last executing test programs: 27m11.300999806s ago: executing program 2 (id=870): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmsg$kcm(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000380)=@rc, 0x80, 0x0, 0x0, &(0x7f00000006c0)=""/67, 0x43}, 0x2002) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) r5 = openat$vim2m(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r5, 0xc0cc5640, 0x0) r6 = syz_io_uring_setup(0x10d, &(0x7f0000000300)={0x0, 0xce5d, 0x80, 0x0, 0x89}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) r9 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000004380), 0x101602, 0x0) read$FUSE(r9, &(0x7f00000020c0)={0x2020}, 0xffffffffffffff5c) sched_setaffinity(r2, 0x8, &(0x7f0000000780)=0x7) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r6, 0x47f9, 0x0, 0x0, 0x0, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) add_key(&(0x7f0000000080)='asymmetric\x00', 0x0, &(0x7f0000000500)="e306644c2f0b801228a9253e", 0xc, 0xfffffffffffffffd) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000210400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010067726574617000000c00028008000100", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES8=r1], 0x44}, 0x1, 0x0, 0x0, 0x40080c0}, 0x0) 27m9.842189184s ago: executing program 2 (id=875): openat$nullb(0xffffffffffffff9c, 0x0, 0x0, 0x0) timer_create(0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x70bd2b, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7b, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = openat$hpet(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(0xffffffffffffffff, 0x0, 0x24008011) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$tun(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r6, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[@rights={{0x18, 0x1, 0x1, [r5, r5]}}], 0x18}, 0x0) recvmmsg$unix(r5, &(0x7f0000006f00)=[{{&(0x7f00000071c0)=@abs, 0x6e, &(0x7f0000000880)=[{&(0x7f0000000200)=""/163, 0xa3}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000002000)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}}], 0x2, 0x2, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000002280)={'pim6reg0\x00', 0x2102}) ioctl$TUNSETQUEUE(r4, 0x400454d9, &(0x7f0000000080)={'nicvf0\x00', 0x400}) ioctl$TUNSETTXFILTER(r4, 0x401054d5, &(0x7f0000000380)=ANY=[]) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000180)={'wg1\x00', 0x200}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r7, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r7, &(0x7f0000000240)="c4", 0x1, 0x20000841, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @empty}, 0x1c) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) 27m8.882203536s ago: executing program 1 (id=877): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0) r0 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNDEL(r0, 0x400442c9, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) listen(0xffffffffffffffff, 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r4, 0x40046f41, 0x20000502) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket(0x10, 0x2, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000000000000000000006dfeff00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r6}, 0x10) r7 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0xc0842) r8 = dup(r7) ioctl$USBDEVFS_CONTROL(r8, 0xc0185500, &(0x7f0000000240)={0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) write(r5, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) 27m8.527288312s ago: executing program 2 (id=878): mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(0xffffffffffffffff, 0x4068aea3, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socket$igmp6(0xa, 0x3, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'tunl0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="4000000010001fff000000000000000000060000", @ANYRES32=0x0, @ANYBLOB="81ffffff00000000180012800e0001007769726567756172640000000400028008000a005124deacb12e68d5b042fd94802e899d13e0374769b03ac3273b6ab1188023b587e473253682146a9f24b52e89b42d3c836c1702078fbba099e45a9ddb039922f65e595e5f", @ANYRES32=r5, @ANYRES64=r0], 0x40}}, 0x0) sendmmsg$inet6(r3, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001340)="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", 0x769}], 0x1}}], 0x1, 0x11) syz_io_uring_setup(0x117, &(0x7f0000000300)={0x0, 0x0, 0x800}, &(0x7f0000000280), &(0x7f0000000200)) 26m58.764236928s ago: executing program 1 (id=880): r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_DO_IT(r0, 0xab00) r1 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0be6ffff060000e400000100090000008c9b0c4100", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ptrace$PTRACE_SETSIGMASK(0x420b, r2, 0x8, &(0x7f0000000180)={[0xffffffff, 0x7]}) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) socket(0x15, 0x5, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) close(r5) r7 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x3c1, 0x3, 0x2a0, 0x0, 0x2b8, 0x182, 0x0, 0x0, 0x1d8, 0x3a8, 0x3a8, 0x1d8, 0x3a8, 0x3, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec, 0x0, {0x0, 0xe0ffff00000000}}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xf7db, 'syz1\x00'}}}, {{@uncond, 0x0, 0xa4, 0xec}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x100, 'syz0\x00'}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x2fc) 26m58.763876184s ago: executing program 2 (id=881): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, 0x0, 0x0) ioctl$USBDEVFS_CLEAR_HALT(0xffffffffffffffff, 0x80045503, &(0x7f0000000340)={0x1, 0x1}) r1 = openat$vim2m(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x25dfdbfb, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x3, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$read(0xb, r5, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet(r6, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) close(r7) process_madvise(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0)='pstore\x00', 0xc0ed0000, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000200)={0x0, 0x1, 0x1, 0x0, 0x4}) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r8}, 0x10) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000005c40)=[{{&(0x7f00000000c0)={0xa, 0x4620, 0xe5f8, @private1={0xfc, 0x1, '\x00', 0x1}, 0x6}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0000000002000000000000000000"], 0x10}}], 0x1, 0x24000804) 26m57.66469459s ago: executing program 1 (id=883): r0 = openat$userio(0xffffff9c, &(0x7f00000001c0), 0x301000, 0x0) ioctl$int_out(r0, 0x5462, &(0x7f0000000240)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000002100)={0x1, 'wg1\x00', 0x40001}, 0x18) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x10) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r2, 0x0, 0x48c, &(0x7f0000000580)={0x1, 'dummy0\x00'}, 0x18) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$unix(0x1, 0x2, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x28, r7, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x7ff, 0x70}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x91}, 0x24044884) socket$inet_sctp(0x2, 0x5, 0x84) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) 26m57.614414362s ago: executing program 1 (id=884): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f0000000080)=0x2) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, 0x0) ioctl$SNDCTL_DSP_STEREO(r2, 0xc0045003, &(0x7f0000000100)=0x1) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x8012, r2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_open_dev$loop(&(0x7f0000000100), 0xd79, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f00000002c0)={r5, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00000800", "90be8b1c551265406c7f306003d8a0f4bd00"}}) sendmsg$NFNL_MSG_CTHELPER_NEW(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000400)=ANY=[@ANYBLOB="70000000000905030000000000000000000000000900010073797a31000000000c00048004000140000000003c0002000c0002800500010000005b002c000180140000000000000006000000000000000000000014000400fe8000000000000000000000000000bb080005000000000061919ee653972286f6806fcd5043e0c8733d229281951f6965e331c86cb30f38a81c91a3b2f0fa851430426515b546badf"], 0x70}}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, r5) r6 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) r7 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000300)={0xa, 0x0, 0x0, @local}, 0x0, 0x0) getsockopt$inet6_buf(r4, 0x29, 0x2e, &(0x7f00000003c0)=""/119, &(0x7f0000000440)=0x77) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0e00000004000000040000000300000000000000", @ANYBLOB='\x00'/15, @ANYBLOB], 0x48) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = dup(r6) ioctl$TIOCL_SETSEL(r7, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x13d, 0x0, 0xd6e}}) ioctl$TIOCL_SETSEL(r7, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0x0, 0x0, 0x101}}) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x60}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0x0, 0x8}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x700}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x0, 0x6, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0x50}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x20}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0x7, 0x0}, {0x18, 0x2, 0x2, 0x0, r8}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_open_dev$loop(&(0x7f00000001c0), 0x5749, 0x408882) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r9, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @empty, 0x4}], 0x1c) sendto$inet6(r9, &(0x7f0000000040)='l', 0x1, 0x7ddfdbdfafa51cdd, &(0x7f0000000100)={0xa, 0x4e23, 0x2, @loopback, 0xffffffff}, 0x1c) 26m52.591292749s ago: executing program 2 (id=890): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, 0x0, 0xc0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = shmget$private(0x0, 0x2000, 0x800, &(0x7f0000ffd000/0x2000)=nil) shmat(r4, &(0x7f00003e8000/0x1000)=nil, 0x4000) r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8b19, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) write$apparmor_exec(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB='stac'], 0xb1) openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = syz_open_dev$radio(&(0x7f0000001500), 0x2, 0x2) ioctl$VIDIOC_S_TUNER(r7, 0x4054561e, &(0x7f0000001540)={0x80000000, "f7927bb2926221ddef9bc53d083af7ef8fe2de50e5ffc9113f80820ab33b9795", 0x1, 0x0, 0x6, 0x9, 0x1, 0x2, 0x8, 0x3}) syz_memcpy_off$KVM_EXIT_HYPERCALL(0x0, 0x20, &(0x7f0000000a80)="3dfeb167f3ccc51b8ec0ba896a6d39292279e90f7abfdaee0f52b8a3554c9122ce1f6ed327282ad8c2d74bb1a770183e755b9f37cc301f5392a0e4831635410fe4b2a8e6bdb04d5d", 0x1f00, 0x48) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0100000004001000040000000500", @ANYBLOB], 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x1b, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240), 0x0, 0x2, r8}, 0x38) 26m50.850412579s ago: executing program 1 (id=892): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) accept4(r1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan1\x00'}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x2000000000000376, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x8, 0xb1, &(0x7f0000000140)=""/177, 0x41100, 0xb4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2008, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x6) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x57c91000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r5 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000500)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r5, &(0x7f0000000680)={0x13, 0x10, 0x10f, {0x0, r6, 0x2}}, 0x18) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x800005d, 0x4810) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) socket$inet6_sctp(0xa, 0x5, 0x84) openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x10d500, 0x0) r7 = fsopen(&(0x7f0000000280)='smb3\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) readv(0xffffffffffffffff, &(0x7f0000000780)=[{&(0x7f0000000080)}, {&(0x7f0000000400)=""/222, 0xde}, {&(0x7f0000000b80)=""/4096, 0x1000}, {&(0x7f0000000740)=""/64, 0x40}, {&(0x7f0000000600)=""/103, 0x67}, {0x0}, {0x0}], 0x7) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="d800000018008111e00212ba0d8105040a020000030f000b067c55a1bc000900b8000699030000000500160002008178a8001500080001400200000901ac040000d67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f27260e970300000000000000000000000000000000000000008dc5fb510162", 0xd8}], 0x1}, 0x20000044) 26m50.083985052s ago: executing program 2 (id=893): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x70bd2a, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x8000004, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) openat$vim2m(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) sched_setscheduler(r0, 0x0, &(0x7f0000000280)=0x8) syz_io_uring_setup(0x10d, &(0x7f0000000300)={0x0, 0xce5c, 0x80, 0x0, 0x89}, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) process_vm_writev(r0, &(0x7f00000005c0)=[{&(0x7f00000004c0)=""/226, 0xe2}], 0x1, &(0x7f0000000a80)=[{&(0x7f0000000600)=""/201, 0xc9}, {&(0x7f0000000700)=""/110, 0x6e}, {&(0x7f0000000780)=""/130, 0x82}, {&(0x7f0000000840)=""/247, 0xf7}, {&(0x7f0000000940)=""/84, 0x54}, {&(0x7f00000009c0)=""/185, 0xb9}], 0x6, 0x0) r4 = socket$l2tp(0x2, 0x2, 0x73) r5 = socket$inet6_sctp(0xa, 0x0, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000400)=@assoc_value, &(0x7f0000000440)=0x8) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x390, 0x0, 0x0, 0x148, 0x268, 0x148, 0x2fc, 0x240, 0x240, 0x2fc, 0x240, 0x7fffffe, 0x0, {[{{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'erspan0\x00', 'veth1_to_batadv\x00'}, 0x0, 0x20c, 0x268, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'bridge_slave_1\x00', {0x21, 0x0, 0x0, 0x0, 0x0, 0xed, 0x7}}}, @common=@inet=@sctp={{0x144}}]}, @common=@inet=@HMARK={0x5c, 'HMARK\x00', 0x0, {@ipv4=@local}}}, {{@uncond, 0x0, 0x70, 0x94}, @common=@unspec=@NFQUEUE1={0x24}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x3ec) connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e20, @multicast2}, 0x10) sendmmsg(r3, &(0x7f0000006780)=[{{0x0, 0x0, 0x0}}], 0x80000000000020c, 0x0) setsockopt$inet_int(r3, 0x0, 0xb, 0x0, 0x0) r6 = socket(0x1000000000000010, 0x80802, 0x0) write(r6, &(0x7f0000000080)="240000005200010000eef4f9002304000a04f51108000108020000fb0700028001000000", 0x24) 26m48.283204687s ago: executing program 0 (id=894): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x60, 0x30, 0x1, 0x70bd2b, 0x0, {}, [{0x4c, 0x1, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getrlimit(0xf, &(0x7f0000000280)) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "d20bddda7d1db9342de76eec7967fe97751f13a23aeaacb0565c1c2251560ed1"}}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) madvise(&(0x7f0000907000/0x1000)=nil, 0x1000, 0xb) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000180)=@o_path={&(0x7f0000000000)='./file1\x00', 0x0, 0x4010, r2}, 0x14) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000d84000)={0xa, 0x2, 0x200008, @loopback, 0x39}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f00000010c0)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}}, 0x0, 0x0, 0x1b, 0x0, "61a1ed8439cde8054f2ada6fcd5fe76b933e8bb0ac60081e33dffa150835f7519d5f73b4f5d80eb4881a5b98cb9fb96d225d602392f816d0bdcc09b5063087117502d8c24f1fe97f61fd27a06d6a38a7"}, 0xd8) sendto$inet6(r3, 0x0, 0x0, 0x20000841, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @empty}, 0x1c) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) setfsuid(0xee01) write$cgroup_int(r4, &(0x7f0000000040)=0x1c9, 0x12) r5 = memfd_create(&(0x7f0000000940)='\x00\x00\x04\x00\x1f\xd7\xdc1\x02{-3yE7\xb4\xa4\xc4\x85s\xedz\xef\x96\xe4:\xec>\xa2\x14\xb9\xa0\xfeA\x7f0\xee\xdeR\x94\x1f\xb8j\xc8;\x03\xfa):h\xffmkK\xef\x90\xfaC\f\x99\x18%\xaaa\b\xd8\f\xfb\xae\x0e\xb6\r\x04\x16\xb3\xdb\xf0\x97c\xddO\xceZD\xee/\xf7\xe3\xd5B\x88T\xc9\xf0\x8bJ\\\x1c\xa2&\f\xf7\x8eK\x9d\xe9\xca\x82\xd7\xa0b\xf4\xd2\xac&]\xe8&Knp\xd9\xe1\xe5F2\xf8\xa6+H\xc8\xa3\xe1[\xe3\xae\xcd\xd2\x89\xc1\x96<\xf0\xdf\xb8\xed\xa2\xb1\x9a\xf1vU9\xa9\xb9\x01\xc9\xf9\xcd\xf0]\x14I\xb4\x7f2\x84\xdb\xb7\x05\x8d\xa5\xf7{ww\xc8\xb8B\x90\xeci\x9bc{\xd0M\b%\x06\xd7\x17\xff\xc6\x8be\x9e\a\xe4\xb5 \xd9\x1c\xceM55\x99!\xcc\xac\\\b\xdc\x82\xf9\x87\x1em|\xc7\a,Fg4\x1d\xd9\xee\xd0|8\f\xcc\x7f\x15<8YW\x16zO9\xa7\x8a\xdd\xcc|\xbe\xda\x14\xf8\x8f\x94\xad\x90\xa51\xc6\xd0\xd7\x86\xb1\x15x\x12\xd2_?\xfa\xf8\xcd\xcf\xb7\x95\x1a\xd2Ue\xd5\xfb\\\x89\x11\xd0\xde\x04\x88L\x17Q\x94\x14\x0f\xc7\xdb\x86\x16|\xe9=\xee\x06U\x8a\xe8=\xe0\xf9\xce\xe4\xebM\a3\xba\x98\x9dv\xba\xfb\x7fk\xf0\x9a\xbf\x91KCC.B_:w\xff0x0, &(0x7f0000000340)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r5, 0x2ded, 0xee43, 0x0, 0x0, 0x0) read(r2, &(0x7f0000000140)=""/109, 0x6d) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x3a4}) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) shutdown(r0, 0x1) socket$alg(0x26, 0x5, 0x0) sendmsg$alg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}, 0x0) recvfrom$x25(0xffffffffffffffff, &(0x7f0000000180)=""/20, 0x14, 0x2, 0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x4, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_AUTORATE={0x8, 0x9, 0x4}]}}]}, 0x3c}}, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000480)={0xb, {'syz0\x00', 'syz1\x00', 'syz0\x00', 0x36, 0x8, 0x1000, 0x6, 0xfffffff9, 0x3, "648e6d175afcafa5cb0853a234f440d29043049158af8c3fb3695784c405e0bd9b0eff2a16c4a4b837d0ea0166d206a58eee3cec33bd"}}, 0x14e) close(r0) 26m43.676011133s ago: executing program 32 (id=879): socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x0, 0x0, 0x0, 0x2, 0xb, 0x0, 0x41000, 0x21, '\x00', 0x0, @sk_skb=0x5, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = openat$vcsu(0xffffff9c, &(0x7f00000000c0), 0x84040, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ftruncate(r0, 0x401) mmap(&(0x7f0000980000/0x4000)=nil, 0x4000, 0xb635773f06ebbeef, 0x50, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) syz_emit_vhci(&(0x7f0000000380)=ANY=[@ANYBLOB="043e1a0d01130000aaaaaaaaaa120836ff090c000009ffffffffffff00f0d6d5f8c6efdf2058c73da1307ab9b27edf01508c2afce34852f4005caff1f5537c082de3619341ec20b0239466193e6cb512b050f9a36eeebea554949e57349a3fe3c9ab652d94d5166e0ecd4ac3feb41aeb4cfa35d6649bdeff79d63838244324df"], 0x1d) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'stdrng\x00'}, 0x58) r5 = syz_io_uring_setup(0x1442, &(0x7f0000000140)={0x0, 0xcc1a, 0x80, 0x3, 0x46}, &(0x7f0000000440)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x3, r4, 0x0, 0x0, 0x0, 0x80800}) io_uring_enter(r5, 0x3516, 0xc2de, 0x8, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x3, 0x7, @loopback}, 0x1c) recvmmsg(0xffffffffffffffff, &(0x7f0000008a00)=[{{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000880)=""/182, 0xb6}], 0x1}, 0xc45a}], 0x1, 0x10100, 0x0) mount$overlay(0x0, 0x0, 0x0, 0x80000, 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) creat(0x0, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) 26m43.38243538s ago: executing program 0 (id=897): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0xb, 0x1, 0x4, 0x0, 0x7}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000000)=0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000380)=ANY=[@ANYBLOB="00000000000000000000000000000000000000007a40e02940bdd84d71bc6b10ba70591fac3a3fc2ddb826e72718ecfd110f944d087e30a38f6ef6db55d9e1e1fcba0da7a503f6fc1314eac5ba360102425cf94401d413d174bd03136aee48af5878a91f95ea1159370fc7b0d2e748e5f90332e21095106709ff189a6ad32492cc154ea081448aab280437426d9f709d35815844f5b3027b6b690c3db8ef03f7f8ab221a0ebe7ed777c570d92f59c8982cbd73bc1490a463c64b937becf01cf4c03b", @ANYRES32=0x0, @ANYBLOB="0198000000000000"], 0x20}}, 0x0) r1 = syz_open_dev$video(&(0x7f0000000040), 0x3ff, 0x0) r2 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x8801, 0x0) socket$packet(0x11, 0x2, 0x300) socket$inet6_tcp(0xa, 0x1, 0x0) ioperm(0x0, 0x9, 0x5) inotify_init1(0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000140)={0x0, 0x1, 0x0, "ee471a55b5e2c266422ef07bbfd7a61e37466e060403bbd8115bd48970e86a02"}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_getscheduler(0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = syz_io_uring_setup(0x497, &(0x7f0000000200)={0x0, 0x7279, 0x0, 0x4, 0x316}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r4, 0x3516, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETAF(r2, 0x5408, &(0x7f00000000c0)={0x1, 0xff, 0x5, 0xfffc, 0x0, "f682756c98cc948c"}) writev(r2, &(0x7f0000000040), 0x200000000000019f) ioctl$VIDIOC_STREAMOFF(r1, 0x40045613, &(0x7f0000000200)=0x1) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, 0x0, 0x0) 26m42.202206053s ago: executing program 0 (id=898): ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000540)={0x0, 0x1, 0x0, 0x1000, &(0x7f0000fef000/0x1000)=nil}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socket$igmp6(0xa, 0x3, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg$inet6(r3, &(0x7f0000004900), 0x0, 0x11) syz_io_uring_setup(0x117, &(0x7f0000000300), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r5, 0x7, 0x0) fcntl$lock(r5, 0x24, &(0x7f0000000000)={0x2, 0x0, 0x10001}) 26m41.939683833s ago: executing program 4 (id=896): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0, 0x0, 0x1}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[@ANYRES8, @ANYRES32, @ANYRES32], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340), 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) connect$unix(r5, &(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e21}, 0x6e) preadv2(0xffffffffffffffff, 0x0, 0x0, 0x2b, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x18, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x18, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fdffffff85000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r6 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$6lowpan_control(r6, &(0x7f0000000180)='connect aa:aa:aa:aa:aa:11 0', 0x1b) sendmsg$IPCTNL_MSG_EXP_DELETE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x50, 0x2, 0x2, 0x201, 0x0, 0x0, {0xa}, [@CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @broadcast}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x50}}, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, r7, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@void, @void}}}, 0x14}}, 0x4000054) 26m35.651228475s ago: executing program 33 (id=892): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) accept4(r1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan1\x00'}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x2000000000000376, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x8, 0xb1, &(0x7f0000000140)=""/177, 0x41100, 0xb4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2008, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x6) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x57c91000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r5 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000500)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r5, &(0x7f0000000680)={0x13, 0x10, 0x10f, {0x0, r6, 0x2}}, 0x18) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x800005d, 0x4810) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) socket$inet6_sctp(0xa, 0x5, 0x84) openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x10d500, 0x0) r7 = fsopen(&(0x7f0000000280)='smb3\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) readv(0xffffffffffffffff, &(0x7f0000000780)=[{&(0x7f0000000080)}, {&(0x7f0000000400)=""/222, 0xde}, {&(0x7f0000000b80)=""/4096, 0x1000}, {&(0x7f0000000740)=""/64, 0x40}, {&(0x7f0000000600)=""/103, 0x67}, {0x0}, {0x0}], 0x7) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="d800000018008111e00212ba0d8105040a020000030f000b067c55a1bc000900b8000699030000000500160002008178a8001500080001400200000901ac040000d67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f27260e970300000000000000000000000000000000000000008dc5fb510162", 0xd8}], 0x1}, 0x20000044) 26m34.670209439s ago: executing program 34 (id=893): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x70bd2a, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x8000004, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) openat$vim2m(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) sched_setscheduler(r0, 0x0, &(0x7f0000000280)=0x8) syz_io_uring_setup(0x10d, &(0x7f0000000300)={0x0, 0xce5c, 0x80, 0x0, 0x89}, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) process_vm_writev(r0, &(0x7f00000005c0)=[{&(0x7f00000004c0)=""/226, 0xe2}], 0x1, &(0x7f0000000a80)=[{&(0x7f0000000600)=""/201, 0xc9}, {&(0x7f0000000700)=""/110, 0x6e}, {&(0x7f0000000780)=""/130, 0x82}, {&(0x7f0000000840)=""/247, 0xf7}, {&(0x7f0000000940)=""/84, 0x54}, {&(0x7f00000009c0)=""/185, 0xb9}], 0x6, 0x0) r4 = socket$l2tp(0x2, 0x2, 0x73) r5 = socket$inet6_sctp(0xa, 0x0, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000400)=@assoc_value, &(0x7f0000000440)=0x8) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x390, 0x0, 0x0, 0x148, 0x268, 0x148, 0x2fc, 0x240, 0x240, 0x2fc, 0x240, 0x7fffffe, 0x0, {[{{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'erspan0\x00', 'veth1_to_batadv\x00'}, 0x0, 0x20c, 0x268, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'bridge_slave_1\x00', {0x21, 0x0, 0x0, 0x0, 0x0, 0xed, 0x7}}}, @common=@inet=@sctp={{0x144}}]}, @common=@inet=@HMARK={0x5c, 'HMARK\x00', 0x0, {@ipv4=@local}}}, {{@uncond, 0x0, 0x70, 0x94}, @common=@unspec=@NFQUEUE1={0x24}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x3ec) connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e20, @multicast2}, 0x10) sendmmsg(r3, &(0x7f0000006780)=[{{0x0, 0x0, 0x0}}], 0x80000000000020c, 0x0) setsockopt$inet_int(r3, 0x0, 0xb, 0x0, 0x0) r6 = socket(0x1000000000000010, 0x80802, 0x0) write(r6, &(0x7f0000000080)="240000005200010000eef4f9002304000a04f51108000108020000fb0700028001000000", 0x24) 26m31.936013117s ago: executing program 0 (id=901): openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x1a, 0x100}) r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() syz_emit_ethernet(0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = userfaultfd(0x1) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000004c0)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x3000)=nil, 