 callbacks suppressed [ 585.932834][ T39] audit: type=1326 audit(1734441697.434:376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14025 comm="syz.3.1756" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf715e579 code=0x7fc00000 [ 586.169602][ T9] usbhid 9-1:1.0: can't add hid device: -71 [ 586.171744][ T9] usbhid 9-1:1.0: probe with driver usbhid failed with error -71 [ 586.178205][ T9] usb 9-1: USB disconnect, device number 4 [ 586.617268][ T39] audit: type=1326 audit(1734441698.114:377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14025 comm="syz.3.1756" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf715e579 code=0x7fc00000 [ 586.800559][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 587.117100][T14061] 8021q: adding VLAN 0 to HW filter on device bond0 [ 587.226368][T14065] netlink: 'syz.4.1762': attribute type 10 has an invalid length. [ 587.289862][T14062] netlink: 'syz.4.1762': attribute type 10 has an invalid length. [ 587.290626][T14065] batman_adv: batadv0: Adding interface: team0 [ 587.292535][T14062] netlink: 2 bytes leftover after parsing attributes in process `syz.4.1762'. [ 587.297061][T14065] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 587.300733][T14062] team0: entered promiscuous mode [ 587.302192][T14062] team_slave_0: entered promiscuous mode [ 587.303989][T14062] team_slave_1: entered promiscuous mode [ 587.307573][T14062] 8021q: adding VLAN 0 to HW filter on device team0 [ 587.309549][T14062] batman_adv: batadv0: Interface activated: team0 [ 587.311658][T14062] batman_adv: batadv0: Interface deactivated: team0 [ 587.313723][T14062] batman_adv: batadv0: Removing interface: team0 [ 587.316806][T14062] bridge0: port 3(team0) entered blocking state [ 587.322201][T14062] bridge0: port 3(team0) entered disabled state [ 587.325558][T14062] team0: entered allmulticast mode [ 587.328296][T14062] team_slave_0: entered allmulticast mode [ 587.331497][T14062] team_slave_1: entered allmulticast mode [ 587.497096][T14062] bridge0: port 3(team0) entered blocking state [ 587.498832][T14062] bridge0: port 3(team0) entered forwarding state [ 587.840762][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 588.856493][T14097] VFS: could not find a valid V7 on nullb0. [ 588.879219][ T39] audit: type=1326 audit(1734441700.374:378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14095 comm="syz.5.1769" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf713e579 code=0x7fc00000 [ 588.880526][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 589.220815][ T39] audit: type=1326 audit(1734441700.714:379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14083 comm="syz.4.1767" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f82579 code=0x7fc00000 [ 589.249967][T14103] ax25_connect(): syz.4.1771 uses autobind, please contact jreuter@yaina.de [ 589.628859][ T39] audit: type=1326 audit(1734441701.114:380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14095 comm="syz.5.1769" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf713e579 code=0x7fc00000 [ 589.638113][ T39] audit: type=1326 audit(1734441701.114:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14095 comm="syz.5.1769" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf713e579 code=0x7fc00000 [ 589.648587][ T39] audit: type=1326 audit(1734441701.114:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14095 comm="syz.5.1769" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf713e579 code=0x7fc00000 [ 589.679976][ T39] audit: type=1326 audit(1734441701.114:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14095 comm="syz.5.1769" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf713e579 code=0x7fc00000 [ 589.699448][ T39] audit: type=1326 audit(1734441701.114:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14095 comm="syz.5.1769" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf713e579 code=0x7fc00000 [ 589.727767][ T39] audit: type=1326 audit(1734441701.114:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14095 comm="syz.5.1769" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf713e579 code=0x7fc00000 [ 589.920530][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 590.960521][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 591.474057][ T5994] IPVS: starting estimator thread 0... [ 591.560465][T14149] IPVS: using max 38 ests per chain, 91200 per kthread [ 592.000573][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 592.293462][T14159] Bluetooth: hci0: Frame reassembly failed (-84) [ 592.407709][ T1045] Bluetooth: hci0: Frame reassembly failed (-84) [ 592.439039][T14154] o2cb: This node has not been configured. [ 592.442283][T14154] o2cb: Cluster check failed. Fix errors before retrying. [ 592.444464][T14154] (syz.4.1781,14154,0):user_dlm_register:674 ERROR: status = -22 [ 592.446773][T14154] (syz.4.1781,14154,0):dlmfs_mkdir:436 ERROR: Error -22 could not register domain "bus" [ 592.502782][T14165] VFS: could not find a valid V7 on nullb0. [ 592.528285][ T39] kauditd_printk_skb: 1 callbacks suppressed [ 592.528300][ T39] audit: type=1326 audit(1734441704.024:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14163 comm="syz.3.1787" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf715e579 code=0x7fc00000 [ 592.891246][T14170] SET target dimension over the limit! [ 593.040574][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 593.273568][ T39] audit: type=1326 audit(1734441704.774:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14163 comm="syz.3.1787" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf715e579 code=0x7fc00000 [ 593.910262][ T39] audit: type=1326 audit(1734441705.404:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14184 comm="syz.4.1792" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f82579 code=0x7fc00000 [ 593.952032][ T39] audit: type=1326 audit(1734441705.454:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14186 comm="syz.3.1793" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf715e579 code=0x7fc00000 [ 594.083112][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 594.320562][ T5303] Bluetooth: hci0: command 0x1003 tx timeout [ 594.323087][ T5954] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 594.652086][ T39] audit: type=1326 audit(1734441706.154:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14186 comm="syz.3.1793" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf715e579 code=0x7fc00000 [ 594.663988][ T39] audit: type=1326 audit(1734441706.164:392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14184 comm="syz.4.1792" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f82579 code=0x7fc00000 [ 595.130582][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 595.224498][ T39] audit: type=1326 audit(1734441706.724:393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14191 comm="syz.5.1794" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf713e579 code=0x7fc00000 [ 595.274990][T14215] ax25_connect(): syz.5.1800 uses autobind, please contact jreuter@yaina.de [ 595.554523][T14223] usb 2-1: USB disconnect, device number 3 [ 595.660813][T14224] hub 2-0:1.0: USB hub found [ 595.662725][T14224] hub 2-0:1.0: 6 ports detected [ 595.850586][ T1454] usb 2-1: new high-speed USB device number 4 using ehci-pci [ 596.084642][ T1454] usb 2-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00 [ 596.087054][ T1454] usb 2-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10 [ 596.089247][ T1454] usb 2-1: Product: QEMU USB Tablet [ 596.090735][ T1454] usb 2-1: Manufacturer: QEMU [ 596.092003][ T1454] usb 2-1: SerialNumber: 28754-0000:00:1d.7-1 [ 596.141981][ T1454] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.7/usb2/2-1/2-1:1.0/0003:0627:0001.0006/input/input25 [ 596.160601][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 596.201971][ T1454] hid-generic 0003:0627:0001.0006: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.7-1/input0 [ 596.482122][T14240] VFS: could not find a valid V7 on nullb0. [ 596.498041][ T39] audit: type=1326 audit(1734441707.994:394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14238 comm="syz.4.1805" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f82579 code=0x7fc00000 [ 596.892273][T14243] VFS: could not find a valid V7 on nullb0. [ 596.908771][ T39] audit: type=1326 audit(1734441708.404:395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14241 comm="syz.5.1806" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf713e579 code=0x7fc00000 [ 597.200601][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 597.234346][ T39] audit: type=1326 audit(1734441708.734:396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14238 comm="syz.4.1805" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f82579 code=0x7fc00000 [ 597.609215][ T39] audit: type=1326 audit(1734441709.104:397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14241 comm="syz.5.1806" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf713e579 code=0x7fc00000 [ 597.639521][ T835] IPVS: starting estimator thread 0... [ 597.730545][T14248] IPVS: using max 38 ests per chain, 91200 per kthread [ 597.767368][T14256] VFS: could not find a valid V7 on nullb0. [ 597.793400][ T39] audit: type=1326 audit(1734441709.294:398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14250 comm="syz.4.1815" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f82579 code=0x7fc00000 [ 598.149661][T14255] xt_policy: output policy not valid in PREROUTING and INPUT [ 598.240600][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 598.484966][ T39] audit: type=1326 audit(1734441709.974:399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14249 comm="syz.3.1809" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf715e579 code=0x7fc00000 [ 598.500608][ T39] audit: type=1326 audit(1734441709.974:400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14249 comm="syz.3.1809" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf715e579 code=0x7fc00000 [ 598.506939][ T39] audit: type=1326 audit(1734441709.974:401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14249 comm="syz.3.1809" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf715e579 code=0x7fc00000 [ 598.514184][ T39] audit: type=1326 audit(1734441709.974:402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14249 comm="syz.3.1809" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf715e579 code=0x7fc00000 [ 598.520337][ T39] audit: type=1326 audit(1734441709.974:403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14249 comm="syz.3.1809" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf715e579 code=0x7fc00000 [ 598.526264][ T39] audit: type=1326 audit(1734441709.974:404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14249 comm="syz.3.1809" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf715e579 code=0x7fc00000 [ 598.536576][ T39] audit: type=1326 audit(1734441709.974:405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14249 comm="syz.3.1809" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf715e579 code=0x7fc00000 [ 598.554032][ T39] audit: type=1326 audit(1734441709.974:406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14249 comm="syz.3.1809" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf715e579 code=0x7fc00000 [ 599.280495][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 599.996572][T14268] o2cb: This node has not been configured. [ 599.998288][T14268] o2cb: Cluster check failed. Fix errors before retrying. [ 600.000694][T14268] (syz.3.1813,14268,1):user_dlm_register:674 ERROR: status = -22 [ 600.003382][T14268] (syz.3.1813,14268,1):dlmfs_mkdir:436 ERROR: Error -22 could not register domain "bus" [ 600.330495][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 600.447571][T14313] syz.4.1817: attempt to access beyond end of device [ 600.447571][T14313] nbd4: rw=0, sector=64, nr_sectors = 2 limit=0 [ 600.454372][T14313] syz.4.1817: attempt to access beyond end of device [ 600.454372][T14313] nbd4: rw=0, sector=512, nr_sectors = 2 limit=0 [ 600.458584][T14313] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 600.462877][T14313] syz.4.1817: attempt to access beyond end of device [ 600.462877][T14313] nbd4: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 600.467192][T14313] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 600.470506][T14313] syz.4.1817: attempt to access beyond end of device [ 600.470506][T14313] nbd4: rw=0, sector=64, nr_sectors = 4 limit=0 [ 600.474432][T14313] syz.4.1817: attempt to access beyond end of device [ 600.474432][T14313] nbd4: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 600.478861][T14313] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 600.482950][T14313] syz.4.1817: attempt to access beyond end of device [ 600.482950][T14313] nbd4: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 600.487796][T14313] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 600.497390][T14313] syz.4.1817: attempt to access beyond end of device [ 600.497390][T14313] nbd4: rw=0, sector=64, nr_sectors = 8 limit=0 [ 600.502494][T14313] syz.4.1817: attempt to access beyond end of device [ 600.502494][T14313] nbd4: rw=0, sector=2048, nr_sectors = 8 limit=0 [ 600.507131][T14313] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 600.511578][T14313] syz.4.1817: attempt to access beyond end of device [ 600.511578][T14313] nbd4: rw=0, sector=4096, nr_sectors = 8 limit=0 [ 600.516571][T14313] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 600.520117][T14313] UDF-fs: warning (device nbd4): udf_fill_super: No partition found (1) [ 600.552268][T14312] lo speed is unknown, defaulting to 1000 [ 600.586812][T14312] speed is unknown, defaulting to 1000 [ 600.600430][T14315] ebtables: wrong size: *len 80, entries_size 48, replsz 48 [ 600.649724][T14312] speed is unknown, defaulting to 1000 [ 600.790784][T14308] nbd4: detected capacity change from 0 to 67108884 [ 600.795846][T13643] block nbd4: Send control failed (result -89) [ 600.797487][T13643] block nbd4: Request send failed, requeueing [ 600.804662][ T5954] block nbd4: Receive control failed (result -32) [ 600.807558][ T7358] block nbd4: Dead connection, failed to find a fallback [ 600.809518][ T7358] block nbd4: shutting down sockets [ 600.811577][ T7358] blk_print_req_error: 79 callbacks suppressed [ 600.811589][ T7358] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 600.816452][ T7358] buffer_io_error: 39 callbacks suppressed [ 600.816458][ T7358] Buffer I/O error on dev nbd4, logical block 0, async page read [ 600.821531][T13643] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 600.823868][T13643] Buffer I/O error on dev nbd4, logical block 0, async page read [ 600.825921][T13643] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 600.828234][T13643] Buffer I/O error on dev nbd4, logical block 0, async page read [ 600.832208][T13643] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 600.834544][T13643] Buffer I/O error on dev nbd4, logical block 0, async page read [ 600.836580][T13643] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 600.838965][T13643] Buffer I/O error on dev nbd4, logical block 0, async page read [ 600.841787][T13643] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 600.844772][T13643] Buffer I/O error on dev nbd4, logical block 0, async page read [ 600.847558][T13643] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 600.851338][T13643] Buffer I/O error on dev nbd4, logical block 0, async page read [ 600.854223][T13643] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 600.860553][T13643] Buffer I/O error on dev nbd4, logical block 0, async page read [ 600.863021][T13643] ldm_validate_partition_table(): Disk read failed. [ 600.865567][T13643] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 600.868786][T13643] Buffer I/O error on dev nbd4, logical block 0, async page read [ 600.871383][T13643] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 600.874873][T13643] Buffer I/O error on dev nbd4, logical block 0, async page read [ 600.878193][T13643] Dev nbd4: unable to read RDB block 0 [ 600.880182][T13643] nbd4: unable to read partition table [ 