last executing test programs: 1m59.394045827s ago: executing program 2 (id=2726): socket$pppoe(0x18, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0xfffffffd, {}, [{0x90, 0x1, [@m_ct={0x44, 0x5, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x0, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[], 0x48) syz_open_procfs(0x0, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f0000000100)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x8}, {0x4, 0x1, 0xb, 0x9, 0x0, 0x8}}, {{0x6, 0x0, 0xb, 0xa}, {0xf}}, [@printk={@lu, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0x2, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x15}}], {{0x7, 0x1, 0x3, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000080)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r4, &(0x7f0000014980)=[{{&(0x7f0000000140)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000240)=[{&(0x7f0000001c00)='{', 0x34000}], 0x1}}, {{&(0x7f00000000c0)={0x2, 0x0, @rand_addr=0x64010101}, 0x10, &(0x7f0000010700)=[{&(0x7f0000010140)="9b", 0x1}], 0x1}}], 0x2, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), r5) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000380)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEV(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="210928bd6000fcdbdf251b00000010002e802d0004000200aaaaaaaaaaaa08000300", @ANYRES32=r8], 0x2c}, 0x1, 0x0, 0x0, 0x4000011}, 0x800) socket$inet_tcp(0x2, 0x1, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)={0x5c, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa, 0x0, 0x8}, [@CTA_PROTOINFO={0x0, 0x4, 0x0, 0x1, @CTA_PROTOINFO_DCCP={0x0, 0x2, 0x0, 0x1, [@CTA_PROTOINFO_DCCP_ROLE={0x0, 0x2, 0x40}]}}, @CTA_MARK_MASK={0x0, 0x15, 0x1, 0x0, 0x4}, @CTA_MARK_MASK={0x0, 0x15, 0x1, 0x0, 0x2}, @CTA_HELP={0x0, 0x5, 0x0, 0x1, {0x0, 0x1, 'H.245\x00'}}, @CTA_TUPLE_MASTER={0x0, 0xe, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x0, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x0, 0x1, 0x0, 0x1, @ipv6={{0x0, 0x3, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, {0x0, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, @CTA_TUPLE_IP={0x0, 0x1, 0x0, 0x1, @ipv6={{0x0, 0x3, @empty}, {0x0, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0x0, 0x2, 0x0, 0x1, {0x0, 0x1, 0x11}}, @CTA_TUPLE_IP={0x0, 0x1, 0x0, 0x1, @ipv6={{0x0, 0x3, @local}, {0x0, 0x4, @private0}}}, @CTA_TUPLE_PROTO={0x0, 0x2, 0x0, 0x1, {0x0, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x0, 0x1, 0x0, 0x1, @ipv4={{0x0, 0x1, @dev={0xac, 0x14, 0x14, 0x27}}, {0x0, 0x2, @empty}}}, @CTA_TUPLE_IP={0x0, 0x1, 0x0, 0x1, @ipv6={{0x0, 0x3, @loopback}, {0x0, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0x0, 0x2, 0x0, 0x1, {0x0, 0x1, 0x84}}]}, @CTA_TUPLE_REPLY={0x0, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0x0, 0x2, 0x0, 0x1, {0x0, 0x1, 0x2f}}, @CTA_TUPLE_IP={0x0, 0x1, 0x0, 0x1, @ipv4={{0x0, 0x1, @loopback}, {0x0, 0x2, @private=0xa010100}}}]}, @CTA_ID={0x0, 0xc, 0x1, 0x0, 0x3}, @CTA_STATUS={0x0, 0x3, 0x1, 0x0, 0x2}]}, 0x5c}}, 0x40000) 1m41.178686219s ago: executing program 2 (id=2732): openat$cdrom(0xffffff9c, &(0x7f0000000400), 0x101000, 0x0) socket$kcm(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x6, 0x2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x5}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = socket$pptp(0x18, 0x1, 0x2) socket(0xa, 0x1, 0x0) connect$pptp(r1, &(0x7f0000000040)={0x18, 0x2, {0xfffc, @private=0xa010101}}, 0x1e) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x24204400, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x24, 0x1, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a01011f0000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x14, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}}], {0x14}}, 0x3c}}, 0x0) syz_emit_ethernet(0x194, &(0x7f0000000480)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}, @void, {@ipv4={0x800, @igmp={{0x26, 0x4, 0x2, 0x9, 0x186, 0x68, 0x0, 0x40, 0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xa}, @empty, {[@ssrr={0x89, 0xb, 0x7a, [@loopback, @dev={0xac, 0x14, 0x14, 0x19}]}, @timestamp={0x44, 0x1c, 0xce, 0x0, 0x3, [0x3ff, 0x100, 0x3, 0x6, 0xda0, 0x101]}, @rr={0x7, 0x1f, 0x8b, [@initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x21}, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @dev={0xac, 0x14, 0x14, 0x3a}, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010100]}, @ssrr={0x89, 0x1f, 0x5a, [@loopback, @private=0xa010100, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @local]}, @ssrr={0x89, 0x17, 0xc4, [@loopback, @multicast1, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast]}, @lsrr={0x83, 0x7, 0x8a, [@initdev={0xac, 0x1e, 0x1, 0x0}]}]}}, {0x22, 0xfc, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, "4802c75edcf2e694c72aada5560abd9e430049f159f1d5d975d91945f2040cc24096b53bec3b14495b50e5fda5ae3f3c9ca13a9afdc31d7eee165c4347ce1813c6c67fa6cc8ec7e8ea7bd910ef0424ae0db4c7de56825780439782052cd96613e4590aa98012b45a43fafe1fe69af24147041699901c306f26e432eab7939ee74b4844b7e5c64bc966d045964f8fd070abd933b04e4005825390eb5db77ecee8f38213abbc1468dec01731bdf8d5be69f63dc9fae0e1974bc2f3a6eb9a1046687a4f2288009ed362fd2a4415585a401f5293fb3ff5e0893911d78492e354aa6c00ea31236b6f"}}}}}, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r3 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) close(r3) execve(&(0x7f0000000300)='./file0\x00', &(0x7f0000002200)={[&(0x7f0000000340)='^-%-\\x\\$})\'!&}*', &(0x7f0000000440)='syz0']}, 0x0) 1m41.09998292s ago: executing program 2 (id=2740): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000080)={0x42, 0x80000009, 0x3}, 0x10) bind$tipc(r0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r4, 0x0, 0x8000f28, 0x0) splice(r3, 0x0, r2, 0x0, 0x7f, 0xe) write(r1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000002, 0x4012831, 0xffffffffffffffff, 0x81362000) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x30, 0xffffffffffffffff, 0x7c528000) futex(&(0x7f0000000000), 0x8c, 0x1, 0x0, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r5, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d118", 0x7e, 0x840, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000000)=0x40) futex(&(0x7f000000cffc), 0x3, 0x1000000, 0x0, &(0x7f0000048000), 0x5000003) r6 = syz_open_procfs(0x0, 0x0) pread64(r6, &(0x7f0000000380)=""/195, 0xc3, 0x2) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = openat$nullb(0xffffff9c, &(0x7f0000000040), 0x80000, 0x0) ioctl$IOC_PR_RELEASE(r8, 0x401070ca, &(0x7f0000000080)={0x1000, 0xff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x28, 0x10, 0x403, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x74, r9, 0x22820, 0x55007}, [@IFLA_CARRIER={0x5, 0x21, 0x7}]}, 0x28}, 0x1, 0x0, 0x0, 0x41}, 0x24040840) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r6, 0x8, 0x0, 0xfffffffffffffffa}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={0x0, r10, 0x0, 0xfb2}, 0x18) 1m40.392306018s ago: executing program 2 (id=2742): socket$nl_generic(0x10, 0x3, 0x10) landlock_create_ruleset(&(0x7f0000000500)={0x21c1, 0x3, 0x3}, 0x18, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9801}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6, 0x1, 0x3}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x8000) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@setneightbl={0x1c, 0x43, 0x101, 0x70bd2b, 0x25dfdbfb, {}, [@NDTA_NAME={0x5, 0x1, '\x00'}]}, 0x1c}}, 0x0) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x20000000, 0x4041}}, 0x50) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0x24, 0x0, 0x0) syz_fuse_handle_req(r1, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) r6 = syz_open_dev$loop(&(0x7f0000000000), 0x4, 0x2080) ioctl$LOOP_SET_FD(r6, 0x4c00, r5) ioctl$LOOP_SET_FD(r6, 0x4c00, r6) dup2(r5, r1) r7 = socket$inet6(0xa, 0x80002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x0, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x33, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) write$dsp(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(0xffffffffffffffff, 0xc0045009, &(0x7f0000000100)=0xfffffff7) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@getspdinfo={0x14, 0x25, 0x1, 0x70bd26, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) r8 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r8, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8) write$rfkill(r8, &(0x7f0000000340)={0x6, 0x0, 0x3, 0x0, 0x1}, 0x8) 1m39.892645898s ago: executing program 2 (id=2746): r0 = getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = creat(&(0x7f0000000280)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)) listxattr(0x0, 0x0, 0x0) semctl$GETALL(0x0, 0x0, 0xd, 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='nfsd\x00', 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000780)={r3, 0x0, 0x0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mknod$loop(0x0, 0xfff, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000840)='net/packet\x00') getsockopt$sock_cred(r2, 0x1, 0x11, 0x0, &(0x7f0000000480)) read$FUSE(0xffffffffffffffff, &(0x7f0000002580)={0x2020, 0x0, 0x0, 0x0}, 0xfffffffffffffdde) keyctl$get_persistent(0x16, r5, 0xffffffffffffffff) mount$nfs(&(0x7f0000000200)=')\x00', &(0x7f0000000340)='./file1\x00', &(0x7f0000000380), 0x1092002, &(0x7f00000004c0)={[{'veth0_vlan\x00'}, {'.+'}, {'overlay\x00'}, {'nfsd\x00'}, {}, {}], [{@euid_lt}, {@fowner_lt={'fowner<', r5}}]}) ioctl$sock_ifreq(r4, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x7}) ioctl$sock_netdev_private(r4, 0x8949, &(0x7f0000000000)) 1m38.662398639s ago: executing program 2 (id=2747): r0 = getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = creat(&(0x7f0000000280)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)) listxattr(0x0, 0x0, 0x0) semctl$GETALL(0x0, 0x0, 0xd, 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='nfsd\x00', 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000780)={r3, 0x20, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mknod$loop(0x0, 0xfff, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000840)='net/packet\x00') getsockopt$sock_cred(r2, 0x1, 0x11, 0x0, &(0x7f0000000480)) read$FUSE(0xffffffffffffffff, &(0x7f0000002580)={0x2020, 0x0, 0x0, 0x0}, 0xfffffffffffffdde) keyctl$get_persistent(0x16, r5, 0xffffffffffffffff) mount$nfs(&(0x7f0000000200)=')\x00', &(0x7f0000000340)='./file1\x00', &(0x7f0000000380), 0x1092002, &(0x7f00000004c0)={[{'veth0_vlan\x00'}, {'.+'}, {'overlay\x00'}, {'nfsd\x00'}, {}, {}], [{@euid_lt}, {@fowner_lt={'fowner<', r5}}]}) ioctl$sock_ifreq(r4, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x7}) ioctl$sock_netdev_private(r4, 0x8949, &(0x7f0000000000)) 1m38.528978576s ago: executing program 32 (id=2747): r0 = getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = creat(&(0x7f0000000280)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)) listxattr(0x0, 0x0, 0x0) semctl$GETALL(0x0, 0x0, 0xd, 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='nfsd\x00', 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000780)={r3, 0x20, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mknod$loop(0x0, 0xfff, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000840)='net/packet\x00') getsockopt$sock_cred(r2, 0x1, 0x11, 0x0, &(0x7f0000000480)) read$FUSE(0xffffffffffffffff, &(0x7f0000002580)={0x2020, 0x0, 0x0, 0x0}, 0xfffffffffffffdde) keyctl$get_persistent(0x16, r5, 0xffffffffffffffff) mount$nfs(&(0x7f0000000200)=')\x00', &(0x7f0000000340)='./file1\x00', &(0x7f0000000380), 0x1092002, &(0x7f00000004c0)={[{'veth0_vlan\x00'}, {'.+'}, {'overlay\x00'}, {'nfsd\x00'}, {}, {}], [{@euid_lt}, {@fowner_lt={'fowner<', r5}}]}) ioctl$sock_ifreq(r4, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x7}) ioctl$sock_netdev_private(r4, 0x8949, &(0x7f0000000000)) 8.101110047s ago: executing program 1 (id=2971): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100fdffffff020000001d00000008000300", @ANYRES32=r2, @ANYBLOB="24002f800c00020000000000000000000800010000000000060003"], 0x40}, 0x1, 0x0, 0x0, 0x4000485}, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000240), r0) sendmsg$NLBL_MGMT_C_PROTOCOLS(r0, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000480)={&(0x7f0000000280)={0x28, r4, 0x8, 0x70bd26, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}}]}, 0x28}, 0x1, 0x0, 0x0, 0x24000830}, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) r6 = memfd_create(&(0x7f00000005c0)='\x00\xc76\xbe\x91\x8d\x182)!\x9a%\xa2\xd28\xd6\x06\a\x0e\xfc\xfe\x12\x8f&\x13\xae%@T\xa3\xb0>\\\xec\xa9\xf9Q@6A\x10\x8cn|\x00\x00\x00\x00\x00\x00\x00\x00\xeb0\xdd\xe8\x87\x05=\xfb\x8b$\xdcQ\xee\xc5\x1f\x8bQ\xf7fo\"i\xa1hk\x1d\xf5z\xc1\x7f\xa4\\]\xc4\xbe3\xf9\xa8\t?:\xd8\xda\x84\xeepI[\x1c\x00\x00\x00\x00\xf9v\x00\x00\x00\x00\x00T\xb6\xbe\x0f~\xc0\x92\xe9O{\xa8\x81(\x01\x14\xfc\x83\xf9\xfb\x05\x94Tr@Lq]\xf9\x15zj\x87\xc4\x8e\xe8/\xb9-&R\x8e\xb2\xb3bBx\x1e1\x18\x8f\x19\xf7]#\xed,\xc7\x11\tp\xf4\xa3\xee\xcb\xaf\xb3\xe3\'}\x18\xe8O\xa8#K\xb6\xe4U\x92\xd2\x99\xb80xffffffffffffffff, 0xffffffffffffffff}) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r9, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffd2c) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001600), 0x2600, 0x0) ioctl$TCSETSW2(r11, 0x5425, 0x0) r12 = syz_io_uring_setup(0x7673, &(0x7f00000000c0)={0x0, 0xfb93, 0x0, 0x40000002, 0xe2}, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r13, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r13, r14, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd=r11, 0x0, 0x0, 0x0, {0x3406}, 0x1}) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f00000008c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000880)={&(0x7f00000007c0)={0x88, 0x1403, 0x400, 0x70bd2d, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth1\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'bridge0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'pimreg0\x00'}}]}, 0x88}, 0x1, 0x0, 0x0, 0x40}, 0x4000) io_uring_enter(r12, 0x47f6, 0x1000, 0x2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r10}, 0x10) getpeername$packet(r7, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000002dc0)=0x14) sendmmsg(r5, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r15}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) bind$bt_hci(r3, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) write(r3, &(0x7f0000000000)="09000000010000", 0x7) 7.786640092s ago: executing program 3 (id=2973): openat$cdrom(0xffffff9c, &(0x7f0000000400), 0x101000, 0x0) socket$kcm(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$pptp(0x18, 0x1, 0x2) socket(0xa, 0x1, 0x0) connect$pptp(r3, &(0x7f0000000040)={0x18, 0x2, {0xfffc, @private=0xa010101}}, 0x1e) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x24204400, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x24, 0x1, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a01011f0000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x14, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}}], {0x14}}, 0x3c}}, 0x0) 7.702536001s ago: executing program 0 (id=2974): bpf$PROG_LOAD(0x5, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) socket(0x10, 0x4, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="e6ffffff080700000000000001000000ecedffffd9a5302c91dbc6789dfd327470e8ee372124d4cfaf1c53274ba5bf0497ced62960222ae5937c4eaf7a5c56d7fa8a62958700aeaf4140956c8515f4cb60ec365e22e512232d925422b397c330ffacceaab43504bf1d2b2cd657b6c3e482a25c1defca66f149f4f458709ae4b8c7968ecd5ebbf69cc64436c835b1f413301022fb90826749fb680ed97439204e87a8a08fbc292bb4ba1cd022be08f091a68c4a884f9aa46f89c0cafbd75d22433b568b58000000", @ANYRES32, @ANYBLOB='\x00'/19, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000600)=ANY=[@ANYRES16=r0, @ANYRES32=r1], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000040)='sys_exit\x00', r2}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.1GB.usage_in_bytes\x00', 0x26e1, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$getregs(0xe, r5, 0x80000000, &(0x7f00000000c0)=""/116) syz_genetlink_get_family_id$nl802154(&(0x7f0000000900), 0xffffffffffffffff) sched_setparam(r5, &(0x7f0000000280)=0x1000) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000d0000", @ANYBLOB='\x00'/12, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={0x0, 0x0, 0x58, 0x0, 0x1, 0x8}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x94) 7.537568427s ago: executing program 1 (id=2975): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$alg(0x26, 0x5, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) r6 = syz_io_uring_setup(0x4e1, &(0x7f0000000380)={0x0, 0xf987, 0x2000, 0xfffffffd, 0x0, 0x0, r5}, &(0x7f0000000180)=0x0, &(0x7f00000005c0)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r6, 0x708, 0x41e3, 0x0, 0x0, 0x0) bind$alg(r3, &(0x7f0000000200)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000740)="2c385ab3d49100dc6626c892b6bc436a6eff136706c8b6c67695a5a74fb3fa1ca6dac20ebe319086224157bf89", 0x2d) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000045c0)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000480)=""/236, 0xec}], 0x1}, 0x4}], 0x1, 0x10000, 0x0) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x404c804) writev(r0, &(0x7f0000000200)=[{&(0x7f0000000100)="89e7ee2c78dad9b4b473fec9", 0xc}, {&(0x7f0000000680)="a33d07f52a7d5192a6c65b63827d1065d041248b1c3a88b7dd0aa0933e455e56ba2a9e5419952523e166fcbba78e8f836362ffcb4d49d39500ad759208628d0379de7891e7029fafcdd27b6a6fd8aaaa8a0711c9a6fe3a0872b6cb42877d983cd12e8621bd741d444db3f0cac0c2f01cece3f1c5bcb4480213d0985b71f6fd83eaeeefe700"/143, 0x8f}], 0x2) r10 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCETHTOOL(r10, 0x8946, &(0x7f0000000500)={'hsr0\x00', &(0x7f00000004c0)=@ethtool_sfeatures={0x21}}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x0, &(0x7f00000003c0)}) socket$nl_netfilter(0x10, 0x3, 0xc) 6.757959099s ago: executing program 4 (id=2976): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioprio_set$pid(0x2, 0x0, 0x6000) syz_clone(0x80280, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x1c, r3, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10004881}, 0x4009010) sendmsg(r1, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0xe, &(0x7f00000001c0)) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r4, &(0x7f0000847fff)='X', 0x1, 0x14000180, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x3, 0x9, 0x8, 0x6, 0x2}, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r5, 0x84, 0x71, &(0x7f0000000000)={r7, 0x8}, &(0x7f0000000040)=0x8) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) io_getevents(0x0, 0x2, 0x2, &(0x7f0000001340)=[{}, {}], 0x0) io_submit(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0x0, r8, 0x0}]) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)) r9 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$BLKTRACESETUP(r9, 0xc0481273, 0x0) socket$kcm(0x10, 0x2, 0x0) 6.54236781s ago: executing program 0 (id=2977): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x2, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r3, 0x560a, &(0x7f0000000040)={0x0, 0x8, 0x0, 0x4}) socket$netlink(0x10, 0x3, 0x15) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) r6 = openat$rdma_cm(0xffffff9c, &(0x7f0000000300), 0x2, 0x0) r7 = memfd_create(&(0x7f0000000400)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xce\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5 \xc8\x10>\xc9\\\x85\x17L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0)\xccm\xacz\xc1\xadd\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\xd1x4]PZ\x9e\xd5Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\x97\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10D\x7f!