last executing test programs: 3m25.460110139s ago: executing program 0 (id=1296): close(0xffffffffffffffff) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x593802, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$getregset(0x4205, r1, 0x200, &(0x7f0000000080)={0x0, 0x30}) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000), 0x10) setsockopt$sock_int(r0, 0x1, 0x2d, &(0x7f0000000040), 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$9p_virtio(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x2204000, &(0x7f0000000080)={'trans=virtio,', {[{@directio}], [{@appraise}]}}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) accept4$alg(r3, 0x0, 0x0, 0x0) 3m25.311691698s ago: executing program 0 (id=1299): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x70bd2b, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7b, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) close_range(r4, 0xffffffffffffffff, 0x0) r5 = fsopen(&(0x7f00000002c0)='pstore\x00', 0x1) fsconfig$FSCONFIG_SET_FD(r5, 0x5, &(0x7f0000000380)=':\x00', 0x0, r3) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r6, 0x0, 0x0, 0x20000841, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @empty}, 0x1c) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) open(&(0x7f00000003c0)='./file0\x00', 0x10241, 0x0) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c00000002060104db406e3e0004000200000000100003006269746d61703a706f72740005000400000000000900020073797a32000000000500050000006c000500010006000000240007800800"], 0x6c}}, 0x0) r8 = add_key(&(0x7f0000000240)='cifs.spnego\x00', &(0x7f0000000200)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$setperm(0x5, r8, 0x220c) 3m24.750587534s ago: executing program 0 (id=1300): openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000002c0)) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x4e21, 0xb744, @private2={0xfc, 0x2, '\x00', 0x1}, 0xfffffffd}, 0x1c) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CAP_SPLIT_IRQCHIP(r4, 0x4068aea3, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4138ae84, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r6, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x8, 0x80, 0x0, '\x00', 0x5c8d}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_RENAME(r7, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x2c, 0x5, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x40) r8 = landlock_create_ruleset(&(0x7f0000000000)={0x0, 0x1}, 0x18, 0x0) landlock_add_rule$LANDLOCK_RULE_NET_PORT(r8, 0x2, &(0x7f00000000c0)={0x3}, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x2fb71da98128d4bd, 0x0) 3m23.693379062s ago: executing program 0 (id=1305): setxattr$trusted_overlay_origin(&(0x7f0000000440)='./file0\x00', &(0x7f0000000500), 0x0, 0x0, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e78, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{}, 0x80}}]}, {0x2}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x40000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket(0x2c, 0x4, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000280)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) getsockopt$ARPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x60, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000300)='./file0\x00') mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180)='rpc_pipefs\x00', 0x0, 0x0) r3 = inotify_init() inotify_add_watch(r3, 0x0, 0x20000002) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000640)={'#! ', './file0', [{}, {0x20, 'rp\xee\xff\xe4'}, {0x20, '\x12~\x85\xecZ@\xb5\x18\xec\x182\xc9L\xdc\xb2\x81\xdam\xa8\xc5{\x92\x14\xce\xf2\xb8\xf7\xa9\xa7\x00X \x93t\x91!%\xff\x13\xdc\aIY\x0e\xb4zh\\\x06\r\xe8^Z\x81\xb8$:P\x83\x98_\xa1\x98\xd6\xd2g-\xefr\x14<\xd1\xb84\x94\xa09\x9f\x12I\xed\xd5dT#f\xb4\xf3\x88\xcf\xde\x00\xd4\x81WN\xca\xb5c\xbf\r\xb0Q\xa9\xbaC\xd2\xa2\x1d~\xc5D(\x92A\x12f\x83fn\xd0\xb6\x02\x116t:|\x94\xc7\xac\xf6\xbc~m\xd6\xd1\xe5\xe0\xdd\xc2\x9cl#\x85\xab\xe7\xa9\xcb\"\xd2\x97\x10\xa5\xa8\xc1\x8d@U\a]Gi^\xd2\xdf\xb0\xa5!\x836\x92\xc9\x92\xe4'}], 0xa, "7bad65c4da5338577feb172ca63250224c76e2027f000000000000007e2ac7fe2e31a2e87e3ee43ed92dfbb6bc0700de24db4ec870b8000000000000002c65e7495fe9afeb28bb60e91e23e104f6dbbf40e1fc2ab1a77fd9f6414e438f03"}, 0xfffffc43) 3m22.840505383s ago: executing program 0 (id=1310): syz_open_dev$vim2m(0x0, 0x3fe, 0x2) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCDELRT(r0, 0x890b, &(0x7f0000000080)={@loopback={0xfec0ffff00000000}, @private1, @local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x280}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r4 = socket(0x10, 0x2, 0x0) write(r4, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) openat$binderfs(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x3a) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"/2574], &(0x7f0000000140)='GPL\x00'}, 0x48) r6 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r6, &(0x7f0000000fc0)={0x0, 0x0, 0x0}, 0x20000811) r7 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r7, 0x89e0, &(0x7f0000000040)={r6, r5}) sendmsg$kcm(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000200)="1f", 0x1}], 0x1}, 0x40) 3m22.33021682s ago: executing program 0 (id=1314): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000400)={0x0, 0x38, "bf7fa159ea60785a5fcfa8d2d836dbcbaacf8bcee9219a5f2bb4a5f2595b038c94e09bad06348991bdef8e91f03028fbe1f85658bb99d414"}, &(0x7f0000000300)=0x40) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0xffffffffffffffff, 0x70bd2a, 0x25dfdbfa, {0x0, 0x0, 0x0, 0x0, 0x6400, 0x11223}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @multicast1}]}}}, @IFLA_MTU={0x8, 0x4, 0x44fc}]}, 0x40}, 0x1, 0x0, 0x0, 0x20004050}, 0x20048040) socket$netlink(0x10, 0x3, 0x0) add_key$keyring(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=ANY=[], 0x48) socket(0x23, 0x6, 0xfffffffe) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'veth1_to_team\x00', &(0x7f0000002fc0)=@ethtool_coalesce={0xf, 0x0, 0x0, 0x7f11b2d5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x4243, 0x0, 0x0, 0x0, 0xc}}) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00'}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4) fsopen(&(0x7f00000000c0)='omfs\x00', 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000001c0)={0x4, &(0x7f0000000180)=[{0x3, 0x10, 0x5, 0x5}, {0x6, 0x8, 0x1, 0xf5}, {0xc, 0x0, 0xe4, 0x4}, {0x0, 0xa, 0x7, 0x4}]}) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x200000b, 0x20000000ec071, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000300)=@gcm_128={{0x304}, "7c6d8f74584dc700", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', "faffffffffffffff"}, 0x28) sendto$inet6(r3, &(0x7f00000001c0), 0xfffffffffffffede, 0x0, 0x0, 0x3000137) 3m22.253481936s ago: executing program 32 (id=1314): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000400)={0x0, 0x38, "bf7fa159ea60785a5fcfa8d2d836dbcbaacf8bcee9219a5f2bb4a5f2595b038c94e09bad06348991bdef8e91f03028fbe1f85658bb99d414"}, &(0x7f0000000300)=0x40) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0xffffffffffffffff, 0x70bd2a, 0x25dfdbfa, {0x0, 0x0, 0x0, 0x0, 0x6400, 0x11223}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @multicast1}]}}}, @IFLA_MTU={0x8, 0x4, 0x44fc}]}, 0x40}, 0x1, 0x0, 0x0, 0x20004050}, 0x20048040) socket$netlink(0x10, 0x3, 0x0) add_key$keyring(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=ANY=[], 0x48) socket(0x23, 0x6, 0xfffffffe) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'veth1_to_team\x00', &(0x7f0000002fc0)=@ethtool_coalesce={0xf, 0x0, 0x0, 0x7f11b2d5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x4243, 0x0, 0x0, 0x0, 0xc}}) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00'}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4) fsopen(&(0x7f00000000c0)='omfs\x00', 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000001c0)={0x4, &(0x7f0000000180)=[{0x3, 0x10, 0x5, 0x5}, {0x6, 0x8, 0x1, 0xf5}, {0xc, 0x0, 0xe4, 0x4}, {0x0, 0xa, 0x7, 0x4}]}) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x200000b, 0x20000000ec071, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000300)=@gcm_128={{0x304}, "7c6d8f74584dc700", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', "faffffffffffffff"}, 0x28) sendto$inet6(r3, &(0x7f00000001c0), 0xfffffffffffffede, 0x0, 0x0, 0x3000137) 8.229597467s ago: executing program 4 (id=2183): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_dev$dri(&(0x7f00000001c0), 0xa, 0x9c556f0db2cf8b5e) syz_emit_ethernet(0x22, &(0x7f0000000180)={@empty, @random="6f7ce78c0aaa", @val={@void, {0x8100, 0x3, 0x1, 0x3}}, {@can={0xc, {{0x4, 0x0, 0x1, 0x1}, 0x0, 0x7, 0x0, 0x0, "a078acbc9e5bd7d0"}}}}, &(0x7f0000000200)={0x1, 0x3, [0x718, 0xe46, 0x26e, 0xc11]}) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) close(0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r1, 0x0, 0x62, 0xfe, &(0x7f0000000140)="cb74445b7d4c0b24676c6c71ae37efcedaf40242309766deb4e793f90000000000000000dbc856cbc664650634231454ca2d8034c4ca29e0d99c3b6615e91835a600c08f989af45438a54981be310aad92ae545b1c961e5f3762a51fe4c736edec6f", &(0x7f0000000440)=""/254, 0x2f00, 0x0, 0xff, 0x194, &(0x7f0000000980)="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", &(0x7f00000007c0)="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", 0x2, 0x0, 0x10000}, 0x24) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, 0x0) socket$unix(0x1, 0x5, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) poll(&(0x7f0000000080), 0x2000011b, 0xf0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x53e}, 0x1c) sendto$inet6(r3, &(0x7f00000001c0)="a6", 0x1, 0x840, 0x0, 0x0) recvmsg(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x102) socket(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newlink={0x50, 0x10, 0x421, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad, 0x60e1}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_ID={0x6, 0x1, 0x2}]}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x50}, 0x1, 0x0, 0x0, 0x4008005}, 0x2) 8.08397935s ago: executing program 4 (id=2185): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000780)={'sit0\x00', &(0x7f0000000740)={'erspan0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x29, 0x0, @private}}}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x0, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x7, 0x2, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x19, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x8}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0a00000004000000080000000b0000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) pipe(&(0x7f0000000000)) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) getrlimit(0xd, &(0x7f0000000180)) r6 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x14d002) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) socket$can_raw(0x1d, 0x3, 0x1) ioctl$NBD_SET_SOCK(r6, 0xab00, r7) close_range(r1, 0xffffffffffffffff, 0x0) 6.969800085s ago: executing program 4 (id=2194): socket(0x3, 0x4, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) getsockopt(r1, 0x3, 0x8, &(0x7f0000000240)=""/111, &(0x7f00000000c0)=0x6f) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) socket$l2tp(0x2, 0x2, 0x73) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0xf, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = openat$audio1(0xffffffffffffff9c, 0x0, 0x202, 0x0) writev(r5, &(0x7f0000000680)=[{&(0x7f0000000100)='\b', 0x1}], 0x1) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{}, &(0x7f0000000400), &(0x7f00000004c0)}, 0x20) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x70bd2b, 0x10000, {0x0, 0x0, 0x0, r6, {0xc}, {0x0, 0x4}, {0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) syz_extract_tcp_res$synack(&(0x7f00000002c0)={0x41424344, 0x41424344}, 0x1, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100000cb768405e0483020b990102030109021b000100000000090400fb015c291d00090509"], 0x0) syz_open_dev$sndpcmp(&(0x7f0000000300), 0x3, 0x147000) syz_emit_ethernet(0x6f, &(0x7f0000000800)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2d}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x1, 0x3a, 0x61, 0x65, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010102, @remote}, {{0x4e20, 0x4e23, 0x41424344, r7, 0x1, 0x0, 0x5, 0x80, 0x3c6, 0x0, 0x5}, {"039b218ba5d517d9ec736c16e7522792f0221c1017193f0fcb28f7199f19237c4e78519eafbf4c49f38695082a9f6afe7bb5abca134f9c0c35"}}}}}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0xfffffffd}, 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00"/12], 0x48) 5.427513941s ago: executing program 3 (id=2203): openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000014c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r0, 0xfeffff, 0xe80, 0x3f000002, &(0x7f0000000700)="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", 0x0, 0xf0, 0x0, 0xf0, 0xffffff0c}, 0x40) openat$kvm(0x0, 0x0, 0x0, 0x0) r1 = io_uring_setup(0x2e15, &(0x7f00000002c0)={0x0, 0x1, 0x1, 0x1, 0x1be}) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, &(0x7f0000000140)={0x0, 0x0}) write(r2, &(0x7f0000000000)="fa", 0xfffffdef) r3 = socket(0x848000000015, 0x805, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x10}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0xa, 0x0, 0x0, @private2, 0x3ff}, 0x1c) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r6 = socket$inet6(0xa, 0x1, 0x8010000000000084) r7 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_ALLOW_SUSPEND(r7, 0x5522) bind$inet6(r6, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x317, 0x1, 0x34, 0x9}, 0x9c) close_range(r1, 0xffffffffffffffff, 0x0) 4.960753927s ago: executing program 3 (id=2205): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42561, 0x0) r1 = openat$adsp1(0xffffff9c, &(0x7f0000000040), 0x101280, 0x0) ioctl$SNDCTL_DSP_GETIPTR(r1, 0x800c5011, &(0x7f0000000080)) syz_open_procfs(0x0, &(0x7f0000000500)='attr/current\x00') openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r2 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000480)={0x0, 0x0, 0x0, &(0x7f0000000400), 0x401, r5, 0x0, 0xa002a0}, 0x38) openat$sequencer(0xffffff9c, &(0x7f0000001bc0), 0x88302, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x74}}, 0x0) r6 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x40080, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r7, 0x4048aec9, &(0x7f0000000740)={0x1, 0x0, @ioapic={0x8080000, 0x8, 0x0, 0x0, 0x0, [{0x2}, {0x0, 0x4, 0x0, '\x00', 0x2}, {0x0, 0x4}, {0x81, 0x2}, {0x0, 0x0, 0x6}, {0x0, 0x0, 0x0, '\x00', 0x3}, {0xff}, {0x0, 0x0, 0x0, '\x00', 0x1}, {0x0, 0x0, 0x0, '\x00', 0x2}, {0x8}, {0xfe, 0x0, 0x9}, {}, {0x0, 0x0, 0x1, '\x00', 0x3}, {}, {}, {0x0, 0x4}, {0x0, 0x1, 0xf3, '\x00', 0x20}, {0x9}, {0x1c, 0x8c, 0x0, '\x00', 0x1}, {0xfe, 0xfc, 0x0, '\x00', 0x9}, {0xfc, 0x0, 0x5, '\x00', 0xfd}, {0xfc, 0x0, 0x0, '\x00', 0xea}, {0x0, 0x1, 0x0, '\x00', 0x3}, {0x0, 0x0, 0x80, '\x00', 0x1}]}}) close_range(r0, 0xffffffffffffffff, 0x0) 3.939100029s ago: executing program 4 (id=2206): r0 = socket$inet6(0xa, 0xa, 0x400000) connect$inet6(r0, 0x0, 0x0) sendmmsg$inet6(r0, 0x0, 0x0, 0xc8000) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000300)={0x0, @in6={{0xa, 0x4e22, 0x1, @remote, 0xfffffff0}}, 0x5, 0x8, 0x5, 0x10100, 0xff}, &(0x7f0000000100)=0x98) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000600)={0x0, 0xfffffffd, 0x2, 0x401, 0x2, 0x0, 0x3, 0x403, {r3, @in6={{0xa, 0x4e23, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}, 0x3}}, 0x7, 0x2, 0x4, 0x7, 0x2}}, &(0x7f0000000800)=0xb0) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, 0x0, 0x0) ioctl$KVM_CREATE_PIT2(r4, 0x4040ae77, &(0x7f0000000180)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f741065666765f36f0f330f09660f3a0cb9000000752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x32}], 0x1, 0x12, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_PIT(r4, 0x8048ae66, &(0x7f0000000080)={[{0x85, 0x0, 0xfe, 0xd2, 0x0, 0x5f, 0xfb, 0x0, 0xa6, 0x4, 0xff, 0x0, 0xf7fffffffffffdfc}, {0xfffffffc, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8, 0x4, 0xff, 0x2, 0x0, 0x800000000000000}, {0x2, 0x33, 0x0, 0x0, 0xac, 0x5, 0x14, 0x9, 0x5}], 0xfffffffd}) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x0, 0x8000, 0x40, 0x0, 0x1000000000, 0x2004cb, 0x1, 0xfffffffffffffffe, 0x3, 0x0, 0xff, 0x0, 0x4, 0x2, 0x1ffc], 0x80a0000}) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, 0x0) syz_emit_ethernet(0x22c, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 3.938694356s ago: executing program 3 (id=2208): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, 0x0) pwritev(r0, &(0x7f0000000200)=[{&(0x7f0000001380)="717ad08c8bcc77a18bd9a49a81081d9254d028aee3d9c94cf48309fe713ed78a75979c8555e752fa873444d1e4d479c803f2edd22e6324922fc126c6baf93d333951f69cfcdf765a50e10f65f6991e0842d9f05602d59d7f6ecc442c963c72bffffcddd9684b5b18913360", 0x6b}, {&(0x7f0000000100)}, {0x0}, {&(0x7f0000001580)="81d66719d9b6d07ce5c99c055ea586ee15438bd6c78fe3c25dc3721930b5c63e48d718c6870d4d8b9f6bada63e927c51e1700c722c67c50efb0a7b07492f7313f6391f36656b77300e6e664fb8590184a604d4357fb4c3eeacc9fe0117e6c0cc3d0cb15addc07eb5546568df91121ff57e1c0b76718d4e347ec687addeae4be0b9c1038187262357d02857029abfc2197f363f7a45f7cad6e4069feaa094ffc0bba9d27b", 0xa4}], 0x4, 0x3, 0x4) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r3 = openat$nmem0(0xffffff9c, 0x0, 0x80000, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f000086b000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f00000016c0)=[@dstype3], 0x1) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0xec, 0x1c, 0x1, 0xfffffffe, 0x100, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x71c, 0x4e23, 0x2, 0x0, 0x0, 0x0, 0x32}, {@in6=@loopback, 0x0, 0x6c}, @in=@empty=0x2000, {0x0, 0x192, 0x9ba3, 0xffff, 0x251c, 0x3, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x21, 0x4}, {0xffffffff}, 0x80, 0x3502, 0x2, 0x1}}, 0xec}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = dup(0xffffffffffffffff) write$6lowpan_enable(r4, 0x0, 0x0) syz_io_uring_setup(0x5259, &(0x7f0000000140)={0x0, 0x5885, 0x0, 0xfffffffc, 0x386}, &(0x7f0000000340)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, 0x0, 0x0, 0x4) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, 0x0) bind$tipc(0xffffffffffffffff, 0x0, 0x0) r6 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) write$UHID_CREATE(r6, &(0x7f0000000240)={0x0, {'syz0\x00', 'syz1\x00', 'syz1\x00', &(0x7f0000000180)=""/3, 0x3, 0x0, 0x7fffffff, 0x0, 0x0, 0xc07}}, 0x120) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0}, 0x0) setresuid(0x0, 0xee01, 0xee00) setrlimit(0x40000000000008, &(0x7f0000000000)={0x2, 0x8d96}) r7 = shmget$private(0x0, 0x3000, 0x40, &(0x7f0000877000/0x3000)=nil) shmctl$SHM_LOCK(r7, 0xb) 3.749628938s ago: executing program 3 (id=2211): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000005c0)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x4c}}, 0x0) 3.749126766s ago: executing program 3 (id=2212): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000005c0)={0x54, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x54}}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000440)={0x53, 0x0, 0x10f, 0x1, @scatter={0x0, 0x0, 0x0}, &(0x7f00000004c0)="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", 0x0, 0x10, 0x5bb727690d5f0ff6, 0x0, 0x0}) socket$netlink(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, 0x0) ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06864ce, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x1, [], [], [], [0x0, 0x100000000]}) socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x3, 0x8000000003c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) write$UHID_CREATE(r4, &(0x7f0000000b00)={0x0, {'syz1\x00', 'syz0\x00', 'syz0\x00', &(0x7f0000000040)=""/15, 0xf, 0xa0, 0x8, 0x3, 0x5, 0x1635}}, 