last executing test programs: 8m22.600148034s ago: executing program 32 (id=220): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2c, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000900)={0x1, &(0x7f00000008c0)=[{0x6, 0x0, 0x0, 0x6}]}) mkdirat(0xffffffffffffffff, 0x0, 0xa1) close_range(r2, 0xffffffffffffffff, 0x0) 8m13.91010312s ago: executing program 33 (id=525): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r2}, 0x10) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x206, 0x20182) ioctl$USBDEVFS_ALLOW_SUSPEND(r3, 0x5522) ioctl$USBDEVFS_BULK(r3, 0x5523, 0x0) 7m57.506884651s ago: executing program 34 (id=538): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r0 = open(&(0x7f0000000100)='./file0\x00', 0x303e02, 0x2f53a08607baf2e7) rmdir(&(0x7f0000000040)='./file1\x00') mknodat$loop(r0, &(0x7f0000000000)='./file1\x00', 0x400, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') link(&(0x7f0000000140)='./file1\x00', &(0x7f0000000280)='./bus\x00') 7m43.292219878s ago: executing program 35 (id=844): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r1, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r1], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) r3 = socket(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@newqdisc={0x58, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x5, 0x7, 0x9, 0x200, 0x6, 0x500, 0x7, 0x398, 0x620b}}}}]}, 0x58}}, 0x800) sendmsg$nl_route_sched(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b40)=@newtfilter={0x24, 0x29, 0xd27, 0x1004001, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {}, {0x2, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x810}, 0x48c0) 7m34.492121355s ago: executing program 1 (id=943): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @pic={0x9, 0xcc, 0x1, 0x4, 0x2, 0x1, 0x81, 0xff, 0x5, 0x0, 0xe, 0x9, 0xa, 0x2, 0xd, 0x5}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x2, 0x7, 0x0, 0x180, 0x7, 0x0, 0xf1, 0x0, 0x8000000000000, 0x4, 0x0, 0x9, 0x0, 0x0, 0x0, 0xbd9], 0x1, 0x3c4210}) r3 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000001, 0x12, r3, 0xc3d33000) ioctl$KVM_RUN(r2, 0xae80, 0x0) 7m34.355382287s ago: executing program 1 (id=944): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x40, 0x1ff) socket$inet6_udplite(0xa, 0x2, 0x88) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000080)=0x31, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r2}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 7m34.35258992s ago: executing program 1 (id=945): r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) close(r0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='fd\x00') fchdir(r1) r2 = memfd_create(&(0x7f00000000c0)='v\xa6\xf5lj6,r\xaf\xe8\x10/\xecg\xed\xe3h\x80\xb8!y6w\xda\xdd\xb9\nR\xe8@\x99\xb9\x8a\x0fZ\t\x90\x8bp\x10\x84\x86t\x8a\xba\xc6\xfb\xd2\f\xef&\xad\xa8M\xe8\b\xb0#\xac)\x81\x1e\x8a\f\x11D\x90\xf5\xbb\x1c\xac\xc7\xad\xdc\\\x11\x95\xf8\xe6\xa7\xc3\xbc\x18+\x92\x92N\a\xa7\x7fN\x9bL\xf8\xebQs\x02\xf9\xadi\x8f\x0f\xff\x02n\x9d\x85\xea\x1a*\x1bC\xd8\x1c\xe8\x9bYS', 0x0) write(r2, &(0x7f00000005c0)="6967ae42cbea486d00a74e3deec6fcb4391f745de505000000000000007190ba2b6d59c8958d6f156c9c8a2ac4677b000900ffffffffffffff200000f8bf54da33c42b0592c958e8ae79b29152d8b50314d61f068badd9531f07babbe641a1a76e121a8b0c0604a15b2738afc9bd635fa6496716c0a1e9f2da35a4b6cef320f0095f9b9d77417f3fa278563ef8f50e01504fa1763858af3bb0a73e478d115c", 0x9f) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) openat$qat_adf_ctl(0xffffff9c, &(0x7f0000000040), 0x40040, 0x0) 7m34.329244712s ago: executing program 1 (id=946): openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x2d41, 0xd5) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000240)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x202, 0x0, 0x0, 0x2}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101081, 0x0) syz_fuse_handle_req(r0, &(0x7f0000006380)="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", 0x2000, &(0x7f0000001200)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x28, 0x0, 0x0, {{0x155b, 0x8006c6, 0x1, r2}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fcntl$lock(r3, 0x5, &(0x7f0000000200)={0x1}) 7m33.465369312s ago: executing program 1 (id=953): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x88200200, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x80, 0x0) setpgid(0x0, r0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x129dc2, 0x161) 7m33.367884016s ago: executing program 1 (id=958): syz_open_procfs(0x0, &(0x7f00000001c0)='coredump_filter\x00') r0 = syz_io_uring_setup(0xbc3, &(0x7f0000001480)={0x0, 0x1064, 0x80, 0x4, 0x224}, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffb, 0x0, 0x4) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in={{0x2, 0x0, @multicast2}}, 0x5, 0x0, 0xffffffff, 0x0, 0x20, 0x0, 0x2}, 0x9c) syz_io_uring_setup(0x466c, &(0x7f0000000280)={0x0, 0x0, 0x80}, &(0x7f0000001340)=0x0, &(0x7f0000000140)) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB='3'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x18, 0x0, 0x0, 0x2, 0x0, 0x1, 0x20, 0x1}) io_uring_enter(r0, 0x47fb, 0x0, 0x0, 0x0, 0x0) 7m28.1572183s ago: executing program 36 (id=1036): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)={0x94, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x94}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x94, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa, 0x0, 0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x94}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)={0xac, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}]}]}, 0xac}}, 0x0) 7m27.133609601s ago: executing program 8 (id=1047): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000001240), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB='\x00', @ANYRES16=r2, @ANYBLOB="f597000000000000000013"], 0x14}}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x800000000f, &(0x7f0000000080)=0x7, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x6, 0x8000000000, 0x1, 0x1, 0xffffffffffffffff, 0x4002004c5, 0x1000, 0x2, 0x5, 0x7, 0xe, 0x0, 0x6, 0x0, 0x49], 0xeeef0000, 0x1c7056}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 7m27.080946656s ago: executing program 8 (id=1048): ioctl$KVM_CLEAR_DIRTY_LOG(0xffffffffffffffff, 0xc018aec0, &(0x7f0000000140)={0x0, 0x2c0, 0x0, &(0x7f0000000180)=[0x6bd1a312, 0xec66, 0xff, 0x8, 0x98bd, 0x800000000000009, 0x0, 0x100000000000004, 0x10000, 0x100, 0x9004, 0x0, 0x3, 0x4, 0x5, 0x49, 0x3ff, 0x5, 0x0, 0x9, 0x8, 0x7, 0x1c1, 0x1000000003, 0x2, 0x2, 0x6, 0x7, 0x96, 0xffffffff, 0xffffffff00000000, 0x5, 0x4, 0x7, 0x23b, 0x3, 0x2, 0x888f, 0x4, 0x8, 0x6, 0x6, 0x3, 0xa3de, 0x20000000006, 0x8, 0x5c3e, 0x400, 0x3, 0xfffffffffffffff7, 0xfffffffffffffffa, 0x2, 0xe, 0x7, 0x4, 0xe6, 0x200000000000101, 0x5, 0x9, 0x66, 0x6, 0x7, 0x40000005, 0xfffffffeffffffff, 0xc, 0xd, 0x9, 0xe8, 0x80000000, 0xfffffffffffffc00, 0x1, 0x4, 0x2, 0xcdc, 0x8, 0x2, 0x3, 0x2, 0x5, 0xfff, 0x6, 0x4, 0x6, 0xab6, 0x0, 0x100000000000004, 0xfff, 0xffffffffffffff81, 0x9, 0xff, 0x6, 0x28000000, 0x5, 0x400000000008061d, 0x3, 0x8, 0xf6, 0x4, 0x6, 0x200, 0x7, 0xe53e, 0x2c, 0x8, 0x2293332f, 0x6, 0x5, 0x0, 0xd, 0x2, 0x5, 0x2, 0x2, 0x7, 0xdfd4, 0xfffd, 0x10, 0x8, 0x8, 0x1, 0x53e0f0fe, 0xeb4, 0x3, 0xfffffffffffffffe, 0xb692, 0x3ffc00000, 0x8, 0x3]}) ioctl$KVM_CAP_X86_GUEST_MODE(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000240)) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r3 = socket(0x11, 0x800000002, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000540)={'wlan0\x00', {0x2, 0x0, @private=0xf30a0000}}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x21, 0x0, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001440)={0x1c, r2, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 7m25.292050176s ago: executing program 8 (id=1056): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2040) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r2, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000008c0)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r3}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=@framed={{0x1d, 0xa, 0xa, 0x0, 0x0, 0x61, 0x10, 0x10}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) 7m25.233940986s ago: executing program 8 (id=1057): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1c0) r0 = syz_clone(0x88200200, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, 