\xca\x0ev\x15h$\x01\xdd\xe5\xce\xf8*\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xa2\xab\xf6\x84\xe0\xcf1\x9a', 0x0) execveat(r7, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file2\x00', 0x8, 0xdfcd) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000340), 0x2}}, 0x20) 5.776026219s ago: executing program 4 (id=2978): r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f00000001c0)) ioctl$SNDCTL_DSP_CHANNELS(r3, 0xc0045006, &(0x7f0000000040)=0xc) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000000640)=0x10) close(r3) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) gettid() fsopen(&(0x7f0000000200)='befs\x00', 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) capset(&(0x7f0000000c00)={0x20080522}, &(0x7f0000000280)={0x0, 0x3, 0x7, 0x0, 0x10040, 0x8f}) ioctl$KDFONTOP_GET(r4, 0x560f, 0x0) readv(r0, &(0x7f0000000380)=[{&(0x7f00000005c0)=""/96, 0xb3}], 0x1) r5 = inotify_init() inotify_add_watch(r5, &(0x7f0000000000)='./file0\x00', 0x20) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}]}}}]}, 0x5c}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x200, 0x8000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MTU={0x8, 0x3}, @IFLA_LINKMODE={0x5, 0x11, 0x2}]}, 0x44}}, 0x8000) 4.049069962s ago: executing program 4 (id=2979): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x60040, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x2c1, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x3}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$key(0xf, 0x3, 0x2) r6 = openat$binderfs(0xffffff9c, &(0x7f0000000a00)='./binderfs/binder1\x00', 0x2, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r6, 0xc00c6211, &(0x7f0000000a40)) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x40) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c02000100000000000040000200000000050005000000"], 0x80}}, 0x0) sendmmsg(r5, &(0x7f0000000180), 0x400008a, 0x0) bind$llc(0xffffffffffffffff, 0x0, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) prlimit64(0x0, 0x7, &(0x7f0000000040), 0x0) socket$tipc(0x1e, 0x2, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000980)=@newtfilter={0x5c, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0x0, 0xfff3}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x2c, 0x2, [@TCA_FLOWER_KEY_ENC_IPV6_SRC={0x14, 0x1f, @private1}, @TCA_FLOWER_KEY_ENC_IPV6_SRC_MASK={0x14, 0x20, [0xfffffefe, 0xffffff00]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) 4.048473812s ago: executing program 3 (id=2980): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_CT_KEY={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x10) syz_emit_ethernet(0x4e, &(0x7f00000003c0)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa010102, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0xb, 0x0, 0x0, 0x0, 0x0, {[@mss, @sack_perm={0x4, 0x2}, @generic={0x0, 0xfffffffffffffc7e, "a2898405704bcf372ce6"}]}}}}}}}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000340)={'dvmrp1\x00', 0x7101}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000006c0)={'erspan0\x00', &(0x7f0000000840)={'gre0\x00', 0x0, 0x7, 0x1, 0x7, 0xa5, {{0x6, 0x4, 0x2, 0x3f, 0x18, 0x65, 0x0, 0x6, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x6}, @loopback, {[@timestamp_addr={0x44, 0x4, 0x4f}]}}}}}) r4 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) r7 = fsopen(&(0x7f0000000040)='tracefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x8, 0x0, 0x0, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x25dfdbfc, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x4, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x200000000000}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@empty, 0x2, 0x2b}, 0xa, @in6=@local, 0x0, 0x4}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) bind$inet(r8, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) setsockopt$sock_int(r8, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r8, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r8, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$nl_route(r4, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000700)=ANY=[@ANYBLOB="04130902c8000700c8004000b26d338c9e75d5b690dbff8bcc079f656c8e375083888cd969940a16b634ef4d077b04ba436be5cfb99cf378cd03"], 0xc) r10 = openat$null(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) recvmsg$inet_nvme(r10, &(0x7f0000000600)={&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @initdev}}, 0x80, &(0x7f00000005c0)=[{&(0x7f00000001c0)=""/37, 0x25}, {&(0x7f0000000200)=""/58, 0x3a}, {0x0}, {&(0x7f00000002c0)=""/58, 0x3a}, {&(0x7f0000000300)=""/230, 0xe6}, {&(0x7f0000000400)=""/215, 0xd7}, {&(0x7f0000000500)=""/148, 0x94}], 0x7}, 0x2000) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x2, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x30}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x98}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0xfffffffc}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xa0}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc}, {0x18, 0x9, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x5d, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 4.040635896s ago: executing program 0 (id=2987): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100fdffffff020000001d00000008000300", @ANYRES32=r2, @ANYBLOB="24002f800c00020000000000000000000800010000000000060003"], 0x40}, 0x1, 0x0, 0x0, 0x4000485}, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000240), r0) sendmsg$NLBL_MGMT_C_PROTOCOLS(r0, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000480)={&(0x7f0000000280)={0x28, r4, 0x8, 0x70bd26, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}}]}, 0x28}, 0x1, 0x0, 0x0, 0x24000830}, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) r6 = memfd_create(&(0x7f00000005c0)='\x00\xc76\xbe\x91\x8d\x182)!\x9a%\xa2\xd28\xd6\x06\a\x0e\xfc\xfe\x12\x8f&\x13\xae%@T\xa3\xb0>\\\xec\xa9\xf9Q@6A\x10\x8cn|\x00\x00\x00\x00\x00\x00\x00\x00\xeb0\xdd\xe8\x87\x05=\xfb\x8b$\xdcQ\xee\xc5\x1f\x8bQ\xf7fo\"i\xa1hk\x1d\xf5z\xc1\x7f\xa4\\]\xc4\xbe3\xf9\xa8\t?:\xd8\xda\x84\xeepI[\x1c\x00\x00\x00\x00\xf9v\x00\x00\x00\x00\x00T\xb6\xbe\x0f~\xc0\x92\xe9O{\xa8\x81(\x01\x14\xfc\x83\xf9\xfb\x05\x94Tr@Lq]\xf9\x15zj\x87\xc4\x8e\xe8/\xb9-&R\x8e\xb2\xb3bBx\x1e1\x18\x8f\x19\xf7]#\xed,\xc7\x11\tp\xf4\xa3\xee\xcb\xaf\xb3\xe3\'}\x18\xe8O\xa8#K\xb6\xe4U\x92\xd2\x99\xb80xffffffffffffffff, 0xffffffffffffffff}) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r9, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffd2c) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001600), 0x2600, 0x0) ioctl$TCSETSW2(r11, 0x5425, 0x0) r12 = syz_io_uring_setup(0x7673, &(0x7f00000000c0)={0x0, 0xfb93, 0x0, 0x40000002, 0xe2}, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r13, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r13, r14, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd=r11, 0x0, 0x0, 0x0, {0x3406}, 0x1}) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f00000008c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000880)={&(0x7f00000007c0)={0x88, 0x1403, 0x400, 0x70bd2d, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth1\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'bridge0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'pimreg0\x00'}}]}, 0x88}, 0x1, 0x0, 0x0, 0x40}, 0x4000) io_uring_enter(r12, 0x47f6, 0x1000, 0x2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r10}, 0x10) getpeername$packet(r7, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000002dc0)=0x14) sendmmsg(r5, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r15}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) bind$bt_hci(r3, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) write(r3, &(0x7f0000000000)="09000000010000", 0x7) 3.994933075s ago: executing program 1 (id=2981): r0 = openat$ptp0(0xffffff9c, &(0x7f0000000040), 0x165400, 0x0) ioctl$PTP_CLOCK_GETCAPS(r0, 0x80503d01, &(0x7f0000000080)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfa11, 0xffffffff}, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000006c0)=ANY=[@ANYBLOB="180000000000000000000000ffffffff180800002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000400008500000010000000b7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000b300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r4}, 0xc) bind$inet6(0xffffffffffffffff, 0x0, 0x0) set_mempolicy(0x3, &(0x7f00000000c0)=0x3, 0x5) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x8) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000400), 0x800000, &(0x7f0000000300)={[{@huge_advise}]}) chdir(&(0x7f0000000140)='./file0\x00') r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x85) write$binfmt_elf64(r5, &(0x7f00000008c0)=ANY=[], 0x9ca) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) setsockopt$sock_int(r2, 0x1, 0x0, &(0x7f0000000140)=0x5, 0x4) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r7 = dup(r6) setsockopt$RDS_FREE_MR(r7, 0x114, 0x3, &(0x7f0000000180)={{0x4, 0xfffffffc}, 0x4}, 0x10) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x9, 0x34, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0xffffffffffffffd0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[], 0xa4}, 0x1, 0x1000000, 0x0, 0x4000000}, 0xc091) 3.720281673s ago: executing program 3 (id=2982): socket$igmp6(0xa, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1, 0xc}, &(0x7f0000001fee)='R\x10suse\x00\x00\x00\x00\x00\x00\x00dn\x00\x00\x00', 0x0) r3 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r3, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) sendmmsg$inet6(r3, &(0x7f0000002940), 0x40000000000017d, 0x811) socket$l2tp6(0xa, 0x2, 0x73) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000380)={0x3c0, 0x78, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x8, 0x3, 0x1ff, 0x3d, 0x5, 0x3, 0x53, 0x202, 0x1, 0xc}) add_key$user(&(0x7f0000000000), 0x0, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r4, 0x7, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) sendto$inet6(r4, &(0x7f0000000180)="ad0baf5379c99791d8c0f8b29b70f21f6536af72", 0x14, 0x40d4, &(0x7f0000000140)={0xa, 0x4e23, 0x4, @loopback, 0xffffffff}, 0x1) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_EVBIT(r5, 0x40045564, 0x3) ioctl$UI_SET_ABSBIT(r5, 0x40045567, 0x0) write$uinput_user_dev(r5, &(0x7f0000000ec0)={'syz0\x00', {}, 0x0, [0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d52c0], [0x0, 0x0, 0x2, 0xb16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0xf, 0x0, 0x2, 0x0, 0x0, 0x1, 0xfffffffe, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x8], [0x8000002, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x3, 0xe, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4], [0x0, 0x0, 0xfffffffc, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x3, 0x1, 0x0, 0xe, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}, 0x45c) ioctl$UI_DEV_CREATE(r5, 0x5501) 3.643015175s ago: executing program 0 (id=2983): ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000faff0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3, 0x0, 0x5}, 0x18) r4 = syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x0) ioctl$EVIOCGRAB(r4, 0x40044590, &(0x7f0000000280)=0x8001) close(r4) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, 0x0) r5 = io_uring_setup(0x2f00, &(0x7f0000000700)={0x0, 0xe8e2, 0x400, 0x20001, 0x2d6}) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f0000000540)=[{0x0}], 0x1) r6 = io_uring_setup(0x7625, &(0x7f0000000600)={0x0, 0x653f, 0x0, 0x0, 0x28e, 0x0, r5}) io_uring_register$IORING_REGISTER_FILES(r6, 0x1e, &(0x7f0000000000)=[r5], 0x1) unlink(&(0x7f0000000380)='./file0\x00') r7 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000ac0), 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_REMOVE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYRES32=r1], 0x1c}, 0x1, 0x0, 0x0, 0x40005}, 0x8000) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f00000000c0)={0xffff, 0x80600}) 2.8309737s ago: executing program 1 (id=2984): syz_open_dev$swradio(0x0, 0x1, 0x2) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)="5c00000014006b030231a6080c000af32c00000000f800250502000f00e5aa000017d34460bc24eab556bd05251e6182949a2756f475ce36c2d13b48df000000000000ecb8f6ec63c9f4d4938037e786a6d1bdd700e6657594f1817d", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000003e00)=[{&(0x7f00000006c0)=ANY=[], 0x114}], 0x1}, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) write$sndseq(r1, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0xffffff3f, {}, {}, @raw32={[0x3fff]}}], 0xffc8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r5, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="2309fefffffffcffffff0100000005000700000000000800090000000000060002000100000008000a000400010008001700", @ANYRES32], 0x3c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={0x0, 0x4c}, 0x1, 0xba01, 0x0, 0x4004001}, 0x2404c095) landlock_restrict_self(0xffffffffffffffff, 0x5) 2.565863013s ago: executing program 4 (id=2985): socket$igmp6(0xa, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1, 0xc}, &(0x7f0000001fee)='R\x10suse\x00\x00\x00\x00\x00\x00\x00dn\x00\x00\x00', 0x0) r3 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r3, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) sendmmsg$inet6(r3, &(0x7f0000002940), 0x40000000000017d, 0x811) socket$l2tp6(0xa, 0x2, 0x73) add_key$user(&(0x7f0000000000), 0x0, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r4, 0x7, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) sendto$inet6(r4, &(0x7f0000000180)="ad0baf5379c99791d8c0f8b29b70f21f6536af72", 0x14, 0x40d4, &(0x7f0000000140)={0xa, 0x4e23, 0x4, @loopback, 0xffffffff}, 0x1) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_EVBIT(r5, 0x40045564, 0x3) ioctl$UI_SET_ABSBIT(r5, 0x40045567, 0x0) write$uinput_user_dev(r5, &(0x7f0000000ec0)={'syz0\x00', {}, 0x0, [0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d52c0], [0x0, 0x0, 0x2, 0xb16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0xf, 0x0, 0x2, 0x0, 0x0, 0x1, 0xfffffffe, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x8], [0x8000002, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x3, 0xe, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4], [0x0, 0x0, 0xfffffffc, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x3, 0x1, 0x0, 0xe, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}, 0x45c) ioctl$UI_DEV_CREATE(r5, 0x5501) 1.295292588s ago: executing program 4 (id=2986): mkdir(&(0x7f0000000200)='./file1\x00', 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) syz_open_dev$sndctrl(&(0x7f0000000380), 0x1ff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x70bd2d, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x15) writev(r3, &(0x7f0000000280), 0x0) r4 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_SECURITY_KEY(r4, 0x110, 0x1, &(0x7f0000000300)='GPL\x00', 0x4) syz_emit_vhci(&(0x7f0000000000)=ANY=[], 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe3e64c6be2492c0f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f00000000c0)={@in={{0x2, 0x4e22, @local}}, 0x0, 0x0, 0x2, 0x0, "de2170420b42866d263a524b8f533db671e3fb462f6e7f0d2321663fc47cd81409d1a02b9c2248e87414c4cfec9913387fd71cf21f357c8ca38ffddab5d147e98ea2b1cdfaf4e9530630c66996c4905b"}, 0xd8) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b030040000000004c0012800b00010067656e65766500003c0002800800050001000000140007000000000000000005000000000000000108000f"], 0x74}}, 0x0) ioctl$RTC_ALM_READ(0xffffffffffffffff, 0x80247008, &(0x7f00000001c0)) bind$rxrpc(r4, &(0x7f0000000000)=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e20, 0x3, @empty, 0xd}}, 0x24) ptrace$PTRACE_SETSIGMASK(0x420b, r0, 0x8, &(0x7f0000000280)={[0x6, 0x3]}) 1.29112623s ago: executing program 1 (id=2995): syz_open_dev$swradio(0x0, 0x1, 0x2) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)="5c00000014006b030231a6080c000af32c00000000f800250502000f00e5aa000017d34460bc24eab556bd05251e6182949a2756f475ce36c2d13b48df000000000000ecb8f6ec63c9f4d4938037e786a6d1bdd700e6657594f1817d", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000003e00)=[{&(0x7f00000006c0)=ANY=[], 0x114}], 0x1}, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) write$sndseq(r1, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0xffffff3f, {}, {}, @raw32={[0x3fff]}}], 0xffc8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r5, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="2309fefffffffcffffff0100000005000700000000000800090000000000060002000100000008000a000400010008001700", @ANYRES32], 0x3c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={0x0, 0x4c}, 0x1, 0xba01, 0x0, 0x4004001}, 0x2404c095) landlock_restrict_self(0xffffffffffffffff, 0x5) 1.19290921s ago: executing program 3 (id=2988): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000002640)=0x1, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x8, @rand_addr=0x64010102}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newlink={0x40, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x44}, @IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0x10, 0x1a, 0x0, 0x1, [@AF_INET6={0xc, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x3}]}]}]}, 0x40}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x0, 0x2, 0xe6) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="3400000012000100000000000000000007000000", @ANYRES32=0x0, @ANYBLOB="0000000064995c9898e01bac000000001483350077673000"/36], 0x34}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0xfdf8) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r6, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r6, 0x6, 0x16, &(0x7f00000003c0)=[@mss={0x2, 0x8}, @window={0x3, 0xe, 0x7ff}, @timestamp, @sack_perm, @window={0x3, 0x8000, 0xfffc}, @sack_perm, @sack_perm, @window={0x3, 0xfff, 0x4}, @timestamp], 0x9) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f00000001c0), 0xc7) sendto$inet(r6, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x11) recvfrom$inet(r6, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x14, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="4000000010001fff000000000000000000060000", @ANYRES32=0x0, @ANYBLOB="81ffffff00000000180012800e0001007769726567756172640000000400028008000a00", @ANYRES32, @ANYBLOB="a1c50602dd3d7c6622503d2b887e60756f81a58d3acba4be25bfcb4ef0bbb90bf6063a00a46bb79595231248ed048a4c1f461c4830e619d29f6f493ee7fc636229edf147d2e6e0649d95"], 0x40}}, 0x0) 1.06338578s ago: executing program 0 (id=2989): bpf$PROG_LOAD(0x5, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) socket(0x10, 0x4, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="e6ffffff080700000000000001000000ecedffffd9a5302c91dbc6789dfd327470e8ee372124d4cfaf1c53274ba5bf0497ced62960222ae5937c4eaf7a5c56d7fa8a62958700aeaf4140956c8515f4cb60ec365e22e512232d925422b397c330ffacceaab43504bf1d2b2cd657b6c3e482a25c1defca66f149f4f458709ae4b8c7968ecd5ebbf69cc64436c835b1f413301022fb90826749fb680ed97439204e87a8a08fbc292bb4ba1cd022be08f091a68c4a884f9aa46f89c0cafbd75d22433b568b58000000", @ANYRES32, @ANYBLOB='\x00'/19, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000600)=ANY=[@ANYRES16=r0, @ANYRES32=r1], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000040)='sys_exit\x00', r2}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.1GB.usage_in_bytes\x00', 0x26e1, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace$getregs(0xe, r5, 0x80000000, &(0x7f00000000c0)=""/116) syz_genetlink_get_family_id$nl802154(&(0x7f0000000900), 0xffffffffffffffff) sched_setparam(r5, &(0x7f0000000280)=0x1000) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000d0000", @ANYBLOB='\x00'/12, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={0x0, 0x0, 0x58, 0x0, 0x1, 0x8}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x94) 321.853992ms ago: executing program 3 (id=2990): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$alg(0x26, 0x5, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) r6 = syz_io_uring_setup(0x4e1, &(0x7f0000000380)={0x0, 0xf987, 0x2000, 0xfffffffd, 0x0, 0x0, r5}, &(0x7f0000000180)=0x0, &(0x7f00000005c0)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r6, 0x708, 0x41e3, 0x0, 0x0, 0x0) bind$alg(r3, &(0x7f0000000200)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000740)="2c385ab3d49100dc6626c892b6bc436a6eff136706c8b6c67695a5a74fb3fa1ca6dac20ebe319086224157bf89", 0x2d) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000045c0)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000480)=""/236, 0xec}], 0x1}, 0x4}], 0x1, 0x10000, 0x0) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x404c804) writev(r0, &(0x7f0000000200)=[{&(0x7f0000000100)="89e7ee2c78dad9b4b473fec9", 0xc}, {&(0x7f0000000680)="a33d07f52a7d5192a6c65b63827d1065d041248b1c3a88b7dd0aa0933e455e56ba2a9e5419952523e166fcbba78e8f836362ffcb4d49d39500ad759208628d0379de7891e7029fafcdd27b6a6fd8aaaa8a0711c9a6fe3a0872b6cb42877d983cd12e8621bd741d444db3f0cac0c2f01cece3f1c5bcb4480213d0985b71f6fd83eaeeefe700"/143, 0x8f}], 0x2) r10 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCETHTOOL(r10, 0x8946, &(0x7f0000000500)={'hsr0\x00', &(0x7f00000004c0)=@ethtool_sfeatures={0x21}}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x0, &(0x7f00000003c0)}) socket$nl_netfilter(0x10, 0x3, 0xc) 247.483445ms ago: executing program 3 (id=2991): socket$inet_udp(0x2, 0x2, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x1, 0x48001) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000e00)=ANY=[@ANYBLOB="180000000000000000000095000000000010009c07b346cb5e13f8772644f4971e732de04fedad572bac3404f614c6921cc6566233111a04388a1dd9abd53082a556d3870cc36484b7afd31929aee457d4af6b6ec2d0aec2be5822d676d4d9c11f086b9ee55435fa635bf655e9a79e6ef3c3e8ad04cf1da9c1a928f766b975a31f0c49d8b56581c9304a570a7c27812e5da8d9143ea1ecc8e0f700befc1d70bf4fa9b153672e1e6924fddc5f747e80"], &(0x7f0000000140)='syzkaller\x00'}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x8c, 0x30, 0x1, 0x0, 0x0, {}, [{0x78, 0x1, [@m_ct={0x2c, 0x3, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x804}, 0x4040001) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) writev(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000080)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb0100", 0x25}, {&(0x7f0000000040)="aa1d484ea0a00000f7fc08fcd111fbdf23ea32db0e8f21d5bc27bd49eb067a0689fff2a41cfb", 0x26}], 0x2) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="1c0000005e007f029e3b470d649b72ab25399cd956c07dead6a936", 0x1b}], 0x1}, 0x0) recvmsg(r3, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x2062) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000180)={0x100000011, @multicast2, 0x0, 0x0, 'sh\x00', 0xd, 0x4001000, 0x4a}, 0x2c) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac1414aa00000000000000001400020002000000e000000200000000000004000d0001007564703a73"], 0x54}}, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000840), 0x2, 0x0) r7 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$UHID_CREATE(r7, &(0x7f0000002a00)={0x0, {'syz1\x00', 'syz0\x00', 'syz0\x00', &(0x7f0000000040)=""/53, 0x35, 0x0, 0x7f, 0xfffffffe, 0x0, 0x803}}, 0x11c) 159.759722ms ago: executing program 0 (id=2992): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioprio_set$pid(0x2, 0x0, 0x6000) syz_clone(0x80280, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x1c, r3, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10004881}, 0x4009010) sendmsg(r1, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0xe, &(0x7f00000001c0)) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r4, &(0x7f0000847fff)='X', 0x1, 0x14000180, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x3, 0x9, 0x8, 0x6, 0x2}, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r5, 