0x120) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) write$UHID_INPUT(r4, &(0x7f0000000c40)={0x8, {"751be3c602a0e5276e79c086adc21270633fb3d067b21d544abb92036ecf489f5b3345ad3d6df45ba403e3d9b1137267182b6c67e967f54aaae1a43f4632e4e173f8ce97adfb7996e5cd702f546f95645b64fc34a8730dc2b3be9d88f47e1f6a862b07ab1d850e3e817f6005dabb3381780aa95a7c31cb78bf8721902712937891e9438cd773ef9e8c64c67bf47ea562d9f71def0c6ea559873b67cbdec5e83ec479104c3b3d54aa973d173522c9779135e0b5d91a1cdec65798dd915f2f59515b9335b256d166d9aace8f6c881272af4514796e6bc6549a4c65a0b1fe100f9136250d114800ff60013f6361bd7a772bdba813242130a6afcd8df14522aeb8ab20c8b7ceaae10e40c273c91c9c6462141ccb4f873279862524f0252c25aabc8386c3e404f0acd9033d24103d662d33be10a409713a13b557843396136ffc3111cbebac293d82cf913a5ea34a5b728d8da1f80327f4386ae7e9c2b6997638c372ef75f40a8688e8c74b2689dafb6b2ad2b3d6b7d558beb22a305e5904ac8a291f188334baeecbabd5d0431d63468e2d456a30da83ce133247a76e72cb1b8794e2967ef0bc18f8fdab10838b725840dba1817f2ba431b5f4ff40c19f5c36195afd79cba926416b0f94283ecb68aab6bf10a562cc3291fd5b2ce009f966fd0a94b388a6c172305e281cfeec6f8688b98b36e9910913b12d7e8c4bee96918f412d409a873a56d863df5c254afed14ce8a8c43fc84d2036b40879290f282faf06a2884c74a79594776f260618a245769ab877c1ef31e27878ea89e4ca8bdd646ce95bab8a7d5a1de735048639a2d3680126211dc9c20085dd8d715e647197a0187d03a985bf06c8da5fd961aa49645b88a927b2a2455cbda4dd3382dd2af7a9430b8606f984f4424d19562d14380b171ef1424b84ea1d22e31555b7758264962a6fa03d39c7887f47a91815189dc63ab0ecef4692b2983025bab06aad0c7ff178aa62cc882a482940f3767ea1c679176a9bd308222625570ce4ce1b49cef27a3e2f50fae9eea4a6819be790a685ede4a36d6eaba696cde1d5b7b05765b84d4b70f750aff9dd455106d816ca6324b85b07d2622150605472b72a36f503dc5e01a5390458747aa3f19c8db247b97cb14222b5e79cc6e3135be812bc8ca7c9a155852cef9dcf017ae378d9ecc9482b4857dc98c403beaf9f8bc4960292777fc58221ad46e9d5976ce2941e4fe427810dfb032c99cef90cf17f4e0083c986d66e0e170c2fea96a7360897a81a57921a9025dd021c2b0f6bbe08f8a49d8ac428a7074930bd2ef7ad28a0f17550b45bbfddd723b710994160bcc0ea2e92dbcbb114fefe22db643b9d392118ec05d7f48807ea1c4b5e39845d8207dc6b24d5d8a573034189b3563cdd14f102e2b41239ad1581a7839981d56cbdb7d8c843560272a075788603ec9b62aec5de81c734e3d8118e271179cfdb9e0ffb460519d769c05ad2b5044c2eca76a2c0824b5275c06b8715c0b6df6625a70ca14cc86ebc401f7abbd6d53e8e5d391371840510a9fb2d515be1bb1581a7e2b3a8610425da60d9ba8a841c324c3e1487036a20bc4d9149cbad2be5ed0e37f5cd21eb0d475f0c5730139d8b790e768ea169ef74069b6ccb4d09c78fcd1f1b791faef2218ce5e2707ffd0e38ada6a96a88a53dfc2ad72c9791a92d6a4d86f0f832062d62d3b425f260f654266196584729971fc3903d24300c9da725d47daa985bddff4b6fe301eb324bf6a35157bd79a0cf213398380de3bd91f583d537415afff80658992a949e433ff048c1d2495dec0461f0dd5bf4c8ac506268cd959f3493d37f8feb754062ca89398ade01f923c850eebc84ba9ee3d8c46d880d6f54f0ceafa451669c44b3e5c64411b0c855c94e8d3c345915412e041d284481e4242a1ae828345d76614979c252316b0f5eec34b98077cf89ff1834c25de73e83ad92873f2da115c02af04b71e7303e6289dbe76aaf9e5400dbbd9952c985283ff18aea8a7cab00ae650d21d235b62d9c21965c9888deebd4102bc75b95d33c6b5548f64c3c3f8fa256f21ab2577354221d5ddbc7247d46fb3532ed6322eef55aa24ac77797a38d1614923e24a9d70f6a24e0a1f28519a202fd91100f4d12ce61c37c819874bfbe5c61b4eb06c1b2b1cce56afaf16d560cf4ea727566f701e10233051dd633f4cca90c09c7aa733ecc0932d855abc08566dffe484de6d498c3625f7c2ba5bb12925d5f12e6194e21df4a4d69e1d0915963a04959348d49de928635128126557f8b5b87e1a47da42b311c47d3f0f969f069404e72d8a0d3cb0147ae6ee87abf994f384959eae9c7a91509f94f53098a8017d62bb1050b28c7976309957c34321d5a9520567970280714857904fb6e8f8c54fcdbb768028e4b37d47fd53ebd9cadb94baecbb54c78c81f7a80dd4c616df98d20ec22a0459844828c18eb7ec6d46cdc535266468bef9cfc6ce844b4b7ec9e3ff9e2619c05b477f72be3448f931312ff85727d8e1f48fbb978cb4b22bf959e97ebf4f25e19710f38a2c518702853410b32e74a68c98d58973a4a5c9d3d99c331f0d918a76fd047bb77a18eb655f72f6867cb3093438a26f080dbff4c4cd9544b9f401da3db9d235921a44c61e8292b83f83e8c9825d50bb0dbe32216e21733da8024343206e571c1d051daa670895566a9a218fb112ab2cdfa6a76bfd6374454ee1c211e5871d4186af9c7fef85af11c5b8a11774a1dd890ed2d5723b8698c339bc32473a1b5a9ec39b093ed24a3ec02b6455479bb34fa5a96c1b38fbe356c36b863e28d1234b64bcc0d071c790283b9b71137948776d6a60b67ff552d64286db810ecb90f1117dbedf6d2ce3162ec4ca4070333d1bce11419c13fdc1772ffe70fb03ad824f285660ec0c1985fff2441eddd0fa4b58dc53256ffa0df94a59a3c4165d4ae8bb883b23a8512d435e026da4583183d5147dfb2e05742803c6e9a3166f9dc40e1565887b3fd5d97c00b97b1ac542c23658d4ff03e8b9f3ecf3e35206e6ab3f38f26b70ee4e101f84ad6e3dce689ebdfa544b27af4a9a78667f6ef3564f1f0ffd0a9ed142c77961c7ae9c9a1b300023b6d79511e65d3db989052be9166b4bf9fc128b05fc500af7e7938f4e7ba7d67a117cde6c6330ca18d57150c2d51281df54d8735410805a92d4e5885a580124ecc54bc49bf451c6110a7fa195ae5691743bc4f0d3ab0a1e434884bbfbe8d0e8a5de217269c54f2f2415dbdb7e9285c7006c21cf3b593eefffd79c52c4a95da668651ed12ffe7ec0d2206588c452d107d543cf90f514a417d67b30082ed8ea7ab609d27b4ef9a7e3ac9c0d32020bca61f1df1c83e0b9625e7d6944f6d1fa3e388fb88dc0fd053fe1f1d2c5fa282a59eb2459475c6f1b556fbc791104a6707b8d37d81e7bdf158417f3e920d07d3b6ff305bafec00291c825ffc7d965e570094853389f6996ef02cc3e2f5ce3468e2d0a4ded990d372c2b234c3c1bbd6b6cff24ce474cdd98c42e7179295ac12740cefaf6e86898fb7180db31116ac7bb6d06a242f1fff5530ac7fc47f6593ac73c1a231a73e28d5b4b90d1a596b981675e4f7e0616095dffa6807c49c9d147f5a81b2822b128b035f4de8e017e54ac06e2e7dd52b3bbd778a76477dbe33e6fce5ae786879ba0739de0dee0987258912445664a405cb12a01bb94a97abccdc6d3afe7b61ba72b403a2e66c4c6b2cad20c427c0daf1d9d2dc57ccd502ff4993367dd0debcadee0e431e9115977e1c51a1905fb54268d25aa71cf056358f6d2c4c8bccdc675e350499f7776a15b41fb9e74d56ce3c82a28e9ee1815e039c6b18c8c551ddd46689e27e4c6b4ec384ee8d7fe1bd0ef40a6c288111fd61f00302f7dc442183e6dc0a2cdbbd6d43e061687989f9fef7ce54b238038461bf941a0706e2dfa8c069f4d90d1381a7429b3e692e346074c4de9e208f473a8794a6aaac2a297c29a396a28a10f4a5fa17863ed592fc39d7e8549af9f952366cee76372cf17812964c7322b370ff7f8f2074cc16b88b7cf8fd44bc3504c77efa6effb0813fe4f8ad6da76054d84d50bd9d7e1ff78b9afb4988d843d298515895d9aeaa29e496492097c79d0ecd887045cbd37cc476decc5836640d9a000e2a0a9e389dd6a996cea1dc0a7f62e2abf25d6ebee990ef19db33783d0485eaf43476b134d6873fd9a4f376ec2e4ae0993407683597ebd9376ca9d9d85d4399b3d24b8b6bf0e4910f257f6f54887f321a3768f82982144c5fe4fdf40068c3c71d34ffec82726e704c40f82f537d41b3621f06c1bb11b1665de3732df4f3eb727c04ad6b25910d9d97163119a2b72ff40109edbc58676682e0f86f75870b6f639d368d11aa1ceae80708288757db2389b16a4420008ce4a7a8487cbb7c922108a1acff54a0da5fc32c4c1e29a483e50ab9818c15c86a4997b4c8ef8dce08f633d2b558823a1c3476e61badcbb4ebcfd5f89f4075f093f5ea52c5c6f6c3025a8558ffb7c38a0662c05b8c44c0af1f15d3df1b1814255e27e9edec3346e2d59202fd643cf51a8ac5fe2a17579433afb9898cdba1c31c6083a8040064cd67c5012738660a09677e2b2156074a6586c76b86b745e7e209884185226fdbc2d826e2264e0b8d9e8896af60d82cc06452366c5dbf959e14a1a12b56bea30e35b1f50cdf95e37e0a5d272a792caec048947dd56abfe85271f0131e8d7f542525230ee0b005fe6bdec05a5f42c7027b555292374b210b7a6d72139574e10500f7db0914270d122ad93a0893c6875008e6b055a0358a48ef9b9309089323a110fcc7c5122c45401532c075957214dd6c86305819ead9cdcddec00faf31b0be040165aee5210c648eb7ac1d856dfce811391876735a05e71f2c8fa0beed3c5489897de524dd52da8a18c5a69d0be29a59dba736addf52ba02bb14121660f973a030d705480ae121b44f6d46441af124982c6b759389977e32de862bf409eeae3eaf7321c779b1c2e32080e031d854c34ce5413a098e18ac7a4b871985c83b0ba4fe68d82061923547d3ea28e004fab11afa63fcd5a6149c4bb3a2480061e5d58899a5d717893c0b73be62d4a42eb3fec479aea240fae76ef79561d4a7bf26c4f67cbe1659557f20f8fce0e183e2b4da3553741cbd764714d3e6ebec6ff0a9fb7efcd99bc71c3938b4142ca0a69faa54bab2b4f7b9143633fd6e9a26f7766b8353f491a0bcb62066df77faaaf7b639d9455bdc8937968c51848e4391c52db579a48dcc3a7f1406053bbf06ee64eb3a5b7d2e0c63efdd5edeef53820e3e52d3d12828e39d698095aa3c3cd84989fc7ca73e541ba7da40aa2297a5e3633096dfb81b5c2ec6fbeb894e41bce4e8ec5096326feece88f5a795cad6097ea7c91ec487092ebad33c06f355a195d64d17afe092a0d7ae2161ad3d33f863336ed1e4055f7f81c065230e0c1fa5b332cd6a57692f3b0f60115dcece23ee7c46a45ac79e8ec19ca091c98f06750c802b103480ebe72849b22b7419ea1e35999d0b374286c20fe64880fc5259c61e300d15659b9f6a43127aaf0587048ca9a4284b2e25f3d079ddc194a7bf12a211bdc8f969be78e6d9a686c8ebdec19bd3518a901fd9bc3ad02065f0b145a8b72abf97d7584c7ebe6054e36d6f095df5a0cfc80e82878c4a5845f31e8f351e7411b0c81880523040585881fd87424e6288fc4b877a39bb81a9a40200c8e7a438d944c268d12d7ff1f234d2a12001d3a97ad15da3d628a420bcecd3f365488120", 0x1000}}, 0x1006) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mbind(&(0x7f00001fa000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) 2.983008852s ago: executing program 1 (id=2215): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x4, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2, 0x8f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socket$igmp6(0xa, 0x3, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000280)) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000240)=0x28e) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000001580)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in=@local, 0x0, 0x0, 0x4e24, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0xfffffffffffffffe}, {0x0, 0x0, 0x0, 0x5c}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x4d2, 0x33}, 0x0, @in=@private=0xa010100, 0x3506, 0x0, 0x2, 0xb7, 0x2}}, 0xe8) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x1c) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) 1.804494091s ago: executing program 4 (id=2216): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42561, 0x0) r1 = openat$adsp1(0xffffff9c, &(0x7f0000000040), 0x101280, 0x0) ioctl$SNDCTL_DSP_GETIPTR(r1, 0x800c5011, &(0x7f0000000080)) syz_open_procfs(0x0, &(0x7f0000000500)='attr/current\x00') openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r2 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000480)={0x0, 0x0, 0x0, &(0x7f0000000400), 0x401, r5, 0x0, 0xa002a0}, 0x38) openat$sequencer(0xffffff9c, &(0x7f0000001bc0), 0x88302, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x74}}, 0x0) r6 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x40080, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r7, 0x4048aec9, &(0x7f0000000740)={0x1, 0x0, @ioapic={0x8080000, 0x8, 0x0, 0x0, 0x0, [{0x2}, {0x0, 0x4, 0x0, '\x00', 0x2}, {0x0, 0x4}, {0x81, 0x2}, {0x0, 0x0, 0x6}, {0x0, 0x0, 0x0, '\x00', 0x3}, {0xff}, {0x0, 0x0, 0x0, '\x00', 0x1}, {0x0, 0x0, 0x0, '\x00', 0x2}, {0x8}, {0xfe, 0x0, 0x9}, {}, {0x0, 0x0, 0x1, '\x00', 0x3}, {}, {}, {0x0, 0x4}, {0x0, 0x1, 0xf3, '\x00', 0x20}, {0x9}, {0x1c, 0x8c, 0x0, '\x00', 0x1}, {0xfe, 0xfc, 0x0, '\x00', 0x9}, {0xfc, 0x0, 0x5, '\x00', 0xfd}, {0xfc, 0x0, 0x0, '\x00', 0xea}, {0x0, 0x1, 0x0, '\x00', 0x3}, {0x0, 0x0, 0x80, '\x00', 0x1}]}}) close_range(r0, 0xffffffffffffffff, 0x0) 1.804177442s ago: executing program 3 (id=2217): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0x12) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000105509147200ed0000000109022400010000000009040000030300000009210000000122050009058103"], 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io(r3, &(0x7f0000000100)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB="200617"], 0x0, 0x0, 0x0, 0x0}, 0x0) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x3f, 0x0) close_range(r4, r4, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r2, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r2, 0x40045532, &(0x7f00000000c0)=0x6f) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)=0x0) getpgrp(r5) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb47, 0x9, 0x8, 0x80000001, 0x3}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) poll(0x0, 0x0, 0x6) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_submit(0x0, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/ipc\x00') syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/ipc\x00') sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=@newlink={0x38, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x6, 0x0, 0x0, 0xffffff81}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) 1.751599279s ago: executing program 1 (id=2218): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0f000000040000000800000042"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x102}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) memfd_secret(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) r3 = dup(r2) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000000)={0xffffffffffffffff}, 0x111, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r4, &(0x7f00000000c0)={0x13, 0x10, 0x8, {0x0, r5, 0x300}}, 0x18) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r7 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) getsockopt$sock_timeval(r7, 0x1, 0x43, 0x0, &(0x7f00000000c0)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) r8 = socket$inet_smc(0x2b, 0x1, 0x0) r9 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee4, 0x400, 0x1, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r10, r11, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x3, r8, 0x0, 0x0, 0x0, 0x80000}) io_uring_enter(r9, 0x47f6, 0x0, 0x0, 0x0, 0x0) listen(r8, 0xfffffff7) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000080)={0x8000, 0x0, 0x0, 0x1, 0x0, "000100"}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x5c, 0x30, 0x1, 0x0, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x804}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r12 = openat$pfkey(0xffffff9c, &(0x7f00000001c0), 0x14000, 0x0) recvmmsg(r12, &(0x7f00000000c0), 0x0, 0x0, 0x0) quotactl$Q_GETFMT(0xffffffff80000402, &(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, 0xffffffffffffffff, 0x0) 1.197732946s ago: executing program 1 (id=2221): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000002b40), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={0x3c, r2, 0x1, 0x70bd28, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x820}, 0x20004004) sendmsg$DEVLINK_CMD_SB_POOL_GET(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x9c, r2, 0x2, 0x70bd2d, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x9}, {0x6}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0x6, 0x11, 0x24c2}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x7}, {0x6}}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4000}, 0x4001) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, &(0x7f00000002c0)=0x4, 0x4) keyctl$read(0x2, 0x0, 0x0, 0x0) r3 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000a00)) ioctl$PAGEMAP_SCAN(r3, 0xc0606610, &(0x7f0000000a80)={0x60, 0x0, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x9, 0x4c}) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff1085000000ae00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(blake2b-256-generic)\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, 0x2, 0x3, 0x101, 0x0, 0x0, {0x5, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), r1) r7 = socket$packet(0x11, 0x3, 0x300) r8 = add_key$user(&(0x7f0000000380), &(0x7f0000000000), &(0x7f0000000400)='_', 0x1, 0xfffffffffffffffe) r9 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) r10 = add_key$user(&(0x7f0000006400), &(0x7f0000000340)={'syz', 0x3}, &(0x7f0000000680)="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", 0x161, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r8, r9, r10}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'sha3-512-generic\x00'}}) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f00000000c0)=0xa, 0x4) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'xfrm0\x00', 0x0}) sendto$packet(r7, &(0x7f0000000180)="10031200e0ff020002004788aa96a13bb100001100007fca1a00", 0x1000a, 0x0, &(0x7f0000000140)={0x11, 0x0, r11}, 0x14) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000480)={'tunl0\x00', &(0x7f0000000380)={'gretap0\x00', 0x0, 0x700, 0x10, 0x7, 0x10001, {{0x2a, 0x4, 0x0, 0x4, 0xa8, 0x66, 0x0, 0x7f, 0x2f, 0x0, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x44, 0x10, 0xbc, 0x0, 0x9, [0x7f, 0x6, 0x7]}, @ssrr={0x89, 0x2b, 0x9e, [@rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x30}, @rand_addr=0x64010100, @rand_addr=0x64010100, @remote, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x41}, @local, @broadcast, @remote]}, @timestamp_prespec={0x44, 0x1c, 0x6d, 0x3, 0x7, [{@local, 0x401}, {@loopback, 0x3}, {@empty, 0x7}]}, @timestamp_prespec={0x44, 0x24, 0x7b, 0x3, 0xb, [{@local, 0x9}, {@broadcast}, {@multicast2, 0x16}, {@broadcast, 0x516}]}, @ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0x14, 0x11, 0x3, 0x0, [{@multicast1, 0x7ff}, {@remote, 0x3}]}]}}}}}) getsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f00000004c0)={@private2, 0x0}, &(0x7f0000000500)=0x14) getpeername$packet(0xffffffffffffffff, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000580)=0x14) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000640)={'ip_vti0\x00', &(0x7f00000005c0)={'syztnl0\x00', 0x0, 0x7800, 0xd7, 0x5, 0x1ff, {{0xe, 0x4, 0x2, 0x7, 0x38, 0x68, 0x0, 0x3, 0x2f, 0x0, @remote, @rand_addr=0x64010102, {[@generic={0x89, 0x10, "b0089acbd58d2a00fd2be7768d40"}, @ra={0x94, 0x4, 0x3}, @noop, @timestamp_prespec={0x44, 0xc, 0x21, 0x3, 0x2, [{@multicast2, 0xacf}]}]}}}}}) sendmsg$ETHTOOL_MSG_COALESCE_GET(r5, &(0x7f00000007c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000780)={&(0x7f0000000680)={0xec, r6, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}, @HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x4040000}, 0x4000000) 1.197308909s ago: executing program 1 (id=2222): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000440)={0x53, 0x0, 0xcc, 0x1, @scatter={0x0, 0x0, 0x0}, &(0x7f00000004c0)="851666ce20db96ab0c7d83e114e7291762249711e34f4ce12c6afeb7e6d77bd3b97644edd8e3a3b71fcd006b6237766e151f344afb2306455034ea7a31b1a48724e372a5a8a9ca040f5831f2eb11842a4b8ec9064fa439440f374355d9af754314ce445ac9bea7fac19c3ac58a131895c378ec497ffdf9a82032d9fa225397b92d2e2193de6fe2f6b6c0bd0f80de3dc72890b6900c5b86752639bf37ab325c16dc2f3d4d01b4c3b71ebbfd6fc9b316f76a07144538506a68ae00df22f2fa9cbb0c9fa73c1dcf3eb2eb4fe353", 0x0, 0x10, 0x5bb727690d5f0ff6, 0x0, 0x0}) 1.196972785s ago: executing program 2 (id=2223): openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000014c0)=ANY=[], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r0, 0xfeffff, 0xe80, 0x3f000002, &(0x7f0000000700)="c45c57ce395de5b289f07d637a223920f181c2e57d71483cfb2d075a3ff07258e080a194805cdb0c26d3f7ffb1e0d9cf4fa36dcb2168b72de48ac8f93e6804f1c4d70898d0810e044d7e1778eaac5dfdcc9f1208905522025bcfdf1b6f969b094d5c022c2b7ffefde71e0627b9a2069cc1e0175c4b8860aad4b0a103c589f676b6c4e85eb3950c533b6e62c39ccf9ae9bfe54ee5887358d44f46337fbe090d7c7e55847edee8130ffd3d1e719e01a68b0e691c0d35b0b56e0b514036342fd56f08ac0083f3c2fe41a1295a3d23cf3d160d4fd90f66beba68860456ed41272e1e68d16c2564c85f5556e18784113c493d13253e14d6eb891707fba3c30d07d5ee8619e4426cafec4cf6a3723c455d09b586b248", 0x0, 0xf0, 0x0, 0xf0, 0xffffff0c}, 0x40) openat$kvm(0x0, 0x0, 0x0, 0x0) r1 = io_uring_setup(0x2e15, &(0x7f00000002c0)={0x0, 0x1, 0x1, 0x1, 0x1be}) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, &(0x7f0000000140)={0x0, 0x0}) write(r2, &(0x7f0000000000)="fa", 0xfffffdef) r3 = socket(0x848000000015, 0x805, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x10}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0xa, 0x0, 0x0, @private2, 0x3ff}, 0x1c) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r6 = socket$inet6(0xa, 0x1, 0x8010000000000084) r7 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_ALLOW_SUSPEND(r7, 0x5522) bind$inet6(r6, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x317, 0x1, 0x34, 0x9}, 0x9c) close_range(r1, 0xffffffffffffffff, 0x0) 1.110147702s ago: executing program 1 (id=2224): r0 = socket(0x2, 0x3, 0xff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x5, 0x1000086}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) socket$netlink(0x10, 0x3, 0x9) sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$kcm(0x29, 0x2, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) r2 = add_key$user(0x0, &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) pipe2$watch_queue(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r2, r3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4084004}, 0x10000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NL80211_CMD_REQ_SET_REG(r4, 0x0, 0x24044004) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a005f0214f9f407000904001f000000fe0200020000000008000400010000", 0x23) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0) sendto$inet(r0, 0x0, 0x0, 0x800, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x1000)=nil, 0x1000, &(0x7f0000000080)='\x00\x00\x00') r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r5, 0x400448cb, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000680)='kfree\x00'}, 0x18) r6 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r6, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0xfffa}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_FLAGS={0x8, 0x16, 0x12}]}}]}, 0x3c}}, 0x24000000) 1.051937852s ago: executing program 1 (id=2225): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) r3 = socket$netlink(0x10, 0x3, 0x15) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', 0x0}) creat(&(0x7f0000000100)='./file0\x00', 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r6, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) r8 = dup2(r7, r6) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x4004004) pread64(r3, &(0x7f0000000280)=""/39, 0x27, 0xa) lseek(r8, 0x0, 0x4) 862.62347ms ago: executing program 4 (id=2226): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f0000000300)=ANY=[], &(0x7f0000000280)='GPL\x00', 0xa, 0xb9, &(0x7f0000000140)=""/185, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r0}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001640)={0x11, 0x19, &(0x7f0000001740)=ANY=[@ANYBLOB="180800000600000000000000000000008510"], &(0x7f0000000000)='GPL\x00', 0xa, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffd81}, 0x94) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f0000003340)=[{{0x0, 0xfffffffffffffed1, &(0x7f0000000280)=[{&(0x7f0000000600)='4', 0x1}], 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="70dd00000100000001001000"], 0x10, 0x40}}], 0x1, 0x0) splice(r5, 0x0, 0xffffffffffffffff, 0x0, 0x39011, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0xffff, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}}]}, &(0x7f0000000240)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x7a, &(0x7f0000000340)={r7, @in6={{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, &(0x7f0000000040)=0x84) listen(r4, 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') open(&(0x7f0000000000)='./file0\x00', 0x707542, 0x1) 862.271724ms ago: executing program 2 (id=2227): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000005c0)={0x54, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x54}}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000440)={0x53, 0x0, 0x10f, 0x1, @scatter={0x0, 0x0, 0x0}, &(0x7f00000004c0)="851666ce20db96ab0c7d83e114e7291762249711e34f4ce12c6afeb7e6d77bd3b97644edd8e3a3b71fcd006b6237766e151f344afb2306455034ea7a31b1a48724e372a5a8a9ca040f5831f2eb11842a4b8ec9064fa439440f374355d9af754314ce445ac9bea7fac19c3ac58a131895c378ec497ffdf9a82032d9fa225397b92d2e2193de6fe2f6b6c0bd0f80de3dc72890b6900c5b86752639bf37ab325c16dc2f3d4d01b4c3b71ebbfd6fc9b316f76a07144538506a68ae00df22f2fa9cbb0c9fa73c1dcf3eb2eb4fe3534fcee01e9ca0c66f27b8e05e7545cbc3511b3d086f51d58f9acd52eab032468cc8075451bcd5c081a8db84ff509a2f874daf6b3ddff977834d87fc0de3220a4041526a", 0x0, 0x10, 0x5bb727690d5f0ff6, 0x0, 0x0}) r2 = socket$netlink(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, 0x0) ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06864ce, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x1, [], [], [], [0x0, 0x100000000]}) socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x3, 0x8000000003c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) r6 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) write$UHID_CREATE(r6, &(0x7f0000000b00)={0x0, {'syz1\x00', 'syz0\x00', 'syz0\x00', &(0x7f0000000040)=""/15, 0xf, 0xa0, 0x8, 0x3, 0x5, 0x1635}}, 0x120) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) write$UHID_INPUT(r6, &(0x7f0000000c40)={0x8, {"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", 0x1000}}, 0x1006) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mbind(&(0x7f00001fa000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000006800)={&(0x7f0000000080)={0x44, r3, 0x615, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x44}, 0x5}, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) 709.952461ms ago: executing program 2 (id=2228): open(&(0x7f0000000080)='./bus\x00', 0x143c62, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x25dfdbfd, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e61e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x4) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x4) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = inotify_init() inotify_add_watch(r3, &(0x7f0000000340)='.