0x0) setpgid(0x0, r0) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0xf6ff, 0x0) 7m25.173527016s ago: executing program 8 (id=1058): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x3000, 0x8000, 0x1}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'sit0\x00'}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000040)={0x0, 0x12000, 0x1}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000000)={0x6000, 0x2000, 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 7m23.494075593s ago: executing program 8 (id=1075): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x8000000, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x10100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0xb, 0xd}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) 7m23.492731267s ago: executing program 37 (id=1075): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x8000000, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x10100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0xb, 0xd}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) 7m19.587678491s ago: executing program 7 (id=1107): openat$snapshot(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'stdrng\x00'}, 0x58) r1 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0xbcb5, 0x3f00, 0x5, 0x1000}, &(0x7f0000000340)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x3, r0, 0x0}) io_uring_enter(r1, 0x3516, 0x3e44, 0x8, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000003c80)={0x2020}, 0x2020) poll(&(0x7f0000000000), 0x0, 0x86ea) unshare(0x64000600) 7m18.701292551s ago: executing program 7 (id=1115): r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000000)='.\x00', 0x400017e) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x102) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r1 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r1, &(0x7f00000004c0), 0x4) open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) 7m18.665753324s ago: executing program 7 (id=1117): mkdir(&(0x7f0000000000)='./file0\x00', 0x2) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006840)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f00000042c0)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x0, {0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x0, {0x5, 0x0, 0x0, 0x81, 0x0, 0x0, {0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x10b}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r2, 0x0, 0x3c) 7m18.561912947s ago: executing program 7 (id=1118): mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) chdir(&(0x7f0000000080)='./file1\x00') r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r1, 0x0) setpgid(0x0, r1) r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f0000000200)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) 7m18.485267694s ago: executing program 7 (id=1119): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x0) connect$unix(r0, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = socket$unix(0x1, 0x1, 0x0) connect$unix(r2, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x800) r3 = socket$netlink(0x10, 0x3, 0x4) write(r3, &(0x7f00000002c0)="29000000140005b7ff00000004eabdeb0101b6ff02159f7e5520756b1933b49db96ad24d12595fbea5", 0x29) 7m18.234196685s ago: executing program 38 (id=958): syz_open_procfs(0x0, &(0x7f00000001c0)='coredump_filter\x00') r0 = syz_io_uring_setup(0xbc3, &(0x7f0000001480)={0x0, 0x1064, 0x80, 0x4, 0x224}, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffb, 0x0, 0x4) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in={{0x2, 0x0, @multicast2}}, 0x5, 0x0, 0xffffffff, 0x0, 0x20, 0x0, 0x2}, 0x9c) syz_io_uring_setup(0x466c, &(0x7f0000000280)={0x0, 0x0, 0x80}, &(0x7f0000001340)=0x0, &(0x7f0000000140)) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB='3'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x18, 0x0, 0x0, 0x2, 0x0, 0x1, 0x20, 0x1}) io_uring_enter(r0, 0x47fb, 0x0, 0x0, 0x0, 0x0) 7m18.184279704s ago: executing program 7 (id=1121): openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x1, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, 0x0, &(0x7f0000000000)='GPL\x00', 0x2}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a000000040000000600000080000000"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000540), &(0x7f0000000080), 0x619, r1}, 0x38) 7m18.142329933s ago: executing program 39 (id=1121): openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x1, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, 0x0, &(0x7f0000000000)='GPL\x00', 0x2}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a000000040000000600000080000000"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000540), &(0x7f0000000080), 0x619, r1}, 0x38) 7m7.736079332s ago: executing program 6 (id=1261): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r1, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r1], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) r3 = socket(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@newqdisc={0x58, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x5, 0x7, 0x9, 0x200, 0x6, 0x500, 0x7, 0x398, 0x620b}}}}]}, 0x58}}, 0x800) sendmsg$nl_route_sched(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newtfilter={0x24, 0x2a, 0xd27, 0x1004001, 0x100000, {0x0, 0x0, 0x0, r4, {0x3}, {0x5}, {0x2, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x810}, 0x48c0) 7m7.603030165s ago: executing program 6 (id=1263): sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) r1 = gettid() timer_create(0xb, &(0x7f00000000c0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = syz_open_dev$cec(&(0x7f0000000240), 0x0, 0x2182) ioctl$CEC_RECEIVE(r2, 0xc0386106, &(0x7f0000000000)={0x0, 0x7, 0x1, 0x0, 0x0, 0x9, '&\x00', 0x0, 0x0, 0x4a, 0x0, 0x0, 0x0, 0xe}) 7m6.724038204s ago: executing program 6 (id=1267): ioctl$VIDIOC_ENUM_FRAMEINTERVALS(0xffffffffffffffff, 0xc034564b, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001b00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0xa0, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x78, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x40, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x30, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_DATA={0xc, 0x7, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '+f'}]}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x114}}, 0x0) 7m6.6464081s ago: executing program 6 (id=1268): mknodat$null(0xffffffffffffff9c, 0x0, 0x0, 0x103) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = eventfd2(0x3, 0x1) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000240)={r3, 0x7ff, 0x2, r3}) openat$rfkill(0xffffff9c, 0x0, 0x402, 0x0) openat$nci(0xffffff9c, 0x0, 0x2, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 7m6.544511517s ago: executing program 6 (id=1275): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x88200200, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x80, 0x0) setpgid(0x0, r0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x129dc2, 0x161) 7m5.683355844s ago: executing program 6 (id=1278): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb47, 0x9, 0x8, 0x80000001, 0x3}, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, &(0x7f0000000140)={0x0, 0x34324142, 0x3, @discrete={0x1, 0xe}}) r2 = memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) ftruncate(r2, 0x80079a0) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r2, 0x0) 6m50.442076828s ago: executing program 40 (id=1278): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb47, 0x9, 0x8, 0x80000001, 0x3}, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, &(0x7f0000000140)={0x0, 0x34324142, 0x3, @discrete={0x1, 0xe}}) r2 = memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) ftruncate(r2, 0x80079a0) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r2, 0x0) 6m38.604527794s ago: executing program 3 (id=1389): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0xef92, 0x0, 0x0, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000100)={0x0, 0x3938700}, 0x0) 6m38.316118378s ago: executing program 3 (id=1391): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @local}, 0x10) r1 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0xbd84, 0x0, 0x1, 0x3ba}, &(0x7f0000000100)=0x0, &(0x7f0000000640)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2f, 0x8, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_TEE={0x21, 0xda1a0b6210925d15, 0x0, @fd_index=0x8, 0x0, 0x0, 0x0, 0x1, 0x1}) socket$packet(0x11, 