0x84, 0x71, &(0x7f0000000000)={r7, 0x8}, &(0x7f0000000040)=0x8) io_setup(0x2, &(0x7f0000000200)=0x0) io_submit(r8, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x80000000}]) io_getevents(r8, 0x2, 0x2, &(0x7f0000001340)=[{}, {}], 0x0) io_submit(r8, 0x1, &(0x7f0000000140)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)) r9 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$BLKTRACESETUP(r9, 0xc0481273, 0x0) socket$kcm(0x10, 0x2, 0x0) 90.10363ms ago: executing program 1 (id=2993): sendmsg$IEEE802154_LLSEC_DEL_KEY(0xffffffffffffffff, 0x0, 0x8004) r0 = semget(0x3, 0x2, 0x284) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)}, 0x0) semctl$IPC_RMID(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x8040) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) syz_open_dev$dri(0x0, 0xd21, 0x4000) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0401273, &(0x7f0000000240)={'\x00', 0xfffd, 0xc, 0x6, 0x2, 0xbe, 0x0}) syz_open_dev$usbmon(0x0, 0x0, 0x0) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000004c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0x4, 0x4}, {0x0, 0x2}, {0xa, 0x5}]}]}}, 0x0, 0x3e, 0x0, 0x1, 0x4}, 0x28) r5 = epoll_create(0x3) sched_setattr(r3, &(0x7f00000000c0)={0x38, 0x0, 0x5, 0x9e, 0x1ff, 0x2, 0x9, 0x0, 0x0, 0x9}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000080)={0x40000002}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb01001800000000000000280000002800000006000000040000000000000e0300000000000000010000000000009200000000000000000000000202000000002e000061"], 0x0, 0x46}, 0x28) write$P9_RSTATu(r4, &(0x7f0000000580)=ANY=[@ANYBLOB="1e0200000400000005a800000000000000000000000080000000000000000000810300"/47], 0x21e) openat$sequencer(0xffffff9c, &(0x7f0000001bc0), 0x88302, 0x0) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) gettid() r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}}, 0x4000) 0s ago: executing program 4 (id=2994): socket$inet(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x2}]}, @IFLA_GROUP={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) syz_open_procfs(0x0, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_msfilter(r4, 0x0, 0x29, &(0x7f00000000c0)={@initdev={0xac, 0x1e, 0x1, 0x0}, @empty, 0x1, 0x6, [@multicast1, @multicast1, @private=0xa010100, @rand_addr=0x64010100, @rand_addr=0x64010100, @broadcast]}, 0x28) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000040)={0x80, 0x5, 0x10009}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r5, 0x100000) sendto$inet(r3, &(0x7f0000000580)="17", 0xfdef, 0x10008095, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x6, 0x76, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x2) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f0000000300)={0x1, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r6, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) kernel console output (not intermixed with test programs): lo speed is unknown, defaulting to 1000 [ 956.300033][T15720] netlink: 'syz.0.1770': attribute type 4 has an invalid length. [ 956.305930][ T6043] lo speed is unknown, defaulting to 1000 [ 956.308338][ T6043] syz2: Port: 1 Link DOWN [ 956.509928][ T6043] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 957.484855][T15758] wireguard0: entered promiscuous mode [ 957.486950][T15758] wireguard0: entered allmulticast mode [ 959.939301][T15767] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 959.939531][T10665] Bluetooth: hci1: command 0x0406 tx timeout [ 960.413970][T15767] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 960.416665][T15767] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 962.019717][T10665] Bluetooth: hci2: command 0x0406 tx timeout [ 962.419473][T10665] Bluetooth: hci3: command 0x0406 tx timeout [ 963.290822][T15805] netlink: 'syz.1.1780': attribute type 16 has an invalid length. [ 963.293678][T15805] netlink: 'syz.1.1780': attribute type 17 has an invalid length. [ 963.340106][T15805] batadv1: left promiscuous mode [ 963.362670][T15805] geneve3: left promiscuous mode [ 963.365086][T15805] geneve3: left allmulticast mode [ 963.369791][ T13] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 20004 - 0 [ 963.372538][ T13] netdevsim netdevsim1 eth0: unset [1, 1] type 2 family 0 port 256 - 0 [ 963.375259][ T13] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 20004 - 0 [ 963.378071][ T13] netdevsim netdevsim1 eth1: unset [1, 1] type 2 family 0 port 256 - 0 [ 963.382012][ T13] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 20004 - 0 [ 963.384794][ T13] netdevsim netdevsim1 eth2: unset [1, 1] type 2 family 0 port 256 - 0 [ 963.387160][ T13] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 20004 - 0 [ 963.390081][ T13] netdevsim netdevsim1 eth3: unset [1, 1] type 2 family 0 port 256 - 0 [ 963.697996][T15816] lo speed is unknown, defaulting to 1000 [ 963.704982][T15816] lo speed is unknown, defaulting to 1000 [ 963.925263][T15813] netlink: 'syz.3.1783': attribute type 4 has an invalid length. [ 963.930841][T10595] lo speed is unknown, defaulting to 1000 [ 963.932945][T10595] syz0: Port: 1 Link DOWN [ 965.039293][ T841] usb 7-1: new high-speed USB device number 79 using dummy_hcd [ 965.089512][T15843] netlink: 'syz.1.1788': attribute type 39 has an invalid length. [ 965.281517][ T841] usb 7-1: Using ep0 maxpacket: 16 [ 965.383556][ T841] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 965.501819][ T841] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 965.507008][ T841] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 965.520736][ T841] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 965.525324][ T841] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 965.529094][ T841] usb 7-1: SerialNumber: syz [ 965.538448][ T841] cdc_ether 7-1:1.0: probe with driver cdc_ether failed with error -22 [ 965.650044][T15847] overlayfs: failed to clone upperpath [ 965.748245][T15855] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1793'. [ 965.787536][T15855] : renamed from bond0 (while UP) [ 966.030994][ T841] usb 7-1: USB disconnect, device number 79 [ 966.121090][T15864] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 966.124101][T15864] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 966.133064][T15864] vhci_hcd vhci_hcd.0: Device attached [ 966.488449][ T29] usb 40-1: SetAddress Request (46) to port 0 [ 966.548703][ T29] usb 40-1: new SuperSpeed USB device number 46 using vhci_hcd [ 966.989602][T15866] vhci_hcd: connection reset by peer [ 967.003712][ T13] vhci_hcd: stop threads [ 967.006050][ T13] vhci_hcd: release socket [ 967.008556][ T13] vhci_hcd: disconnect device [ 968.091977][ T65] usb 7-1: new high-speed USB device number 80 using dummy_hcd [ 968.249265][ T65] usb 7-1: Using ep0 maxpacket: 16 [ 968.252398][ T65] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 968.255576][ T65] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 968.258933][ T65] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 968.263974][ T65] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 968.267031][ T65] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 968.269750][ T65] usb 7-1: SerialNumber: syz [ 968.274850][ T65] cdc_ether 7-1:1.0: probe with driver cdc_ether failed with error -22 [ 968.629869][ T65] usb 7-1: USB disconnect, device number 80 [ 969.423134][T15905] lo speed is unknown, defaulting to 1000 [ 969.425656][T15905] lo speed is unknown, defaulting to 1000 [ 969.839351][ T65] usb 7-1: new high-speed USB device number 81 using dummy_hcd [ 969.859365][T13626] Bluetooth: hci4: command 0x1003 tx timeout [ 969.859385][T10665] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 969.999242][ T65] usb 7-1: Using ep0 maxpacket: 16 [ 970.002798][ T65] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 970.006174][ T65] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 970.010696][ T65] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 970.016772][ T65] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 970.020296][ T65] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 970.022879][ T65] usb 7-1: SerialNumber: syz [ 970.029757][ T65] cdc_ether 7-1:1.0: probe with driver cdc_ether failed with error -22 [ 970.105478][T15916] vivid-007: disconnect [ 970.378936][ T65] usb 7-1: USB disconnect, device number 81 [ 970.798982][T15915] vivid-007: reconnect [ 970.902730][ T40] audit: type=1326 audit(1759648606.082:3229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15928 comm="syz.1.1810" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf706e579 code=0x0 [ 971.028757][T15936] tipc: Enabling of bearer rejected, already enabled [ 971.619324][ T29] usb 40-1: device descriptor read/8, error -110 [ 972.564294][ T29] usb usb40-port1: attempt power cycle [ 972.703659][T15955] lo speed is unknown, defaulting to 1000 [ 972.706265][T15955] lo speed is unknown, defaulting to 1000 [ 973.202525][ T29] usb usb40-port1: unable to enumerate USB device [ 973.281897][ T65] libceph: connect (1)[c::]:6789 error -101 [ 973.284462][ T65] libceph: mon0 (1)[c::]:6789 connect error [ 973.334683][T15968] ceph: No mds server is up or the cluster is laggy [ 973.483964][T15965] vxfs: WRONG superblock magic 00000000 at 1 [ 973.486144][T15965] vxfs: WRONG superblock magic 00000000 at 8 [ 973.488079][T15965] vxfs: can't find superblock. [ 974.176142][T15984] tipc: Enabled bearer , priority 0 [ 974.485158][T15994] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1823'. [ 974.781186][T15981] tipc: Resetting bearer [ 975.649307][ T65] usb 7-1: new high-speed USB device number 82 using dummy_hcd [ 975.809235][ T65] usb 7-1: Using ep0 maxpacket: 16 [ 975.814537][ T65] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 975.821319][ T65] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 975.829018][ T65] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 975.839642][ T65] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 975.847154][ T65] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 975.852168][ T65] usb 7-1: SerialNumber: syz [ 975.862605][ T65] cdc_ether 7-1:1.0: probe with driver cdc_ether failed with error -22 [ 976.350527][ T29] usb 7-1: USB disconnect, device number 82 [ 976.445692][T15981] tipc: Disabling bearer [ 976.779358][ T40] audit: type=1326 audit(1759648611.952:3230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16016 comm="syz.0.1829" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce579 code=0x7ffc0000 [ 976.786197][ T40] audit: type=1326 audit(1759648611.962:3231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16016 comm="syz.0.1829" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce579 code=0x7ffc0000 [ 976.793206][ T40] audit: type=1326 audit(1759648611.962:3232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16016 comm="syz.0.1829" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf70ce579 code=0x7ffc0000 [ 976.800047][ T40] audit: type=1326 audit(1759648611.972:3233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16016 comm="syz.0.1829" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce579 code=0x7ffc0000 [ 976.807073][ T40] audit: type=1326 audit(1759648611.972:3234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16016 comm="syz.0.1829" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce579 code=0x7ffc0000 [ 976.814276][ T40] audit: type=1326 audit(1759648611.972:3235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16016 comm="syz.0.1829" exe="/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf70ce579 code=0x7ffc0000 [ 976.821189][ T40] audit: type=1326 audit(1759648611.972:3236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16016 comm="syz.0.1829" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce579 code=0x7ffc0000 [ 976.828528][ T40] audit: type=1326 audit(1759648611.972:3237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16016 comm="syz.0.1829" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce579 code=0x7ffc0000 [ 976.836115][ T40] audit: type=1326 audit(1759648611.972:3238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16016 comm="syz.0.1829" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf70ce579 code=0x7ffc0000 [ 976.843090][ T40] audit: type=1326 audit(1759648611.972:3239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16016 comm="syz.0.1829" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce579 code=0x7ffc0000 [ 977.094722][ T29] usb 6-1: new high-speed USB device number 66 using dummy_hcd [ 977.309338][ T29] usb 6-1: Using ep0 maxpacket: 16 [ 977.317067][ T29] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 977.320819][ T29] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 977.324848][ T29] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 977.332889][ T29] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 977.336480][ T29] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 977.339869][ T29] usb 6-1: SerialNumber: syz [ 977.361681][ T29] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -22 [ 978.040034][T16038] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1832'. [ 978.539252][ T29] usb 7-1: new high-speed USB device number 83 using dummy_hcd [ 978.689691][ T29] usb 7-1: Using ep0 maxpacket: 16 [ 978.693293][ T29] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 978.696659][ T29] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 978.700354][ T29] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 978.706204][ T29] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 978.709599][ T29] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 978.712357][ T29] usb 7-1: SerialNumber: syz [ 978.720898][ T29] cdc_ether 7-1:1.0: probe with driver cdc_ether failed with error -22 [ 979.182989][ T29] usb 7-1: USB disconnect, device number 83 [ 979.556958][T10595] usb 6-1: USB disconnect, device number 66 [ 979.849350][T16055] vxfs: WRONG superblock magic 00000000 at 1 [ 979.852603][T16055] vxfs: WRONG superblock magic 00000000 at 8 [ 979.854765][T16055] vxfs: can't find superblock. [ 979.906135][T16057] tipc: Enabling of bearer rejected, already enabled [ 980.479887][ T6043] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 981.130066][ T29] usb 6-1: new high-speed USB device number 67 using dummy_hcd [ 981.279406][ T29] usb 6-1: Using ep0 maxpacket: 16 [ 981.294199][ T29] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 981.311140][ T29] usb 6-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 981.332269][ T29] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 981.347393][ T29] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 981.355957][ T29] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 981.358763][ T29] usb 6-1: SerialNumber: syz [ 981.491395][ T29] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -22 [ 981.909346][T16097] ceph: No mds server is up or the cluster is laggy [ 981.912315][ T29] libceph: connect (1)[c::]:6789 error -101 [ 981.916329][ T29] libceph: mon0 (1)[c::]:6789 connect error [ 981.940940][T16093] vxfs: WRONG superblock magic 00000000 at 1 [ 981.943447][T16093] vxfs: WRONG superblock magic 00000000 at 8 [ 981.945396][T16093] vxfs: can't find superblock. [ 982.729807][ T29] usb 7-1: new high-speed USB device number 84 using dummy_hcd [ 982.889276][ T29] usb 7-1: Using ep0 maxpacket: 16 [ 982.892698][ T29] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 982.896717][ T29] usb 7-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 982.901395][ T29] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 982.907292][ T29] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 982.910998][ T29] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 982.914202][ T29] usb 7-1: SerialNumber: syz [ 982.920075][ T29] cdc_ether 7-1:1.0: probe with driver cdc_ether failed with error -22 [ 983.655809][ T29] usb 6-1: USB disconnect, device number 67 [ 983.839973][ T6043] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 983.974286][T16125] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1847'. [ 983.977194][T16125] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1847'. [ 985.339396][ T29] usb 7-1: USB disconnect, device number 84 [ 985.398174][T16157] A link change request failed with some changes committed already. Interface bond1 may have been left with an inconsistent configuration, please check. [ 985.413063][T16160] syz.2.1851(16160): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 985.904365][T16166] overlayfs: missing 'lowerdir' [ 987.329313][ T29] usb 7-1: new high-speed USB device number 85 using dummy_hcd [ 987.479316][ T29] usb 7-1: Using ep0 maxpacket: 16 [ 987.482579][ T29] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 987.486489][ T29] usb 7-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 987.490524][ T29] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 987.496162][ T29] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 987.499023][ T29] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 987.501728][ T29] usb 7-1: SerialNumber: syz [ 987.508731][ T29] cdc_ether 7-1:1.0: probe with driver cdc_ether failed with error -22 [ 989.848431][ T29] usb 7-1: USB disconnect, device number 85 [ 990.745027][T16210] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 990.747180][T16210] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 990.750389][T16210] vhci_hcd vhci_hcd.0: Device attached [ 991.039390][ T29] usb 7-1: new high-speed USB device number 86 using dummy_hcd [ 991.039410][T11574] usb 40-1: SetAddress Request (50) to port 0 [ 991.051510][T11574] usb 40-1: new SuperSpeed USB device number 50 using vhci_hcd [ 991.209288][ T29] usb 7-1: Using ep0 maxpacket: 16 [ 991.212469][ T29] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 991.215747][ T29] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 991.219889][ T29] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 991.225387][ T29] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 991.228271][ T29] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 991.230888][ T29] usb 7-1: SerialNumber: syz [ 991.236044][ T29] cdc_ether 7-1:1.0: probe with driver cdc_ether failed with error -22 [ 991.364526][T16211] vhci_hcd: connection reset by peer [ 991.367622][ T1143] vhci_hcd: stop threads [ 991.369247][ T1143] vhci_hcd: release socket [ 991.371091][ T1143] vhci_hcd: disconnect device [ 991.773247][ T29] usb 7-1: USB disconnect, device number 86 [ 992.729444][T16237] lo speed is unknown, defaulting to 1000 [ 992.732273][T16237] lo speed is unknown, defaulting to 1000 [ 992.766583][T16243] tipc: Enabling of bearer rejected, failed to enable media [ 993.269818][ T29] usb 7-1: new high-speed USB device number 87 using dummy_hcd [ 993.430012][ T29] usb 7-1: Using ep0 maxpacket: 16 [ 993.510820][ T29] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 993.514405][ T29] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 993.518513][ T29] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 993.530023][ T29] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 993.533209][ T29] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 993.536038][ T29] usb 7-1: SerialNumber: syz [ 993.567453][ T29] cdc_ether 7-1:1.0: probe with driver cdc_ether failed with error -22 [ 993.724140][T16260] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1868'. [ 995.556531][ T29] usb 7-1: USB disconnect, device number 87 [ 995.779980][ T6043] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 996.109548][T11574] usb 40-1: device descriptor read/8, error -110 [ 996.579786][T11574] usb usb40-port1: attempt power cycle [ 996.675305][T16309] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1874'. [ 996.840824][ T65] syz1: Port: 1 Link DOWN [ 997.076481][T16313] tipc: Enabling of bearer rejected, failed to enable media [ 997.159947][T11574] usb usb40-port1: unable to enumerate USB device [ 997.761705][T16332] bridge0: entered promiscuous mode [ 997.795999][ T6043] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 997.861111][ T1417] ieee802154 phy1 wpan1: encryption failed: -22 [ 997.872813][T16330] "syz.0.1878" (16330) uses obsolete ecb(arc4) skcipher [ 1015.556126][T16407] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1891'. [ 1015.560546][T16407] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1891'. [ 1016.129647][T16410] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1893'. [ 1016.434040][T16427] delete_channel: no stack [ 1016.694255][T13626] Bluetooth: hci3: command 0x0406 tx timeout [ 1016.698507][T16426] tipc: Enabling of bearer rejected, failed to enable media [ 1017.349644][ T40] kauditd_printk_skb: 61 callbacks suppressed [ 1017.349655][ T40] audit: type=1326 audit(2000000003.049:3301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16435 comm="syz.0.1898" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce579 code=0x7fc00000 [ 1017.679419][T16444] lo speed is unknown, defaulting to 1000 [ 1017.684810][T16444] lo speed is unknown, defaulting to 1000 [ 1018.168863][T16443] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1018.285191][T16457] ptrace attach of "/syz-executor exec"[5960] was attempted by " ú“\x0c¬¹H;¤'ýëãSde/È|¥zPüÚиWåÌ\x0b”PŠ<ÇI7ô{‚ŸûWr•×¢Ó‡amL5Ûï{ô„Þ¶-Ú¨ÜøžØ¸­…›¼»E“fŽYSõ7£?šVê½sˆëŒ\x0b†MÈüÚáÐ÷Æ`ÖÓðg‰ï°Ø±/â—’ýäUéµCŽÎöOGËDn›û\x07Âæw™¹m}O²ñq¦ã¬p×]ŒðK|I(Ùïó‹9¯/èk¾ìY_¡Ö¤vqyØóÿ×rƲÈ.+/ñnîyŠ]§6ÖB\x5c*‰ÈõLo§Ÿ× …\x0a ¢BÚ\x0dáÛAnÿë¬õ\x0bptQUolLê„ÓobBàÀM¦ñÖãóȹ.š»T3#(Dª\x1bªº˜™ä?-íMóŠMÞ\x0dÅ{ÞX¯óâ˜Lhl1G‡J(°ï‰Ÿ™\x0a˜«À¹\x07ê‚b\x0cf¸Û\x5c–L™e#ç½y„wÝO%Ë0õ¥,Ž¨zÇ‚œrÏ\x5cHô\x22ý@)EâlĪoª´=æÉ0}Æ|šö¶—m ÀÉ~ŽM÷ÏUK\x0býQoDU1h$étïQf‘\x0b½;\x0bvNõT/ñörP£Àx0mþ؇dG>Ît5QêI§¡šÝ0kŸópžì”;†€Èî©tÒ>?7~ðéÕžþç8ç)>‡\x0a.Fâv\x5c0CPª{©\x07Ô­4OT)®¥ü%ù³DkfCkF ç±¥;¡Ðm\x0c•vä\x0cTʪz5©ñmÖ¢´—ïvÜÄà‰Ä«'c®üß^ت°g_\x0bÆ…8±)c,¨(qøáeäB¾ðãã‘»SPt4äo¹ ¾I„HwL#©–@mU¡pªE¢^aÒÉgh~d¬_ö­9\x07r|ÖçGJj+&Ò½k(‘\x07”êërnéE§4¼(ŸõÇó#ë×\x0b YÅβBÇäˆ\x0aЦ&ÆþRý`µ?