\x00', 0xa50003d1) openat$tun(0xffffffffffffff9c, 0x0, 0x20000, 0x0) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x103) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, 0x0, 0x0) openat$fb1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0000, 0x0) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x7c8}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x18) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x32, 0x0, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) 566.053672ms ago: executing program 2 (id=2229): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000005c0)={0x54, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x54}}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000440)={0x53, 0x0, 0x10f, 0x1, @scatter={0x0, 0x0, 0x0}, &(0x7f00000004c0)="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", 0x0, 0x10, 0x5bb727690d5f0ff6, 0x0, 0x0}) r2 = socket$netlink(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, 0x0) ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06864ce, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x1, [], [], [], [0x0, 0x100000000]}) socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x3, 0x8000000003c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) r6 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) write$UHID_CREATE(r6, &(0x7f0000000b00)={0x0, {'syz1\x00', 'syz0\x00', 'syz0\x00', &(0x7f0000000040)=""/15, 0xf, 0xa0, 0x8, 0x3, 0x5, 0x1635}}, 0x120) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) write$UHID_INPUT(r6, &(0x7f0000000c40)={0x8, {"751be3c602a0e5276e79c086adc21270633fb3d067b21d544abb92036ecf489f5b3345ad3d6df45ba403e3d9b1137267182b6c67e967f54aaae1a43f4632e4e173f8ce97adfb7996e5cd702f546f95645b64fc34a8730dc2b3be9d88f47e1f6a862b07ab1d850e3e817f6005dabb3381780aa95a7c31cb78bf8721902712937891e9438cd773ef9e8c64c67bf47ea562d9f71def0c6ea559873b67cbdec5e83ec479104c3b3d54aa973d173522c9779135e0b5d91a1cdec65798dd915f2f59515b9335b256d166d9aace8f6c881272af4514796e6bc6549a4c65a0b1fe100f9136250d114800ff60013f6361bd7a772bdba813242130a6afcd8df14522aeb8ab20c8b7ceaae10e40c273c91c9c6462141ccb4f873279862524f0252c25aabc8386c3e404f0acd9033d24103d662d33be10a409713a13b557843396136ffc3111cbebac293d82cf913a5ea34a5b728d8da1f80327f4386ae7e9c2b6997638c372ef75f40a8688e8c74b2689dafb6b2ad2b3d6b7d558beb22a305e5904ac8a291f188334baeecbabd5d0431d63468e2d456a30da83ce133247a76e72cb1b8794e2967ef0bc18f8fdab10838b725840dba1817f2ba431b5f4ff40c19f5c36195afd79cba926416b0f94283ecb68aab6bf10a562cc3291fd5b2ce009f966fd0a94b388a6c172305e281cfeec6f8688b98b36e9910913b12d7e8c4bee96918f412d409a873a56d863df5c254afed14ce8a8c43fc84d2036b40879290f282faf06a2884c74a79594776f260618a245769ab877c1ef31e27878ea89e4ca8bdd646ce95bab8a7d5a1de735048639a2d3680126211dc9c20085dd8d715e647197a0187d03a985bf06c8da5fd961aa49645b88a927b2a2455cbda4dd3382dd2af7a9430b8606f984f4424d19562d14380b171ef1424b84ea1d22e31555b7758264962a6fa03d39c7887f47a91815189dc63ab0ecef4692b2983025bab06aad0c7ff178aa62cc882a482940f3767ea1c679176a9bd308222625570ce4ce1b49cef27a3e2f50fae9eea4a6819be790a685ede4a36d6eaba696cde1d5b7b05765b84d4b70f750aff9dd455106d816ca6324b85b07d2622150605472b72a36f503dc5e01a5390458747aa3f19c8db247b97cb14222b5e79cc6e3135be812bc8ca7c9a155852cef9dcf017ae378d9ecc9482b4857dc98c403beaf9f8bc4960292777fc58221ad46e9d5976ce2941e4fe427810dfb032c99cef90cf17f4e0083c986d66e0e170c2fea96a7360897a81a57921a9025dd021c2b0f6bbe08f8a49d8ac428a7074930bd2ef7ad28a0f17550b45bbfddd723b710994160bcc0ea2e92dbcbb114fefe22db643b9d392118ec05d7f48807ea1c4b5e39845d8207dc6b24d5d8a573034189b3563cdd14f102e2b41239ad1581a7839981d56cbdb7d8c843560272a075788603ec9b62aec5de81c734e3d8118e271179cfdb9e0ffb460519d769c05ad2b5044c2eca76a2c0824b5275c06b8715c0b6df6625a70ca14cc86ebc401f7abbd6d53e8e5d391371840510a9fb2d515be1bb1581a7e2b3a8610425da60d9ba8a841c324c3e1487036a20bc4d9149cbad2be5ed0e37f5cd21eb0d475f0c5730139d8b790e768ea169ef74069b6ccb4d09c78fcd1f1b791faef2218ce5e2707ffd0e38ada6a96a88a53dfc2ad72c9791a92d6a4d86f0f832062d62d3b425f260f654266196584729971fc3903d24300c9da725d47daa985bddff4b6fe301eb324bf6a35157bd79a0cf213398380de3bd91f583d537415afff80658992a949e433ff048c1d2495dec0461f0dd5bf4c8ac506268cd959f3493d37f8feb754062ca89398ade01f923c850eebc84ba9ee3d8c46d880d6f54f0ceafa451669c44b3e5c64411b0c855c94e8d3c345915412e041d284481e4242a1ae828345d76614979c252316b0f5eec34b98077cf89ff1834c25de73e83ad92873f2da115c02af04b71e7303e6289dbe76aaf9e5400dbbd9952c985283ff18aea8a7cab00ae650d21d235b62d9c21965c9888deebd4102bc75b95d33c6b5548f64c3c3f8fa256f21ab2577354221d5ddbc7247d46fb3532ed6322eef55aa24ac77797a38d1614923e24a9d70f6a24e0a1f28519a202fd91100f4d12ce61c37c819874bfbe5c61b4eb06c1b2b1cce56afaf16d560cf4ea727566f701e10233051dd633f4cca90c09c7aa733ecc0932d855abc08566dffe484de6d498c3625f7c2ba5bb12925d5f12e6194e21df4a4d69e1d0915963a04959348d49de928635128126557f8b5b87e1a47da42b311c47d3f0f969f069404e72d8a0d3cb0147ae6ee87abf994f384959eae9c7a91509f94f53098a8017d62bb1050b28c7976309957c34321d5a9520567970280714857904fb6e8f8c54fcdbb768028e4b37d47fd53ebd9cadb94baecbb54c78c81f7a80dd4c616df98d20ec22a0459844828c18eb7ec6d46cdc535266468bef9cfc6ce844b4b7ec9e3ff9e2619c05b477f72be3448f931312ff85727d8e1f48fbb978cb4b22bf959e97ebf4f25e19710f38a2c518702853410b32e74a68c98d58973a4a5c9d3d99c331f0d918a76fd047bb77a18eb655f72f6867cb3093438a26f080dbff4c4cd9544b9f401da3db9d235921a44c61e8292b83f83e8c9825d50bb0dbe32216e21733da8024343206e571c1d051daa670895566a9a218fb112ab2cdfa6a76bfd6374454ee1c211e5871d4186af9c7fef85af11c5b8a11774a1dd890ed2d5723b8698c339bc32473a1b5a9ec39b093ed24a3ec02b6455479bb34fa5a96c1b38fbe356c36b863e28d1234b64bcc0d071c790283b9b71137948776d6a60b67ff552d64286db810ecb90f1117dbedf6d2ce3162ec4ca4070333d1bce11419c13fdc1772ffe70fb03ad824f285660ec0c1985fff2441eddd0fa4b58dc53256ffa0df94a59a3c4165d4ae8bb883b23a8512d435e026da4583183d5147dfb2e05742803c6e9a3166f9dc40e1565887b3fd5d97c00b97b1ac542c23658d4ff03e8b9f3ecf3e35206e6ab3f38f26b70ee4e101f84ad6e3dce689ebdfa544b27af4a9a78667f6ef3564f1f0ffd0a9ed142c77961c7ae9c9a1b300023b6d79511e65d3db989052be9166b4bf9fc128b05fc500af7e7938f4e7ba7d67a117cde6c6330ca18d57150c2d51281df54d8735410805a92d4e5885a580124ecc54bc49bf451c6110a7fa195ae5691743bc4f0d3ab0a1e434884bbfbe8d0e8a5de217269c54f2f2415dbdb7e9285c7006c21cf3b593eefffd79c52c4a95da668651ed12ffe7ec0d2206588c452d107d543cf90f514a417d67b30082ed8ea7ab609d27b4ef9a7e3ac9c0d32020bca61f1df1c83e0b9625e7d6944f6d1fa3e388fb88dc0fd053fe1f1d2c5fa282a59eb2459475c6f1b556fbc791104a6707b8d37d81e7bdf158417f3e920d07d3b6ff305bafec00291c825ffc7d965e570094853389f6996ef02cc3e2f5ce3468e2d0a4ded990d372c2b234c3c1bbd6b6cff24ce474cdd98c42e7179295ac12740cefaf6e86898fb7180db31116ac7bb6d06a242f1fff5530ac7fc47f6593ac73c1a231a73e28d5b4b90d1a596b981675e4f7e0616095dffa6807c49c9d147f5a81b2822b128b035f4de8e017e54ac06e2e7dd52b3bbd778a76477dbe33e6fce5ae786879ba0739de0dee0987258912445664a405cb12a01bb94a97abccdc6d3afe7b61ba72b403a2e66c4c6b2cad20c427c0daf1d9d2dc57ccd502ff4993367dd0debcadee0e431e9115977e1c51a1905fb54268d25aa71cf056358f6d2c4c8bccdc675e350499f7776a15b41fb9e74d56ce3c82a28e9ee1815e039c6b18c8c551ddd46689e27e4c6b4ec384ee8d7fe1bd0ef40a6c288111fd61f00302f7dc442183e6dc0a2cdbbd6d43e061687989f9fef7ce54b238038461bf941a0706e2dfa8c069f4d90d1381a7429b3e692e346074c4de9e208f473a8794a6aaac2a297c29a396a28a10f4a5fa17863ed592fc39d7e8549af9f952366cee76372cf17812964c7322b370ff7f8f2074cc16b88b7cf8fd44bc3504c77efa6effb0813fe4f8ad6da76054d84d50bd9d7e1ff78b9afb4988d843d298515895d9aeaa29e496492097c79d0ecd887045cbd37cc476decc5836640d9a000e2a0a9e389dd6a996cea1dc0a7f62e2abf25d6ebee990ef19db33783d0485eaf43476b134d6873fd9a4f376ec2e4ae0993407683597ebd9376ca9d9d85d4399b3d24b8b6bf0e4910f257f6f54887f321a3768f82982144c5fe4fdf40068c3c71d34ffec82726e704c40f82f537d41b3621f06c1bb11b1665de3732df4f3eb727c04ad6b25910d9d97163119a2b72ff40109edbc58676682e0f86f75870b6f639d368d11aa1ceae80708288757db2389b16a4420008ce4a7a8487cbb7c922108a1acff54a0da5fc32c4c1e29a483e50ab9818c15c86a4997b4c8ef8dce08f633d2b558823a1c3476e61badcbb4ebcfd5f89f4075f093f5ea52c5c6f6c3025a8558ffb7c38a0662c05b8c44c0af1f15d3df1b1814255e27e9edec3346e2d59202fd643cf51a8ac5fe2a17579433afb9898cdba1c31c6083a8040064cd67c5012738660a09677e2b2156074a6586c76b86b745e7e209884185226fdbc2d826e2264e0b8d9e8896af60d82cc06452366c5dbf959e14a1a12b56bea30e35b1f50cdf95e37e0a5d272a792caec048947dd56abfe85271f0131e8d7f542525230ee0b005fe6bdec05a5f42c7027b555292374b210b7a6d72139574e10500f7db0914270d122ad93a0893c6875008e6b055a0358a48ef9b9309089323a110fcc7c5122c45401532c075957214dd6c86305819ead9cdcddec00faf31b0be040165aee5210c648eb7ac1d856dfce811391876735a05e71f2c8fa0beed3c5489897de524dd52da8a18c5a69d0be29a59dba736addf52ba02bb14121660f973a030d705480ae121b44f6d46441af124982c6b759389977e32de862bf409eeae3eaf7321c779b1c2e32080e031d854c34ce5413a098e18ac7a4b871985c83b0ba4fe68d82061923547d3ea28e004fab11afa63fcd5a6149c4bb3a2480061e5d58899a5d717893c0b73be62d4a42eb3fec479aea240fae76ef79561d4a7bf26c4f67cbe1659557f20f8fce0e183e2b4da3553741cbd764714d3e6ebec6ff0a9fb7efcd99bc71c3938b4142ca0a69faa54bab2b4f7b9143633fd6e9a26f7766b8353f491a0bcb62066df77faaaf7b639d9455bdc8937968c51848e4391c52db579a48dcc3a7f1406053bbf06ee64eb3a5b7d2e0c63efdd5edeef53820e3e52d3d12828e39d698095aa3c3cd84989fc7ca73e541ba7da40aa2297a5e3633096dfb81b5c2ec6fbeb894e41bce4e8ec5096326feece88f5a795cad6097ea7c91ec487092ebad33c06f355a195d64d17afe092a0d7ae2161ad3d33f863336ed1e4055f7f81c065230e0c1fa5b332cd6a57692f3b0f60115dcece23ee7c46a45ac79e8ec19ca091c98f06750c802b103480ebe72849b22b7419ea1e35999d0b374286c20fe64880fc5259c61e300d15659b9f6a43127aaf0587048ca9a4284b2e25f3d079ddc194a7bf12a211bdc8f969be78e6d9a686c8ebdec19bd3518a901fd9bc3ad02065f0b145a8b72abf97d7584c7ebe6054e36d6f095df5a0cfc80e82878c4a5845f31e8f351e7411b0c81880523040585881fd87424e6288fc4b877a39bb81a9a40200c8e7a438d944c268d12d7ff1f234d2a12001d3a97ad15da3d628a420bcecd3f365488120", 0x1000}}, 0x1006) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mbind(&(0x7f00001fa000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000006800)={&(0x7f0000000080)={0x44, r3, 0x615, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x44}, 0x5}, 0x0) r7 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) 310.150376ms ago: executing program 2 (id=2230): sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_procfs(r0, &(0x7f0000000040)='smaps\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x1f, 0x14, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x80}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @printk={@x}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) close(r4) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) r7 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) close(r7) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f0000000640)={0x2020}, 0x2020) execve(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000800)={[&(0x7f0000000940)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01']}) ioctl$COMEDI_RANGEINFO(r4, 0x80086408, &(0x7f00000000c0)={0x9, &(0x7f0000000300)=[{}, {}, {}, {}, {}, {}]}) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, 0x0, 0x80) 0s ago: executing program 2 (id=2231): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) request_key(&(0x7f0000000740)='cifs.idmap\x00', &(0x7f0000000780)={'syz', 0x3}, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010200000000000000000000000a60000000060a0b0400000000000000000200000034000480200001800e000100636f6e6e6c696d69740000000c000280080001400000000010000180090001006c617374000000000900010073797a30000000000900020073797a320000000014000000110001"], 0x88}}, 0x0) close(r2) r3 = syz_open_dev$midi(&(0x7f00000001c0), 0x2, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0xe, 0x123100) r4 = syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x10100}, &(0x7f0000002000)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22}) io_uring_enter(r4, 0x48e9, 0x0, 0x2, 0x0, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r3, 0xc0305720, &(0x7f00000004c0)={0x1}) io_uring_enter(0xffffffffffffffff, 0x708, 0x41e3, 0x0, 0x0, 0x0) r7 = syz_io_uring_setup(0x88f, &(0x7f0000000340)={0x0, 0xaee2, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000020000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000000)='kmem_cache_free\x00', r11}, 0x18) socket$inet6(0xa, 0x80002, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) syz_emit_ethernet(0x4e, &(0x7f00000003c0)=ANY=[], 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r12 = socket$xdp(0x2c, 0x3, 0x0) syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r12, 0x0, 0x0, 0x0, 0x40012020, 0x1, {0x2}}) io_uring_enter(r7, 0x47f6, 0x0, 0x4, 0x0, 0x0) kernel console output (not intermixed with test programs): warding state [ 349.464702][ T40] kauditd_printk_skb: 249 callbacks suppressed [ 349.464715][ T40] audit: type=1326 audit(1754979842.903:1103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10950 comm="syz.2.1024" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f07579 code=0x7ffc0000 [ 349.474935][ T40] audit: type=1326 audit(1754979842.913:1104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10950 comm="syz.2.1024" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f07579 code=0x7ffc0000 [ 349.486042][ T40] audit: type=1326 audit(1754979842.913:1105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10950 comm="syz.2.1024" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f07579 code=0x7ffc0000 [ 349.494042][ T40] audit: type=1326 audit(1754979842.913:1106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10950 comm="syz.2.1024" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f07579 code=0x7ffc0000 [ 349.506418][ T40] audit: type=1326 audit(1754979842.913:1107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10950 comm="syz.2.1024" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f07579 code=0x7ffc0000 [ 349.519175][ T40] audit: type=1326 audit(1754979842.913:1108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10950 comm="syz.2.1024" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f07579 code=0x7ffc0000 [ 349.526976][ T40] audit: type=1326 audit(1754979842.913:1109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10950 comm="syz.2.1024" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f07579 code=0x7ffc0000 [ 349.534087][ T40] audit: type=1326 audit(1754979842.913:1110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10950 comm="syz.2.1024" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f07579 code=0x7ffc0000 [ 349.542656][ T40] audit: type=1326 audit(1754979842.923:1111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10950 comm="syz.2.1024" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f07579 code=0x7ffc0000 [ 349.550807][ T40] audit: type=1326 audit(1754979842.923:1112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10950 comm="syz.2.1024" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f07579 code=0x7ffc0000 [ 350.865870][T10988] netlink: 'syz.3.1028': attribute type 10 has an invalid length. [ 350.884806][T10988] tipc: Resetting bearer [ 350.905999][T10988] batman_adv: batadv0: Adding interface: team0 [ 350.908032][T10988] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 350.927855][T10997] netlink: 'syz.3.1028': attribute type 10 has an invalid length. [ 350.930400][T10997] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1028'. [ 350.933262][T10988] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 351.088713][T10997] team0: entered promiscuous mode [ 351.111751][T10997] 8021q: adding VLAN 0 to HW filter on device team0 [ 351.120472][T10997] batman_adv: batadv0: Interface activated: team0 [ 351.123378][T10997] batman_adv: batadv0: Interface deactivated: team0 [ 351.127008][T10997] batman_adv: batadv0: Removing interface: team0 [ 351.137850][T10997] bridge0: port 1(team0) entered blocking state [ 351.140722][T10997] bridge0: port 1(team0) entered disabled state [ 351.143818][T10997] team0: entered allmulticast mode [ 351.146800][T10997] vlan0: entered allmulticast mode [ 351.149708][T10997] veth0_vlan: entered allmulticast mode [ 351.193167][T10997] bridge0: port 1(team0) entered blocking state [ 351.195245][T10997] bridge0: port 1(team0) entered forwarding state [ 352.183753][T11006] trusted_key: encrypted_key: master key parameter '' is invalid [ 353.326573][T11028] net_ratelimit: 168 callbacks suppressed [ 353.326580][T11028] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 353.497160][T11030] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1040'. [ 355.162163][T11052] vivid-000: ================= START STATUS ================= [ 355.166285][T11052] vivid-000: Test Pattern: 75% Colorbar [ 355.169120][T11052] vivid-000: Fill Percentage of Frame: 100 [ 355.171551][T11052] vivid-000: Horizontal Movement: No Movement [ 355.174130][T11052] vivid-000: Vertical Movement: No Movement [ 355.176825][T11052] vivid-000: OSD Text Mode: All [ 355.178932][T11052] vivid-000: Show Border: false [ 355.181297][T11052] vivid-000: Show Square: false [ 355.183574][T11052] vivid-000: Sensor Flipped Horizontally: false [ 355.186256][T11052] vivid-000: Sensor Flipped Vertically: false [ 355.188886][T11052] vivid-000: Insert SAV Code in Image: false [ 355.191544][T11052] vivid-000: Insert EAV Code in Image: false [ 355.194118][T11052] vivid-000: Insert Video Guard Band: false [ 355.197220][T11052] vivid-000: Reduced Framerate: false [ 355.200244][T11052] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator [ 355.203926][T11052] vivid-000: S-Video 000-0 Is Connected To: Output S-Video 023-0 [ 355.207274][T11052] vivid-000: Enable Capture Cropping: true [ 355.209678][T11052] vivid-000: Enable Capture Composing: true [ 355.318520][T11052] vivid-000: Enable Capture Scaler: true [ 355.320370][T11052] vivid-000: Timestamp Source: End of Frame [ 355.325503][T11052] vivid-000: Colorspace: sRGB [ 355.354238][T11052] vivid-000: Transfer Function: Default [ 355.360326][T11052] vivid-000: Y'CbCr Encoding: Default [ 355.365734][T11052] vivid-000: HSV Encoding: Hue 0-179 [ 355.370491][T11052] vivid-000: Quantization: Default [ 355.375512][T11052] vivid-000: Apply Alpha To Red Only: false [ 355.379945][T11052] vivid-000: Standard Aspect Ratio: 4x3 [ 355.383756][T11052] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 355.406633][T11052] vivid-000: DV Timings: 640x480p59 inactive [ 355.412134][T11052] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 355.419428][T11052] vivid-000: Maximum EDID Blocks: 2 [ 355.421423][T11052] vivid-000: Limited RGB Range (16-235): false [ 355.423413][T11052] vivid-000: Rx RGB Quantization Range: Automatic [ 355.425528][T11052] vivid-000: Power Present: 0x00000001 [ 355.427376][T11052] tpg source WxH: 320x240 (Y'CbCr) [ 355.429042][T11052] tpg field: 1 [ 355.430193][T11052] tpg crop: (0,0)/320x240 [ 355.431563][T11052] tpg compose: (0,0)/320x240 [ 355.433104][T11052] tpg colorspace: 8 [ 355.434321][T11052] tpg transfer function: 0/0 [ 355.441765][T11052] tpg Y'CbCr encoding: 0/0 [ 355.443371][T11052] tpg quantization: 0/0 [ 355.445419][T11052] tpg RGB range: 0/2 [ 355.446876][T11052] vivid-000: ================== END STATUS ================== [ 357.283606][T11087] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1051'. [ 358.482974][ T40] kauditd_printk_skb: 4 callbacks suppressed [ 358.482989][ T40] audit: type=1326 audit(1754979851.893:1117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11100 comm="syz.0.1054" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f48579 code=0x7ffc0000 [ 358.491623][ T40] audit: type=1326 audit(1754979851.893:1118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11100 comm="syz.0.1054" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f48579 code=0x7ffc0000 [ 358.498755][ T40] audit: type=1326 audit(1754979851.893:1119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11100 comm="syz.0.1054" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f48579 code=0x7ffc0000 [ 358.505914][ T40] audit: type=1326 audit(1754979851.893:1120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11100 comm="syz.0.1054" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f48579 code=0x7ffc0000 [ 358.512534][ T40] audit: type=1326 audit(1754979851.893:1121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11100 comm="syz.0.1054" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f48579 code=0x7ffc0000 [ 358.519201][ T40] audit: type=1326 audit(1754979851.893:1122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11100 comm="syz.0.1054" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f48579 code=0x7ffc0000 [ 358.526394][ T40] audit: type=1326 audit(1754979851.893:1123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11100 comm="syz.0.1054" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f48579 code=0x7ffc0000 [ 358.532977][ T40] audit: type=1326 audit(1754979851.893:1124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11100 comm="syz.0.1054" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f48579 code=0x7ffc0000 [ 358.539581][ T40] audit: type=1326 audit(1754979851.893:1125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11100 comm="syz.0.1054" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f48579 code=0x7ffc0000 [ 358.545949][ T40] audit: type=1326 audit(1754979851.893:1126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11100 comm="syz.0.1054" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f48579 code=0x7ffc0000 [ 358.799282][T11112] IPv6: Can't replace route, no match found [ 362.843935][T11168] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1069'. [ 364.046769][T11182] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 364.333230][T11190] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 364.335438][T11190] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 364.340836][T11190] vhci_hcd vhci_hcd.0: Device attached [ 365.413298][T11192] vhci_hcd: connection closed [ 365.423459][ T80] vhci_hcd: stop threads [ 365.436083][ T80] vhci_hcd: release socket [ 365.437725][ T80] vhci_hcd: disconnect device [ 365.475918][T11206] lo speed is unknown, defaulting to 1000 [ 365.478450][T11206] wlan0 speed is unknown, defaulting to 1000 [ 365.934896][T11222] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1079'. [ 366.888313][T11238] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1082'. [ 366.970899][T11240] JFS: discard option not supported on device [ 366.975849][T11240] Mount JFS Failure: -22 [ 366.977300][T11240] jfs_mount failed w/return code = -22 [ 367.270409][ T40] kauditd_printk_skb: 7 callbacks suppressed [ 367.270426][ T40] audit: type=1326 audit(1754979860.713:1134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11243 comm="syz.1.1085" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf711e579 code=0x7ffc0000 [ 367.282461][ T40] audit: type=1326 audit(1754979860.713:1135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11243 comm="syz.1.1085" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf711e579 code=0x7ffc0000 [ 367.291690][ T40] audit: type=1326 audit(1754979860.713:1136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11243 comm="syz.1.1085" exe="/syz-executor" sig=0 arch=40000003 syscall=30 compat=1 ip=0xf711e579 code=0x7ffc0000 [ 367.301615][ T40] audit: type=1326 audit(1754979860.713:1137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11243 comm="syz.1.1085" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf711e579 code=0x7ffc0000 [ 367.310885][ T40] audit: type=1326 audit(1754979860.713:1138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11243 comm="syz.1.1085" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf711e579 