600.966550][T14319] ax25_connect(): syz.6.1820 uses autobind, please contact jreuter@yaina.de [ 601.015051][T13643] ldm_validate_partition_table(): Disk read failed. [ 601.017208][T13643] Dev nbd4: unable to read RDB block 0 [ 601.019075][T13643] nbd4: unable to read partition table [ 601.155598][T14310] veth1_macvtap: left promiscuous mode [ 601.360681][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 601.702569][T14336] ax25_connect(): syz.3.1823 uses autobind, please contact jreuter@yaina.de [ 602.285022][T14354] Bluetooth: hci0: Frame reassembly failed (-84) [ 602.400597][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 602.418700][ T1045] Bluetooth: hci0: Frame reassembly failed (-84) [ 602.421273][ T1045] Bluetooth: hci0: Frame reassembly failed (-84) [ 602.768344][T14367] lo speed is unknown, defaulting to 1000 [ 602.816277][T14370] ebtables: wrong size: *len 80, entries_size 48, replsz 48 [ 602.829892][T14367] speed is unknown, defaulting to 1000 [ 602.893884][T14367] speed is unknown, defaulting to 1000 [ 603.013247][T14372] sp0: Synchronizing with TNC [ 603.451110][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 603.698756][T14380] lo speed is unknown, defaulting to 1000 [ 603.757745][T14380] speed is unknown, defaulting to 1000 [ 603.794740][T14380] speed is unknown, defaulting to 1000 [ 604.165962][T14387] ax25_connect(): syz.4.1833 uses autobind, please contact jreuter@yaina.de [ 604.179287][T14387] netlink: 'syz.4.1833': attribute type 10 has an invalid length. [ 604.188375][T14387] bond0: (slave batadv0): Error -22 calling dev_set_mtu [ 604.320552][ T5954] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 604.321715][ T5303] Bluetooth: hci0: command 0x1003 tx timeout [ 604.480498][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 604.652609][T14401] lo speed is unknown, defaulting to 1000 [ 604.769798][T14401] speed is unknown, defaulting to 1000 [ 604.807914][T14401] speed is unknown, defaulting to 1000 [ 604.964636][ T39] kauditd_printk_skb: 60 callbacks suppressed [ 604.964650][ T39] audit: type=1326 audit(1734441716.464:467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14384 comm="syz.5.1834" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf713e579 code=0x7fc00000 [ 605.030257][ T39] audit: type=1326 audit(1734441716.524:468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14411 comm="syz.6.1840" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f15579 code=0x7fc00000 [ 605.492063][T14427] 8021q: adding VLAN 0 to HW filter on device bond1 [ 605.520479][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 605.713697][ T39] audit: type=1326 audit(1734441717.214:469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14411 comm="syz.6.1840" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f15579 code=0x7fc00000 [ 605.937182][T14435] syz.6.1844 (14435): drop_caches: 2 [ 606.570434][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 606.847794][T14451] ax25_connect(): syz.6.1849 uses autobind, please contact jreuter@yaina.de [ 606.874470][T14451] netlink: 'syz.6.1849': attribute type 10 has an invalid length. [ 606.886236][T14451] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 607.277220][T14461] lo speed is unknown, defaulting to 1000 [ 607.343029][T14461] speed is unknown, defaulting to 1000 [ 607.368353][T14462] ebtables: wrong size: *len 80, entries_size 48, replsz 48 [ 607.466330][T14461] speed is unknown, defaulting to 1000 [ 607.610468][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 608.055466][ T39] audit: type=1326 audit(1734441719.554:470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14465 comm="syz.5.1854" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf713e579 code=0x7fc00000 [ 608.650440][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 608.722966][T14483] veth1_macvtap: left promiscuous mode [ 608.847946][T14489] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 609.680443][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 609.780664][ T73] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 609.953135][ T73] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 609.956040][ T73] usb 9-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 609.958604][ T73] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 609.961302][ T73] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 609.970009][T14493] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 609.973291][ T73] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 610.444190][T14503] virtio-fs: tag <(null)> not found [ 610.530341][ T5829] usb 9-1: USB disconnect, device number 5 [ 610.643398][T14506] lo speed is unknown, defaulting to 1000 [ 610.684247][T14506] speed is unknown, defaulting to 1000 [ 610.691423][T14507] ebtables: wrong size: *len 80, entries_size 48, replsz 48 [ 610.720445][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 610.730927][T14506] speed is unknown, defaulting to 1000 [ 610.888065][T14517] ax25_connect(): syz.4.1865 uses autobind, please contact jreuter@yaina.de [ 611.760465][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 612.370119][T14559] VFS: could not find a valid V7 on nullb0. [ 612.386368][ T39] audit: type=1326 audit(1734441723.884:471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14557 comm="syz.6.1871" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f15579 code=0x7fc00000 [ 612.636428][T14564] lo speed is unknown, defaulting to 1000 [ 612.679252][T14568] ebtables: wrong size: *len 80, entries_size 48, replsz 48 [ 612.699164][T14564] speed is unknown, defaulting to 1000 [ 612.706882][ T39] audit: type=1326 audit(1734441724.204:472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14561 comm="syz.4.1872" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f82579 code=0x7fc00000 [ 612.742314][T14564] speed is unknown, defaulting to 1000 [ 612.800439][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 613.085112][ T39] audit: type=1326 audit(1734441724.584:473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14557 comm="syz.6.1871" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f15579 code=0x7fc00000 [ 613.412800][ T39] audit: type=1326 audit(1734441724.914:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14561 comm="syz.4.1872" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f82579 code=0x7fc00000 [ 613.655454][T14585] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1879'. [ 613.840488][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 614.388767][T14601] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1882'. [ 614.588772][T14603] lo speed is unknown, defaulting to 1000 [ 614.675048][T14604] ebtables: wrong size: *len 80, entries_size 48, replsz 48 [ 614.702396][T14603] speed is unknown, defaulting to 1000 [ 614.742260][T14603] speed is unknown, defaulting to 1000 [ 614.788653][T14610] VFS: could not find a valid V7 on nullb0. [ 614.818174][ T39] audit: type=1326 audit(1734441726.314:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14606 comm="syz.4.1884" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f82579 code=0x7fc00000 [ 614.880477][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 615.555707][T14625] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1889'. [ 615.579578][ T39] audit: type=1326 audit(1734441727.074:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14606 comm="syz.4.1884" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f82579 code=0x7fc00000 [ 615.920454][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 616.005154][T14636] rdma_rxe: rxe_newlink: failed to add lo [ 616.008452][T14636] : renamed from lo (while UP) [ 616.211055][ T5994] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 616.212148][T14632] syzkaller0: entered promiscuous mode [ 616.215402][T14632] syzkaller0: entered allmulticast mode [ 616.740187][T14652] ax25_connect(): syz.4.1894 uses autobind, please contact jreuter@yaina.de [ 616.970478][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 617.144404][T14669] xt_policy: output policy not valid in PREROUTING and INPUT [ 618.000703][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 618.075109][T14683] netlink: 44 bytes leftover after parsing attributes in process `syz.6.1899'. [ 618.279128][T14689] VFS: could not find a valid V7 on nullb0. [ 618.320669][ T39] audit: type=1326 audit(1734441729.824:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14685 comm="syz.6.1900" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f15579 code=0x7fc00000 [ 618.326663][ T39] audit: type=1326 audit(1734441729.824:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14685 comm="syz.6.1900" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f15579 code=0x7fc00000 [ 619.040470][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 619.842016][T14727] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1908'. [ 619.914735][T14730] VFS: could not find a valid V7 on nullb0. [ 619.939382][ T39] audit: type=1326 audit(1734441731.434:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14724 comm="syz.4.1907" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f82579 code=0x7fc00000 [ 619.987622][T14732] VFS: could not find a valid V7 on nullb0. [ 620.011713][ T39] audit: type=1326 audit(1734441731.514:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14728 comm="syz.3.1909" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf715e579 code=0x7fc00000 [ 620.090498][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 620.635214][ T39] audit: type=1326 audit(1734441732.134:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14724 comm="syz.4.1907" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f82579 code=0x7fc00000 [ 620.702969][ T39] audit: type=1326 audit(1734441732.204:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14728 comm="syz.3.1909" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf715e579 code=0x7fc00000 [ 621.120496][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 622.170499][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 623.200561][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 623.682077][ T1415] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 623.684786][ T1415] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.240503][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 625.280480][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 626.320504][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 626.630142][T14750] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1910'. [ 627.090606][T14761] can0: slcan on ttyS3. [ 627.360438][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 627.672493][T14748] can0 (unregistered): slcan off ttyS3. [ 628.339416][ C2] vcan0: j1939_tp_rxtimer: 0xffff888075323c00: rx timeout, send abort [ 628.344160][ C2] vcan0: j1939_tp_rxtimer: 0xffff888075322400: rx timeout, send abort [ 628.347051][ C2] vcan0: j1939_xtp_rx_abort_one: 0xffff888075323c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 628.353193][ C2] vcan0: j1939_xtp_rx_abort_one: 0xffff888075322400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 628.400483][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 628.428347][T14800] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1918'. [ 628.585279][T14809] VFS: could not find a valid V7 on nullb0. [ 628.610185][ T39] audit: type=1326 audit(1734441740.104:483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14804 comm="syz.3.1919" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf715e579 code=0x7fc00000 [ 629.220950][T14823] VFS: could not find a valid V7 on nullb0. [ 629.244871][ T39] audit: type=1326 audit(1734441740.744:484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14821 comm="syz.4.1920" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f82579 code=0x7fc00000 [ 629.295572][ T39] audit: type=1326 audit(1734441740.794:485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14804 comm="syz.3.1919" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf715e579 code=0x7fc00000 [ 629.303555][ T39] audit: type=1326 audit(1734441740.794:486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14804 comm="syz.3.1919" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf715e579 code=0x7fc00000 [ 629.315469][ T39] audit: type=1326 audit(1734441740.794:487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14804 comm="syz.3.1919" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf715e579 code=0x7fc00000 [ 629.322004][ T39] audit: type=1326 audit(1734441740.794:488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14804 comm="syz.3.1919" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf715e579 code=0x7fc00000 [ 629.328072][ T39] audit: type=1326 audit(1734441740.794:489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14804 comm="syz.3.1919" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf715e579 code=0x7fc00000 [ 629.336143][ T39] audit: type=1326 audit(1734441740.794:490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14804 comm="syz.3.1919" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf715e579 code=0x7fc00000 [ 629.343103][ T39] audit: type=1326 audit(1734441740.794:491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14804 comm="syz.3.1919" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf715e579 code=0x7fc00000 [ 629.346066][T14826] VFS: could not find a valid V7 on nullb0. [ 629.370156][ T39] audit: type=1326 audit(1734441740.864:492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14824 comm="syz.6.1921" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f15579 code=0x7fc00000 [ 629.371378][T14828] ax25_connect(): syz.3.1922 uses autobind, please contact jreuter@yaina.de [ 629.440478][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 629.639819][T14837] input: syz0 as /devices/virtual/input/input26 [ 629.641665][T14837] input: failed to attach handler leds to device input26, error: -6 [ 629.697539][ T1454] libceph: connect (1)[c::]:6789 error -101 [ 629.699406][ T1454] libceph: mon0 (1)[c::]:6789 connect error [ 629.970718][ T1454] libceph: connect (1)[c::]:6789 error -101 [ 629.972437][ T1454] libceph: mon0 (1)[c::]:6789 connect error [ 630.139577][T14848] VFS: could not find a valid V7 on nullb0. [ 630.279614][T14837] ceph: No mds server is up or the cluster is laggy [ 630.354303][T14853] VFS: could not find a valid V7 on nullb0. [ 630.480605][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 631.520507][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 631.599114][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802ae71400: rx timeout, send abort [ 631.602023][ C0] vcan0: j1939_tp_rxtimer: 0xffff888000dae800: rx timeout, send abort [ 631.604701][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88802ae71400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 631.612102][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888000dae800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 631.711547][T14871] VFS: could not find a valid V7 on nullb0. [ 631.897620][T14880] Cannot find del_set index 4 as target [ 631.935147][T14881] VFS: could not find a valid V7 on nullb0. [ 631.937943][T14865] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 632.482551][T14885] ax25_connect(): syz.6.1936 uses autobind, please contact jreuter@yaina.de [ 632.560506][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 633.006839][T14903] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 633.600460][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 634.564256][T14927] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1946'. [ 634.640514][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 634.697935][ T39] kauditd_printk_skb: 62 callbacks suppressed [ 634.697952][ T39] audit: type=1326 audit(1734441746.194:555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14929 comm="syz.5.1948" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf713e579 code=0x7fc00000 [ 635.442717][ T39] audit: type=1326 audit(1734441746.944:556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14929 comm="syz.5.1948" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf713e579 