0x3000}, 0x3}) ioctl$UFFDIO_UNREGISTER(r4, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) r5 = syz_open_dev$usbfs(&(0x7f00000001c0), 0xd, 0x0) r6 = syz_io_uring_setup(0x117, &(0x7f0000000100), &(0x7f0000000340)=0x0, &(0x7f0000000200)=0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000040)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, 0xc}) io_uring_enter(r6, 0x47f6, 0x0, 0x0, 0x0, 0x0) ioctl$BLKTRACESETUP(r5, 0xc0401273, 0x0) 26m31.698461179s ago: executing program 4 (id=902): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000002500)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x5, 0x12, r1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0xffffffff, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = shmget$private(0x0, 0x2000, 0x800, &(0x7f0000ffd000/0x2000)=nil) shmat(r5, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffafff) mmap$xdp(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0xbb2fcc7bf1753f70, 0x10010, r1, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001f500000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a310000000088000000060a010400000000000000000100000008000b400000000060000480280001800e000100636f6e6e6c696d69740000001400028008000140000006e508000240000000003400018008000100636d7000280002800800024000000001140003800400010009000100efbb17b799000000080001400000000e0900010073797a30"], 0xfc}}, 0x0) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r6, 0x0, 0xd2, &(0x7f0000000040)={@remote, @empty, 0x0, "4ef7289910e0843a8f13f2fe244b73fb24e0fe49951c925bca907f6a609d8f49"}, 0x3c) setsockopt$MRT_ADD_MFC_PROXY(r6, 0x0, 0xd2, &(0x7f0000000200)={@remote, @empty, 0x0, "e798888beab3af341dbec4427a73b0cd44814c5f5cd6f92215f46e0b091038f9", 0x0, 0x0, 0x0, 0x10}, 0x3c) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x50, 0xffffffffffffffff, 0x0) r7 = openat$kvm(0x0, &(0x7f0000000000), 0x101000, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) syz_create_resource$binfmt(&(0x7f0000000040)='./file0\x00') prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x100, &(0x7f0000006680)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000001400)) 26m31.226961989s ago: executing program 5 (id=899): socket$rxrpc(0x21, 0x2, 0xa) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1d, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(0xffffffffffffffff, 0x0, 0x24008011) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) io_uring_setup(0x29d5, &(0x7f0000000100)={0x0, 0x9255}) r3 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r3, 0x0, 0x0) connect$inet(r3, 0x0, 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_GET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[], 0x10}}, 0x0) r5 = syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x10100}, &(0x7f0000002000)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r6, r7, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22}) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000340)={0x5, &(0x7f0000000280)=[{0x200, 0x9, 0xff, 0xe}, {0x1000, 0xd4, 0x4, 0x3}, {0x6, 0xdb, 0x3d, 0x1}, {0x1, 0x40, 0xd, 0x1}, {0x0, 0x80, 0x5, 0x3}]}, 0x8) io_uring_enter(r5, 0x48e9, 0x0, 0x2, 0x0, 0x0) ioctl$FBIOPAN_DISPLAY(0xffffffffffffffff, 0x4606, &(0x7f0000000380)={0x30, 0x140, 0x30, 0x78, 0xfffffff8, 0x0, 0x1, 0x1, {0x3}, {0x4, 0x6, 0x1}, {0x1, 0xcd3, 0x1}, {0x6}, 0x1, 0x10, 0x4, 0x2, 0x1, 0xffffff81, 0x81, 0x0, 0x7, 0xffd7, 0xb, 0x10001, 0xdf32df659123099, 0x100, 0x0, 0x6}) r8 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x401c2, 0xbe452c0e68e5cff1) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setlease(r8, 0x400, 0x0) 26m27.037518613s ago: executing program 4 (id=903): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x7, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0xffff0004, 0xf0, 0xe200, &(0x7f0000001a40)="2b206d074843b397737ea49da2aa", 0x0, 0xf000, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000640)=0xa) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000008500000023000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r4}, 0x18) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r5, 0x4b72, &(0x7f0000000000)={0x0, 0xffffff7e, 0x10, 0x1c, 0x200, &(0x7f0000000040)="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"}) fsopen(0x0, 0x0) syz_emit_ethernet(0x2a4, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r6 = syz_io_uring_setup(0x25a, &(0x7f00000003c0)={0x0, 0xb906, 0x0, 0x3, 0x69}, &(0x7f0000000380)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=@newsa={0x138, 0x10, 0x713, 0x40000, 0x0, {{@in6=@mcast2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@mcast1, 0x0, 0x32}, @in=@local, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000}, {0x0, 0x0, 0x0, 0xfffffffffffffffd}, {0x0, 0x0, 0x2}, 0x0, 0x0, 0xa, 0x5, 0xb}, [@algo_crypt={0x48, 0x2, {{'ecb-serpent-avx\x00'}}}]}, 0x138}}, 0x0) io_uring_enter(r6, 0x3f70, 0x0, 0x0, 0x0, 0x0) mount$afs(&(0x7f0000000540)=ANY=[@ANYBLOB='#syz1:'], &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) 26m26.330112973s ago: executing program 0 (id=904): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000240)={0x3, 0x0, 0x3, 0x6}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x38, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r2 = syz_io_uring_setup(0x10d, 0x0, 0x0, 0x0) r3 = io_uring_setup(0x79ae, &(0x7f0000000340)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r2}) r4 = socket$inet6(0xa, 0x40000080806, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003dc0)=[{{&(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}, {{&(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}], 0x299, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000020c0)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000004c0)='\f', 0x1}], 0x1}}], 0xfdef, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, 0x0, 0x0) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6) bind$inet6(r4, &(0x7f000047b000)={0xa, 0x4e20, 0x4, @loopback}, 0x1c) listen(r4, 0x20000005) r7 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000001800), 0x80000, 0x0) read$FUSE(r7, &(0x7f0000003380)={0x2020}, 0x2020) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000540)={&(0x7f0000000680)=@deltaction={0xb0, 0x31, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffff}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}]}, @TCA_ACT_TAB={0x10, 0x1, [{0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xe9}}]}, @TCA_ACT_TAB={0x38, 0x1, [{0xc, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xe00}}, {0x10, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}]}, @TCA_ACT_TAB={0x38, 0x1, [{0xc, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0x10, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffffffff}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x8004}, 0x20000000) socket$inet6(0xa, 0x6, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 26m16.138005603s ago: executing program 35 (id=899): socket$rxrpc(0x21, 0x2, 0xa) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1d, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(0xffffffffffffffff, 0x0, 0x24008011) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) io_uring_setup(0x29d5, &(0x7f0000000100)={0x0, 0x9255}) r3 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r3, 0x0, 0x0) connect$inet(r3, 0x0, 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_GET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[], 0x10}}, 0x0) r5 = syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x10100}, &(0x7f0000002000)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r6, r7, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22}) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000340)={0x5, &(0x7f0000000280)=[{0x200, 0x9, 0xff, 0xe}, {0x1000, 0xd4, 0x4, 0x3}, {0x6, 0xdb, 0x3d, 0x1}, {0x1, 0x40, 0xd, 0x1}, {0x0, 0x80, 0x5, 0x3}]}, 0x8) io_uring_enter(r5, 0x48e9, 0x0, 0x2, 0x0, 0x0) ioctl$FBIOPAN_DISPLAY(0xffffffffffffffff, 0x4606, &(0x7f0000000380)={0x30, 0x140, 0x30, 0x78, 0xfffffff8, 0x0, 0x1, 0x1, {0x3}, {0x4, 0x6, 0x1}, {0x1, 0xcd3, 0x1}, {0x6}, 0x1, 0x10, 0x4, 0x2, 0x1, 0xffffff81, 0x81, 0x0, 0x7, 0xffd7, 0xb, 0x10001, 0xdf32df659123099, 0x100, 0x0, 0x6}) r8 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x401c2, 0xbe452c0e68e5cff1) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setlease(r8, 0x400, 0x0) 26m11.63910102s ago: executing program 36 (id=903): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x7, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0xffff0004, 0xf0, 0xe200, &(0x7f0000001a40)="2b206d074843b397737ea49da2aa", 0x0, 0xf000, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000640)=0xa) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000008500000023000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r4}, 0x18) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r5, 0x4b72, &(0x7f0000000000)={0x0, 0xffffff7e, 0x10, 0x1c, 0x200, &(0x7f0000000040)="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"}) fsopen(0x0, 0x0) syz_emit_ethernet(0x2a4, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r6 = syz_io_uring_setup(0x25a, &(0x7f00000003c0)={0x0, 0xb906, 0x0, 0x3, 0x69}, &(0x7f0000000380)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=@newsa={0x138, 0x10, 0x713, 0x40000, 0x0, {{@in6=@mcast2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@mcast1, 0x0, 0x32}, @in=@local, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000}, {0x0, 0x0, 0x0, 0xfffffffffffffffd}, {0x0, 0x0, 0x2}, 0x0, 0x0, 0xa, 0x5, 0xb}, [@algo_crypt={0x48, 0x2, {{'ecb-serpent-avx\x00'}}}]}, 0x138}}, 0x0) io_uring_enter(r6, 0x3f70, 0x0, 0x0, 0x0, 0x0) mount$afs(&(0x7f0000000540)=ANY=[@ANYBLOB='#syz1:'], &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) 26m11.139764938s ago: executing program 37 (id=904): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000240)={0x3, 0x0, 0x3, 0x6}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x38, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r2 = syz_io_uring_setup(0x10d, 0x0, 0x0, 0x0) r3 = io_uring_setup(0x79ae, &(0x7f0000000340)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, r2}) r4 = socket$inet6(0xa, 0x40000080806, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003dc0)=[{{&(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}, {{&(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}], 0x299, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000020c0)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000004c0)='\f', 0x1}], 0x1}}], 0xfdef, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, 0x0, 0x0) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6) bind$inet6(r4, &(0x7f000047b000)={0xa, 0x4e20, 0x4, @loopback}, 0x1c) listen(r4, 0x20000005) r7 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000001800), 0x80000, 0x0) read$FUSE(r7, &(0x7f0000003380)={0x2020}, 0x2020) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000540)={&(0x7f0000000680)=@deltaction={0xb0, 0x31, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffff}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}]}, @TCA_ACT_TAB={0x10, 0x1, [{0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xe9}}]}, @TCA_ACT_TAB={0x38, 0x1, [{0xc, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xe00}}, {0x10, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}]}, @TCA_ACT_TAB={0x38, 0x1, [{0xc, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0x10, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffffffff}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x8004}, 0x20000000) socket$inet6(0xa, 0x6, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 22m47.937375783s ago: executing program 7 (id=1321): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) keyctl$instantiate(0xc, 0x0, 0xffffffffffffffff, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000002c0)={0x0, 0x3}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000340)={r1, @in6={{0xa, 0x4e24, 0x10000, @empty, 0xbb191ec}}}, &(0x7f0000000400)=0x84) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) chdir(0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x441, 0x78) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x240080c4) connect$llc(r2, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) sendmmsg(r2, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) r4 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x4, 0x0, 0x5}, &(0x7f0000000240)=0x0, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet6_mptcp_buf(r6, 0x11c, 0x3, &(0x7f0000000000)=""/152, &(0x7f0000000100)=0x98) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f0000000440)={0x0, @in6={{0xa, 0x4e20, 0x1, @ipv4={'\x00', '\xff\xff', @broadcast}}}}, 0x84) dup(r0) syz_io_uring_submit(r5, 0x0, 0x0) io_uring_enter(r4, 0x47f6, 0x0, 0x0, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) arch_prctl$ARCH_REQ_XCOMP_GUEST_PERM(0x5005, 0x4000000002004003) 22m46.107047799s ago: executing program 7 (id=1326): symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f00000017c0)='./file0\x00') pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x880) r1 = syz_io_uring_setup(0x4396, &(0x7f0000000640)={0x0, 0x8f6, 0x80, 0x3, 0x382, 0x0, r0}, &(0x7f00000004c0)=0x0, &(0x7f0000000540)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x2001, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000300)={0x26, 'aead\x00', 0x0, 0x0, 'ccm-aes-ce\x00'}, 0x58) clock_adjtime(0xffffffd3, &(0x7f0000000440)={0x6, 0x0, 0x1, 0xfffffffe, 0x0, 0x4, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2a, 0x80, 0xd, 0xfffffffffffffff9, 0x1, 0x0, 0x1, 0x4, 0x0, 0xfffffffffffffffe}) mknod$loop(&(0x7f0000000280)='./file0/../file0\x00', 0x400, 0x1) execve(&(0x7f0000000200)='./file0\x00', &(0x7f0000000380)={[&(0x7f0000000240)='.\xc0:\x00', &(0x7f00000002c0)='#.\x01\'-[-\x00']}, &(0x7f0000000580)={[&(0x7f0000000440)='/dev/radio#\x00']}) r4 = socket$kcm(0x10, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0xffc0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="340000003b0007010000000000000000017c00000400fc800c00018006000600800a00000800028004007280080005"], 0x34}}, 0x4000) sendmsg$kcm(r4, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x29c780}) io_uring_enter(r1, 0x3516, 0xaddf, 0x2, 0x0, 0x1517f) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x14b101, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) socket$inet6_mptcp(0xa, 0x1, 0x106) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x1, 0x7fff0000}]}) flistxattr(r9, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_GET_DIRTY_LOG(r7, 0x4010ae42, &(0x7f0000000080)={0x0, 0x0, &(0x7f00007a4000/0x4000)=nil}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'wlan0\x00'}) 22m45.881794862s ago: executing program 7 (id=1327): socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x3, 0x300) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x7, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0xfffffffffffffead, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x10000000}}}]}, {0x3}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r4 = socket$netlink(0x10, 0x3, 0xa) r5 = dup(r4) r6 = open(&(0x7f0000000140)='./file1\x00', 0x109cc2, 0x40) ftruncate(r6, 0x200004) sendfile(r5, r6, 0x0, 0x80001d00c0d1) getsockname$l2tp(r0, &(0x7f0000000300)={0x2, 0x0, @dev}, &(0x7f0000000380)=0x10) recvmmsg(r0, &(0x7f0000000b40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/11, 0xb}}], 0x5df, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) 22m43.076146231s ago: executing program 7 (id=1333): mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000580), &(0x7f0000000480)='./file0\x00', &(0x7f0000000100), 0x1000816, &(0x7f0000000840)=ANY=[@ANYBLOB="78226e6f65786163638173733d616e792c63616368653d66736361636865"]) socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ptrace$ARCH_GET_FS(0x1e, r1, &(0x7f00000004c0), 0x1003) socketpair$unix(0x1, 0x2, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) syz_genetlink_get_family_id$nl80211(0x0, r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000000300)=@filter={'filter\x00', 0xe, 0x0, 0x90, [0x0, 0x20000240, 0x20000270, 0x200002a0], 0x0, 0x0, &(0x7f0000000240)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}]}, 0xe0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x24, 0x0, 0x1, 0x70bd24, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x380b}]}, 0x24}, 0x1, 0x0, 0x0, 0x4014001}, 0x9590f6cc3aa755b6) chdir(&(0x7f0000000280)='./file0\x00') r5 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x5) syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) io_setup(0x3ff, &(0x7f0000000500)) writev(r5, &(0x7f0000000040)=[{&(0x7f00000000c0)="14", 0x1}], 0x1) 22m42.731525215s ago: executing program 7 (id=1334): bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0xf, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9, 0x11e41e7a, 0x5, 0xfffffffc, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0xffffffffffffff2f, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0x21}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="e4000000260001000000000000000000d40000800c000000000000000000000050bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b50464dad7f2a778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086c"], 0xe4}], 0x1}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0xe5}]}, 0x8) sendto$inet(0xffffffffffffffff, 0x0, 0x218, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000fc0)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001f80)="f4c44888112286b0fcc69bd757ce93cb07d0fc06a737181e6d631bd33a045797a61ef10ed40bacc74ba22a30e95fee563e80a7b72785c9228135c08735074fa67b37265ed7c02c4ef3daa92203a132a03495015e1851e0c1ae6dbc065e5ce1a13628125962461d87568872f86754722903d8ea82ad4cc576bf23aa3c6e7698d4b1782e73437f4d3764fa218a906fece5ac822b235c663e8bab4b2a97d17de35fed53d6c3975d49c1b70a818a3b4b0b817611fd3e35cb404fbae19a2ccd774555fa4114264ee3f816868884152efbe74d74e848d99bcd3dadb274deb9dc820c78eaf983dfc234154e0b719c1e0a07710ffed4e0b283973e0d045ba23381c5ece9a52bec1937d95cec17e6ea7c387eef4a3412c18a78678283c97d20cd5860f0bd35e629cb541a965d5c1437f2580abdc1153e58614d2e8fd41478a5ee9aca37864e0a9f918c95e5dc45e011d60e53fed228f181f9fa80b1c9737c484298652b92ef7a0508fde423e178c6acfc33b67fcf516c4d93475715e908451ecc559152b20ac01da50697da05effe671f960a5b4b5392a95dd99fbf0b7fb0bd9d8077dad3a5e268dd8a013ef4014b4f1c11e0072d8f537fd6590317c3e9435ef43a7093d87694d7cbf0a35edca939294e580f2a7b04dd2884186c0e5977b7c836749d00c6ffa8c0796a4be2db5b14d83f843b7df9dc8bd7d09b24ac70221284042898b1c60b863a3ee69a8d78c7c5f851beef3fb7f33a0556eac8156d78e9b4945fa403cd84d1da7617daa4e8007f3a8acd", 0x22d}, {0x0}], 0x2}}], 0x1, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYRESDEC=r2, @ANYRES64=r0, @ANYRES32=r1, @ANYRES32], 0x48) 22m42.312166063s ago: executing program 7 (id=1336): symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f00000017c0)='./file0\x00') pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x880) r1 = syz_io_uring_setup(0x4396, &(0x7f0000000640)={0x0, 0x8f6, 0x80, 0x3, 0x382, 0x0, r0}, &(0x7f00000004c0)=0x0, &(0x7f0000000540)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x2001, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000300)={0x26, 'aead\x00', 0x0, 0x0, 'ccm-aes-ce\x00'}, 0x58) clock_adjtime(0xffffffd3, &(0x7f0000000440)={0x6, 0x0, 0x1, 0xfffffffe, 0x0, 0x4, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2a, 0x80, 0xd, 0xfffffffffffffff9, 0x1, 0x0, 0x1, 0x4, 0x0, 0xfffffffffffffffe}) mknod$loop(&(0x7f0000000280)='./file0/../file0\x00', 0x400, 0x1) execve(&(0x7f0000000200)='./file0\x00', &(0x7f0000000380)={[&(0x7f0000000240)='.\xc0:\x00', &(0x7f00000002c0)='#.\x01\'-[-\x00']}, &(0x7f0000000580)={[&(0x7f0000000440)='/dev/radio#\x00']}) r4 = socket$kcm(0x10, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0xffc0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="340000003b0007010000000000000000017c00000400fc800c00018006000600800a00000800028004007280080005"], 0x34}}, 0x4000) sendmsg$kcm(r4, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x29c780}) io_uring_enter(r1, 0x3516, 0xaddf, 0x2, 0x0, 0x1517f) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x14b101, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) socket$inet6_mptcp(0xa, 0x1, 0x106) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x1, 0x7fff0000}]}) flistxattr(r9, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_GET_DIRTY_LOG(r7, 0x4010ae42, &(0x7f0000000080)={0x0, 0x0, &(0x7f00007a4000/0x4000)=nil}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'wlan0\x00'}) 22m42.26461237s ago: executing program 38 (id=1336): symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f00000017c0)='./file0\x00') pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x880) r1 = syz_io_uring_setup(0x4396, &(0x7f0000000640)={0x0, 0x8f6, 0x80, 0x3, 0x382, 0x0, r0}, &(0x7f00000004c0)=0x0, &(0x7f0000000540)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x2001, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000300)={0x26, 'aead\x00', 0x0, 0x0, 'ccm-aes-ce\x00'}, 0x58) clock_adjtime(0xffffffd3, &(0x7f0000000440)={0x6, 0x0, 0x1, 0xfffffffe, 0x0, 0x4, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2a, 0x80, 0xd, 0xfffffffffffffff9, 0x1, 0x0, 0x1, 0x4, 0x0, 0xfffffffffffffffe}) mknod$loop(&(0x7f0000000280)='./file0/../file0\x00', 0x400, 0x1) execve(&(0x7f0000000200)='./file0\x00', &(0x7f0000000380)={[&(0x7f0000000240)='.\xc0:\x00', &(0x7f00000002c0)='#.\x01\'-[-\x00']}, &(0x7f0000000580)={[&(0x7f0000000440)='/dev/radio#\x00']}) r4 = socket$kcm(0x10, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0xffc0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="340000003b0007010000000000000000017c00000400fc800c00018006000600800a00000800028004007280080005"], 0x34}}, 0x4000) sendmsg$kcm(r4, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x29c780}) io_uring_enter(r1, 0x3516, 0xaddf, 0x2, 0x0, 0x1517f) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x14b101, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) socket$inet6_mptcp(0xa, 0x1, 0x106) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x1, 0x7fff0000}]}) flistxattr(r9, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_GET_DIRTY_LOG(r7, 0x4010ae42, &(0x7f0000000080)={0x0, 0x0, &(0x7f00007a4000/0x4000)=nil}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'wlan0\x00'}) 6.629910291s ago: executing program 9 (id=5675): r0 = creat(&(0x7f0000019080)='./file0\x00', 0xecf86c37d530494c) close(r0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') pread64(r1, &(0x7f0000000080)=""/102356, 0x18fd4, 0xc2a) execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000019140)={[&(0x7f0000000380)=' T\xfc\x81\x8e\x9f5\x0e \x043[B\xad\x13\x9f\xae\x8f\xbb\x9a\x0f\x9f\x03\xa5\xfc9\xbb\xa4.