code=0x7ffc0000 [ 367.321661][ T40] audit: type=1326 audit(1754979860.713:1139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11243 comm="syz.1.1085" exe="/syz-executor" sig=0 arch=40000003 syscall=321 compat=1 ip=0xf711e579 code=0x7ffc0000 [ 367.331572][ T40] audit: type=1326 audit(1754979860.713:1140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11243 comm="syz.1.1085" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf711e579 code=0x7ffc0000 [ 367.341256][ T40] audit: type=1326 audit(1754979860.713:1141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11243 comm="syz.1.1085" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf711e579 code=0x7ffc0000 [ 367.351492][ T40] audit: type=1326 audit(1754979860.713:1142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11243 comm="syz.1.1085" exe="/syz-executor" sig=0 arch=40000003 syscall=224 compat=1 ip=0xf711e579 code=0x7ffc0000 [ 367.360984][ T40] audit: type=1326 audit(1754979860.713:1143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11243 comm="syz.1.1085" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf711e579 code=0x7ffc0000 [ 367.730698][T11252] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1086'. [ 368.185067][T11260] 8021q: adding VLAN 0 to HW filter on device bond0 [ 368.188744][T11260] 8021q: adding VLAN 0 to HW filter on device team0 [ 368.202602][T11260] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 368.959997][T11270] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1090'. [ 373.082487][T11327] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1101'. [ 375.573994][ T40] kauditd_printk_skb: 226 callbacks suppressed [ 375.574009][ T40] audit: type=1326 audit(1754979869.013:1370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11363 comm="syz.2.1110" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f07579 code=0x7ffc0000 [ 375.604574][ T40] audit: type=1326 audit(1754979869.013:1371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11363 comm="syz.2.1110" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f07579 code=0x7ffc0000 [ 375.613947][ T40] audit: type=1326 audit(1754979869.023:1372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11363 comm="syz.2.1110" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f07579 code=0x7ffc0000 [ 375.623473][ T40] audit: type=1326 audit(1754979869.023:1373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11363 comm="syz.2.1110" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f07579 code=0x7ffc0000 [ 375.633875][ T40] audit: type=1326 audit(1754979869.023:1374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11363 comm="syz.2.1110" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f07579 code=0x7ffc0000 [ 375.642304][ T40] audit: type=1326 audit(1754979869.023:1375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11363 comm="syz.2.1110" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f07579 code=0x7ffc0000 [ 375.649246][ T40] audit: type=1326 audit(1754979869.033:1376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11363 comm="syz.2.1110" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f07579 code=0x7ffc0000 [ 375.657338][ T40] audit: type=1326 audit(1754979869.033:1377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11363 comm="syz.2.1110" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f07579 code=0x7ffc0000 [ 375.666195][ T40] audit: type=1326 audit(1754979869.033:1378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11363 comm="syz.2.1110" exe="/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf7f07579 code=0x7ffc0000 [ 375.675305][ T40] audit: type=1326 audit(1754979869.033:1379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11363 comm="syz.2.1110" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f07579 code=0x7ffc0000 [ 377.019927][T11396] lo speed is unknown, defaulting to 1000 [ 377.023777][T11396] wlan0 speed is unknown, defaulting to 1000 [ 377.518781][T11401] lo speed is unknown, defaulting to 1000 [ 377.522025][T11401] wlan0 speed is unknown, defaulting to 1000 [ 378.106526][ T1417] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.108912][ T1417] ieee802154 phy1 wpan1: encryption failed: -22 [ 383.316869][T11499] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1138'. [ 390.379535][T11608] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1162'. [ 390.398329][T11603] lo speed is unknown, defaulting to 1000 [ 390.400834][T11603] wlan0 speed is unknown, defaulting to 1000 [ 391.021628][T11627] 8021q: adding VLAN 0 to HW filter on device bond0 [ 391.030289][T11627] 8021q: adding VLAN 0 to HW filter on device team0 [ 391.041863][T11627] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 391.047702][ T6058] lo speed is unknown, defaulting to 1000 [ 391.050094][ T6058] syz0: Port: 1 Link ACTIVE [ 392.255509][T11642] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 392.411702][T11642] could not allocate digest TFM handle rmd256 [ 395.440578][T11672] lo speed is unknown, defaulting to 1000 [ 395.443459][T11672] wlan0 speed is unknown, defaulting to 1000 [ 395.519066][ T40] kauditd_printk_skb: 37 callbacks suppressed [ 395.519083][ T40] audit: type=1326 audit(1754979888.963:1416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11673 comm="syz.0.1176" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f48579 code=0x0 [ 395.537146][T11669] netlink: 'syz.1.1174': attribute type 10 has an invalid length. [ 395.541760][T11669] netlink: 'syz.1.1174': attribute type 10 has an invalid length. [ 395.544296][T11669] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1174'. [ 395.547530][T11669] team0: entered promiscuous mode [ 395.549223][T11669] team_slave_0: entered promiscuous mode [ 395.551095][T11669] team_slave_1: entered promiscuous mode [ 395.553565][T11669] 8021q: adding VLAN 0 to HW filter on device team0 [ 395.556168][T11669] bridge0: port 3(team0) entered blocking state [ 395.558210][T11669] bridge0: port 3(team0) entered disabled state [ 395.560955][T11669] team0: entered allmulticast mode [ 395.562565][T11669] team_slave_0: entered allmulticast mode [ 395.564470][T11669] team_slave_1: entered allmulticast mode [ 395.746986][T11676] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 397.107168][ T40] audit: type=1326 audit(1754979890.553:1417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11705 comm="syz.0.1182" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f48579 code=0x7ffc0000 [ 397.116921][ T40] audit: type=1326 audit(1754979890.553:1418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11705 comm="syz.0.1182" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f48579 code=0x7ffc0000 [ 397.124154][ T40] audit: type=1326 audit(1754979890.553:1419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11705 comm="syz.0.1182" exe="/syz-executor" sig=0 arch=40000003 syscall=30 compat=1 ip=0xf7f48579 code=0x7ffc0000 [ 397.132620][ T40] audit: type=1326 audit(1754979890.553:1420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11705 comm="syz.0.1182" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f48579 code=0x7ffc0000 [ 397.141291][ T40] audit: type=1326 audit(1754979890.553:1421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11705 comm="syz.0.1182" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f48579 code=0x7ffc0000 [ 397.149082][ T40] audit: type=1326 audit(1754979890.563:1422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11705 comm="syz.0.1182" exe="/syz-executor" sig=0 arch=40000003 syscall=321 compat=1 ip=0xf7f48579 code=0x7ffc0000 [ 397.156047][ T40] audit: type=1326 audit(1754979890.563:1423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11705 comm="syz.0.1182" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f48579 code=0x7ffc0000 [ 397.165700][ T40] audit: type=1326 audit(1754979890.563:1424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11705 comm="syz.0.1182" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f48579 code=0x7ffc0000 [ 397.175165][ T40] audit: type=1326 audit(1754979890.563:1425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11705 comm="syz.0.1182" exe="/syz-executor" sig=0 arch=40000003 syscall=224 compat=1 ip=0xf7f48579 code=0x7ffc0000 [ 397.585387][T11721] netlink: 'syz.1.1185': attribute type 4 has an invalid length. [ 397.655776][ T6058] lo speed is unknown, defaulting to 1000 [ 397.657843][ T6058] syz0: Port: 1 Link DOWN [ 398.820136][T11743] lo speed is unknown, defaulting to 1000 [ 398.822775][T11743] wlan0 speed is unknown, defaulting to 1000 [ 399.051481][T11736] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 399.403982][T11759] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1190'. [ 400.242363][T11764] netlink: 'syz.2.1189': attribute type 10 has an invalid length. [ 400.255866][T11764] batman_adv: batadv0: Adding interface: team0 [ 400.257954][T11764] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 400.266339][T11764] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 400.287255][T11764] netlink: 'syz.2.1189': attribute type 10 has an invalid length. [ 400.289848][T11764] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1189'. [ 400.293252][T11764] team0: entered promiscuous mode [ 400.295136][T11764] team_slave_0: entered promiscuous mode [ 400.297111][T11764] team_slave_1: entered promiscuous mode [ 400.300401][T11764] 8021q: adding VLAN 0 to HW filter on device team0 [ 400.302633][T11764] batman_adv: batadv0: Interface activated: team0 [ 400.306064][T11764] batman_adv: batadv0: Interface deactivated: team0 [ 400.308557][T11764] batman_adv: batadv0: Removing interface: team0 [ 402.226467][T11810] lo speed is unknown, defaulting to 1000 [ 402.231603][T11810] wlan0 speed is unknown, defaulting to 1000 [ 402.539516][T11801] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 406.375706][T11867] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1211'. [ 406.397094][T11867] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1211'. [ 407.852024][T11896] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1220'. [ 409.046700][T11913] lo speed is unknown, defaulting to 1000 [ 409.050398][T11913] wlan0 speed is unknown, defaulting to 1000 [ 409.391529][T11917] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 411.794732][T11964] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1232'. [ 412.101842][T11968] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 412.280146][T11968] could not allocate digest TFM handle rmd256 [ 413.487965][T11993] netlink: 'syz.0.1236': attribute type 10 has an invalid length. [ 413.503746][T11993] bridge0: port 3(team0) entered disabled state [ 413.507996][T11993] team0: left allmulticast mode [ 413.510233][T11993] team_slave_0: left allmulticast mode [ 413.512078][T11993] team_slave_1: left allmulticast mode [ 413.513860][T11993] team0: left promiscuous mode [ 413.515634][T11993] team_slave_0: left promiscuous mode [ 413.517757][T11993] team_slave_1: left promiscuous mode [ 413.519954][T11993] bridge0: port 3(team0) entered disabled state [ 413.533687][T11993] batman_adv: batadv0: Adding interface: team0 [ 413.535861][T11993] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 413.548636][T11993] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 413.563149][T11996] netlink: 'syz.0.1236': attribute type 10 has an invalid length. [ 413.567278][T11996] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1236'. [ 413.571329][T11996] team0: entered promiscuous mode [ 413.573498][T11996] team_slave_0: entered promiscuous mode [ 413.576320][T11996] team_slave_1: entered promiscuous mode [ 413.581519][T11996] 8021q: adding VLAN 0 to HW filter on device team0 [ 413.584709][T11996] batman_adv: batadv0: Interface activated: team0 [ 413.586876][T11996] batman_adv: batadv0: Interface deactivated: team0 [ 413.589114][T11996] batman_adv: batadv0: Removing interface: team0 [ 413.593236][T11996] bridge0: port 3(team0) entered blocking state [ 413.595637][T11996] bridge0: port 3(team0) entered disabled state [ 413.597873][T11996] team0: entered allmulticast mode [ 413.599672][T11996] team_slave_0: entered allmulticast mode [ 413.601566][T11996] team_slave_1: entered allmulticast mode [ 413.606957][T11996] bridge0: port 3(team0) entered blocking state [ 413.609010][T11996] bridge0: port 3(team0) entered forwarding state [ 415.371188][T12004] ceph: No mds server is up or the cluster is laggy [ 416.709567][T12040] ubi: mtd0 is already attached to ubi31 [ 417.245184][T12048] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1248'. [ 419.256027][T12073] ======================================================= [ 419.256027][T12073] WARNING: The mand mount option has been deprecated and [ 419.256027][T12073] and is ignored by this kernel. Remove the mand [ 419.256027][T12073] option from the mount to silence this warning. [ 419.256027][T12073] ======================================================= [ 420.206203][T12082] netlink: 'syz.0.1256': attribute type 4 has an invalid length. [ 422.871838][T12127] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1267'. [ 425.915064][T12176] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1278'. [ 426.030408][T12181] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1281'. [ 426.037757][T12181] dlm: plock device version mismatch: kernel (1.2.0), user (4207673345.1574799195.3139252685) [ 427.015425][T12189] lo speed is unknown, defaulting to 1000 [ 427.018092][T12189] wlan0 speed is unknown, defaulting to 1000 [ 427.303121][T12190] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 429.675540][ T40] kauditd_printk_skb: 200 callbacks suppressed [ 429.675554][ T40] audit: type=1804 audit(1754979923.113:1626): pid=12260 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.1297" name="/newroot/338/bus/bus" dev="overlay" ino=1833 res=1 errno=0 [ 429.704471][ T40] audit: type=1804 audit(1754979923.143:1627): pid=12260 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1297" name="/newroot/338/bus/bus" dev="overlay" ino=1833 res=1 errno=0 [ 431.965466][T12301] fuse: Unknown parameter 'rootm00000000000000000000' [ 431.988333][T12301] 9pnet: Could not find request transport: xen [ 431.992082][T12301] tmpfs: Unknown parameter '"]^H~/}quota' [ 432.004594][ T40] audit: type=1326 audit(1754979925.443:1628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12300 comm="syz.1.1308" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf711e579 code=0x7ffc0000 [ 432.011957][ T40] audit: type=1326 audit(1754979925.443:1629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12300 comm="syz.1.1308" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf711e579 code=0x7ffc0000 [ 432.011984][ T40] audit: type=1326 audit(1754979925.443:1630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12300 comm="syz.1.1308" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf711e579 code=0x7ffc0000 [ 432.012007][ T40] audit: type=1326 audit(1754979925.443:1631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12300 comm="syz.1.1308" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf711e579 code=0x7ffc0000 [ 432.034887][ T40] audit: type=1326 audit(1754979925.443:1632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12300 comm="syz.1.1308" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf711e579 code=0x7ffc0000 [ 432.041607][ T40] audit: type=1326 audit(1754979925.443:1633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12300 comm="syz.1.1308" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf711e579 code=0x7ffc0000 [ 432.049210][ T40] audit: type=1326 audit(1754979925.443:1634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12300 comm="syz.1.1308" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf711e579 code=0x7ffc0000 [ 432.055973][ T40] audit: type=1326 audit(1754979925.443:1635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12300 comm="syz.1.1308" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf711e579 code=0x7ffc0000 [ 432.638628][ T1142] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.714212][ T1142] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.768610][ T1142] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.845147][ T1142] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.917374][ T5987] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 432.921864][ T5987] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 432.926130][ T5987] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 432.928829][ T5987] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 432.931365][ T5987] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 432.981035][T12322] lo speed is unknown, defaulting to 1000 [ 432.983526][T12322] wlan0 speed is unknown, defaulting to 1000 [ 433.006324][ T1142] team0: left allmulticast mode [ 433.008171][ T1142] team_slave_0: left allmulticast mode [ 433.010002][ T1142] team_slave_1: left allmulticast mode [ 433.013504][ T1142] bridge0: port 3(team0) entered disabled state [ 433.019912][ T1142] bridge_slave_1: left allmulticast mode [ 433.021729][ T1142] bridge_slave_1: left promiscuous mode [ 433.023569][ T1142] bridge0: port 2(bridge_slave_1) entered disabled state [ 433.031093][ T1142] bridge_slave_0: left allmulticast mode [ 433.033519][ T1142] bridge_slave_0: left promiscuous mode [ 433.039594][ T1142] bridge0: port 1(bridge_slave_0) entered disabled state [ 433.844278][ T1142] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 433.899068][ T1142] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 433.931499][ T1142] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 433.950473][ T1142] bond0 (unregistering): Released all slaves [ 434.185227][ T1142] bond1 (unregistering): Released all slaves [ 434.196879][ T1142] bond2 (unregistering): Released all slaves [ 434.637813][ T1142] IPVS: stopping backup sync thread 8155 ... [ 434.755821][T12322] chnl_net:caif_netlink_parms(): no params data found [ 434.984577][ T5988] Bluetooth: hci0: command tx timeout [ 435.227001][T12322] bridge0: port 1(bridge_slave_0) entered blocking state [ 435.230181][T12322] bridge0: port 1(bridge_slave_0) entered disabled state [ 435.233586][T12322] bridge_slave_0: entered allmulticast mode [ 435.236846][T12322] bridge_slave_0: entered promiscuous mode [ 435.240693][T12322] bridge0: port 2(bridge_slave_1) entered blocking state [ 435.244179][T12322] bridge0: port 2(bridge_slave_1) entered disabled state [ 435.247895][T12322] bridge_slave_1: entered allmulticast mode [ 435.250835][T12322] bridge_slave_1: entered promiscuous mode [ 435.290969][ T1142] hsr_slave_0: left promiscuous mode [ 435.293142][ T1142] hsr_slave_1: left promiscuous mode [ 435.295590][ T1142] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 435.298034][ T1142] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 435.301085][ T1142] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 435.304143][ T1142] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 435.333547][ T1142] veth1_macvtap: left promiscuous mode [ 435.336151][ T1142] veth0_macvtap: left promiscuous mode [ 435.338507][ T1142] veth1_vlan: left promiscuous mode [ 435.342009][ T1142] veth0_vlan: left promiscuous mode [ 435.693699][T12384] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1324'. [ 436.251110][ T1142] team_slave_1 (unregistering): left promiscuous mode [ 436.255242][ T1142] team0 (unregistering): Port device team_slave_1 removed [ 436.345760][ T1142] team_slave_0 (unregistering): left promiscuous mode [ 436.349499][ T1142] team0 (unregistering): Port device team_slave_0 removed [ 436.481651][ T24] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 436.636443][ T24] usb 7-1: too many configurations: 13, using maximum allowed: 8 [ 436.640570][ T24] usb 7-1: config 0 has no interfaces? [ 436.647251][ T24] usb 7-1: config 0 has no interfaces? [ 436.653602][ T24] usb 7-1: config 0 has no interfaces? [ 436.680431][ T24] usb 7-1: config 0 has no interfaces? [ 436.684244][ T24] usb 7-1: config 0 has no interfaces? [ 436.691488][ T24] usb 7-1: config 0 has no interfaces? [ 436.695296][ T24] usb 7-1: config 0 has no interfaces? [ 436.699860][ T24] usb 7-1: config 0 has no interfaces? [ 436.706228][ T24] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 436.709175][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 436.711967][ T24] usb 7-1: Product: syz [ 436.713594][ T24] usb 7-1: Manufacturer: syz [ 436.717664][ T24] usb 7-1: SerialNumber: syz [ 436.793844][ T24] usb 7-1: config 0 descriptor?? [ 437.016952][ T34] usb 7-1: USB disconnect, device number 3 [ 437.068230][ T5988] Bluetooth: hci0: command tx timeout [ 437.349320][T12322] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 437.360816][T12322] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 437.620138][T12322] team0: Port device team_slave_0 added [ 437.697300][T12322] team0: Port device team_slave_1 added [ 437.929153][T12322] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 437.931607][T12322] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 437.940481][T12322] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 437.947013][T12322] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 437.950015][T12322] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 437.967404][T12322] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 437.976388][ T9] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 438.034809][T12322] hsr_slave_0: entered promiscuous mode [ 438.040892][T12322] hsr_slave_1: entered promiscuous mode [ 438.145116][ T9] usb 7-1: Using ep0 maxpacket: 32 [ 438.149728][ T9] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 438.157139][ T9] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 438.160384][ T9] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 438.163052][ T9] usb 7-1: Product: syz [ 438.164852][ T9] usb 7-1: Manufacturer: syz [ 438.166417][ T9] usb 7-1: SerialNumber: syz [ 438.178707][ T9] usb 7-1: config 0 descriptor?? [ 438.182828][T12393] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 438.237560][ T1142] IPVS: stop unused estimator thread 0... [ 438.329550][T12322] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 438.338254][T12322] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 438.343402][T12322] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 438.352240][T12322] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 438.421039][T12322] 8021q: adding VLAN 0 to HW filter on device bond0 [ 438.443964][T12322] 8021q: adding VLAN 0 to HW filter on device team0 [ 438.560841][T12402] bridge0: port 1(bridge_slave_0) entered blocking state [ 438.563673][T12402] bridge0: port 1(bridge_slave_0) entered forwarding state [ 438.579798][ T1142] bridge0: port 2(bridge_slave_1) entered blocking state [ 438.582476][ T1142] bridge0: port 2(bridge_slave_1) entered forwarding state [ 438.626051][T12418] usb 7-1: USB disconnect, device number 4 [ 438.752363][T12322] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 438.753721][ T24] e1000 0000:00:06.0 eth0: Reset adapter [ 438.963879][T12471] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1334'. [ 438.975621][T12322] veth0_vlan: entered promiscuous mode [ 439.013107][T12322] veth1_vlan: entered promiscuous mode [ 439.063188][T12322] veth0_macvtap: entered promiscuous mode [ 439.077823][T12322] veth1_macvtap: entered promiscuous mode [ 439.109508][T12322] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 439.138331][T12322] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 439.145157][ T5988] Bluetooth: hci0: command tx timeout [ 439.153650][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 439.156941][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 439.161144][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 439.164606][ T6181] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 439.228374][ T80] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 439.235303][ T80] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 439.261442][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 439.267543][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 439.648484][ T1417] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.703700][ T1417] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.905901][ T24] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX [ 441.224538][ T5988] Bluetooth: hci0: command tx timeout [ 467.200647][T12634] bridge0: port 1(erspan0) entered blocking state [ 467.203768][T12634] bridge0: port 1(erspan0) entered disabled state [ 467.207120][T12634] erspan0: entered allmulticast mode [ 467.210025][T12634] erspan0: entered promiscuous mode [ 468.156697][T12654] input: syz0 as /devices/virtual/input/input9 [ 468.411203][T12635] ALSA: mixer_oss: invalid OSS volume '' [ 469.431120][T12659] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 470.524141][T12676] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1351'. [ 471.322405][T12685] netlink: 1284 bytes leftover after parsing attributes in process `syz.1.1352'. [ 471.677959][ T40] kauditd_printk_skb: 20 callbacks suppressed [ 471.678006][ T40] audit: type=1326 audit(1754979965.003:1656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12683 comm="syz.4.1353" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f91579 code=0x7ffc0000 [ 471.711500][ T40] audit: type=1326 audit(1754979965.003:1657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12683 comm="syz.4.1353" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f91579 code=0x7ffc0000 [ 471.719309][ T40] audit: type=1326 audit(1754979965.003:1658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12683 comm="syz.4.1353" exe="/syz-executor" sig=0 arch=40000003 syscall=393 compat=1 ip=0xf7f91579 code=0x7ffc0000 [ 471.727996][ T40] audit: type=1326 audit(1754979965.003:1659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12683 comm="syz.4.1353" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f91579 code=0x7ffc0000 [ 471.735101][ T40] audit: type=1326 audit(1754979965.003:1660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12683 comm="syz.4.1353" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f91579 code=0x7ffc0000 [ 471.741951][ T40] audit: type=1326 audit(1754979965.003:1661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12683 comm="syz.4.1353" exe="/syz-executor" sig=0 arch=40000003 syscall=394 compat=1 ip=0xf7f91579 code=0x7ffc0000 [ 471.748825][ T40] audit: type=1326 audit(1754979965.003:1662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12683 comm="syz.4.1353" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f91579 code=0x7ffc0000 [ 471.755601][ T40] audit: type=1326 audit(1754979965.003:1663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12683 comm="syz.4.1353" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f91579 code=0x7ffc0000 [ 471.762815][ T40] audit: type=1326 audit(1754979965.003:1664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12683 comm="syz.4.1353" exe="/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf7f91579 code=0x7ffc0000 [ 471.772403][ T40] audit: type=1326 audit(1754979965.013:1665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12683 comm="syz.4.1353" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f91579 code=0x7ffc0000 [ 471.835879][T12694] lo speed is unknown, defaulting to 1000 [ 472.455668][T12704] lo speed is unknown, defaulting to 1000 [ 472.771039][T12704] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1357'. [ 472.806916][T12704] netlink: 'syz.1.1357': attribute type 12 has an invalid length. [ 472.818872][T12704] warning: `syz.1.1357' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 474.232803][T12742] wireguard0: entered promiscuous mode [ 474.235110][T12742] wireguard0: entered allmulticast mode [ 475.178020][T12747] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(9) [ 475.180434][T12747] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 475.185670][T12747] vhci_hcd vhci_hcd.0: Device attached [ 475.424519][ T60] usb 45-1: new low-speed USB device number 2 using vhci_hcd [ 475.522392][T12753] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1366'. [ 475.528087][T12753] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1366'. [ 475.858656][T12748] vhci_hcd: connection reset by peer [ 475.861559][ T168] vhci_hcd: stop threads [ 475.863075][ T168] vhci_hcd: release socket [ 475.865139][ T168] vhci_hcd: disconnect device [ 475.960533][T12759] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 475.963081][T12759] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 475.965819][T12759] vhci_hcd vhci_hcd.0: Device attached [ 476.214484][ T34] usb 39-1: new high-speed USB device number 3 using vhci_hcd [ 476.541829][T12775] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 476.544647][T12775] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 476.549361][T12775] vhci_hcd vhci_hcd.0: Device attached [ 476.610793][T12775] netdevsim netdevsim3: Direct firmware load for @ failed with error -2 [ 476.613968][T12775] netdevsim netdevsim3: Falling back to sysfs fallback for: @ [ 476.814539][ T6066] usb 44-1: SetAddress Request (2) to port 0 [ 476.817045][ T6066] usb 44-1: new SuperSpeed USB device number 2 using vhci_hcd [ 477.317703][T12776] vhci_hcd: connection reset by peer [ 477.320672][ T12] vhci_hcd: stop threads [ 477.322244][ T12] vhci_hcd: release socket [ 477.323735][ T12] vhci_hcd: disconnect device [ 477.375236][T12760] vhci_hcd: connection reset by peer [ 477.379169][ T80] vhci_hcd: stop threads [ 477.380599][ T80] vhci_hcd: release socket [ 477.382238][ T80] vhci_hcd: disconnect device [ 478.418550][T12796] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 478.446892][ T5980] hid (null): bogus close delimiter [ 478.551142][ T5980] hid-generic 0003:FFFFFFF9:0008.0002: bogus close delimiter [ 478.557256][ T5980] hid-generic 0003:FFFFFFF9:0008.0002: item 0 0 2 10 parsing failed [ 478.586710][ T5980] hid-generic 0003:FFFFFFF9:0008.0002: probe with driver hid-generic failed with error -22 [ 479.996551][T12826] 9pnet_virtio: no channels available for device syz [ 480.578294][ T60] vhci_hcd: vhci_device speed not set [ 480.691545][T12835] netlink: 9 bytes leftover after parsing attributes in process `syz.3.1384'. [ 480.696263][T12835] gretap0: entered promiscuous mode [ 481.305919][ T34] vhci_hcd: vhci_device speed not set [ 481.555037][T12844] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1387'. [ 481.864403][ T6066] usb 44-1: device descriptor read/8, error -110 [ 481.929107][T12836] kexec: Could not allocate control_code_buffer [ 482.254788][ T6066] usb usb44-port1: attempt power cycle [ 482.388140][T12860] /dev/nullb0: Can't open blockdev [ 482.880814][T12867] vivid-007: ================= START STATUS ================= [ 482.883912][T12867] vivid-007: Enable Output Cropping: true [ 482.888412][T12867] vivid-007: Enable Output Composing: true [ 482.890815][T12867] vivid-007: Enable Output Scaler: true [ 482.893098][T12867] vivid-007: Tx RGB Quantization Range: Automatic [ 482.895337][T12867] vivid-007: Transmit Mode: HDMI [ 482.896954][T12867] vivid-007: Hotplug Present: 0x00000000 [ 482.898893][T12867] vivid-007: RxSense Present: 0x00000000 [ 482.900812][T12867] vivid-007: EDID Present: 0x00000000 [ 482.902750][T12867] vivid-007: ================== END STATUS ================== [ 483.219404][ T6066] usb usb44-port1: unable to enumerate USB device [ 484.501215][T12884] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 486.170088][T12894] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1399'. [ 486.598318][ T168] Bluetooth: Error in BCSP hdr checksum [ 486.872274][ T1142] Bluetooth: Error in BCSP hdr checksum [ 487.126379][ T6181] Bluetooth: Error in BCSP hdr checksum [ 488.025028][T12890] Bluetooth: hci0: command 0x0405 tx timeout [ 488.033398][T12912] wireguard0: entered promiscuous mode [ 488.035957][T12912] wireguard0: entered allmulticast mode [ 488.343943][ T5987] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 488.569205][T12923] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1405'. [ 489.482178][T12944] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1411'. [ 492.538264][T12998] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1421'. [ 493.786701][T12402] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 493.790704][T12402] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 495.392096][T13047] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 496.333944][T13061] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 496.336706][T13061] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 496.340681][T13061] vhci_hcd vhci_hcd.0: Device attached [ 496.633883][ T6066] usb 40-1: SetAddress Request (2) to port 0 [ 496.635860][ T6066] usb 40-1: new SuperSpeed USB device number 2 using vhci_hcd [ 496.798100][T13074] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1439'. [ 496.980464][T13062] vhci_hcd: connection reset by peer [ 496.982335][T12402] vhci_hcd: stop threads [ 496.983749][T12402] vhci_hcd: release socket [ 496.985226][T12402] vhci_hcd: disconnect device [ 497.879565][T13093] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 499.169554][T13108] PID 13108 killed due to inadequate hugepage pool [ 499.313565][T13114] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1450'. [ 499.706340][T13120] openvswitch: : Dropping previously announced user features [ 499.720065][T13120] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1451'. [ 499.783891][T13121] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 500.134911][T13125] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 500.462631][T13132] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 500.465313][T13132] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 500.469622][T13132] vhci_hcd vhci_hcd.0: Device attached [ 500.479223][T13129] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 500.518740][T13129] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 500.545776][T13129] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 500.595091][T13129] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 500.617262][T13129] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 500.621603][T13129] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 500.631498][T13129] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 500.636802][T13129] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 500.640677][T13129] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 500.668835][T13129] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 500.773227][ T53] usb 42-1: SetAddress Request (6) to port 0 [ 500.793834][ T53] usb 42-1: new SuperSpeed USB device number 6 using vhci_hcd [ 500.912762][T13139] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 500.914886][T13139] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 500.925519][T13139] vhci_hcd vhci_hcd.0: Device attached [ 500.997185][ T1417] ieee802154 phy0 wpan0: encryption failed: -22 [ 500.999285][ T1417] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.100392][T13133] vhci_hcd: connection reset by peer [ 501.111024][ T80] vhci_hcd: stop threads [ 501.112537][ T80] vhci_hcd: release socket [ 501.117800][ T80] vhci_hcd: disconnect device [ 501.336115][T13140] vhci_hcd: connection closed [ 501.336640][ T12] vhci_hcd: stop threads [ 501.340361][ T12] vhci_hcd: release socket [ 501.346790][ T12] vhci_hcd: disconnect device [ 501.557251][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 501.559750][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 501.705266][ T6066] usb 40-1: device descriptor read/8, error -110 [ 502.073191][T13161] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(12) [ 502.075479][T13161] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 502.078987][T13161] vhci_hcd vhci_hcd.0: Device attached [ 502.084993][T13161] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(14) [ 502.087672][T13161] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 502.090500][T13161] vhci_hcd vhci_hcd.0: Device attached [ 502.095669][T13161] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(16) [ 502.097749][T13161] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 502.100119][T13161] vhci_hcd vhci_hcd.0: Device attached [ 502.104786][T13161] vhci_hcd vhci_hcd.0: pdev(1) rhport(3) sockfd(19) [ 502.107569][T13161] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 502.109972][T13161] vhci_hcd vhci_hcd.0: Device attached [ 502.114434][T13161] vhci_hcd vhci_hcd.0: pdev(1) rhport(4) sockfd(21) [ 502.116794][T13161] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 502.120298][T13161] vhci_hcd vhci_hcd.0: Device attached [ 502.125372][T13161] vhci_hcd vhci_hcd.0: pdev(1) rhport(5) sockfd(23) [ 502.127965][T13161] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 502.130373][T13161] vhci_hcd vhci_hcd.0: Device attached [ 502.154276][T13172] vhci_hcd: connection closed [ 502.154810][ T168] vhci_hcd: stop threads [ 502.154891][T13164] vhci_hcd: connection closed [ 502.156839][ T168] vhci_hcd: release socket [ 502.158486][T13168] vhci_hcd: connection closed [ 502.158567][T13166] vhci_hcd: connection closed [ 502.165245][T13170] vhci_hcd: connection closed [ 502.167661][T13162] vhci_hcd: connection closed [ 502.170943][ T168] vhci_hcd: disconnect device [ 502.176707][ T168] vhci_hcd: stop threads [ 502.178832][ T168] vhci_hcd: release socket [ 502.180750][ T168] vhci_hcd: disconnect device [ 502.184184][ T168] vhci_hcd: stop threads [ 502.186081][ T168] vhci_hcd: release socket [ 502.189990][ T168] vhci_hcd: disconnect device [ 502.192133][ T168] vhci_hcd: stop threads [ 502.195236][ T168] vhci_hcd: release socket [ 502.197275][ T168] vhci_hcd: disconnect device [ 502.199441][ T168] vhci_hcd: stop threads [ 502.201399][ T168] vhci_hcd: release socket [ 502.204824][ T168] vhci_hcd: disconnect device [ 502.207341][ T168] vhci_hcd: stop threads [ 502.209101][ T168] vhci_hcd: release socket [ 502.211020][ T168] vhci_hcd: disconnect device [ 502.529198][ T6066] usb usb40-port1: attempt power cycle [ 502.771633][T13183] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1461'. [ 502.791427][T13184] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1469'. [ 502.914915][ T59] vhci_hcd: vhci_device speed not set [ 503.523097][T13196] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 503.983719][ T6066] usb usb40-port1: unable to enumerate USB device [ 504.786938][ T168] Bluetooth: Error in BCSP hdr checksum [ 505.045052][ T46] Bluetooth: Error in BCSP hdr checksum [ 505.072143][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 505.075636][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 505.107533][T13233] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1472'. [ 505.943470][ T53] usb 42-1: device descriptor read/8, error -110 [ 506.385360][ T53] usb usb42-port1: attempt power cycle [ 506.592921][ T5988] Bluetooth: hci4: command 0x1003 tx timeout [ 506.592938][ T5987] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 507.173344][ T53] usb usb42-port1: unable to enumerate USB device [ 508.011320][T13280] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1483'. [ 508.295459][T13283] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 508.854038][ T12] Bluetooth: Error in BCSP hdr checksum [ 509.114248][ T80] Bluetooth: Error in BCSP hdr checksum [ 509.415463][ T80] Bluetooth: Error in BCSP hdr checksum [ 510.304326][ T40] kauditd_printk_skb: 17 callbacks suppressed [ 510.304338][ T40] audit: type=1804 audit(1754980003.754:1683): pid=13312 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.1491" name="/newroot/379/bus/bus" dev="overlay" ino=2039 res=1 errno=0 [ 510.327339][ T40] audit: type=1804 audit(1754980003.774:1684): pid=13312 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1491" name="/newroot/379/bus/bus" dev="overlay" ino=2039 res=1 errno=0 [ 510.662815][ T5988] Bluetooth: hci4: command 0x1003 tx timeout [ 510.663511][ T5987] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 510.780365][T13327] overlayfs: failed to resolve './file0': -2 [ 511.057638][T13335] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1498'. [ 511.094573][T13337] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 511.245951][T13342] binder: 13340:13342 ioctl c00c620f 80000740 returned -22 [ 511.383377][T13347] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 511.852814][T13361] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1503'. [ 511.923115][T13348] cgroup: fork rejected by pids controller in /syz2 [ 512.787040][T13492] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 512.795886][T13492] batadv_slave_0: entered promiscuous mode [ 513.112507][ T53] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 513.304795][ T53] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 513.333131][ T53] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 513.365542][ T53] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 513.417304][ T53] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 513.454370][T13491] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 513.461994][ T53] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 513.669242][ T59] usb 6-1: USB disconnect, device number 4 [ 514.649870][ T168] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 514.652609][ T168] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 515.423019][T13524] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 516.517667][T13639] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1516'. [ 516.877621][T13641] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1517'. [ 516.881236][T13641] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1517'. [ 516.885785][T13641] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1517'. [ 517.886002][T13662] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1522'. [ 518.104012][T13664] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 518.153343][T13667] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 518.541907][T13672] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 518.712062][T13672] sctp_transport_update_pmtu: 47 callbacks suppressed [ 518.712078][T13672] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 518.719734][T13672] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 518.723613][T13672] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 518.727366][T13672] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 518.730986][T13672] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 518.735871][T13672] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 518.739310][T13672] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 518.743135][T13672] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 518.749231][T13672] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 518.754295][T13672] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 519.109083][T13691] vivid-007: ================= START STATUS ================= [ 519.111875][T13691] vivid-007: Enable Output Cropping: true [ 519.114481][T13691] vivid-007: Enable Output Composing: true [ 519.117351][T13691] vivid-007: Enable Output Scaler: true [ 519.119984][T13691] vivid-007: Tx RGB Quantization Range: Automatic [ 519.122847][T13691] vivid-007: Transmit Mode: HDMI [ 519.125144][T13691] vivid-007: Hotplug Present: 0x00000000 [ 519.127618][T13691] vivid-007: RxSense Present: 0x00000000 [ 519.130051][T13691] vivid-007: EDID Present: 0x00000000 [ 519.132487][T13691] vivid-007: ================== END STATUS ================== [ 520.648287][T13728] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 520.648314][T13727] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 520.651064][T13728] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 520.661040][T13728] vhci_hcd vhci_hcd.0: Device attached [ 520.912252][ T53] usb 41-1: new low-speed USB device number 3 using vhci_hcd [ 521.156910][T13743] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1543'. [ 521.216350][T13729] vhci_hcd: connection reset by peer [ 521.221670][ T1163] vhci_hcd: stop threads [ 521.227144][ T1163] vhci_hcd: release socket [ 521.229352][ T1163] vhci_hcd: disconnect device [ 521.597658][T13752] usb 2-1: USB disconnect, device number 2 [ 521.710831][T13754] hub 2-0:1.0: USB hub found [ 521.719126][T13754] hub 2-0:1.0: 6 ports detected [ 521.893499][T13755] wireguard0: entered promiscuous mode [ 521.895654][T13755] wireguard0: entered allmulticast mode [ 521.902093][ T9] usb 2-1: new high-speed USB device number 3 using ehci-pci [ 522.070570][T13760] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 522.086197][ T9] usb 2-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00 [ 522.089386][ T9] usb 2-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10 [ 522.098406][ T9] usb 2-1: Product: QEMU USB Tablet [ 522.102246][ T9] usb 2-1: Manufacturer: QEMU [ 522.103861][ T9] usb 2-1: SerialNumber: 28754-0000:00:1d.7-1 [ 522.149583][ T9] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.7/usb2/2-1/2-1:1.0/0003:0627:0001.0003/input/input11 [ 522.224240][ T9] hid-generic 0003:0627:0001.0003: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.7-1/input0 [ 522.578369][T13770] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1548'. [ 522.655874][T13770] capability: warning: `syz.2.1548' uses deprecated v2 capabilities in a way that may be insecure [ 523.065847][T13782] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 523.862559][T13909] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1554'. [ 