èóL1t¸Ž÷ÎÕ«wËÑ.Mç=3ª|G‹÷ƒ“sùmƒgî4`|\x22{б춋¬½†1â[{þȯw/B‹_g»6-òqyk*™o¯’\x0d\x5cc8ÀèÌÿ\x5c [ 1018.820462][ T40] audit: type=1326 audit(2000000004.519:3302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16435 comm="syz.0.1898" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70ce598 code=0x7fc00000 [ 1018.902281][T16465] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1903'. [ 1019.549294][T16469] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 1019.551484][T16469] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1019.588076][T16469] vhci_hcd vhci_hcd.0: Device attached [ 1019.849332][ T65] usb 42-1: SetAddress Request (62) to port 0 [ 1019.851933][ T65] usb 42-1: new SuperSpeed USB device number 62 using vhci_hcd [ 1020.028207][T16473] vhci_hcd: connection reset by peer [ 1020.030292][T12111] vhci_hcd: stop threads [ 1020.031744][T12111] vhci_hcd: release socket [ 1020.033217][T12111] vhci_hcd: disconnect device [ 1020.949898][ T6043] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 1021.054745][T16505] IPVS: Error connecting to the multicast addr [ 1021.531793][T16507] tmpfs: Bad value for 'mpol' [ 1021.988065][T16515] input: syz1 as /devices/virtual/input/input18 [ 1022.270589][T16524] lo speed is unknown, defaulting to 1000 [ 1022.274985][T16524] lo speed is unknown, defaulting to 1000 [ 1022.702652][T16522] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1023.005950][T16532] netlink: 'syz.1.1914': attribute type 1 has an invalid length. [ 1023.168229][T16534] tipc: Enabling of bearer rejected, failed to enable media [ 1023.894326][T16548] ip6gre1: entered promiscuous mode [ 1023.896391][T16548] ip6gre1: entered allmulticast mode [ 1024.721170][T16558] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1922'. [ 1024.909396][ T65] usb 42-1: device descriptor read/8, error -110 [ 1024.944471][T16569] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1923'. [ 1025.309873][ T65] usb usb42-port1: attempt power cycle [ 1025.476571][T16562] syz.1.1924 (16562): drop_caches: 1 [ 1025.508338][T16562] syz.1.1924 (16562): drop_caches: 1 [ 1025.616160][T16572] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1925'. [ 1025.796998][T16579] tipc: Enabling of bearer rejected, failed to enable media [ 1026.090578][T16594] lo speed is unknown, defaulting to 1000 [ 1026.097920][T16594] lo speed is unknown, defaulting to 1000 [ 1026.132073][T16596] IPv6: NLM_F_CREATE should be specified when creating new route [ 1026.281020][ T65] usb usb42-port1: unable to enumerate USB device [ 1027.225129][T16612] create_pit_timer: 1 callbacks suppressed [ 1027.225190][T16612] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1027.893931][T16621] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1938'. [ 1028.053436][T16629] tipc: Enabling of bearer rejected, failed to enable media [ 1029.129852][ T6043] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 1029.152292][T16648] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 1029.154444][T16648] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1029.340226][T16648] vhci_hcd vhci_hcd.0: Device attached [ 1029.659923][ T29] usb 42-1: SetAddress Request (66) to port 0 [ 1029.664087][ T29] usb 42-1: new SuperSpeed USB device number 66 using vhci_hcd [ 1029.779415][T10665] Bluetooth: hci1: command 0x0406 tx timeout [ 1030.488740][T16657] tipc: Enabling of bearer rejected, failed to enable media [ 1030.805989][T16649] vhci_hcd: connection reset by peer [ 1030.809123][T12111] vhci_hcd: stop threads [ 1030.811552][T12111] vhci_hcd: release socket [ 1030.813489][T12111] vhci_hcd: disconnect device [ 1030.943178][T16668] tipc: Enabling of bearer rejected, failed to enable media [ 1031.236596][T16671] tipc: Enabling of bearer rejected, failed to enable media [ 1031.615381][T16679] lo speed is unknown, defaulting to 1000 [ 1031.621991][T16679] lo speed is unknown, defaulting to 1000 [ 1034.739392][ T29] usb 42-1: device descriptor read/8, error -110 [ 1035.155871][ T29] usb usb42-port1: attempt power cycle [ 1036.223734][ T6043] libceph: connect (1)[c::]:6789 error -101 [ 1036.225762][ T6043] libceph: mon0 (1)[c::]:6789 connect error [ 1036.271382][T16702] ceph: No mds server is up or the cluster is laggy [ 1036.279088][T16708] /dev/nullb0: Can't lookup blockdev [ 1036.569751][ T29] usb usb42-port1: unable to enumerate USB device [ 1036.987982][T16734] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1958'. [ 1038.565801][T16742] syz.1.1970 (16742): drop_caches: 2 [ 1039.336535][T16776] tipc: Enabling of bearer rejected, failed to enable media [ 1039.522260][T16786] siw: device registration error -23 [ 1039.679852][T16790] lo speed is unknown, defaulting to 1000 [ 1039.685590][T16790] lo speed is unknown, defaulting to 1000 [ 1040.194289][T16785] netlink: 'syz.3.1965': attribute type 4 has an invalid length. [ 1040.893779][T16799] wireguard0: entered promiscuous mode [ 1040.896104][T16799] wireguard0: entered allmulticast mode [ 1041.093810][T16804] netlink: 'syz.1.1968': attribute type 4 has an invalid length. [ 1041.101385][T16804] netlink: 'syz.1.1968': attribute type 4 has an invalid length. [ 1041.425444][T16809] mac80211_hwsim hwsim9 syzkaller0: entered promiscuous mode [ 1041.968589][T16824] tipc: Enabling of bearer rejected, failed to enable media [ 1041.981027][ T40] audit: type=1326 audit(2000000027.682:3303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16819 comm="syz.3.1976" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd6579 code=0x7ffc0000 [ 1041.997871][T16821] pim6reg: entered allmulticast mode [ 1042.024288][ T40] audit: type=1326 audit(2000000027.682:3304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16819 comm="syz.3.1976" exe="/syz-executor" sig=0 arch=40000003 syscall=437 compat=1 ip=0xf7fd6579 code=0x7ffc0000 [ 1042.046685][ T40] audit: type=1326 audit(2000000027.682:3305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16819 comm="syz.3.1976" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd6579 code=0x7ffc0000 [ 1042.059059][ T40] audit: type=1326 audit(2000000027.682:3306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16819 comm="syz.3.1976" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd6579 code=0x7ffc0000 [ 1042.066066][ T40] audit: type=1326 audit(2000000027.682:3307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16819 comm="syz.3.1976" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7fd6579 code=0x7ffc0000 [ 1042.073587][ T40] audit: type=1326 audit(2000000027.682:3308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16819 comm="syz.3.1976" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd6579 code=0x7ffc0000 [ 1042.082005][ T40] audit: type=1326 audit(2000000027.682:3309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16819 comm="syz.3.1976" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd6579 code=0x7ffc0000 [ 1042.089996][ T40] audit: type=1326 audit(2000000027.682:3310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16819 comm="syz.3.1976" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7fd6579 code=0x7ffc0000 [ 1042.097634][T16829] tipc: Enabling of bearer rejected, failed to enable media [ 1042.098581][ T40] audit: type=1326 audit(2000000027.682:3311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16819 comm="syz.3.1976" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd6579 code=0x7ffc0000 [ 1042.109483][ T40] audit: type=1326 audit(2000000027.682:3312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16819 comm="syz.3.1976" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd6579 code=0x7ffc0000 [ 1042.618773][T16819] pim6reg: left allmulticast mode [ 1043.271495][T16846] overlayfs: failed to clone upperpath [ 1043.329419][ T65] usb 7-1: new high-speed USB device number 88 using dummy_hcd [ 1043.489991][ T65] usb 7-1: Using ep0 maxpacket: 16 [ 1043.497260][ T65] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1043.502072][ T65] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1043.506067][ T65] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 1043.522598][ T65] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1043.525935][ T65] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1043.529279][ T65] usb 7-1: SerialNumber: syz [ 1043.566818][ T65] cdc_ether 7-1:1.0: probe with driver cdc_ether failed with error -22 [ 1044.058592][T16861] tipc: Enabling of bearer rejected, failed to enable media [ 1044.157092][T16866] siw: device registration error -23 [ 1044.169442][ T65] usb 6-1: new high-speed USB device number 68 using dummy_hcd [ 1044.319594][ T65] usb 6-1: Using ep0 maxpacket: 16 [ 1044.324406][ T65] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1044.328923][ T65] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1044.333279][ T65] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1044.337261][ T65] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 1044.345191][ T65] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1044.348876][ T65] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1044.352205][ T65] usb 6-1: SerialNumber: syz [ 1044.360608][ T65] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -22 [ 1045.860193][ T65] usb 7-1: USB disconnect, device number 88 [ 1046.754249][ T65] usb 6-1: USB disconnect, device number 68 [ 1047.659116][T16884] lo speed is unknown, defaulting to 1000 [ 1047.663128][T16884] lo speed is unknown, defaulting to 1000 [ 1048.014128][T16887] ptrace attach of ""[16890] was attempted by "/syz-executor exec"[16887] [ 1048.027141][T16882] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1048.235451][T16891] netlink: 'syz.3.1987': attribute type 4 has an invalid length. [ 1048.247178][T16891] netlink: 'syz.3.1987': attribute type 4 has an invalid length. [ 1048.291376][ T65] lo speed is unknown, defaulting to 1000 [ 1048.293751][ T65] syz0: Port: 1 Link ACTIVE [ 1051.085351][T16920] netlink: 'syz.1.2005': attribute type 4 has an invalid length. [ 1051.115372][T16920] netlink: 'syz.1.2005': attribute type 4 has an invalid length. [ 1052.157404][T16946] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1999'. [ 1052.369705][ T6043] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 1055.163828][T17001] netlink: 'syz.0.2010': attribute type 4 has an invalid length. [ 1055.171102][T17001] netlink: 'syz.0.2010': attribute type 4 has an invalid length. [ 1055.190959][ T29] lo speed is unknown, defaulting to 1000 [ 1055.192987][ T29] syz2: Port: 1 Link ACTIVE [ 1059.301564][ T1417] ieee802154 phy1 wpan1: encryption failed: -22 [ 1060.053503][T17028] comedi comedi3: pcl812: I/O port conflict (0x4f27,16) [ 1060.389943][ T6043] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 1060.390141][T17032] lo speed is unknown, defaulting to 1000 [ 1060.395223][T17032] lo speed is unknown, defaulting to 1000 [ 1061.032200][T17055] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2015'. [ 1062.510893][T17083] netlink: 'syz.0.2019': attribute type 4 has an invalid length. [ 1062.515549][T10595] lo speed is unknown, defaulting to 1000 [ 1062.517791][T10595] syz2: Port: 1 Link DOWN [ 1062.522531][T17083] netlink: 'syz.0.2019': attribute type 4 has an invalid length. [ 1062.527172][T10595] lo speed is unknown, defaulting to 1000 [ 1062.528978][T10595] syz2: Port: 1 Link ACTIVE [ 1063.158831][T17098] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 1063.160923][T17098] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1063.163792][T17098] vhci_hcd vhci_hcd.0: Device attached [ 1063.409292][ T29] usb 39-1: new low-speed USB device number 5 using vhci_hcd [ 1063.791030][T17099] vhci_hcd: connection reset by peer [ 1063.794093][ T1143] vhci_hcd: stop threads [ 1063.795586][ T1143] vhci_hcd: release socket [ 1063.797231][ T1143] vhci_hcd: disconnect device [ 1067.812323][T17130] comedi comedi3: pcl812: I/O port conflict (0x4f27,16) [ 1068.089886][ T6043] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 1068.148415][ T65] libceph: connect (1)[c::]:6789 error -101 [ 1068.150625][ T65] libceph: mon0 (1)[c::]:6789 connect error [ 1068.201273][T17128] ceph: No mds server is up or the cluster is laggy [ 1068.214830][T17137] /dev/nullb0: Can't lookup blockdev [ 1068.615437][ T29] vhci_hcd: vhci_device speed not set [ 1070.055221][T17170] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2029'. [ 1070.070164][T17172] tipc: Enabling of bearer rejected, failed to enable media [ 1070.079543][ T6043] usb 6-1: new high-speed USB device number 69 using dummy_hcd [ 1070.166285][T17176] tipc: Enabling of bearer rejected, failed to enable media [ 1070.229318][ T6043] usb 6-1: Using ep0 maxpacket: 16 [ 1070.232461][ T6043] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1070.237099][ T6043] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1070.241474][ T6043] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 1070.246885][ T6043] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1070.250157][ T6043] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1070.252721][ T6043] usb 6-1: SerialNumber: syz [ 1070.258032][ T6043] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -22 [ 1072.489487][ T29] usb 6-1: USB disconnect, device number 69 [ 1074.458211][ T6043] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 1075.616273][T17229] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2038'. [ 1076.579914][T17249] tipc: Enabling of bearer rejected, failed to enable media [ 1076.668092][T17258] tipc: Enabled bearer , priority 0 [ 1076.823603][T17251] tipc: Resetting bearer [ 1078.722412][T17251] tipc: Disabling bearer [ 1078.859939][ T6043] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 1089.022117][T17317] mac80211_hwsim hwsim9 syzkaller0: left promiscuous mode [ 1089.225834][T17317] tipc: Enabling of bearer rejected, already enabled [ 1089.589555][T17327] tipc: Enabling of bearer rejected, already enabled [ 1093.201964][T17374] tipc: Enabled bearer , priority 0 [ 1093.888404][T17385] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2073'. [ 1093.928898][T17372] tipc: Resetting bearer [ 1094.074723][T17392] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2073'. [ 1095.565134][T17372] tipc: Disabling bearer [ 1095.572062][T17385] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1095.729413][T11574] usb 7-1: new high-speed USB device number 89 using dummy_hcd [ 1095.851065][ T6043] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 1095.899354][T11574] usb 7-1: Using ep0 maxpacket: 16 [ 1095.902693][T11574] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1095.906469][T11574] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1095.910292][T11574] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 1095.915316][T11574] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1095.918265][T11574] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1095.921019][T11574] usb 7-1: SerialNumber: syz [ 1095.926155][T11574] cdc_ether 7-1:1.0: probe with driver cdc_ether failed with error -22 [ 1098.342864][T11574] usb 7-1: USB disconnect, device number 89 [ 1098.829381][T10595] usb 7-1: new high-speed USB device number 90 using dummy_hcd [ 1099.179286][T10595] usb 7-1: Using ep0 maxpacket: 16 [ 1099.182653][T10595] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1099.186344][T10595] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1099.190219][T10595] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 1099.195637][T10595] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1099.198779][T10595] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1099.201562][T10595] usb 7-1: SerialNumber: syz [ 1099.206368][T10595] cdc_ether 7-1:1.0: probe with driver cdc_ether failed with error -22 [ 1099.787002][T17451] netlink: 'syz.1.2084': attribute type 10 has an invalid length. [ 1101.474111][ T6043] usb 7-1: USB disconnect, device number 90 [ 1104.049835][ T6043] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 1104.959328][T10595] usb 7-1: new high-speed USB device number 91 using dummy_hcd [ 1105.119300][T10595] usb 7-1: Using ep0 maxpacket: 16 [ 1105.123586][T10595] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1105.128306][T10595] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1105.133450][T10595] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 1105.138387][T10595] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1105.141597][T10595] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1105.144457][T10595] usb 7-1: SerialNumber: syz [ 1105.154296][T10595] cdc_ether 7-1:1.0: probe with driver cdc_ether failed with error -22 [ 1105.425422][T17514] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2092'. [ 1105.468562][T17514] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1105.535897][T17514] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2092'. [ 1107.619659][ T29] usb 7-1: USB disconnect, device number 91 [ 1108.042644][T17548] netlink: 'syz.2.2097': attribute type 10 has an invalid length. [ 1114.799610][T17569] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2102'. [ 1114.805585][T17569] netlink: 3 bytes leftover after parsing attributes in process `syz.3.2102'. [ 1114.975520][T17569] batadv0: entered allmulticast mode [ 1115.879315][ T65] usb 6-1: new high-speed USB device number 70 using dummy_hcd [ 1116.029265][ T65] usb 6-1: Using ep0 maxpacket: 16 [ 1116.032342][ T65] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1116.036055][ T65] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1116.041165][ T65] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 1116.046719][ T65] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1116.050157][ T65] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1116.052851][ T65] usb 6-1: SerialNumber: syz [ 1116.123509][ T65] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -22 [ 1116.184080][ T40] kauditd_printk_skb: 25 callbacks suppressed [ 1116.184093][ T40] audit: type=1326 audit(2000000101.882:3338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17587 comm="syz.2.2104" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7ff5579 code=0x0 [ 1116.361643][T17591] netlink: 'syz.0.2105': attribute type 39 has an invalid length. [ 1117.335093][T17606] vivid-007: disconnect [ 1117.974703][T17605] vivid-007: reconnect [ 1118.017950][T17615] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2111'. [ 1118.131552][T17616] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1118.180545][T17616] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2111'. [ 1118.457675][ T65] usb 6-1: USB disconnect, device number 70 [ 1120.741513][ T1417] ieee802154 phy1 wpan1: encryption failed: -22 [ 1121.025439][T17654] netlink: 'syz.3.2121': attribute type 39 has an invalid length. [ 1122.740353][ T65] usb 7-1: new high-speed USB device number 92 using dummy_hcd [ 1122.889753][ T65] usb 7-1: Using ep0 maxpacket: 16 [ 1122.900157][ T65] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1122.904282][ T65] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1122.923768][ T65] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 1122.938106][ T65] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1122.945611][ T65] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1122.958113][ T65] usb 7-1: SerialNumber: syz [ 1122.975060][ T65] cdc_ether 7-1:1.0: probe with driver cdc_ether failed with error -22 [ 1124.299134][T17709] tipc: Enabled bearer , priority 0 [ 1124.512893][T17707] tipc: Resetting bearer [ 1125.270292][T11574] usb 7-1: USB disconnect, device number 92 [ 1125.301537][T17722] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2138'. [ 1125.773417][T17725] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2138'. [ 1126.359332][T17736] netlink: 'syz.3.2137': attribute type 4 has an invalid length. [ 1126.415513][T17740] netlink: 'syz.3.2137': attribute type 4 has an invalid length. [ 1127.029124][T17707] tipc: Disabling bearer [ 1127.035721][T17728] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1127.056829][ T29] lo speed is unknown, defaulting to 1000 [ 1127.059001][ T65] lo speed is unknown, defaulting to 1000 [ 1127.622298][T17753] tipc: Enabled bearer , priority 0 [ 1127.776894][T17748] tipc: Resetting bearer [ 1127.801077][T17752] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2142'. [ 1129.273945][T17748] tipc: Disabling bearer [ 1129.499424][T17760] tipc: Enabling of bearer rejected, failed to enable media [ 1129.679337][ T40] audit: type=1326 audit(2000000115.372:3339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17757 comm="syz.1.2143" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e579 code=0x7ffc0000 [ 1129.686486][ T40] audit: type=1326 audit(2000000115.372:3340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17757 comm="syz.1.2143" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e579 code=0x7ffc0000 [ 1129.759410][ T40] audit: type=1326 audit(2000000115.382:3341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17757 comm="syz.1.2143" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf706e579 code=0x7ffc0000 [ 1129.768293][ T40] audit: type=1326 audit(2000000115.382:3342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17757 comm="syz.1.2143" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e579 code=0x7ffc0000 [ 1129.778756][ T40] audit: type=1326 audit(2000000115.382:3343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17757 comm="syz.1.2143" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e579 