\xf4\xeb\x03\xf1\xb6\x8c\xc4E\x93\n&k\xec\xc8\xdch\xd6\x1e\xcb\fA\\da/O\xdcn7\x1b@\xbf\xfb\x17J\xaaD\xe4\x01\xbc'], 0x20000000}, &(0x7f0000019100)={[&(0x7f0000000200)=' ']}) 6.569968422s ago: executing program 9 (id=5676): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@host}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f0000000180)={{@my=0x0}, 0x0, 0x1}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f00000000c0)={{@my=0x0}, 0x1, 0x1, 0xc}) 6.569770268s ago: executing program 9 (id=5677): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000180), &(0x7f0000000240)=0x4) 6.515657711s ago: executing program 9 (id=5678): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)=ANY=[@ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="02"], 0x10) socket$l2tp(0x2, 0x2, 0x73) 6.515431352s ago: executing program 9 (id=5679): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x18, 0x10, &(0x7f0000000380)=ANY=[@ANYBLOB="ada8c2b8bffe179d84126fcf34973f1cf2b78d7a7fcd84573e7dabe0ea07b54f8a2eeb2b9c434c2996741c48ce27d6e4f01798afc2ee25f2eccfd2cbd4554e3052b6fddfc72904a98699fe985ea3e4fc124bdc4ba02ee285cab43332ade86df944", @ANYRESOCT=r0, @ANYRESOCT=r0, @ANYRESDEC=r0], &(0x7f0000000580)='GPL\x00', 0x8, 0xa2, &(0x7f0000000140)=""/162, 0x41100, 0x50, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000440)=0x200002) r3 = syz_open_dev$I2C(&(0x7f0000003000), 0x0, 0x0) r4 = openat$rdma_cm(0xffffff9c, &(0x7f00000002c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) r5 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) r6 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000002c0)={'syz', 0x0}, 0x0, 0x0, r5) pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r5, r7, 0xaa) r8 = add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000000)={'fscrypt:', @auto=[0x0, 0x62, 0xed387c4ce0ae6b0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x0, 0x63, 0x35, 0x0, 0x0, 0x66, 0x32]}, &(0x7f0000000180)={0x0, "de8d0d27ca969fa15f8b3b7bae39c1b3327d4332f8c149d2d65a347d67f6db7eb90dfdad3cdebaaf421412e712305c9da91699b5a02c1295596f0fd9ec78f2fd"}, 0x48, r5) keyctl$KEYCTL_MOVE(0x1e, r8, r5, r6, 0x0) keyctl$dh_compute(0x17, &(0x7f00000007c0)={0x0, 0x0, r8}, &(0x7f0000000500)=""/45, 0x2d, &(0x7f0000000940)={&(0x7f0000000540)={'sha1-generic\x00'}, &(0x7f0000000880)="3055a6bbf5a75cf2a61730ae46db44aa9264c6b1a105bba3b50a8becc30fcb06d8562e3cf70486532c6866a968c1863c4511d6b22db5d4a428b29d30a99d96952a3665997505187002c08fd7d1cb6b47618cfc18e339e6b5d025ae41e7dc3ca9f069e745427af77779656a7bd810f172759f6cb4ba7e9f58c3cd719f878a2ddef394d7eaa7f75f2f787038eced34c3425e19d6ffc41095dc163bcb1e0b9baac93af5e94b0bbac36559b32462198c", 0xae}) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r4, &(0x7f0000000680)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0xd, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @local}, @ib={0x1b, 0x5, 0x6, {"db222fedf9bd54687b2bae83a6d7585c"}, 0x742, 0x7, 0xb85e}}}, 0x118) ioctl$I2C_SMBUS(r3, 0x720, &(0x7f0000003080)={0x1, 0x0, 0x6, &(0x7f0000003040)={0x0, "f4e1a230be8f46463fb1a5f1b44f44eaa65e485b747aa95df8c01eaf07677d18bc"}}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x44) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 6.265040136s ago: executing program 9 (id=5687): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x18, 0x10, &(0x7f0000000380)=ANY=[@ANYBLOB="ada8c2b8bffe179d84126fcf34973f1cf2b78d7a7fcd84573e7dabe0ea07b54f8a2eeb2b9c434c2996741c48ce27d6e4f01798afc2ee25f2eccfd2cbd4554e3052b6fddfc72904a98699fe985ea3e4fc124bdc4ba02ee285cab43332ade86df944", @ANYRESOCT=r0, @ANYRESOCT=r0, @ANYRESDEC=r0], &(0x7f0000000580)='GPL\x00', 0x8, 0xa2, &(0x7f0000000140)=""/162, 0x41100, 0x50, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000440)=0x200002) r3 = syz_open_dev$I2C(&(0x7f0000003000), 0x0, 0x0) r4 = openat$rdma_cm(0xffffff9c, &(0x7f00000002c0), 0x2, 0x0) r5 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) r6 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000002c0)={'syz', 0x0}, 0x0, 0x0, r5) pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r5, r7, 0xaa) r8 = add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000000)={'fscrypt:', @auto=[0x0, 0x62, 0xed387c4ce0ae6b0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x0, 0x63, 0x35, 0x0, 0x0, 0x66, 0x32]}, &(0x7f0000000180)={0x0, "de8d0d27ca969fa15f8b3b7bae39c1b3327d4332f8c149d2d65a347d67f6db7eb90dfdad3cdebaaf421412e712305c9da91699b5a02c1295596f0fd9ec78f2fd"}, 0x48, r5) keyctl$KEYCTL_MOVE(0x1e, r8, r5, r6, 0x0) keyctl$dh_compute(0x17, &(0x7f00000007c0)={0x0, 0x0, r8}, &(0x7f0000000500)=""/45, 0x2d, &(0x7f0000000940)={&(0x7f0000000540)={'sha1-generic\x00'}, &(0x7f0000000880)="3055a6bbf5a75cf2a61730ae46db44aa9264c6b1a105bba3b50a8becc30fcb06d8562e3cf70486532c6866a968c1863c4511d6b22db5d4a428b29d30a99d96952a3665997505187002c08fd7d1cb6b47618cfc18e339e6b5d025ae41e7dc3ca9f069e745427af77779656a7bd810f172759f6cb4ba7e9f58c3cd719f878a2ddef394d7eaa7f75f2f787038eced34c3425e19d6ffc41095dc163bcb1e0b9baac93af5e94b0bbac36559b32462198c", 0xae}) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r4, &(0x7f0000000680)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0xd, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @local}, @ib={0x1b, 0x5, 0x6, {"db222fedf9bd54687b2bae83a6d7585c"}, 0x742, 0x7, 0xb85e}}}, 0x118) ioctl$I2C_SMBUS(r3, 0x720, &(0x7f0000003080)={0x1, 0x0, 0x6, &(0x7f0000003040)={0x0, "f4e1a230be8f46463fb1a5f1b44f44eaa65e485b747aa95df8c01eaf07677d18bc"}}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x44) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 5.039711889s ago: executing program 3 (id=5698): unshare(0x8000000) r0 = mq_open(&(0x7f00000000c0)='${$\x00', 0x840, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x4}]}) syz_open_dev$vcsa(0x0, 0x1, 0x45c0) close_range(r0, 0xffffffffffffffff, 0x0) 4.189709916s ago: executing program 3 (id=5701): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[@ANYRES32=r1, @ANYRES32=r0, @ANYBLOB="04"], 0x10) close(r0) close(0x4) 4.129943526s ago: executing program 3 (id=5702): r0 = syz_usb_connect(0x5, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0x5b06, 0x0) 2.469747815s ago: executing program 6 (id=5709): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000140)=0x5d54, 0x4) bind$bt_hci(r0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41201}}, 0x20}}, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x585d, 0xfe}, [@IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x840}, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r6, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) r7 = syz_open_dev$dri(&(0x7f0000000000), 0x29, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r7, 0xc05064a7, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)=[0x0], &(0x7f00000000c0), 0x0, 0x1, 0x0, 0x0, r8}) ioctl$DRM_IOCTL_MODE_ATOMIC(r6, 0xc03864bc, &(0x7f0000000180)={0x0, 0x1, &(0x7f00000002c0)=[r8], &(0x7f0000000140)=[0x7], &(0x7f0000000800)=[r9], &(0x7f0000000100), 0x0, 0x400000000}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc01c64b9, &(0x7f0000000200)={&(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x7, r8, 0xeeeeeeee}) 1.570039316s ago: executing program 6 (id=5710): r0 = openat$vim2m(0xffffff9c, &(0x7f0000000b00), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc0f8565c, &(0x7f0000000000)={0x0, 0xbd5, 0x2, {0x2, @raw_data="f91fd2868ba3d9189024fc40809db9e19479c0b5fce2c721330d5771dbf9dbfa9e2ad24622489141b4803cfeb0b70909e75715a13fada32fef53473eb9ce014fbe3929ea41fdeb0ff177dfb9d3227f213a6451b667d35b03b25618d20cea1f072990b86d463a0de7513744a2bb3bf4fb6049e30f7c533837beba9566c9fd8721c48fad424a5fb17bc1419fb85e5e7dce382ba5a1ce182b419becd67c18f0ba055b8d72225df5a5e7917f8a87a52b8c2516745c462e944b0c22a7e71ecf492a0ef916598abba0e732"}}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc04c560f, &(0x7f0000000180)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x1, {}, {0x0, 0x8, 0x0, 0x0, 0x0, 0x0, "5c0a0551"}, 0x0, 0x1, {0x0}, 0x2, 0x20000000}) 1.479835174s ago: executing program 6 (id=5711): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$getregset(0x4204, r0, 0x202, &(0x7f0000000100)={0x0}) 1.409629766s ago: executing program 6 (id=5712): r0 = socket(0x10, 0x3, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1, 0x0, 0x0, 0x5}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="24000000680001"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 1.409314848s ago: executing program 8 (id=5713): r0 = io_uring_setup(0x310f, &(0x7f0000000280)={0x0, 0x5f95, 0x40, 0xfffffffe, 0x2000}) r1 = fsopen(&(0x7f0000000000)='exfat\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000080)='iocharset', &(0x7f00000000c0)='io#harset', 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.40901499s ago: executing program 6 (id=5714): mkdir(&(0x7f0000000140)='./file0\x00', 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x92) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0xfffffd00, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) socket$igmp(0x2, 0x3, 0x2) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x26c02, &(0x7f0000001540)='\r\x87\x17^\x981\xd5\x14\xe2\x81\xa6\xcd\t\xa5\xbasG\x88\x7f]\x03\xf3\xd5t\x97\x9f\xee\"\xebU\xccM\x02\x17\x0f[\x9c\x9e\xa6\xd2\xe4(\xea\x7f\xe4\x90K\xcb\xb5;f\x02}\x147\x04=\xe50\x8d;\x90!\x01,\xdb,\xb9\x8e\t\x13\x1eh\xbc^<\xd2\x809G\xe6H\xbb&^\\\x9c\xady\xd9\xb5\xa3\x16\xd0\xdf\x1a\xaa\xfcHz\x89\x19\xe1\xe6+\xf6\xc3\xad\x80\x98\xc2\x10\x91\xec\xf6\x93=\xbe\x10\xfc`\x86\xa7\xe6\xae\x00*R\x92\x05\xf6\x80u\xf9\xb7S{\xd6\x99\x9a\xf3\xcc\x04o\xdd\x91 \x92;\x87\xfb\x82c>\x82VR8\xe5\x0f\xeb\xcdJz\f\xf5.\xd7!\xa1\xfe\xc8\xf0\xb5\\\xc2\xc7\xc7\xaa\xd9:\xa3+\x12\x9f\xfc\xf6@},`=\xea\x91\fJ\xe4\rC\xa9\xe0\x8b%\x9f\'\xbdX\xbfS\x00\x8c\x84\x10\xcf\xf0\xd7\xe0\xf9\xf8E\xa3?\x17\\\x9e\n\xa1h!\x9e\xd8\xe8\xa5\xc5\xbf_\xa7\xc9\x91U\x86=\xa5\xf7g~\xaa\xc8N\"^\x8e%') r4 = socket$netlink(0x10, 0x3, 0x0) r5 = syz_open_dev$mouse(&(0x7f0000000180), 0x1, 0x84000) ioctl$SIOCGIFMTU(r5, 0x8921, &(0x7f0000000340)={'team_slave_0\x00'}) ioctl$sock_SIOCBRDELBR(r4, 0x89a2, &(0x7f0000000000)='bridge0\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f0000000340)=ANY=[@ANYRES32], &(0x7f0000000bc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) listen(r0, 0x3) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc0000001900010000000000004a5cb823000000000000000000000000000000fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES16=r6, @ANYRES32=0x0, @ANYRES32=0x0], 0xfc}, 0x1, 0x0, 0x0, 0x1}, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000140)={@multicast, @link_local, @void, {@arp={0x806, @generic={0x306, 0x19, 0x6, 0x9, 0x1, @multicast, "c4c42df5043c1bc36f", @random="786834771c1e", "e1f014a45e1f5f"}}}}, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@metacopy_on}]}) socket$kcm(0x29, 0x2, 0x0) 1.405442518s ago: executing program 8 (id=5715): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000b40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000000)={0x2c, r1, 0x1, 0x70bd25, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STA_FLAGS={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x40004) 1.340072851s ago: executing program 8 (id=5716): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)={0x68, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x3c, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac, {0x0, 0x9}}, 0x0, @default, 0x1882, @void, @val, @void, @val={0x4, 0x6, {0x7, 0x4, 0x1, 0x4}}, @void, @val={0x5, 0x3, {0x6, 0xac, 0x26}}, @val={0x25, 0x3, {0x0, 0x38, 0x6b}}, @void, @void, @void, @void, @void, @void}}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x68}}, 0x0) 1.339816423s ago: executing program 8 (id=5717): mkdir(&(0x7f0000000140)='./file0\x00', 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x92) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0xfffffd00, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) socket$igmp(0x2, 0x3, 0x2) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)='autofs\x00', 0x26c02, &(0x7f0000001540)='\r\x87\x17^\x981\xd5\x14\xe2\x81\xa6\xcd\t\xa5\xbasG\x88\x7f]\x03\xf3\xd5t\x97\x9f\xee\"\xebU\xccM\x02\x17\x0f[\x9c\x9e\xa6\xd2\xe4(\xea\x7f\xe4\x90K\xcb\xb5;f\x02}\x147\x04=\xe50\x8d;\x90!\x01,\xdb,\xb9\x8e\t\x13\x1eh\xbc^<\xd2\x809G\xe6H\xbb&^\\\x9c\xady\xd9\xb5\xa3\x16\xd0\xdf\x1a\xaa\xfcHz\x89\x19\xe1\xe6+\xf6\xc3\xad\x80\x98\xc2\x10\x91\xec\xf6\x93=\xbe\x10\xfc`\x86\xa7\xe6\xae\x00*R\x92\x05\xf6\x80u\xf9\xb7S{\xd6\x99\x9a\xf3\xcc\x04o\xdd\x91 \x92;\x87\xfb\x82c>\x82VR8\xe5\x0f\xeb\xcdJz\f\xf5.\xd7!\xa1\xfe\xc8\xf0\xb5\\\xc2\xc7\xc7\xaa\xd9:\xa3+\x12\x9f\xfc\xf6@},`=\xea\x91\fJ\xe4\rC\xa9\xe0\x8b%\x9f\'\xbdX\xbfS\x00\x8c\x84\x10\xcf\xf0\xd7\xe0\xf9\xf8E\xa3?\x17\\\x9e\n\xa1h!\x9e\xd8\xe8\xa5\xc5\xbf_\xa7\xc9\x91U\x86=\xa5\xf7g~\xaa\xc8N\"^\x8e%') r4 = socket$netlink(0x10, 0x3, 0x0) syz_open_dev$mouse(&(0x7f0000000180), 0x1, 0x84000) ioctl$sock_SIOCBRDELBR(r4, 0x89a2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f0000000340)=ANY=[@ANYRES32], &(0x7f0000000bc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) listen(r0, 0x3) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc0000001900010000000000004a5cb823000000000000000000000000000000fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES16=r5, @ANYRES32=0x0, @ANYRES32=0x0], 0xfc}, 0x1, 0x0, 0x0, 0x1}, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000140)={@multicast, @link_local, @void, {@arp={0x806, @generic={0x306, 0x19, 0x6, 0x9, 0x1, @multicast, "c4c42df5043c1bc36f", @random="786834771c1e", "e1f014a45e1f5f"}}}}, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@metacopy_on}]}) socket$kcm(0x29, 0x2, 0x0) 1.109247974s ago: executing program 3 (id=5718): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000006300)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000390000000000000000000000850000004100000085000000a000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r2, r1, 0x25, 0x0, @void}, 0xe) syz_emit_ethernet(0x66, &(0x7f0000000280)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x30, 0x3a, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, @mcast2, {[], @time_exceed={0x3, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, '%kT', 0x0, 0x0, 0x0, @mcast1, @dev}}}}}}}, 0x0) 1.058958097s ago: executing program 3 (id=5719): socket(0x23, 0x800, 0x401) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002080)=@newtaction={0xe08, 0x30, 0x1, 0x0, 0x0, {}, [{0xdf4, 0x1, [@m_police={0xda8, 0x12, 0x0, 0x0, {{0xb}, {0xcec, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE64={0xc, 0x8, 0x5}, @TCA_POLICE_RESULT={0x8, 0x5, 0xab}], [@TCA_POLICE_AVRATE={0x8, 0x4, 0x7fffffff}, @TCA_POLICE_RATE64={0xc, 0x8, 0x80}], [@TCA_POLICE_AVRATE={0x8, 0x4, 0x1ff}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x2}, @TCA_POLICE_RESULT={0x8, 0x5, 0x4}, @TCA_POLICE_RESULT={0x8, 0x5, 0x5c21}, @TCA_POLICE_RESULT={0x8, 0x5, 0x7}, @TCA_POLICE_RESULT={0x8, 0x5, 0x5}, @TCA_POLICE_RATE={0x404, 0x2, [0xc, 0x22f96dd1, 0x14, 0x1, 0x7f, 0x8000, 0x7, 0x3, 0xb3f6, 0x1000, 0x2, 0x9, 0x9, 0xe, 0x80000000, 0x1c2, 0x3, 0x3425, 0x80, 0x7, 0x9, 0xfffffffa, 0x9, 0x1, 0x3, 0x9, 0xd9, 0x401, 0x8001, 0x266a, 0xdf56, 0xfd, 0x6, 0xfffffffc, 0x9, 0xfffffffe, 0x8, 0xf5d2, 0x2, 0x6, 0x9, 0x5, 0x2, 0x8d6, 0xf, 0x6, 0x7, 0x8, 0x6ee5, 0x6, 0xff, 0x8001, 0x0, 0xffff, 0x2dab, 0x9, 0x5, 0x81, 0x0, 0x9, 0x10000, 0x6, 0xfffffe1d, 0x2, 0x0, 0x4, 0xfff, 0x6, 0x7ff, 0x0, 0x2, 0x9, 0x1ff, 0x3, 0x1, 0x2, 0x81, 0x5, 0xf2, 0x1, 0x2, 0x8, 0x2, 0x5, 0x2, 0x5, 0x8, 0x1, 0x7, 0x9, 0xb4, 0x0, 0x5, 0x8, 0xa4, 0x6, 0x3, 0x7ffd, 0x10000, 0xd, 0x7f, 0x111a1245, 0x1, 0x80000001, 0xa94, 0x3, 0x0, 0x1b, 0x9, 0x5, 0x4, 0x7, 0x3, 0x1, 0x2, 0x8, 0xa1, 0xb, 0x8000, 0x2, 0x10000, 0x6, 0x6, 0x0, 0x2, 0x8, 0x7, 0x4, 0xb, 0x7ff, 0x401, 0x93e7, 0x0, 0xc, 0x6f9, 0x4, 0x5, 0x8fb, 0x3, 0x2, 0xf29a, 0x6, 0x6c, 0x70000000, 0x2, 0x9, 0x3, 0x800, 0x14dd, 0x8, 0xb8, 0x5, 0x1, 0x8, 0x1, 0x80000001, 0x8, 0xd1b, 0x4, 0xfffffff4, 0x1ff, 0x0, 0x0, 0x9, 0xd, 0x440, 0x1aa, 0x7, 0x80000000, 0x1, 0x1, 0x7fffffff, 0x5, 0x1, 0x4, 0x7, 0x5, 0x9, 0x5, 0x0, 0xf7, 0x45c, 0x9, 0x56, 0x7, 0x0, 0x200, 0x82a3, 0xe4000000, 0x8, 0x2, 0x2, 0x9, 0x3, 0x7, 0xad, 0x2, 0x3, 0xe, 0xf144, 0x4, 0x4, 0x7, 0x3, 0xffff0762, 0x4915, 0x4, 0x40, 0x80000001, 0xc000, 0x9, 0x1, 0x723, 0xfffffffe, 0xd, 0xfffffff9, 0x0, 0x3cf, 0xf0000000, 0xffffb918, 0x0, 0x4, 0xbda, 0x3ff, 0x2, 0x0, 0x3, 0x401, 0x7, 0x4, 0x9, 0x1, 0x7, 0x2d1b, 0xffffff9a, 0xa, 0x9, 0x4, 0x3, 0x1, 0x800, 0x83, 0xfffff639, 0x5, 0x1, 0x1, 0x9, 0x9, 0x69de, 0x5, 0x80, 0x1, 0x0, 0x4, 0x0, 0xffff]}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x10001, 0xe394, 0x6a0c, 0xbe8e, 0x80, 0x2, 0x10001, 0x4, 0x9, 0x4e73, 0x8, 0x0, 0xbef, 0x9, 0x7ff, 0xfff, 0x1, 0x3, 0x7, 0x7fff, 0x2, 0xff, 0x1ff, 0xa, 0x7, 0x14a, 0x2, 0x1, 0x9, 0x6, 0x7, 0x6, 0x3, 0x1, 0x800, 0xf, 0x3ff, 0x8, 0x7, 0x2, 0x6, 0x3, 0x80000000, 0x8, 0x8, 0x3, 0x200, 0x7ff, 0xfffffffa, 0x3, 0x5, 0xb55d, 0x8, 0x7, 0x101, 0xc, 0x8, 0x3, 0x8, 0xfffffffb, 0xfffff800, 0x2, 0x7, 0x6, 0x85b, 0x8000, 0x8, 0x9, 0x400, 0x2, 0x4, 0x3, 0x100, 0x293e, 0x4b8d, 0xfff, 0x7, 0xfffffffa, 0x356, 0x2, 0x7, 0x0, 0x80000000, 0x2, 0x9, 0xde, 0x7f, 0xf, 0x70, 0x666, 0xa, 0x10000, 0x5, 0x2, 0xb, 0x8000, 0x0, 0x3, 0x3ff, 0xbec8, 0x8, 0x81, 0xfff, 0xda, 0x410e, 0x10000, 0xbd37, 0x9, 0x8, 0x4, 0x6, 0x5, 0xffffff80, 0x100, 0x8001, 0x1, 0x4, 0x0, 0x8, 0x8, 0x10000, 0x6, 0x1, 0x547, 0x0, 0x3, 0xf, 0x4, 0x1, 0x378, 0x4, 0x4, 0x3, 0x2, 0x9, 0xfffffff0, 0x0, 0x7, 0xfffffff7, 0xeb, 0xd8a, 0x1, 0x101, 0x1d5d, 0x9, 0xb168, 0x8, 0x800, 0xfb, 0x5, 0x4, 0x3, 0x9, 0x9, 0x9, 0xc7a8, 0x1000, 0xc, 0x142, 0x81, 0x8, 0x8, 0x8, 0x5, 0xfffffff8, 0x7f, 0x5, 0x6, 0x3, 0xff, 0x0, 0x863, 0x5, 0x10, 0x2, 0x3, 0x8000, 0x5, 0x400, 0x2fad56bb, 0x33, 0x41d, 0x20, 0x5, 0x6, 0x19, 0xed3, 0xb, 0xa, 0x2, 0x1000000, 0x3, 0x0, 0x3ff, 0x9, 0x4, 0xfffffff7, 0x4, 0xac26, 0x4, 0x6, 0xd53, 0x4, 0x3, 0x4, 0xfff, 0xfffffff7, 0x7, 0xc, 0x2d, 0x7, 0xf, 0x4, 0x800, 0x9fef, 0x1, 0x5, 0xfffffffa, 0x1c63, 0x3, 0x6, 0xc, 0xd, 0x1, 0x6, 0xf, 0x9, 0xc8b4, 0x3, 0x8, 0x4, 0xfffff801, 0xb, 0x401, 0x0, 0x80000000, 0x0, 0x0, 0x8001, 0xc316, 0x7, 0xffffff01, 0x7, 0xa, 0x5f, 0x3, 0x5, 0x2, 0x7, 0x3, 0x7, 0x1, 0x4, 0x6, 0x4]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x26, 0x1000, 0x1, 0x7, 0xdf8, 0x6, 0x9, 0x51e, 0xc7, 0x1, 0x7, 0x100, 0xed54, 0x8000, 0x6, 0x10000, 0x0, 0xca, 0x1, 0xe284, 0xfffffff6, 0x3, 0x19, 0x7, 0x8, 0x0, 0x7, 0x6, 0x1bb8, 0x7f, 0xf, 0x9, 0xb, 0x6c00000, 0x8, 0x2e, 0x7, 0x5, 0x2, 0x3, 0x3ff, 0x7, 0x1, 0x6a9d, 0x80000000, 0x9, 0x0, 0x80, 0x80000001, 0x8, 0x7fffffff, 0x3, 0x6, 0xffffffff, 0x7fdbfe54, 0x80, 0x5, 0x9d12, 0x1, 0x2, 0x8, 0x4, 0x6c, 0xc0000000, 0x81, 0x9, 0x0, 0x2, 0x1, 0xfffffff5, 0x6, 0x5, 0x401, 0x3, 0x6, 0x5, 0x5, 0xb9b, 0x3338, 0x9, 0x3, 0x6, 0x8d3, 0x6, 0x5, 0x7, 0x7f, 0x1, 0xff4, 0x0, 0x42ba, 0x8001, 0x7, 0xfffffffe, 0xffffff4e, 0x8, 0x800, 0x9, 0x7ff, 0xfff, 0x101, 0x6, 0x7fff, 0xffff, 0x529d, 0x0, 0x1000, 0x5, 0x101, 0x8, 0xf, 0x7, 0x6, 0x9, 0x58, 0xf99, 0x0, 0x0, 0x2, 0x7, 0x101, 0xc, 0x7fffffff, 0x5, 0x0, 0x3, 0x2, 0x6, 0x14, 0x80000000, 0x7, 0x1, 0xfffffff7, 0x2, 0x3, 0x401, 0x6, 0x3, 0x0, 0x4, 0x9, 0xfffffff8, 0xf2, 0x2, 0x3ff, 0x7e1, 0x2, 0x0, 0x2, 0x4, 0x10, 0x5, 0x8, 0x0, 0x80000001, 0x10000, 0xf1, 0x6, 0x1, 0x8, 0x5, 0x9, 0x2d4, 0x5, 0x7f, 0x80, 0x91, 0x4, 0x6, 0x0, 0x80000001, 0xd7, 0x50000, 0x6, 0xc, 0x400, 0x5, 0x7fffffff, 0x6, 0x8, 0x9, 0x3, 0x5, 0x0, 0x3ff, 0xd883, 0x4f1, 0x3, 0xe, 0x2, 0x4e, 0x6, 0x5, 0x1, 0x2, 0xfff000, 0x2, 0x8, 0x3, 0x4, 0x0, 0x800, 0x0, 0x2, 0x100d, 0x1000, 0x0, 0x3, 0x10000, 0xc9, 0x3eb3, 0x6, 0x7, 0x50, 0x3, 0x5, 0x101, 0xff, 0x9, 0x2, 0x7fffffff, 0x685, 0x80, 0x6, 0x5, 0x4, 0x0, 0x8, 0x8, 0xb, 0x9, 0x10001, 0x4, 0x1, 0x6, 0x3, 0x9, 0x8, 0x1000, 0x10000000, 0x800, 0x2, 0x10000, 0x8, 0x2, 0xfffffff3, 0xfff, 0xfffffff9, 0x8000, 0xffff, 0x9, 0x3, 0x8, 0x1, 0x3, 0x4]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0x8, 0xffffffff, 0x3, 0x1, {0x2, 0x0, 0x3, 0x2, 0x3, 0xfffffff2}, {0x9, 0x2, 0x49, 0x6e6, 0x7, 0x3e}, 0x1, 0x6, 0x3}}, @TCA_POLICE_TBF={0x3c, 0x1, {0xb2, 0x5, 0x8, 0x7, 0x9, {0x9, 0x0, 0x5, 0x6, 0x40, 0xe}, {0x2, 0x1, 0x7, 0x4, 0x0, 0x1}, 0x6, 0x0, 0x8}}, @TCA_POLICE_RATE64={0xc, 0x8, 0x8}]]}, {0x91, 0x6, "9f067441e35387f9eb94306756a47884a20ef62fa23b88b803ed5340d0dbfbf4f4417963b2dd479f11d85f0835ce082caede856f4be0f0088387e75d5ff2c1035fbaec1ff557d285787b0b8916f0985145d776df73a6cabb41c5073732efc9a8f1c869506bf69a0fb9dafa2f09aa8e70816f0d555dd6842c001d6d316b922ee0f0bde5cf1ed2c46f45c7a427d6"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe08}, 0x1, 0x0, 0x0, 0x804}, 0x0) syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x40d, 0x70bd28, 0x25ffdbfc, {0x0, 0x0, 0x0, 0x0, 0x10}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x84}, @IFLA_BR_HELLO_TIME={0x8, 0x2, 0x6}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r5 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, 0x0, &(0x7f0000000240)='{}k%@\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) gettid() fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = dup(r6) ioctl$TCSETSF(r7, 0x5404, &(0x7f00000005c0)={0x8000, 0xc2cf, 0xfffffffc, 0x4, 0xd, "00e4fdab790000fb00"}) write$UHID_INPUT(r7, &(0x7f0000001040)={0xd, {"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", 0x1010}}, 0x1b7) 489.897883ms ago: executing program 6 (id=5720): mkdir(&(0x7f0000000140)='./file0\x00', 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x92) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0xfffffd00, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) socket$igmp(0x2, 0x3, 0x2) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)='autofs\x00', 0x26c02, &(0x7f0000001540)='\r\x87\x17^\x981\xd5\x14\xe2\x81\xa6\xcd\t\xa5\xbasG\x88\x7f]\x03\xf3\xd5t\x97\x9f\xee\"\xebU\xccM\x02\x17\x0f[\x9c\x9e\xa6\xd2\xe4(\xea\x7f\xe4\x90K\xcb\xb5;f\x02}\x147\x04=\xe50\x8d;\x90!\x01,\xdb,\xb9\x8e\t\x13\x1eh\xbc^<\xd2\x809G\xe6H\xbb&^\\\x9c\xady\xd9\xb5\xa3\x16\xd0\xdf\x1a\xaa\xfcHz\x89\x19\xe1\xe6+\xf6\xc3\xad\x80\x98\xc2\x10\x91\xec\xf6\x93=\xbe\x10\xfc`\x86\xa7\xe6\xae\x00*R\x92\x05\xf6\x80u\xf9\xb7S{\xd6\x99\x9a\xf3\xcc\x04o\xdd\x91 \x92;\x87\xfb\x82c>\x82VR8\xe5\x0f\xeb\xcdJz\f\xf5.\xd7!\xa1\xfe\xc8\xf0\xb5\\\xc2\xc7\xc7\xaa\xd9:\xa3+\x12\x9f\xfc\xf6@},`=\xea\x91\fJ\xe4\rC\xa9\xe0\x8b%\x9f\'\xbdX\xbfS\x00\x8c\x84\x10\xcf\xf0\xd7\xe0\xf9\xf8E\xa3?\x17\\\x9e\n\xa1h!\x9e\xd8\xe8\xa5\xc5\xbf_\xa7\xc9\x91U\x86=\xa5\xf7g~\xaa\xc8N\"^\x8e%') r4 = socket$netlink(0x10, 0x3, 0x0) r5 = syz_open_dev$mouse(&(0x7f0000000180), 0x1, 0x84000) ioctl$SIOCGIFMTU(r5, 0x8921, 0x0) ioctl$sock_SIOCBRDELBR(r4, 0x89a2, &(0x7f0000000000)='bridge0\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f0000000340)=ANY=[@ANYRES32], &(0x7f0000000bc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) listen(r0, 0x3) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc0000001900010000000000004a5cb823000000000000000000000000000000fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES16=r6, @ANYRES32=0x0, @ANYRES32=0x0], 0xfc}, 0x1, 0x0, 0x0, 0x1}, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000140)={@multicast, @link_local, @void, {@arp={0x806, @generic={0x306, 0x19, 0x6, 0x9, 0x1, @multicast, "c4c42df5043c1bc36f", @random="786834771c1e", "e1f014a45e1f5f"}}}}, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@metacopy_on}]}) socket$kcm(0x29, 0x2, 0x0) 340.020284ms ago: executing program 8 (id=5721): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000480)={0x3c, r2, 0xb97534d5fe9704cf, 0x0, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x580}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 289.8167ms ago: executing program 8 (id=5722): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000140)="f7", 0x1}], 0x1}}], 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000040)=0x20000, 0x4) 0s ago: executing program 3 (id=5723): r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r1 = socket(0x2b, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DISCONNECT(r0, 0xab08) kernel console output (not intermixed with test programs): tes leftover after parsing attributes in process `syz.3.4144'. [ 1571.834533][T28723] syz.8.4143: attempt to access beyond end of device [ 1571.834533][T28723] nbd8: rw=0, sector=2, nr_sectors = 2 limit=0 [ 1571.840657][T28723] MINIX-fs: unable to read superblock [ 1572.347012][T28722] team0 (unregistering): Port device team_slave_0 removed [ 1572.351164][T28722] team0 (unregistering): Port device team_slave_1 removed [ 1572.388721][T28722] team0 (unregistering): Port device veth0_to_team removed [ 1573.100275][T28740] netlink: 72 bytes leftover after parsing attributes in process `syz.8.4148'. [ 1573.196382][T28745] IPVS: Error connecting to the multicast addr [ 1574.363392][T28770] lo speed is unknown, defaulting to 1000 [ 1575.432026][T28788] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4154'. [ 1575.445212][T28788] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4154'. [ 1576.612887][T28803] netfs: Couldn't get user pages (rc=-14) [ 1577.540335][T28821] netfs: Couldn't get user pages (rc=-14) [ 1577.818611][T28828] netlink: 72 bytes leftover after parsing attributes in process `syz.3.4163'. [ 1578.341430][T28832] netlink: 168 bytes leftover after parsing attributes in process `syz.6.4164'. [ 1578.344134][T28832] netlink: 168 bytes leftover after parsing attributes in process `syz.6.4164'. [ 1578.617767][T28841] xt_CT: No such helper "syz1" [ 1579.019378][T28839] netlink: 72 bytes leftover after parsing attributes in process `syz.3.4168'. [ 1579.097769][T28846] input: syz1 as /devices/virtual/input/input35 [ 1579.694964][T28854] netfs: Couldn't get user pages (rc=-14) [ 1580.444498][T28861] ipvlan1: entered allmulticast mode [ 1580.446550][T28861] veth0_vlan: entered allmulticast mode [ 1580.816904][T28865] netlink: 72 bytes leftover after parsing attributes in process `syz.6.4172'. [ 1581.558587][T28872] netlink: 72 bytes leftover after parsing attributes in process `syz.3.4174'. [ 1581.751932][T28868] mkiss: ax0: crc mode is auto. [ 1581.960944][T28880] netlink: 72 bytes leftover after parsing attributes in process `syz.9.4176'. [ 1583.725908][T28906] netlink: 'syz.9.4181': attribute type 9 has an invalid length. [ 1584.720284][T28916] netlink: 72 bytes leftover after parsing attributes in process `syz.8.4183'. [ 1584.971015][T28922] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4184'. [ 1584.985371][T28922] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4184'. [ 1585.693200][T28941] usb usb1: usbfs: process 28941 (syz.3.4187) did not claim interface 0 before use [ 1586.807249][T28975] ipvlan1: entered allmulticast mode [ 1586.808834][T28975] veth0_vlan: entered allmulticast mode [ 1587.248714][T28971] nvme_fabrics: missing parameter 'transport=%s' [ 1587.250646][T28971] nvme_fabrics: missing parameter 'nqn=%s' [ 1587.390977][T28983] ipvlan1: entered allmulticast mode [ 1587.393392][T28983] veth0_vlan: entered allmulticast mode [ 1588.822195][T29002] syzkaller1: entered promiscuous mode [ 1588.823938][T29002] syzkaller1: entered allmulticast mode [ 1589.207349][T29010] syz.8.4201 (29010): drop_caches: 2 [ 1589.210038][T29010] syz.8.4201 (29010): drop_caches: 2 [ 1589.322900][T29014] usb usb1: usbfs: process 29014 (syz.3.4199) did not claim interface 0 before use [ 1589.625743][T29011] can0: slcan on ttyS3. [ 1590.202939][T29006] can0 (unregistered): slcan off ttyS3. [ 1592.784243][T29068] syzkaller1: entered promiscuous mode [ 1592.786211][T29068] syzkaller1: entered allmulticast mode [ 1593.805200][T29083] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4212'. [ 1593.812624][T29083] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4212'. [ 1594.317842][T29088] syz.6.4214: attempt to access beyond end of device [ 1594.317842][T29088] nbd6: rw=0, sector=2, nr_sectors = 2 limit=0 [ 1594.325602][T29088] MINIX-fs: unable to read superblock [ 1596.222488][T29115] sp0: Synchronizing with TNC [ 1596.345296][T29115] random: crng reseeded on system resumption [ 1597.164422][T29130] netlink: 72 bytes leftover after parsing attributes in process `syz.6.4222'. [ 1597.208109][T29134] syzkaller1: entered promiscuous mode [ 1597.209846][T29134] syzkaller1: entered allmulticast mode [ 1598.524550][T29158] infiniband syz0: set down [ 1598.526159][T29158] infiniband syz0: added bond0 [ 1598.543896][T29158] syz0: rxe_create_cq: returned err = -12 [ 1598.545735][T29158] infiniband syz0: Couldn't create ib_mad CQ [ 1598.547713][T29158] infiniband syz0: Couldn't open port 1 [ 1598.588285][T29158] RDS/IB: syz0: added [ 1598.589962][T29158] smc: adding ib device syz0 with port count 1 [ 1598.601227][T29158] smc: ib device syz0 port 1 has pnetid SYZ2 (user defined) [ 1599.859944][T29182] netlink: 72 bytes leftover after parsing attributes in process `syz.8.4234'. [ 1600.166073][T29188] netfs: Couldn't get user pages (rc=-14) [ 1601.178282][T29205] lo speed is unknown, defaulting to 1000 [ 1601.196608][T29207] overlayfs: missing 'lowerdir' [ 1601.309292][T29214] netlink: 'syz.9.4241': attribute type 1 has an invalid length. [ 1601.338486][T29214] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4241'. [ 1601.348372][T29214] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1601.352171][T29214] bond3: (slave batadv0): Enslaving as a backup interface with an up link [ 1601.366198][T29214] bond3 (unregistering): (slave batadv0): Releasing backup interface [ 1601.378037][T29214] bond3 (unregistering): Released all slaves [ 1602.895268][T29252] blktrace: Concurrent blktraces are not allowed on sg0 [ 1603.697359][T29262] netfs: Couldn't get user pages (rc=-14) [ 1605.536423][T29294] syz.8.4254: attempt to access beyond end of device [ 1605.536423][T29294] nbd8: rw=0, sector=2, nr_sectors = 2 limit=0 [ 1605.540910][T29294] MINIX-fs: unable to read superblock [ 1606.783468][ T1413] ieee802154 phy1 wpan1: encryption failed: -22 [ 1607.472292][T29327] usb usb1: usbfs: process 29327 (syz.3.4259) did not claim interface 0 before use [ 1607.622091][T24124] usb 14-1: new high-speed USB device number 4 using dummy_hcd [ 1607.772090][T24124] usb 14-1: Using ep0 maxpacket: 16 [ 1607.785336][T24124] usb 14-1: config 0 interface 0 has no altsetting 0 [ 1607.787437][T24124] usb 14-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 1607.790742][T24124] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1607.795604][T24124] usb 14-1: config 0 descriptor?? [ 1608.086088][T29335] lo speed is unknown, defaulting to 1000 [ 1608.091731][T29330] netlink: 72 bytes leftover after parsing attributes in process `syz.8.4261'. [ 1608.224365][T24124] input: HID 0458:5013 as /devices/platform/dummy_hcd.9/usb14/14-1/14-1:0.0/0003:0458:5013.0004/input/input36 [ 1608.318806][T24124] input: HID 0458:5013 as /devices/platform/dummy_hcd.9/usb14/14-1/14-1:0.0/0003:0458:5013.0004/input/input37 [ 1608.401354][T24124] kye 0003:0458:5013.0004: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0458:5013] on usb-dummy_hcd.9-1/input0 [ 1608.440270][T29342] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4263'. [ 1608.582446][T29342] wireguard0: entered promiscuous mode [ 1608.587049][T29341] syzkaller1: entered promiscuous mode [ 1608.589218][T29341] syzkaller1: entered allmulticast mode [ 1609.009012][T29352] netlink: 'syz.9.4260': attribute type 12 has an invalid length. [ 1609.214992][T29354] usb usb1: usbfs: process 29354 (syz.6.4265) did not claim interface 0 before use [ 1609.788691][T29364] syz.3.4266: attempt to access beyond end of device [ 1609.788691][T29364] nbd3: rw=0, sector=2, nr_sectors = 2 limit=0 [ 1610.234870][T29364] MINIX-fs: unable to read superblock [ 1610.686626][ T6005] usb 14-1: USB disconnect, device number 4 [ 1610.923626][T29379] random: crng reseeded on system resumption [ 1610.980563][T29380] syz.6.4269: attempt to access beyond end of device [ 1610.980563][T29380] nbd6: rw=0, sector=2, nr_sectors = 2 limit=0 [ 1611.232402][ T5988] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 1611.339631][T29380] MINIX-fs: unable to read superblock [ 1612.053586][T29411] netlink: 'syz.9.4274': attribute type 1 has an invalid length. [ 1612.056331][T29411] netlink: 'syz.9.4274': attribute type 1 has an invalid length. [ 1612.233622][T29420] usb usb1: usbfs: process 29420 (syz.3.4273) did not claim interface 0 before use [ 1614.302098][T12522] Bluetooth: hci0: command 0x0406 tx timeout [ 1614.305529][T27361] Bluetooth: hci0: Opcode 0x1407 failed: -110 [ 1622.085176][T29469] overlayfs: missing 'lowerdir' [ 1622.285290][T29477] syz.6.4282: attempt to access beyond end of device [ 1622.285290][T29477] nbd6: rw=0, sector=2, nr_sectors = 2 limit=0 [ 1622.299298][T29477] MINIX-fs: unable to read superblock [ 1622.603557][T29483] netlink: 'syz.3.4281': attribute type 1 has an invalid length. [ 1622.652168][T29483] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4281'. [ 1622.669500][T29483] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1622.677266][T29483] bond0: (slave batadv1): Enslaving as a backup interface with an up link [ 1622.714949][T29483] bond0 (unregistering): (slave batadv1): Releasing backup interface [ 1622.720019][T29483] bond0 (unregistering): Released all slaves [ 1623.455297][T29497] usb usb1: usbfs: process 29497 (syz.3.4285) did not claim interface 0 before use [ 1624.126130][ T5988] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 1626.195021][ T40] audit: type=1326 audit(1740758961.698:6143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29546 comm="syz.3.4292" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f37579 code=0x7ffc0000 [ 1626.197044][T29553] netlink: 'syz.9.4293': attribute type 14 has an invalid length. [ 1626.209808][ T40] audit: type=1326 audit(1740758961.708:6144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29546 comm="syz.3.4292" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f37579 code=0x7ffc0000 [ 1626.221250][ T40] audit: type=1326 audit(1740758961.708:6145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29546 comm="syz.3.4292" exe="/syz-executor" sig=0 arch=40000003 syscall=282 compat=1 ip=0xf7f37579 code=0x7ffc0000 [ 1626.240147][ T40] audit: type=1326 audit(1740758961.708:6146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29546 comm="syz.3.4292" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f37579 code=0x7ffc0000 [ 1626.251244][ T40] audit: type=1326 audit(1740758961.708:6147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29546 comm="syz.3.4292" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f37579 code=0x7ffc0000 [ 1626.258031][ T40] audit: type=1326 audit(1740758961.708:6148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29546 comm="syz.3.4292" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f37579 code=0x7ffc0000 [ 1626.268007][ T40] audit: type=1326 audit(1740758961.708:6149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29546 comm="syz.3.4292" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f37579 code=0x7ffc0000 [ 1626.278156][ T40] audit: type=1326 audit(1740758961.708:6150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29546 comm="syz.3.4292" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f37579 code=0x7ffc0000 [ 1626.288319][ T40] audit: type=1326 audit(1740758961.708:6151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29546 comm="syz.3.4292" exe="/syz-executor" sig=0 arch=40000003 syscall=425 compat=1 ip=0xf7f37579 code=0x7ffc0000 [ 1626.295049][ T40] audit: type=1326 audit(1740758961.708:6152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29546 comm="syz.3.4292" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f37579 code=0x7ffc0000 [ 1626.725986][T29559] netlink: 72 bytes leftover after parsing attributes in process `syz.8.4295'. [ 1626.820239][T27361] Bluetooth: hci1: Malformed LE Event: 0x0b [ 1626.827355][T29549] netlink: 36 bytes leftover after parsing attributes in process `syz.9.4293'. [ 1634.921902][T29581] netlink: 'syz.8.4299': attribute type 21 has an invalid length. [ 1634.945236][T29584] capability: warning: `syz.3.4297' uses deprecated v2 capabilities in a way that may be insecure [ 1635.294310][T29593] block nbd8: shutting down sockets [ 1636.111713][T29606] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4301'. [ 1636.516264][T29613] random: crng reseeded on system resumption [ 1636.782456][ T5988] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 1636.872063][T29619] netlink: 72 bytes leftover after parsing attributes in process `syz.9.4304'. [ 1638.262543][T29647] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4306'. [ 1638.273925][T29647] wireguard0: entered promiscuous mode [ 1638.287104][T29653] netlink: 20 bytes leftover after parsing attributes in process `syz.9.4308'. [ 1638.324485][T29654] netlink: 'syz.8.4307': attribute type 14 has an invalid length. [ 1638.339498][T27361] Bluetooth: hci3: Malformed LE Event: 0x0b [ 1638.347372][T29654] netlink: 36 bytes leftover after parsing attributes in process `syz.8.4307'. [ 1650.872014][T12522] Bluetooth: hci3: command 0x0405 tx timeout [ 1651.876495][T29772] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4334'. [ 1651.889912][T29772] wireguard1: entered promiscuous mode [ 1653.000206][T29787] netlink: 'syz.6.4330': attribute type 21 has an invalid length. [ 1653.566957][T29794] block nbd6: shutting down sockets [ 1656.098397][T29821] netlink: 72 bytes leftover after parsing attributes in process `syz.6.4337'. [ 1656.808827][T29834] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4339'. [ 1656.821642][T29834] wireguard1: entered promiscuous mode [ 1657.511114][T29849] lo speed is unknown, defaulting to 1000 [ 1658.489235][T29863] netlink: 72 bytes leftover after parsing attributes in process `syz.6.4345'. [ 1658.804323][T29873] loop7: detected capacity change from 0 to 16384 [ 1659.875522][T29883] netlink: 72 bytes leftover after parsing attributes in process `syz.8.4349'. [ 1660.882952][T29891] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4351'. [ 1661.386083][ T40] kauditd_printk_skb: 10 callbacks suppressed [ 1661.386094][ T40] audit: type=1800 audit(1740758996.898:6163): pid=29891 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.8.4351" name="/newroot/733/bus" dev="tmpfs" ino=4160 res=0 errno=0 [ 1663.817936][T29929] netlink: 72 bytes leftover after parsing attributes in process `syz.6.4358'. [ 1666.288744][T29956] netlink: 72 bytes leftover after parsing attributes in process `syz.8.4366'. [ 1667.975803][T29986] netlink: 72 bytes leftover after parsing attributes in process `syz.6.4371'. [ 1668.224855][ T1413] ieee802154 phy1 wpan1: encryption failed: -22 [ 1668.340349][T29994] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=null. [ 1668.348959][T29994] overlayfs: overlapping lowerdir path [ 1669.120770][T29995] sctp: [Deprecated]: syz.3.4372 (pid 29995) Use of int in maxseg socket option. [ 1669.120770][T29995] Use struct sctp_assoc_value instead [ 1669.131895][T29995] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4372'. [ 1670.627086][T30023] hub 6-0:1.0: USB hub found [ 1670.634829][T30023] hub 6-0:1.0: 1 port detected [ 1672.499493][T30043] lo speed is unknown, defaulting to 1000 [ 1672.702664][T30048] netlink: 72 bytes leftover after parsing attributes in process `syz.3.4383'. [ 1672.990325][T30050] netlink: 24 bytes leftover after parsing attributes in process `syz.9.4384'. [ 1673.003860][T30050] netlink: 20 bytes leftover after parsing attributes in process `syz.9.4384'. [ 1673.885924][T30054] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=null. [ 1673.889143][T30054] overlayfs: overlapping lowerdir path [ 1674.406654][T30069] netlink: 'syz.9.4387': attribute type 4 has an invalid length. [ 1674.413890][T30069] netlink: 'syz.9.4387': attribute type 4 has an invalid length. [ 1675.408257][T30079] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4392'. [ 1675.707804][T30079] wireguard0: entered promiscuous mode [ 1675.857414][T30085] netlink: 'syz.8.4393': attribute type 2 has an invalid length. [ 1675.859760][T30085] netlink: 'syz.8.4393': attribute type 1 has an invalid length. [ 1675.862454][T30085] netlink: 'syz.8.4393': attribute type 1 has an invalid length. [ 1675.866987][T30085] loop7: detected capacity change from 0 to 16384 [ 1676.938234][T30092] can0: slcan on ttyS3. [ 1677.015538][T30089] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4394'. [ 1677.053641][T30085] loop7: detected capacity change from 16384 to 16383 [ 1677.475417][T30116] netlink: 72 bytes leftover after parsing attributes in process `syz.8.4397'. [ 1677.584346][T30086] can0 (unregistered): slcan off ttyS3. [ 1678.348929][T30130] netlink: 72 bytes leftover after parsing attributes in process `syz.6.4399'. [ 1679.084549][T30137] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4401'. [ 1680.320979][T30150] syz.8.4404: attempt to access beyond end of device [ 1680.320979][T30150] nbd8: rw=0, sector=2, nr_sectors = 2 limit=0 [ 1680.325227][T30150] MINIX-fs: unable to read superblock [ 1681.415410][T30163] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 1681.417585][T30163] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1681.420205][T30163] vhci_hcd vhci_hcd.0: Device attached [ 1681.612092][T29427] vhci_hcd: vhci_device speed not set [ 1681.967181][T29427] usb 43-1: new full-speed USB device number 4 using vhci_hcd [ 1682.343942][T30177] netlink: 72 bytes leftover after parsing attributes in process `syz.6.4403'. [ 1682.640233][T30183] ebtables: wrong size: *len 120, entries_size 48, replsz 48 [ 1683.198121][T30164] vhci_hcd: connection reset by peer [ 1683.206263][ T77] vhci_hcd: stop threads [ 1683.208351][ T77] vhci_hcd: release socket [ 1683.210373][ T77] vhci_hcd: disconnect device [ 1683.853983][T30197] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4413'. [ 1683.869986][T30197] wireguard1: entered promiscuous mode [ 1684.058729][T30199] netlink: 72 bytes leftover after parsing attributes in process `syz.3.4412'. [ 1684.206642][T26080] libceph: connect (1)[c::]:6789 error -101 [ 1684.208490][T26080] libceph: mon0 (1)[c::]:6789 connect error [ 1684.257060][T30201] ceph: No mds server is up or the cluster is laggy [ 1684.844748][T30218] syz.8.4416: attempt to access beyond end of device [ 1684.844748][T30218] nbd8: rw=0, sector=2, nr_sectors = 2 limit=0 [ 1684.848705][T30218] MINIX-fs: unable to read superblock [ 1685.882776][T30233] netlink: 72 bytes leftover after parsing attributes in process `syz.3.4418'. [ 1686.137608][T30241] netlink: 72 bytes leftover after parsing attributes in process `syz.8.4419'. [ 1686.395327][T30245] netlink: 'syz.6.4421': attribute type 9 has an invalid length. [ 1686.977854][T30255] lo speed is unknown, defaulting to 1000 [ 1687.092065][T29427] vhci_hcd: vhci_device speed not set [ 1688.118159][T30274] netlink: 72 bytes leftover after parsing attributes in process `syz.8.4426'. [ 1688.245943][T30275] syz.3.4427: attempt to access beyond end of device [ 1688.245943][T30275] nbd3: rw=0, sector=2, nr_sectors = 2 limit=0 [ 1688.249998][T30275] MINIX-fs: unable to read superblock [ 1690.204135][T30298] netlink: 72 bytes leftover after parsing attributes in process `syz.6.4430'. [ 1690.236850][T30299] netlink: 72 bytes leftover after parsing attributes in process `syz.8.4431'. [ 1690.704059][T30307] netlink: 'syz.9.4433': attribute type 2 has an invalid length. [ 1690.706488][T30307] netlink: 'syz.9.4433': attribute type 1 has an invalid length. [ 1690.708850][T30307] netlink: 'syz.9.4433': attribute type 1 has an invalid length. [ 1690.739676][T30307] loop7: detected capacity change from 0 to 16384 [ 1690.875250][T30314] loop7: detected capacity change from 16384 to 16383 [ 1693.500709][T30339] syz.3.4446: attempt to access beyond end of device [ 1693.500709][T30339] nbd3: rw=0, sector=2, nr_sectors = 2 limit=0 [ 1693.505544][T30339] MINIX-fs: unable to read superblock [ 1693.778710][T30337] can0: slcan on ttyS3. [ 1693.841369][T30348] netlink: 20 bytes leftover after parsing attributes in process `syz.8.4438'. [ 1694.712263][T30331] can0 (unregistered): slcan off ttyS3. [ 1695.098458][T30391] netlink: 72 bytes leftover after parsing attributes in process `syz.8.4443'. [ 1698.111039][T30430] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 1698.773637][T30439] overlayfs: missing 'lowerdir' [ 1698.793118][T30439] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4457'. [ 1698.881815][T30445] "syz.3.4456" (30445) uses obsolete ecb(arc4) skcipher [ 1701.194691][T30476] syz.6.4462: attempt to access beyond end of device [ 1701.194691][T30476] nbd6: rw=0, sector=2, nr_sectors = 2 limit=0 [ 1701.198575][T30476] MINIX-fs: unable to read superblock [ 1701.545477][T30484] netlink: 'syz.3.4463': attribute type 4 has an invalid length. [ 1701.604384][T30484] netlink: 'syz.3.4463': attribute type 4 has an invalid length. [ 1701.708536][T10700] lo speed is unknown, defaulting to 1000 [ 1702.220299][ T40] audit: type=1400 audit(1740759037.728:6164): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name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netlink: 8 bytes leftover after parsing attributes in process `syz.9.4467'. [ 1702.542699][ C1] vkms_vblank_simulate: vblank timer overrun [ 1702.820072][T30508] wireguard2: entered promiscuous mode [ 1702.958743][T30519] netlink: 40 bytes leftover after parsing attributes in process `syz.6.4469'. [ 1703.148521][T30523] lo speed is unknown, defaulting to 1000 [ 1704.422496][T29658] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 1704.500302][T30547] netlink: 72 bytes leftover after parsing attributes in process `syz.3.4473'. [ 1706.125314][T30577] "syz.8.4475" (30577) uses obsolete ecb(arc4) skcipher [ 1706.702702][T30582] netlink: 'syz.6.4476': attribute type 4 has an invalid length. [ 1706.711448][T30582] netlink: 'syz.6.4476': attribute type 4 has an invalid length. [ 1708.120946][T30601] syz.3.4478: attempt to access beyond end of device [ 1708.120946][T30601] nbd3: rw=0, sector=2, nr_sectors = 2 limit=0 [ 1708.121047][T30601] MINIX-fs: unable to read superblock [ 1708.626729][T30592] tmpfs: Unknown parameter '0x0000000000000d26' [ 1712.092839][T30635] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4485'. [ 1712.201275][T30635] wireguard2: entered promiscuous mode [ 1712.466887][T30633] syz.8.4486: attempt to access beyond end of device [ 1712.466887][T30633] nbd8: rw=0, sector=2, nr_sectors = 2 limit=0 [ 1712.476199][T30633] MINIX-fs: unable to read superblock [ 1713.312501][ T1466] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 1714.058118][T30671] "syz.9.4489" (30671) uses obsolete ecb(arc4) skcipher [ 1714.704472][T30678] syz.8.4491: attempt to access beyond end of device [ 1714.704472][T30678] nbd8: rw=0, sector=2, nr_sectors = 2 limit=0 [ 1714.715275][T30678] MINIX-fs: unable to read superblock [ 1715.627321][T30687] netlink: 'syz.8.4492': attribute type 4 has an invalid length. [ 1715.640775][T30687] netlink: 'syz.8.4492': attribute type 4 has an invalid length. [ 1716.559352][T30698] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 1724.070228][T30726] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4497'. [ 1724.100668][T30720] fuse: Unknown parameter 'grou00000000000000000000' [ 1724.195385][T30731] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1724.693762][T30739] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1724.834937][T30735] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1724.891187][T30735] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1725.348690][T30753] syz.8.4503: attempt to access beyond end of device [ 1725.348690][T30753] nbd8: rw=0, sector=2, nr_sectors = 2 limit=0 [ 1725.353857][T30753] MINIX-fs: unable to read superblock [ 1725.940900][T30760] netlink: 'syz.6.4506': attribute type 4 has an invalid length. [ 1726.735802][T30771] netlink: 72 bytes leftover after parsing attributes in process `syz.9.4515'. [ 1726.955696][T29457] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 1728.665303][T30814] cdrom: dropping to single frame dma [ 1728.938950][T30822] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4516'. [ 1728.956573][T30822] wireguard1: entered promiscuous mode [ 1729.669853][ T1413] ieee802154 phy1 wpan1: encryption failed: -22 [ 1734.183541][T30852] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4519'. [ 1734.188371][T30852] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4519'. [ 1734.195270][T30852] macvtap2: entered promiscuous mode [ 1734.197292][T30852] bridge0: entered promiscuous mode [ 1734.199318][T30852] macvtap2: entered allmulticast mode [ 1734.201316][T30852] bridge0: entered allmulticast mode [ 1734.209536][T30854] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4521'. [ 1734.245360][T30852] bridge0: left allmulticast mode [ 1734.247414][T30852] bridge0: left promiscuous mode [ 1734.309050][T30858] input: syz1 as /devices/virtual/input/input40 [ 1734.335373][T30858] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4520'. [ 1734.338855][T30858] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4520'. [ 1735.050652][ T40] audit: type=1326 audit(1740759070.558:6165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30863 comm="syz.9.4523" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f95579 code=0x0 [ 1735.275087][T30869] kAFS: unable to lookup cell 'sy>7 †ŸO-z1' [ 1735.654333][ T40] audit: type=1800 audit(1740759071.168:6166): pid=30872 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.6.4524" name="/newroot/863/bus" dev="tmpfs" ino=4927 res=0 errno=0 [ 1736.148789][T30879] netlink: 72 bytes leftover after parsing attributes in process `syz.3.4525'. [ 1736.177424][T30883] syzkaller1: entered promiscuous mode [ 1736.179104][T30883] syzkaller1: entered allmulticast mode [ 1736.832441][ T5988] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 1737.052271][T30886] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4527'. [ 1737.070095][T30886] wireguard3: entered promiscuous mode [ 1737.950149][T30911] lo speed is unknown, defaulting to 1000 [ 1738.134167][T30913] ax25_connect(): syz.9.4532 uses autobind, please contact jreuter@yaina.de [ 1739.491166][T30935] kAFS: unable to lookup cell 'sy>7 †ŸO-z1' [ 1740.441306][T30941] netlink: 72 bytes leftover after parsing attributes in process `syz.3.4538'. [ 1740.447685][T30941] overlayfs: failed to resolve './file1': -2 [ 1741.268063][T10700] libceph: connect (1)[c::]:6789 error -101 [ 1741.270119][T10700] libceph: mon0 (1)[c::]:6789 connect error [ 1741.500338][T30952] netlink: 72 bytes leftover after parsing attributes in process `syz.3.4540'. [ 1741.506891][T30952] overlayfs: failed to resolve './file1': -2 [ 1741.535413][T10700] libceph: connect (1)[c::]:6789 error -101 [ 1741.540865][T10700] libceph: mon0 (1)[c::]:6789 connect error [ 1741.724140][T30945] ceph: No mds server is up or the cluster is laggy [ 1742.493631][T30955] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 1742.677017][T30964] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(5) [ 1742.679587][T30964] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1742.684005][T30964] vhci_hcd vhci_hcd.0: Device attached [ 1742.922061][T29433] usb 53-1: new low-speed USB device number 5 using vhci_hcd [ 1742.995033][T30974] mkiss: ax0: crc mode is auto. [ 1743.064387][T30976] lo speed is unknown, defaulting to 1000 [ 1743.645198][T30968] vhci_hcd: connection reset by peer [ 1743.648259][ T11] vhci_hcd: stop threads [ 1743.649717][ T11] vhci_hcd: release socket [ 1743.652236][ T11] vhci_hcd: disconnect device [ 1744.128053][T30989] netlink: 32 bytes leftover after parsing attributes in process `syz.6.4547'. [ 1744.132148][T30989] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4547'. [ 1744.137120][T30989] macvtap1: entered promiscuous mode [ 1744.138710][T30989] bridge0: entered promiscuous mode [ 1744.140305][T30989] macvtap1: entered allmulticast mode [ 1744.142259][T30989] bridge0: entered allmulticast mode [ 1744.173405][T30989] bridge0: left allmulticast mode [ 1744.174985][T30989] bridge0: left promiscuous mode [ 1744.231922][T30990] netlink: 72 bytes leftover after parsing attributes in process `syz.9.4548'. [ 1744.237083][T30990] overlayfs: failed to resolve './file1': -2 [ 1745.086059][T31003] netlink: 72 bytes leftover after parsing attributes in process `syz.8.4551'. [ 1745.091791][T31003] overlayfs: failed to resolve './file1': -2 [ 1747.699598][T31035] input: syz1 as /devices/virtual/input/input41 [ 1747.744226][T31035] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4558'. [ 1747.746873][T31035] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4558'. [ 1748.052123][T29433] vhci_hcd: vhci_device speed not set [ 1748.597444][T29430] libceph: connect (1)[c::]:6789 error -101 [ 1748.599300][T29430] libceph: mon0 (1)[c::]:6789 connect error [ 1748.852231][T29430] libceph: connect (1)[c::]:6789 error -101 [ 1748.854222][T29430] libceph: mon0 (1)[c::]:6789 connect error [ 1748.901157][T31045] ceph: No mds server is up or the cluster is laggy [ 1748.910973][T31044] netlink: 72 bytes leftover after parsing attributes in process `syz.3.4560'. [ 1748.940883][T31044] overlayfs: failed to resolve './file1': -2 [ 1748.985007][T31053] netlink: 20 bytes leftover after parsing attributes in process `syz.9.4561'. [ 1748.987685][T31053] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4561'. [ 1749.230524][T31062] netlink: 72 bytes leftover after parsing attributes in process `syz.6.4562'. [ 1749.236427][T31062] overlayfs: failed to resolve './file1': -2 [ 1751.166103][T31077] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4566'. [ 1751.181808][T31077] wireguard4: entered promiscuous mode [ 1751.998939][T31088] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=null. [ 1752.002044][T31088] overlayfs: overlapping lowerdir path [ 1753.139137][T31106] netlink: 72 bytes leftover after parsing attributes in process `syz.9.4572'. [ 1753.149237][T31106] overlayfs: failed to resolve './file0': -2 [ 1753.164981][T31107] netlink: 72 bytes leftover after parsing attributes in process `syz.3.4573'. [ 1753.170869][T31107] overlayfs: failed to resolve './file0': -2 [ 1754.302063][T27361] Bluetooth: hci0: command 0x0406 tx timeout [ 1754.720232][T31133] netlink: 72 bytes leftover after parsing attributes in process `syz.6.4580'. [ 1754.726219][T31133] overlayfs: failed to resolve './file1': -2 [ 1756.288869][T31143] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=null. [ 1756.291926][T31143] overlayfs: overlapping lowerdir path [ 1757.269770][T31155] syz.3.4584: attempt to access beyond end of device [ 1757.269770][T31155] nbd3: rw=0, sector=2, nr_sectors = 2 limit=0 [ 1757.456927][T31155] MINIX-fs: unable to read superblock [ 1757.702655][T31164] netlink: 72 bytes leftover after parsing attributes in process `syz.8.4586'. [ 1757.707523][T31164] overlayfs: failed to resolve './file0': -2 [ 1758.050169][T31170] kAFS: No cell specified [ 1759.579910][T31189] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4593'. [ 1759.583867][T31189] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1759.645860][T31189] netlink: 'syz.6.4593': attribute type 21 has an invalid length. [ 1759.648169][T31189] netlink: 128 bytes leftover after parsing attributes in process `syz.6.4593'. [ 1759.650797][T31189] netlink: 'syz.6.4593': attribute type 5 has an invalid length. [ 1759.656191][T31189] netlink: 3 bytes leftover after parsing attributes in process `syz.6.4593'. [ 1760.327456][T31187] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=null. [ 1760.330503][T31187] overlayfs: overlapping lowerdir path [ 1760.384641][T31195] netlink: 72 bytes leftover after parsing attributes in process `syz.6.4594'. [ 1760.389112][T31195] overlayfs: failed to resolve './file1': -2 [ 1760.596078][T31209] syz_tun: entered allmulticast mode [ 1760.598151][T31209] syz_tun: left allmulticast mode [ 1760.734166][T31209] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(6) [ 