523.889694][T13910] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 523.892229][T13912] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1558'. [ 523.895802][T13910] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 523.899643][T13910] vhci_hcd vhci_hcd.0: Device attached [ 524.039763][T13910] netdevsim netdevsim3: Direct firmware load for @ failed with error -2 [ 524.044848][T13910] netdevsim netdevsim3: Falling back to sysfs fallback for: @ [ 524.362657][ T6066] usb 43-1: new low-speed USB device number 4 using vhci_hcd [ 524.755195][T13922] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1561'. [ 525.162772][T13913] vhci_hcd: connection reset by peer [ 525.167891][ T61] vhci_hcd: stop threads [ 525.169253][ T61] vhci_hcd: release socket [ 525.172251][ T61] vhci_hcd: disconnect device [ 525.268219][T13933] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 526.042521][ T53] vhci_hcd: vhci_device speed not set [ 527.112312][T14163] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1569'. [ 527.190157][T14166] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 529.532274][T14490] ptrace attach of ""[14491] was attempted by "/syz-executor exec"[14490] [ 530.562060][T14516] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1583'. [ 530.692831][T14551] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1584'. [ 530.693581][ T6066] vhci_hcd: vhci_device speed not set [ 530.844386][T14624] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 531.473621][T14675] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 531.476966][T14675] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 531.481728][T14675] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 531.483856][T14675] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 531.486334][T14675] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 531.503579][T14675] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 533.304210][ T5988] Bluetooth: hci1: command 0x0406 tx timeout [ 533.385129][T15070] netlink: 148 bytes leftover after parsing attributes in process `syz.4.1598'. [ 533.445359][T15281] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 533.541450][ T5987] Bluetooth: hci3: command 0x0405 tx timeout [ 533.543530][ T5988] Bluetooth: hci0: command 0x0405 tx timeout [ 533.551556][ T5988] Bluetooth: hci2: command 0x0406 tx timeout [ 533.749153][T15489] input: syz1 as /devices/virtual/input/input12 [ 533.781253][ T40] audit: type=1326 audit(1754980027.216:1685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15485 comm="syz.3.1604" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf710e579 code=0x7ffc0000 [ 533.799182][ T40] audit: type=1326 audit(1754980027.216:1686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15485 comm="syz.3.1604" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf710e5a7 code=0x7ffc0000 [ 533.809644][ T40] audit: type=1326 audit(1754980027.216:1687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15485 comm="syz.3.1604" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e579 code=0x7ffc0000 [ 533.818657][ T40] audit: type=1326 audit(1754980027.226:1688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15485 comm="syz.3.1604" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf710e579 code=0x7ffc0000 [ 533.828868][ T40] audit: type=1326 audit(1754980027.226:1689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15485 comm="syz.3.1604" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf710e5a7 code=0x7ffc0000 [ 533.837512][ T40] audit: type=1326 audit(1754980027.226:1690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15485 comm="syz.3.1604" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e579 code=0x7ffc0000 [ 533.846130][ T40] audit: type=1326 audit(1754980027.226:1691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15485 comm="syz.3.1604" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e579 code=0x7ffc0000 [ 533.853840][ T40] audit: type=1326 audit(1754980027.226:1692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15485 comm="syz.3.1604" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e579 code=0x7ffc0000 [ 533.860841][ T40] audit: type=1326 audit(1754980027.226:1693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15485 comm="syz.3.1604" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e579 code=0x7ffc0000 [ 533.869122][ T40] audit: type=1326 audit(1754980027.226:1694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15485 comm="syz.3.1604" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e579 code=0x7ffc0000 [ 534.353051][T15488] input: syz1 as /devices/virtual/input/input13 [ 535.077133][T15488] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 535.207046][T16112] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 535.209661][T16112] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 535.215548][T16112] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 535.217903][T16112] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 535.333832][T16218] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 536.403918][T16544] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 536.583821][T16544] sctp_transport_update_pmtu: 161 callbacks suppressed [ 536.583835][T16544] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 536.589281][T16544] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 536.592955][T16544] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 536.596656][T16544] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 536.600040][T16544] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 536.604623][T16544] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 536.608501][T16544] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 536.612475][T16544] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 536.616088][T16544] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 536.619431][T16544] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 536.764302][T16654] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 537.222736][ T5988] Bluetooth: hci0: command 0x0405 tx timeout [ 537.224833][ T5988] Bluetooth: hci3: command 0x0405 tx timeout [ 537.226822][ T5988] Bluetooth: hci2: command 0x0406 tx timeout [ 537.228777][ T5988] Bluetooth: hci1: command 0x0406 tx timeout [ 537.813896][T17085] netlink: 'syz.2.1633': attribute type 11 has an invalid length. [ 537.816504][T17085] netlink: 228 bytes leftover after parsing attributes in process `syz.2.1633'. [ 538.039538][T16862] evm: overlay not supported [ 538.979275][T17715] bridge1: entered promiscuous mode [ 539.301171][ T5988] Bluetooth: hci0: command 0x0405 tx timeout [ 539.916992][T18235] netlink: zone id is out of range [ 539.918646][T18235] netlink: zone id is out of range [ 539.920364][T18235] netlink: zone id is out of range [ 539.922403][T18235] netlink: del zone limit has 4 unknown bytes [ 539.935707][ T5988] Bluetooth: hci0: unexpected event for opcode 0x2024 [ 540.418645][T18445] netlink: 'syz.4.1653': attribute type 11 has an invalid length. [ 540.421858][T18445] netlink: 228 bytes leftover after parsing attributes in process `syz.4.1653'. [ 540.515473][T18450] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 541.032022][ T40] kauditd_printk_skb: 4302 callbacks suppressed [ 541.032039][ T40] audit: type=1326 audit(1754980034.476:5997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18665 comm="syz.2.1660" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f07579 code=0x7ffc0000 [ 541.041588][ T40] audit: type=1326 audit(1754980034.476:5998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18665 comm="syz.2.1660" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f07579 code=0x7ffc0000 [ 541.049430][ T40] audit: type=1326 audit(1754980034.476:5999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18665 comm="syz.2.1660" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f07579 code=0x7ffc0000 [ 541.058209][ T40] audit: type=1326 audit(1754980034.476:6000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18665 comm="syz.2.1660" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf7f07579 code=0x7ffc0000 [ 541.067594][ T40] audit: type=1326 audit(1754980034.476:6001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18665 comm="syz.2.1660" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf7f075a7 code=0x7ffc0000 [ 541.077337][ T40] audit: type=1326 audit(1754980034.476:6002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18665 comm="syz.2.1660" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf7f07579 code=0x7ffc0000 [ 541.088580][ T40] audit: type=1326 audit(1754980034.476:6003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18665 comm="syz.2.1660" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf7f075a7 code=0x7ffc0000 [ 541.097498][ T40] audit: type=1326 audit(1754980034.476:6004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18665 comm="syz.2.1660" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf7f07579 code=0x7ffc0000 [ 541.107257][ T40] audit: type=1326 audit(1754980034.476:6005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18665 comm="syz.2.1660" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf7f075a7 code=0x7ffc0000 [ 541.115644][ T40] audit: type=1326 audit(1754980034.476:6006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18665 comm="syz.2.1660" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf7f07579 code=0x7ffc0000 [ 541.378588][T18666] input: syz1 as /devices/virtual/input/input14 [ 541.451315][T18666] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 541.937980][T18888] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 542.240694][ T53] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 542.531084][ T53] usb 8-1: Using ep0 maxpacket: 32 [ 542.655442][ T53] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 542.660460][ T53] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 542.664618][ T53] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 542.669578][ T53] usb 8-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 542.674320][ T53] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 542.716125][ T53] usb 8-1: config 0 descriptor?? [ 543.044491][ T53] usbhid 8-1:0.0: can't add hid device: -71 [ 543.046692][ T53] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 543.056989][ T53] usb 8-1: USB disconnect, device number 2 [ 543.170944][ T59] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 543.331639][ T60] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 543.343103][ T59] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 543.347866][ T59] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 543.352673][ T59] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 543.356948][ T59] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 543.362140][ T59] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 543.365199][ T59] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 543.370709][ T59] usb 7-1: config 0 descriptor?? [ 543.462036][ T60] usb 6-1: device descriptor read/64, error -71 [ 543.701189][ T60] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 543.831444][ T60] usb 6-1: device descriptor read/64, error -71 [ 543.952095][ T60] usb usb6-port1: attempt power cycle [ 544.449974][ T59] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 544.510816][ T60] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 544.518371][ T24] usb 7-1: USB disconnect, device number 5 [ 544.541887][ T60] usb 6-1: device descriptor read/8, error -71 [ 544.790904][ T60] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 544.833065][ T60] usb 6-1: device descriptor read/8, error -71 [ 544.972234][ T60] usb usb6-port1: unable to enumerate USB device [ 545.041910][T19749] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(9) [ 545.044534][T19749] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 545.048690][T19749] vhci_hcd vhci_hcd.0: Device attached [ 545.055249][T19749] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(11) [ 545.057996][T19749] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 545.062877][T19749] vhci_hcd vhci_hcd.0: Device attached [ 545.066132][T19749] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 545.071557][T19749] vhci_hcd vhci_hcd.0: pdev(4) rhport(3) sockfd(15) [ 545.074296][T19749] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 545.077453][T19749] vhci_hcd vhci_hcd.0: Device attached [ 545.083746][T19749] vhci_hcd vhci_hcd.0: pdev(4) rhport(4) sockfd(17) [ 545.086096][T19749] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 545.089042][T19749] vhci_hcd vhci_hcd.0: Device attached [ 545.095649][T19749] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(19) [ 545.098372][T19749] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 545.101213][T19749] vhci_hcd vhci_hcd.0: Device attached [ 545.104352][T19749] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 545.107713][T19749] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 545.111362][T19749] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 545.121159][T19749] vhci_hcd vhci_hcd.0: port 0 already used [ 545.155901][T19821] vhci_hcd: connection closed [ 545.156801][T19752] vhci_hcd: connection closed [ 545.160377][T19858] vhci_hcd: connection closed [ 545.166111][ T6181] vhci_hcd: stop threads [ 545.169325][ T6181] vhci_hcd: release socket [ 545.169583][T19782] vhci_hcd: connection closed [ 545.171031][ T6181] vhci_hcd: disconnect device [ 545.171478][T19750] vhci_hcd: connection closed [ 545.184053][ T6181] vhci_hcd: stop threads [ 545.187882][ T6181] vhci_hcd: release socket [ 545.190270][ T6181] vhci_hcd: disconnect device [ 545.221157][ T59] vhci_hcd: vhci_device speed not set [ 545.224065][ T6181] vhci_hcd: stop threads [ 545.225868][ T6181] vhci_hcd: release socket [ 545.227891][ T6181] vhci_hcd: disconnect device [ 545.231144][ T6181] vhci_hcd: stop threads [ 545.233223][ T6181] vhci_hcd: release socket [ 545.235320][ T6181] vhci_hcd: disconnect device [ 545.237593][ T6181] vhci_hcd: stop threads [ 545.239668][ T6181] vhci_hcd: release socket [ 545.242833][ T6181] vhci_hcd: disconnect device [ 545.280766][ T59] usb 45-1: new full-speed USB device number 3 using vhci_hcd [ 545.283831][ T59] usb 45-1: enqueue for inactive port 0 [ 545.350784][ T59] vhci_hcd: vhci_device speed not set [ 545.682023][T20173] netlink: 5 bytes leftover after parsing attributes in process `syz.3.1687'. [ 545.686245][T20173] 0XD: renamed from macvtap0 (while UP) [ 545.711253][T20173] 0XD: entered allmulticast mode [ 545.720393][T20173] veth0_macvtap: entered allmulticast mode [ 545.723465][T20173] A link change request failed with some changes committed already. Interface 30XD may have been left with an inconsistent configuration, please check. [ 547.362394][T20612] vlan2: entered promiscuous mode [ 547.364100][T20612] bridge0: entered promiscuous mode [ 547.428494][T20694] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 548.120824][ T24] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 548.355283][T20714] sctp_transport_update_pmtu: 47 callbacks suppressed [ 548.355298][T20714] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 548.366019][T20714] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 548.369410][T20714] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 548.379785][T20714] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 548.380640][ T24] usb 6-1: device descriptor read/64, error -71 [ 548.384154][T20714] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 548.389925][T20714] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 548.395380][T20714] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 548.399657][T20714] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 548.403555][T20714] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 548.407814][T20714] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 548.710174][T20927] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1702'. [ 549.237348][T21136] netlink: 'syz.4.1706': attribute type 11 has an invalid length. [ 549.292770][T21136] ISOFS: Unable to identify CD-ROM format. [ 550.003022][ T24] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 550.240673][ T24] usb 6-1: device descriptor read/64, error -71 [ 550.364517][ T24] usb usb6-port1: attempt power cycle [ 550.451119][T21557] sg_write: data in/out 41084/1 bytes for SCSI command 0x1c-- guessing data in; [ 550.451119][T21557] program syz.3.1715 not setting count and/or reply_len properly [ 550.842527][T21775] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1715'. [ 550.849628][T21775] batadv1: entered allmulticast mode [ 550.857876][T21775] input: syz1 as /devices/virtual/input/input16 [ 552.961988][T22511] fuse: Unknown parameter '00000000000000000000' [ 553.212902][T22639] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 553.246700][T22636] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1733'. [ 553.444226][T22742] sctp_transport_update_pmtu: 47 callbacks suppressed [ 553.444272][T22742] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 553.448781][T22748] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1737'. [ 553.451536][T22742] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 553.472075][T22742] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 553.480117][T22742] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 553.486659][T22742] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 553.491646][T22742] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 553.516117][T22821] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1737'. [ 553.526963][T22742] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 553.548509][T22748] netlink: 109 bytes leftover after parsing attributes in process `syz.1.1737'. [ 553.577837][T22742] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 553.582349][T22742] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 553.587504][T22742] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 554.663683][T23492] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 555.710142][ T24] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 555.874993][ T24] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 555.879417][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 555.884167][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 555.887462][ T24] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 555.892025][ T24] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 555.895042][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 555.903632][ T24] usb 6-1: config 0 descriptor?? [ 555.920039][ T40] kauditd_printk_skb: 1731 callbacks suppressed [ 555.923329][ T40] audit: type=1800 audit(1754980049.357:7738): pid=23954 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.4.1758" name="/" dev="sockfs" ino=45351 res=0 errno=0 [ 556.120821][T24027] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 556.402530][ T24] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 557.064830][T24340] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 557.871321][ T59] usb 6-1: reset high-speed USB device number 12 using dummy_hcd [ 557.930553][T24556] overlayfs: missing 'lowerdir' [ 558.324001][ T40] audit: type=1326 audit(1754980051.737:7739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24558 comm="syz.3.1769" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e579 code=0x7ffc0000 [ 558.349191][ T40] audit: type=1326 audit(1754980051.737:7740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24558 comm="syz.3.1769" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e579 code=0x7ffc0000 [ 558.384644][ T40] audit: type=1326 audit(1754980051.737:7741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24558 comm="syz.3.1769" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf710e579 code=0x7ffc0000 [ 558.429352][ T40] audit: type=1326 audit(1754980051.737:7742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24558 comm="syz.3.1769" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e579 code=0x7ffc0000 [ 558.463149][ T40] audit: type=1326 audit(1754980051.737:7743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24558 comm="syz.3.1769" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e579 code=0x7ffc0000 [ 558.486886][ T40] audit: type=1326 audit(1754980051.737:7744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24558 comm="syz.3.1769" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf710e579 code=0x7ffc0000 [ 558.524419][ T40] audit: type=1326 audit(1754980051.737:7745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24558 comm="syz.3.1769" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e579 code=0x7ffc0000 [ 558.610030][ T40] audit: type=1326 audit(1754980051.737:7746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24558 comm="syz.3.1769" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e579 code=0x7ffc0000 [ 558.639155][ T40] audit: type=1326 audit(1754980051.737:7747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24558 comm="syz.3.1769" exe="/syz-executor" sig=0 arch=40000003 syscall=445 compat=1 ip=0xf710e579 code=0x7ffc0000 [ 559.390407][T24767] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1771'. [ 559.454039][ T34] usb 6-1: USB disconnect, device number 12 [ 561.458686][T25120] 9pnet_virtio: no channels available for device syz [ 562.528059][ T1417] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.530192][ T1417] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.047961][T26167] smc: net device bond0 applied user defined pnetid SYZ2 [ 563.052089][T26167] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1798'. [ 563.068816][T26167] smc: removing net device bond0 with user defined pnetid SYZ2 [ 563.074527][T26167] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 563.079476][T26167] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 563.083109][T26167] bond0 (unregistering): Released all slaves [ 563.263431][T26274] loop6: detected capacity change from 0 to 63 [ 563.275590][T12645] buffer_io_error: 4331 callbacks suppressed [ 563.275601][T12645] Buffer I/O error on dev loop6, logical block 0, async page read [ 563.290369][T26274] Buffer I/O error on dev loop6, logical block 0, async page read [ 563.293436][T12645] Buffer I/O error on dev loop6, logical block 0, async page read [ 563.296608][T12645] Buffer I/O error on dev loop6, logical block 0, async page read [ 563.299435][T12645] Buffer I/O error on dev loop6, logical block 0, async page read [ 563.309929][T26274] Buffer I/O error on dev loop6, logical block 0, async page read [ 563.312529][T26274] Buffer I/O error on dev loop6, logical block 0, async page read [ 563.391637][T26274] Buffer I/O error on dev