code=0x7ffc0000 [ 1129.904581][ T40] audit: type=1326 audit(2000000115.382:3344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17757 comm="syz.1.2143" exe="/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf706e579 code=0x7ffc0000 [ 1129.914043][ T40] audit: type=1326 audit(2000000115.382:3345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17757 comm="syz.1.2143" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e579 code=0x7ffc0000 [ 1129.923226][ T40] audit: type=1326 audit(2000000115.382:3346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17757 comm="syz.1.2143" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e579 code=0x7ffc0000 [ 1129.932581][ T40] audit: type=1326 audit(2000000115.382:3347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17757 comm="syz.1.2143" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf706e579 code=0x7ffc0000 [ 1129.942248][ T40] audit: type=1326 audit(2000000115.382:3348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17757 comm="syz.1.2143" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e579 code=0x7ffc0000 [ 1130.131279][ T54] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 1133.281631][T17823] lo speed is unknown, defaulting to 1000 [ 1133.286839][T17823] lo speed is unknown, defaulting to 1000 [ 1133.919903][T17837] netlink: 'syz.2.2157': attribute type 1 has an invalid length. [ 1133.922588][T17837] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2157'. [ 1134.557790][T17829] ALSA: mixer_oss: invalid OSS volume '' [ 1136.337997][ T40] kauditd_printk_skb: 7 callbacks suppressed [ 1136.338014][ T40] audit: type=1326 audit(2000000122.032:3356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17851 comm="syz.2.2160" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff5579 code=0x7fc00000 [ 1137.121101][ T40] audit: type=1326 audit(2000000122.822:3357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17851 comm="syz.2.2160" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7ff5598 code=0x7fc00000 [ 1137.619656][T17756] usb 7-1: new high-speed USB device number 93 using dummy_hcd [ 1137.769338][T17756] usb 7-1: Using ep0 maxpacket: 16 [ 1137.773769][T17756] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1137.777211][T17756] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1137.781544][T17756] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 1137.788132][T17756] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1137.791468][T17756] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1137.794123][T17756] usb 7-1: SerialNumber: syz [ 1137.800766][T17756] cdc_ether 7-1:1.0: probe with driver cdc_ether failed with error -22 [ 1139.289838][ T54] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 1140.466485][T15871] usb 7-1: USB disconnect, device number 93 [ 1141.423275][T17939] tipc: Enabling of bearer rejected, failed to enable media [ 1141.669728][ T54] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 1154.705340][ T65] usb 6-1: new high-speed USB device number 71 using dummy_hcd [ 1154.859404][ T65] usb 6-1: Using ep0 maxpacket: 16 [ 1154.864309][ T65] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1154.920747][ T65] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1154.924660][ T65] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 1154.930805][ T65] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1154.933982][ T65] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1154.936643][ T65] usb 6-1: SerialNumber: syz [ 1154.941886][ T65] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -22 [ 1155.484036][T18008] tipc: Enabling of bearer rejected, failed to enable media [ 1156.494629][ T65] usb 6-1: USB disconnect, device number 71 [ 1159.370187][T18029] tipc: Enabling of bearer rejected, failed to enable media [ 1161.638890][T18060] ptrace attach of "/syz-executor exec"[5957] was attempted by " ú“\x0c¬¹H;¤'ýëãSde/È|¥zPüÚиWåÌ\x0b”PŠ<ÇI7ô{‚ŸûWr•×¢Ó‡amL5Ûï{ô„Þ¶-Ú¨ÜøžØ¸­…›¼»E“fŽYSõ7£?šVê½sˆëŒ\x0b†MÈüÚáÐ÷Æ`ÖÓðg‰ï°Ø±/â—’ýäUéµCŽÎöOGËDn›û\x07Âæw™¹m}O²ñq¦ã¬p×]ŒðK|I(Ùïó‹9¯/èk¾ìY_¡Ö¤vqyØóÿ×rƲÈ.+/ñnîyŠ]§6ÖB\x5c*‰ÈõLo§Ÿ× …\x0a ¢BÚ\x0dáÛAnÿë¬õ\x0bptQUolLê„ÓobBàÀM¦ñÖãóȹ.š»T3#(Dª\x1bªº˜™ä?-íMóŠMÞ\x0dÅ{ÞX¯óâ˜Lhl1G‡J(°ï‰Ÿ™\x0a˜«À¹\x07ê‚b\x0cf¸Û\x5c–L™e#ç½y„wÝO%Ë0õ¥,Ž¨zÇ‚œrÏ\x5cHô\x22ý@)EâlĪoª´=æÉ0}Æ|šö¶—m ÀÉ~ŽM÷ÏUK\x0býQoDU1h$étïQf‘\x0b½;\x0bvNõT/ñörP£Àx0mþ؇dG>Ît5QêI§¡šÝ0kŸópžì”;†€Èî©tÒ>?7~ðéÕžþç8ç)>‡\x0a.Fâv\x5c0CPª{©\x07Ô­4OT)®¥ü%ù³DkfCkF ç±¥;¡Ðm\x0c•vä\x0cTʪz5©ñmÖ¢´—ïvÜÄà‰Ä«'c®üß^ت°g_\x0bÆ…8±)c,¨(qøáeäB¾ðãã‘»SPt4äo¹ ¾I„HwL#©–@mU¡pªE¢^aÒÉgh~d¬_ö­9\x07r|ÖçGJj+&Ò½k(‘\x07”êërnéE§4¼(ŸõÇó#ë×\x0b YÅβBÇäˆ\x0aЦ&ÆþRý`µ?èóL1t¸Ž÷ÎÕ«wËÑ.Mç=3ª|G‹÷ƒ“sùmƒgî4`|\x22{б춋¬½†1â[{þȯw/B‹_g»6-òqyk*™o¯’\x0d\x5cc8ÀèÌÿ\x5c [ 1162.809296][ T65] usb 7-1: new high-speed USB device number 94 using dummy_hcd [ 1162.999280][ T65] usb 7-1: Using ep0 maxpacket: 16 [ 1163.003700][ T65] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1163.009045][ T65] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1163.014163][ T65] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 1163.020882][ T65] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1163.024719][ T65] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1163.028337][ T65] usb 7-1: SerialNumber: syz [ 1163.037365][ T65] cdc_ether 7-1:1.0: probe with driver cdc_ether failed with error -22 [ 1163.079278][T11574] usb 6-1: new high-speed USB device number 72 using dummy_hcd [ 1163.239372][T11574] usb 6-1: Using ep0 maxpacket: 16 [ 1163.243079][T11574] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1163.246404][T11574] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1163.249965][T11574] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 1163.255583][T11574] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1163.258837][T11574] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1163.261551][T11574] usb 6-1: SerialNumber: syz [ 1163.268254][T11574] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -22 [ 1163.539605][T18064] bpf: Bad value for 'uid' [ 1165.113997][ T65] usb 7-1: USB disconnect, device number 94 [ 1165.399834][ T54] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 1165.741256][ T65] usb 6-1: USB disconnect, device number 72 [ 1166.569446][ T54] usb 7-1: new high-speed USB device number 95 using dummy_hcd [ 1166.721237][ T54] usb 7-1: config index 0 descriptor too short (expected 39, got 27) [ 1166.724726][ T54] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1166.728312][ T54] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1166.732402][ T54] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1166.735398][ T54] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1166.737996][ T54] usb 7-1: Product: syz [ 1166.739420][ T54] usb 7-1: Manufacturer: syz [ 1166.741533][ T54] usb 7-1: SerialNumber: syz [ 1166.744854][ T54] usb 7-1: config 0 descriptor?? [ 1166.751675][ T54] hub 7-1:0.0: bad descriptor, ignoring hub [ 1166.753627][ T54] hub 7-1:0.0: probe with driver hub failed with error -5 [ 1166.757550][ T54] usb 7-1: selecting invalid altsetting 0 [ 1166.935142][T17756] libceph: connect (1)[c::]:6789 error -101 [ 1166.937255][T17756] libceph: mon0 (1)[c::]:6789 connect error [ 1166.973075][T18121] ceph: No mds server is up or the cluster is laggy [ 1166.974349][T18126] /dev/nullb0: Can't lookup blockdev [ 1167.845433][ T65] usb 6-1: new high-speed USB device number 73 using dummy_hcd [ 1167.969869][T18142] bpf: Bad value for 'uid' [ 1168.009278][ T65] usb 6-1: Using ep0 maxpacket: 16 [ 1168.014940][ T65] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1168.019442][ T65] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1168.023209][ T65] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 1168.029703][ T65] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1168.032792][ T65] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1168.036034][ T65] usb 6-1: SerialNumber: syz [ 1168.051276][ T65] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -22 [ 1169.369179][ C1] hrtimer: interrupt took 35842 ns [ 1169.590107][ T65] usb 7-1: USB disconnect, device number 95 [ 1170.049406][ T65] usb 7-1: new high-speed USB device number 96 using dummy_hcd [ 1170.199361][ T65] usb 7-1: Using ep0 maxpacket: 16 [ 1170.202737][ T65] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1170.205923][ T65] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1170.210182][ T65] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 1170.215541][ T65] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1170.218489][ T65] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1170.221775][ T65] usb 7-1: SerialNumber: syz [ 1170.228443][ T65] cdc_ether 7-1:1.0: probe with driver cdc_ether failed with error -22 [ 1170.298519][ T65] usb 6-1: USB disconnect, device number 73 [ 1170.681849][T18159] bpf: Bad value for 'uid' [ 1172.636490][ T65] usb 7-1: USB disconnect, device number 96 [ 1176.219867][T11574] usb 6-1: new high-speed USB device number 74 using dummy_hcd [ 1176.249807][ T6043] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 1176.369268][T11574] usb 6-1: Using ep0 maxpacket: 16 [ 1176.373541][T11574] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1176.376829][T11574] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1176.381220][T11574] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 1176.387834][T11574] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1176.390923][T11574] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1176.393412][T11574] usb 6-1: SerialNumber: syz [ 1176.398553][T11574] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -22 [ 1177.858355][T18224] "syz.2.2221" (18224) uses obsolete ecb(arc4) skcipher [ 1177.969780][T18224] bridge0: entered promiscuous mode [ 1178.813776][ T65] usb 6-1: USB disconnect, device number 74 [ 1179.099358][T15871] usb 7-1: new high-speed USB device number 97 using dummy_hcd [ 1179.249654][T15871] usb 7-1: Using ep0 maxpacket: 16 [ 1179.256149][T15871] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1179.261150][T15871] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1179.265812][T15871] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 1179.272790][T15871] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1179.276831][T15871] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1179.280759][T15871] usb 7-1: SerialNumber: syz [ 1179.289513][T15871] cdc_ether 7-1:1.0: probe with driver cdc_ether failed with error -22 [ 1179.309301][ T65] usb 6-1: new high-speed USB device number 75 using dummy_hcd [ 1179.459412][ T65] usb 6-1: Using ep0 maxpacket: 16 [ 1179.464936][ T65] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1179.469482][ T65] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1179.474170][ T65] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 1179.481743][ T65] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1179.486031][ T65] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1179.489723][ T65] usb 6-1: SerialNumber: syz [ 1179.636298][ T65] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -22 [ 1180.058443][T18239] bpf: Bad value for 'uid' [ 1181.702516][ T65] usb 7-1: USB disconnect, device number 97 [ 1181.929791][T15871] usb 6-1: USB disconnect, device number 75 [ 1183.817230][T18264] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2226'. [ 1184.029917][ T6043] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 1184.652808][T18296] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2232'. [ 1185.039372][T17756] usb 6-1: new high-speed USB device number 76 using dummy_hcd [ 1185.189311][T17756] usb 6-1: Using ep0 maxpacket: 16 [ 1185.192625][T17756] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1185.196056][T17756] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1185.199517][T17756] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 1185.204646][T17756] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1185.207593][T17756] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1185.210291][T17756] usb 6-1: SerialNumber: syz [ 1185.218431][T17756] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -22 [ 1185.669276][T15871] usb 7-1: new high-speed USB device number 98 using dummy_hcd [ 1185.869382][T15871] usb 7-1: Using ep0 maxpacket: 16 [ 1185.872754][T15871] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1185.876614][T15871] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1185.881008][T15871] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 1185.886395][T15871] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1185.889411][T15871] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1185.891985][T15871] usb 7-1: SerialNumber: syz [ 1185.897431][T15871] cdc_ether 7-1:1.0: probe with driver cdc_ether failed with error -22 [ 1187.602695][T17756] usb 6-1: USB disconnect, device number 76 [ 1187.997850][ T65] usb 7-1: USB disconnect, device number 98 [ 1188.119515][T15871] usb 6-1: new high-speed USB device number 77 using dummy_hcd [ 1188.269338][T15871] usb 6-1: Using ep0 maxpacket: 16 [ 1188.273834][T15871] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1188.278115][T15871] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1188.282844][T15871] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 1188.290600][T15871] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1188.294485][T15871] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1188.297844][T15871] usb 6-1: SerialNumber: syz [ 1188.306136][T15871] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -22 [ 1190.698134][T15871] usb 6-1: USB disconnect, device number 77 [ 1191.279645][T18344] MPI: mpi too large (124808 bits) [ 1191.985329][T18353] netlink: 'syz.1.2239': attribute type 4 has an invalid length. [ 1192.041278][T18353] netlink: 'syz.1.2239': attribute type 4 has an invalid length. [ 1192.920287][T18365] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2244'. [ 1193.869516][T15871] usb 6-1: new high-speed USB device number 78 using dummy_hcd [ 1194.039411][T15871] usb 6-1: Using ep0 maxpacket: 16 [ 1194.043692][T15871] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1194.047037][T15871] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1194.050760][T15871] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 1194.055698][T15871] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1194.059358][T15871] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1194.062439][T15871] usb 6-1: SerialNumber: syz [ 1194.067077][T15871] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -22 [ 1194.419316][T15871] usb 7-1: new high-speed USB device number 99 using dummy_hcd [ 1194.579370][T15871] usb 7-1: Using ep0 maxpacket: 16 [ 1194.584128][T15871] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1194.588956][T15871] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1194.593630][T15871] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 1194.601024][T15871] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1194.605745][T15871] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1194.609385][T15871] usb 7-1: SerialNumber: syz [ 1194.618008][T15871] cdc_ether 7-1:1.0: probe with driver cdc_ether failed with error -22 [ 1196.588426][T15871] usb 6-1: USB disconnect, device number 78 [ 1197.146215][ T65] usb 7-1: USB disconnect, device number 99 [ 1197.632775][T18410] lo speed is unknown, defaulting to 1000 [ 1197.638687][T18410] lo speed is unknown, defaulting to 1000 [ 1198.014666][T18414] tipc: Enabled bearer , priority 0 [ 1198.265985][T18409] tipc: Resetting bearer [ 1198.669564][T18415] netlink: 'syz.2.2261': attribute type 4 has an invalid length. [ 1198.734632][T18422] netlink: 'syz.2.2261': attribute type 4 has an invalid length. [ 1200.569909][T18409] tipc: Disabling bearer [ 1200.606833][T18437] lo speed is unknown, defaulting to 1000 [ 1200.610140][T18437] lo speed is unknown, defaulting to 1000 [ 1201.182646][T11574] libceph: connect (1)[c::]:6789 error -101 [ 1201.184976][T11574] libceph: mon0 (1)[c::]:6789 connect error [ 1201.319397][ T29] usb 6-1: new high-speed USB device number 79 using dummy_hcd [ 1201.449911][T11574] libceph: connect (1)[c::]:6789 error -101 [ 1201.455703][T11574] libceph: mon0 (1)[c::]:6789 connect error [ 1201.469330][ T29] usb 6-1: Using ep0 maxpacket: 16 [ 1201.477029][ T29] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1201.481973][ T29] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1201.486739][ T29] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 1201.494619][ T29] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1201.498447][ T29] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1201.502067][ T29] usb 6-1: SerialNumber: syz [ 1201.520975][ T29] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -22 [ 1201.971679][T11574] libceph: connect (1)[c::]:6789 error -101 [ 1201.975973][T11574] libceph: mon0 (1)[c::]:6789 connect error [ 1202.222944][T18449] ceph: No mds server is up or the cluster is laggy [ 1203.599984][ T6043] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 1203.727458][ T65] usb 6-1: USB disconnect, device number 79 [ 1205.201892][ T6043] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 1205.789829][T18543] tipc: Enabling of bearer rejected, failed to enable media [ 1206.035144][T18537] lo speed is unknown, defaulting to 1000 [ 1206.042470][T18537] lo speed is unknown, defaulting to 1000 [ 1206.507076][T18550] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1207.075157][ T65] usb 7-1: new high-speed USB device number 100 using dummy_hcd [ 1207.658452][ T65] usb 7-1: Using ep0 maxpacket: 16 [ 1207.662398][ T65] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1207.666148][ T65] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1207.783635][ T65] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 1207.789329][ T65] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1207.792377][ T65] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1207.795099][ T65] usb 7-1: SerialNumber: syz [ 1207.978692][ T65] cdc_ether 7-1:1.0: probe with driver cdc_ether failed with error -22 [ 1208.915284][T18578] netlink: 'syz.3.2282': attribute type 4 has an invalid length. [ 1208.921085][T11574] lo speed is unknown, defaulting to 1000 [ 1208.923000][T11574] syz0: Port: 1 Link DOWN [ 1209.957535][ T65] usb 7-1: USB disconnect, device number 100 [ 1212.920029][ T6043] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 1213.389702][ T6043] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 1213.639875][ T6043] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 1214.559352][T17756] usb 6-1: new high-speed USB device number 80 using dummy_hcd [ 1214.625244][T18644] lo speed is unknown, defaulting to 1000 [ 1214.634727][T18644] lo speed is unknown, defaulting to 1000 [ 1214.729321][T17756] usb 6-1: Using ep0 maxpacket: 16 [ 1214.739293][T17756] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1214.749315][T17756] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1214.754089][T17756] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 1214.769373][T17756] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1214.774591][T17756] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1214.778201][T17756] usb 6-1: SerialNumber: syz [ 1214.792031][T17756] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -22 [ 1217.224319][ T29] usb 6-1: USB disconnect, device number 80 [ 1217.619868][ T6043] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 1218.547897][T18723] lo speed is unknown, defaulting to 1000 [ 1218.557178][T18723] lo speed is unknown, defaulting to 1000 [ 1219.114181][T18722] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1228.871931][T18761] tipc: Enabling of bearer rejected, failed to enable media [ 1228.886221][T18762] netlink: 'syz.0.2306': attribute type 1 has an invalid length. [ 1228.949027][T18768] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2306'. [ 1228.976554][T18762] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1229.223830][T18771] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 1229.226348][T18771] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1229.229892][T18771] vhci_hcd vhci_hcd.0: Device attached [ 1229.270864][T18768] bond0 (unregistering): Released all slaves [ 1229.499423][ T29] usb 40-1: SetAddress Request (54) to port 0 [ 1229.501506][ T29] usb 40-1: new SuperSpeed USB device number 54 using vhci_hcd [ 1229.799299][T18772] vhci_hcd: connection reset by peer [ 1229.801503][T18182] vhci_hcd: stop threads [ 1229.803047][T18182] vhci_hcd: release socket [ 1229.804915][T18182] vhci_hcd: disconnect device [ 1229.999357][ T65] usb 7-1: new high-speed USB device number 101 using dummy_hcd [ 1230.149371][ T65] usb 7-1: Using ep0 maxpacket: 16 [ 1230.153923][ T65] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1230.158578][ T65] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1230.163534][ T65] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 1230.170897][ T65] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1230.176158][ T65] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1230.179989][ T65] usb 7-1: SerialNumber: syz [ 1230.189340][ T65] cdc_ether 7-1:1.0: probe with driver cdc_ether failed with error -22 [ 1230.869843][ T6043] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 1232.582552][ T65] usb 7-1: USB disconnect, device number 101 [ 1232.987986][T18838] tipc: Enabling of bearer rejected, failed to enable media [ 1234.579587][ T29] usb 40-1: device descriptor read/8, error -110 [ 1234.969955][ T29] usb usb40-port1: attempt power cycle [ 1235.550217][ T29] usb