1760.736147][T31209] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1760.738330][T31209] vhci_hcd vhci_hcd.0: Device attached [ 1760.775057][T31212] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4598'. [ 1760.818662][T31212] wireguard5: entered promiscuous mode [ 1760.831348][T31219] input: syz1 as /devices/virtual/input/input42 [ 1760.897141][T31220] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4597'. [ 1760.900155][T31220] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4597'. [ 1761.272634][T26080] vhci_hcd: vhci_device speed not set [ 1761.294933][T31214] can0: slcan on ttyS3. [ 1761.333829][T26080] usb 49-1: new full-speed USB device number 6 using vhci_hcd [ 1762.509617][T31238] wireguard6: entered promiscuous mode [ 1762.608387][T31215] vhci_hcd: connection reset by peer [ 1762.610179][T26826] vhci_hcd: stop threads [ 1762.611551][T26826] vhci_hcd: release socket [ 1762.613042][T26826] vhci_hcd: disconnect device [ 1762.633173][T31199] can0 (unregistered): slcan off ttyS3. [ 1763.232145][T29656] usb 11-1: new full-speed USB device number 7 using dummy_hcd [ 1763.461305][T31257] netlink: 72 bytes leftover after parsing attributes in process `syz.3.4603'. [ 1763.468621][T31257] overlayfs: failed to resolve './file0': -2 [ 1763.593790][T29656] usb 11-1: not running at top speed; connect to a high speed hub [ 1763.596619][T29656] usb 11-1: config 1 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 911, setting to 64 [ 1763.599807][T29656] usb 11-1: config 1 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1763.603821][T29656] usb 11-1: config 1 interface 0 has no altsetting 0 [ 1763.607177][T29656] usb 11-1: New USB device found, idVendor=056a, idProduct=010f, bcdDevice= 0.40 [ 1763.609591][T29656] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1763.611706][T29656] usb 11-1: Product: syz [ 1763.612872][T29656] usb 11-1: Manufacturer: syz [ 1763.614107][T29656] usb 11-1: SerialNumber: syz [ 1763.622224][T31262] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1764.273342][T31266] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=null. [ 1764.276343][T31266] overlayfs: overlapping lowerdir path [ 1764.653883][T31280] netlink: 72 bytes leftover after parsing attributes in process `syz.9.4607'. [ 1764.663767][T31280] overlayfs: failed to resolve './file1': -2 [ 1765.022515][T27361] Bluetooth: hci2: command 0x0405 tx timeout [ 1765.025278][T31286] lo speed is unknown, defaulting to 1000 [ 1765.571624][T31290] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4610'. [ 1765.578139][T31290] syz_tun: left promiscuous mode [ 1765.588777][T31290] mac80211_hwsim hwsim23 wlan1: left promiscuous mode [ 1765.595080][T31290] mac80211_hwsim hwsim23 wlan1: left allmulticast mode [ 1765.599309][T31290] gtp0: left promiscuous mode [ 1765.601820][T31290] gtp0: left allmulticast mode [ 1765.607969][T31290] macvtap1: left promiscuous mode [ 1765.612776][T31290] macvtap1: left allmulticast mode [ 1765.616649][T31290] wireguard0: left promiscuous mode [ 1765.620404][T31290] wireguard1: left promiscuous mode [ 1765.625965][T31290] wireguard2: left promiscuous mode [ 1765.629749][T31290] wireguard3: left promiscuous mode [ 1765.634887][T31290] wireguard4: left promiscuous mode [ 1765.641236][T31290] wireguard5: left promiscuous mode [ 1765.649938][T31290] wireguard6: left promiscuous mode [ 1765.654726][T31291] team0: No ports can be present during mode change [ 1765.746162][T29656] usbhid 11-1:1.0: can't add hid device: -71 [ 1765.748042][T29656] usbhid 11-1:1.0: probe with driver usbhid failed with error -71 [ 1765.778439][T29656] usb 11-1: USB disconnect, device number 7 [ 1765.862100][T31291] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4610'. [ 1766.061611][T31291] team0 (unregistering): Port device team_slave_0 removed [ 1766.069987][T31291] team0 (unregistering): Port device team_slave_1 removed [ 1766.860232][T31299] netlink: 72 bytes leftover after parsing attributes in process `syz.3.4612'. [ 1766.860418][T26080] vhci_hcd: vhci_device speed not set [ 1766.868251][T31299] overlayfs: failed to resolve './file1': -2 [ 1767.608179][T31306] netlink: 72 bytes leftover after parsing attributes in process `syz.3.4614'. [ 1767.611687][T31306] overlayfs: failed to resolve './file0': -2 [ 1767.731923][T31310] netlink: 'syz.6.4615': attribute type 9 has an invalid length. [ 1768.000127][T29433] kernel write not supported for file bpf-map (pid: 29433 comm: kworker/3:7) [ 1768.003261][T31324] syzkaller1: entered promiscuous mode [ 1768.005543][T31324] syzkaller1: entered allmulticast mode [ 1768.349481][T31336] netlink: 4268 bytes leftover after parsing attributes in process `syz.8.4622'. [ 1768.353404][T31336] netlink: 4268 bytes leftover after parsing attributes in process `syz.8.4622'. [ 1768.602758][T31333] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4621'. [ 1768.617840][T31333] wireguard3: entered promiscuous mode [ 1769.139314][ T5988] IPVS: starting estimator thread 0... [ 1769.302058][T31349] IPVS: using max 38 ests per chain, 91200 per kthread [ 1770.150161][T31364] netlink: 72 bytes leftover after parsing attributes in process `syz.6.4626'. [ 1770.158715][T31364] overlayfs: failed to resolve './file0': -2 [ 1770.439430][T31370] syzkaller1: entered promiscuous mode [ 1770.441628][T31370] syzkaller1: entered allmulticast mode [ 1771.658365][T31376] netlink: 72 bytes leftover after parsing attributes in process `syz.6.4638'. [ 1771.667422][T31376] overlayfs: failed to resolve './file1': -2 [ 1771.712032][T31383] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=null. [ 1771.715921][T31383] overlayfs: overlapping lowerdir path [ 1772.054426][T31391] IPVS: Error connecting to the multicast addr [ 1772.872071][T31404] /dev/nullb0: Can't open blockdev [ 1773.564501][T31413] netlink: 72 bytes leftover after parsing attributes in process `syz.6.4637'. [ 1773.819535][T31419] syzkaller1: entered promiscuous mode [ 1773.821359][T31419] syzkaller1: entered allmulticast mode [ 1774.205711][T31431] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4641'. [ 1774.267108][T31432] netlink: 72 bytes leftover after parsing attributes in process `syz.8.4640'. [ 1774.272336][T31432] overlayfs: failed to resolve './file0': -2 [ 1774.288049][T31431] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4641'. [ 1775.068971][T31440] netlink: 'syz.8.4644': attribute type 9 has an invalid length. [ 1777.488511][T31471] IPVS: Error connecting to the multicast addr [ 1778.772041][T29433] usb 14-1: new high-speed USB device number 5 using dummy_hcd [ 1778.922027][T29433] usb 14-1: Using ep0 maxpacket: 8 [ 1778.924715][T29433] usb 14-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1778.927800][T29433] usb 14-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1778.930398][T29433] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1779.058388][T29433] usb 14-1: config 0 descriptor?? [ 1779.288985][T29433] iowarrior 14-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1779.797421][T29433] usb 14-1: USB disconnect, device number 5 [ 1779.799240][T31488] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4661'. [ 1779.801862][T31488] bond_slave_1: entered promiscuous mode [ 1779.805012][T31488] netlink: 'syz.9.4661': attribute type 2 has an invalid length. [ 1779.809218][T31510] netlink: 76 bytes leftover after parsing attributes in process `syz.3.4657'. [ 1781.657855][T31537] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4663'. [ 1781.672654][T31537] wireguard7: entered promiscuous mode [ 1781.843601][T31540] netlink: 72 bytes leftover after parsing attributes in process `syz.6.4664'. [ 1783.056288][T31549] xt_hashlimit: invalid rate [ 1784.707443][T31582] syz.8.4671: attempt to access beyond end of device [ 1784.707443][T31582] nbd8: rw=0, sector=2, nr_sectors = 2 limit=0 [ 1784.824630][T31582] MINIX-fs: unable to read superblock [ 1786.592732][T31604] netlink: 'syz.8.4678': attribute type 15 has an invalid length. [ 1786.595068][T31604] netlink: 24 bytes leftover after parsing attributes in process `syz.8.4678'. [ 1786.613670][T31604] 9pnet: Could not find request transport: rfma [ 1786.617077][T31604] IPVS: ovf: SCTP 127.0.0.1:0 - no destination available [ 1787.414761][T31613] netlink: 72 bytes leftover after parsing attributes in process `syz.6.4679'. [ 1787.785185][T31620] ISOFS: Unable to identify CD-ROM format. [ 1788.662168][T29457] libceph: connect (1)[c::]:6789 error -101 [ 1788.666375][T29457] libceph: mon0 (1)[c::]:6789 connect error [ 1788.832492][T31634] ceph: No mds server is up or the cluster is laggy [ 1788.894949][T31643] IPVS: Error connecting to the multicast addr [ 1789.039700][T31646] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4685'. [ 1789.044788][T31646] wireguard4: entered promiscuous mode [ 1790.019248][T31661] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1790.442791][T31667] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1790.486415][T31665] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1790.540857][T31665] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1791.103851][ T1413] ieee802154 phy1 wpan1: encryption failed: -22 [ 1791.606177][T31669] netlink: 72 bytes leftover after parsing attributes in process `syz.8.4691'. [ 1792.301210][T31684] could not allocate digest TFM handle crct10dif-arm64-ce [ 1792.365729][T31701] syzkaller1: entered promiscuous mode [ 1792.367423][T31701] syzkaller1: entered allmulticast mode [ 1792.597913][T31705] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4698'. [ 1792.603507][T31705] wireguard2: entered promiscuous mode [ 1792.882050][T31708] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1792.885410][T31708] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 1792.894428][T31708] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1792.897296][T31708] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 1792.902202][T31708] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1792.902225][T31708] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 1792.916472][T31708] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1792.918819][T31708] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 1794.031204][T31723] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=null. [ 1794.034402][T31723] overlayfs: overlapping lowerdir path [ 1794.563151][T31728] netlink: 72 bytes leftover after parsing attributes in process `syz.6.4703'. [ 1794.822287][T31736] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4712'. [ 1794.831714][T31736] wireguard8: entered promiscuous mode [ 1795.814569][T31748] syzkaller1: entered promiscuous mode [ 1795.816835][T31748] syzkaller1: entered allmulticast mode [ 1796.492133][T26080] usb 13-1: new full-speed USB device number 8 using dummy_hcd [ 1796.773503][T31766] input: syz1 as /devices/virtual/input/input43 [ 1797.392072][T31765] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4711'. [ 1797.395472][T31765] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4711'. [ 1797.780094][T26080] usb 13-1: config 1 interface 0 altsetting 8 endpoint 0x1 has invalid maxpacket 1023, setting to 64 [ 1797.783371][T26080] usb 13-1: config 1 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1797.787028][T26080] usb 13-1: config 1 interface 0 has no altsetting 0 [ 1797.792967][T26080] usb 13-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1797.796174][T26080] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1797.798892][T26080] usb 13-1: Product: syz [ 1797.800558][T26080] usb 13-1: Manufacturer: syz [ 1797.803402][T26080] usb 13-1: SerialNumber: syz [ 1797.860810][T31753] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1798.680472][T31771] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=null. [ 1798.683591][T31771] overlayfs: overlapping lowerdir path [ 1798.696242][ T40] audit: type=1326 audit(1740759134.208:6167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31772 comm="syz.6.4715" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743e579 code=0x7ffc0000 [ 1798.697844][T26080] usb 13-1: USB disconnect, device number 8 [ 1798.705497][ T40] audit: type=1326 audit(1740759134.208:6168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31772 comm="syz.6.4715" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743e579 code=0x7ffc0000 [ 1798.712337][ T40] audit: type=1326 audit(1740759134.208:6169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31772 comm="syz.6.4715" exe="/syz-executor" sig=0 arch=40000003 syscall=282 compat=1 ip=0xf743e579 code=0x7ffc0000 [ 1798.720287][ T40] audit: type=1326 audit(1740759134.208:6170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31772 comm="syz.6.4715" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743e579 code=0x7ffc0000 [ 1798.728477][ T40] audit: type=1326 audit(1740759134.208:6171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31772 comm="syz.6.4715" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743e579 code=0x7ffc0000 [ 1798.752056][ T40] audit: type=1326 audit(1740759134.208:6172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31772 comm="syz.6.4715" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf743e579 code=0x7ffc0000 [ 1798.759774][ T40] audit: type=1326 audit(1740759134.208:6173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31772 comm="syz.6.4715" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743e579 code=0x7ffc0000 [ 1798.771423][ T40] audit: type=1326 audit(1740759134.208:6174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31772 comm="syz.6.4715" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743e579 code=0x7ffc0000 [ 1798.779232][ T40] audit: type=1326 audit(1740759134.208:6175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31772 comm="syz.6.4715" exe="/syz-executor" sig=0 arch=40000003 syscall=425 compat=1 ip=0xf743e579 code=0x7ffc0000 [ 1798.791868][ T40] audit: type=1326 audit(1740759134.208:6176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31772 comm="syz.6.4715" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743e579 code=0x7ffc0000 [ 1798.924932][T31784] syzkaller1: entered promiscuous mode [ 1798.927108][T31784] syzkaller1: entered allmulticast mode [ 1799.570487][T31793] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=null. [ 1799.574508][T31793] overlayfs: overlapping lowerdir path [ 1801.303495][T31832] netlink: 24 bytes leftover after parsing attributes in process `syz.9.4723'. [ 1801.995143][T31839] syzkaller1: entered promiscuous mode [ 1801.996918][T31839] syzkaller1: entered allmulticast mode [ 1802.977889][T31851] netlink: 72 bytes leftover after parsing attributes in process `syz.3.4727'. [ 1803.594051][T31866] random: crng reseeded on system resumption [ 1803.665182][T31866] lo speed is unknown, defaulting to 1000 [ 1804.017278][T31848] xt_hashlimit: invalid rate [ 1804.581049][T31881] syzkaller1: entered promiscuous mode [ 1804.583207][T31881] syzkaller1: entered allmulticast mode [ 1805.296800][T31891] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4739'. [ 1805.468593][T31891] wireguard9: entered promiscuous mode [ 1806.162630][T29433] usb 11-1: new full-speed USB device number 8 using dummy_hcd [ 1806.300319][T31906] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4742'. [ 1806.303530][T31906] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4742'. [ 1806.308150][T31906] bridge0: port 1(vlan2) entered blocking state [ 1806.310013][T31906] bridge0: port 1(vlan2) entered disabled state [ 1806.312203][T31906] vlan2: entered allmulticast mode [ 1806.340095][T31906] vlan2: left allmulticast mode [ 1806.381019][T29433] usb 11-1: config 1 interface 0 altsetting 8 endpoint 0x1 has invalid maxpacket 1023, setting to 64 [ 1806.384654][T29433] usb 11-1: config 1 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1806.388348][T29433] usb 11-1: config 1 interface 0 has no altsetting 0 [ 1806.396938][T29433] usb 11-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1806.399619][T29433] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1806.402624][T29433] usb 11-1: Product: syz [ 1806.403911][T29433] usb 11-1: Manufacturer: syz [ 1806.405288][T29433] usb 11-1: SerialNumber: syz [ 1806.411632][T31898] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1806.993582][T29433] usb 11-1: USB disconnect, device number 8 [ 1807.117805][T31905] xt_hashlimit: invalid rate [ 1807.218275][T31914] netlink: 72 bytes leftover after parsing attributes in process `syz.9.4741'. [ 1808.897334][T31935] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4749'. [ 1808.914012][T31936] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=null. [ 1808.914125][T31936] overlayfs: overlapping lowerdir path [ 1808.941249][T31935] wireguard2: entered promiscuous mode [ 1809.582928][T31953] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1809.884088][T31959] netlink: 64 bytes leftover after parsing attributes in process `syz.8.4754'. [ 1809.887775][T31959] netlink: 60 bytes leftover after parsing attributes in process `syz.8.4754'. [ 1809.893094][T31959] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1811.655278][T31983] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1812.166025][T31990] syzkaller1: entered promiscuous mode [ 1812.168229][T31990] syzkaller1: entered allmulticast mode [ 1812.564326][T32001] kAFS: unable to lookup cell 'sy>7 †ŸO-z1' [ 1813.426439][T32010] can0: slcan on ttyS3. [ 1813.579429][T32007] netlink: 20 bytes leftover after parsing attributes in process `syz.8.4765'. [ 1813.958872][T32027] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 1813.965771][T32027] batman_adv: batadv0: Adding interface: gretap1 [ 1813.967780][T32027] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1813.975628][T32027] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 1814.282236][T32004] can0 (unregistered): slcan off ttyS3. [ 1814.497880][T32045] syzkaller1: entered promiscuous mode [ 1814.499545][T32045] syzkaller1: entered allmulticast mode [ 1814.550965][T32048] syzkaller1: entered promiscuous mode [ 1814.552758][T32048] syzkaller1: entered allmulticast mode [ 1814.638659][ T40] kauditd_printk_skb: 10 callbacks suppressed [ 1814.638670][ T40] audit: type=1326 audit(1740759150.148:6187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32042 comm="syz.8.4768" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f1f579 code=0x0 [ 1814.881733][T32061] x_tables: (null)_tables: SNAT.2 target: invalid size 48 (kernel) != (user) 56 [ 1815.182109][T29433] usb 14-1: new high-speed USB device number 6 using dummy_hcd [ 1815.342103][T29433] usb 14-1: Using ep0 maxpacket: 32 [ 1815.344879][T29433] usb 14-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1815.347718][T29433] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1815.350811][T29433] usb 14-1: config 0 descriptor?? [ 1816.028356][T32075] kAFS: unable to lookup cell 'sy>7 †ŸO-z1' [ 1816.858567][T32080] lo speed is unknown, defaulting to 1000 [ 1817.338340][T32089] input: syz1 as /devices/virtual/input/input44 [ 1817.377190][T32089] netlink: 20 bytes leftover after parsing attributes in process `syz.8.4778'. [ 1817.379986][T32089] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4778'. [ 1817.833412][T29433] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 1817.850854][T29433] usb 14-1: Direct firmware load for dvb-usb-az6027-03.fw failed with error -2 [ 1817.854979][T29433] usb 14-1: Falling back to sysfs fallback for: dvb-usb-az6027-03.fw [ 1818.195091][T32099] syz.6.4779: attempt to access beyond end of device [ 1818.195091][T32099] nbd6: rw=0, sector=2, nr_sectors = 2 limit=0 [ 1818.198480][T32099] MINIX-fs: unable to read superblock [ 1818.233014][T32096] netlink: 72 bytes leftover after parsing attributes in process `syz.9.4780'. [ 1819.190098][T32112] netlink: 72 bytes leftover after parsing attributes in process `syz.3.4783'. [ 1820.961353][T32130] syzkaller1: entered promiscuous mode [ 1820.963871][T32130] syzkaller1: entered allmulticast mode [ 1821.118722][T32133] kAFS: unable to lookup cell 'sy>7 †ŸO-z1' [ 1821.865796][T32145] siw: device registration error -23 [ 1822.043011][T32147] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 1822.046347][T32147] batman_adv: batadv0: Adding interface: gretap2 [ 1822.048701][T32147] batman_adv: batadv0: The MTU of interface gretap2 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1822.055960][T32147] batman_adv: batadv0: Not using interface gretap2 (retrying later): interface not active [ 1822.187291][T32145] lo speed is unknown, defaulting to 1000 [ 1823.057890][T32168] syz.6.4793: attempt to access beyond end of device [ 1823.057890][T32168] nbd6: rw=0, sector=2, nr_sectors = 2 limit=0 [ 1823.069604][T32168] MINIX-fs: unable to read superblock [ 1825.622724][T32193] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 1828.079693][T32219] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=null. [ 1828.082887][T32219] overlayfs: overlapping lowerdir path [ 1828.303820][T32218] netlink: 72 bytes leftover after parsing attributes in process `syz.3.4798'. [ 1832.242800][ T40] audit: type=1400 audit(1740759167.758:6188): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name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overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=null. [ 1832.565317][T32291] overlayfs: overlapping lowerdir path [ 1833.826387][T32305] kAFS: unable to lookup cell 'sy>7 †ŸO-z1' [ 1833.971785][T32310] lo speed is unknown, defaulting to 1000 [ 1834.094975][T32310] input: syz0 as /devices/virtual/input/input45 [ 1834.336746][T32323] random: crng reseeded on system resumption [ 1834.384148][T32323] lo speed is unknown, defaulting to 1000 [ 1834.726277][T32316] overlayfs: failed to resolve './file0': -2 [ 1834.860802][T32323] netfs: Couldn't get user pages (rc=-14) [ 1836.383363][T32350] bridge0: port 1(syz_tun) entered blocking state [ 1836.385427][T32350] bridge0: port 1(syz_tun) entered disabled state [ 1836.387779][T32350] syz_tun: entered allmulticast mode [ 1836.391753][T32350] syz_tun: entered promiscuous mode [ 1836.409583][T32350] netlink: 72 bytes leftover after parsing attributes in process `syz.8.4824'. [ 1836.748052][ T40] audit: type=1400 audit(1740759172.258:6189): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name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vkms_vblank_simulate: vblank timer overrun [ 1836.947386][T32360] netlink: 'syz.8.4829': attribute type 1 has an invalid length. [ 1836.955692][T32360] netlink: 244 bytes leftover after parsing attributes in process `syz.8.4829'. [ 1839.268524][T32394] random: crng reseeded on system resumption [ 1839.311242][T32394] lo speed is unknown, defaulting to 1000 [ 1839.563224][T32395] overlayfs: failed to resolve './file0': -2 [ 1839.737622][T32393] netfs: Couldn't get user pages (rc=-14) [ 1839.867830][T32400] (unnamed net_device) (uninitialized): ARP target 1.0.0.0 is already present [ 1839.892088][T32400] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (1) [ 1839.914967][T32400] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4836'. [ 1839.920124][T32400] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4836'. [ 1840.140339][T32409] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4838'. [ 1840.161481][T32409] wireguard10: entered promiscuous mode [ 1842.565746][T32445] bridge0: port 4(syz_tun) entered blocking state [ 1842.568021][T32445] bridge0: port 4(syz_tun) entered disabled state [ 1842.571779][T32445] syz_tun: entered allmulticast mode [ 1842.582313][T32445] syz_tun: entered promiscuous mode [ 1842.605548][T32445] netlink: 72 bytes leftover after parsing attributes in process `syz.9.4844'. [ 1843.053540][T32451] netlink: 72 bytes leftover after parsing attributes in process `syz.3.4853'. [ 1843.566863][T32446] Set syz1 is full, maxelem 65536 reached [ 1843.676246][T32462] netlink: 3 bytes leftover after parsing attributes in process `syz.8.4848'. [ 1843.678922][T32462] 0ªX¹¦À: renamed from caif0 [ 1843.685383][T32462] 0ªX¹¦À: entered allmulticast mode [ 1843.686942][T32462] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 1844.023315][T32466] random: crng reseeded on system resumption [ 1844.045095][T32466] lo speed is unknown, defaulting to 1000 [ 1844.340684][T32463] overlayfs: failed to resolve './file0': -2 [ 1844.427454][T32463] netfs: Couldn't get user pages (rc=-14) [ 1844.864094][T32484] input: syz0 as /devices/virtual/input/input46 [ 1845.639627][T32488] Set syz1 is full, maxelem 65536 reached [ 1845.893853][T32501] lo speed is unknown, defaulting to 1000 [ 1846.332960][T32511] netlink: 72 bytes leftover after parsing attributes in process `syz.3.4854'. [ 1847.385079][T32522] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4862'. [ 1847.429928][T32522] wireguard3: entered promiscuous mode [ 1847.820393][T32533] netlink: 'syz.9.4864': attribute type 1 has an invalid length. [ 1847.822911][T32533] netlink: 244 bytes leftover after parsing attributes in process `syz.9.4864'. [ 1850.416010][T32565] Set syz1 is full, maxelem 65536 reached [ 1851.270676][T32591] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4872'. [ 1851.313808][T32591] wireguard3: entered promiscuous mode [ 1851.380808][T32589] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4870'. [ 1851.657394][T32605] netlink: 'syz.6.4877': attribute type 1 has an invalid length. [ 1851.659718][T32605] netlink: 244 bytes leftover after parsing attributes in process `syz.6.4877'. [ 1852.190878][T32606] lo speed is unknown, defaulting to 1000 [ 1852.555142][ T1413] ieee802154 phy1 wpan1: encryption failed: -22 [ 1853.209888][T32627] bridge0: port 3(syz_tun) entered blocking state [ 1853.209959][T32627] bridge0: port 3(syz_tun) entered disabled state [ 1853.210046][T32627] syz_tun: entered allmulticast mode [ 1853.219184][T32627] netlink: 72 bytes leftover after parsing attributes in process `syz.6.4881'. [ 1853.347017][T32625] netlink: 'syz.9.4879': attribute type 1 has an invalid length. [ 1853.358610][T32625] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1853.810222][T32635] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4882'. [ 1853.824333][T32635] wireguard4: entered promiscuous mode [ 