loop6, logical block 0, async page read [ 563.404371][T26274] Buffer I/O error on dev loop6, logical block 0, async page read [ 563.406805][T26274] Buffer I/O error on dev loop6, logical block 0, async page read [ 564.165601][T26587] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1805'. [ 564.296417][T26591] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 564.677832][T26693] sctp_transport_update_pmtu: 104 callbacks suppressed [ 564.677847][T26693] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 564.685717][T26693] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 564.689468][T26693] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 564.696053][T26693] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 564.700219][T26693] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 564.705685][T26693] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 564.709356][T26693] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 564.713903][T26693] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 564.717427][T26693] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 564.722486][T26693] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 564.913204][T26814] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(11) [ 564.915335][T26814] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 564.917822][T26814] vhci_hcd vhci_hcd.0: Device attached [ 565.190068][ T34] usb 43-1: new high-speed USB device number 5 using vhci_hcd [ 565.952007][T26815] vhci_hcd: connection reset by peer [ 565.954556][T13477] vhci_hcd: stop threads [ 565.956399][T13477] vhci_hcd: release socket [ 565.958516][T13477] vhci_hcd: disconnect device [ 566.839586][T27438] 9pnet_virtio: no channels available for device syz [ 567.123962][T27544] team0: left allmulticast mode [ 567.125597][T27544] vlan0: left allmulticast mode [ 567.127176][T27544] veth0_vlan: left allmulticast mode [ 567.128949][T27544] team0: left promiscuous mode [ 567.131395][T27544] bridge0: port 1(team0) entered disabled state [ 567.262153][T27547] netlink: 'syz.3.1819': attribute type 10 has an invalid length. [ 567.263019][T27544] team0: Port device vlan0 removed [ 567.320033][ T1163] tipc: Resetting bearer [ 567.328838][T27551] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1819'. [ 567.337756][T27546] team0: Mode changed to "loadbalance" [ 567.376018][T27547] 8021q: adding VLAN 0 to HW filter on device bond0 [ 567.379122][T27547] team0: Port device bond0 added [ 567.383352][T27551] tipc: Resetting bearer [ 567.878879][T27551] tipc: Disabling bearer [ 567.885859][T27551] team0 (unregistering): Port device bond0 removed [ 568.074305][T27760] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1825'. [ 568.684709][T28081] netlink: 'syz.1.1831': attribute type 11 has an invalid length. [ 568.715570][T28081] ISOFS: Unable to identify CD-ROM format. [ 568.921600][T28287] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1836'. [ 568.934530][T28287] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1836'. [ 569.817827][T28503] 8021q: VLANs not supported on vxcan1 [ 570.329332][ T34] vhci_hcd: vhci_device speed not set [ 570.746492][T28930] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 571.655175][T29551] dlm: plock device version mismatch: kernel (1.2.0), user (0.0.0) [ 572.190716][T29762] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 572.687487][T29869] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 572.785269][T29871] netlink: 'syz.3.1864': attribute type 10 has an invalid length. [ 573.588097][T29979] netlink: 'syz.4.1868': attribute type 1 has an invalid length. [ 573.624232][T29979] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 573.644397][T29979] 8021q: adding VLAN 0 to HW filter on device bond1 [ 573.645768][ T1163] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 573.947016][T29979] bond1 (unregistering): (slave ip6gretap1): Removing an active aggregator [ 573.951239][T29979] bond1 (unregistering): (slave ip6gretap1): Releasing backup interface [ 573.958151][T29979] bond1 (unregistering): Released all slaves [ 573.968693][T30169] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1871'. [ 573.970339][T30171] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1870'. [ 573.971927][T30169] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1871'. [ 574.268197][T30301] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1874'. [ 575.290764][T30683] loop9: detected capacity change from 0 to 7 [ 575.876573][T30683] Dev loop9: unable to read RDB block 7 [ 575.879388][T30683] loop9: unable to read partition table [ 575.882407][T30683] loop9: partition table beyond EOD, truncated [ 575.885162][T30683] loop_reread_partitions: partition scan of loop9 (被x ) failed (rc=-5) [ 576.383162][T30828] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1884'. [ 576.777759][T30727] cgroup: fork rejected by pids controller in /syz1 [ 576.886983][T30827] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 577.205022][T30954] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1885'. [ 577.993492][T31174] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 578.160703][T31204] sctp_transport_update_pmtu: 47 callbacks suppressed [ 578.160717][T31204] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 578.166301][T31204] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 578.170105][T31204] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 578.173880][T31204] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 578.193437][T31204] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 578.196972][T31204] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 578.209538][T31204] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 578.212954][T31204] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 578.216347][T31204] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 578.221509][T31204] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 580.326380][T31631] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1904'. [ 580.803937][T31726] loop6: detected capacity change from 0 to 524287999 [ 581.133615][T31725] netlink: 'syz.4.1905': attribute type 12 has an invalid length. [ 581.517661][T31735] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1908'. [ 582.567421][T31745] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 583.057135][T31760] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1914'. [ 586.169153][ T652] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 586.385943][ T766] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 586.388122][ T766] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 586.391776][ T766] vhci_hcd vhci_hcd.0: Device attached [ 586.968424][ T6040] usb 44-1: SetAddress Request (6) to port 0 [ 586.970590][ T6040] usb 44-1: new SuperSpeed USB device number 6 using vhci_hcd [ 587.137278][ T657] fuse: Unknown parameter 'fd0x000000000000000c' [ 588.141802][ T767] vhci_hcd: connection reset by peer [ 588.144476][ T168] vhci_hcd: stop threads [ 588.146362][ T168] vhci_hcd: release socket [ 588.148555][ T168] vhci_hcd: disconnect device [ 589.577500][ T905] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1949'. [ 589.702890][ T917] netlink: 'syz.4.1959': attribute type 4 has an invalid length. [ 590.309108][ T1121] sr 2:0:0:0: [sr0] tag#15 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 590.312555][ T1121] sr 2:0:0:0: [sr0] tag#15 Sense Key : Illegal Request [current] [ 590.314718][ T1121] sr 2:0:0:0: [sr0] tag#15 Add. Sense: Invalid command operation code [ 590.317580][ T1121] sr 2:0:0:0: [sr0] tag#15 CDB: Write(10) 2a 00 00 00 00 00 00 00 04 00 [ 590.327460][ T1121] critical target error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 2 prio class 1 [ 590.338561][ T1121] buffer_io_error: 8681 callbacks suppressed [ 590.338581][ T1121] Buffer I/O error on dev sr0, logical block 0, lost async page write [ 590.344873][ T1121] Buffer I/O error on dev sr0, logical block 1, lost async page write [ 592.021473][ T6040] usb 44-1: device descriptor read/8, error -110 [ 592.468995][ T6040] usb usb44-port1: attempt power cycle [ 592.904779][ T1454] Process accounting resumed [ 593.059100][ T6040] usb usb44-port1: unable to enumerate USB device [ 593.123096][ T1531] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 593.974180][ T1948] ata1.00: invalid multi_count 1 ignored [ 594.121977][ T2056] team0: left allmulticast mode [ 594.123796][ T2056] team_slave_0: left allmulticast mode [ 594.179107][ T2056] team_slave_1: left allmulticast mode [ 594.181277][ T2056] bridge0: port 3(team0) entered disabled state [ 594.195604][ T59] hid-generic 00A0:0008:0003.0006: unknown main item tag 0x7 [ 594.208036][ T59] hid-generic 00A0:0008:0003.0006: item fetching failed at offset 14/15 [ 594.282026][ T59] hid-generic 00A0:0008:0003.0006: probe with driver hid-generic failed with error -22 [ 594.302501][ T2161] netlink: 'syz.1.1974': attribute type 10 has an invalid length. [ 594.777441][ T2056] bridge_slave_0: left allmulticast mode [ 594.779913][ T2056] bridge_slave_0: left promiscuous mode [ 594.783690][ T2056] bridge0: port 1(bridge_slave_0) entered disabled state [ 595.013928][ T2056] bridge_slave_1: left allmulticast mode [ 595.015994][ T2056] bridge_slave_1: left promiscuous mode [ 595.018468][ T2056] bridge0: port 2(bridge_slave_1) entered disabled state [ 595.037700][ T2056] bond0: (slave bond_slave_0): Releasing backup interface [ 595.045645][ T2056] bond0: (slave bond_slave_1): Releasing backup interface [ 595.052170][ T2056] team_slave_0: left promiscuous mode [ 595.063340][ T2056] team0: Port device team_slave_0 removed [ 595.066382][ T2056] team_slave_1: left promiscuous mode [ 595.074967][ T2056] team0: Port device team_slave_1 removed [ 595.080590][ T2056] bond0: (slave wlan1): Releasing backup interface [ 595.094235][ T2060] team0: Mode changed to "loadbalance" [ 595.130509][ T2161] 8021q: adding VLAN 0 to HW filter on device bond0 [ 595.136355][ T2161] bond0: entered promiscuous mode [ 595.140490][ T2161] team0: Port device bond0 added [ 595.160568][ T6040] syz1: Port: 1 Link DOWN [ 597.805760][ T3650] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1995'. [ 598.231702][ T3650] NILFS (nullb0): couldn't find nilfs on the device [ 599.544141][ T4262] netlink: 'syz.1.2004': attribute type 10 has an invalid length. [ 599.924137][ T4264] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 599.928580][ T4264] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 600.308235][T12483] hid-generic 0005:0007:0007.0007: reserved main item tag 0xd [ 600.318771][T12483] hid-generic 0005:0007:0007.0007: unexpected long global item [ 600.319374][ T4348] netlink: 372 bytes leftover after parsing attributes in process `syz.3.2008'. [ 600.321451][T12483] hid-generic 0005:0007:0007.0007: probe with driver hid-generic failed with error -22 [ 601.000493][ T6040] libceph: connect (1)[c::]:6789 error -101 [ 601.004239][ T6040] libceph: mon0 (1)[c::]:6789 connect error [ 601.222726][ T4385] ceph: No mds server is up or the cluster is laggy [ 605.862704][ T6284] siw: device registration error -23 [ 605.896468][ T6284] mkiss: ax0: crc mode is auto. [ 607.296062][ T6398] netlink: 216 bytes leftover after parsing attributes in process `syz.4.2042'. [ 607.300668][ T6398] netlink: 216 bytes leftover after parsing attributes in process `syz.4.2042'. [ 607.396704][ T59] hid-generic 0000:7FFFFFFF:0000.0008: unknown main item tag 0x4 [ 607.400683][ T59] hid-generic 0000:7FFFFFFF:0000.0008: unknown main item tag 0x0 [ 607.403365][ T59] hid-generic 0000:7FFFFFFF:0000.0008: unknown main item tag 0x1 [ 607.416868][ T59] hid-generic 0000:7FFFFFFF:0000.0008: hidraw1: HID v0.00 Device [syz0] on syz1 [ 607.468652][ T6404] fido_id[6404]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 607.717306][ T6491] netlink: 112 bytes leftover after parsing attributes in process `syz.4.2045'. [ 608.096154][ T6512] ata1.00: invalid multi_count 1 ignored [ 608.221500][ T34] hid-generic 00A0:0008:0003.0009: unknown main item tag 0x7 [ 608.277360][ T34] hid-generic 00A0:0008:0003.0009: item fetching failed at offset 14/15 [ 608.281362][ T34] hid-generic 00A0:0008:0003.0009: probe with driver hid-generic failed with error -22 [ 608.410222][ T6516] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2047'. [ 608.467371][ T6516] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2047'. [ 609.093235][ T6627] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 609.749590][ T6636] sctp_transport_update_pmtu: 46 callbacks suppressed [ 609.749604][ T6636] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 609.805301][ T6636] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 609.809848][ T6636] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 609.814149][ T6636] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 609.824573][ T6636] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 609.828458][ T6636] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 609.834769][ T6636] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 609.838573][ T6636] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 609.844960][ T6636] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 609.848909][ T6636] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 609.865738][ T6640] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 610.151722][ T6644] random: crng reseeded on system resumption [ 611.121050][ T6649] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 611.159877][ T6651] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 611.164130][ T6651] overlayfs: failed to set xattr on upper [ 611.166789][ T6651] overlayfs: ...falling back to redirect_dir=nofollow. [ 611.169697][ T6651] overlayfs: ...falling back to index=off. [ 611.172022][ T6651] overlayfs: ...falling back to uuid=null. [ 611.349515][ T6757] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.2058'. [ 611.358969][ T6756] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.2058'. [ 611.583984][ T6871] netlink: 216 bytes leftover after parsing attributes in process `syz.4.2063'. [ 611.649414][ T6917] overlayfs: failed to clone upperpath [ 611.678977][ T6871] netlink: 216 bytes leftover after parsing attributes in process `syz.4.2063'. [ 612.054963][ T7082] netlink: 216 bytes leftover after parsing attributes in process `syz.4.2068'. [ 612.698625][ T7298] ata1.00: invalid multi_count 1 ignored [ 612.750087][ T7302] __nla_validate_parse: 1 callbacks suppressed [ 612.750108][ T7302] netlink: 216 bytes leftover after parsing attributes in process `syz.2.2074'. [ 612.757267][ T7302] netlink: 216 bytes leftover after parsing attributes in process `syz.2.2074'. [ 612.794062][ T7299] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2070'. [ 612.813763][ T7191] could not allocate digest TFM handle sha1-generic [ 612.890406][ T53] hid-generic 00A0:0008:0003.000A: unknown main item tag 0x7 [ 612.897164][ T53] hid-generic 00A0:0008:0003.000A: item fetching failed at offset 14/15 [ 612.905239][ T53] hid-generic 00A0:0008:0003.000A: probe with driver hid-generic failed with error -22 [ 613.048213][ T7411] ata1.00: invalid multi_count 1 ignored [ 613.380437][ T7621] loop7: detected capacity change from 0 to 7 [ 613.507268][ T7621] Dev loop7: unable to read RDB block 7 [ 613.509867][ T7621] loop7: unable to read partition table [ 613.512533][ T7621] loop7: partition table beyond EOD, truncated [ 613.515307][ T7621] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 613.694639][ T7647] ceph: No mds server is up or the cluster is laggy [ 614.038205][ T8043] bridge_slave_0: left allmulticast mode [ 614.040271][ T8043] bridge_slave_0: left promiscuous mode [ 614.042557][ T8043] bridge0: port 1(bridge_slave_0) entered disabled state [ 614.061887][ T8048] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 614.088849][ T8043] bridge_slave_1: left allmulticast mode [ 614.091863][ T8043] bridge_slave_1: left promiscuous mode [ 614.094450][ T8043] bridge0: port 2(bridge_slave_1) entered disabled state [ 614.102807][ T8043] bond0: (slave bond_slave_0): Releasing backup interface [ 614.114449][ T8043] bond0: (slave bond_slave_1): Releasing backup interface [ 614.132438][ T8043] team0: Port device team_slave_0 removed [ 614.145642][ T8043] team0: Port device team_slave_1 removed [ 614.152873][ T8043] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 614.156997][ T24] hid-generic 00A0:0008:0003.000B: unknown main item tag 0x0 [ 614.158111][ T8150] netlink: 'syz.4.2083': attribute type 10 has an invalid length. [ 614.159416][ T24] hid-generic 00A0:0008:0003.000B: unknown main item tag 0x0 [ 614.164869][ T24] hid-generic 00A0:0008:0003.000B: unknown main item tag 0x0 [ 614.166392][ T8043] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 614.169346][ T24] hid-generic 00A0:0008:0003.000B: unknown main item tag 0x0 [ 614.170152][ T8043] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 614.174488][ T24] hid-generic 00A0:0008:0003.000B: unknown main item tag 0x0 [ 614.179041][ T24] hid-generic 00A0:0008:0003.000B: unknown main item tag 0x0 [ 614.185738][ T24] hid-generic 00A0:0008:0003.000B: unknown main item tag 0x0 [ 614.189467][ T24] hid-generic 00A0:0008:0003.000B: unknown main item tag 0x0 [ 614.194980][ T24] hid-generic 00A0:0008:0003.000B: unknown main item tag 0x0 [ 614.201922][ T8146] team0: Mode changed to "loadbalance" [ 614.204260][ T24] hid-generic 00A0:0008:0003.000B: hidraw1: HID v0.05 Device [syz1] on syz0 [ 614.241772][ T8150] 8021q: adding VLAN 0 to HW filter on device bond0 [ 614.251106][ T8150] team0: Port device bond0 added [ 614.266616][ T8151] fido_id[8151]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 615.385693][ T40] kauditd_printk_skb: 34 callbacks suppressed [ 615.385704][ T40] audit: type=1326 audit(1754980108.830:7782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8364 comm="syz.2.2091" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f07579 code=0x7ffc0000 [ 615.386875][ T8365] syz.2.2091 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 615.388797][ T40] audit: type=1326 audit(1754980108.830:7783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8364 comm="syz.2.2091" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f07579 code=0x7ffc0000 [ 615.406962][ T40] audit: type=1326 audit(1754980108.830:7784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8364 comm="syz.2.2091" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f07579 code=0x7ffc0000 [ 615.414362][ T40] audit: type=1326 audit(1754980108.830:7785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8364 comm="syz.2.2091" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f07579 code=0x7ffc0000 [ 615.422130][ T40] audit: type=1326 audit(1754980108.830:7786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8364 comm="syz.2.2091" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f07579 code=0x7ffc0000 [ 615.429802][ T40] audit: type=1326 audit(1754980108.840:7787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8364 comm="syz.2.2091" exe="/syz-executor" sig=0 arch=40000003 syscall=104 compat=1 ip=0xf7f07579 code=0x7ffc0000 [ 615.437246][ T40] audit: type=1326 audit(1754980108.840:7788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8364 comm="syz.2.2091" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f07579 code=0x7ffc0000 [ 615.444609][ T40] audit: type=1326 audit(1754980108.850:7789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8364 comm="syz.2.2091" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f07579 code=0x7ffc0000 [ 615.451172][ T40] audit: type=1326 audit(1754980108.850:7790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8364 comm="syz.2.2091" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f07579 code=0x7ffc0000 [ 615.458204][ T40] audit: type=1326 audit(1754980108.850:7791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8364 comm="syz.2.2091" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f07579 code=0x7ffc0000 [ 615.612440][ T8472] netlink: 216 bytes leftover after parsing attributes in process `syz.3.2093'. [ 615.615500][ T8472] netlink: 216 bytes leftover after parsing attributes in process `syz.3.2093'. [ 615.634819][ T24] hid-generic 0000:7FFFFFFF:0000.000C: hidraw1: HID v0.00 Device [syz0] on syz1 [ 615.698113][ T8476] fido_id[8476]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 617.899189][ T8932] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 618.259917][ T8935] ata1.00: invalid multi_count 1 ignored [ 618.372840][ T53] hid_parser_main: 9 callbacks suppressed [ 618.372861][ T53] hid-generic 00A0:0008:0003.000D: unknown main item tag 0x7 [ 618.383344][ T53] hid-generic 00A0:0008:0003.000D: item fetching failed at offset 14/15 [ 618.404607][ T53] hid-generic 00A0:0008:0003.000D: probe with driver hid-generic failed with error -22 [ 619.038655][ T9055] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 619.429922][ T9164] netlink: 216 bytes leftover after parsing attributes in process `syz.2.2118'. [ 619.433630][ T9164] netlink: 216 bytes leftover after parsing attributes in process `syz.2.2118'. [ 619.517686][ T59] hid-generic 0000:7FFFFFFF:0000.000E: unknown main item tag 0x4 [ 619.520221][ T59] hid-generic 0000:7FFFFFFF:0000.000E: unknown main item tag 0x0 [ 619.522738][ T59] hid-generic 0000:7FFFFFFF:0000.000E: unknown main item tag 0x1 [ 619.525962][ T59] hid-generic 0000:7FFFFFFF:0000.000E: hidraw1: HID v0.00 Device [syz0] on syz1 [ 619.570894][ T9166] fido_id[9166]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 620.145479][ T9497] ata1.00: invalid multi_count 1 ignored [ 620.815718][ T9937] netlink: 2 bytes leftover after parsing attributes in process `syz.2.2132'. [ 621.149345][T10046] ata1.00: invalid multi_count 1 ignored [ 621.695548][T10479] ata1.00: invalid multi_count 1 ignored [ 622.083106][T10588] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 622.144930][T10588] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 622.324985][T10797] ata1.00: invalid multi_count 1 ignored [ 622.799362][T11127] netlink: 216 bytes leftover after parsing attributes in process `syz.2.2150'. [ 622.803979][T11127] netlink: 216 bytes leftover after parsing attributes in process `syz.2.2150'. [ 622.819417][ T40] kauditd_printk_skb: 36 callbacks suppressed [ 622.819430][ T40] audit: type=1326 audit(1754980116.271:7828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11128 comm="syz.1.2151" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf711e579 code=0x7ffc0000 [ 622.829863][ T24] hid-generic 0000:7FFFFFFF:0000.000F: unknown main item tag 0x4 [ 622.830275][ T40] audit: type=1326 audit(1754980116.271:7829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11128 