0x3, 0x300) io_uring_enter(r1, 0x22d2, 0x20, 0x0, 0x0, 0x0) 6m38.288075976s ago: executing program 3 (id=1392): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) close(0x3) close(0x4) r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) close(0x4) 6m38.269189012s ago: executing program 3 (id=1393): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1c0) r0 = syz_clone(0x88200200, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, 0x0) setpgid(0x0, r0) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0xf6ff, 0x0) 6m38.163749411s ago: executing program 3 (id=1396): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x1100, 0x8000000000000}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000280)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000800)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x1e}, @ptr={0x70742a85, 0xfffffffe, &(0x7f0000000900)=""/206, 0xce, 0x1, 0xfffffffffffdffff}, @flat=@weak_handle={0x77682a85, 0x110b, 0x1}}, &(0x7f0000000240)={0x0, 0x28, 0x50}}, 0x1000}], 0x0, 0x0, 0x0}) 6m37.973696048s ago: executing program 3 (id=1397): r0 = memfd_create(&(0x7f0000000000)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xfd\xd7\x8e\x7f\x89\xb8\xc5;~\x04\x03~K\xfbP\x84=\xfa\x81\f\x1et\x10\x0e\xcf^9\xbe\\', 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0xf, {[@local=@item_4={0x3, 0x2, 0x0, "2e2b5aa4"}, @local=@item_4={0x3, 0x2, 0x0, "f85edaca"}, @main=@item_4={0x3, 0x0, 0x8}]}}, 0x0}, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000c00)={0x84, &(0x7f0000000800)={0x0, 0xd, 0x1, "9d"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) readv(r2, &(0x7f0000000480)=[{&(0x7f0000001580)=""/4091, 0x18}], 0x1) ioctl$HIDIOCSFLAG(r2, 0x4004480f, &(0x7f0000000000)=0x3) ioctl$HIDIOCGUSAGE(r2, 0xc018480b, 0x0) 6m37.966713805s ago: executing program 41 (id=1397): r0 = memfd_create(&(0x7f0000000000)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xfd\xd7\x8e\x7f\x89\xb8\xc5;~\x04\x03~K\xfbP\x84=\xfa\x81\f\x1et\x10\x0e\xcf^9\xbe\\', 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0xf, {[@local=@item_4={0x3, 0x2, 0x0, "2e2b5aa4"}, @local=@item_4={0x3, 0x2, 0x0, "f85edaca"}, @main=@item_4={0x3, 0x0, 0x8}]}}, 0x0}, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000c00)={0x84, &(0x7f0000000800)={0x0, 0xd, 0x1, "9d"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) readv(r2, &(0x7f0000000480)=[{&(0x7f0000001580)=""/4091, 0x18}], 0x1) ioctl$HIDIOCSFLAG(r2, 0x4004480f, &(0x7f0000000000)=0x3) ioctl$HIDIOCGUSAGE(r2, 0xc018480b, 0x0) 5m35.946422529s ago: executing program 9 (id=2020): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x1ffffe, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000020940)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r5, 0x4008af00, &(0x7f0000000080)=0x200000000) r6 = dup2(r5, r5) read$FUSE(r6, &(0x7f0000002fc0)={0x2020}, 0x2020) 5m35.062901948s ago: executing program 9 (id=2029): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r0}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002f000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a500000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) setsockopt$packet_int(r1, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r2, &(0x7f00000002c0)=ANY=[], 0xfdef) 5m34.952286379s ago: executing program 9 (id=2031): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, &(0x7f00000001c0)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r3, 0xc02064b9, &(0x7f0000000580)={&(0x7f0000000280)=[0x0, 0x0], &(0x7f0000000300), 0x2, r5}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000380)={0x201, 0x1, &(0x7f00000000c0)=[r2], &(0x7f0000000040)=[0x2], &(0x7f0000000240)=[r6, r7], &(0x7f0000000340)}) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r8, 0xffffffffffffffff, 0x0) 5m34.930363117s ago: executing program 9 (id=2032): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x2000, 0x20) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) chdir(&(0x7f0000000140)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) 5m34.908478865s ago: executing program 9 (id=2033): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$igmp6(0xa, 0x3, 0x2) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0xf803, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r5 = socket(0x1e, 0x1, 0x0) connect$tipc(r5, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) recvmmsg(r5, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)=""/154, 0x9a}], 0x1}, 0xa46}], 0x1, 0x2102, 0x0) 5m34.698106355s ago: executing program 9 (id=2035): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000200000850000000500000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r0}, 0x10) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='huge=always']) chdir(&(0x7f0000000140)='./file0\x00') bpf$ENABLE_STATS(0x20, 0x0, 0x0) syz_open_dev$usbfs(0x0, 0x1ff, 0x402) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000004, 0x28011, r1, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x200003, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) 5m34.644596782s ago: executing program 42 (id=2035): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000200000850000000500000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r0}, 0x10) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='huge=always']) chdir(&(0x7f0000000140)='./file0\x00') bpf$ENABLE_STATS(0x20, 0x0, 0x0) syz_open_dev$usbfs(0x0, 0x1ff, 0x402) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000004, 0x28011, r1, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x200003, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) 7.671527594s ago: executing program 2 (id=4140): syz_usb_connect(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f00000001c0)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x98, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x4}]}, 0x98}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)={0xb4, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x44, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}, 0xb4}}, 0x0) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r6 = dup(r5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r6, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) 5.316144528s ago: executing program 0 (id=4146): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC, @ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) setuid(0xee01) chdir(0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000001c40)=ANY=[@ANYBLOB="85000000a800000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000006"], 0x66) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0c000000040000000400000009"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000024c0), &(0x7f0000001280), 0xffffffff, r4}, 0x38) 4.548612545s ago: executing program 2 (id=4147): unshare(0x6a040000) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000002240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000200)={'vxcan1\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000340)={0x1d, r3, 0x0, {}, 0x2}, 0x18) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$cont(0x7, r4, 0xa, 0x80) ptrace$getregset(0x4204, r4, 0x6, 0x0) add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='net/igmp\x00') r6 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r6, &(0x7f00000000c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x3, 0x0, 0x1, 0x0, {0xa, 0x4e23, 0x3, @private1, 0x7}}}, 0x3a) read$FUSE(r5, &(0x7f00000001c0)={0x2020}, 0x2020) 3.546156485s ago: executing program 2 (id=4149): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='contention_begin\x00', r0}, 0x18) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = epoll_create1(0x80000) r3 = fcntl$dupfd(r1, 0x406, r2) r4 = socket$kcm(0x2, 0x200000000000001, 0x106) ioctl$BTRFS_IOC_QUOTA_CTL(r3, 0xc0109428, &(0x7f00000000c0)={0x3, 0x2}) sendmsg$inet(r4, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) setsockopt$sock_attach_bpf(r4, 0x1, 0x24, &(0x7f0000000000), 0x4) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000000)) getpid() syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1700000007"], 0x50) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r5, &(0x7f0000000000), 0xd) syz_open_dev$hidraw(&(0x7f0000000280), 0x82, 0x2) sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f0000000040)={0x14, 0x0, 0x400, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x44890) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$mouse(&(0x7f00000002c0), 