1853.843718][T32620] bond3: (slave gretap1): making interface the new active one [ 1853.846607][T32620] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 1853.927335][T32644] x_tables: (null)_tables: SNAT.2 target: invalid size 48 (kernel) != (user) 56 [ 1854.362121][T29430] usb 11-1: new high-speed USB device number 9 using dummy_hcd [ 1854.512121][T29430] usb 11-1: Using ep0 maxpacket: 32 [ 1854.525215][T29430] usb 11-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1854.527907][T29430] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1854.531426][T29430] usb 11-1: config 0 descriptor?? [ 1855.084768][T32661] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4887'. [ 1855.089783][T32661] macvtap3: entered promiscuous mode [ 1855.091433][T32661] macvtap3: entered allmulticast mode [ 1855.093311][T32661] syz_tun: entered allmulticast mode [ 1855.822926][T32662] lo speed is unknown, defaulting to 1000 [ 1856.102287][T32672] syzkaller1: entered promiscuous mode [ 1856.103936][T32672] syzkaller1: entered allmulticast mode [ 1856.363409][T32673] netlink: 'syz.3.4890': attribute type 1 has an invalid length. [ 1856.366253][T32673] netlink: 228 bytes leftover after parsing attributes in process `syz.3.4890'. [ 1856.368928][T32673] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4890'. [ 1857.130235][T29430] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 1857.254347][T32681] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4893'. [ 1857.270055][T32681] wireguard4: entered promiscuous mode [ 1857.440571][T32689] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4894'. [ 1857.447087][T32689] netlink: 177 bytes leftover after parsing attributes in process `syz.6.4894'. [ 1857.810283][T32696] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1860.224628][T32745] usb usb1: usbfs: process 32745 (syz.8.4904) did not claim interface 0 before use [ 1860.358465][T32751] netlink: 72 bytes leftover after parsing attributes in process `syz.6.4903'. [ 1860.404277][T32753] netlink: 240 bytes leftover after parsing attributes in process `syz.8.4906'. [ 1860.407988][T32753] netlink: 240 bytes leftover after parsing attributes in process `syz.8.4906'. [ 1860.791187][T32756] netlink: 'syz.8.4906': attribute type 1 has an invalid length. [ 1860.793514][T32756] netlink: 224 bytes leftover after parsing attributes in process `syz.8.4906'. [ 1862.603356][ T313] random: crng reseeded on system resumption [ 1862.666459][ T313] lo speed is unknown, defaulting to 1000 [ 1863.018671][ T312] netfs: Couldn't get user pages (rc=-14) [ 1863.479953][ T320] netlink: 72 bytes leftover after parsing attributes in process `syz.9.4912'. [ 1864.743697][ T339] netlink: 72 bytes leftover after parsing attributes in process `syz.9.4915'. [ 1864.866502][ T341] netlink: 72 bytes leftover after parsing attributes in process `syz.3.4916'. [ 1864.882658][ T342] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4917'. [ 1864.908211][ T342] wireguard5: entered promiscuous mode [ 1865.137891][ T349] afs: Unknown parameter 'd' [ 1865.209776][ T351] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(4) [ 1865.211813][ T351] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1865.219109][ T351] vhci_hcd vhci_hcd.0: Device attached [ 1865.452141][ T5988] usb 55-1: new low-speed USB device number 5 using vhci_hcd [ 1865.902417][T29659] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 1866.228345][ T354] mkiss: ax0: crc mode is auto. [ 1866.489027][ T352] vhci_hcd: connection reset by peer [ 1866.492644][ T1138] vhci_hcd: stop threads [ 1866.493987][ T1138] vhci_hcd: release socket [ 1866.495510][ T1138] vhci_hcd: disconnect device [ 1866.515665][T26080] libceph: connect (1)[c::]:6789 error -101 [ 1866.517538][T26080] libceph: mon0 (1)[c::]:6789 connect error [ 1866.772317][T26080] libceph: connect (1)[c::]:6789 error -101 [ 1866.774886][T26080] libceph: mon0 (1)[c::]:6789 connect error [ 1867.048861][ T378] netlink: 240 bytes leftover after parsing attributes in process `syz.9.4925'. [ 1867.053466][ T378] netlink: 240 bytes leftover after parsing attributes in process `syz.9.4925'. [ 1867.186070][ T361] ceph: No mds server is up or the cluster is laggy [ 1867.346524][ T382] netlink: 'syz.9.4925': attribute type 1 has an invalid length. [ 1867.349218][ T382] netlink: 224 bytes leftover after parsing attributes in process `syz.9.4925'. [ 1867.465346][T26080] libceph: connect (1)[c::]:6789 error -101 [ 1867.484307][T26080] libceph: mon0 (1)[c::]:6789 connect error [ 1867.593592][ T375] netlink: 72 bytes leftover after parsing attributes in process `syz.6.4923'. [ 1868.211760][ T398] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4929'. [ 1868.218038][ T398] wireguard11: entered promiscuous mode [ 1868.273909][ T396] netlink: 72 bytes leftover after parsing attributes in process `syz.3.4927'. [ 1868.276688][ T401] netlink: 72 bytes leftover after parsing attributes in process `syz.6.4928'. [ 1869.439181][ T418] netlink: 44 bytes leftover after parsing attributes in process `syz.9.4933'. [ 1869.689016][ T422] can0: slcan on ttyS3. [ 1870.532487][ T417] can0 (unregistered): slcan off ttyS3. [ 1870.542102][ T5988] vhci_hcd: vhci_device speed not set [ 1870.584639][ T428] 9pnet_fd: Insufficient options for proto=fd [ 1870.618666][ T446] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1870.621022][ T446] overlayfs: failed to set xattr on upper [ 1870.632065][ T446] overlayfs: ...falling back to redirect_dir=nofollow. [ 1870.634073][ T446] overlayfs: ...falling back to index=off. [ 1870.635739][ T446] overlayfs: ...falling back to uuid=null. [ 1870.787303][ T435] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4935'. [ 1870.789891][ T435] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4935'. [ 1870.850670][T26080] libceph: connect (1)[c::]:6789 error -22 [ 1870.853043][T26080] libceph: mon0 (1)[c::]:6789 connect error [ 1871.113167][T26080] libceph: connect (1)[c::]:6789 error -22 [ 1871.115578][T26080] libceph: mon0 (1)[c::]:6789 connect error [ 1871.402349][ T435] ceph: No mds server is up or the cluster is laggy [ 1871.888616][ T472] wireguard12: entered promiscuous mode [ 1871.984923][ T474] wireguard5: entered promiscuous mode [ 1872.381343][ T481] __nla_validate_parse: 3 callbacks suppressed [ 1872.381354][ T481] netlink: 72 bytes leftover after parsing attributes in process `syz.3.4940'. [ 1872.944479][ T491] overlayfs: missing 'lowerdir' [ 1873.874681][ T498] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4946'. [ 1873.878603][ T498] netlink: 177 bytes leftover after parsing attributes in process `syz.3.4946'. [ 1874.587418][T29427] libceph: connect (1)[c::]:6789 error -101 [ 1874.589278][T29427] libceph: mon0 (1)[c::]:6789 connect error [ 1874.842235][T29427] libceph: connect (1)[c::]:6789 error -101 [ 1874.844644][T29427] libceph: mon0 (1)[c::]:6789 connect error [ 1875.352296][T29427] libceph: connect (1)[c::]:6789 error -101 [ 1875.354822][T29427] libceph: mon0 (1)[c::]:6789 connect error [ 1875.391839][ T521] ceph: No mds server is up or the cluster is laggy [ 1875.697994][ T539] random: crng reseeded on system resumption [ 1875.742749][ T539] lo speed is unknown, defaulting to 1000 [ 1876.210150][ T537] netfs: Couldn't get user pages (rc=-14) [ 1876.930823][ T544] bridge0: port 4(hsr_slave_1) entered blocking state [ 1876.933461][ T544] bridge0: port 4(hsr_slave_1) entered disabled state [ 1876.936094][ T544] hsr_slave_1: entered allmulticast mode [ 1876.939045][ T544] hsr_slave_1: left allmulticast mode [ 1876.945220][ T545] netlink: 72 bytes leftover after parsing attributes in process `syz.3.4953'. [ 1877.004489][ T554] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4957'. [ 1877.008043][ T554] netlink: 177 bytes leftover after parsing attributes in process `syz.9.4957'. [ 1878.139253][ T578] netlink: 240 bytes leftover after parsing attributes in process `syz.6.4960'. [ 1878.145937][T29433] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 1878.150326][T29433] dvb_usb_az6027 14-1:0.0: probe with driver dvb_usb_az6027 failed with error -110 [ 1878.154931][T29430] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -2). You can use /scripts/get_dvb_firmware to get the firmware [ 1878.166452][T29430] dvb_usb_az6027 11-1:0.0: probe with driver dvb_usb_az6027 failed with error -2 [ 1878.170413][T29430] usb 11-1: USB disconnect, device number 9 [ 1878.173738][T29433] usb 14-1: USB disconnect, device number 6 [ 1878.179976][ T578] netlink: 240 bytes leftover after parsing attributes in process `syz.6.4960'. [ 1878.506404][ T581] netlink: 'syz.6.4960': attribute type 1 has an invalid length. [ 1878.508734][ T581] netlink: 224 bytes leftover after parsing attributes in process `syz.6.4960'. [ 1879.142129][ T594] lo speed is unknown, defaulting to 1000 [ 1879.190273][ T597] ptrace attach of "/syz-executor exec"[15037] was attempted by "/syz-executor exec"[597] [ 1879.772019][ T609] random: crng reseeded on system resumption [ 1879.871156][ T609] lo speed is unknown, defaulting to 1000 [ 1880.382036][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1880.456591][ T609] netfs: Couldn't get user pages (rc=-14) [ 1880.538953][ T608] netlink: 72 bytes leftover after parsing attributes in process `syz.8.4967'. [ 1880.716172][ T614] 9pnet_fd: Insufficient options for proto=fd [ 1880.908765][ T621] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4969'. [ 1880.925728][ T621] wireguard5: entered promiscuous mode [ 1881.414868][ T628] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4970'. [ 1881.459380][ T628] wireguard6: entered promiscuous mode [ 1882.701674][ T650] syzkaller1: entered promiscuous mode [ 1882.706707][ T650] syzkaller1: entered allmulticast mode [ 1883.023417][ T652] netlink: 'syz.9.4974': attribute type 1 has an invalid length. [ 1883.026534][ T652] netlink: 228 bytes leftover after parsing attributes in process `syz.9.4974'. [ 1883.029173][ T652] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4974'. [ 1883.278306][ T655] netlink: 40 bytes leftover after parsing attributes in process `syz.6.4977'. [ 1883.785686][ T665] Cannot find add_set index 3 as target [ 1883.792719][ T665] netlink: 'syz.3.4980': attribute type 6 has an invalid length. [ 1883.795845][ T665] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4980'. [ 1884.283368][ T675] netlink: 72 bytes leftover after parsing attributes in process `syz.8.4979'. [ 1884.602928][ T684] netlink: 4268 bytes leftover after parsing attributes in process `syz.3.4982'. [ 1884.606072][ T684] netlink: 4268 bytes leftover after parsing attributes in process `syz.3.4982'. [ 1884.815517][ T688] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4981'. [ 1884.820697][ T688] netlink: 177 bytes leftover after parsing attributes in process `syz.8.4981'. [ 1885.380165][ T698] netlink: 72 bytes leftover after parsing attributes in process `syz.9.4989'. [ 1885.881396][ T703] syzkaller1: entered promiscuous mode [ 1885.885460][ T703] syzkaller1: entered allmulticast mode [ 1886.706030][ T707] netlink: 'syz.9.4986': attribute type 4 has an invalid length. [ 1886.799518][ T707] netlink: 'syz.9.4986': attribute type 4 has an invalid length. [ 1887.316309][ T720] netlink: 72 bytes leftover after parsing attributes in process `syz.3.4990'. [ 1888.115446][ T733] capability: warning: `syz.8.4992' uses 32-bit capabilities (legacy support in use) [ 1889.681203][ T750] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4994'. [ 1889.970694][ T750] wireguard6: entered promiscuous mode [ 1890.609147][ T757] lo speed is unknown, defaulting to 1000 [ 1890.624690][ T759] netlink: 'syz.8.4999': attribute type 1 has an invalid length. [ 1890.627004][ T759] netlink: 228 bytes leftover after parsing attributes in process `syz.8.4999'. [ 1890.629579][ T759] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4999'. [ 1890.673182][ T760] ptrace attach of "/syz-executor exec"[10740] was attempted by "/syz-executor exec"[760] [ 1891.374101][ T769] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5001'. [ 1891.376818][ T769] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5001'. [ 1891.387569][T26080] libceph: connect (1)[c::]:6789 error -22 [ 1891.389998][T26080] libceph: mon0 (1)[c::]:6789 connect error [ 1891.462506][ T782] netlink: 72 bytes leftover after parsing attributes in process `syz.8.5003'. [ 1891.696533][T26080] libceph: connect (1)[c::]:6789 error -22 [ 1891.698700][T26080] libceph: mon0 (1)[c::]:6789 connect error [ 1891.701760][ T769] ceph: No mds server is up or the cluster is laggy [ 1891.880118][ T790] random: crng reseeded on system resumption [ 1892.046424][ T790] lo speed is unknown, defaulting to 1000 [ 1892.398107][ T787] netfs: Couldn't get user pages (rc=-14) [ 1893.128098][ T809] gtp1: entered promiscuous mode [ 1893.129668][ T809] gtp1: entered allmulticast mode [ 1893.205438][ T797] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5014'. [ 1893.208860][ T797] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5014'. [ 1893.310762][T26080] libceph: connect (1)[c::]:6789 error -22 [ 1893.314649][T26080] libceph: mon0 (1)[c::]:6789 connect error [ 1893.425615][ T797] ceph: No mds server is up or the cluster is laggy [ 1893.724838][ T817] ebtables: wrong size: *len 264, entries_size 144, replsz 144 [ 1894.199129][ T824] netlink: 'syz.3.5009': attribute type 16 has an invalid length. [ 1894.201499][ T824] netlink: 'syz.3.5009': attribute type 3 has an invalid length. [ 1894.204479][ T824] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5009'. [ 1894.361472][ T822] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5010'. [ 1894.376019][ T822] wireguard7: entered promiscuous mode [ 1895.211475][ T831] netlink: 'syz.8.5011': attribute type 4 has an invalid length. [ 1895.218424][ T831] netlink: 'syz.8.5011': attribute type 4 has an invalid length. [ 1895.609420][ T841] Cannot find add_set index 3 as target [ 1895.780148][ T845] /dev/loop6: Can't lookup blockdev [ 1895.828309][ T841] netlink: 'syz.6.5013': attribute type 6 has an invalid length. [ 1895.830541][ T841] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5013'. [ 1895.885260][ T848] bridge0: port 3(hsr_slave_1) entered blocking state [ 1895.887408][ T848] bridge0: port 3(hsr_slave_1) entered disabled state [ 1895.889767][ T848] hsr_slave_1: entered allmulticast mode [ 1895.893835][ T848] hsr_slave_1: left allmulticast mode [ 1897.044812][ T862] netlink: 72 bytes leftover after parsing attributes in process `syz.8.5015'. [ 1897.057711][ T863] netlink: 'syz.3.5018': attribute type 10 has an invalid length. [ 1897.419704][ T867] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5020'. [ 1897.422887][ T867] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5020'. [ 1897.603889][T26080] libceph: connect (1)[c::]:6789 error -101 [ 1897.605805][T26080] libceph: mon0 (1)[c::]:6789 connect error [ 1897.991296][T26080] libceph: connect (1)[c::]:6789 error -101 [ 1897.997333][T26080] libceph: mon0 (1)[c::]:6789 connect error [ 1898.060284][ T867] ceph: No mds server is up or the cluster is laggy [ 1898.111109][ T872] ebtables: wrong size: *len 264, entries_size 144, replsz 144 [ 1898.872860][ T893] lo speed is unknown, defaulting to 1000 [ 1899.834582][ T907] netlink: 72 bytes leftover after parsing attributes in process `syz.8.5030'. [ 1900.900408][ T916] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5033'. [ 1900.903220][ T916] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5033'. [ 1900.922899][T26080] libceph: connect (1)[c::]:6789 error -22 [ 1900.924780][T26080] libceph: mon0 (1)[c::]:6789 connect error [ 1901.185629][T26080] libceph: connect (1)[c::]:6789 error -22 [ 1901.187825][T26080] libceph: mon0 (1)[c::]:6789 connect error [ 1901.589298][ T916] ceph: No mds server is up or the cluster is laggy [ 1901.768991][ T937] ipvlan1: left allmulticast mode [ 1901.770531][ T937] veth0_vlan: left allmulticast mode [ 1901.965770][ T940] netlink: 72 bytes leftover after parsing attributes in process `syz.6.5038'. [ 1902.945646][ T961] netlink: 72 bytes leftover after parsing attributes in process `syz.3.5042'. [ 1903.904617][ T993] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5045'. [ 1903.916126][ T993] input: syz1 as /devices/virtual/input/input47 [ 1904.235191][ T996] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5046'. [ 1904.237982][ T996] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5046'. [ 1904.245665][T26080] libceph: connect (1)[c::]:6789 error -22 [ 1904.247580][T26080] libceph: mon0 (1)[c::]:6789 connect error [ 1904.552210][T26080] libceph: connect (1)[c::]:6789 error -22 [ 1904.555067][T26080] libceph: mon0 (1)[c::]:6789 connect error [ 1904.952610][ T1014] overlayfs: missing 'lowerdir' [ 1905.535006][T26080] libceph: connect (1)[c::]:6789 error -22 [ 1905.536826][T26080] libceph: mon0 (1)[c::]:6789 connect error [ 1905.544062][ T996] ceph: No mds server is up or the cluster is laggy [ 1905.816418][ T1022] netlink: 72 bytes leftover after parsing attributes in process `syz.8.5049'. [ 1906.020495][ T1027] ipvlan1: entered allmulticast mode [ 1906.022912][ T1027] veth0_vlan: entered allmulticast mode [ 1906.849655][ T1043] netlink: 72 bytes leftover after parsing attributes in process `syz.9.5053'. [ 1907.270448][ T40] audit: type=1800 audit(1740759242.778:6190): pid=1052 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.5056" name="SYSV00000000" dev="tmpfs" ino=7 res=0 errno=0 [ 1907.872334][ T1058] input: syz1 as /devices/virtual/input/input48 [ 1907.932957][ T1067] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5060'. [ 1907.944189][ T1068] netlink: 20 bytes leftover after parsing attributes in process `syz.9.5057'. [ 1907.947040][ T1068] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5057'. [ 1907.978821][ T1067] wireguard8: entered promiscuous mode [ 1908.126432][ T1071] netlink: 72 bytes leftover after parsing attributes in process `syz.3.5061'. [ 1909.003422][ T1082] netlink: 72 bytes leftover after parsing attributes in process `syz.8.5063'. [ 1910.822618][ T1131] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5072'. [ 1910.829268][ T1131] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5072'. [ 1910.979517][ T1133] netlink: 72 bytes leftover after parsing attributes in process `syz.8.5073'. [ 1911.836692][ T1151] random: crng reseeded on system resumption [ 1911.888266][ T1151] lo speed is unknown, defaulting to 1000 [ 1912.207694][ T1139] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5074'. [ 1912.237138][ T1139] wireguard9: entered promiscuous mode [ 1912.237866][ T1150] netfs: Couldn't get user pages (rc=-14) [ 1914.449172][ T1181] overlay: Unknown parameter '/' [ 1915.055964][ T1202] netlink: 72 bytes leftover after parsing attributes in process `syz.6.5087'. [ 1915.066976][ T1203] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5081'. [ 1915.079910][ T1203] wireguard13: entered promiscuous mode [ 1915.576088][ T1210] random: crng reseeded on system resumption [ 1915.656481][ T1210] lo speed is unknown, defaulting to 1000 [ 1915.894696][ T1217] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5090'. [ 1916.083166][ T1209] netfs: Couldn't get user pages (rc=-14) [ 1916.088273][ T1217] wireguard6: entered promiscuous mode [ 1916.476724][ T1220] netlink: 72 bytes leftover after parsing attributes in process `syz.9.5099'. [ 1916.631683][ T1228] syz.6.5091: attempt to access beyond end of device [ 1916.631683][ T1228] nbd6: rw=4096, sector=0, nr_sectors = 2 limit=0 [ 1916.734276][ T1228] XFS (nbd6): SB validate failed with error -5. [ 1916.781139][ T1234] gtp0: entered promiscuous mode [ 1916.782853][ T1234] gtp0: entered allmulticast mode [ 1917.503327][ T1226] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5092'. [ 1917.516903][ T1226] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5092'. [ 1917.746521][T26080] libceph: connect (1)[c::]:6789 error -101 [ 1917.748368][T26080] libceph: mon0 (1)[c::]:6789 connect error [ 1918.212660][ T1252] overlay: Unknown parameter '/' [ 1918.316694][T26080] libceph: connect (1)[c::]:6789 error -101 [ 1918.318604][T26080] libceph: mon0 (1)[c::]:6789 connect error [ 1918.361716][ T1226] ceph: No mds server is up or the cluster is laggy [ 1919.156340][ T1272] befs: (nullb0): No write support. Marking filesystem read-only [ 1919.159091][ T1272] befs: (nullb0): invalid magic header [ 1919.165887][ T1272] netlink: 'syz.3.5102': attribute type 1 has an invalid length. [ 1919.173442][ T1272] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1919.236906][ T1276] netlink: 72 bytes leftover after parsing attributes in process `syz.6.5103'. [ 1920.175963][ T1288] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5107'. [ 1920.180413][ T1288] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5107'. [ 1920.184451][ T1288] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5107'. [ 1920.187088][ T1288] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5107'. [ 1920.189670][ T1288] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5107'. [ 1920.192447][ T1288] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5107'. [ 1920.195067][ T1288] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5107'. [ 1920.885245][ T1308] program syz.9.5114 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1921.046541][ T1312] netlink: 'syz.8.5112': attribute type 10 has an invalid length. [ 1921.049719][ T1312] syz_tun: left allmulticast mode [ 1921.051851][ T1312] bridge0: port 1(syz_tun) entered disabled state [ 1921.781581][ T1332] wireguard7: entered promiscuous mode [ 1922.374011][ T1353] netlink: 'syz.6.5129': attribute type 10 has an invalid length. [ 1922.376492][ T1353] syz_tun: left allmulticast mode [ 1922.378173][ T1353] bridge0: port 3(syz_tun) entered disabled state [ 1922.561038][ T1357] __nla_validate_parse: 89 callbacks suppressed [ 1922.561049][ T1357] netlink: 72 bytes leftover after parsing attributes in process `syz.3.5139'. [ 1922.898204][ T1374] ip6erspan0: entered promiscuous mode [ 1923.678304][ T1383] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5140'. [ 1923.698499][ T1383] wireguard7: entered promiscuous mode [ 1924.005806][ T1399] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5142'. [ 1924.009112][ T1399] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5142'. [ 1924.009721][ T1401] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5146'. [ 1924.011707][ T1399] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5142'. [ 1924.017611][ T1399] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5142'. [ 1924.020199][ T1399] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5142'. [ 1924.023145][ T1399] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5142'. [ 1924.025828][ T1399] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5142'. [ 1925.472690][ T1422] input: syz1 as /devices/virtual/input/input49 [ 1925.908959][ T1441] wireguard10: entered promiscuous mode [ 1926.632852][ T1478] syzkaller1: entered promiscuous mode [ 1926.634537][ T1478] syzkaller1: entered allmulticast mode [ 1927.123379][ T1499] syzkaller1: entered promiscuous mode [ 1927.125036][ T1499] syzkaller1: entered allmulticast mode [ 1927.522927][ T1520] usb usb8: usbfs: process 1520 (syz.8.5190) did not claim interface 0 before use [ 1927.627925][ T1527] __nla_validate_parse: 50 callbacks suppressed [ 1927.627938][ T1527] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5193'. [ 1928.165346][ T1562] nftables ruleset with unbound chain [ 1928.268771][ T1571] netlink: 72 bytes leftover after parsing attributes in process `syz.6.5202'. [ 1928.306089][ T1572] VFS: could not find a valid V7 on nullb0. [ 1928.485003][ T1579] syzkaller1: entered promiscuous mode [ 1928.486736][ T1579] syzkaller1: entered allmulticast mode [ 1928.712817][ T1586] netlink: 72 bytes leftover after parsing attributes in process `syz.9.5216'. [ 1929.083983][ T1606] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5224'. [ 1929.086782][ T1606] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5224'. [ 1929.246926][ T1626] syzkaller1: entered promiscuous mode [ 1929.248615][ T1626] syzkaller1: entered allmulticast mode [ 1929.407661][ T1629] xt_TCPMSS: Only works on TCP SYN packets [ 1929.518661][ T1624] netlink: 72 bytes leftover after parsing attributes in process `syz.6.5234'. [ 1929.752231][ T5988] usb 13-1: new low-speed USB device number 9 using dummy_hcd [ 1929.800572][ T1668] kernel profiling enabled (shift: 63) [ 1929.804237][ T1668] profiling shift: 63 too large [ 1929.948293][ T1672] netlink: 72 bytes leftover after parsing attributes in process `syz.9.5251'. [ 1930.135355][ T5988] usb 13-1: config 0 has an invalid interface number: 55 but max is 0 [ 1930.137714][ T5988] usb 13-1: config 0 has no interface number 0 [ 1930.139506][ T5988] usb 13-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1930.142660][ T5988] usb 13-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 1930.146597][ T5988] usb 13-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1930.150251][ T5988] usb 13-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1930.153441][ T5988] usb 13-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 1930.156518][ T5988] usb 13-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1930.160220][ T5988] usb 13-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1930.162951][ T5988] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1930.166085][ T5988] usb 13-1: config 0 descriptor?? [ 1930.170237][ T1637] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1930.173821][ T1637] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1930.179866][ T5988] ldusb 13-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1930.389844][ T5988] usb 13-1: USB disconnect, device number 9 [ 1930.395861][ T5988] ldusb 13-1:0.55: LD USB Device #0 now disconnected [ 1930.500343][ T1700] netlink: 72 bytes leftover after parsing attributes in process `syz.6.5267'. [ 1930.927403][ T1705] netlink: 48 bytes leftover after parsing attributes in process `syz.9.5269'. [ 1930.930995][ T1705] netlink: 48 bytes leftover after parsing attributes in process `syz.9.5269'. [ 1930.990570][ T1710] syzkaller1: entered