code=0x7fc00000 [ 635.499290][T14943] lo speed is unknown, defaulting to 1000 [ 635.546196][T14944] ebtables: wrong size: *len 80, entries_size 48, replsz 48 [ 635.548453][T14943] speed is unknown, defaulting to 1000 [ 635.586446][T14943] speed is unknown, defaulting to 1000 [ 635.680548][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 635.709326][ T39] audit: type=1326 audit(1734441747.204:557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14947 comm="syz.6.1951" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f15579 code=0x7fc00000 [ 636.424150][T14965] VFS: could not find a valid V7 on nullb0. [ 636.429954][ T39] audit: type=1326 audit(1734441747.924:558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14960 comm="syz.4.1955" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f82579 code=0x7fc00000 [ 636.446812][ T39] audit: type=1326 audit(1734441747.944:559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14947 comm="syz.6.1951" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f15579 code=0x7fc00000 [ 636.453516][ T39] audit: type=1326 audit(1734441747.944:560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14947 comm="syz.6.1951" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f15579 code=0x7fc00000 [ 636.458698][T14966] syz.5.1956 (14966): drop_caches: 2 [ 636.459067][ T39] audit: type=1326 audit(1734441747.944:561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14947 comm="syz.6.1951" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f15579 code=0x7fc00000 [ 636.466347][ T39] audit: type=1326 audit(1734441747.944:562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14947 comm="syz.6.1951" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f15579 code=0x7fc00000 [ 636.472075][ T39] audit: type=1326 audit(1734441747.944:563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14947 comm="syz.6.1951" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f15579 code=0x7fc00000 [ 636.477707][ T39] audit: type=1326 audit(1734441747.944:564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14947 comm="syz.6.1951" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f15579 code=0x7fc00000 [ 636.508143][T14968] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1957'. [ 636.720516][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 637.036792][T14977] VFS: could not find a valid V7 on nullb0. [ 637.423052][T14987] lo speed is unknown, defaulting to 1000 [ 637.476183][T14988] ebtables: wrong size: *len 80, entries_size 48, replsz 48 [ 637.498460][T14987] speed is unknown, defaulting to 1000 [ 637.576100][T14987] speed is unknown, defaulting to 1000 [ 637.760464][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 638.131052][T15000] random: crng reseeded on system resumption [ 638.142714][T15000] Restarting kernel threads ... done. [ 638.688020][T15011] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1968'. [ 638.800440][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 638.825710][T15016] VFS: could not find a valid V7 on nullb0. [ 638.956138][T15017] can0: slcan on ttyS3. [ 639.652371][T15010] can0 (unregistered): slcan off ttyS3. [ 639.840456][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 639.924107][T15039] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 640.058155][T15044] lo speed is unknown, defaulting to 1000 [ 640.100759][T15048] ebtables: wrong size: *len 80, entries_size 48, replsz 48 [ 640.119244][T15042] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1972'. [ 640.185600][T15044] speed is unknown, defaulting to 1000 [ 640.256692][T15044] speed is unknown, defaulting to 1000 [ 640.646738][T15058] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1976'. [ 640.696958][T15060] input: syz0 as /devices/virtual/input/input27 [ 640.699237][T15060] input: failed to attach handler leds to device input27, error: -6 [ 640.751030][ T1454] libceph: connect (1)[c::]:6789 error -101 [ 640.753588][ T1454] libceph: mon0 (1)[c::]:6789 connect error [ 640.890452][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 640.976261][T15061] Bluetooth: hci0: Frame reassembly failed (-84) [ 641.049292][T10979] Bluetooth: hci0: Frame reassembly failed (-84) [ 641.052256][ T1454] libceph: connect (1)[c::]:6789 error -101 [ 641.054086][ T1454] libceph: mon0 (1)[c::]:6789 connect error [ 641.303708][T15060] ceph: No mds server is up or the cluster is laggy [ 641.459304][T15077] VFS: could not find a valid V7 on nullb0. [ 641.490644][ T39] kauditd_printk_skb: 70 callbacks suppressed [ 641.490655][ T39] audit: type=1326 audit(1734441752.984:635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15073 comm="syz.5.1977" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf713e579 code=0x7fc00000 [ 641.817558][T15085] VFS: could not find a valid V7 on nullb0. [ 641.843813][ T39] audit: type=1326 audit(1734441753.344:636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15083 comm="syz.4.1980" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f82579 code=0x7fc00000 [ 641.920439][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 642.184845][ T39] audit: type=1326 audit(1734441753.684:637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15073 comm="syz.5.1977" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf713e579 code=0x7fc00000 [ 642.591747][ T39] audit: type=1326 audit(1734441754.094:638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15083 comm="syz.4.1980" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f82579 code=0x7fc00000 [ 642.960464][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 643.217461][ T5954] Bluetooth: hci0: command 0x1003 tx timeout [ 643.220278][ T5303] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 643.884648][T15124] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 644.000512][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 644.347820][T15130] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1991'. [ 644.630902][T15137] can0: slcan on ttyS3. [ 644.687484][T15138] VFS: could not find a valid V7 on nullb0. [ 644.714576][ T39] audit: type=1326 audit(1734441756.204:639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15135 comm="syz.3.1993" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf715e579 code=0x7fc00000 [ 645.050445][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 645.273579][T15129] can0 (unregistered): slcan off ttyS3. [ 645.390726][ T39] audit: type=1326 audit(1734441756.884:640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15135 comm="syz.3.1993" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf715e579 code=0x7fc00000 [ 645.819794][T15183] lo speed is unknown, defaulting to 1000 [ 645.862746][T15183] speed is unknown, defaulting to 1000 [ 645.867315][T15186] ebtables: wrong size: *len 80, entries_size 48, replsz 48 [ 645.899527][T15183] speed is unknown, defaulting to 1000 [ 646.090477][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 646.426737][T15196] netlink: 'syz.3.2004': attribute type 10 has an invalid length. [ 646.429294][T15196] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2004'. [ 646.488112][T15196] team0: Port device geneve0 added [ 646.490432][T15197] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 646.676065][T15209] ucma_write: process 2093 (syz.3.2004) changed security contexts after opening file descriptor, this is not allowed. [ 646.876874][T15221] VFS: could not find a valid V7 on nullb0. [ 646.885251][T15223] vivid-007: disconnect [ 646.899055][ T39] audit: type=1326 audit(1734441758.394:641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15219 comm="syz.3.2008" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf715e579 code=0x7fc00000 [ 647.014892][T15225] overlay: Unknown parameter '/' [ 647.120550][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 647.647945][ T39] audit: type=1326 audit(1734441759.144:642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15219 comm="syz.3.2008" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf715e579 code=0x7fc00000 [ 647.693031][T15234] lo speed is unknown, defaulting to 1000 [ 647.718861][T15222] vivid-007: reconnect [ 647.740841][T15236] ebtables: wrong size: *len 80, entries_size 48, replsz 48 [ 647.793356][T15234] speed is unknown, defaulting to 1000 [ 647.833640][T15234] speed is unknown, defaulting to 1000 [ 648.160446][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 648.200938][T11771] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 648.380515][T11771] usb 10-1: Using ep0 maxpacket: 8 [ 648.383194][T11771] usb 10-1: config index 0 descriptor too short (expected 301, got 45) [ 648.385411][T11771] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 648.425653][T11771] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 648.428041][T11771] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 648.431104][T11771] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 648.435215][T11771] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 648.438096][T11771] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 648.573095][ T63] libceph: connect (1)[c::]:6789 error -101 [ 648.574818][ T63] libceph: mon0 (1)[c::]:6789 connect error [ 648.680176][T15253] ceph: No mds server is up or the cluster is laggy [ 648.820653][T11771] usb 10-1: GET_CAPABILITIES returned 0 [ 648.822301][T11771] usbtmc 10-1:16.0: can't read capabilities [ 648.840845][ T63] libceph: connect (1)[c::]:6789 error -101 [ 648.843064][ T63] libceph: mon0 (1)[c::]:6789 connect error [ 649.200478][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 649.285744][ T63] usb 10-1: USB disconnect, device number 3 [ 649.659211][T15273] VFS: could not find a valid V7 on nullb0. [ 649.678256][ T39] audit: type=1326 audit(1734441761.174:643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15270 comm="syz.4.2020" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f82579 code=0x7fc00000 [ 650.240502][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 650.420999][ T39] audit: type=1326 audit(1734441761.924:644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15270 comm="syz.4.2020" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f82579 code=0x7fc00000 [ 650.468836][T15281] lo speed is unknown, defaulting to 1000 [ 650.515859][T15283] ebtables: wrong size: *len 80, entries_size 48, replsz 48 [ 650.528411][T15281] speed is unknown, defaulting to 1000 [ 650.567769][T15281] speed is unknown, defaulting to 1000 [ 651.280504][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 652.320441][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 653.064693][T15321] VFS: could not find a valid V7 on nullb0. [ 653.086781][ T39] audit: type=1326 audit(1734441764.584:645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15318 comm="syz.5.2031" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf713e579 code=0x7fc00000 [ 653.289795][T15325] netlink: 9 bytes leftover after parsing attributes in process `syz.3.2032'. [ 653.335711][T15325] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 653.360467][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 653.817262][ T39] audit: type=1326 audit(1734441765.314:646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15318 comm="syz.5.2031" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf713e579 code=0x7fc00000 [ 654.400831][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 654.986286][T15350] bridge0: port 3(hsr_slave_1) entered blocking state [ 654.990044][T15350] bridge0: port 3(hsr_slave_1) entered disabled state [ 654.998335][T15350] hsr_slave_1: entered allmulticast mode [ 655.047520][T15350] hsr_slave_1: left allmulticast mode [ 655.168216][T15355] netlink: 'syz.6.2039': attribute type 4 has an invalid length. [ 655.205846][T15355] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 655.208377][T15355] overlayfs: failed to set xattr on upper [ 655.209987][T15355] overlayfs: ...falling back to redirect_dir=nofollow. [ 655.211904][T15355] overlayfs: ...falling back to index=off. [ 655.213469][T15355] overlayfs: ...falling back to uuid=null. [ 655.440505][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 655.559338][T15360] VFS: could not find a valid V7 on nullb0. [ 655.565948][ T39] audit: type=1326 audit(1734441767.064:647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15358 comm="syz.3.2041" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf715e579 code=0x7fc00000 [ 655.628931][T15362] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 655.910526][ T73] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 656.062792][ T73] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 656.065561][ T73] usb 10-1: config 0 has no interfaces? [ 656.067005][ T73] usb 10-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 656.069329][ T73] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 656.076026][ T73] usb 10-1: config 0 descriptor?? [ 656.257082][ T39] audit: type=1326 audit(1734441767.754:648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15358 comm="syz.3.2041" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf715e579 code=0x7fc00000 [ 656.265521][ T39] audit: type=1326 audit(1734441767.754:649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15358 comm="syz.3.2041" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf715e579 code=0x7fc00000 [ 656.273404][ T39] audit: type=1326 audit(1734441767.754:650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15358 comm="syz.3.2041" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf715e579 code=0x7fc00000 [ 656.280120][ T39] audit: type=1326 audit(1734441767.754:651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15358 comm="syz.3.2041" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf715e579 code=0x7fc00000 [ 656.286656][ T39] audit: type=1326 audit(1734441767.754:652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15358 comm="syz.3.2041" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf715e579 code=0x7fc00000 [ 656.293214][ T39] audit: type=1326 audit(1734441767.754:653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15358 comm="syz.3.2041" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf715e579 code=0x7fc00000 [ 656.300250][ T39] audit: type=1326 audit(1734441767.754:654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15358 comm="syz.3.2041" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf715e579 code=0x7fc00000 [ 656.377496][ T73] usb 10-1: USB disconnect, device number 4 [ 656.480447][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 656.535770][T15374] usb usb4: usbfs: process 15374 (syz.3.2046) did not claim interface 0 before use [ 656.564732][T15374] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 657.451194][T15395] 9pnet_rdma: rdma_create_trans (15395): problem binding to privport: 13 [ 657.456741][T15395] fuse: Unknown parameter 'd' [ 657.520676][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 657.900363][ T5994] libceph: connect (1)[c::]:6789 error -101 [ 657.902190][ T5994] libceph: mon0 (1)[c::]:6789 connect error [ 657.990610][T15407] ceph: No mds server is up or the cluster is laggy [ 658.072616][T15407] 9pnet_virtio: no channels available for device syz [ 658.560483][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 658.729475][ T39] kauditd_printk_skb: 83 callbacks suppressed [ 658.729491][ T39] audit: type=1326 audit(1734441770.224:738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15418 comm="syz.3.2054" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf715e579 code=0x7fc00000 [ 658.797046][T15420] VFS: could not find a valid V7 on nullb0. [ 659.264708][T15431] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 659.458117][ T39] audit: type=1326 audit(1734441770.954:739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15418 comm="syz.3.2054" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf715e579 code=0x7fc00000 [ 659.600467][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 660.640467][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 660.884342][T15464] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2065'. [ 660.961017][T15471] usb 