comm="syz.1.2151" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf711e579 code=0x7ffc0000 [ 622.834480][ T24] hid-generic 0000:7FFFFFFF:0000.000F: unknown main item tag 0x0 [ 622.842056][ T40] audit: type=1326 audit(1754980116.271:7830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11128 comm="syz.1.2151" exe="/syz-executor" sig=0 arch=40000003 syscall=354 compat=1 ip=0xf711e579 code=0x7ffc0000 [ 622.843685][ T24] hid-generic 0000:7FFFFFFF:0000.000F: unknown main item tag 0x1 [ 622.850968][ T40] audit: type=1326 audit(1754980116.271:7831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11128 comm="syz.1.2151" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf711e579 code=0x7ffc0000 [ 622.860738][ T40] audit: type=1326 audit(1754980116.271:7832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11128 comm="syz.1.2151" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf711e579 code=0x7ffc0000 [ 622.864298][ T24] hid-generic 0000:7FFFFFFF:0000.000F: hidraw1: HID v0.00 Device [syz0] on syz1 [ 622.868248][ T40] audit: type=1326 audit(1754980116.281:7833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11128 comm="syz.1.2151" exe="/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf711e579 code=0x7ffc0000 [ 622.879064][ T40] audit: type=1326 audit(1754980116.281:7834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11128 comm="syz.1.2151" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf711e579 code=0x7ffc0000 [ 622.887914][ T40] audit: type=1326 audit(1754980116.281:7835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11128 comm="syz.1.2151" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf711e579 code=0x7ffc0000 [ 622.895036][ T40] audit: type=1326 audit(1754980116.281:7836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11128 comm="syz.1.2151" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf711e579 code=0x7ffc0000 [ 622.902593][ T40] audit: type=1326 audit(1754980116.281:7837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11128 comm="syz.1.2151" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf711e579 code=0x7ffc0000 [ 622.924488][T11130] fido_id[11130]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 623.111207][T11244] tmpfs: Unknown parameter '9ؽ' [ 623.311233][T11359] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2157'. [ 623.316067][ T5988] Bluetooth: hci3: unexpected event for opcode 0x041b [ 623.401097][T11360] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2154'. [ 623.887587][ T1417] ieee802154 phy0 wpan0: encryption failed: -22 [ 623.889786][ T1417] ieee802154 phy1 wpan1: encryption failed: -22 [ 623.909432][T11575] netlink: 216 bytes leftover after parsing attributes in process `syz.1.2160'. [ 623.912456][T11575] netlink: 216 bytes leftover after parsing attributes in process `syz.1.2160'. [ 624.009315][T11578] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2161'. [ 625.518011][T12121] ata1.00: invalid multi_count 1 ignored [ 625.563275][T12123] netlink: 216 bytes leftover after parsing attributes in process `syz.1.2171'. [ 625.568060][T12123] netlink: 216 bytes leftover after parsing attributes in process `syz.1.2171'. [ 625.721868][T12235] netlink: 216 bytes leftover after parsing attributes in process `syz.2.2176'. [ 625.725461][T12235] netlink: 216 bytes leftover after parsing attributes in process `syz.2.2176'. [ 625.754650][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807963c800: rx timeout, send abort [ 625.769371][ T59] hid-generic 0000:7FFFFFFF:0000.0010: unknown main item tag 0x4 [ 625.773451][ T59] hid-generic 0000:7FFFFFFF:0000.0010: unknown main item tag 0x0 [ 625.775987][ T59] hid-generic 0000:7FFFFFFF:0000.0010: unknown main item tag 0x1 [ 625.786433][ T59] hid-generic 0000:7FFFFFFF:0000.0010: hidraw1: HID v0.00 Device [syz0] on syz1 [ 625.877662][T12237] fido_id[12237]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 626.257342][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807963c800: abort rx timeout. Force session deactivation [ 627.252077][T12960] block nbd4: shutting down sockets [ 627.946508][T13238] ata1.00: invalid multi_count 1 ignored [ 628.173240][T13322] netlink: 'syz.4.2194': attribute type 1 has an invalid length. [ 628.186270][T13322] 8021q: adding VLAN 0 to HW filter on device bond1 [ 628.202154][T13322] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2194'. [ 628.443230][T13352] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2196'. [ 628.703378][T13354] ata1.00: invalid multi_count 1 ignored [ 628.756077][ T6058] usb 9-1: new full-speed USB device number 2 using dummy_hcd [ 628.830433][ T840] hid-generic 00A0:0008:0003.0011: unknown main item tag 0x7 [ 628.832847][ T840] hid-generic 00A0:0008:0003.0011: item fetching failed at offset 14/15 [ 628.835831][ T840] hid-generic 00A0:0008:0003.0011: probe with driver hid-generic failed with error -22 [ 628.910272][ T6058] usb 9-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 628.915307][ T6058] usb 9-1: config 0 interface 0 has no altsetting 0 [ 628.930802][ T6058] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 628.933770][ T6058] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 628.938196][ T6058] usb 9-1: Product: syz [ 628.941098][ T6058] usb 9-1: Manufacturer: syz [ 628.943089][ T6058] usb 9-1: SerialNumber: syz [ 628.960108][ T6058] usb 9-1: config 0 descriptor?? [ 628.980651][ T6058] usb 9-1: selecting invalid altsetting 0 [ 629.423504][ T40] kauditd_printk_skb: 37 callbacks suppressed [ 629.423521][ T40] audit: type=1326 audit(1754980122.871:7875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13783 comm="syz.2.2202" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f07579 code=0x7ffc0000 [ 629.437265][ T40] audit: type=1326 audit(1754980122.871:7876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13783 comm="syz.2.2202" exe="/syz-executor" sig=0 arch=40000003 syscall=354 compat=1 ip=0xf7f07579 code=0x7ffc0000 [ 629.444610][ T40] audit: type=1326 audit(1754980122.871:7877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13783 comm="syz.2.2202" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f07579 code=0x7ffc0000 [ 629.451908][ T40] audit: type=1326 audit(1754980122.871:7878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13783 comm="syz.2.2202" exe="/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf7f07579 code=0x7ffc0000 [ 629.458706][ T40] audit: type=1326 audit(1754980122.871:7879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13783 comm="syz.2.2202" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f07579 code=0x7ffc0000 [ 629.465704][ T40] audit: type=1326 audit(1754980122.881:7880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13783 comm="syz.2.2202" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f07579 code=0x7ffc0000 [ 629.472747][ T40] audit: type=1326 audit(1754980122.881:7881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13783 comm="syz.2.2202" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f07579 code=0x7ffc0000 [ 629.480785][ T40] audit: type=1326 audit(1754980122.881:7882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13783 comm="syz.2.2202" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f07579 code=0x7ffc0000 [ 629.488558][ T40] audit: type=1326 audit(1754980122.891:7883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13783 comm="syz.2.2202" exe="/syz-executor" sig=0 arch=40000003 syscall=41 compat=1 ip=0xf7f07579 code=0x7ffc0000 [ 629.506996][ T40] audit: type=1326 audit(1754980122.891:7884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13783 comm="syz.2.2202" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f07579 code=0x7ffc0000 [ 629.592113][T13841] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 629.942766][T13970] sctp_transport_update_pmtu: 46 callbacks suppressed [ 629.942784][T13970] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 629.952352][T13970] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 629.956773][T13970] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 629.960689][T13970] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 629.964070][T13970] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 629.969067][T13970] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 629.973806][T13970] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 629.979107][T13970] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 629.982544][T13970] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 629.986235][T13970] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 631.020552][ T24] usb 9-1: USB disconnect, device number 2 [ 631.068799][T14114] netlink: 216 bytes leftover after parsing attributes in process `syz.3.2208'. [ 631.074638][T14114] netlink: 216 bytes leftover after parsing attributes in process `syz.3.2208'. [ 631.119686][ T59] hid-generic 0000:7FFFFFFF:0000.0012: unknown main item tag 0x4 [ 631.123249][ T59] hid-generic 0000:7FFFFFFF:0000.0012: unknown main item tag 0x0 [ 631.127232][ T59] hid-generic 0000:7FFFFFFF:0000.0012: unknown main item tag 0x1 [ 631.135572][ T59] hid-generic 0000:7FFFFFFF:0000.0012: hidraw1: HID v0.00 Device [syz0] on syz1 [ 631.195742][T14121] fido_id[14121]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 631.253706][T14146] ata1.00: invalid multi_count 1 ignored [ 631.484773][ T59] hid-generic 00A0:0008:0003.0013: unknown main item tag 0x7 [ 631.488025][ T59] hid-generic 00A0:0008:0003.0013: item fetching failed at offset 14/15 [ 631.491126][ T59] hid-generic 00A0:0008:0003.0013: probe with driver hid-generic failed with error -22 [ 633.466093][ T34] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 633.636599][ T34] usb 8-1: Using ep0 maxpacket: 16 [ 633.639896][ T34] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 633.643773][ T34] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 633.647668][ T34] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 633.655272][ T34] usb 8-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 633.659548][ T34] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 633.671641][ T34] usb 8-1: config 0 descriptor?? [ 634.093467][ T34] shield 0003:0955:7214.0014: unknown main item tag 0x0 [ 634.095523][ T34] shield 0003:0955:7214.0014: unknown main item tag 0x0 [ 634.102329][ T34] shield 0003:0955:7214.0014: unknown main item tag 0x0 [ 634.106252][ T34] shield 0003:0955:7214.0014: unknown main item tag 0x0 [ 634.109444][ T34] shield 0003:0955:7214.0014: unknown main item tag 0x0 [ 634.112802][T14687] ata1.00: invalid multi_count 1 ignored [ 634.121755][ T34] input: HID 0955:7214 Haptics as /devices/virtual/input/input20 [ 634.145378][ T34] shield 0003:0955:7214.0014: Registered Thunderstrike controller [ 634.148460][ T34] shield 0003:0955:7214.0014: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.3-1/input0 [ 634.301371][T14362] random: crng reseeded on system resumption [ 634.543268][T14896] ata1.00: invalid multi_count 1 ignored [ 634.559386][T14362] wireguard0: entered promiscuous mode [ 634.561182][T14362] wireguard0: entered allmulticast mode [ 634.571703][ T34] shield 0003:0955:7214.0014: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 634.571757][ T24] usb 8-1: USB disconnect, device number 3 [ 634.577305][ T34] shield 0003:0955:7214.0014: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 634.581438][ T34] shield 0003:0955:7214.0014: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 634.584889][ T34] shield 0003:0955:7214.0014: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 635.058015][ T24] ------------[ cut here ]------------ [ 635.059932][ T24] workqueue: work disable count underflowed [ 635.061932][ T24] WARNING: CPU: 2 PID: 24 at kernel/workqueue.c:4326 enable_work+0x2f8/0x340 [ 635.065298][ T24] Modules linked in: [ 635.067551][ T24] CPU: 2 UID: 0 PID: 24 Comm: kworker/2:0 Not tainted 6.17.0-rc1-syzkaller-00004-g53e760d89498 #0 PREEMPT(full) [ 635.073471][ T24] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 635.077093][ T24] Workqueue: usb_hub_wq hub_event [ 635.079052][ T24] RIP: 0010:enable_work+0x2f8/0x340 [ 635.081212][ T24] Code: 89 ee e8 5b 30 38 00 45 84 ed 0f 85 29 fe ff ff e8 6d 35 38 00 c6 05 24 e2 10 0f 01 90 48 c7 c7 40 01 ac 8b e8 c9 26 f7 ff 90 <0f> 0b 90 90 e9 06 fe ff ff 48 89 ef e8 a7 95 9d 00 e9 aa fe ff ff [ 635.088487][ T24] RSP: 0018:ffffc9000051f3c0 EFLAGS: 00010086 [ 635.090705][ T24] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff817a02c8 [ 635.093699][ T24] RDX: ffff88801c3a2440 RSI: ffffffff817a02d5 RDI: 0000000000000001 [ 635.096869][ T24] RBP: ffff8880645c5738 R08: 0000000000000001 R09: 0000000000000000 [ 635.099967][ T24] R10: 0000000000000000 R11: 0000000000000000 R12: 1ffff920000a3e79 [ 635.103181][ T24] R13: 0000000000000000 R14: ffff8880645c5698 R15: ffff8880645c5730 [ 635.106335][ T24] FS: 0000000000000000(0000) GS:ffff8880976c6000(0000) knlGS:0000000000000000 [ 635.109180][ T24] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 635.111449][ T24] CR2: 00000000800bf000 CR3: 000000006c7d7000 CR4: 0000000000352ef0 [ 635.113930][ T24] Call Trace: [ 635.115043][ T24] [ 635.116015][ T24] ? __pfx_enable_work+0x10/0x10 [ 635.117574][ T24] ? __thermal_zone_cdev_unbind+0x6c/0x6c0 [ 635.119366][ T24] __cancel_work_sync+0xe7/0x130 [ 635.120945][ T24] thermal_zone_device_unregister+0x28e/0x4d0 [ 635.122876][ T24] ? __pfx_shield_remove+0x10/0x10 [ 635.124468][ T24] power_supply_unregister+0x10a/0x150 [ 635.126361][ T24] shield_remove+0x75/0x130 [ 635.127849][ T24] ? __pfx_shield_remove+0x10/0x10 [ 635.129487][ T24] hid_device_remove+0xd1/0x260 [ 635.131202][ T24] ? __pfx_hid_device_remove+0x10/0x10 [ 635.132937][ T24] device_remove+0xc8/0x170 [ 635.134415][ T24] device_release_driver_internal+0x44b/0x620 [ 635.136350][ T24] bus_remove_device+0x22f/0x420 [ 635.137920][ T24] device_del+0x396/0x9f0 [ 635.139297][ T24] ? __pfx_device_del+0x10/0x10 [ 635.140876][ T24] ? do_raw_spin_lock+0x12c/0x2b0 [ 635.142494][ T24] hid_destroy_device+0x19c/0x240 [ 635.144053][ T24] usbhid_disconnect+0xa0/0xe0 [ 635.145496][ T24] usb_unbind_interface+0x1da/0x9e0 [ 635.147189][ T24] ? kernfs_remove_by_name_ns+0xbe/0x110 [ 635.148976][ T24] ? __pfx_usb_unbind_interface+0x10/0x10 [ 635.150786][ T24] device_remove+0x125/0x170 [ 635.152257][ T24] device_release_driver_internal+0x44b/0x620 [ 635.154517][ T24] bus_remove_device+0x22f/0x420 [ 635.156212][ T24] device_del+0x396/0x9f0 [ 635.157683][ T24] ? __pfx_device_del+0x10/0x10 [ 635.159435][ T24] ? kobject_put+0x210/0x5a0 [ 635.161324][ T24] usb_disable_device+0x355/0x7d0 [ 635.162939][ T24] usb_disconnect+0x2e1/0x9c0 [ 635.164449][ T24] hub_event+0x1c81/0x4fe0 [ 635.165748][ T24] ? __lock_acquire+0xb97/0x1ce0 [ 635.167384][ T24] ? __pfx_hub_event+0x10/0x10 [ 635.168908][ T24] ? pci_iounmap+0x80/0x80 [ 635.170392][ T24] ? rcu_is_watching+0x12/0xc0 [ 635.171914][ T24] process_one_work+0x9cc/0x1b70 [ 635.173625][ T24] ? __pfx_process_one_work+0x10/0x10 [ 635.175492][ T24] ? assign_work+0x1a0/0x250 [ 635.177007][ T24] worker_thread+0x6c8/0xf10 [ 635.178536][ T24] ? __pfx_worker_thread+0x10/0x10 [ 635.180481][ T24] kthread+0x3c5/0x780 [ 635.181838][ T24] ? __pfx_kthread+0x10/0x10 [ 635.183380][ T24] ? rcu_is_watching+0x12/0xc0 [ 635.185046][ T24] ? __pfx_kthread+0x10/0x10 [ 635.186569][ T24] ret_from_fork+0x5d4/0x6f0 [ 635.188064][ T24] ? __pfx_kthread+0x10/0x10 [ 635.189647][ T24] ret_from_fork_asm+0x1a/0x30 [ 635.191197][ T24] [ 635.192473][ T24] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 635.194908][ T24] CPU: 2 UID: 0 PID: 24 Comm: kworker/2:0 Not tainted 6.17.0-rc1-syzkaller-00004-g53e760d89498 #0 PREEMPT(full) [ 635.198455][ T24] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 635.201783][ T24] Workqueue: usb_hub_wq hub_event [ 635.203394][ T24] Call Trace: [ 635.204580][ T24] [ 635.205700][ T24] dump_stack_lvl+0x3d/0x1f0 [ 635.207335][ T24] vpanic+0x6e8/0x7a0 [ 635.208637][ T24] ? __pfx_vpanic+0x10/0x10 [ 635.210140][ T24] ? enable_work+0x2f8/0x340 [ 635.211710][ T24] panic+0xca/0xd0 [ 635.212922][ T24] ? __pfx_panic+0x10/0x10 [ 635.214383][ T24] ? check_panic_on_warn+0x1f/0xb0 [ 635.216061][ T24] check_panic_on_warn+0xab/0xb0 [ 635.217647][ T24] __warn+0xf6/0x3c0 [ 635.218915][ T24] ? __pfx_vprintk_emit+0x10/0x10 [ 635.220641][ T24] ? enable_work+0x2f8/0x340 [ 635.222148][ T24] report_bug+0x3c3/0x580 [ 635.223551][ T24] ? enable_work+0x2f8/0x340 [ 635.225028][ T24] handle_bug+0x184/0x210 [ 635.226477][ T24] exc_invalid_op+0x17/0x50 [ 635.227942][ T24] asm_exc_invalid_op+0x1a/0x20 [ 635.229501][ T24] RIP: 0010:enable_work+0x2f8/0x340 [ 635.231204][ T24] Code: 89 ee e8 5b 30 38 00 45 84 ed 0f 85 29 fe ff ff e8 6d 35 38 00 c6 05 24 e2 10 0f 01 90 48 c7 c7 40 01 ac 8b e8 c9 26 f7 ff 90 <0f> 0b 90 90 e9 06 fe ff ff 48 89 ef e8 a7 95 9d 00 e9 aa fe ff ff [ 635.237346][ T24] RSP: 0018:ffffc9000051f3c0 EFLAGS: 00010086 [ 635.239278][ T24] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff817a02c8 [ 635.241807][ T24] RDX: ffff88801c3a2440 RSI: ffffffff817a02d5 RDI: 0000000000000001 [ 635.244373][ T24] RBP: ffff8880645c5738 R08: 0000000000000001 R09: 0000000000000000 [ 635.246894][ T24] R10: 0000000000000000 R11: 0000000000000000 R12: 1ffff920000a3e79 [ 635.249382][ T24] R13: 0000000000000000 R14: ffff8880645c5698 R15: ffff8880645c5730 [ 635.251903][ T24] ? __warn_printk+0x198/0x350 [ 635.253426][ T24] ? __warn_printk+0x1a5/0x350 [ 635.254918][ T24] ? __pfx_enable_work+0x10/0x10 [ 635.256493][ T24] ? __thermal_zone_cdev_unbind+0x6c/0x6c0 [ 635.258345][ T24] __cancel_work_sync+0xe7/0x130 [ 635.259942][ T24] thermal_zone_device_unregister+0x28e/0x4d0 [ 635.262214][ T24] ? __pfx_shield_remove+0x10/0x10 [ 635.263855][ T24] power_supply_unregister+0x10a/0x150 [ 635.265595][ T24] shield_remove+0x75/0x130 [ 635.267094][ T24] ? __pfx_shield_remove+0x10/0x10 [ 635.268732][ T24] hid_device_remove+0xd1/0x260 [ 635.270323][ T24] ? __pfx_hid_device_remove+0x10/0x10 [ 635.272038][ T24] device_remove+0xc8/0x170 [ 635.273479][ T24] device_release_driver_internal+0x44b/0x620 [ 635.275510][ T24] bus_remove_device+0x22f/0x420 [ 635.277114][ T24] device_del+0x396/0x9f0 [ 635.278503][ T24] ? __pfx_device_del+0x10/0x10 [ 635.280062][ T24] ? do_raw_spin_lock+0x12c/0x2b0 [ 635.281771][ T24] hid_destroy_device+0x19c/0x240 [ 635.283414][ T24] usbhid_disconnect+0xa0/0xe0 [ 635.284967][ T24] usb_unbind_interface+0x1da/0x9e0 [ 635.286670][ T24] ? kernfs_remove_by_name_ns+0xbe/0x110 [ 635.288468][ T24] ? __pfx_usb_unbind_interface+0x10/0x10 [ 635.290303][ T24] device_remove+0x125/0x170 [ 635.291794][ T24] device_release_driver_internal+0x44b/0x620 [ 635.293729][ T24] bus_remove_device+0x22f/0x420 [ 635.295517][ T24] device_del+0x396/0x9f0 [ 635.296994][ T24] ? __pfx_device_del+0x10/0x10 [ 635.298680][ T24] ? kobject_put+0x210/0x5a0 [ 635.300188][ T24] usb_disable_device+0x355/0x7d0 [ 635.301788][ T24] usb_disconnect+0x2e1/0x9c0 [ 635.303304][ T24] hub_event+0x1c81/0x4fe0 [ 635.304841][ T24] ? __lock_acquire+0xb97/0x1ce0 [ 635.306547][ T24] ? __pfx_hub_event+0x10/0x10 [ 635.308081][ T24] ? pci_iounmap+0x80/0x80 [ 635.309510][ T24] ? rcu_is_watching+0x12/0xc0 [ 635.311080][ T24] process_one_work+0x9cc/0x1b70 [ 635.312682][ T24] ? __pfx_process_one_work+0x10/0x10 [ 635.314671][ T24] ? assign_work+0x1a0/0x250 [ 635.316225][ T24] worker_thread+0x6c8/0xf10 [ 635.317708][ T24] ? __pfx_worker_thread+0x10/0x10 [ 635.319347][ T24] kthread+0x3c5/0x780 [ 635.320629][ T24] ? __pfx_kthread+0x10/0x10 [ 635.321954][ T24] ? rcu_is_watching+0x12/0xc0 [ 635.323490][ T24] ? __pfx_kthread+0x10/0x10 [ 635.325051][ T24] ret_from_fork+0x5d4/0x6f0 [ 635.326745][ T24] ? __pfx_kthread+0x10/0x10 [ 635.328328][ T24] ret_from_fork_asm+0x1a/0x30 [ 635.329952][ T24] [ 635.331605][ T24] Kernel Offset: disabled [ 635.332982][ T24] Rebooting in 86400 seconds.. VM DIAGNOSIS: 06:28:48 Registers: info registers vcpu 0 CPU#0 RAX=00000000018c1621 RBX=0000000000000000 RCX=ffffffff8b903bf9 RDX=0000000000000000 RSI=ffffffff8de4ba0e RDI=ffffffff8c162900 RBP=fffffbfff1c52ef8 RSP=ffffffff8e207e08 R8 =0000000000000001 R9 =ffffed1005646655 R10=ffff88802b2332ab R11=0000000000000000 R12=0000000000000000 R13=ffffffff8e2977c0 R14=ffffffff90ab6b90 R15=0000000000000000 RIP=ffffffff8b90275f RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880974c6000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000002f319ffc CR3=000000005c58b000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000ff ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4e4f4954504f5f4e 4153410063657865 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 EAX=00000000 EBX=ffffffff ECX=8a36162b EDX=00000000 ESI=f6cbd000 EDI=f68bd690 EBP=f6c162a8 ESP=ffa43930 EIP=f70ff00f EFL=00000246 [---Z-P-] CPL=3 II=0 A20=1 SMM=0 HLT=0 ES =002b 00000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0023 00000000 ffffffff 00c0fb00 DPL=3 CS32 [-RA] SS =002b 00000000 ffffffff 00c0f300 DPL=3 DS [-WA] DS =002b 00000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 00000000 ffffffff 00c00000 GS =0063 58508440 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 00000000 ffffffff 00c00000 TR =0040 0004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000002f2ebffc CR3=000000005c58b000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000ff ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4e4f4954504f5f4e 4153410063657865 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=000000000000006b RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85613595 RDI=ffffffff9b0f6600 RBP=ffffffff9b0f65c0 RSP=ffffc9000051ed30 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000000 R12=0000000000000000 R13=000000000000006b R14=ffffffff9b0f65c0 R15=ffffffff85613530 RIP=ffffffff856135bf RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880976c6000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000800bf000 CR3=000000006c7d7000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000ff ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4e4f4954504f5f4e 4153410063657865 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000001 RBX=ffff88802b53a440 RCX=0000000000000000 RDX=0000000000000009 RSI=0000000000000001 RDI=ffff88802902284c RBP=ffff888029022440 RSP=ffffc90003f4f858 R8 =0000000000000001 R9 =0000000000000001 R10=0000000000000001 R11=0000000000000001 R12=ffff888029022511 R13=ffff8880290224c0 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff818e1fe4 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff8880977c6000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000080171000 CR3=000000006c7d7000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000ff ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4e4f4954504f5f4e 4153410063657865 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000