promiscuous mode [ 1930.992756][ T1710] syzkaller1: entered allmulticast mode [ 1931.256614][ T1724] usb usb8: usbfs: process 1724 (syz.9.5277) did not claim interface 0 before use [ 1931.332643][ T1719] wireguard8: entered promiscuous mode [ 1931.497320][ T1739] usb usb8: usbfs: process 1739 (syz.9.5283) did not claim interface 0 before use [ 1931.897462][ T1761] random: crng reseeded on system resumption [ 1932.062928][T10600] usb 14-1: new high-speed USB device number 7 using dummy_hcd [ 1932.666786][ T1754] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1932.669410][ T1754] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1932.676608][T10600] usb 14-1: unable to get BOS descriptor or descriptor too short [ 1932.680178][T10600] usb 14-1: unable to read config index 0 descriptor/start: -71 [ 1932.682615][T10600] usb 14-1: can't read configurations, error -71 [ 1932.692360][ T1769] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=null. [ 1932.695450][ T1769] overlayfs: overlapping lowerdir path [ 1933.184496][ T1774] syz.8.5296: attempt to access beyond end of device [ 1933.184496][ T1774] nbd8: rw=4096, sector=0, nr_sectors = 2 limit=0 [ 1933.190876][ T1774] XFS (nbd8): SB validate failed with error -5. [ 1933.260166][ T1783] gtp1: entered promiscuous mode [ 1933.261744][ T1783] gtp1: entered allmulticast mode [ 1933.578554][ T1792] __nla_validate_parse: 1 callbacks suppressed [ 1933.578632][ T1792] netlink: 72 bytes leftover after parsing attributes in process `syz.9.5299'. [ 1934.131563][ T1798] netlink: 72 bytes leftover after parsing attributes in process `syz.8.5302'. [ 1934.429131][ T1803] smc: net device bond0 erased user defined pnetid SYZ2 [ 1934.431640][ T1803] smc: ib device syz0 ibport 1 erased user defined pnetid SYZ2 [ 1934.598997][ T1828] netlink: 20 bytes leftover after parsing attributes in process `syz.8.5315'. [ 1934.932309][ T1848] netlink: 72 bytes leftover after parsing attributes in process `syz.3.5324'. [ 1935.061181][ T1873] netlink: 72 bytes leftover after parsing attributes in process `syz.8.5325'. [ 1935.072355][ T1879] netlink: 72 bytes leftover after parsing attributes in process `syz.6.5326'. [ 1935.475379][ T1893] netlink: 72 bytes leftover after parsing attributes in process `syz.9.5341'. [ 1936.125235][ T1945] netlink: 72 bytes leftover after parsing attributes in process `syz.6.5361'. [ 1936.253428][ T1916] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=null. [ 1936.256465][ T1916] overlayfs: overlapping lowerdir path [ 1936.713463][ T1949] netlink: 72 bytes leftover after parsing attributes in process `syz.8.5364'. [ 1937.114721][T10600] usb 11-1: new high-speed USB device number 10 using dummy_hcd [ 1937.272055][T10600] usb 11-1: Using ep0 maxpacket: 32 [ 1937.275180][T10600] usb 11-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1937.278752][T10600] usb 11-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1937.282942][T10600] usb 11-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1937.286551][T10600] usb 11-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1937.293337][T10600] usb 11-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 1937.296687][T10600] usb 11-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 1937.299816][T10600] usb 11-1: Product: syz [ 1937.301404][T10600] usb 11-1: Manufacturer: syz [ 1937.303752][T10600] usb 11-1: SerialNumber: syz [ 1937.309677][T10600] input: appletouch as /devices/platform/dummy_hcd.6/usb11/11-1/11-1:1.0/input/input50 [ 1937.320718][ T1965] netlink: 72 bytes leftover after parsing attributes in process `syz.3.5371'. [ 1937.511844][T29430] usb 11-1: USB disconnect, device number 10 [ 1937.521990][T29430] appletouch 11-1:1.0: input: appletouch disconnected [ 1937.662178][ T1971] wireguard14: entered promiscuous mode [ 1937.747448][ T1983] tipc: Started in network mode [ 1937.749579][ T1983] tipc: Node identity , cluster identity 4711 [ 1937.753246][ T1983] tipc: Failed to set node id, please configure manually [ 1937.756250][ T1983] tipc: Enabling of bearer rejected, failed to enable media [ 1938.703406][ T1988] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=null. [ 1938.706342][ T1988] overlayfs: overlapping lowerdir path [ 1939.027735][ T2024] __nla_validate_parse: 1 callbacks suppressed [ 1939.027746][ T2024] netlink: 48 bytes leftover after parsing attributes in process `syz.8.5395'. [ 1939.333825][ T2034] Process accounting resumed [ 1939.481568][ T2020] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5393'. [ 1939.481696][ T2019] befs: (nullb0): No write support. Marking filesystem read-only [ 1939.487328][ T2019] befs: (nullb0): invalid magic header [ 1939.497704][ T2020] wireguard15: entered promiscuous mode [ 1939.633490][ T2036] netlink: 72 bytes leftover after parsing attributes in process `syz.8.5400'. [ 1939.690982][ T2019] netlink: 'syz.6.5390': attribute type 1 has an invalid length. [ 1939.698767][ T2019] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1939.841552][ T2051] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5405'. [ 1940.016507][ T2074] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5416'. [ 1940.148759][ T2093] usb usb8: usbfs: process 2093 (syz.9.5424) did not claim interface 0 before use [ 1940.257826][ T2097] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5426'. [ 1940.387724][ T2108] netlink: 104 bytes leftover after parsing attributes in process `syz.6.5431'. [ 1940.390479][ T2108] netlink: 104 bytes leftover after parsing attributes in process `syz.6.5431'. [ 1940.472876][ T2105] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=null. [ 1940.475920][ T2105] overlayfs: overlapping lowerdir path [ 1940.787487][ T2131] bond0: option arp_interval: mode dependency failed, not supported in mode balance-alb(6) [ 1940.843797][ T2136] futex_wake_op: syz.6.5442 tries to shift op by 32; fix this program [ 1941.053521][ T2139] netlink: 72 bytes leftover after parsing attributes in process `syz.6.5443'. [ 1941.069527][ T2146] blktrace: Concurrent blktraces are not allowed on sg0 [ 1941.786524][ T2159] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5450'. [ 1942.010734][ T2179] lo speed is unknown, defaulting to 1000 [ 1942.114123][ T2183] bridge0: port 1(hsr_slave_1) entered blocking state [ 1942.116239][ T2183] bridge0: port 1(hsr_slave_1) entered disabled state [ 1942.118634][ T2183] hsr_slave_1: entered allmulticast mode [ 1942.123361][ T2183] hsr_slave_1: left allmulticast mode [ 1943.172359][ T2193] wireguard16: entered promiscuous mode [ 1944.592898][ T2238] __nla_validate_parse: 5 callbacks suppressed [ 1944.592911][ T2238] netlink: 72 bytes leftover after parsing attributes in process `syz.3.5474'. [ 1944.963550][ T2233] netlink: 72 bytes leftover after parsing attributes in process `syz.8.5475'. [ 1945.232835][ T2249] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5476'. [ 1945.264476][ T2251] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5480'. [ 1945.533825][ T2249] wireguard11: entered promiscuous mode [ 1945.555398][ T2251] wireguard17: entered promiscuous mode [ 1946.248694][ T2275] netlink: 72 bytes leftover after parsing attributes in process `syz.9.5484'. [ 1946.674252][ T2279] netlink: 72 bytes leftover after parsing attributes in process `syz.8.5488'. [ 1946.880218][ T5988] usb 11-1: new high-speed USB device number 11 using dummy_hcd [ 1947.034645][ T5988] usb 11-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 1947.037213][ T5988] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1947.040008][ T5988] usb 11-1: Product: syz [ 1947.041300][ T5988] usb 11-1: Manufacturer: syz [ 1947.042812][ T5988] usb 11-1: SerialNumber: syz [ 1947.050078][ T5988] usb 11-1: config 0 descriptor?? [ 1947.154463][ T2283] netlink: 72 bytes leftover after parsing attributes in process `syz.9.5489'. [ 1947.262994][T29430] usb 11-1: USB disconnect, device number 11 [ 1947.635181][ T2287] netlink: 72 bytes leftover after parsing attributes in process `syz.8.5490'. [ 1948.376725][ T2304] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5493'. [ 1948.394916][ T2304] wireguard18: entered promiscuous mode [ 1948.504162][ T2313] kernel read not supported for file /eth0 (pid: 2313 comm: syz.8.5500) [ 1948.511495][ T40] audit: type=1800 audit(1740759797.012:6191): pid=2313 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.5500" name="eth0" dev="mqueue" ino=143532 res=0 errno=0 [ 1948.671223][ T2315] netlink: 72 bytes leftover after parsing attributes in process `syz.3.5498'. [ 1949.258813][ T2341] input: syz1 as /devices/virtual/input/input51 [ 1949.428310][ T2356] lo speed is unknown, defaulting to 1000 [ 1949.736770][ T2365] set match dimension is over the limit! [ 1949.878701][ T2375] __nla_validate_parse: 2 callbacks suppressed [ 1949.878713][ T2375] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5519'. [ 1949.938868][ T2375] wireguard19: entered promiscuous mode [ 1949.973898][ T2387] lo speed is unknown, defaulting to 1000 [ 1950.121013][ T2393] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 1950.381679][ T2402] netlink: 72 bytes leftover after parsing attributes in process `syz.8.5534'. [ 1950.535086][ T2404] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5535'. [ 1950.558172][ T2404] wireguard9: entered promiscuous mode [ 1950.584186][ T2407] netlink: 'syz.9.5536': attribute type 1 has an invalid length. [ 1950.644583][ T2411] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5538'. [ 1951.233202][ T2431] netlink: 72 bytes leftover after parsing attributes in process `syz.6.5544'. [ 1951.728991][ T2439] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5545'. [ 1951.738762][ T2439] wireguard8: entered promiscuous mode [ 1952.082078][T29656] usb 14-1: new high-speed USB device number 9 using dummy_hcd [ 1952.142171][T27361] Bluetooth: hci0: command tx timeout [ 1952.242196][T29656] usb 14-1: Using ep0 maxpacket: 8 [ 1952.248633][T29656] usb 14-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1952.252638][T29656] usb 14-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1952.255601][T29656] usb 14-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1952.258695][T29656] usb 14-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1952.264161][T29656] usb 14-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1952.266951][T29656] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1952.394000][ T2455] netlink: 72 bytes leftover after parsing attributes in process `syz.8.5553'. [ 1952.478477][T29656] usb 14-1: GET_CAPABILITIES returned 0 [ 1952.480243][T29656] usbtmc 14-1:16.0: can't read capabilities [ 1952.683845][T29430] usb 14-1: USB disconnect, device number 9 [ 1953.226854][ T2463] smc: net device bond0 applied user defined pnetid SYZ0 [ 1953.229861][ T2463] smc: net device bond0 erased user defined pnetid SYZ0 [ 1953.318642][ T2467] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5558'. [ 1953.659675][ T2473] netlink: 72 bytes leftover after parsing attributes in process `syz.8.5560'. [ 1953.660170][ T2474] netlink: 72 bytes leftover after parsing attributes in process `syz.9.5559'. [ 1954.788567][T26080] usb 14-1: new high-speed USB device number 10 using dummy_hcd [ 1955.032361][ T2509] __nla_validate_parse: 2 callbacks suppressed [ 1955.032439][ T2509] netlink: 72 bytes leftover after parsing attributes in process `syz.8.5572'. [ 1955.297537][ T2510] netlink: 72 bytes leftover after parsing attributes in process `syz.3.5573'. [ 1955.332109][T26080] usb 14-1: Using ep0 maxpacket: 16 [ 1955.343135][T26080] usb 14-1: config 0 has an invalid interface number: 132 but max is 0 [ 1955.353981][T26080] usb 14-1: config 0 has no interface number 0 [ 1955.358434][T26080] usb 14-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 1955.362817][T26080] usb 14-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1955.365856][T26080] usb 14-1: Product: syz [ 1955.367716][T26080] usb 14-1: Manufacturer: syz [ 1955.369570][T26080] usb 14-1: SerialNumber: syz [ 1955.373071][T26080] usb 14-1: config 0 descriptor?? [ 1955.376321][T26080] hub 14-1:0.132: bad descriptor, ignoring hub [ 1955.378892][T26080] hub 14-1:0.132: probe with driver hub failed with error -5 [ 1955.503089][T26080] input: bcm5974 as /devices/platform/dummy_hcd.9/usb14/14-1/14-1:0.132/input/input52 [ 1955.713226][T29656] usb 14-1: USB disconnect, device number 10 [ 1956.165745][ T2532] cgroup: fork rejected by pids controller in /syz9 [ 1956.210448][T29672] x86/PAT: syz.9.4308:29672 freeing invalid memtype [mem 0xfed00000-0xfed00fff] [ 1956.254015][T25314] syz_tun (unregistering): left allmulticast mode [ 1956.255892][T25314] syz_tun (unregistering): left promiscuous mode [ 1956.257686][T25314] bridge0: port 4(syz_tun) entered disabled state [ 1956.368683][ T2542] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5579'. [ 1956.376575][ T2542] wireguard10: entered promiscuous mode [ 1956.547011][ T2546] netlink: 72 bytes leftover after parsing attributes in process `syz.6.5583'. [ 1956.745230][T12522] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1956.761468][T12522] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1956.766202][T12522] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1956.770825][T12522] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1956.776526][T12522] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1956.778913][T12522] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1956.794966][T27361] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1956.802427][T27361] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1956.804656][T27361] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1956.807344][T27361] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1956.810033][T27361] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1956.815361][T27361] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1956.856790][ T2550] lo speed is unknown, defaulting to 1000 [ 1956.947934][ T2550] chnl_net:caif_netlink_parms(): no params data found [ 1956.974612][ T11] netdevsim netdevsim9 netdevsim0 (unregistering): left allmulticast mode [ 1956.977540][ T11] netdevsim netdevsim9 netdevsim0 (unregistering): left promiscuous mode [ 1956.982402][ T11] bridge0: port 3(netdevsim0) entered disabled state [ 1957.042048][ T2550] bridge0: port 1(bridge_slave_0) entered blocking state [ 1957.044525][ T2550] bridge0: port 1(bridge_slave_0) entered disabled state [ 1957.048654][ T2550] bridge_slave_0: entered allmulticast mode [ 1957.050844][ T2550] bridge_slave_0: entered promiscuous mode [ 1957.058768][ T2550] bridge0: port 2(bridge_slave_1) entered blocking state [ 1957.060823][ T2550] bridge0: port 2(bridge_slave_1) entered disabled state [ 1957.063480][ T2550] bridge_slave_1: entered allmulticast mode [ 1957.065621][ T2550] bridge_slave_1: entered promiscuous mode [ 1957.096763][ T2550] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1957.100597][ T2550] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1957.179760][ T2550] team0: Port device team_slave_0 added [ 1957.181858][ T11] bridge_slave_1: left allmulticast mode [ 1957.183661][ T11] bridge_slave_1: left promiscuous mode [ 1957.185356][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 1957.188379][ T11] bridge_slave_0: left allmulticast mode [ 1957.190006][ T11] bridge_slave_0: left promiscuous mode [ 1957.191699][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 1957.359042][ T11] bond3 (unregistering): (slave gretap1): Releasing active interface [ 1957.387982][ T2568] netlink: 72 bytes leftover after parsing attributes in process `syz.8.5586'. [ 1957.456610][ T2581] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5588'. [ 1957.459237][ T2581] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5588'. [ 1957.805340][ T11] bond1 (unregistering): Released all slaves [ 1957.921859][ T11] bond2 (unregistering): Released all slaves [ 1958.039967][ T1138] smc: removing ib device syz0 [ 1958.040013][ T11] bond0 (unregistering): Released all slaves [ 1958.168512][ T11] bond3 (unregistering): Released all slaves [ 1958.173526][ T2550] team0: Port device team_slave_1 added [ 1958.253199][ T2550] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1958.255284][ T2550] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1958.275050][ T2550] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1958.294482][ T2550] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1958.296502][ T2550] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1958.303754][ T2550] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1958.384524][ T2550] hsr_slave_0: entered promiscuous mode [ 1958.386760][ T2550] hsr_slave_1: entered promiscuous mode [ 1958.388964][ T2550] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1958.391225][ T2550] Cannot create hsr debugfs directory [ 1958.607385][ T11] : left promiscuous mode [ 1958.859554][ T2601] netlink: 72 bytes leftover after parsing attributes in process `syz.6.5595'. [ 1958.867472][T27361] Bluetooth: hci1: command tx timeout [ 1958.907200][ T2607] netlink: 72 bytes leftover after parsing attributes in process `syz.8.5596'. [ 1959.173547][ T11] hsr_slave_0: left promiscuous mode [ 1959.192072][ T11] hsr_slave_1: left promiscuous mode [ 1959.613760][ T2643] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5597'. [ 1960.952076][T27361] Bluetooth: hci1: command tx timeout [ 1961.129353][ T2643] wireguard12: entered promiscuous mode [ 1961.215184][ T2550] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1961.218670][ T2550] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1961.226536][ T2550] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1961.230436][ T2550] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1961.268295][ T2550] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1961.283710][ T2550] 8021q: adding VLAN 0 to HW filter on device team0 [ 1961.288092][ T1138] bridge0: port 1(bridge_slave_0) entered blocking state [ 1961.290206][ T1138] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1961.296988][ T1138] bridge0: port 2(bridge_slave_1) entered blocking state [ 1961.299086][ T1138] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1961.406207][ T2676] __nla_validate_parse: 1 callbacks suppressed [ 1961.406220][ T2676] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5607'. [ 1961.421206][ T2550] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1961.446136][ T5988] hid-generic 0000:0003:0000.0005: unknown main item tag 0x0 [ 1961.448314][ T5988] hid-generic 0000:0003:0000.0005: unknown main item tag 0x0 [ 1961.457065][ T5988] hid-generic 0000:0003:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz1 [ 1961.461046][ T2688] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5608'. [ 1961.468928][ T2679] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5608'. [ 1961.472504][ T2679] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5608'. [ 1961.536928][ T2550] veth0_vlan: entered promiscuous mode [ 1961.543919][ T2550] veth1_vlan: entered promiscuous mode [ 1961.617408][ T2703] netlink: 72 bytes leftover after parsing attributes in process `syz.8.5606'. [ 1961.647512][ T2550] veth0_macvtap: entered promiscuous mode [ 1961.650594][ T2550] veth1_macvtap: entered promiscuous mode [ 1961.657120][ T2550] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1961.674571][ T2550] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1961.679353][ T2550] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1961.682655][ T2550] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1961.686176][ T2550] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1961.689504][ T2550] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1961.735094][ T1138] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1961.738122][ T1138] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1961.752824][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1961.755122][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1961.870904][ T2718] netlink: 72 bytes leftover after parsing attributes in process `syz.6.5613'. [ 1962.164164][T26080] usb 14-1: new high-speed USB device number 11 using dummy_hcd [ 1962.362240][T26080] usb 14-1: Using ep0 maxpacket: 8 [ 1962.365083][T26080] usb 14-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1962.368087][T26080] usb 14-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1962.370980][T26080] usb 14-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1962.374480][T26080] usb 14-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1962.378524][T26080] usb 14-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1962.382533][T26080] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1962.564279][ T2735] random: crng reseeded on system resumption [ 1962.678041][T26080] usb 14-1: GET_CAPABILITIES returned 0 [ 1962.680369][T26080] usbtmc 14-1:16.0: can't read capabilities [ 1962.794945][T29433] usb 14-1: USB disconnect, device number 11 [ 1963.022144][T27361] Bluetooth: hci1: command tx timeout [ 1963.113550][ T11] IPVS: stop unused estimator thread 0... [ 1963.541291][ T2767] netlink: 72 bytes leftover after parsing attributes in process `syz.6.5626'. [ 1963.639929][ T2758] netlink: 72 bytes leftover after parsing attributes in process `syz.9.5627'. [ 1964.175337][ T2791] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5638'. [ 1964.473789][ T2785] netlink: 72 bytes leftover after parsing attributes in process `syz.8.5634'. [ 1965.102049][T27361] Bluetooth: hci1: command tx timeout [ 1965.114402][ T2832] wireguard9: entered promiscuous mode [ 1965.176295][ T2835] syzkaller1: entered promiscuous mode [ 1965.178148][ T2835] syzkaller1: entered allmulticast mode [ 1966.345936][ T2878] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input53 [ 1966.546917][ T2857] __nla_validate_parse: 4 callbacks suppressed [ 1966.546928][ T2857] netlink: 72 bytes leftover after parsing attributes in process `syz.8.5654'. [ 1966.642779][T29433] usb 14-1: new high-speed USB device number 12 using dummy_hcd [ 1966.792063][T29433] usb 14-1: Using ep0 maxpacket: 8 [ 1966.796321][T29433] usb 14-1: config index 0 descriptor too short (expected 301, got 45) [ 1966.799135][T29433] usb 14-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1966.802046][T29433] usb 14-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1966.804840][T29433] usb 14-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1966.807854][T29433] usb 14-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1966.812160][T29433] usb 14-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1966.815528][T29433] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1966.880672][ T2889] netlink: 72 bytes leftover after parsing attributes in process `syz.6.5663'. [ 1967.030486][T29433] usb 14-1: GET_CAPABILITIES returned 0 [ 1967.032980][T29433] usbtmc 14-1:16.0: can't read capabilities [ 1967.234182][T29433] usb 14-1: USB disconnect, device number 12 [ 1968.016767][ T2913] netlink: 72 bytes leftover after parsing attributes in process `syz.9.5670'. [ 1968.622093][T10600] usb 13-1: new high-speed USB device number 10 using dummy_hcd [ 1968.783442][T10600] usb 13-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1968.786954][T10600] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1968.790162][T10600] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1968.793319][T10600] usb 13-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1968.797184][T10600] usb 13-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1968.799826][T10600] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1968.803636][T10600] usb 13-1: config 0 descriptor?? [ 1969.004284][ T2922] netlink: 72 bytes leftover after parsing attributes in process `syz.6.5673'. [ 1969.105108][ T2930] sctp: [Deprecated]: syz.9.5677 (pid 2930) Use of int in maxseg socket option. [ 1969.105108][ T2930] Use struct sctp_assoc_value instead [ 1969.218458][T10600] plantronics 0003:047F:FFFF.0006: No inputs registered, leaving [ 1969.224101][T10600] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0 [ 1969.256999][ T2937] @: renamed from vlan0 [ 1969.433118][T25025] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1969.494941][T10600] usb 13-1: USB disconnect, device number 10 [ 1969.543379][ T2969] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(3) [ 1969.546074][ T2969] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1969.550669][ T2969] vhci_hcd vhci_hcd.0: Device attached [ 1969.559838][ T2970] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 4 [ 1969.562640][T10724] vhci_hcd: stop threads [ 1969.564412][T10724] vhci_hcd: release socket [ 1969.565806][T10724] vhci_hcd: disconnect device [ 1969.566405][T25025] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1969.594787][T12522] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1969.602585][T12522] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1969.605483][T12522] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1969.608041][T12522] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1969.611238][T12522] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1969.614926][T12522] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1969.630497][T25025] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1969.648797][ T2972] lo speed is unknown, defaulting to 1000 [ 1969.692334][T25025] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1969.734122][ T2972] chnl_net:caif_netlink_parms(): no params data found [ 1969.782243][ T2972] bridge0: port 1(bridge_slave_0) entered blocking state [ 1969.784501][ T2972] bridge0: port 1(bridge_slave_0) entered disabled state [ 1969.786622][ T2972] bridge_slave_0: entered allmulticast mode [ 1969.788780][ T2972] bridge_slave_0: entered promiscuous mode [ 1969.791828][ T2972] bridge0: port 2(bridge_slave_1) entered blocking state [ 1969.794092][ T2972] bridge0: port 2(bridge_slave_1) entered disabled state [ 1969.796212][ T2972] bridge_slave_1: entered allmulticast mode [ 1969.798480][ T2972] bridge_slave_1: entered promiscuous mode [ 1969.819719][ T2972] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1969.824544][ T2972] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1969.825326][ T2987] netlink: 72 bytes