2-1: USB disconnect, device number 4 [ 661.038483][T15472] hub 2-0:1.0: USB hub found [ 661.043405][T15472] hub 2-0:1.0: 6 ports detected [ 661.240565][T11771] usb 2-1: new high-speed USB device number 5 using ehci-pci [ 661.424988][T11771] usb 2-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00 [ 661.427528][T11771] usb 2-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10 [ 661.429917][T11771] usb 2-1: Product: QEMU USB Tablet [ 661.432676][T11771] usb 2-1: Manufacturer: QEMU [ 661.434096][T11771] usb 2-1: SerialNumber: 28754-0000:00:1d.7-1 [ 661.461073][T11771] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.7/usb2/2-1/2-1:1.0/0003:0627:0001.0007/input/input28 [ 661.539770][T11771] hid-generic 0003:0627:0001.0007: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.7-1/input0 [ 661.690461][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 662.084154][T15488] netlink: 'syz.5.2070': attribute type 39 has an invalid length. [ 662.116142][T15490] netlink: 'syz.4.2072': attribute type 10 has an invalid length. [ 662.119000][T15490] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2072'. [ 662.136156][T15490] geneve0: entered promiscuous mode [ 662.138137][T15490] geneve0: entered allmulticast mode [ 662.141094][T15490] team0: Port device geneve0 added [ 662.163545][T15490] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 662.385433][T15495] lo speed is unknown, defaulting to 1000 [ 662.435338][T15496] ebtables: wrong size: *len 80, entries_size 48, replsz 48 [ 662.438262][T15495] speed is unknown, defaulting to 1000 [ 662.546480][T15495] speed is unknown, defaulting to 1000 [ 662.720513][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 663.225569][ T39] audit: type=1326 audit(1734441774.724:740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15506 comm="syz.6.2075" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f15579 code=0x7fc00000 [ 663.760480][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 663.933481][ T39] audit: type=1326 audit(1734441775.434:741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15506 comm="syz.6.2075" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f15579 code=0x7fc00000 [ 664.654561][T15541] lo speed is unknown, defaulting to 1000 [ 664.693654][T15541] speed is unknown, defaulting to 1000 [ 664.701369][T15544] ebtables: wrong size: *len 80, entries_size 48, replsz 48 [ 664.747546][T15541] speed is unknown, defaulting to 1000 [ 664.810424][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 664.813268][T15543] usb usb4: usbfs: process 15543 (syz.5.2087) did not claim interface 0 before use [ 664.853145][T15543] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 664.943880][T15551] netlink: 'syz.6.2088': attribute type 39 has an invalid length. [ 665.733016][T15566] overlayfs: failed to resolve './file0': -2 [ 665.840552][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 665.858710][T15569] netlink: 'syz.4.2094': attribute type 4 has an invalid length. [ 665.881170][T15569] overlayfs: failed to clone upperpath [ 666.038381][T15575] overlayfs: failed to clone upperpath [ 666.111384][T15577] netlink: 44 bytes leftover after parsing attributes in process `syz.6.2097'. [ 666.129764][T15579] overlayfs: failed to clone upperpath [ 666.448977][T15589] can0: slcan on ttyS3. [ 666.803266][T15606] overlayfs: failed to resolve './file0': -2 [ 666.843553][T15608] PKCS7: Unknown OID: [4] 5.25.264.112.81.102.117 [ 666.845839][T15608] PKCS7: Only support pkcs7_signedData type [ 666.854612][T15608] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2102'. [ 666.858215][T15608] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2102'. [ 666.890443][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 667.051331][T15576] can0 (unregistered): slcan off ttyS3. [ 667.214187][T15623] overlayfs: failed to resolve './file0': -2 [ 667.249038][T15626] VFS: could not find a valid V7 on nullb0. [ 667.267166][ T39] audit: type=1326 audit(1734441778.764:742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15617 comm="syz.3.2104" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf715e579 code=0x7fc00000 [ 667.919143][ T39] audit: type=1326 audit(1734441779.414:743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15617 comm="syz.3.2104" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf715e579 code=0x7fc00000 [ 667.927631][T15638] lo speed is unknown, defaulting to 1000 [ 667.930495][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 667.931725][ T39] audit: type=1326 audit(1734441779.414:744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15617 comm="syz.3.2104" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf715e579 code=0x7fc00000 [ 667.945983][ T39] audit: type=1326 audit(1734441779.414:745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15617 comm="syz.3.2104" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf715e579 code=0x7fc00000 [ 667.964227][ T39] audit: type=1326 audit(1734441779.424:746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15617 comm="syz.3.2104" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf715e579 code=0x7fc00000 [ 667.980422][ T39] audit: type=1326 audit(1734441779.424:747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15617 comm="syz.3.2104" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf715e579 code=0x7fc00000 [ 667.987762][ T39] audit: type=1326 audit(1734441779.424:748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15617 comm="syz.3.2104" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf715e579 code=0x7fc00000 [ 667.995635][ T39] audit: type=1326 audit(1734441779.424:749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15617 comm="syz.3.2104" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf715e579 code=0x7fc00000 [ 668.003582][T15638] speed is unknown, defaulting to 1000 [ 668.010451][ T39] audit: type=1326 audit(1734441779.424:750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15617 comm="syz.3.2104" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf715e579 code=0x7fc00000 [ 668.049002][T15638] speed is unknown, defaulting to 1000 [ 668.160072][T15646] VFS: could not find a valid V7 on nullb0. [ 668.538419][T15654] overlayfs: failed to resolve './file1': -2 [ 668.797860][T15660] netlink: 64 bytes leftover after parsing attributes in process `syz.6.2114'. [ 668.800655][T15660] netlink: 60 bytes leftover after parsing attributes in process `syz.6.2114'. [ 668.960463][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 669.168248][T15672] VFS: could not find a valid V7 on nullb0. [ 669.193736][ T39] kauditd_printk_skb: 106 callbacks suppressed [ 669.193748][ T39] audit: type=1326 audit(1734441780.694:857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15669 comm="syz.5.2117" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf713e579 code=0x7fc00000 [ 669.474944][ T39] audit: type=1326 audit(1734441780.974:858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15656 comm="syz.4.2113" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f82579 code=0x7fc00000 [ 669.490607][ T39] audit: type=1326 audit(1734441780.974:859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15656 comm="syz.4.2113" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f82579 code=0x7fc00000 [ 669.496663][ T39] audit: type=1326 audit(1734441780.974:860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15656 comm="syz.4.2113" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f82579 code=0x7fc00000 [ 669.503397][ T39] audit: type=1326 audit(1734441780.974:861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15656 comm="syz.4.2113" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f82579 code=0x7fc00000 [ 669.509005][ T39] audit: type=1326 audit(1734441780.974:862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15656 comm="syz.4.2113" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f82579 code=0x7fc00000 [ 669.515638][ T39] audit: type=1326 audit(1734441780.974:863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15656 comm="syz.4.2113" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f82579 code=0x7fc00000 [ 669.521992][ T39] audit: type=1326 audit(1734441780.974:864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15656 comm="syz.4.2113" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f82579 code=0x7fc00000 [ 669.533664][ T39] audit: type=1326 audit(1734441780.974:865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15656 comm="syz.4.2113" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f82579 code=0x7fc00000 [ 669.541464][ T39] audit: type=1326 audit(1734441780.974:866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15656 comm="syz.4.2113" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f82579 code=0x7fc00000 [ 669.700438][ T1454] libceph: connect (1)[c::]:6789 error -101 [ 669.702341][ T1454] libceph: mon0 (1)[c::]:6789 connect error [ 669.799668][T15683] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 669.807205][T15678] ceph: No mds server is up or the cluster is laggy [ 669.909320][T15685] 9pnet_rdma: rdma_create_trans (15685): problem binding to privport: 13 [ 669.909563][T15687] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2120'. [ 669.915612][T15685] fuse: Unknown parameter 'd' [ 669.919344][T15687] netlink: 'syz.3.2120': attribute type 5 has an invalid length. [ 669.985134][T15690] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2120'. [ 670.000519][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 670.312431][T15700] 9pnet_virtio: no channels available for device syz [ 670.324975][T15700] overlayfs: overlapping lowerdir path [ 671.040467][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 671.240082][T15721] overlayfs: failed to resolve './file1': -2 [ 671.319543][T15724] fuse: Bad value for 'fd' [ 671.588676][T15730] usb 2-1: USB disconnect, device number 5 [ 671.722164][T15732] hub 2-0:1.0: USB hub found [ 671.723470][T15732] hub 2-0:1.0: 6 ports detected [ 671.900454][ T1454] usb 2-1: new high-speed USB device number 6 using ehci-pci [ 672.080466][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 672.192775][ T1454] usb 2-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00 [ 672.195284][ T1454] usb 2-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10 [ 672.197397][ T1454] usb 2-1: Product: QEMU USB Tablet [ 672.198832][ T1454] usb 2-1: Manufacturer: QEMU [ 672.200109][ T1454] usb 2-1: SerialNumber: 28754-0000:00:1d.7-1 [ 672.288530][ T1454] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.7/usb2/2-1/2-1:1.0/0003:0627:0001.0008/input/input29 [ 672.356830][ T1454] hid-generic 0003:0627:0001.0008: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.7-1/input0 [ 672.785688][T15748] 9pnet_rdma: rdma_create_trans (15748): problem binding to privport: 13 [ 672.795559][T15748] fuse: Unknown parameter 'd' [ 673.120531][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 674.170468][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 674.177321][T15771] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2142'. [ 674.195285][T15776] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2143'. [ 674.290980][T15771] usb 2-1: USB disconnect, device number 6 [ 674.347659][T15777] hub 2-0:1.0: USB hub found [ 674.349178][T15777] hub 2-0:1.0: 6 ports detected [ 674.520464][T11771] usb 2-1: new high-speed USB device number 7 using ehci-pci [ 674.885460][T15792] lo speed is unknown, defaulting to 1000 [ 674.917782][T11771] usb 2-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00 [ 674.989585][T11771] usb 2-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10 [ 674.991794][T11771] usb 2-1: Product: QEMU USB Tablet [ 674.993159][T11771] usb 2-1: Manufacturer: QEMU [ 674.994399][T11771] usb 2-1: SerialNumber: 28754-0000:00:1d.7-1 [ 674.997944][T15792] speed is unknown, defaulting to 1000 [ 675.012759][T11771] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.7/usb2/2-1/2-1:1.0/0003:0627:0001.0009/input/input30 [ 675.104249][T15792] speed is unknown, defaulting to 1000 [ 675.127614][T11771] hid-generic 0003:0627:0001.0009: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.7-1/input0 [ 675.201724][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 675.494146][T15814] fuse: Bad value for 'fd' [ 675.518024][T15815] PKCS7: Unknown OID: [4] 5.25.264.112.81.102.117 [ 675.526487][T15815] PKCS7: Only support pkcs7_signedData type [ 675.548692][T15815] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2151'. [ 675.553899][T15815] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2151'. [ 676.240538][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 676.333077][T15827] netlink: 44 bytes leftover after parsing attributes in process `syz.6.2155'. [ 676.574734][T15830] can0: slcan on ttyS3. [ 676.597864][T15832] netdevsim netdevsim5: Direct firmware load for ./file0 failed with error -2 [ 676.604185][T15832] netdevsim netdevsim5: Falling back to sysfs fallback for: ./file0 [ 676.718293][T15839] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2156'. [ 676.722210][T15839] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2156'. [ 676.724575][T15839] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2156'. [ 676.726968][T15839] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2156'. [ 677.221363][T15826] can0 (unregistered): slcan off ttyS3. [ 677.276799][T15856] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2159'. [ 677.280569][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 677.457025][T15865] usb 2-1: USB disconnect, device number 7 [ 677.617837][T15868] hub 2-0:1.0: USB hub found [ 677.623711][T15868] hub 2-0:1.0: 6 ports detected [ 677.860596][ T9] usb 2-1: new high-speed USB device number 8 using ehci-pci [ 678.046010][ T9] usb 2-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00 [ 678.048767][ T9] usb 2-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10 [ 678.051247][ T9] usb 2-1: Product: QEMU USB Tablet [ 678.053140][ T9] usb 2-1: Manufacturer: QEMU [ 678.054587][ T9] usb 2-1: SerialNumber: 28754-0000:00:1d.7-1 [ 678.077599][ T9] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.7/usb2/2-1/2-1:1.0/0003:0627:0001.000A/input/input31 [ 678.146011][ T9] hid-generic 0003:0627:0001.000A: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.7-1/input0 [ 678.320450][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 679.370452][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 680.400564][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 680.585914][T15926] netlink: zone id is out of range [ 680.587530][T15926] netlink: zone id is out of range [ 680.798617][T15924] __nla_validate_parse: 3 callbacks suppressed [ 680.798627][T15924] netlink: 240 bytes leftover after parsing attributes in process `syz.5.2174'. [ 680.798637][T15924] NCSI netlink: No device for ifindex 0 [ 680.947935][ T39] kauditd_printk_skb: 80 callbacks suppressed [ 680.947951][ T39] audit: type=1326 audit(1734441792.444:947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15927 comm="syz.4.2176" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f82579 code=0x7fc00000 [ 681.261835][T15936] lo speed is unknown, defaulting to 1000 [ 681.299314][T15938] ebtables: wrong size: *len 80, entries_size 48, replsz 48 [ 681.331261][T15936] speed is unknown, defaulting to 1000 [ 681.388749][T15936] speed is unknown, defaulting to 1000 [ 681.440458][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 681.639045][ T39] audit: type=1326 audit(1734441793.134:948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15927 comm="syz.4.2176" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f82579 code=0x7fc00000 [ 681.682650][T15944] fuse: Bad value for 'fd' [ 681.869382][T15946] netlink: 44 bytes leftover after parsing attributes in process `syz.6.2181'. [ 682.080745][T15948] can0: slcan on ttyS3. [ 682.490442][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 682.771724][T15945] can0 (unregistered): slcan off ttyS3. [ 683.520529][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 684.570442][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 