0x1, 0x20002) 3.539009913s ago: executing program 5 (id=4151): r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) ioctl$sock_SIOCBRDELBR(r2, 0x89a2, &(0x7f0000000000)='bridge0\x00') r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x38, 0x1403, 0xc23, 0x70bd2a, 0x25dfdbff, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'syz_tun\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x48845}, 0x4000) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00', 0x0}) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f0000000180)={&(0x7f0000000000)=""/74, 0x102a000, 0x1000, 0x2}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r6, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r6, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) setsockopt$XDP_UMEM_FILL_RING(r6, 0x11b, 0x5, &(0x7f0000000340)=0x8000, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000001780)=0x100000, 0x4) bind$xdp(r6, &(0x7f0000000100)={0x2c, 0x0, r8}, 0x10) bind$xdp(r0, &(0x7f0000000240)={0x2c, 0x1, r5, 0x0, r6}, 0x10) 3.331419662s ago: executing program 0 (id=4152): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e78, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{}, 0x80}}]}, {0x2}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x40000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket(0x2c, 0x4, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000280)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000300)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) inotify_init() r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000640)={'#! ', './file0', [{}, {0x20, 'rp\xee\xff\xe4'}, {0x20, '\x12~\x85\xecZ@\xb5\x18\xec\x182\xc9L\xdc\xb2\x81\xdam\xa8\xc5{\x92\x14\xce\xf2\xb8\xf7\xa9\xa7\x00X \x93t\x91!%\xff\x13\xdc\aIY\x0e\xb4zh\\\x06\r\xe8^Z\x81\xb8$:P\x83\x98_\xa1\x98\xd6\xd2g-\xefr\x14<\xd1\xb84\x94\xa09\x9f\x12I\xed\xd5dT#f\xb4\xf3\x88\xcf\xde\x00\xd4\x81WN\xca\xb5c\xbf\r\xb0Q\xa9\xbaC\xd2\xa2\x1d~\xc5D(\x92A\x12f\x83fn\xd0\xb6\x02\x116t:|\x94\xc7\xac\xf6\xbc~m\xd6\xd1\xe5\xe0\xdd\xc2\x9cl#\x85\xab\xe7\xa9\xcb\"\xd2\x97\x10\xa5\xa8\xc1\x8d@U\a]Gi^\xd2\xdf\xb0\xa5!\x836\x92\xc9\x92\xe4'}], 0xa, "7bad65c4da5338577feb172ca63250224c76e2027f000000000000007e2ac7fe2e31a2e87e3ee43ed92dfbb6bc0700de24db4ec870b8000000000000002c65e7495fe9afeb28bb60e91e23e104f6dbbf40e1fc2ab1a77fd9f6414e438f03"}, 0xfffffc43) 3.207915825s ago: executing program 4 (id=4153): socket$alg(0x26, 0x5, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000200)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) r1 = syz_io_uring_setup(0x497, &(0x7f0000000540)={0x0, 0x4660, 0x400, 0x3, 0x285}, &(0x7f00000004c0)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}) io_uring_enter(r1, 0x40f9, 0x217, 0xa5, 0x0, 0xf5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @pix={0x434c, 0x8, 0x584e4f53, 0x4, 0x2, 0x7, 0x0, 0x5, 0x1, 0x4, 0x2, 0x7}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) socket$kcm(0x29, 0x5, 0x0) pipe(&(0x7f0000000040)) 3.165796012s ago: executing program 5 (id=4154): bind$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @random="518440db9de1"}, 0x14) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x101180) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000003c0)={0x9c9, 0x0, 0x0, 'queue1\x00', 0x200000}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3, 0x0, 0x10001}, 0x76e0}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xa8c01) write$sndseq(r1, &(0x7f0000000000)=[{0x1e, 0x0, 0x8, 0xfd, @tick, {}, {}, @result}], 0x1c) socket(0x200000000000011, 0x2, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r2 = getpid() r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r3, 0x84, 0x81, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) pipe2(&(0x7f0000000300), 0x4080) sched_setaffinity(r2, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) 2.438924063s ago: executing program 0 (id=4155): setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x4) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x910ec27568a00e35, 0x40000002, 0x0) mkdirat(0xffffffffffffffff, 0x0, 0x48) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0) 2.438716046s ago: executing program 2 (id=4156): socket(0x1e, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee7, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) setuid(0xee01) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r3 = syz_io_uring_setup(0x497, &(0x7f0000000140)={0x0, 0x7079, 0x400, 0x3, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r6 = socket(0x23, 0x2, 0x1) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r6, 0x0, 0x0}) io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0) 2.438515427s ago: executing program 4 (id=4157): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x47f, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x29}}}}]}}]}}, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000240)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_type(r1, &(0x7f0000000280), 0x2, 0x0) read(r2, &(0x7f0000001c40)=""/4096, 0x1000) syz_usb_control_io$hid(r0, 0x0, 0x0) ioctl$DRM_IOCTL_INFO_BUFS(0xffffffffffffffff, 0xc0086418, &(0x7f0000000180)={0xc5d, 0xa18c, 0x4, 0x1, 0x2, 0x7}) r3 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) sendmsg$802154_raw(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000300)={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0002}}}, 0x14, &(0x7f0000000400)={&(0x7f0000000340)="9eb09ab3acae3186d43eb5ffb9ac5c8f2885f354661f07840b5e0f52a3c715fb1d3e827587bf56554a1a3e88cc9f585bcf90ca261e52ba9f51fbe3d532828e1598e0e6fac514dd56ba90fd1586ff162d84b25bf741c2a3b458f79b639b128d9be69dcebd0f22506c16593994769c67f21146f3f37c920b8f6c0d8e255093c42e96be87cc179df7e52b34f755fbfcb8a1cdfe5ced8ce5eb4c39919929b0a9fbd9bedf12b1e4f14a757dcf831afc264427b2b59cffdbc428b1b495ac", 0xbb}, 0x1, 0x0, 0x0, 0x20000000}, 0x1) fchdir(r3) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) fsetxattr$system_posix_acl(r4, &(0x7f0000000000)='system.posix_acl_access\x00', 0x0, 0x0, 0x0) mkdirat(r4, &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0xfffc, &(0x7f0000000040)={&(0x7f0000004340)={0x85c, 0x41, 0x107, 0x0, 0x25dfdbfc, {0x2, 0x7c}, [@nested={0x4, 0x31}, @nested={0x844, 0x1, 0x0, 0x1, [@nested={0x840, 0x40, 0x0, 0x1, [@generic="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", @nested={0x39, 0x78, 0x0, 0x1, [@typed={0x11, 0x13a, 0x0, 0x0, @binary="faa8da715ac07d490ce2e599d4"}, @generic="65f86e6b395e7fb99ba0d90ceea58b88ee39be67", @typed={0x8, 0x144, 0x0, 0x0, @fd}, @generic="62fdbdda90"]}]}]}]}, 0x85c}}, 0x4010) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000009, 0x31, 0xffffffffffffffff, 0x7c5c7000) ioctl$SNDCTL_DSP_SETFMT(r6, 0xc0045005, &(0x7f0000000000)=0x4000) syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) 2.438324523s ago: executing program 5 (id=4158): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(ecb-serpent-sse2)\x00'}, 0x58) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080), 0x8000, &(0x7f0000000040)=ANY=[@ANYBLOB='quota']) r1 = openat(0xffffffffffffff9c, &(0x7f0000004d00)='./file1\x00', 0x250942, 0x1cd) quotactl_fd$Q_SYNC(r1, 0xffffffff80000101, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_STATION(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000200)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002bbd7000fedbdf251400000008000300", @ANYRES32=r6], 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x4) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x3c, 0x0, 0x8, 0x201, 0x0, 0x0, {0x9, 0x0, 0x8}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88a2}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_UNACK={0x8, 0xb, 0x1, 0x0, 0x7}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4050}, 0x26004090) r7 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="203a5451921e6d564ad04c79bb4638f78d", 0x11}], 0x1}], 0x1, 0x40800) ioctl$F2FS_IOC_SEC_TRIM_FILE(r7, 0x4018f514, &(0x7f0000000080)={0x6, 0xf, 0x1}) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=@newsa={0x134, 0x10, 0x1, 0x0, 0x0, {{@in6=@dev, @in=@multicast2}, {@in=@empty, 0x0, 0x6c}, @in=@remote, {}, {}, {}, 0xfffffffe, 0x0, 0x2, 0x4}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x134}}, 0x0) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) 2.379918803s ago: executing program 5 (id=4159): unshare(0x6a040000) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000002240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000200)={'vxcan1\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000340)={0x1d, r3, 0x0, {}, 0x2}, 0x18) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$cont(0x7, r4, 0xa, 0x80) ptrace$getregset(0x4204, r4, 0x6, 0x0) add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='net/igmp\x00') r6 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r6, &(0x7f00000000c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x3, 0x0, 0x1, 0x0, {0xa, 0x4e23, 0x3, @private1, 0x7}}}, 0x3a) read$FUSE(r5, &(0x7f00000001c0)={0x2020}, 0x2020) 1.826435408s ago: executing program 4 (id=4160): r0 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) unlink(0x0) write$binfmt_elf64(r0, 0x0, 0x509) mkdir(0x0, 0x21) socket$inet6(0xa, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x4, 0x0, 0x0, r2}, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r1, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r3, 0x612a, 0x17e, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r6 = fanotify_init(0x200, 0x101000) readv(r6, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/136, 0x88}], 0x1) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) 1.46611888s ago: executing program 5 (id=4161): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000"], &(0x7f0000000900)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB='\x00\x00\x00\x00']) read$FUSE(r3, &(0x7f0000006380)={0x2020}, 0x2020) syz_fuse_handle_req(r3, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003c58b3bd0000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0x2, {0x0, 0x1e}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000240)={0x800, 0x8001, 0xbb9, 0x7, 0xb7}) 1.349834701s ago: executing program 0 (id=4162): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = socket(0x23, 0x2, 0x0) r3 = add_key(&(0x7f0000000080)='dns_resolver\x00', &(0x7f0000000500)={'syz', 0x3}, &(0x7f0000000040)="42d7386debb9c100", 0x8, 0xfffffffffffffffe) keyctl$invalidate(0x15, r3) add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, r3) r4 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x40042) write$binfmt_aout(r4, &(0x7f0000000080)=ANY=[@ANYBLOB="0000000000000000000000800080000014000091ff0f00004500f5ff06ff00010100fc5e15", @ANYRESOCT=r4], 0x125) ioctl$sock_SIOCETHTOOL(r2, 0x89f0, &(0x7f0000000800)={'bridge0\x00', &(0x7f0000000240)=@ethtool_coalesce={0xf, 0x4, 0x101, 0xc3a5, 0x9, 0x1ff, 0x4, 0x2, 0xfffffff6, 0x7fb, 0x1, 0xc99d, 0x2, 0x9, 0x8d, 0x7ff, 0x2, 0xa98, 0x8, 0x6, 0x10000040, 0x3, 0xfd}}) write$uinput_user_dev(r1, &(0x7f0000000080)={'syz1\x00', {}, 0x0, [0x80000000, 0x3, 0x3ff, 0x8, 0xfffffbfd, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4, 0x10000, 0x0, 0x0, 0x0, 0xf5b1, 0xffffffff, 0x10000000, 0x99, 0x20000000, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x4, 0x0, 0x4, 0x0, 0x4, 0x0, 0x4, 0x3, 0x0, 0x80, 0x3, 0x0, 0xfffffffe, 0x0, 0x1000, 0x1, 0x8], [0x3, 0xbfffffff, 0x0, 0x0, 0x0, 0x0, 0x400000, 0xedc0, 0x0, 0x5ee, 0x0, 0xfffffffc, 0x0, 0x0, 0x5, 0x4, 0x0, 0xa0000000, 0xfffffffe, 0x0, 0x0, 0x4, 0x800, 0x0, 0x0, 0xa, 0x0, 0x9, 0x0, 0x0, 0xfffffff8, 0x2, 0x0, 0x2000079, 0x400, 0x0, 0x0, 0x10000, 0x40000, 0x0, 0xc0800000, 0x0, 0x0, 0x0, 0x0, 0xffffbffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x36, 0xfffffffc, 0x0, 0x0, 0x4771], [0xffffffff, 0x7f, 0x0, 0x0, 0x3, 0xfffffff3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x8, 0x4, 0x0, 0x26, 0x1, 0x0, 0x6, 0x0, 0x0, 0xffffffff, 0x0, 0x2, 0xffffffff, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x6, 0x0, 0x0, 0x0, 0x9, 0x3c, 0x80000000, 0x0, 0x0, 0xfffffffe, 0xffffffff, 0x0, 0x0, 0x1, 0xf, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffc, 0x4], [0xffffffff, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0x0, 0x0, 0x0, 0x3, 0xfffffffc, 0x6, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9, 0x0, 0x4, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x5, 0xfffffffd, 0xfffffffe, 0x0, 0x0, 0x8001, 0x80, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x4, 0x0, 0x0, 0xc, 0xffffe]}, 0x45c) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x7}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r5, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x300000a, 0x32, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x7f, 0x7ffc0002}]}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) read$FUSE(0xffffffffffffffff, &(0x7f0000000040)={0x2020}, 0x2020) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001840)=@newlink={0x74, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xffff}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0xea}]}}}, @IFLA_IFNAME={0x14, 0x3, 'xfrm0\x00'}, @IFLA_MAP={0x24}]}, 0x74}}, 0x0) 1.011108251s ago: executing program 2 (id=4163): open(0x0, 0x143c62, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x25dfdc01, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e61e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x4) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x4) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$fb1(0xffffffffffffff9c, 0x0, 0xa0000, 0x0) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x7c8}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000200)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x18) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x32, 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 998.507981ms ago: executing program 4 (id=4164): syz_emit_ethernet(0x76, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd60"], 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6(0xa, 0x3, 0x7fffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb010018000000000000020c0000000c0000000200624c0004000000000000000d000010802e6b4698c540015c66e88b09232c33a16fd74546c600008d27a5fed5a98db49614568622e04c0bc3f3e0dc51e0cbcc18b6ced9e6f4b8de7e1d67ef36a0a0d981af0eb22e6551d76f74f07ce618552b0f0523a1ef400df262afee419a792fc23c15e6da6be014ed4a189e1500d904605883ab229826e00875ac3f7108516e1e6a465dce87e407b76b87cbc6fd202897c21005cff16daa1e1a002f55abd26532a0efaed22c0da218e249158eb4c6ce26cb4ab6"], 0x0, 0x26, 0x0, 0x1, 0x7}, 0x28) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffff9}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) r1 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) r2 = msgget$private(0x0, 0x4ca) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@nr_inodes={'nr_inodes', 0x3d, [0x31]}}]}) creat(&(0x7f0000000800)='./file0\x00', 0x10) msgrcv(r2, &(0x7f0000000100)={0x0, ""/198}, 0xca, 0x1, 0x7000) msgsnd(r2, &(0x7f0000000200)={0x2, "f72530d231da748eadf023683fda2d6037f40c35743d81c6d34732a4fa586b"}, 0x23, 0x0) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f00000000c0)=0x20) 932.385912ms ago: executing program 0 (id=4165): r0 = socket$pptp(0x18, 0x1, 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000002180)=ANY=[@ANYBLOB="9feb0100180000000000000010000000100000000500000004000000000d000e04000000000001000000000000"], 0x0, 0x2d}, 0x28) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x7000000}, 0x0) close(r0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f00000019c0)=@newsa={0x140, 0x10, 0x1, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@local, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@mcast1, 0x14, 0x6c}, @in=@empty=0x14, {0x0, 0x0, 0x0, 0xfffffff7ffffffff, 0x0, 0x0, 0x1000000000000000}, {0x0, 0x4}, {}, 0x0, 0x0, 0x2, 0x1, 0x6}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @extra_flags={0x8, 0x18, 0xffff5df8}]}, 0x140}, 0x1, 0x0, 0x0, 0x4004050}, 0x0) 798.623532ms ago: executing program 4 (id=4166): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup/syz1\x00', 0x200002, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x28000, 0x1000, 0x1}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4) bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x4, r3}, 0x10) r4 = openat$cgroup_type(r0, &(0x7f0000000300), 0x2, 0x0) write$cgroup_type(r4, &(0x7f0000000280), 0x9) r5 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f00000001c0), 0x12) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_ro(r6, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r7, &(0x7f00000000c0), 0x12) 616.325479ms ago: executing program 4 (id=4167): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e78, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{}, 0x80}}]}, {0x2}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x40000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket(0x2c, 0x4, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000280)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000300)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) inotify_init() r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000640)={'#! ', './file0', [{}, {0x20, 'rp\xee\xff\xe4'}, {0x20, '\x12~\x85\xecZ@\xb5\x18\xec\x182\xc9L\xdc\xb2\x81\xdam\xa8\xc5{\x92\x14\xce\xf2\xb8\xf7\xa9\xa7\x00X \x93t\x91!