leftover after parsing attributes in process `syz.3.5692'. [ 1969.854238][ T2972] team0: Port device team_slave_0 added [ 1969.870428][ T2972] team0: Port device team_slave_1 added [ 1969.903025][ T2972] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1969.905078][ T2972] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1969.912847][ T2972] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1969.916267][T25025] bridge_slave_1: left allmulticast mode [ 1969.917919][T25025] bridge_slave_1: left promiscuous mode [ 1969.919607][T25025] bridge0: port 2(bridge_slave_1) entered disabled state [ 1969.923332][T25025] bridge_slave_0: left allmulticast mode [ 1969.924992][T25025] bridge_slave_0: left promiscuous mode [ 1969.926669][T25025] bridge0: port 1(bridge_slave_0) entered disabled state [ 1970.040359][ T2991] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5693'. [ 1970.256691][T25025] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1970.260697][T25025] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1970.264458][T25025] bond0 (unregistering): Released all slaves [ 1970.268598][ T2972] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1970.270636][ T2972] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1970.278243][ T2972] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1970.320931][ T2972] hsr_slave_0: entered promiscuous mode [ 1970.322453][T29430] usb 11-1: new high-speed USB device number 12 using dummy_hcd [ 1970.325505][ T2972] hsr_slave_1: entered promiscuous mode [ 1970.482159][T29430] usb 11-1: Using ep0 maxpacket: 8 [ 1970.486235][T29430] usb 11-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1970.489138][T29430] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1970.493484][T29430] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1970.496695][T29430] usb 11-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1970.500425][T29430] usb 11-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1970.503337][T29430] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1970.540301][ T3017] netlink: 72 bytes leftover after parsing attributes in process `syz.8.5696'. [ 1970.657664][ T40] audit: type=1326 audit(1740759819.162:6192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3021 comm="syz.3.5698" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f37579 code=0x0 [ 1970.710781][T29430] usb 11-1: GET_CAPABILITIES returned 0 [ 1970.712636][T29430] usbtmc 11-1:16.0: can't read capabilities [ 1970.739652][T25025] hsr_slave_0: left promiscuous mode [ 1970.741584][T25025] hsr_slave_1: left promiscuous mode [ 1970.744463][T25025] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1970.746706][T25025] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1970.749181][T25025] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1970.751473][T25025] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1970.786781][T25025] veth1_macvtap: left promiscuous mode [ 1970.788485][T25025] veth0_macvtap: left promiscuous mode [ 1970.790125][T25025] veth1_vlan: left promiscuous mode [ 1970.791726][T25025] veth0_vlan: left promiscuous mode [ 1970.932400][T26080] usb 11-1: USB disconnect, device number 12 [ 1971.482281][T26080] usb 13-1: new high-speed USB device number 11 using dummy_hcd [ 1971.643330][T26080] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1971.646203][T26080] usb 13-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1971.651023][T26080] usb 13-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1971.656728][T26080] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1971.660373][T26080] usb 13-1: config 0 descriptor?? [ 1971.663912][T26080] usbhid 13-1:0.0: couldn't find an input interrupt endpoint [ 1971.666333][T27361] Bluetooth: hci1: command tx timeout [ 1971.845750][T25025] team0 (unregistering): Port device team_slave_1 removed [ 1971.976917][T25025] team0 (unregistering): Port device team_slave_0 removed [ 1972.903565][ T3043] bridge_slave_0: default FDB implementation only supports local addresses [ 1972.926093][ T2972] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1972.929939][ T2972] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1972.934411][ T2972] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1972.938989][ T2972] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1972.992323][ T2972] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1972.999306][ T2972] 8021q: adding VLAN 0 to HW filter on device team0 [ 1973.003659][ T1138] bridge0: port 1(bridge_slave_0) entered blocking state [ 1973.005731][ T1138] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1973.010701][ T1138] bridge0: port 2(bridge_slave_1) entered blocking state [ 1973.012923][ T1138] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1973.076841][ T3060] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5707'. [ 1973.117703][ T40] audit: type=1800 audit(1740759821.622:6193): pid=3064 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.5708" name="SYSV00000000" dev="hugetlbfs" ino=4 res=0 errno=0 [ 1973.140293][ T2972] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1973.244682][ T2972] veth0_vlan: entered promiscuous mode [ 1973.249168][ T2972] veth1_vlan: entered promiscuous mode [ 1973.258932][ T2972] veth0_macvtap: entered promiscuous mode [ 1973.262130][ T2972] veth1_macvtap: entered promiscuous mode [ 1973.270851][ T2972] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1973.278465][ T2972] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1973.282943][ T2972] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1973.285539][ T2972] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1973.288434][ T2972] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1973.291761][ T2972] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1973.334946][ T1138] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1973.337837][ T1138] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1973.347535][T25025] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1973.349905][T25025] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1974.243468][T29427] usb 13-1: USB disconnect, device number 11 [ 1974.249403][ T3084] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5712'. [ 1974.252511][ T3084] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5712'. [ 1974.548416][ T3098] Illegal XDP return value 3043704309 on prog (id 972) dev syz_tun, expect packet loss! [ 1974.747353][ T3088] netlink: 72 bytes leftover after parsing attributes in process `syz.6.5714'. [ 1974.757497][ T3100] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5719'. [ 1974.760211][ T3100] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5719'. [ 1974.781207][T26080] libceph: connect (1)[c::]:6789 error -101 [ 1974.783461][T26080] libceph: mon0 (1)[c::]:6789 connect error [ 1974.786086][T26080] libceph: connect (1)[c::]:6789 error -101 [ 1974.788199][T26080] libceph: mon0 (1)[c::]:6789 connect error [ 1974.810988][ T3106] netlink: 72 bytes leftover after parsing attributes in process `syz.8.5717'. [ 1975.052319][T26080] libceph: connect (1)[c::]:6789 error -101 [ 1975.054206][T26080] libceph: mon0 (1)[c::]:6789 connect error [ 1975.375097][ T3114] netlink: 72 bytes leftover after parsing attributes in process `syz.6.5720'. [ 1975.428522][ T3100] ceph: No mds server is up or the cluster is laggy [ 1975.682915][ T3118] block nbd3: NBD_DISCONNECT [ 1975.686135][ T3118] [ 1975.687046][ T3118] ====================================================== [ 1975.689629][ T3118] WARNING: possible circular locking dependency detected [ 1975.692391][ T3118] 6.14.0-rc4-syzkaller-00199-g76544811c850 #0 Not tainted [ 1975.696624][ T3118] ------------------------------------------------------ [ 1975.699536][ T3118] syz.3.5723/3118 is trying to acquire lock: [ 1975.701191][ T3118] ffff88806967f558 (sk_lock-AF_SMC){+.+.}-{0:0}, at: smc_sendmsg+0x47/0x520 [ 1975.703624][ T3118] [ 1975.703624][ T3118] but task is already holding lock: [ 1975.705654][ T3118] ffff888023ed7e70 (&nsock->tx_lock){+.+.}-{4:4}, at: nbd_disconnect+0x321/0x540 [ 1975.708546][ T3118] [ 1975.708546][ T3118] which lock already depends on the new lock. [ 1975.708546][ T3118] [ 1975.711388][ T3118] [ 1975.711388][ T3118] the existing dependency chain (in reverse order) is: [ 1975.713835][ T3118] [ 1975.713835][ T3118] -> #6 (&nsock->tx_lock){+.+.}-{4:4}: [ 1975.716062][ T3118] __mutex_lock+0x19b/0xb10 [ 1975.717468][ T3118] sock_shutdown+0x16f/0x280 [ 1975.718948][ T3118] nbd_ioctl+0x49b/0xd60 [ 1975.720300][ T3118] compat_blkdev_ioctl+0x2f4/0x7b0 [ 1975.721917][ T3118] __do_compat_sys_ioctl+0x1cb/0x2c0 [ 1975.723607][ T3118] __do_fast_syscall_32+0x73/0x120 [ 1975.725222][ T3118] do_fast_syscall_32+0x32/0x80 [ 1975.727130][ T3118] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1975.729733][ T3118] [ 1975.729733][ T3118] -> #5 (&nbd->config_lock){+.+.}-{4:4}: [ 1975.732679][ T3118] __mutex_lock+0x19b/0xb10 [ 1975.734712][ T3118] refcount_dec_and_mutex_lock+0x51/0xc0 [ 1975.737176][ T3118] nbd_config_put+0x31/0x750 [ 1975.739175][ T3118] nbd_release+0xb7/0x190 [ 1975.741141][ T3118] blkdev_put_whole+0xad/0xf0 [ 1975.743214][ T3118] bdev_release+0x47e/0x6d0 [ 1975.745252][ T3118] blkdev_release+0x15/0x20 [ 1975.747300][ T3118] __fput+0x3ff/0xb70 [ 1975.749089][ T3118] __fput_sync+0xa1/0xc0 [ 1975.751003][ T3118] __x64_sys_close+0x86/0x100 [ 1975.753075][ T3118] do_syscall_64+0xcd/0x250 [ 1975.755070][ T3118] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1975.757607][ T3118] [ 1975.757607][ T3118] -> #4 (&disk->open_mutex){+.+.}-{4:4}: [ 1975.760677][ T3118] __mutex_lock+0x19b/0xb10 [ 1975.762719][ T3118] bdev_open+0x41a/0xe20 [ 1975.764651][ T3118] bdev_file_open_by_dev+0x17d/0x210 [ 1975.766808][ T3118] disk_scan_partitions+0x1ed/0x320 [ 1975.768956][ T3118] add_disk_fwnode+0x1006/0x1320 [ 1975.770995][ T3118] pmem_attach_disk+0x9a1/0x13e0 [ 1975.772984][ T3118] nd_pmem_probe+0x1a9/0x1f0 [ 1975.774922][ T3118] nvdimm_bus_probe+0x169/0x5d0 [ 1975.776940][ T3118] really_probe+0x23e/0xa90 [ 1975.778862][ T3118] __driver_probe_device+0x1de/0x440 [ 1975.780987][ T3118] driver_probe_device+0x4c/0x1b0 [ 1975.783168][ T3118] __driver_attach+0x283/0x580 [ 1975.785214][ T3118] bus_for_each_dev+0x13c/0x1d0 [ 1975.787315][ T3118] bus_add_driver+0x2e9/0x690 [ 1975.789277][ T3118] driver_register+0x15c/0x4b0 [ 1975.791338][ T3118] __nd_driver_register+0x103/0x1a0 [ 1975.793517][ T3118] do_one_initcall+0x128/0x700 [ 1975.795042][ T3118] kernel_init_freeable+0x5c7/0x900 [ 1975.796644][ T3118] kernel_init+0x1c/0x2b0 [ 1975.798022][ T3118] ret_from_fork+0x45/0x80 [ 1975.799373][ T3118] ret_from_fork_asm+0x1a/0x30 [ 1975.800793][ T3118] [ 1975.800793][ T3118] -> #3 (&nvdimm_namespace_key){+.+.}-{4:4}: [ 1975.803022][ T3118] __mutex_lock+0x19b/0xb10 [ 1975.804400][ T3118] uevent_show+0x188/0x3b0 [ 1975.805773][ T3118] dev_attr_show+0x53/0xe0 [ 1975.807134][ T3118] sysfs_kf_seq_show+0x23e/0x410 [ 1975.808647][ T3118] seq_read_iter+0x4f4/0x12b0 [ 1975.810108][ T3118] kernfs_fop_read_iter+0x414/0x580 [ 1975.811706][ T3118] vfs_read+0x886/0xbf0 [ 1975.813037][ T3118] ksys_read+0x12b/0x250 [ 1975.814351][ T3118] do_syscall_64+0xcd/0x250 [ 1975.815759][ T3118] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1975.817493][ T3118] [ 1975.817493][ T3118] -> #2 (kn->active#5){++++}-{0:0}: [ 1975.819501][ T3118] kernfs_drain+0x48f/0x590 [ 1975.820918][ T3118] __kernfs_remove+0x281/0x670 [ 1975.822374][ T3118] kernfs_remove_by_name_ns+0xb2/0x130 [ 1975.824004][ T3118] device_del+0x381/0x9f0 [ 1975.825373][ T3118] unregister_netdevice_many_notify+0x13aa/0x1f30 [ 1975.827385][ T3118] unregister_netdevice_queue+0x307/0x3f0 [ 1975.829166][ T3118] ser_release+0x195/0x280 [ 1975.830596][ T3118] process_one_work+0x9c5/0x1ba0 [ 1975.832150][ T3118] worker_thread+0x6c8/0xf00 [ 1975.833758][ T3118] kthread+0x3af/0x750 [ 1975.835172][ T3118] ret_from_fork+0x45/0x80 [ 1975.836647][ T3118] ret_from_fork_asm+0x1a/0x30 [ 1975.838140][ T3118] [ 1975.838140][ T3118] -> #1 (rtnl_mutex){+.+.}-{4:4}: [ 1975.840161][ T3118] __mutex_lock+0x19b/0xb10 [ 1975.841605][ T3118] smc_vlan_by_tcpsk+0x251/0x620 [ 1975.843121][ T3118] __smc_connect+0x44d/0x4890 [ 1975.844608][ T3118] smc_connect+0x2fc/0x760 [ 1975.846027][ T3118] __sys_connect_file+0x13e/0x1a0 [ 1975.847612][ T3118] __sys_connect+0x14f/0x170 [ 1975.849046][ T3118] __ia32_sys_connect+0x71/0xb0 [ 1975.850586][ T3118] __do_fast_syscall_32+0x73/0x120 [ 1975.852177][ T3118] do_fast_syscall_32+0x32/0x80 [ 1975.853750][ T3118] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1975.855677][ T3118] [ 1975.855677][ T3118] -> #0 (sk_lock-AF_SMC){+.+.}-{0:0}: [ 1975.857802][ T3118] __lock_acquire+0x249e/0x3c40 [ 1975.859328][ T3118] lock_acquire.part.0+0x11b/0x380 [ 1975.861091][ T3118] lock_sock_nested+0x3a/0xf0 [ 1975.862619][ T3118] smc_sendmsg+0x47/0x520 [ 1975.864018][ T3118] sock_sendmsg+0x3d3/0x490 [ 1975.865425][ T3118] __sock_xmit+0x1e8/0x4f0 [ 1975.866854][ T3118] nbd_disconnect+0x390/0x540 [ 1975.868314][ T3118] nbd_ioctl+0x8d1/0xd60 [ 1975.869691][ T3118] compat_blkdev_ioctl+0x2f4/0x7b0 [ 1975.871292][ T3118] __do_compat_sys_ioctl+0x1cb/0x2c0 [ 1975.872908][ T3118] __do_fast_syscall_32+0x73/0x120 [ 1975.874503][ T3118] do_fast_syscall_32+0x32/0x80 [ 1975.876044][ T3118] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1975.877966][ T3118] [ 1975.877966][ T3118] other info that might help us debug this: [ 1975.877966][ T3118] [ 1975.880717][ T3118] Chain exists of: [ 1975.880717][ T3118] sk_lock-AF_SMC --> &nbd->config_lock --> &nsock->tx_lock [ 1975.880717][ T3118] [ 1975.884374][ T3118] Possible unsafe locking scenario: [ 1975.884374][ T3118] [ 1975.886425][ T3118] CPU0 CPU1 [ 1975.887953][ T3118] ---- ---- [ 1975.889448][ T3118] lock(&nsock->tx_lock); [ 1975.890737][ T3118] lock(&nbd->config_lock); [ 1975.892725][ T3118] lock(&nsock->tx_lock); [ 1975.894682][ T3118] lock(sk_lock-AF_SMC); [ 1975.895918][ T3118] [ 1975.895918][ T3118] *** DEADLOCK *** [ 1975.895918][ T3118] [ 1975.898136][ T3118] 2 locks held by syz.3.5723/3118: [ 1975.899528][ T3118] #0: ffff8880243b4198 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_ioctl+0x151/0xd60 [ 1975.902062][ T3118] #1: ffff888023ed7e70 (&nsock->tx_lock){+.+.}-{4:4}, at: nbd_disconnect+0x321/0x540 [ 1975.904636][ T3118] [ 1975.904636][ T3118] stack backtrace: [ 1975.906315][ T3118] CPU: 2 UID: 0 PID: 3118 Comm: syz.3.5723 Not tainted 6.14.0-rc4-syzkaller-00199-g76544811c850 #0 [ 1975.906329][ T3118] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1975.906336][ T3118] Call Trace: [ 1975.906341][ T3118] [ 1975.906346][ T3118] dump_stack_lvl+0x116/0x1f0 [ 1975.906363][ T3118] print_circular_bug+0x490/0x760 [ 1975.906378][ T3118] check_noncircular+0x31a/0x400 [ 1975.906393][ T3118] ? __pfx_check_noncircular+0x10/0x10 [ 1975.906408][ T3118] ? finish_task_switch.isra.0+0x217/0xcc0 [ 1975.906424][ T3118] ? lockdep_hardirqs_on+0x7c/0x110 [ 1975.906438][ T3118] ? lockdep_lock+0xc6/0x200 [ 1975.906449][ T3118] ? __pfx_lockdep_lock+0x10/0x10 [ 1975.906460][ T3118] ? __lock_acquire+0xcc5/0x3c40 [ 1975.906477][ T3118] __lock_acquire+0x249e/0x3c40 [ 1975.906495][ T3118] ? __pfx___lock_acquire+0x10/0x10 [ 1975.906510][ T3118] lock_acquire.part.0+0x11b/0x380 [ 1975.906525][ T3118] ? smc_sendmsg+0x47/0x520 [ 1975.906540][ T3118] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 1975.906554][ T3118] ? rcu_is_watching+0x12/0xc0 [ 1975.906565][ T3118] ? trace_lock_acquire+0x14e/0x1f0 [ 1975.906577][ T3118] ? smc_sendmsg+0x47/0x520 [ 1975.906590][ T3118] ? lock_acquire+0x2f/0xb0 [ 1975.906604][ T3118] ? smc_sendmsg+0x47/0x520 [ 1975.906618][ T3118] lock_sock_nested+0x3a/0xf0 [ 1975.906633][ T3118] ? smc_sendmsg+0x47/0x520 [ 1975.906647][ T3118] smc_sendmsg+0x47/0x520 [ 1975.906661][ T3118] sock_sendmsg+0x3d3/0x490 [ 1975.906673][ T3118] ? __pfx_sock_sendmsg+0x10/0x10 [ 1975.906686][ T3118] ? rcu_is_watching+0x12/0xc0 [ 1975.906698][ T3118] ? trace_contention_end+0xee/0x140 [ 1975.906715][ T3118] __sock_xmit+0x1e8/0x4f0 [ 1975.906732][ T3118] ? __pfx___sock_xmit+0x10/0x10 [ 1975.906748][ T3118] ? __pfx___mutex_lock+0x10/0x10 [ 1975.906765][ T3118] nbd_disconnect+0x390/0x540 [ 1975.906777][ T3118] ? __pfx_nbd_disconnect+0x10/0x10 [ 1975.906789][ T3118] ? __pfx___mutex_lock+0x10/0x10 [ 1975.906804][ T3118] ? bpf_lsm_capable+0x9/0x10 [ 1975.906817][ T3118] nbd_ioctl+0x8d1/0xd60 [ 1975.906829][ T3118] ? __pfx_nbd_ioctl+0x10/0x10 [ 1975.906841][ T3118] ? __pfx_lock_release+0x10/0x10 [ 1975.906855][ T3118] ? trace_lock_acquire+0x14e/0x1f0 [ 1975.906868][ T3118] ? __pfx_nbd_ioctl+0x10/0x10 [ 1975.906879][ T3118] compat_blkdev_ioctl+0x2f4/0x7b0 [ 1975.906891][ T3118] ? __pfx_compat_blkdev_ioctl+0x10/0x10 [ 1975.906902][ T3118] ? __fget_files+0x206/0x3a0 [ 1975.906918][ T3118] ? __pfx_compat_blkdev_ioctl+0x10/0x10 [ 1975.906929][ T3118] __do_compat_sys_ioctl+0x1cb/0x2c0 [ 1975.906942][ T3118] __do_fast_syscall_32+0x73/0x120 [ 1975.906957][ T3118] do_fast_syscall_32+0x32/0x80 [ 1975.906971][ T3118] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1975.906989][ T3118] RIP: 0023:0xf7f37579 [ 1975.906997][ T3118] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1975.907008][ T3118] RSP: 002b:00000000f505655c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 1975.907018][ T3118] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000000ab08 [ 1975.907025][ T3118] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1975.907031][ T3118] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1975.907037][ T3118] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 1975.907043][ T3118] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1975.907052][ T3118] [ 1976.003604][ T3118] block nbd3: Send disconnect failed -107 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1976.231210][ T3118] syz_tun (unregistering): left allmulticast mode [ 1976.312693][ T3118] block nbd3: Disconnected due to user request. [ 1976.314510][ T3118] block nbd3: shutting down sockets [ 1976.530601][ T11] bridge_slave_1: left allmulticast mode [ 1976.532102][ T11] bridge_slave_1: left promiscuous mode [ 1976.533575][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 1976.535751][ T11] bridge_slave_0: left allmulticast mode [ 1976.537227][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 1976.886320][ T11] bond0 (unregistering): Released all slaves [ 1976.945128][ T11] : left promiscuous mode [ 1977.003247][ T11] tipc: Disabling bearer [ 1977.013959][ T11] tipc: Left network mode [ 1977.424116][ T11] hsr_slave_0: left promiscuous mode [ 1977.425873][ T11] hsr_slave_1: left promiscuous mode [ 1978.221363][ T11] team0 (unregistering): Port device team_slave_1 removed [ 1978.323161][ T11] team0 (unregistering): Port device team_slave_0 removed [ 1980.170599][ T11] IPVS: stop unused estimator thread 0... [ 1980.345427][ T11] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1980.435396][ T11] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1980.524464][ T11] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1980.564951][ T11] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1981.138409][ T11] bridge_slave_1: left allmulticast mode [ 1981.140188][ T11] bridge_slave_1: left promiscuous mode [ 1981.141900][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 1981.145389][ T11] bridge_slave_0: left allmulticast mode [ 1981.147061][ T11] bridge_slave_0: left promiscuous mode [ 1981.148701][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 1981.151881][ T11] bridge_slave_1: left allmulticast mode [ 1981.153671][ T11] bridge_slave_1: left promiscuous mode [ 1981.155415][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 1981.158051][ T11] bridge_slave_0: left allmulticast mode [ 1981.159730][ T11] bridge_slave_0: left promiscuous mode [ 1981.161378][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 1981.335567][ T11] batman_adv: batadv0: Removing interface: gretap1 [ 1981.347377][ T11] bond1 (unregistering): (slave gretap1): Releasing active interface [ 1981.350760][ T11] batman_adv: batadv0: Removing interface: gretap2 [ 1981.995229][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1981.998683][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1982.001766][ T11] bond0 (unregistering): Released all slaves [ 1982.005340][ T11] bond1 (unregistering): (slave batadv0): Releasing backup interface [ 1982.008140][ T11] bond1 (unregistering): Released all slaves [ 1982.115761][ T11] bond0 (unregistering): Released all slaves [ 1982.221630][ T11] bond0 (unregistering): Released all slaves [ 1982.225026][ T11] bond1 (unregistering): Released all slaves [ 1982.306822][ T11] tipc: Left network mode [ 1982.334007][ T11] IPVS: stopping backup sync thread 22935 ... [ 1982.737323][ T11] hsr_slave_0: left promiscuous mode [ 1982.739198][ T11] hsr_slave_1: left promiscuous mode [ 1982.740949][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1982.743858][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1982.746178][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1982.748274][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1982.752304][ T11] hsr_slave_0: left promiscuous mode [ 1982.754238][ T11] hsr_slave_1: left promiscuous mode [ 1982.757034][ T11] hsr_slave_0: left promiscuous mode [ 1982.758826][ T11] hsr_slave_1: left promiscuous mode [ 1982.761802][ T11] veth1_macvtap: left promiscuous mode [ 1982.763653][ T11] veth0_macvtap: left promiscuous mode [ 1982.765275][ T11] veth1_vlan: left promiscuous mode [ 1982.766839][ T11] veth0_vlan: left promiscuous mode [ 1983.011600][ T11] team0 (unregistering): Port device team_slave_1 removed [ 1983.073838][ T11] team0 (unregistering): Port device team_slave_0 removed [ 1984.969864][ T11] pim6reg (unregistering): left allmulticast mode [ 1985.102008][ T11] macvlan0 (unregistering): left allmulticast mode VM DIAGNOSIS: 14:06:28 Registers: info registers vcpu 0 CPU#0 RAX=0000000004475914 RBX=0000000000000000 RCX=ffffffff8b552469 RDX=ffffed1005686f86 RSI=ffffffff8bd34780 RDI=ffffffff81907409 RBP=fffffbfff1bd2ee8 RSP=ffffffff8de07e20 R8 =0000000000000000 R9 =ffffed1005686f85 R10=ffff88802b437c2b R11=0000000000000001 R12=0000000000000000 R13=ffffffff8de97740 R14=ffffffff90627710 R15=0000000000000000 RIP=ffffffff8b55384f RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b400000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000003181bffc CR3=000000006c1c2000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000003e4a884 RBX=0000000000000001 RCX=ffffffff8b552469 RDX=ffffed10056a6f86 RSI=ffffffff8bd34780 RDI=ffffffff81907409 RBP=ffffed1003ad2910 RSP=ffffc9000047fe08 R8 =0000000000000000 R9 =ffffed10056a6f85 R10=ffff88802b537c2b R11=0000000000000001 R12=0000000000000001 R13=ffff88801d694880 R14=ffffffff90627710 R15=0000000000000000 RIP=ffffffff8b55384f RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b500000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f6c60000 CR3=000000004e554000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000069 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff853e6235 RDI=ffffffff9ab6ee60 RBP=ffffffff9ab6ee20 RSP=ffffc90002dc7058 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=722d302e34312e36 R12=0000000000000000 R13=0000000000000069 R14=ffffffff9ab6ee20 R15=0000000000000000 RIP=ffffffff853e625f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802b600000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000056e674c0 CR3=0000000025236000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008082082 Opmask01=0000000000000000 Opmask02=00000000dfff7fff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000001a4 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=6b20657479622d32 3320646e61707865 6b20657479622d32 3320646e61707865 6b20657479622d32 3320646e61707865 6b20657479622d32 3320646e61707865 ZMM17=cf3b10ea5e6896a4 dd7c659156932f8f cf3b10ea5e6896a4 dd7c659156932f8f cf3b10ea5e6896a4 dd7c659156932f8f cf3b10ea5e6896a4 dd7c659156932f8f ZMM18=978131e261f27862 dc26827097e9f38a 978131e261f27862 dc26827097e9f38a 978131e261f27862 dc26827097e9f38a 978131e261f27862 dc26827097e9f38a ZMM19=8835000000000000 00000000000000ca 8835000000000000 00000000000000c9 8835000000000000 00000000000000c8 8835000000000000 00000000000000c7 ZMM20=0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 ZMM21=dd7c6591dd7c6591 dd7c6591dd7c6591 dd7c6591dd7c6591 dd7c6591dd7c6591 dd7c6591dd7c6591 dd7c6591dd7c6591 dd7c6591dd7c6591 dd7c6591dd7c6591 ZMM22=5e6896a45e6896a4 5e6896a45e6896a4 5e6896a45e6896a4 5e6896a45e6896a4 5e6896a45e6896a4 5e6896a45e6896a4 5e6896a45e6896a4 5e6896a45e6896a4 ZMM23=cf3b10eacf3b10ea cf3b10eacf3b10ea cf3b10eacf3b10ea cf3b10eacf3b10ea cf3b10eacf3b10ea cf3b10eacf3b10ea cf3b10eacf3b10ea cf3b10eacf3b10ea ZMM24=97e9f38a97e9f38a 97e9f38a97e9f38a 97e9f38a97e9f38a 97e9f38a97e9f38a 97e9f38a97e9f38a 97e9f38a97e9f38a 97e9f38a97e9f38a 97e9f38a97e9f38a ZMM25=dc268270dc268270 dc268270dc268270 dc268270dc268270 dc268270dc268270 dc268270dc268270 dc268270dc268270 dc268270dc268270 dc268270dc268270 ZMM26=61f2786261f27862 61f2786261f27862 61f2786261f27862 61f2786261f27862 61f2786261f27862 61f2786261f27862 61f2786261f27862 61f2786261f27862 ZMM27=978131e2978131e2 978131e2978131e2 978131e2978131e2 978131e2978131e2 978131e2978131e2 978131e2978131e2 978131e2978131e2 978131e2978131e2 ZMM28=000000d0000000cf 000000ce000000cd 000000cc000000cb 000000ca000000c9 000000c8000000c7 000000c6000000c5 000000c4000000c3 000000c2000000c1 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=8835000088350000 8835000088350000 8835000088350000 8835000088350000 8835000088350000 8835000088350000 8835000088350000 8835000088350000 info registers vcpu 3 CPU#3 RAX=000000000112e85c RBX=0000000000000003 RCX=ffffffff8b552469 RDX=ffffed10056e6f86 RSI=ffffffff8bd34780 RDI=ffffffff81907409 RBP=ffffed1003ad5488 RSP=ffffc9000049fe08 R8 =0000000000000000 R9 =ffffed10056e6f85 R10=ffff88802b737c2b R11=0000000000000001 R12=0000000000000003 R13=ffff88801d6aa440 R14=ffffffff90627710 R15=0000000000000000 RIP=ffffffff8b55384f RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b700000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f73d3cd8 CR3=00000000542a6000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000