684.711335][T15977] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2187'. [ 684.715608][T15979] netlink: 44 bytes leftover after parsing attributes in process `syz.6.2186'. [ 684.721607][T15981] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2184'. [ 684.821830][T15988] netlink: 'syz.5.2185': attribute type 10 has an invalid length. [ 685.097746][T15988] : (slave wlan1): Opening slave failed [ 685.121119][ T1415] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 685.190101][ T1415] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.254725][T15988] syz.5.2185 (15988): drop_caches: 2 [ 685.337373][T15994] can0: slcan on ttyS3. [ 685.361803][ T39] audit: type=1326 audit(1734441796.864:949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15993 comm="syz.4.2188" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f82579 code=0x7fc00000 [ 685.600474][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 685.712874][T15978] can0 (unregistered): slcan off ttyS3. [ 686.175945][T16044] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 686.225468][ T39] audit: type=1326 audit(1734441797.724:950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15993 comm="syz.4.2188" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f82579 code=0x7fc00000 [ 686.232129][ T39] audit: type=1326 audit(1734441797.724:951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15993 comm="syz.4.2188" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f82579 code=0x7fc00000 [ 686.237686][ T39] audit: type=1326 audit(1734441797.724:952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15993 comm="syz.4.2188" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f82579 code=0x7fc00000 [ 686.261495][ T39] audit: type=1326 audit(1734441797.724:953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15993 comm="syz.4.2188" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f82579 code=0x7fc00000 [ 686.267306][ T39] audit: type=1326 audit(1734441797.724:954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15993 comm="syz.4.2188" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f82579 code=0x7fc00000 [ 686.310231][ T39] audit: type=1326 audit(1734441797.724:955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15993 comm="syz.4.2188" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f82579 code=0x7fc00000 [ 686.328898][ T39] audit: type=1326 audit(1734441797.724:956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15993 comm="syz.4.2188" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f82579 code=0x7fc00000 [ 686.334633][ T39] audit: type=1326 audit(1734441797.724:957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15993 comm="syz.4.2188" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f82579 code=0x7fc00000 [ 686.341145][ T39] audit: type=1326 audit(1734441797.724:958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15993 comm="syz.4.2188" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f82579 code=0x7fc00000 [ 686.346617][ T39] audit: type=1326 audit(1734441797.724:959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15993 comm="syz.4.2188" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f82579 code=0x7fc00000 [ 686.640444][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 687.001935][T16075] syzkaller0: entered promiscuous mode [ 687.003527][T16075] syzkaller0: entered allmulticast mode [ 687.069305][T16075] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 687.073475][T16075] syzkaller0: Linktype set failed because interface is up [ 687.083615][T16075] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2196'. [ 687.086035][T16075] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2196'. [ 687.213138][T16090] GUP no longer grows the stack in syz.5.2198 (16090): 20004000-2000a000 (20002000) [ 687.216003][T16090] CPU: 1 UID: 0 PID: 16090 Comm: syz.5.2198 Not tainted 6.13.0-rc3-syzkaller-00017-gf44d154d6e3d #0 [ 687.218756][T16090] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 687.221578][T16090] Call Trace: [ 687.222467][T16090] [ 687.223233][T16090] dump_stack_lvl+0x16c/0x1f0 [ 687.224457][T16090] gup_vma_lookup+0x1d2/0x220 [ 687.225682][T16090] __get_user_pages+0x236/0x3b50 [ 687.226984][T16090] ? find_held_lock+0x2d/0x110 [ 687.228233][T16090] ? mtree_load+0x30a/0xa40 [ 687.229437][T16090] ? __pfx_lock_release+0x10/0x10 [ 687.230770][T16090] ? __pfx___get_user_pages+0x10/0x10 [ 687.232129][T16090] get_user_pages_remote+0x25e/0xb30 [ 687.233506][T16090] ? __pfx_get_user_pages_remote+0x10/0x10 [ 687.235027][T16090] __access_remote_vm+0x3a5/0x7b0 [ 687.236345][T16090] ? __pfx___access_remote_vm+0x10/0x10 [ 687.237772][T16090] ? lock_acquire+0x2f/0xb0 [ 687.238944][T16090] ? proc_pid_cmdline_read+0x25b/0x8d0 [ 687.240369][T16090] proc_pid_cmdline_read+0x4f4/0x8d0 [ 687.241750][T16090] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 687.243272][T16090] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 687.244775][T16090] vfs_readv+0x6bf/0x890 [ 687.245870][T16090] ? __pfx___lock_acquire+0x10/0x10 [ 687.247230][T16090] ? __pfx_vfs_readv+0x10/0x10 [ 687.248490][T16090] ? __fget_files+0x1fc/0x3a0 [ 687.249746][T16090] ? __pfx_lock_release+0x10/0x10 [ 687.251059][T16090] ? __fget_files+0x206/0x3a0 [ 687.252298][T16090] ? do_preadv+0x1b1/0x270 [ 687.253462][T16090] do_preadv+0x1b1/0x270 [ 687.254576][T16090] ? __pfx_do_preadv+0x10/0x10 [ 687.255820][T16090] __do_fast_syscall_32+0x73/0x120 [ 687.257141][T16090] do_fast_syscall_32+0x32/0x80 [ 687.258410][T16090] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 687.260045][T16090] RIP: 0023:0xf713e579 [ 687.261107][T16090] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 687.266041][T16090] RSP: 002b:00000000f513055c EFLAGS: 00000296 ORIG_RAX: 000000000000014d [ 687.268181][T16090] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000020000040 [ 687.270225][T16090] RDX: 0000000000000001 RSI: 0000000000000300 RDI: 0000000000000000 [ 687.272279][T16090] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 687.274310][T16090] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 687.276342][T16090] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 687.278385][T16090] [ 687.505535][T16103] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2200'. [ 687.690458][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 688.203101][T16112] input: syz0 as /devices/virtual/input/input32 [ 688.476306][T16115] ebtables: wrong size: *len 80, entries_size 48, replsz 48 [ 688.730438][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 689.146793][T16114] lo speed is unknown, defaulting to 1000 [ 689.186457][T16114] speed is unknown, defaulting to 1000 [ 689.240567][T16114] speed is unknown, defaulting to 1000 [ 689.342282][T16135] overlayfs: failed to clone upperpath [ 689.760450][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 690.292777][T16168] overlay: ./bus is not a directory [ 690.596306][T16174] IPVS: set_ctl: invalid protocol: 44 172.20.20.187:20004 [ 690.598469][T16170] ceph: No mds server is up or the cluster is laggy [ 690.800465][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 690.975281][T16192] lo speed is unknown, defaulting to 1000 [ 691.019210][T16192] speed is unknown, defaulting to 1000 [ 691.029311][T16193] ebtables: wrong size: *len 80, entries_size 48, replsz 48 [ 691.062218][T16192] speed is unknown, defaulting to 1000 [ 691.443020][T16203] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2220'. [ 691.840465][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 692.520337][ T39] kauditd_printk_skb: 7 callbacks suppressed [ 692.520351][ T39] audit: type=1326 audit(1734441804.014:967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16212 comm="syz.3.2222" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf715e579 code=0x7fc00000 [ 692.859092][ T39] audit: type=1326 audit(1734441804.354:968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16217 comm="syz.4.2231" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f82579 code=0x7fc00000 [ 692.880590][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 693.218106][ T39] audit: type=1326 audit(1734441804.714:969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16212 comm="syz.3.2222" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf715e579 code=0x7fc00000 [ 693.609996][ T39] audit: type=1326 audit(1734441805.104:970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16217 comm="syz.4.2231" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f82579 code=0x7fc00000 [ 693.615921][ T39] audit: type=1326 audit(1734441805.104:971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16217 comm="syz.4.2231" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f82579 code=0x7fc00000 [ 693.621555][ T39] audit: type=1326 audit(1734441805.104:972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16217 comm="syz.4.2231" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f82579 code=0x7fc00000 [ 693.627026][ T39] audit: type=1326 audit(1734441805.104:973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16217 comm="syz.4.2231" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f82579 code=0x7fc00000 [ 693.635646][ T39] audit: type=1326 audit(1734441805.104:974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16217 comm="syz.4.2231" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f82579 code=0x7fc00000 [ 693.642673][ T39] audit: type=1326 audit(1734441805.104:975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16217 comm="syz.4.2231" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f82579 code=0x7fc00000 [ 693.651840][ T39] audit: type=1326 audit(1734441805.104:976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16217 comm="syz.4.2231" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f82579 code=0x7fc00000 [ 693.657656][T16234] netlink: 'syz.4.2226': attribute type 10 has an invalid length. [ 693.661836][T16234] bond0: (slave wlan1): Opening slave failed [ 693.699061][T16236] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2227'. [ 693.920448][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 694.288315][T16246] overlayfs: overlapping lowerdir path [ 694.296897][T16246] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2229'. [ 694.488190][T16249] lo speed is unknown, defaulting to 1000 [ 694.630530][T16249] speed is unknown, defaulting to 1000 [ 694.664413][T16249] speed is unknown, defaulting to 1000 [ 694.830278][T16254] fuse: Bad value for 'fd' [ 694.960520][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 695.526186][T16267] overlayfs: missing 'lowerdir' [ 696.000455][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 697.040517][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 697.573900][ T39] kauditd_printk_skb: 11 callbacks suppressed [ 697.573911][ T39] audit: type=1326 audit(1734441809.074:988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16294 comm="syz.3.2243" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf715e579 code=0x7fc00000 [ 698.017982][T16308] netlink: 'syz.6.2246': attribute type 1 has an invalid length. [ 698.021236][T16308] netlink: 'syz.6.2246': attribute type 2 has an invalid length. [ 698.026291][T16309] VFS: could not find a valid V7 on nullb0. [ 698.050743][ T39] audit: type=1326 audit(1734441809.554:989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16305 comm="syz.5.2245" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf713e579 code=0x7fc00000 [ 698.080507][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 698.195702][ T39] audit: type=1326 audit(1734441809.694:990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16294 comm="syz.3.2243" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf715e579 code=0x7fc00000 [ 698.229565][T16313] overlayfs: missing 'lowerdir' [ 698.788461][ T39] audit: type=1326 audit(1734441810.254:991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16305 comm="syz.5.2245" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf713e579 code=0x7fc00000 [ 698.795789][ T39] audit: type=1326 audit(1734441810.264:992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16305 comm="syz.5.2245" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf713e579 code=0x7fc00000 [ 698.810774][ T39] audit: type=1326 audit(1734441810.264:993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16305 comm="syz.5.2245" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf713e579 code=0x7fc00000 [ 698.950127][T16326] fuse: Bad value for 'fd' [ 699.077044][ T39] audit: type=1326 audit(1734441810.574:994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16319 comm="syz.4.2249" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f82579 code=0x7ffc0000 [ 699.085358][ T39] audit: type=1326 audit(1734441810.574:995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16319 comm="syz.4.2249" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f82579 code=0x7ffc0000 [ 699.120473][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 699.393296][T16333] lo speed is unknown, defaulting to 1000 [ 699.542158][T16333] speed is unknown, defaulting to 1000 [ 699.667605][T16333] speed is unknown, defaulting to 1000 [ 699.743998][T16342] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2255'. [ 700.160539][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 700.626079][T16348] tmpfs: Unknown parameter 'U ' [ 700.626242][T16358] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2258'. [ 700.628137][T16348] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2256'. [ 700.966637][ T6244] libceph: connect (1)[c::]:6789 error -101 [ 700.968603][ T6244] libceph: mon0 (1)[c::]:6789 connect error [ 701.200474][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 701.240733][ T6244] libceph: connect (1)[c::]:6789 error -101 [ 701.242767][T16348] orangefs_mount: mount request failed with -4 [ 701.245628][ T6244] libceph: mon0 (1)[c::]:6789 connect error [ 701.443320][T16376] netlink: 'syz.6.2261': attribute type 4 has an invalid length. [ 701.445817][T16376] netlink: 17 bytes leftover after parsing attributes in process `syz.6.2261'. [ 701.558664][T16363] ceph: No mds server is up or the cluster is laggy [ 702.220466][T16390] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2267'. [ 702.240493][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 702.430438][ T39] audit: type=1326 audit(1734441813.924:996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16392 comm="syz.5.2268" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf713e579 code=0x7fc00000 [ 702.460649][T16399] lo speed is unknown, defaulting to 1000 [ 702.667040][T16399] speed is unknown, defaulting to 1000 [ 702.809158][T16399] speed is unknown, defaulting to 1000 [ 703.080706][T16403] ieee802154 phy1 wpan1: encryption failed: -22 [ 703.131488][ T39] audit: type=1326 audit(1734441814.634:997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16392 comm="syz.5.2268" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf713e579 code=0x7fc00000 [ 703.280437][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 703.919057][ T39] audit: type=1326 audit(1734441815.414:998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16423 comm="syz.3.2275" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf715e579 code=0x7fc00000 [ 704.320477][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 704.429901][T16432] netlink: 48 bytes leftover after parsing attributes in process `syz.6.2277'. [ 704.589829][ T39] audit: type=1326 audit(1734441816.084:999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16423 comm="syz.3.2275" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf715e579 code=0x7fc00000 [ 704.716822][T16437] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2280'. [ 705.370458][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 705.474708][T16449] overlayfs: failed to resolve './file1': -2 [ 705.559520][T16453] netlink: 'syz.4.2284': attribute type 1 has an invalid length. [ 705.562292][T16453] netlink: 'syz.4.2284': attribute type 2 has an invalid length. [ 705.603867][T16445] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 706.221644][T16465] overlay: Unknown parameter '/' [ 706.369617][ T39] audit: type=1326 audit(1734441817.864:1000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16468 comm="syz.4.2288" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f82579 code=0x7fc00000 [ 706.400488][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 706.551001][T16481] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 706.553398][T16481] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 707.118645][ T39] audit: type=1326 audit(1734441818.614:1001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16468 comm="syz.4.2288" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f82579 code=0x7fc00000 [ 707.442612][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 708.430550][T16503] lo speed is unknown, defaulting to 1000 [ 708.463763][T16503] speed is unknown, defaulting to 1000 [ 708.480461][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 708.515513][T16503] speed is unknown, defaulting to 1000 [ 708.814116][T16516] overlayfs: missing 'lowerdir' [ 708.987276][T16525] fuse: Bad value for 'fd' [ 709.060044][ T39] audit: type=1326 audit(1734441820.554:1002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16520 comm="syz.3.2306" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf715e579 code=0x7fc00000 [ 709.530433][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 709.746604][T16537] usb 2-1: USB disconnect, device number 8 [ 709.810684][ T39] audit: type=1326 audit(1734441821.314:1003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16520 comm="syz.3.2306" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf715e579 code=0x7fc00000 [ 709.856845][T16538] hub 2-0:1.0: USB hub found [ 709.864553][T16538] hub 2-0:1.0: 6 ports detected [ 710.040474][ T9] usb 2-1: new high-speed USB device number 9 using ehci-pci [ 710.441379][ T9] usb 2-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00 [ 710.450973][ T9] usb 2-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10 [ 710.461128][ T9] usb 2-1: Product: QEMU USB Tablet [ 710.463820][ T9] usb 2-1: Manufacturer: QEMU [ 710.481369][ T9] usb 2-1: SerialNumber: 28754-0000:00:1d.7-1 [ 710.560477][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 710.645196][ T9] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.7/usb2/2-1/2-1:1.0/0003:0627:0001.000B/input/input33 [ 710.775172][ T9] hid-generic 0003:0627:0001.000B: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.7-1/input0 [ 711.039014][T16565] netlink: 'syz.4.2314': attribute type 32 has an invalid length. [ 711.041310][T16565] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2314'. [ 711.043686][T16565] netlink: 'syz.4.2314': attribute type 32 has an invalid length. [ 711.276236][T16566] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2315'. [ 711.600464][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 711.853524][ T39] audit: type=1326 audit(1734441823.354:1004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16571 comm="syz.4.2318" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f82579 code=0x7fc00000 [ 711.894903][T16579] input: syz0 as /devices/virtual/input/input34 [ 712.079741][ T39] audit: type=1326 audit(1734441823.574:1005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16583 comm="syz.3.2322" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf715e579 code=0x7fc00000 [ 712.209326][T16589] netlink: 44 bytes leftover after parsing attributes in process `syz.6.2324'. [ 712.222761][T16590] netlink: 352 bytes leftover after parsing attributes in process `syz.5.2323'. [ 712.588067][ T39] audit: type=1326 audit(1734441824.064:1006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16571 comm="syz.4.2318" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f82579 code=0x7fc00000 [ 712.640543][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 712.780554][ T39] audit: type=1326 audit(1734441824.274:1007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16583 comm="syz.3.2322" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf715e579 code=0x7fc00000 [ 713.680436][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 713.957869][T16622] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 714.133960][T16631] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2336'. [ 714.146047][ T39] audit: type=1326 audit(1734441825.644:1008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16623 comm="syz.3.2335" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf715e579 code=0x7fc00000 [ 714.168658][T16631] tmpfs: Bad value for 'mpol' [ 714.392244][T16634] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2337'. [ 714.440761][T16634] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2337'. [ 714.720570][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 714.783518][T16641] veth1_macvtap: left promiscuous mode [ 714.840658][ T39] audit: type=1326 audit(1734441826.334:1009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16623 comm="syz.3.2335" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf715e579 code=0x7fc00000 [ 714.846510][ T39] audit: type=1326 audit(1734441826.334:1010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16623 comm="syz.3.2335" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf715e579 code=0x7fc00000 [ 714.853092][ T39] audit: type=1326 audit(1734441826.334:1011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16623 comm="syz.3.2335" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf715e579 code=0x7fc00000 [ 714.858992][ T39] audit: type=1326 audit(1734441826.334:1012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16623 comm="syz.3.2335" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf715e579 code=0x7fc00000 [ 714.864966][ T39] audit: type=1326 audit(1734441826.334:1013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16623 comm="syz.3.2335" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf715e579 code=0x7fc00000 [ 714.871637][ T39] audit: type=1326 audit(1734441826.334:1014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16623 comm="syz.3.2335" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf715e579 code=0x7fc00000 [ 714.877365][ T39] audit: type=1326 audit(1734441826.334:1015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16623 comm="syz.3.2335" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf715e579 code=0x7fc00000 [ 714.883030][ T39] audit: type=1326 audit(1734441826.334:1016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16623 comm="syz.3.2335" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf715e579 code=0x7fc00000 [ 714.889471][ T39] audit: type=1326 audit(1734441826.334:1017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16623 comm="syz.3.2335" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf715e579 code=0x7fc00000 [ 715.004397][T16646] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2341'. [ 715.579911][T16653] VFS: could not find a valid V7 on nullb0. [ 715.760608][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 716.500953][T16670] VFS: could not find a valid V7 on nullb0. [ 716.696622][T16676] overlayfs: conflicting options: userxattr,redirect_dir=on [ 716.800450][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 717.140037][T16679] lo speed is unknown, defaulting to 1000 [ 717.175331][T16679] speed is unknown, defaulting to 1000 [ 717.207739][T16679] speed is unknown, defaulting to 1000 [ 717.323969][T16686] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 717.840550][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 718.170282][T16702] netlink: 140 bytes leftover after parsing attributes in process `syz.3.2354'. [ 718.653176][T16715] Cannot find set identified by id 0 to match [ 718.880481][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 719.552540][T16728] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2362'. [ 719.555119][ T39] kauditd_printk_skb: 23 callbacks suppressed [ 719.555128][ T39] audit: type=1326 audit(1734441831.054:1041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16716 comm="syz.3.2360" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf715e579 code=0x7fc00000 [ 719.664741][T16731] xt_CT: No such helper "pptp" [ 719.930478][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 720.560544][ T39] audit: type=1326 audit(1734441832.044:1042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16743 comm="syz.4.2366" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f82579 code=0x7fc00000 [ 720.653613][T16750] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2368'. [ 720.846383][T16754] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2369'. [ 720.960511][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 721.293079][ T39] audit: type=1326 audit(1734441832.784:1043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16743 comm="syz.4.2366" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f82579 code=0x7fc00000 [ 721.298757][ T39] audit: type=1326 audit(1734441832.794:1044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16743 comm="syz.4.2366" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f82579 code=0x7fc00000 [ 722.000504][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 722.049725][T16775] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2376'. [ 722.661381][T16782] lo speed is unknown, defaulting to 1000 [ 722.697301][T16782] speed is unknown, defaulting to 1000 [ 722.710621][T16785] ebtables: wrong size: *len 80, entries_size 48, replsz 48 [ 722.770571][T16782] speed is unknown, defaulting to 1000 [ 722.922319][T16790] JFS: discard option not supported on device [ 722.924831][T16790] syz.6.2377: attempt to access beyond end of device [ 722.924831][T16790] loop6: rw=0, sector=64, nr_sectors = 8 limit=0 [ 722.928316][T16790] syz.6.2377: attempt to access beyond end of device [ 722.928316][T16790] loop6: rw=0, sector=120, nr_sectors = 8 limit=0 [ 722.933909][T16790] Mount JFS Failure: -5 [ 722.935039][T16790] jfs_mount failed w/return code = -5 [ 723.040424][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 723.557841][T16804] overlayfs: missing 'lowerdir' [ 723.831357][T16809] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 724.080494][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 724.593404][T16826] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2388'. [ 724.735867][ T39] audit: type=1800 audit(1734441836.234:1045): pid=16828 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.2386" name="SYSV00000000" dev="hugetlbfs" ino=2 res=0 errno=0 [ 725.130492][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 725.270331][T16840] overlayfs: missing 'lowerdir' [ 726.170491][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 727.200516][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 727.290140][T16880] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2403'. [ 728.240550][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 728.259512][T16899] overlayfs: failed to resolve './file1': -2 [ 729.146477][ T39] audit: type=1326 audit(1734441840.644:1046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16906 comm="syz.3.2412" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf715e579 code=0x7fc00000 [ 729.181404][T16919] netlink: 44 bytes leftover after parsing attributes in process `syz.6.2414'. [ 729.280583][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 729.324108][T16924] Cannot find set identified by id 0 to match [ 729.720314][T16930] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2417'. [ 730.126831][T16937] fuse: Unknown parameter '' [ 730.192762][T16941] lo speed is unknown, defaulting to 1000 [ 730.227845][T16941] speed is unknown, defaulting to 1000 [ 730.265447][T16941] speed is unknown, defaulting to 1000 [ 730.283498][T16946] ebtables: wrong size: *len 80, entries_size 48, replsz 48 [ 730.330478][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 730.759202][T16956] bridge_slave_0: left allmulticast mode [ 730.760894][T16956] bridge_slave_0: left promiscuous mode [ 730.762530][T16956] bridge0: port 1(bridge_slave_0) entered disabled state [ 730.776045][T16956] bridge_slave_1: left allmulticast mode [ 730.778146][T16956] bridge_slave_1: left promiscuous mode [ 730.780284][T16956] bridge0: port 2(bridge_slave_1) entered disabled state [ 730.792276][T16956] : (slave bond_slave_0): Releasing backup interface [ 730.802651][T16956] : (slave bond_slave_1): Releasing backup interface [ 730.820739][T16957] overlayfs: failed to clone upperpath [ 730.835963][T16956] team0: Port device team_slave_0 removed [ 730.841525][T16956] team0: Port device team_slave_1 removed [ 730.843506][T16956] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 730.845885][T16956] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 730.847834][T16956] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 730.863841][T16958] team0: Mode changed to "broadcast" [ 730.896338][T16956] vlan0: entered promiscuous mode [ 730.905995][T16956] team0: Port device vlan0 added [ 730.912863][T16956] tipc: Started in network mode [ 730.914187][T16956] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 730.916244][T16956] tipc: Enabled bearer , priority 6 [ 731.081619][T16958] syzkaller0: entered promiscuous mode [ 731.087664][T16958] syzkaller0: entered allmulticast mode [ 731.092259][T16961] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 731.094374][T16961] syzkaller0: Linktype set failed because interface is up [ 731.281661][T16960] x_tables: ip_tables: MASQUERADE target: used from hooks INPUT, but only usable from POSTROUTING [ 731.360482][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 731.709276][ T39] audit: type=1326 audit(1734441843.204:1047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16969 comm="syz.4.2428" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f82579 code=0x7fc00000 [ 731.979545][ T6244] tipc: Node number set to 11578026 [ 732.340528][ T39] audit: type=1326 audit(1734441843.844:1048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16972 comm="syz.3.2429" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf715e579 code=0x7fc00000 [ 732.400431][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 732.451816][ T39] audit: type=1326 audit(1734441843.954:1049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16969 comm="syz.4.2428" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f82579 code=0x7fc00000 [ 732.459050][ T39] audit: type=1326 audit(1734441843.954:1050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16969 comm="syz.4.2428" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f82579 code=0x7fc00000 [ 732.465348][ T39] audit: type=1326 audit(1734441843.954:1051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16969 comm="syz.4.2428" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f82579 code=0x7fc00000 [ 732.471232][ T39] audit: type=1326 audit(1734441843.954:1052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16969 comm="syz.4.2428" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f82579 code=0x7fc00000 [ 732.476757][ T39] audit: type=1326 audit(1734441843.954:1053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16969 comm="syz.4.2428" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f82579 code=0x7fc00000 [ 732.482512][ T39] audit: type=1326 audit(1734441843.954:1054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16969 comm="syz.4.2428" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f82579 code=0x7fc00000 [ 732.488343][ T39] audit: type=1326 audit(1734441843.954:1055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16969 comm="syz.4.2428" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f82579 code=0x7fc00000 [ 732.494363][ T39] audit: type=1326 audit(1734441843.954:1056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16969 comm="syz.4.2428" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f82579 code=0x7fc00000 [ 732.617163][T16979] overlayfs: conflicting options: userxattr,redirect_dir=on [ 733.440562][ C2] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 733.816393][T16967] veth1_macvtap: left promiscuous mode [ 733.818371][T16967] macsec0: entered promiscuous mode [ 733.820192][T16967] macsec0: entered allmulticast