usb40-port1: unable to enumerate USB device [ 1241.745415][T18866] Invalid logical block size (53355) [ 1242.783700][ T29] usb 6-1: new high-speed USB device number 81 using dummy_hcd [ 1242.929229][ T29] usb 6-1: Using ep0 maxpacket: 16 [ 1242.932873][ T29] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1242.935983][ T29] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1242.939391][ T29] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 1242.945111][ T29] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1242.947987][ T29] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1242.950500][ T29] usb 6-1: SerialNumber: syz [ 1242.962274][ T29] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -22 [ 1243.062619][T18882] netlink: 84 bytes leftover after parsing attributes in process `syz.2.2324'. [ 1244.969223][ T29] usb 6-1: USB disconnect, device number 81 [ 1244.985953][T18919] tipc: Enabling of bearer rejected, failed to enable media [ 1245.209865][ T6043] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 1246.196633][T18954] netlink: 'syz.3.2336': attribute type 1 has an invalid length. [ 1246.236947][T18954] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1246.278659][T18954] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2336'. [ 1246.392723][T18954] bond3 (unregistering): Released all slaves [ 1246.769710][ T6043] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 1248.462687][T18983] netlink: 84 bytes leftover after parsing attributes in process `syz.1.2340'. [ 1255.941363][T19008] tipc: Enabling of bearer rejected, failed to enable media [ 1256.127360][ T29] Process accounting resumed [ 1256.314587][T19019] overlayfs: missing 'lowerdir' [ 1260.259682][T19062] netlink: 84 bytes leftover after parsing attributes in process `syz.3.2352'. [ 1260.402813][T19074] tipc: Enabling of bearer rejected, failed to enable media [ 1261.269286][ T29] usb 7-1: new high-speed USB device number 102 using dummy_hcd [ 1261.429278][ T29] usb 7-1: Using ep0 maxpacket: 16 [ 1261.433471][ T29] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1261.438241][ T29] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1261.443584][ T29] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 1261.450251][ T29] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1261.454428][ T29] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1261.637348][ T29] usb 7-1: SerialNumber: syz [ 1261.643621][ T29] cdc_ether 7-1:1.0: probe with driver cdc_ether failed with error -22 [ 1263.694354][T19130] tipc: Enabling of bearer rejected, failed to enable media [ 1263.847705][ T29] usb 7-1: USB disconnect, device number 102 [ 1264.231818][ T6043] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 1274.842345][T19228] fuse: Bad value for 'rootmode' [ 1274.897495][T19234] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2382'. [ 1275.023298][T19237] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2379'. [ 1275.027343][T19237] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2379'. [ 1275.099904][T19238] trusted_key: encrypted_key: insufficient parameters specified [ 1275.841077][T19240] overlayfs: failed to resolve './file1': -2 [ 1276.307049][T19246] virtio-fs: tag not found [ 1276.507005][T19257] comedi comedi3: pcl818: I/O port conflict (0x4f23,16) [ 1276.690318][T19255] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2386'. [ 1276.693412][T19255] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2386'. [ 1276.732833][T19255] geneve3: entered promiscuous mode [ 1276.734756][T19255] geneve3: entered allmulticast mode [ 1276.746332][ T1143] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1276.749937][ T1143] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1276.753498][ T1143] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1276.756825][ T1143] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1276.989866][ T6043] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 1278.335408][T19297] Process accounting resumed [ 1278.482485][ T6043] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 1278.763823][T19327] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1278.777093][T19327] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 1278.803664][T19327] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1278.807499][T19327] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 1278.846712][T19327] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1278.848982][T19327] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 1288.146745][T19382] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2399'. [ 1288.193861][ T6043] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 1288.823669][T19381] Process accounting resumed [ 1290.170258][T19339] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 1306.105251][T19487] fuse: Bad value for 'fd' [ 1306.152415][T19486] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2414'. [ 1306.223341][T19490] netlink: 'syz.1.2412': attribute type 33 has an invalid length. [ 1306.226913][T19490] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2412'. [ 1307.325623][T19498] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2415'. [ 1307.379926][T19498] wireguard0: entered promiscuous mode [ 1307.382492][T19498] wireguard0: entered allmulticast mode [ 1307.385745][T19501] ata1.00: invalid multi_count 1 ignored [ 1307.845650][T19509] netlink: 'syz.0.2417': attribute type 10 has an invalid length. [ 1307.850673][T19509] netlink: 'syz.0.2417': attribute type 10 has an invalid length. [ 1307.853177][T19509] netlink: 2 bytes leftover after parsing attributes in process `syz.0.2417'. [ 1308.539611][T19513] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 1308.542048][T19513] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1308.547869][T19513] vhci_hcd vhci_hcd.0: Device attached [ 1309.043241][T19522] vlan0: entered allmulticast mode [ 1309.045815][T19522] bridge_slave_0: entered allmulticast mode [ 1309.204731][ T29] usb 42-1: SetAddress Request (70) to port 0 [ 1309.207497][T19526] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2420'. [ 1309.228503][T19526] netlink: 111 bytes leftover after parsing attributes in process `syz.0.2420'. [ 1309.232773][ T29] usb 42-1: new SuperSpeed USB device number 70 using vhci_hcd [ 1309.915014][T19514] vhci_hcd: connection reset by peer [ 1309.919844][ T1250] vhci_hcd: stop threads [ 1309.921991][ T1250] vhci_hcd: release socket [ 1309.924537][ T1250] vhci_hcd: disconnect device [ 1310.495466][T15871] Process accounting resumed [ 1310.561072][T19552] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2424'. [ 1311.855828][T19563] loop6: detected capacity change from 0 to 524287999 [ 1311.925321][T19488] udevd[19488]: symlink '../../loop6' '/dev/disk/by-diskseq/96.tmp-b7:6' failed: Read-only file system [ 1312.027055][T19563] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2427'. [ 1312.599890][T19488] udevd[19488]: symlink '../../loop6' '/dev/disk/by-diskseq/96.tmp-b7:6' failed: Read-only file system [ 1312.608581][T19488] udevd[19488]: symlink '../../loop6' '/dev/disk/by-diskseq/96.tmp-b7:6' failed: Read-only file system [ 1312.618024][T19488] udevd[19488]: symlink '../../loop6' '/dev/disk/by-diskseq/97.tmp-b7:6' failed: Read-only file system [ 1312.880754][T19579] bridge2: entered promiscuous mode [ 1313.752826][T19605] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2436'. [ 1314.558595][T19613] ip6erspan0: entered allmulticast mode [ 1314.739784][ T29] usb 42-1: device descriptor read/8, error -110 [ 1315.130046][ T29] usb usb42-port1: attempt power cycle [ 1315.741364][ T29] usb usb42-port1: unable to enumerate USB device [ 1316.536130][T19653] bridge0: entered promiscuous mode [ 1316.741634][T19658] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2447'. [ 1316.747010][T19658] netlink: 111 bytes leftover after parsing attributes in process `syz.1.2447'. [ 1319.626757][T19723] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2460'. [ 1319.636092][T19723] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2460'. [ 1319.908188][T19727] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 1319.911372][T19727] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1319.921863][T19727] vhci_hcd vhci_hcd.0: Device attached [ 1320.054650][T19731] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2459'. [ 1320.329373][ T29] usb 40-1: SetAddress Request (58) to port 0 [ 1320.332573][ T29] usb 40-1: new SuperSpeed USB device number 58 using vhci_hcd [ 1321.030338][T19746] MTD: Couldn't look up '/dev/sg0': -15 [ 1321.249356][T19746] vlan0: entered allmulticast mode [ 1321.251253][T19746] bridge_slave_0: entered allmulticast mode [ 1321.441567][T19729] vhci_hcd: connection reset by peer [ 1321.444584][ T1154] vhci_hcd: stop threads [ 1321.447269][ T1154] vhci_hcd: release socket [ 1321.449788][ T1154] vhci_hcd: disconnect device [ 1323.440566][ T40] audit: type=1326 audit(2000000309.132:3358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19778 comm="syz.0.2469" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf70ce579 code=0x0 [ 1325.678476][T19800] lo speed is unknown, defaulting to 1000 [ 1325.681165][T19800] lo speed is unknown, defaulting to 1000 [ 1325.779453][ T29] usb 40-1: device descriptor read/8, error -110 [ 1325.898973][T19816] tipc: Enabled bearer , priority 0 [ 1326.023844][T19812] tipc: Resetting bearer [ 1326.300377][ T29] usb usb40-port1: attempt power cycle [ 1326.881264][ T29] usb usb40-port1: unable to enumerate USB device [ 1327.914489][T19812] tipc: Disabling bearer [ 1331.119861][ T6043] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 1331.755666][T19906] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2493'. [ 1333.252510][T19934] tipc: Enabling of bearer rejected, already enabled [ 1333.422994][T19938] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2498'. [ 1333.469340][ T40] audit: type=1800 audit(2000000319.162:3359): pid=19938 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2498" name="nullb0" dev="tmpfs" ino=2264 res=0 errno=0 [ 1339.299708][ T6043] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 1340.033732][T19987] tipc: Enabling of bearer rejected, already enabled [ 1342.895839][T20019] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2516'. [ 1344.031885][T20045] Driver unsupported XDP return value 0 on prog (id 474) dev N/A, expect packet loss! [ 1344.215804][T20048] tipc: Enabling of bearer rejected, already enabled [ 1346.014947][T20092] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2535'. [ 1346.044463][T20092] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2535'. [ 1346.331436][T20098] tipc: Enabled bearer , priority 0 [ 1346.692530][T20096] tipc: Resetting bearer [ 1346.908566][T20115] netlink: 'syz.0.2541': attribute type 10 has an invalid length. [ 1348.713491][T20096] tipc: Disabling bearer [ 1348.725577][T20114] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1348.735997][T20115] 8021q: adding VLAN 0 to HW filter on device  [ 1348.739491][T20115] : (slave wlan1): Opening slave failed [ 1348.910994][ T6043] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 1350.251417][T20156] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2547'. [ 1350.276417][T20156] wireguard0: entered promiscuous mode [ 1350.279275][T20156] wireguard0: entered allmulticast mode [ 1351.339297][ T29] usb 7-1: new high-speed USB device number 103 using dummy_hcd [ 1351.489425][ T29] usb 7-1: Using ep0 maxpacket: 16 [ 1351.493219][ T29] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1351.496863][ T29] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1351.502003][ T29] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 1351.508215][ T29] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1351.512198][ T29] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1351.515538][ T29] usb 7-1: SerialNumber: syz [ 1351.520302][ T29] cdc_ether 7-1:1.0: probe with driver cdc_ether failed with error -22 [ 1351.577087][T20172] tipc: Enabled bearer , priority 0 [ 1352.179420][T20168] tipc: Resetting bearer [ 1353.815889][T11574] usb 7-1: USB disconnect, device number 103 [ 1354.871125][T20168] tipc: Disabling bearer [ 1355.000788][ T6043] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 1356.077587][T20229] No control pipe specified [ 1356.834027][T20256] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2567'. [ 1365.741247][T20271] overlayfs: failed to clone lowerpath [ 1365.837357][T20277] tipc: Enabling of bearer rejected, already enabled [ 1366.187417][T20290] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2568'. [ 1366.207419][T20290] netlink: 173 bytes leftover after parsing attributes in process `syz.0.2568'. [ 1366.215266][T20290] netlink: 277 bytes leftover after parsing attributes in process `syz.0.2568'. [ 1366.218655][T20290] netlink: 277 bytes leftover after parsing attributes in process `syz.0.2568'. [ 1367.231431][T20306] tipc: Can't bind to reserved service type 0 [ 1367.529744][ T6043] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 1368.478248][T20345] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2580'. [ 1368.717928][T20345] wireguard0: entered promiscuous mode [ 1368.720202][T20345] wireguard0: entered allmulticast mode [ 1369.401299][T20362] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2586'. [ 1369.407568][T20362] netlink: 173 bytes leftover after parsing attributes in process `syz.1.2586'. [ 1369.414803][T20362] netlink: 277 bytes leftover after parsing attributes in process `syz.1.2586'. [ 1369.417782][T20362] netlink: 277 bytes leftover after parsing attributes in process `syz.1.2586'. [ 1380.678300][T20420] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2597'. [ 1380.723844][T20420] wireguard0: entered promiscuous mode [ 1380.725898][T20420] wireguard0: entered allmulticast mode [ 1381.111672][T20427] overlayfs: failed to clone lowerpath [ 1381.625784][T20431] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2599'. [ 1381.631524][T20431] netlink: 173 bytes leftover after parsing attributes in process `syz.3.2599'. [ 1381.637864][T20431] netlink: 277 bytes leftover after parsing attributes in process `syz.3.2599'. [ 1381.641792][T20431] netlink: 277 bytes leftover after parsing attributes in process `syz.3.2599'. [ 1382.808065][T20434] lo speed is unknown, defaulting to 1000 [ 1382.817953][T20434] lo speed is unknown, defaulting to 1000 [ 1384.622084][T20474] netlink: 'syz.0.2607': attribute type 1 has an invalid length. [ 1384.677585][T20476] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2607'. [ 1384.730429][T20474] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1385.431084][T20476] bond0 (unregistering): Released all slaves [ 1386.922333][T20493] tmpfs: Unknown parameter 'mpol' [ 1386.927868][T20493] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2611'. [ 1386.933292][T20493] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2611'. [ 1386.944867][T20493] geneve3: entered promiscuous mode [ 1386.950384][T20493] geneve3: entered allmulticast mode [ 1386.956045][ T1154] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1386.959295][ T1154] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1386.963202][ T1154] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1386.966633][ T1154] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1387.071741][T20502] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 1387.073929][T20502] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1387.076928][T20502] vhci_hcd vhci_hcd.0: Device attached [ 1387.301524][T20501] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2613'. [ 1387.359312][ T29] usb 39-1: new high-speed USB device number 6 using vhci_hcd [ 1387.534633][T20503] vhci_hcd: connection reset by peer [ 1387.539596][ T1154] vhci_hcd: stop threads [ 1387.543438][ T1154] vhci_hcd: release socket [ 1387.545362][ T1154] vhci_hcd: disconnect device [ 1387.584005][T20507] tipc: Enabled bearer , priority 0 [ 1387.732249][ T40] audit: type=1326 audit(2000000373.432:3360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20511 comm="syz.0.2616" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf70ce579 code=0x0 [ 1389.550357][T20539] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 1389.553006][T20539] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1389.557233][T20539] vhci_hcd vhci_hcd.0: Device attached [ 1389.849409][ T65] usb 42-1: SetAddress Request (74) to port 0 [ 1389.851730][ T65] usb 42-1: new SuperSpeed USB device number 74 using vhci_hcd [ 1390.325827][T20540] vhci_hcd: connection reset by peer [ 1390.328713][T18182] vhci_hcd: stop threads [ 1390.331370][T18182] vhci_hcd: release socket [ 1390.333316][T18182] vhci_hcd: disconnect device [ 1391.952864][T20565] lo speed is unknown, defaulting to 1000 [ 1391.956752][T20565] lo speed is unknown, defaulting to 1000 [ 1391.965019][T20566] tipc: Enabling of bearer rejected, already enabled [ 1392.489446][ T29] vhci_hcd: vhci_device speed not set [ 1392.826625][T20595] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2630'. [ 1394.200533][T20618] tipc: Enabled bearer , priority 0 [ 1394.465598][T20623] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2639'. [ 1394.546442][T20616] tipc: Resetting bearer [ 1394.899490][ T65] usb 42-1: device descriptor read/8, error -110 [ 1395.621214][T20625] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2638'. [ 1395.626218][T20625] netlink: 173 bytes leftover after parsing attributes in process `syz.2.2638'. [ 1395.630925][T20625] netlink: 277 bytes leftover after parsing attributes in process `syz.2.2638'. [ 1395.633831][T20625] netlink: 277 bytes leftover after parsing attributes in process `syz.2.2638'. [ 1395.683486][ T65] usb usb42-port1: attempt power cycle [ 1396.260012][ T65] usb usb42-port1: unable to enumerate USB device [ 1397.292045][T20616] tipc: Disabling bearer [ 1397.298604][T20628] tipc: New replicast peer: 255.255.255.255 [ 1397.305446][T20628] tipc: Enabled bearer , priority 10 [ 1397.824215][T20646] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 1397.826296][T20646] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1397.839273][T20646] vhci_hcd vhci_hcd.0: Device attached [ 1398.010076][T20649] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 1398.012457][T20649] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1398.015842][T20649] vhci_hcd vhci_hcd.0: Device attached [ 1398.773097][T20650] vhci_hcd: connection closed [ 1398.773559][ T1250] vhci_hcd: stop threads [ 1398.776911][ T1250] vhci_hcd: release socket [ 1398.778403][ T1250] vhci_hcd: disconnect device [ 1398.859427][ T65] usb 42-1: SetAddress Request (78) to port 0 [ 1398.861456][ T65] usb 42-1: new SuperSpeed USB device number 78 using vhci_hcd [ 1399.045699][T20647] vhci_hcd: connection reset by peer [ 1399.048467][ T13] vhci_hcd: stop threads [ 1399.050879][ T13] vhci_hcd: release socket [ 1399.052780][ T13] vhci_hcd: disconnect device [ 1399.449849][T20665] overlayfs: failed to clone upperpath [ 1400.474478][T20683] overlayfs: failed to clone upperpath [ 1400.786115][T20684] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2650'. [ 1400.815026][T20684] netlink: 173 bytes leftover after parsing attributes in process `syz.2.2650'. [ 1400.879085][T20684] netlink: 277 bytes leftover after parsing attributes in process `syz.2.2650'. [ 1400.882175][T20684] netlink: 277 bytes leftover after parsing attributes in process `syz.2.2650'. [ 1401.389622][T20697] delete_channel: no stack [ 1402.795265][T20706] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2657'. [ 1403.716044][T20728] netlink: 'syz.0.2662': attribute type 4 has an invalid length. [ 1403.925066][ T6043] lo speed is unknown, defaulting to 1000 [ 1403.926851][ T6043] syz2: Port: 1 Link DOWN [ 1403.939338][ T65] usb 42-1: device descriptor read/8, error -110 [ 1403.961031][T20715] lo speed is unknown, defaulting to 1000 [ 1403.963808][T20715] lo speed is unknown, defaulting to 1000 [ 1404.498356][ T65] usb usb42-port1: attempt power cycle [ 1405.221448][ T65] usb usb42-port1: unable to enumerate USB device [ 1405.798483][T20760] lo speed is unknown, defaulting to 1000 [ 1405.803593][T20760] lo speed is unknown, defaulting to 1000 [ 1406.336625][T20775] overlayfs: failed to clone upperpath [ 1406.974481][T20783] tipc: Enabling of bearer rejected, failed to enable media [ 1407.286515][T20790] siw: device registration error -23 [ 1407.400421][T20797] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2668'. [ 1407.413632][T20797] netlink: 173 bytes leftover after parsing attributes in process `syz.2.2668'. [ 1407.423927][T20797] netlink: 277 bytes leftover after parsing attributes in process `syz.2.2668'. [ 1407.428203][T20797] netlink: 277 bytes leftover after parsing attributes in process `syz.2.2668'. [ 1407.503656][T20798] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2676'. [ 1409.144065][T20816] input: syz0 as /devices/virtual/input/input19 [ 1409.686461][T20828] tipc: Enabling of bearer rejected, already enabled [ 1409.973609][T20840] netlink: 'syz.3.2685': attribute type 1 has an invalid length. [ 1410.032917][T20840] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1410.036040][T20842] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2685'. [ 1410.295495][T20842] bond3 (unregistering): Released all slaves [ 1410.429861][ T6043] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 1411.086588][T20854] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2688'. [ 1411.090241][T20854] netlink: 173 bytes leftover after parsing attributes in process `syz.2.2688'. [ 