mode [ 733.873404][T16981] lo speed is unknown, defaulting to 1000 [ 733.970895][T16995] overlayfs: missing 'lowerdir' [ 734.017153][T16981] speed is unknown, defaulting to 1000 [ 734.056505][T16981] speed is unknown, defaulting to 1000 [ 734.480460][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 734.499224][ T5994] libceph: connect (1)[c::]:6789 error -101 [ 734.501680][ T5994] libceph: mon0 (1)[c::]:6789 connect error [ 734.516326][T17003] overlayfs: missing 'lowerdir' [ 734.760793][ T5994] libceph: connect (1)[c::]:6789 error -101 [ 734.762500][ T5994] libceph: mon0 (1)[c::]:6789 connect error [ 735.053079][T17011] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 735.160845][T16997] ceph: No mds server is up or the cluster is laggy [ 735.325893][T17016] VFS: could not find a valid V7 on nullb0. [ 735.445384][T17021] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2441'. [ 735.463063][T17023] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2442'. [ 735.477112][T17021] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2441'. [ 735.520507][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 735.680602][T17028] can0: slcan on ttyS3. [ 735.709131][T17027] ./file0: Can't lookup blockdev [ 736.222463][T17040] overlayfs: missing 'lowerdir' [ 736.222964][T17043] overlayfs: missing 'lowerdir' [ 736.361109][T17022] can0 (unregistered): slcan off ttyS3. [ 736.417445][T17053] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2447'. [ 736.570498][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 736.581325][T17056] overlayfs: conflicting options: userxattr,redirect_dir=on [ 736.749023][T17054] can0: slcan on ttyS3. [ 736.911224][T17069] lo speed is unknown, defaulting to 1000 [ 737.020589][ T39] kauditd_printk_skb: 43 callbacks suppressed [ 737.020607][ T39] audit: type=1326 audit(1734441848.514:1100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17055 comm="syz.6.2448" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f15579 code=0x7ffc0000 [ 737.029784][ T39] audit: type=1326 audit(1734441848.514:1101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17055 comm="syz.6.2448" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f15579 code=0x7ffc0000 [ 737.102676][T17069] speed is unknown, defaulting to 1000 [ 737.120722][ T39] audit: type=1326 audit(1734441848.594:1102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17044 comm="syz.4.2446" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f82579 code=0x7fc00000 [ 737.126311][ T39] audit: type=1326 audit(1734441848.624:1103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17055 comm="syz.6.2448" exe="/syz-executor" sig=0 arch=40000003 syscall=277 compat=1 ip=0xf7f15579 code=0x7ffc0000 [ 737.132129][ T39] audit: type=1326 audit(1734441848.624:1104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17055 comm="syz.6.2448" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f15579 code=0x7ffc0000 [ 737.137661][ T39] audit: type=1326 audit(1734441848.624:1105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17055 comm="syz.6.2448" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f15579 code=0x7ffc0000 [ 737.164474][T17069] speed is unknown, defaulting to 1000 [ 737.390713][T17052] can0 (unregistered): slcan off ttyS3. [ 737.600507][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 737.769567][T17076] : renamed from bond0 (while UP) [ 737.928553][T17088] VFS: could not find a valid V7 on nullb0. [ 738.074044][T17090] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2452'. [ 738.149492][T17092] overlayfs: missing 'lowerdir' [ 738.227903][T17094] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2455'. [ 738.640438][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 738.645754][ T39] audit: type=1326 audit(1734441850.144:1106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17085 comm="syz.6.2453" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f15579 code=0x7fc00000 [ 738.661146][ T39] audit: type=1326 audit(1734441850.144:1107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17085 comm="syz.6.2453" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f15579 code=0x7fc00000 [ 738.669104][ T39] audit: type=1326 audit(1734441850.144:1108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17085 comm="syz.6.2453" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f15579 code=0x7fc00000 [ 738.675715][ T39] audit: type=1326 audit(1734441850.144:1109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17085 comm="syz.6.2453" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f15579 code=0x7fc00000 [ 738.695998][T17104] input: syz1 as /devices/virtual/input/input35 [ 738.809285][T17115] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2461'. [ 739.358028][T17125] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2462'. [ 739.360617][T17125] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 739.362728][T17125] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 739.398225][T17125] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 739.400297][T17125] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 739.680451][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 739.945276][T17132] loop6: detected capacity change from 0 to 524287999 [ 739.948112][ C2] blk_print_req_error: 24 callbacks suppressed [ 739.948126][ C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 739.953457][ C2] buffer_io_error: 23 callbacks suppressed [ 739.953468][ C2] Buffer I/O error on dev loop6, logical block 0, async page read [ 740.068859][ C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 740.072203][ C2] Buffer I/O error on dev loop6, logical block 0, async page read [ 740.076240][ C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 740.079437][ C2] Buffer I/O error on dev loop6, logical block 0, async page read [ 740.084172][ C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 740.087676][ C2] Buffer I/O error on dev loop6, logical block 0, async page read [ 740.092743][ C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 740.096045][ C2] Buffer I/O error on dev loop6, logical block 0, async page read [ 740.100330][ C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 740.103783][ C2] Buffer I/O error on dev loop6, logical block 0, async page read [ 740.107798][ C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 740.111278][ C2] Buffer I/O error on dev loop6, logical block 0, async page read [ 740.115634][ C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 740.119188][ C2] Buffer I/O error on dev loop6, logical block 0, async page read [ 740.122229][T17132] ldm_validate_partition_table(): Disk read failed. [ 740.124830][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 740.127233][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 740.130461][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 740.132786][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 740.137381][T17132] Dev loop6: unable to read RDB block 0 [ 740.141364][T17132] loop6: unable to read partition table [ 740.143299][T17132] loop_reread_partitions: partition scan of loop6 (3 xC) failed (rc=-5) [ 740.634017][T17141] netlink: 'syz.4.2467': attribute type 29 has an invalid length. [ 740.720442][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 740.909232][T17147] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2468'. [ 741.048880][T17147] tmpfs: Bad value for 'mpol' [ 741.277794][T17150] lo speed is unknown, defaulting to 1000 [ 741.317080][T17150] speed is unknown, defaulting to 1000 [ 741.322862][T17152] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2470'. [ 741.327417][T17153] ebtables: wrong size: *len 80, entries_size 48, replsz 48 [ 741.355513][T17150] speed is unknown, defaulting to 1000 [ 741.746501][T17157] overlayfs: failed to clone upperpath [ 741.751094][T17158] can0: slcan on ttyS3. [ 741.770440][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 742.212323][T17151] can0 (unregistered): slcan off ttyS3. [ 742.449179][T17190] fuse: Bad value for 'fd' [ 742.530144][ T39] kauditd_printk_skb: 5 callbacks suppressed [ 742.530160][ T39] audit: type=1326 audit(1734441854.024:1115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17191 comm="syz.3.2478" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf715e579 code=0x7fc00000 [ 742.613124][ T39] audit: type=1326 audit(1734441854.114:1116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17162 comm="syz.4.2473" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f82579 code=0x7fc00000 [ 742.628685][ T39] audit: type=1326 audit(1734441854.114:1117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17162 comm="syz.4.2473" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f82579 code=0x7fc00000 [ 742.635889][ T39] audit: type=1326 audit(1734441854.114:1118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17162 comm="syz.4.2473" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f82579 code=0x7fc00000 [ 742.642897][ T39] audit: type=1326 audit(1734441854.114:1119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17162 comm="syz.4.2473" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f82579 code=0x7fc00000 [ 742.649760][ T39] audit: type=1326 audit(1734441854.114:1120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17162 comm="syz.4.2473" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f82579 code=0x7fc00000 [ 742.657359][ T39] audit: type=1326 audit(1734441854.114:1121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17162 comm="syz.4.2473" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f82579 code=0x7fc00000 [ 742.663932][ T39] audit: type=1326 audit(1734441854.114:1122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17162 comm="syz.4.2473" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f82579 code=0x7fc00000 [ 742.672253][ T39] audit: type=1326 audit(1734441854.114:1123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17162 comm="syz.4.2473" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f82579 code=0x7fc00000 [ 742.679582][ T39] audit: type=1326 audit(1734441854.114:1124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17162 comm="syz.4.2473" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f82579 code=0x7fc00000 [ 742.734987][T17198] lo speed is unknown, defaulting to 1000 [ 742.772448][T17198] speed is unknown, defaulting to 1000 [ 742.779224][T17201] ebtables: wrong size: *len 80, entries_size 48, replsz 48 [ 742.800440][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 742.805502][T17198] speed is unknown, defaulting to 1000 [ 743.025973][T17205] overlayfs: failed to clone upperpath [ 743.129265][T17208] netlink: del zone limit has 4 unknown bytes [ 743.850691][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 744.308806][T17226] Invalid logical block size (524288) [ 744.621014][T17234] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2490'. [ 744.631447][T17235] overlayfs: failed to clone upperpath [ 744.880463][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 745.019458][T17241] fuse: Bad value for 'fd' [ 745.086437][T17242] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2491'. [ 745.140795][T17243] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2491'. [ 745.327618][T17248] VFS: could not find a valid V7 on nullb0. [ 745.920653][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 746.115735][T17257] netlink: 'syz.3.2496': attribute type 29 has an invalid length. [ 746.120875][T17260] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2497'. [ 746.458014][T17263] can0: slcan on ttyS3. [ 746.561381][ T1415] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 746.565210][ T1415] ieee802154 phy1 wpan1: encryption failed: -22 [ 746.970426][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 747.021318][T17259] can0 (unregistered): slcan off ttyS3. [ 748.010531][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 748.389388][T17313] overlayfs: failed to clone upperpath [ 749.040472][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 749.393050][T17327] netlink: 'syz.6.2512': attribute type 1 has an invalid length. [ 749.395464][T17327] netlink: 'syz.6.2512': attribute type 3 has an invalid length. [ 749.398070][T17327] netlink: 224 bytes leftover after parsing attributes in process `syz.6.2512'. [ 749.716523][T17331] lo speed is unknown, defaulting to 1000 [ 749.751179][T17331] speed is unknown, defaulting to 1000 [ 749.770606][T17332] ebtables: wrong size: *len 80, entries_size 48, replsz 48 [ 749.787080][T17331] speed is unknown, defaulting to 1000 [ 750.036398][T17335] overlayfs: missing 'lowerdir' [ 750.080444][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 750.087158][T17341] overlayfs: failed to clone upperpath [ 750.815068][T17352] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2519'. [ 751.130423][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 751.178990][T17367] lo speed is unknown, defaulting to 1000 [ 751.220973][T17367] speed is unknown, defaulting to 1000 [ 751.222028][T17370] ebtables: wrong size: *len 80, entries_size 48, replsz 48 [ 751.255524][T17367] speed is unknown, defaulting to 1000 [ 751.772394][ T39] kauditd_printk_skb: 7 callbacks suppressed [ 751.772406][ T39] audit: type=1326 audit(1734441863.274:1132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17361 comm="syz.3.2522" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf715e579 code=0x7fc00000 [ 751.780214][ T39] audit: type=1326 audit(1734441863.274:1133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17361 comm="syz.3.2522" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf715e579 code=0x7fc00000 [ 751.813469][ T39] audit: type=1326 audit(1734441863.274:1134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17361 comm="syz.3.2522" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf715e579 code=0x7fc00000 [ 751.823574][ T39] audit: type=1326 audit(1734441863.274:1135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17361 comm="syz.3.2522" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf715e579 code=0x7fc00000 [ 751.829105][ T39] audit: type=1326 audit(1734441863.274:1136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17361 comm="syz.3.2522" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf715e579 code=0x7fc00000 [ 751.840754][ T39] audit: type=1326 audit(1734441863.274:1137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17361 comm="syz.3.2522" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf715e579 code=0x7fc00000 [ 751.846604][ T39] audit: type=1326 audit(1734441863.274:1138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17361 comm="syz.3.2522" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf715e579 code=0x7fc00000 [ 751.853511][ T39] audit: type=1326 audit(1734441863.274:1139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17361 comm="syz.3.2522" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf715e579 code=0x7fc00000 [ 751.859055][ T39] audit: type=1326 audit(1734441863.274:1140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17361 comm="syz.3.2522" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf715e579 code=0x7fc00000 [ 752.160493][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 752.471812][ T39] audit: type=1326 audit(1734441863.974:1141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17395 comm="syz.5.2532" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf713e579 code=0x7fc00000 [ 752.862165][T17399] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2533'. [ 753.200434][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 753.845872][T17405] overlayfs: failed to clone upperpath [ 754.240532][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 755.280457][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 755.423757][T17427] loop9: detected capacity change from 0 to 6 [ 755.790079][T17427] Dev loop9: unable to read RDB block 6 [ 755.791765][T17427] loop9: unable to read partition table [ 755.793665][T17427] loop9: partition table beyond EOD, truncated [ 755.795349][T17427] loop_reread_partitions: partition scan of loop9 (被xڬdƤݡ [ 755.795349][T17427] ) failed (rc=-5) [ 755.951386][T17436] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2543'. [ 756.320505][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 756.337966][T17441] overlayfs: failed to clone upperpath [ 756.392031][T17448] lo speed is unknown, defaulting to 1000 [ 756.438344][T17450] ebtables: wrong size: *len 80, entries_size 48, replsz 48 [ 756.439035][T17448] speed is unknown, defaulting to 1000 [ 756.486232][T17448] speed is unknown, defaulting to 1000 [ 757.025769][ T39] kauditd_printk_skb: 2 callbacks suppressed [ 757.025785][ T39] audit: type=1326 audit(1734441868.524:1144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17459 comm="syz.3.2550" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf715e579 code=0x7fc00000 [ 757.370482][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 758.004964][T17471] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2553'. [ 758.206619][T17475] can0: slcan on ttyS3. [ 758.400499][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 758.916440][T17470] can0 (unregistered): slcan off ttyS3. [ 758.978471][T17497] lo speed is unknown, defaulting to 1000 [ 759.015334][T17497] speed is unknown, defaulting to 1000 [ 759.027287][T17501] ebtables: wrong size: *len 80, entries_size 48, replsz 48 [ 759.064893][T17497] speed is unknown, defaulting to 1000 [ 759.440445][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 759.988672][T17525] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2562'. [ 760.101201][T17528] netlink: 80 bytes leftover after parsing attributes in process `syz.3.2563'. [ 760.109749][T17528] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 760.273062][T17532] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2564'. [ 760.437678][T17533] can0: slcan on ttyS3. [ 760.480469][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 761.083635][T17549] overlayfs: failed to clone upperpath [ 761.122177][T17552] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2568'. [ 761.211098][T17531] can0 (unregistered): slcan off ttyS3. [ 761.520449][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 761.710528][ T39] audit: type=1326 audit(1734441873.214:1145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17568 comm="syz.4.2570" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f82579 code=0x7fc00000 [ 762.570526][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 762.665227][T17589] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(5) [ 762.666972][T17589] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 762.669047][T17589] vhci_hcd vhci_hcd.0: Device attached [ 762.933359][T11771] vhci_hcd: vhci_device speed not set [ 762.990706][T11771] usb 49-1: new full-speed USB device number 3 using vhci_hcd [ 763.276739][T17590] vhci_hcd: connection reset by peer [ 763.281532][ T196] vhci_hcd: stop threads [ 763.284358][ T196] vhci_hcd: release socket [ 763.285615][ T196] vhci_hcd: disconnect device [ 763.348249][T17599] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2577'. [ 763.610442][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 764.243304][T17614] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2581'. [ 764.640462][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 764.708157][T17623] overlayfs: failed to clone upperpath [ 765.387329][T17628] [ 765.388015][T17628] ====================================================== [ 765.389844][T17628] WARNING: possible circular locking dependency detected [ 765.391634][T17628] 6.13.0-rc3-syzkaller-00017-gf44d154d6e3d #0 Not tainted SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 765.394203][T17628] ------------------------------------------------------ [ 765.397125][T17628] syz.5.2585/17628 is trying to acquire lock: [ 765.398753][T17628] ffff888023e130b8 (&eq->sysfs_lock){+.+.}-{4:4}, at: elevator_disable+0xb5/0x490 [ 765.401354][T17628] [ 765.401354][T17628] but task is already holding lock: [ 765.403300][T17628] ffff888023e880a8 (&q->q_usage_counter(io)#54){++++}-{0:0}, at: __blk_mq_update_nr_hw_queues+0x21c/0x1500 [ 765.406345][T17628] [ 765.406345][T17628] which lock already depends on the new lock. [ 765.406345][T17628] [ 765.408990][T17628] [ 765.408990][T17628] the existing dependency chain (in reverse order) is: [ 765.411365][T17628] [ 765.411365][T17628] -> #4 (&q->q_usage_counter(io)#54){++++}-{0:0}: [ 765.413575][T17628] blk_mq_submit_bio+0x1fb6/0x24c0 [ 765.415054][T17628] __submit_bio+0x384/0x540 [ 765.416359][T17628] submit_bio_noacct_nocheck+0x698/0xd70 [ 765.417964][T17628] submit_bio_noacct+0x93a/0x1e20 [ 765.419396][T17628] mpage_readahead+0x41d/0x590 [ 765.420801][T17628] read_pages+0x1a8/0xdc0 [ 765.422074][T17628] page_cache_ra_unbounded+0x3dc/0x750 [ 765.423614][T17628] force_page_cache_ra+0x24b/0x340 [ 765.425099][T17628] page_cache_sync_ra+0x110/0x9c0 [ 765.426537][T17628] filemap_get_pages+0xd7b/0x1be0 [ 765.427982][T17628] filemap_read+0x3ca/0xd70 [ 765.429308][T17628] blkdev_read_iter+0x187/0x480 [ 765.430692][T17628] vfs_read+0x87f/0xbe0 [ 765.431913][T17628] ksys_read+0x12b/0x250 [ 765.433155][T17628] do_syscall_64+0xcd/0x250 [ 765.434465][T17628] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 765.436141][T17628] [ 765.436141][T17628] -> #3 (mapping.invalidate_lock#2){++++}-{4:4}: [ 765.438333][T17628] down_read+0x9a/0x330 [ 765.439553][T17628] filemap_fault+0x2e0/0x2820 [ 765.440890][T17628] __do_fault+0x10a/0x490 [ 765.442292][T17628] do_pte_missing+0xebd/0x3e00 [ 765.443687][T17628] __handle_mm_fault+0x103c/0x2a40 [ 765.445204][T17628] handle_mm_fault+0x3fa/0xaa0 [ 765.446592][T17628] __get_user_pages+0x8d9/0x3b50 [ 765.448026][T17628] populate_vma_page_range+0x27f/0x3a0 [ 765.449679][T17628] __mm_populate+0x1d6/0x380 [ 765.451014][T17628] vm_mmap_pgoff+0x293/0x360 [ 765.452355][T17628] ksys_mmap_pgoff+0x32c/0x5c0 [ 765.453743][T17628] __do_fast_syscall_32+0x73/0x120 [ 765.455277][T17628] do_fast_syscall_32+0x32/0x80 [ 765.456664][T17628] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 765.458429][T17628] [ 765.458429][T17628] -> #2 (&mm->mmap_lock){++++}-{4:4}: [ 765.460398][T17628] __might_fault+0x11b/0x190 [ 765.461734][T17628] _copy_from_user+0x29/0xd0 [ 765.463058][T17628] __blk_trace_setup+0xa8/0x180 [ 765.464442][T17628] blk_trace_setup+0x47/0x70 [ 765.465854][T17628] sg_ioctl+0x7a3/0x26b0 [ 765.467096][T17628] compat_ptr_ioctl+0x6b/0xa0 [ 765.468446][T17628] __do_compat_sys_ioctl+0x1cb/0x2c0 [ 765.469978][T17628] __do_fast_syscall_32+0x73/0x120 [ 765.471415][T17628] do_fast_syscall_32+0x32/0x80 [ 765.472851][T17628] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 765.474612][T17628] [ 765.474612][T17628] -> #1 (&q->debugfs_mutex){+.+.}-{4:4}: [ 765.476758][T17628] __mutex_lock+0x19b/0xa60 [ 765.478061][T17628] blk_mq_exit_sched+0xd1/0x310 [ 765.479445][T17628] elevator_exit+0x58/0x80 [ 765.480716][T17628] del_gendisk+0x568/0xad0 [ 765.481999][T17628] nbd_dev_remove+0x3b/0xe0 [ 765.483291][T17628] process_one_work+0x958/0x1b30 [ 765.484734][T17628] worker_thread+0x6c8/0xf00 [ 765.486067][T17628] kthread+0x2c1/0x3a0 [ 765.487223][T17628] ret_from_fork+0x45/0x80 [ 765.488486][T17628] ret_from_fork_asm+0x1a/0x30 [ 765.489754][T17628] [ 765.489754][T17628] -> #0 (&eq->sysfs_lock){+.+.}-{4:4}: [ 765.491700][T17628] __lock_acquire+0x249e/0x3c40 [ 765.493094][T17628] lock_acquire.part.0+0x11b/0x380 [ 765.494543][T17628] __mutex_lock+0x19b/0xa60 [ 765.495875][T17628] elevator_disable+0xb5/0x490 [ 765.497280][T17628] __blk_mq_update_nr_hw_queues+0x41e/0x1500 [ 765.498948][T17628] blk_mq_update_nr_hw_queues+0x2a/0x40 [ 765.500528][T17628] nbd_start_device+0x15b/0xd70 [ 765.501866][T17628] nbd_ioctl+0x21a/0xfd0 [ 765.503045][T17628] compat_blkdev_ioctl+0x2f7/0x750 [ 765.504483][T17628] __do_compat_sys_ioctl+0x1cb/0x2c0 [ 765.506065][T17628] __do_fast_syscall_32+0x73/0x120 [ 765.507545][T17628] do_fast_syscall_32+0x32/0x80 [ 765.508897][T17628] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 765.510541][T17628] [ 765.510541][T17628] other info that might help us debug this: [ 765.510541][T17628] [ 765.513004][T17628] Chain exists of: [ 765.513004][T17628] &eq->sysfs_lock --> mapping.invalidate_lock#2 --> &q->q_usage_counter(io)#54 [ 765.513004][T17628] [ 765.517235][T17628] Possible unsafe locking scenario: [ 765.517235][T17628] [ 765.519413][T17628] CPU0 CPU1 [ 765.520794][T17628] ---- ---- [ 765.522199][T17628] lock(&q->q_usage_counter(io)#54); [ 765.523598][T17628] lock(mapping.invalidate_lock#2); [ 765.525821][T17628] lock(&q->q_usage_counter(io)#54); [ 765.527868][T17628] lock(&eq->sysfs_lock); [ 765.529055][T17628] [ 765.529055][T17628] *** DEADLOCK *** [ 765.529055][T17628] [ 765.531126][T17628] 6 locks held by syz.5.2585/17628: [ 765.532467][T17628] #0: ffff888023437998 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_ioctl+0x151/0xfd0 [ 765.534837][T17628] #1: ffff8880234378d8 (&set->tag_list_lock){+.+.}-{4:4}, at: blk_mq_update_nr_hw_queues+0x20/0x40 [ 765.537471][T17628] #2: ffff888023e88668 (&q->sysfs_dir_lock){+.+.}-{4:4}, at: __blk_mq_update_nr_hw_queues+0x205/0x1500 [ 765.540141][T17628] #3: ffff888023e885d8 (&q->sysfs_lock){+.+.}-{4:4}, at: __blk_mq_update_nr_hw_queues+0x214/0x1500 [ 765.542800][T17628] #4: ffff888023e880a8 (&q->q_usage_counter(io)#54){++++}-{0:0}, at: __blk_mq_update_nr_hw_queues+0x21c/0x1500 [ 765.546007][T17628] #5: ffff888023e880e0 (&q->q_usage_counter(queue)#38){+.+.}-{0:0}, at: __blk_mq_update_nr_hw_queues+0x21c/0x1500 [ 765.549002][T17628] [ 765.549002][T17628] stack backtrace: [ 765.550420][T17628] CPU: 0 UID: 0 PID: 17628 Comm: syz.5.2585 Not tainted 6.13.0-rc3-syzkaller-00017-gf44d154d6e3d #0 [ 765.552947][T17628] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 765.555694][T17628] Call Trace: [ 765.556558][T17628] [ 765.557331][T17628] dump_stack_lvl+0x116/0x1f0 [ 765.558536][T17628] print_circular_bug+0x41c/0x610 [ 765.559764][T17628] check_noncircular+0x31a/0x400 [ 765.561010][T17628] ? __pfx_check_noncircular+0x10/0x10 [ 765.562424][T17628] ? save_trace+0x42/0xa10 [ 765.563585][T17628] ? add_lock_to_list+0x17d/0x390 [ 765.565030][T17628] __lock_acquire+0x249e/0x3c40 [ 765.566417][T17628] ? __pfx___lock_acquire+0x10/0x10 [ 765.567716][T17628] ? find_held_lock+0x2d/0x110 [ 765.568861][T17628] lock_acquire.part.0+0x11b/0x380 [ 765.570212][T17628] ? elevator_disable+0xb5/0x490 [ 765.571433][T17628] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 765.572827][T17628] ? rcu_is_watching+0x12/0xc0 [ 765.574033][T17628] ? trace_lock_acquire+0x14e/0x1f0 [ 765.575592][T17628] ? elevator_disable+0xb5/0x490 [ 765.576846][T17628] ? lock_acquire+0x2f/0xb0 [ 765.578019][T17628] ? elevator_disable+0xb5/0x490 [ 765.579288][T17628] __mutex_lock+0x19b/0xa60 [ 765.580438][T17628] ? elevator_disable+0xb5/0x490 [ 765.581682][T17628] ? elevator_disable+0xb5/0x490 [ 765.582903][T17628] ? __pfx___mutex_lock+0x10/0x10 [ 765.584157][T17628] ? __pfx_blk_mq_sched_free_rqs+0x10/0x10 [ 765.585731][T17628] ? mark_held_locks+0x9f/0xe0 [ 765.587191][T17628] ? elevator_disable+0xb5/0x490 [ 765.588976][T17628] elevator_disable+0xb5/0x490 [ 765.590722][T17628] __blk_mq_update_nr_hw_queues+0x41e/0x1500 [ 765.592847][T17628] ? __mutex_trylock_common+0xea/0x250 [ 765.594200][T17628] ? __pfx___mutex_trylock_common+0x10/0x10 [ 765.595699][T17628] ? blk_mq_update_nr_hw_queues+0x20/0x40 [ 765.597223][T17628] ? rcu_is_watching+0x12/0xc0 [ 765.598479][T17628] ? __pfx___blk_mq_update_nr_hw_queues+0x10/0x10 [ 765.600139][T17628] ? __pfx___mutex_trylock_common+0x10/0x10 [ 765.601669][T17628] ? blk_mq_update_nr_hw_queues+0x20/0x40 [ 765.603045][T17628] ? __pfx___mutex_lock+0x10/0x10 [ 765.604327][T17628] ? trace_contention_end+0xee/0x140 [ 765.605699][T17628] ? __mutex_lock+0x1cc/0xa60 [ 765.606966][T17628] ? nbd_ioctl+0x151/0xfd0 [ 765.608145][T17628] ? __pfx___mutex_lock+0x10/0x10 [ 765.609489][T17628] blk_mq_update_nr_hw_queues+0x2a/0x40 [ 765.610927][T17628] nbd_start_device+0x15b/0xd70 [ 765.612197][T17628] ? bpf_lsm_capable+0x9/0x10 [ 765.613432][T17628] nbd_ioctl+0x21a/0xfd0 [ 765.614541][T17628] ? __pfx_nbd_ioctl+0x10/0x10 [ 765.615789][T17628] ? __pfx_lock_release+0x10/0x10 [ 765.617118][T17628] ? trace_lock_acquire+0x14e/0x1f0 [ 765.618474][T17628] ? __sanitizer_cov_trace_switch+0x16/0x90 [ 765.620013][T17628] ? __pfx_nbd_ioctl+0x10/0x10 [ 765.621274][T17628] compat_blkdev_ioctl+0x2f7/0x750 [ 765.622612][T17628] ? __pfx_compat_blkdev_ioctl+0x10/0x10 [ 765.624070][T17628] ? __fget_files+0x206/0x3a0 [ 765.625300][T17628] ? __pfx_compat_blkdev_ioctl+0x10/0x10 [ 765.626801][T17628] __do_compat_sys_ioctl+0x1cb/0x2c0 [ 765.628199][T17628] __do_fast_syscall_32+0x73/0x120 [ 765.629539][T17628] do_fast_syscall_32+0x32/0x80 [ 765.630804][T17628] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 765.632432][T17628] RIP: 0023:0xf713e579 [ 765.633462][T17628] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 765.638211][T17628] RSP: 002b:00000000f513055c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 765.640243][T17628] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 000000000000ab03 [ 765.642190][T17628] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 765.644128][T17628] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 765.646187][T17628] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 765.648177][T17628] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 765.650153][T17628] [ 765.680435][ C3] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 765.752202][T17628] block nbd5: shutting down sockets [ 768.072308][T11771] vhci_hcd: vhci_device speed not set VM DIAGNOSIS: 13:24:37 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000069 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85142075 RDI=ffffffff9a665300 RBP=ffffffff9a6652c0 RSP=ffffc900076cefd0 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=722d302e33312e36 R12=0000000000000000 R13=0000000000000069 R14=ffffffff85142010 R15=0000000000000000 RIP=ffffffff8514209f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802b400000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000002faffffc CR3=000000005fdd4000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000005000000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000000 RBX=ffff88802b53ff00 RCX=ffffffff818d6ea4 RDX=ffff88801d2b8000 RSI=ffffffff818d6e7f RDI=0000000000000005 RBP=ffffc9000045fd78 RSP=ffffc9000045fca0 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=fffffbfff1bb8b6e R12=1ffff9200008bf98 R13=0000000000000001 R14=0000000000000003 R15=ffffed10056a7fe1 RIP=ffffffff818d6e85 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b500000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f510fda4 CR3=000000005cea0000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000005000000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000001 RBX=ffff888065fe5bc0 RCX=ffffffff81a0f925 RDX=0000000000000000 RSI=ffffffff8bb16bc0 RDI=0000000000000001 RBP=0000000000000246 RSP=ffffc90021d8f6f0 R8 =0000000000000000 R9 =fffffbfff2039b3a R10=ffffffff901cd9d7 R11=0000000000000000 R12=ffff888065fe5ba8 R13=0000000000000000 R14=ffff888065fe5ba8 R15=ffffc90021d8f898 RIP=ffffffff81681270 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802b600000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000030100ffc CR3=000000005cea0000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000005000000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=dffffc0000000000 RBX=ffffc90003ddf5d8 RCX=ffffffff90aca24c RDX=1ffff920007bbebc RSI=ffffc90003ddf670 RDI=ffffc90003ddf5d8 RBP=ffffc90003ddf670 RSP=ffffc90003ddf4d8 R8 =ffffffff90aca276 R9 =ffffffff90aca250 R10=ffffc90003ddf5d8 R11=0000000000004017 R12=0000000000000008 R13=ffffc90003ddf5d8 R14=ffffc90003ddf5e0 R15=ffffc90003ddf670 RIP=ffffffff8148eca0 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b700000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007ffcaf97bb7c CR3=000000005d052000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000006000000000 0000000100000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000006000000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000