1411.096185][T20854] netlink: 277 bytes leftover after parsing attributes in process `syz.2.2688'. [ 1411.100311][T20854] netlink: 277 bytes leftover after parsing attributes in process `syz.2.2688'. [ 1412.690337][ T6043] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 1414.068349][T20908] tipc: Enabling of bearer rejected, already enabled [ 1414.502855][T20916] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 1414.506008][T20916] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1414.510599][T20916] vhci_hcd vhci_hcd.0: Device attached [ 1414.749898][ T6043] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 1414.953005][ T65] usb 40-1: SetAddress Request (62) to port 0 [ 1415.191578][ T65] usb 40-1: new SuperSpeed USB device number 62 using vhci_hcd [ 1415.391797][T20917] vhci_hcd: connection reset by peer [ 1415.399954][T18182] vhci_hcd: stop threads [ 1415.402188][T18182] vhci_hcd: release socket [ 1415.403925][T18182] vhci_hcd: disconnect device [ 1420.259512][ T65] usb 40-1: device descriptor read/8, error -110 [ 1420.650707][ T65] usb usb40-port1: attempt power cycle [ 1421.210695][ T65] usb usb40-port1: unable to enumerate USB device [ 1427.157148][T20965] lo speed is unknown, defaulting to 1000 [ 1427.159795][T20965] lo speed is unknown, defaulting to 1000 [ 1427.974521][T20990] tipc: Enabling of bearer rejected, failed to enable media [ 1428.279323][ T65] usb 7-1: new high-speed USB device number 104 using dummy_hcd [ 1428.429295][ T65] usb 7-1: Using ep0 maxpacket: 16 [ 1428.433375][ T65] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1428.436896][ T65] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1428.440961][ T65] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 1428.446530][ T65] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1428.449442][ T65] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1428.452024][ T65] usb 7-1: SerialNumber: syz [ 1428.464302][ T65] cdc_ether 7-1:1.0: probe with driver cdc_ether failed with error -22 [ 1430.295502][T21019] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2714'. [ 1430.438399][T21022] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2712'. [ 1430.732194][ T65] usb 7-1: USB disconnect, device number 104 [ 1432.148334][T21029] ceph: No mds server is up or the cluster is laggy [ 1432.154538][ T6043] libceph: connect (1)[c::]:6789 error -101 [ 1432.159388][ T6043] libceph: mon0 (1)[c::]:6789 connect error [ 1432.894649][T21049] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 1432.897601][T21049] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1432.902742][T21049] vhci_hcd vhci_hcd.0: Device attached [ 1433.352464][ T65] usb 40-1: SetAddress Request (66) to port 0 [ 1433.354877][ T65] usb 40-1: new SuperSpeed USB device number 66 using vhci_hcd [ 1433.876363][T21050] vhci_hcd: connection reset by peer [ 1433.878419][ T13] vhci_hcd: stop threads [ 1433.880449][ T13] vhci_hcd: release socket [ 1433.882038][ T13] vhci_hcd: disconnect device [ 1435.005341][T21079] input: syz0 as /devices/virtual/input/input20 [ 1435.869788][ T6043] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 1436.042515][T21092] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2726'. [ 1437.821304][T21149] delete_channel: no stack [ 1438.419403][ T65] usb 40-1: device descriptor read/8, error -110 [ 1438.810343][ T65] usb usb40-port1: attempt power cycle [ 1439.369886][ T65] usb usb40-port1: unable to enumerate USB device [ 1453.771511][T21178] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2741'. [ 1453.841248][T21180] comedi comedi3: dt2801: I/O port conflict (0x4f27,2) [ 1453.978410][ T65] libceph: connect (1)[c::]:6789 error -101 [ 1453.982285][ T65] libceph: mon0 (1)[c::]:6789 connect error [ 1454.130732][T21182] ceph: No mds server is up or the cluster is laggy [ 1454.142354][T21187] /dev/nullb0: Can't lookup blockdev [ 1454.266504][ T65] libceph: connect (1)[c::]:6789 error -101 [ 1454.288742][ T65] libceph: mon0 (1)[c::]:6789 connect error [ 1454.689104][T21185] udevd[21185]: symlink '../../loop4' '/dev/disk/by-diskseq/98.tmp-b7:4' failed: Read-only file system [ 1454.751212][T21196] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2744'. [ 1455.219675][T21208] can0: slcan on ttyS3. [ 1455.306630][T21196] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2744'. [ 1455.330609][T21213] netlink: 'syz.0.2743': attribute type 4 has an invalid length. [ 1455.341828][T21208] can0 (unregistered): slcan off ttyS3. [ 1456.252351][ T13] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1456.352915][ T13] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1456.503888][ T13] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1456.553104][T10665] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1456.557733][T10665] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1456.562362][T10665] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1456.567021][T10665] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1456.575622][T10665] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1456.626571][ T13] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1456.646641][T21229] lo speed is unknown, defaulting to 1000 [ 1456.652471][T21229] lo speed is unknown, defaulting to 1000 [ 1457.169483][ T13] bond2 (unregistering): (slave geneve2): Releasing active interface [ 1457.611134][ T13] bond0 (unregistering): Released all slaves [ 1457.870699][ T13] bond1 (unregistering): Released all slaves [ 1457.880218][ T13] bond2 (unregistering): Released all slaves [ 1457.887365][ T13] bond3 (unregistering): Released all slaves [ 1457.903451][T21229] chnl_net:caif_netlink_parms(): no params data found [ 1458.050016][T21251] tipc: Enabled bearer , priority 0 [ 1458.068076][ T13] tipc: Disabling bearer [ 1458.072942][ T13] tipc: Left network mode [ 1458.119068][ T13] IPVS: stopping master sync thread 13757 ... [ 1458.181178][T21229] bridge0: port 1(bridge_slave_0) entered blocking state [ 1458.183752][T21229] bridge0: port 1(bridge_slave_0) entered disabled state [ 1458.186151][T21229] bridge_slave_0: entered allmulticast mode [ 1458.191957][T21229] bridge_slave_0: entered promiscuous mode [ 1458.195530][T21229] bridge0: port 2(bridge_slave_1) entered blocking state [ 1458.198340][T21229] bridge0: port 2(bridge_slave_1) entered disabled state [ 1458.201592][T21229] bridge_slave_1: entered allmulticast mode [ 1458.205385][T21229] bridge_slave_1: entered promiscuous mode [ 1458.247432][T21229] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1458.252713][T21229] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1458.331000][T21229] team0: Port device team_slave_0 added [ 1458.364171][T21229] team0: Port device team_slave_1 added [ 1458.368275][T21269] lo speed is unknown, defaulting to 1000 [ 1458.428127][T21269] lo speed is unknown, defaulting to 1000 [ 1458.468121][T21229] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1458.470837][T21229] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1458.480869][T21229] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1458.486751][T21229] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1458.489106][T21229] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1458.500867][T21229] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1458.667694][T21249] tipc: Resetting bearer [ 1458.669889][T10665] Bluetooth: hci3: command tx timeout [ 1460.740102][T10665] Bluetooth: hci3: command tx timeout [ 1460.893280][T21292] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2757'. [ 1461.252718][T21249] tipc: Disabling bearer [ 1461.263267][T21229] hsr_slave_0: entered promiscuous mode [ 1461.265768][T21229] hsr_slave_1: entered promiscuous mode [ 1461.271617][T21229] debugfs: 'hsr0' already exists in 'hsr' [ 1461.274127][T21229] Cannot create hsr debugfs directory [ 1461.691003][T21229] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1461.712532][T21229] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1461.724698][T21229] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1461.737453][T21229] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1461.871593][T21229] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1461.894665][T21229] 8021q: adding VLAN 0 to HW filter on device team0 [ 1461.925647][ T1154] bridge0: port 1(bridge_slave_0) entered blocking state [ 1461.929599][ T1154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1462.102535][ T13] hsr_slave_0: left promiscuous mode [ 1462.105898][ T13] hsr_slave_1: left promiscuous mode [ 1462.819481][T10665] Bluetooth: hci3: command tx timeout [ 1464.899802][T10665] Bluetooth: hci3: command tx timeout [ 1466.151048][ T1154] bridge0: port 2(bridge_slave_1) entered blocking state [ 1466.154118][ T1154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1466.398784][T21229] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1466.546033][ T13] IPVS: stop unused estimator thread 0... [ 1466.687468][T21229] veth0_vlan: entered promiscuous mode [ 1466.698170][T21229] veth1_vlan: entered promiscuous mode [ 1466.727400][T21229] veth0_macvtap: entered promiscuous mode [ 1466.734437][T21229] veth1_macvtap: entered promiscuous mode [ 1466.754270][T21229] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1466.767714][T21229] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1466.777950][T18182] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1466.783084][T18182] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1466.786419][T18182] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1466.790634][T18182] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1466.838222][T18182] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1466.841640][T18182] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1466.863184][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1466.866153][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1466.917256][T21205] udevd[21205]: symlink '../../loop4' '/dev/disk/by-diskseq/98.tmp-b7:4' failed: Read-only file system [ 1466.932315][T21205] udevd[21205]: symlink '../../loop4' '/dev/disk/by-diskseq/98.tmp-b7:4' failed: Read-only file system [ 1466.944462][T21205] udevd[21205]: symlink '../../loop4' '/dev/disk/by-diskseq/99.tmp-b7:4' failed: Read-only file system [ 1468.001025][T21205] udevd[21205]: symlink '../../loop4' '/dev/disk/by-diskseq/99.tmp-b7:4' failed: Read-only file system [ 1468.051888][T21205] udevd[21205]: symlink '../../loop4' '/dev/disk/by-diskseq/99.tmp-b7:4' failed: Read-only file system [ 1468.776874][ T40] audit: type=1800 audit(2000000454.472:3361): pid=21408 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2773" name="nullb0" dev="tmpfs" ino=2050 res=0 errno=0 [ 1468.872381][T21410] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2774'. [ 1470.045538][T21205] udevd[21205]: symlink '../../loop4' '/dev/disk/by-diskseq/99.tmp-b7:4' failed: Read-only file system [ 1470.074886][T21418] fuse: Unknown parameter 'roXhF'xRVZ0000t¤æ' [ 1470.084484][T21418] binder: Unknown parameter '^:$/]u[' [ 1470.358406][T21424] delete_channel: no stack [ 1471.038887][T21205] udevd[21205]: symlink '../../loop4' '/dev/disk/by-diskseq/99.tmp-b7:4' failed: Read-only file system [ 1471.457799][T21205] udevd[21205]: symlink '../../loop4' '/dev/disk/by-diskseq/99.tmp-b7:4' failed: Read-only file system [ 1471.512313][T21205] udevd[21205]: symlink '../../loop4' '/dev/disk/by-diskseq/99.tmp-b7:4' failed: Read-only file system [ 1471.744302][T21452] tipc: Enabling of bearer rejected, already enabled [ 1471.759721][ T6043] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 1471.808584][T21457] lo speed is unknown, defaulting to 1000 [ 1471.812895][T21457] lo speed is unknown, defaulting to 1000 [ 1472.890948][T21481] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2791'. [ 1474.849907][T21504] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2794'. [ 1474.864714][T21504] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1475.042720][ T29] libceph: connect (1)[c::]:6789 error -101 [ 1475.046371][ T29] libceph: mon0 (1)[c::]:6789 connect error [ 1475.075846][T21506] ceph: No mds server is up or the cluster is laggy [ 1475.541845][T21205] udevd[21205]: symlink '../../loop4' '/dev/disk/by-diskseq/99.tmp-b7:4' failed: Read-only file system [ 1475.707495][T21518] tipc: Enabled bearer , priority 0 [ 1475.976725][T21515] tipc: Resetting bearer [ 1476.560873][T21205] udevd[21205]: symlink '../../loop4' '/dev/disk/by-diskseq/99.tmp-b7:4' failed: Read-only file system [ 1477.050631][T21533] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2802'. [ 1477.263518][T21205] udevd[21205]: symlink '../../loop4' '/dev/disk/by-diskseq/99.tmp-b7:4' failed: Read-only file system [ 1478.189361][T21205] udevd[21205]: symlink '../../loop4' '/dev/disk/by-diskseq/99.tmp-b7:4' failed: Read-only file system [ 1479.121696][T21205] udevd[21205]: symlink '../../loop4' '/dev/disk/by-diskseq/99.tmp-b7:4' failed: Read-only file system [ 1479.133242][T21552] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2807'. [ 1479.151537][T21515] tipc: Disabling bearer [ 1481.149965][ T54] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 1481.434982][T21205] udevd[21205]: symlink '../../loop4' '/dev/disk/by-diskseq/99.tmp-b7:4' failed: Read-only file system [ 1481.779827][ T54] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 1482.457388][T21205] udevd[21205]: symlink '../../loop4' '/dev/disk/by-diskseq/99.tmp-b7:4' failed: Read-only file system [ 1482.763554][T21624] tipc: Enabling of bearer rejected, already enabled [ 1482.806484][T21626] vxfs: WRONG superblock magic 00000000 at 1 [ 1482.806660][T21626] vxfs: WRONG superblock magic 00000000 at 8 [ 1482.806675][T21626] vxfs: can't find superblock. [ 1482.989359][T21607] ceph: No mds server is up or the cluster is laggy [ 1483.068343][T21059] libceph: connect (1)[c::]:6789 error -101 [ 1483.068454][T21059] libceph: mon0 (1)[c::]:6789 connect error [ 1483.470697][ T6012] libceph: connect (1)[c::]:6789 error -101 [ 1483.470788][ T6012] libceph: mon0 (1)[c::]:6789 connect error [ 1485.124776][T21205] udevd[21205]: symlink '../../loop4' '/dev/disk/by-diskseq/99.tmp-b7:4' failed: Read-only file system [ 1486.008688][T21205] udevd[21205]: symlink '../../loop4' '/dev/disk/by-diskseq/99.tmp-b7:4' failed: Read-only file system [ 1486.309843][ T54] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 1486.451994][T21671] tipc: Enabling of bearer rejected, failed to enable media [ 1486.922129][T21205] udevd[21205]: symlink '../../loop4' '/dev/disk/by-diskseq/99.tmp-b7:4' failed: Read-only file system [ 1488.032129][T21205] udevd[21205]: symlink '../../loop4' '/dev/disk/by-diskseq/99.tmp-b7:4' failed: Read-only file system [ 1488.560085][T21724] ªªªªªª: renamed from wg2 [ 1488.597726][T21727] tipc: Enabling of bearer rejected, failed to enable media [ 1490.496178][T21742] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2836'. [ 1490.499894][T21742] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2836'. [ 1490.503938][T21742] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2836'. [ 1491.323327][T21205] udevd[21205]: symlink '../../loop4' '/dev/disk/by-diskseq/99.tmp-b7:4' failed: Read-only file system [ 1491.351166][T21757] tipc: Enabling of bearer rejected, failed to enable media [ 1491.685667][T21767] ceph: No mds server is up or the cluster is laggy [ 1491.705860][T21770] vxfs: WRONG superblock magic 00000000 at 1 [ 1491.711063][T21770] vxfs: WRONG superblock magic 00000000 at 8 [ 1491.714730][T21770] vxfs: can't find superblock. [ 1491.759897][ T6043] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 1491.824305][ T29] libceph: connect (1)[c::]:6789 error -101 [ 1491.826609][ T29] libceph: mon0 (1)[c::]:6789 connect error [ 1492.264139][T21205] udevd[21205]: symlink '../../loop4' '/dev/disk/by-diskseq/99.tmp-b7:4' failed: Read-only file system [ 1493.259480][T21205] udevd[21205]: symlink '../../loop4' '/dev/disk/by-diskseq/99.tmp-b7:4' failed: Read-only file system [ 1494.345601][T21205] udevd[21205]: symlink '../../loop4' '/dev/disk/by-diskseq/99.tmp-b7:4' failed: Read-only file system [ 1495.089075][T21811] tipc: Enabling of bearer rejected, failed to enable media [ 1495.648207][T21831] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2854'. [ 1495.912261][T21831] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2854'. [ 1497.453286][T21850] netlink: 'syz.3.2858': attribute type 10 has an invalid length. [ 1497.460474][T21850] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2858'. [ 1497.819525][T21835] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1497.827104][T21850] dummy0: entered promiscuous mode [ 1497.830475][T21850] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 1498.071959][T21858] udevd[21858]: symlink '../../loop4' '/dev/disk/by-diskseq/99.tmp-b7:4' failed: Read-only file system [ 1498.084987][T21835] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1498.217111][T21862] tipc: Started in network mode [ 1498.219745][T21862] tipc: Node identity fac6a2dac391, cluster identity 4711 [ 1498.223329][T21862] tipc: Enabled bearer , priority 0 [ 1498.312218][T21863] lo speed is unknown, defaulting to 1000 [ 1498.317696][T21863] lo speed is unknown, defaulting to 1000 [ 1498.475199][T21859] tipc: Resetting bearer [ 1498.811236][T21861] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1499.309329][T21059] tipc: Node number set to 962044634 [ 1500.144917][T21882] overlayfs: failed to clone upperpath [ 1500.487133][T21859] tipc: Disabling bearer [ 1500.493298][T21835] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1500.589847][T21835] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1500.637211][T21858] udevd[21858]: symlink '../../loop4' '/dev/disk/by-diskseq/99.tmp-b7:4' failed: Read-only file system [ 1500.686426][ T13] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1500.698128][ T1154] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1500.724113][ T1154] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1500.745782][ T1154] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1501.138239][ T29] libceph: connect (1)[c::]:6789 error -101 [ 1501.180845][T21896] ceph: No mds server is up or the cluster is laggy [ 1501.190900][T21900] /dev/nullb0: Can't lookup blockdev [ 1501.199793][ T29] libceph: mon0 (1)[c::]:6789 connect error [ 1501.391908][T21858] udevd[21858]: symlink '../../loop4' '/dev/disk/by-diskseq/99.tmp-b7:4' failed: Read-only file system [ 1501.444257][T21858] udevd[21858]: symlink '../../loop4' '/dev/disk/by-diskseq/99.tmp-b7:4' failed: Read-only file system [ 1501.848974][T21912] input: syz0 as /devices/virtual/input/input21 [ 1502.107095][T21919] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2871'. [ 1502.539707][T21858] udevd[21858]: symlink '../../loop4' '/dev/disk/by-diskseq/99.tmp-b7:4' failed: Read-only file system [ 1502.742241][T21858] udevd[21858]: symlink '../../loop4' '/dev/disk/by-diskseq/99.tmp-b7:4' failed: Read-only file system [ 1502.791934][T21858] udevd[21858]: symlink '../../loop4' '/dev/disk/by-diskseq/99.tmp-b7:4' failed: Read-only file system [ 1503.017817][ T29] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 1503.021722][ T29] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 1503.024635][ T29] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 1503.027231][ T29] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 1503.030608][ T29] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x7 [ 1503.034039][ T29] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 1503.037333][ T29] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 1503.040274][ T29] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x7 [ 1503.042892][ T29] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 1503.045564][ T29] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 1503.063615][ T29] hid-generic 0000:007F:FFFFFFFE.0002: hidraw1: HID v0.00 Device [syz1] on syz0 [ 1503.389604][T21949] input: syz0 as /devices/virtual/input/input22 [ 1503.581259][T21957] /dev/nullb0: Can't lookup blockdev [ 1503.780540][T21956] ceph: No mds server is up or the cluster is laggy [ 1503.782988][ T29] libceph: connect (1)[c::]:6789 error -101 [ 1503.794438][ T29] libceph: mon0 (1)[c::]:6789 connect error [ 1504.079853][T21954] udevd[21954]: symlink '../../loop4' '/dev/disk/by-diskseq/99.tmp-b7:4' failed: Read-only file system [ 1504.132780][T21964] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2882'. [ 1504.159084][T21964] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 1504.161712][T21964] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1504.165373][T21964] vhci_hcd vhci_hcd.0: Device attached [ 1504.419358][T21059] usb 45-1: new high-speed USB device number 2 using vhci_hcd [ 1504.912217][T21967] vhci_hcd: connection reset by peer [ 1504.917565][ T1154] vhci_hcd: stop threads [ 1504.918936][ T1154] vhci_hcd: release socket [ 1504.922906][ T1154] vhci_hcd: disconnect device [ 1505.515074][T21954] udevd[21954]: symlink '../../loop4' '/dev/disk/by-diskseq/99.tmp-b7:4' failed: Read-only file system [ 1507.689818][ T6043] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 1507.703679][T21954] udevd[21954]: symlink '../../loop4' '/dev/disk/by-diskseq/99.tmp-b7:4' failed: Read-only file system [ 1507.887727][T22023] netlink: 'syz.3.2893': attribute type 4 has an invalid length. [ 1508.999908][T22020] input: syz0 as /devices/virtual/input/input23 [ 1509.029350][ T40] audit: type=1800 audit(2000000494.712:3362): pid=22008 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2894" name="nullb0" dev="tmpfs" ino=2264 res=0 errno=0 [ 1509.279666][T21954] udevd[21954]: symlink '../../loop4' '/dev/disk/by-diskseq/99.tmp-b7:4' failed: Read-only file system [ 1509.569297][T21059] vhci_hcd: vhci_device speed not set [ 1510.196875][T22057] input: syz0 as /devices/virtual/input/input24 [ 1510.433791][T21954] udevd[21954]: symlink '../../loop4' '/dev/disk/by-diskseq/99.tmp-b7:4' failed: Read-only file system [ 1519.388678][T21059] usb 6-1: new high-speed USB device number 82 using dummy_hcd [ 1519.542180][T21059] usb 6-1: config index 0 descriptor too short (expected 39, got 27) [ 1519.546348][T21059] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1519.550907][T21059] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1519.558120][T21059] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1519.562457][T21059] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1519.565933][T21059] usb 6-1: Product: syz [ 1519.567750][T21059] usb 6-1: Manufacturer: syz [ 1519.570157][T21059] usb 6-1: SerialNumber: syz [ 1519.574930][T21059] usb 6-1: config 0 descriptor?? [ 1519.580101][T21059] hub 6-1:0.0: bad descriptor, ignoring hub [ 1519.582637][T21059] hub 6-1:0.0: probe with driver hub failed with error -5 [ 1519.588949][T21059] usb 6-1: selecting invalid altsetting 0 [ 1520.596477][T22115] IPVS: Error connecting to the multicast addr [ 1521.273122][T22107] udevd[22107]: symlink '../../loop4' '/dev/disk/by-diskseq/99.tmp-b7:4' failed: Read-only file system [ 1522.249562][ T29] usb 6-1: USB disconnect, device number 82 [ 1522.252468][T22107] udevd[22107]: symlink '../../loop4' '/dev/disk/by-diskseq/99.tmp-b7:4' failed: Read-only file system [ 1522.614968][ T6043] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 1523.551726][T22107] udevd[22107]: symlink '../../loop4' '/dev/disk/by-diskseq/99.tmp-b7:4' failed: Read-only file system [ 1524.743254][T22107] udevd[22107]: symlink '../../loop4' '/dev/disk/by-diskseq/99.tmp-b7:4' failed: Read-only file system [ 1524.870696][T22107] udevd[22107]: symlink '../../loop4' '/dev/disk/by-diskseq/99.tmp-b7:4' failed: Read-only file system [ 1533.521268][T22228] : Can't lookup blockdev [ 1533.931243][T22232] binder: 22216:22232 ioctl c00c6211 0 returned -14 [ 1534.958511][T22247] udevd[22247]: symlink '../../loop4' '/dev/disk/by-diskseq/99.tmp-b7:4' failed: Read-only file system [ 1535.957908][T22247] udevd[22247]: symlink '../../loop4' '/dev/disk/by-diskseq/99.tmp-b7:4' failed: Read-only file system [ 1537.475812][T22247] udevd[22247]: symlink '../../loop4' '/dev/disk/by-diskseq/99.tmp-b7:4' failed: Read-only file system [ 1537.684092][T22247] udevd[22247]: symlink '../../loop4' '/dev/disk/by-diskseq/99.tmp-b7:4' failed: Read-only file system [ 1538.578075][T22247] udevd[22247]: symlink '../../loop4' '/dev/disk/by-diskseq/99.tmp-b7:4' failed: Read-only file system [ 1538.658630][T22299] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2942'. [ 1538.738329][T10665] Bluetooth: hci3: hcon ffff8880704ac000 sent 1 < count 7 [ 1538.745038][T10665] Bluetooth: hci3: hcon ffff8880704ac000 sent 0 < count 64 [ 1539.185014][T22247] udevd[22247]: symlink '../../loop4' '/dev/disk/by-diskseq/99.tmp-b7:4' failed: Read-only file system [ 1539.224755][T22247] udevd[22247]: symlink '../../loop4' '/dev/disk/by-diskseq/99.tmp-b7:4' failed: Read-only file system [ 1540.223148][T22329] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2950'. [ 1540.577346][T22333] tipc: Enabling of bearer rejected, failed to enable media [ 1541.230665][T22247] udevd[22247]: symlink '../../loop4' '/dev/disk/by-diskseq/99.tmp-b7:4' failed: Read-only file system [ 1541.507634][T22349] siw: device registration error -23 [ 1542.121654][T22350] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2955'. [ 1542.668126][T22247] udevd[22247]: symlink '../../loop4' '/dev/disk/by-diskseq/99.tmp-b7:4' failed: Read-only file system [ 1542.800881][T22369] tipc: Enabled bearer , priority 0 [ 1543.159981][T22365] tipc: Resetting bearer [ 1543.283234][T22376] input: syz0 as /devices/virtual/input/input25 [ 1543.551427][T19621] libceph: connect (1)[c::]:6789 error -101 [ 1543.553459][T19621] libceph: mon0 (1)[c::]:6789 connect error [ 1543.809599][T19621] libceph: connect (1)[c::]:6789 error -101 [ 1543.811928][T19621] libceph: mon0 (1)[c::]:6789 connect error [ 1544.357327][T15871] libceph: connect (1)[c::]:6789 error -101 [ 1544.359983][T15871] libceph: mon0 (1)[c::]:6789 connect error [ 1544.512509][T22381] ceph: No mds server is up or the cluster is laggy [ 1545.637121][T22365] tipc: Disabling bearer [ 1545.736089][T22379] udevd[22379]: symlink '../../loop4' '/dev/disk/by-diskseq/99.tmp-b7:4' failed: Read-only file system [ 1545.957100][T22415] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2967'. [ 1546.463009][T22423] lo speed is unknown, defaulting to 1000 [ 1546.465817][T22423] lo speed is unknown, defaulting to 1000 [ 1547.071399][T22379] udevd[22379]: symlink '../../loop4' '/dev/disk/by-diskseq/99.tmp-b7:4' failed: Read-only file system [ 1547.407696][T22445] tipc: Enabled bearer , priority 0 [ 1547.446859][T22447] input: syz0 as /devices/virtual/input/input26 [ 1547.576187][ T13] tipc: Resetting bearer [ 1548.086256][T22379] udevd[22379]: symlink '../../loop4' '/dev/disk/by-diskseq/99.tmp-b7:4' failed: Read-only file system [ 1548.098928][T22444] tipc: Resetting bearer [ 1549.067180][T22379] udevd[22379]: symlink '../../loop4' '/dev/disk/by-diskseq/99.tmp-b7:4' failed: Read-only file system [ 1549.348599][T11574] libceph: connect (1)[c::]:6789 error -101 [ 1549.351344][T11574] libceph: mon0 (1)[c::]:6789 connect error [ 1549.617304][T11574] libceph: connect (1)[c::]:6789 error -101 [ 1549.620713][T11574] libceph: mon0 (1)[c::]:6789 connect error [ 1549.959300][T22467] ceph: No mds server is up or the cluster is laggy [ 1550.710636][T22444] tipc: Disabling bearer [ 1550.752176][T22379] udevd[22379]: symlink '../../loop4' '/dev/disk/by-diskseq/99.tmp-b7:4' failed: Read-only file system [ 1550.914629][T22476] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2980'. [ 1552.248795][T22379] udevd[22379]: symlink '../../loop4' '/dev/disk/by-diskseq/99.tmp-b7:4' failed: Read-only file system [ 1553.074735][T22504] input: syz0 as /devices/virtual/input/input27 [ 1553.533544][T22379] udevd[22379]: symlink '../../loop4' '/dev/disk/by-diskseq/99.tmp-b7:4' failed: Read-only file system [ 1554.002446][T22519] wireguard0: entered promiscuous mode [ 1554.009370][T22519] wireguard0: entered allmulticast mode [ 1554.115118][T22520] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2986'. [ 1554.124626][T22520] netlink: 'syz.4.2986': attribute type 5 has an invalid length. [ 1554.135388][T22520] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2986'. [ 1554.169615][T22520] geneve2: entered promiscuous mode [ 1554.188899][T22520] geneve2: entered allmulticast mode [ 1554.199871][ T12] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 1554.214044][ T12] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 1554.226801][ T12] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 1554.237702][ T12] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 1554.504630][T22527] tipc: Enabling of bearer rejected, failed to enable media [ 1554.790893][T22379] udevd[22379]: symlink '../../loop4' '/dev/disk/by-diskseq/99.tmp-b7:4' failed: Read-only file system [ 1555.108099][T22545] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1555.207989][T22545] ================================================================== [ 1555.211339][T22545] BUG: KASAN: slab-out-of-bounds in __cpa_addr+0x1d3/0x220 [ 1555.214528][T22545] Read of size 8 at addr ffff88805e166808 by task syz.4.2994/22545 [ 1555.219485][T22545] [ 1555.221784][T22545] CPU: 2 UID: 0 PID: 22545 Comm: syz.4.2994 Not tainted syzkaller #0 PREEMPT(full) [ 1555.221811][T22545] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1555.221823][T22545] Call Trace: [ 1555.221833][T22545] [ 1555.221841][T22545] dump_stack_lvl+0x116/0x1f0 [ 1555.221870][T22545] print_report+0xcd/0x630 [ 1555.221887][T22545] ? __virt_addr_valid+0x81/0x610 [ 1555.221905][T22545] ? __phys_addr+0xe8/0x180 [ 1555.221921][T22545] ? __cpa_addr+0x1d3/0x220 [ 1555.221931][T22545] kasan_report+0xe0/0x110 [ 1555.221946][T22545] ? __cpa_addr+0x1d3/0x220 [ 1555.221958][T22545] __cpa_addr+0x1d3/0x220 [ 1555.221969][T22545] cpa_flush+0x28b/0x8a0 [ 1555.221981][T22545] ? __pfx_cpa_flush+0x10/0x10 [ 1555.221995][T22545] ? pgprot2cachemode+0x9a/0x130 [ 1555.222012][T22545] ? __pfx_pgprot2cachemode+0x10/0x10 [ 1555.222027][T22545] ? drm_gem_get_pages+0x6a0/0xa10 [ 1555.222045][T22545] ? __bpf_trace_lock+0x70/0xf0 [ 1555.222064][T22545] change_page_attr_set_clr+0x34e/0x4a0 [ 1555.222078][T22545] ? __pfx_change_page_attr_set_clr+0x10/0x10 [ 1555.222096][T22545] _set_pages_array+0x1ab/0x2c0 [ 1555.222109][T22545] drm_gem_shmem_get_pages_locked+0x384/0x490 [ 1555.222125][T22545] ? __pfx_drm_gem_shmem_get_pages_locked+0x10/0x10 [ 1555.222140][T22545] ? __pfx___might_resched+0x10/0x10 [ 1555.222155][T22545] drm_gem_shmem_mmap+0xc9/0x550 [ 1555.222169][T22545] ? __pfx_drm_gem_shmem_object_mmap+0x10/0x10 [ 1555.222183][T22545] drm_gem_mmap_obj+0x1b5/0x560 [ 1555.222199][T22545] drm_gem_mmap+0x40b/0x620 [ 1555.222214][T22545] ? __pfx_drm_gem_mmap+0x10/0x10 [ 1555.222229][T22545] ? lockdep_init_map_type+0x5c/0x280 [ 1555.222247][T22545] __mmap_region+0x1306/0x27a0 [ 1555.222261][T22545] ? __pfx___mmap_region+0x10/0x10 [ 1555.222272][T22545] ? lockdep_hardirqs_on+0x7c/0x110 [ 1555.222286][T22545] ? finish_task_switch.isra.0+0x221/0xc10 [ 1555.222300][T22545] ? rcu_is_watching+0x12/0xc0 [ 1555.222315][T22545] ? trace_sched_exit_tp+0xd1/0x120 [ 1555.222326][T22545] ? __schedule+0x11a3/0x5de0 [ 1555.222352][T22545] ? __lock_acquire+0xb97/0x1ce0 [ 1555.222370][T22545] mmap_region+0x1ab/0x3f0 [ 1555.222381][T22545] ? __get_unmapped_area+0x267/0x440 [ 1555.222397][T22545] do_mmap+0xa3e/0x1210 [ 1555.222413][T22545] ? __pfx_do_mmap+0x10/0x10 [ 1555.222427][T22545] ? __pfx_down_write_killable+0x10/0x10 [ 1555.222443][T22545] vm_mmap_pgoff+0x29e/0x470 [ 1555.222465][T22545] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1555.222483][T22545] ? __fget_files+0x20e/0x3c0 [ 1555.222497][T22545] ksys_mmap_pgoff+0x32c/0x5c0 [ 1555.222511][T22545] ? __ia32_sys_mmap_pgoff+0x11/0x1b0 [ 1555.222525][T22545] __do_fast_syscall_32+0x7c/0x300 [ 1555.222540][T22545] do_fast_syscall_32+0x32/0x80 [ 1555.222553][T22545] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1555.222568][T22545] RIP: 0023:0xf704e579 [ 1555.222578][T22545] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1555.222589][T22545] RSP: 002b:00000000f4fd955c EFLAGS: 00000296 ORIG_RAX: 00000000000000c0 [ 1555.222600][T22545] RAX: ffffffffffffffda RBX: 0000000080001000 RCX: 0000000000004000 [ 1555.222607][T22545] RDX: 0000000000000004 RSI: 0000000000000011 RDI: 000000000000000a [ 1555.222616][T22545] RBP: 0000000000100000 R08: 0000000000000000 R09: 0000000000000000 [ 1555.222623][T22545] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 1555.222630][T22545] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1555.222640][T22545] [ 1555.222644][T22545] [ 1555.349359][T22545] The buggy address belongs to the physical page: [ 1555.351473][T22545] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88805e167a80 pfn:0x5e164 [ 1555.355293][T22545] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1555.358266][T22545] flags: 0x4fff00000000040(head|node=1|zone=1|lastcpupid=0x7ff) [ 1555.360619][T22545] page_type: f8(unknown) [ 1555.361953][T22545] raw: 04fff00000000040 0000000000000000 dead000000000122 0000000000000000 [ 1555.364618][T22545] raw: ffff88805e167a80 0000000000000000 00000000f8000000 0000000000000000 [ 1555.367254][T22545] head: 04fff00000000040 0000000000000000 dead000000000122 0000000000000000 [ 1555.370100][T22545] head: ffff88805e167a80 0000000000000000 00000000f8000000 0000000000000000 [ 1555.373093][T22545] head: 04fff00000000002 ffffea0001785901 00000000ffffffff 00000000ffffffff [ 1555.376772][T22545] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 1555.380012][T22545] page dumped because: kasan: bad access detected [ 1555.382051][T22545] page_owner tracks the page as allocated [ 1555.383816][T22545] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x428c0(GFP_NOWAIT|__GFP_IO|__GFP_FS|__GFP_COMP), pid 22545, tgid 22538 (syz.4.2994), ts 1555130457948, free_ts 1542874340420 [ 1555.389536][T22545] post_alloc_hook+0x1c0/0x230 [ 1555.391049][T22545] get_page_from_freelist+0x10a3/0x3a30 [ 1555.392792][T22545] __alloc_frozen_pages_noprof+0x25f/0x2470 [ 1555.394632][T22545] alloc_pages_mpol+0x1fb/0x550 [ 1555.396306][T22545] ___kmalloc_large_node+0xed/0x160 [ 1555.398292][T22545] __kmalloc_large_node_noprof+0x1c/0x70 [ 1555.400500][T22545] __kvmalloc_node_noprof.cold+0xf/0x66 [ 1555.402918][T22545] drm_gem_get_pages+0x144/0xa10 [ 1555.404358][T22545] drm_gem_shmem_get_pages_locked+0x1e6/0x490 [ 1555.406286][T22545] drm_gem_shmem_mmap+0xc9/0x550 [ 1555.407834][T22545] drm_gem_mmap_obj+0x1b5/0x560 [ 1555.409427][T22545] drm_gem_mmap+0x40b/0x620 [ 1555.410839][T22545] __mmap_region+0x1306/0x27a0 [ 1555.412342][T22545] mmap_region+0x1ab/0x3f0 [ 1555.413761][T22545] do_mmap+0xa3e/0x1210 [ 1555.415041][T22545] vm_mmap_pgoff+0x29e/0x470 [ 1555.416496][T22545] page last free pid 22366 tgid 22365 stack trace: [ 1555.418502][T22545] __free_frozen_pages+0x7df/0x1160 [ 1555.420114][T22545] __put_partials+0x130/0x170 [ 1555.422170][T22545] qlist_free_all+0x4d/0x120 [ 1555.424045][T22545] kasan_quarantine_reduce+0x195/0x1e0 [ 1555.426503][T22545] __kasan_slab_alloc+0x69/0x90 [ 1555.428609][T22545] kmem_cache_alloc_noprof+0x250/0x6e0 [ 1555.430752][T22545] ptlock_alloc+0x1f/0x70 [ 1555.432296][T22545] pte_alloc_one+0x84/0x350 [ 1555.433834][T22545] __pte_alloc+0x6d/0x380 [ 1555.435277][T22545] do_pte_missing+0x282c/0x3ba0 [ 1555.436819][T22545] __handle_mm_fault+0x1556/0x2aa0 [ 1555.438460][T22545] handle_mm_fault+0x589/0xd10 [ 1555.439966][T22545] do_user_addr_fault+0x7a6/0x1370 [ 1555.441580][T22545] exc_page_fault+0x5c/0xb0 [ 1555.443016][T22545] asm_exc_page_fault+0x26/0x30 [ 1555.444554][T22545] [ 1555.445344][T22545] Memory state around the buggy address: [ 1555.447081][T22545] ffff88805e166700: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1555.449818][T22545] ffff88805e166780: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1555.452812][T22545] >ffff88805e166800: 00 fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe [ 1555.455697][T22545] ^ [ 1555.457156][T22545] ffff88805e166880: fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe [ 1555.459737][T22545] ffff88805e166900: fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe [ 1555.462272][T22545] ================================================================== [ 1555.464869][ C2] vkms_vblank_simulate: vblank timer overrun SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1555.489122][T22545] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1555.492265][T22545] CPU: 3 UID: 0 PID: 22545 Comm: syz.4.2994 Not tainted syzkaller #0 PREEMPT(full) [ 1555.495212][T22545] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1555.498990][T22545] Call Trace: [ 1555.500092][T22545] [ 1555.501143][T22545] dump_stack_lvl+0x3d/0x1f0 [ 1555.502828][T22545] vpanic+0x640/0x6f0 [ 1555.504272][T22545] panic+0xca/0xd0 [ 1555.505658][T22545] ? __pfx_panic+0x10/0x10 [ 1555.507666][T22545] ? __cpa_addr+0x1d3/0x220 [ 1555.509483][T22545] ? preempt_schedule_common+0x44/0xc0 [ 1555.511367][T22545] ? preempt_schedule_thunk+0x16/0x30 [ 1555.513091][T22545] check_panic_on_warn+0xab/0xb0 [ 1555.514671][T22545] end_report+0x107/0x170 [ 1555.516081][T22545] kasan_report+0xee/0x110 [ 1555.517661][T22545] ? __cpa_addr+0x1d3/0x220 [ 1555.519187][T22545] __cpa_addr+0x1d3/0x220 [ 1555.520818][T22545] cpa_flush+0x28b/0x8a0 [ 1555.522339][T22545] ? __pfx_cpa_flush+0x10/0x10 [ 1555.524081][T22545] ? pgprot2cachemode+0x9a/0x130 [ 1555.525937][T22545] ? __pfx_pgprot2cachemode+0x10/0x10 [ 1555.528370][T22545] ? drm_gem_get_pages+0x6a0/0xa10 [ 1555.530439][T22545] ? __bpf_trace_lock+0x70/0xf0 [ 1555.532022][T22545] change_page_attr_set_clr+0x34e/0x4a0 [ 1555.533812][T22545] ? __pfx_change_page_attr_set_clr+0x10/0x10 [ 1555.535739][T22545] _set_pages_array+0x1ab/0x2c0 [ 1555.537381][T22545] drm_gem_shmem_get_pages_locked+0x384/0x490 [ 1555.539865][T22545] ? __pfx_drm_gem_shmem_get_pages_locked+0x10/0x10 [ 1555.542292][T22545] ? __pfx___might_resched+0x10/0x10 [ 1555.544026][T22545] drm_gem_shmem_mmap+0xc9/0x550 [ 1555.545661][T22545] ? __pfx_drm_gem_shmem_object_mmap+0x10/0x10 [ 1555.547869][T22545] drm_gem_mmap_obj+0x1b5/0x560 [ 1555.549655][T22545] drm_gem_mmap+0x40b/0x620 [ 1555.551283][T22545] ? __pfx_drm_gem_mmap+0x10/0x10 [ 1555.552967][T22545] ? lockdep_init_map_type+0x5c/0x280 [ 1555.554926][T22545] __mmap_region+0x1306/0x27a0 [ 1555.556535][T22545] ? __pfx___mmap_region+0x10/0x10 [ 1555.558780][T22545] ? lockdep_hardirqs_on+0x7c/0x110 [ 1555.560554][T22545] ? finish_task_switch.isra.0+0x221/0xc10 [ 1555.562596][T22545] ? rcu_is_watching+0x12/0xc0 [ 1555.564530][T22545] ? trace_sched_exit_tp+0xd1/0x120 [ 1555.567082][T22545] ? __schedule+0x11a3/0x5de0 [ 1555.568857][T22545] ? __lock_acquire+0xb97/0x1ce0 [ 1555.571043][T22545] mmap_region+0x1ab/0x3f0 [ 1555.572870][T22545] ? __get_unmapped_area+0x267/0x440 [ 1555.575024][T22545] do_mmap+0xa3e/0x1210 [ 1555.576719][T22545] ? __pfx_do_mmap+0x10/0x10 [ 1555.578802][T22545] ? __pfx_down_write_killable+0x10/0x10 [ 1555.580995][T22545] vm_mmap_pgoff+0x29e/0x470 [ 1555.583140][T22545] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1555.585354][T22545] ? __fget_files+0x20e/0x3c0 [ 1555.586933][T22545] ksys_mmap_pgoff+0x32c/0x5c0 [ 1555.588791][T22545] ? __ia32_sys_mmap_pgoff+0x11/0x1b0 [ 1555.590761][T22545] __do_fast_syscall_32+0x7c/0x300 [ 1555.592456][T22545] do_fast_syscall_32+0x32/0x80 [ 1555.594030][T22545] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1555.596037][T22545] RIP: 0023:0xf704e579 [ 1555.597396][T22545] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1555.604016][T22545] RSP: 002b:00000000f4fd955c EFLAGS: 00000296 ORIG_RAX: 00000000000000c0 [ 1555.608781][T22545] RAX: ffffffffffffffda RBX: 0000000080001000 RCX: 0000000000004000 [ 1555.612555][T22545] RDX: 0000000000000004 RSI: 0000000000000011 RDI: 000000000000000a [ 1555.615733][T22545] RBP: 0000000000100000 R08: 0000000000000000 R09: 0000000000000000 [ 1555.618891][T22545] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 1555.622003][T22545] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1555.625218][T22545] [ 1555.627206][T22545] Kernel Offset: disabled [ 1555.629108][T22545] Rebooting in 86400 seconds.. VM DIAGNOSIS: 07:15:03 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000001 RBX=0000000000000001 RCX=0000000000000001 RDX=0000000000000001 RSI=ffffffff8bd045c0 RDI=ffffffff8dac7e40 RBP=0000000000000001 RSP=ffffc90000007be0 R8 =a87dcf14b5ebc079 R9 =0000000000000000 R10=0000000000000002 R11=ffffffff818b1292 R12=ffff88802b43a480 R13=0000000000000000 R14=ffff88801bb02000 R15=ffff888023f42ecf RIP=ffffffff819fcb4e RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888097c6f000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f5392521 CR3=0000000070cbc000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000ff ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4e4f4954504f5f4e 4153410063657865 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000001 RBX=ffff88804f1862a0 RCX=ffffffff9382be20 RDX=0000000000000000 RSI=ffffffff8d91360d RDI=ffffffff8bd04640 RBP=ffffffff82056c93 RSP=ffffc900039979d8 R8 =1273e33131811651 R9 =0000000000000001 R10=0000000000000000 R11=0000000000000000 R12=ffffffff82056ceb R13=0000000000000287 R14=ffff888026a4c900 R15=00000000801ad4a0 RIP=ffffffff8196d4ec RFL=00000086 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888097d6f000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000801ad018 CR3=0000000070cbc000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000600 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000ff ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4e4f4954504f5f4e 4153410063657865 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000020 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85207d85 RDI=ffffffff9ab610a0 RBP=ffffffff9ab61060 RSP=ffffc90003906e30 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=3530383838666666 R12=0000000000000000 R13=0000000000000020 R14=ffffffff9ab61060 R15=ffffffff85207d20 RIP=ffffffff85207daf RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888097e6f000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000030b0bff8 CR3=0000000022a00000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000ff ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4e4f4954504f5f4e 4153410063657865 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=00000000010db1db RBX=0000000000000003 RCX=ffffffff8b4e2a59 RDX=0000000000000000 RSI=ffffffff8d8245fd RDI=ffffffff8bd04640 RBP=ffffed1003763000 RSP=ffffc9000048fdf8 R8 =0000000000000001 R9 =ffffed10056e6655 R10=ffff88802b7332ab R11=0000000000000000 R12=0000000000000003 R13=ffff88801bb18000 R14=ffffffff905ff190 R15=0000000000000000 RIP=ffffffff8b4e157f RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888097f6f000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000008004b000 CR3=0000000065988000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000ff ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4e4f4954504f5f4e 4153410063657865 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000