%\xff\x13\xdc\aIY\x0e\xb4zh\\\x06\r\xe8^Z\x81\xb8$:P\x83\x98_\xa1\x98\xd6\xd2g-\xefr\x14<\xd1\xb84\x94\xa09\x9f\x12I\xed\xd5dT#f\xb4\xf3\x88\xcf\xde\x00\xd4\x81WN\xca\xb5c\xbf\r\xb0Q\xa9\xbaC\xd2\xa2\x1d~\xc5D(\x92A\x12f\x83fn\xd0\xb6\x02\x116t:|\x94\xc7\xac\xf6\xbc~m\xd6\xd1\xe5\xe0\xdd\xc2\x9cl#\x85\xab\xe7\xa9\xcb\"\xd2\x97\x10\xa5\xa8\xc1\x8d@U\a]Gi^\xd2\xdf\xb0\xa5!\x836\x92\xc9\x92\xe4'}], 0xa, "7bad65c4da5338577feb172ca63250224c76e2027f000000000000007e2ac7fe2e31a2e87e3ee43ed92dfbb6bc0700de24db4ec870b8000000000000002c65e7495fe9afeb28bb60e91e23e104f6dbbf40e1fc2ab1a77fd9f6414e438f03"}, 0xfffffc43) 429.963333ms ago: executing program 5 (id=4168): ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000000)={0x6, "2b51c6cabbf200fcdbf5eb4e47f48a656353a951a8c35c32df029b5a839310ec", 0xffffffffffffffff}) ioctl$BTRFS_IOC_QGROUP_CREATE(r0, 0x4010942a, &(0x7f00000000c0)={0x0, 0x8}) r1 = signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xb635773f06ebbeef, 0x12, r3, 0xa402a000) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)="d8000000140081044e81f782db46b904021d000025000000040000a118000200ff02000100000e1208000f0100810401a80316ea1f000b40032a5f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5e835913b06218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f52eb4edbb57a5025ccca9e00360d8bcc0000000000000080bb9ad809d5e1cace81b341139fe3cd4032ecedb12d1d2eb0c0ed0bffa29954e5413f017fe491", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r4 = syz_io_uring_setup(0x38a9, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r7 = io_uring_setup(0xc77, &(0x7f0000000000)={0x0, 0x827, 0x400, 0x0, 0x2a}) rt_sigtimedwait(&(0x7f0000000080)={[0xffffffffffffffff]}, 0x0, 0x0, 0x8) io_uring_register$IORING_UNREGISTER_RING_FDS(r7, 0x15, &(0x7f0000005e00)=[{0x0, 0x0, 0x0, 0x0, 0x0}], 0x1) syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x3, r1}) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x42800, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) prlimit64(0x0, 0x7, &(0x7f00000001c0), 0x0) ioctl$KVM_CREATE_GUEST_MEMFD(r9, 0xc040aed4, &(0x7f00000001c0)={0x200001fe0000}) io_uring_enter(r4, 0x44fd, 0x3, 0x1, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r1, 0xc0684113, &(0x7f0000000380)={0x1, 0x7, 0x5, 0x4d, 0x2, 0x4, 0x6, 0x9, 0x91, 0x7, 0x61b9, 0x2}) 69.888478ms ago: executing program 2 (id=4169): r0 = socket$inet_smc(0x2b, 0x1, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000400), 0x202) fanotify_init(0x200, 0x40000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r3 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r3, 0x47f6, 0x0, 0x4, 0x0, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200408c4, &(0x7f0000000200)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000001780)='%U', 0x2, 0x24000015, 0x0, 0x0) 0s ago: executing program 0 (id=4170): socket$nl_rdma(0x10, 0x3, 0x14) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) sched_setscheduler(0x0, 0x3, &(0x7f0000000100)=0x7ff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0xfe, 0x7ffc0002}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x3, &(0x7f0000000200)=ANY=[@ANYRES32=r1], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x6b, '\x00', 0x0, @sched_cls=0xf2fd4ce9ba69909c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x400000}, 0x94) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f00000003c0)={'aio_iiro_16\x00', [0x4f27, 0xb, 0x2, 0x10, 0x5, 0x6, 0x8, 0x7, 0x7fffffff, 0x104, 0x7, 0x3ff, 0x1, 0x20001, 0x6, 0x101, 0x3, 0x80000000, 0x5, 0x40000003, 0x89, 0xcaa7, 0x0, 0x3, 0xb, 0xe69, 0x3c, 0xc, 0x10000006, 0x0, 0x36]}) kernel console output (not intermixed with test programs): 264055][T14228] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 298.270718][T14228] lo speed is unknown, defaulting to 1000 [ 298.272885][T14228] lo speed is unknown, defaulting to 1000 [ 298.274981][T14228] lo speed is unknown, defaulting to 1000 [ 298.278088][T14228] lo speed is unknown, defaulting to 1000 [ 298.280700][T14228] lo speed is unknown, defaulting to 1000 [ 298.282820][T14228] lo speed is unknown, defaulting to 1000 [ 298.394409][T14234] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2595'. [ 298.653814][T14240] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2597'. [ 298.746756][ T6055] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 298.766561][ T8523] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 298.769614][ T8523] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 298.796371][T14088] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 299.216155][ T6055] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 299.681160][T14275] netlink: 'syz.2.2610': attribute type 4 has an invalid length. [ 299.686111][ T6055] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 299.688669][T14275] netlink: 'syz.2.2610': attribute type 4 has an invalid length. [ 299.711207][T14279] overlayfs: failed to clone upperpath [ 299.960443][T14289] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2613'. [ 299.986375][T14295] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2616'. [ 299.989417][T14295] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2616'. [ 299.992360][T14295] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2616'. [ 299.997489][T14295] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2616'. [ 300.000657][T14295] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2616'. [ 300.104797][T14303] macsec0: entered promiscuous mode [ 300.749160][T14314] siw: device registration error -23 [ 301.048944][ T40] audit: type=1326 audit(1755733568.135:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14331 comm="syz.0.2627" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf70be579 code=0x0 [ 301.175295][T14339] netlink: 'syz.4.2628': attribute type 12 has an invalid length. [ 301.819750][T14354] overlayfs: failed to clone upperpath [ 304.330366][T14406] overlayfs: failed to clone upperpath [ 304.617358][T14420] sch_tbf: burst 1821 is lower than device lo mtu (11337746) ! [ 304.624738][T14420] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2659'. [ 305.708596][T14438] overlayfs: failed to clone upperpath [ 305.788928][T14444] Trying to write to read-only block-device nullb0 [ 305.955057][ T5337] Bluetooth: hci3: unexpected event for opcode 0x0c05 [ 305.956446][T14453] veth0_to_hsr: entered allmulticast mode [ 305.960399][T14453] veth0_to_hsr: left allmulticast mode [ 305.988281][T14455] netlink: 'syz.0.2671': attribute type 13 has an invalid length. [ 305.990915][T14455] netlink: 'syz.0.2671': attribute type 17 has an invalid length. [ 306.033050][T14455] 8021q: adding VLAN 0 to HW filter on device bond0 [ 306.036679][T14455] 8021q: adding VLAN 0 to HW filter on device team0 [ 306.039361][T14455] tipc: Resetting bearer [ 306.041569][T14455] tipc: Resetting bearer [ 306.044651][T14455] net_ratelimit: 45 callbacks suppressed [ 306.044657][T14455] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 306.052783][ T80] ip6_tnl_xmit_ctl: 2 callbacks suppressed [ 306.052793][ T80] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 306.057883][ T80] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 306.060546][ T80] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 306.123549][T14458] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2672'. [ 306.162988][T14460] netlink: 'syz.0.2673': attribute type 1 has an invalid length. [ 306.171452][T14460] 8021q: adding VLAN 0 to HW filter on device bond2 [ 306.188123][T14460] 8021q: adding VLAN 0 to HW filter on device bond2 [ 306.190625][T14460] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 306.194634][T14460] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 306.243031][T14462] bond3: entered promiscuous mode [ 306.245318][T14462] 8021q: adding VLAN 0 to HW filter on device bond3 [ 306.249100][T14462] bond2: (slave bond3): Enslaving as an active interface with a down link [ 306.280891][T14460] macvlan2: entered promiscuous mode [ 306.283232][T14460] macvlan2: entered allmulticast mode [ 306.285792][T14460] bond2: entered promiscuous mode [ 306.288683][T14460] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 306.322140][T14460] bond2: left promiscuous mode [ 306.455278][T14468] netlink: 'syz.0.2675': attribute type 4 has an invalid length. [ 306.566412][T14088] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 306.696621][T14473] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2677'. [ 306.700868][T14473] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2677'. [ 306.705402][T14473] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2677'. [ 306.720289][T14088] usb 10-1: New USB device found, idVendor=0fe9, idProduct=db55, bcdDevice=69.fb [ 306.723289][T14088] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=201 [ 306.726883][T14088] usb 10-1: Product: syz [ 306.728446][T14088] usb 10-1: Manufacturer: syz [ 306.730087][T14088] usb 10-1: SerialNumber: syz [ 306.732312][T14088] usb 10-1: config 0 descriptor?? [ 306.735297][T14088] dvb-usb: found a 'DigitalNow DVB-T Dual USB' in warm state. [ 306.738003][T14088] dvb-usb: bulk message failed: -22 (2/0) [ 306.740502][T14088] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 306.744456][T14088] dvbdev: DVB: registering new adapter (DigitalNow DVB-T Dual USB) [ 306.747359][T14088] usb 10-1: media controller created [ 306.753909][T14088] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 306.838848][ T6055] libceph: connect (1)[c::]:6789 error -101 [ 306.840794][ T6055] libceph: mon0 (1)[c::]:6789 connect error [ 306.889699][T14482] ceph: No mds server is up or the cluster is laggy [ 306.941277][T14465] cxusb: i2c wr: len=80 is too big! [ 306.941277][T14465] [ 306.944365][T14088] cxusb: set interface failed [ 306.946476][T14088] dvb-usb: bulk message failed: -22 (1/0) [ 306.963754][T14088] DVB: Unable to find symbol mt352_attach() [ 306.965772][T14088] dvb-usb: bulk message failed: -22 (5/0) [ 306.967859][T14088] zl10353_read_register: readreg error (reg=127, ret==-121) [ 306.970202][T14088] dvb-usb: no frontend was attached by 'DigitalNow DVB-T Dual USB' [ 307.001975][ T8145] IPVS: starting estimator thread 0... [ 307.003196][T14490] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 307.006241][T14088] rc_core: IR keymap rc-dvico-mce not found [ 307.008597][T14088] Registered IR keymap rc-empty [ 307.010383][T14088] rc rc0: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.5/usb10/10-1/rc/rc0 [ 307.013733][T14088] input: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.5/usb10/10-1/rc/rc0/input23 [ 307.018513][T14088] dvb-usb: schedule remote query interval to 100 msecs. [ 307.020953][T14088] dvb-usb: DigitalNow DVB-T Dual USB successfully initialized and connected. [ 307.024121][T14088] usb 10-1: USB disconnect, device number 14 [ 307.032660][T14088] dvb-usb: DigitalNow DVB-T Dual USB successfully deinitialized and disconnected. [ 307.056128][ T5851] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 307.096184][T14491] IPVS: using max 57 ests per chain, 136800 per kthread [ 307.126110][ T6055] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 307.597190][T14504] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2685'. [ 307.609314][T14504] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2685'. [ 307.743807][T14511] lo speed is unknown, defaulting to 1000 [ 307.747498][T14513] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2689'. [ 309.117299][T14550] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2700'. [ 309.122156][T14550] dummy0: entered promiscuous mode [ 309.124904][T14550] dummy0: left promiscuous mode [ 309.926115][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 310.047412][T14575] netlink: 'syz.5.2709': attribute type 1 has an invalid length. [ 310.055006][T14575] 8021q: adding VLAN 0 to HW filter on device bond0 [ 310.069246][T14575] vlan2: entered promiscuous mode [ 310.070952][T14575] bond0: entered promiscuous mode [ 310.072791][T14575] vlan2: entered allmulticast mode [ 310.074519][T14575] bond0: entered allmulticast mode [ 310.091630][T14575] bond0: (slave gretap1): making interface the new active one [ 310.094089][T14575] gretap1: entered promiscuous mode [ 310.095835][T14575] gretap1: entered allmulticast mode [ 310.098172][T14575] bond0: (slave gretap1): Enslaving as an active interface with an up link [ 310.896104][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 310.969447][T14612] overlayfs: failed to resolve './file1': -2 [ 311.291702][T14627] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 311.368078][T14631] bond0: (slave gretap1): Releasing active interface [ 311.370955][T14631] gretap1: left promiscuous mode [ 311.373183][T14631] gretap1: left allmulticast mode [ 311.417880][T14631] team0: Mode changed to "activebackup" [ 311.421507][T14631] tipc: Enabling of bearer rejected, already enabled [ 311.682628][T14638] overlayfs: failed to clone upperpath [ 312.533060][T14673] netlink: 'syz.5.2740': attribute type 1 has an invalid length. [ 312.542728][T14673] 8021q: adding VLAN 0 to HW filter on device bond3 [ 312.561228][T14673] 8021q: adding VLAN 0 to HW filter on device bond3 [ 312.563820][T14673] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 312.570307][T14673] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 312.584770][T14642] syz.2.2730 (14642) used greatest stack depth: 19784 bytes left [ 312.629367][T14677] veth9: entered promiscuous mode [ 312.633395][T14677] bond3: (slave veth9): Enslaving as an active interface with a down link [ 312.637282][T14676] bridge: RTM_NEWNEIGH with invalid ether address [ 312.684427][T14673] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2740'. [ 312.688795][T14673] 8021q: adding VLAN 0 to HW filter on device bond3 [ 312.884194][T14692] Bluetooth: MGMT ver 1.23 [ 312.915096][T14696] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2748'. [ 312.919475][T14696] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2748'. [ 312.982554][T14698] infiniband syz1: set down [ 312.984070][T14698] infiniband syz1: added ipvlan0 [ 312.996305][T14698] RDS/IB: syz1: added [ 312.997808][T14698] smc: adding ib device syz1 with port count 1 [ 313.000755][T14698] smc: ib device syz1 port 1 has pnetid [ 313.744421][T14732] netlink: 'syz.0.2760': attribute type 39 has an invalid length. [ 316.531673][T14782] lo speed is unknown, defaulting to 1000 [ 316.657236][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 316.666765][ T8480] bridge_slave_1: left allmulticast mode [ 316.668634][ T8480] bridge_slave_1: left promiscuous mode [ 316.670462][ T8480] bridge0: port 2(bridge_slave_1) entered disabled state [ 316.674210][ T8480] bridge_slave_0: left allmulticast mode [ 316.679556][ T8480] bridge_slave_0: left promiscuous mode [ 316.681887][ T8480] bridge0: port 1(bridge_slave_0) entered disabled state [ 317.029139][ T8480] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 317.032920][ T8480] bond0 (unregistering): Released all slaves [ 317.040188][ T8480] bond1 (unregistering): (slave veth9): Releasing active interface [ 317.043555][ T8480] bond1 (unregistering): Released all slaves [ 317.107790][ T8480] tipc: Disabling bearer [ 317.116199][ T8480] tipc: Left network mode [ 317.539729][ T8480] hsr_slave_0: left promiscuous mode [ 317.543909][ T8480] hsr_slave_1: left promiscuous mode [ 317.547290][ T8480] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 317.551438][ T8480] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 317.688330][ T8480] team0 (unregistering): Port device team_slave_1 removed [ 317.760744][T14805] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2777'. [ 317.926166][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 318.032179][T14810] siw: device registration error -23 [ 318.951981][T14829] wireguard0: entered promiscuous mode [ 318.953714][T14829] wireguard0: entered allmulticast mode [ 319.239520][T14839] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2787'. [ 319.479850][T14844] bridge7: entered promiscuous mode [ 319.481600][T14844] bridge7: entered allmulticast mode [ 319.986052][ T5851] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 320.136089][ T5851] usb 5-1: Using ep0 maxpacket: 32 [ 320.138894][ T5851] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 320.142326][ T5851] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 320.145644][ T5851] usb 5-1: New USB device found, idVendor=17ef, idProduct=6062, bcdDevice= 0.00 [ 320.165809][ T5851] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 320.169342][ T5851] usb 5-1: config 0 descriptor?? [ 320.263891][T14874] MPI: mpi too large (124808 bits) [ 320.927018][T14880] netlink: 'syz.5.2801': attribute type 1 has an invalid length. [ 320.929593][T14880] netlink: 224 bytes leftover after parsing attributes in process `syz.5.2801'. [ 322.743435][ T5851] usbhid 5-1:0.0: can't add hid device: -71 [ 322.745843][ T5851] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 322.750249][ T5851] usb 5-1: USB disconnect, device number 4 [ 322.770486][T14908] lo speed is unknown, defaulting to 1000 [ 323.848835][ T40] audit: type=1804 audit(1755733590.935:123): pid=14933 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.2810" name="file0" dev="ramfs" ino=65508 res=1 errno=0 [ 324.141923][T14938] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2813'. [ 324.173800][T14952] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2817'. [ 324.182033][T14952] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 324.185065][T14952] bond0 (unregistering): Released all slaves [ 324.685877][T14963] 9pnet: p9_errstr2errno: server reported unknown error 184467440737095 [ 324.815640][T14968] netlink: 'syz.0.2823': attribute type 1 has an invalid length. [ 324.824774][T14968] 8021q: adding VLAN 0 to HW filter on device bond4 [ 324.841480][T14968] vlan2: entered allmulticast mode [ 324.843194][T14968] veth1: entered allmulticast mode [ 324.845445][T14968] bond4: (slave vlan2): Opening slave failed [ 324.877790][T14971] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2824'. [ 324.892047][T14971] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2824'. [ 325.534712][T14994] Invalid option length (1048180) for dns_resolver key [ 326.720468][T15017] netlink: 'syz.0.2840': attribute type 1 has an invalid length. [ 326.730877][T15017] 8021q: adding VLAN 0 to HW filter on device bond5 [ 326.757268][T15017] bond5: (slave geneve2): making interface the new active one [ 326.761467][T15017] bond5: (slave geneve2): Enslaving as an active interface with an up link [ 326.764669][ T8473] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.778692][ T8473] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.783054][T15017] bond5: entered promiscuous mode [ 326.784945][T15017] geneve2: entered promiscuous mode [ 326.788919][ T8473] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.794853][ T8473] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.822291][T15023] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 4, id = 0 [ 326.847713][T15020] lo speed is unknown, defaulting to 1000 [ 326.862268][T15025] lo speed is unknown, defaulting to 1000 [ 327.081332][T15025] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2842'. [ 327.526142][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 328.061117][T15053] netlink: 92 bytes leftover after parsing attributes in process `syz.2.2850'. [ 329.875981][T15074] comedi comedi2: reset error (fatal) [ 329.936864][T15087] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.979637][T15087] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.087146][T15087] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.171470][T15087] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.291478][ T8468] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.297270][ T8480] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.301824][ T8480] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.307196][ T8480] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.315007][T15090] tipc: Enabling of bearer rejected, failed to enable media [ 330.389404][T15096] netlink: 'syz.2.2863': attribute type 1 has an invalid length. [ 330.522084][T15103] 9p: Unknown Cache mode or invalid value fscach [ 330.866826][ T5337] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 330.888060][T15106] picdev_write: 680 callbacks suppressed [ 330.888073][T15106] kvm: pic: non byte write [ 330.891497][T15106] kvm: pic: non byte write [ 330.893169][T15106] pic_ioport_write: 85 callbacks suppressed [ 330.893176][T15106] kvm: pic: single mode not supported [ 330.895048][T15106] pic_ioport_write: 78 callbacks suppressed [ 330.895056][T15106] kvm: pic: level sensitive irq not supported [ 330.899630][T15106] kvm: pic: non byte write [ 330.903138][T15106] kvm: pic: non byte write [ 330.904824][T15106] kvm: pic: single mode not supported [ 330.906094][T15106] kvm: pic: level sensitive irq not supported [ 330.910694][T15106] kvm: pic: single mode not supported [ 330.915836][T15106] kvm: pic: single mode not supported [ 330.917775][T15106] kvm: pic: level sensitive irq not supported [ 330.923551][T15106] kvm: pic: non byte write [ 330.928634][T15106] kvm: pic: non byte write [ 330.932137][T15106] kvm: pic: non byte write [ 330.934425][T15106] kvm: pic: non byte write [ 330.936999][T15106] kvm: pic: single mode not supported [ 330.937770][T15106] kvm: pic: non byte write [ 330.942256][T15106] kvm: pic: non byte write [ 331.250828][ T40] audit: type=1804 audit(1755733598.335:124): pid=15117 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.2868" name="/newroot/321/bus" dev="tmpfs" ino=1789 res=1 errno=0 [ 331.259879][T15119] overlayfs: bad index found (index=index/00fb210001ebf106c6cd53455789ce04e0cd34794911890c656604000000000000, ftype=2000, origin ftype=8000). [ 331.554102][T15129] tipc: Enabling of bearer rejected, failed to enable media [ 331.621646][T15133] tipc: Disabling bearer [ 331.826067][ T6025] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 331.986074][ T6025] usb 5-1: Using ep0 maxpacket: 8 [ 331.992750][ T6025] usb 5-1: New USB device found, idVendor=12d1, idProduct=fae2, bcdDevice=70.8b [ 331.996118][ T6025] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 331.999307][ T6025] usb 5-1: Product: syz [ 332.000973][ T6025] usb 5-1: Manufacturer: syz [ 332.002629][T15136] binder: 15135:15136 ioctl 4018620d 0 returned -22 [ 332.002947][ T6025] usb 5-1: SerialNumber: syz [ 332.007670][ T6025] usb 5-1: config 0 descriptor?? [ 332.011019][ T6025] option 5-1:0.0: GSM modem (1-port) converter detected [ 332.209087][T15140] openvswitch: netlink: Flow key attr not present in new flow. [ 332.254049][ T6025] usb 5-1: USB disconnect, device number 5 [ 332.257412][ T6025] option 5-1:0.0: device disconnected [ 332.832940][T15161] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2881'. [ 333.106054][ T8141] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 333.266064][ T8141] usb 5-1: Using ep0 maxpacket: 32 [ 333.269639][ T8141] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 333.272935][ T8141] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 333.277855][ T8141] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 333.282188][ T8141] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 333.287513][ T8141] usb 5-1: config 0 interface 0 has no altsetting 0 [ 333.291694][ T8141] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 333.295336][ T8141] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 333.298690][ T8141] usb 5-1: Product: syz [ 333.300402][ T8141] usb 5-1: Manufacturer: syz [ 333.302301][ T8141] usb 5-1: SerialNumber: syz [ 333.305132][ T8141] usb 5-1: config 0 descriptor?? [ 333.309425][ T8141] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 333.313821][ T8141] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 333.322967][T15165] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2147484288 (4294968576 ns) > initial count (34 ns). Using initial count to start timer. [ 333.367549][T15167] 9pnet_fd: Insufficient options for proto=fd [ 333.557965][ T6055] usb 5-1: USB disconnect, device number 6 [ 333.562860][ T6055] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 333.936168][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 333.996148][ T6055] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 334.176181][ T6055] usb 5-1: Using ep0 maxpacket: 32 [ 334.179098][ T6055] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 334.183170][ T6055] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 334.187207][ T6055] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 334.190880][ T6055] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 334.195489][ T6055] usb 5-1: config 0 interface 0 has no altsetting 0 [ 334.207881][ T6055] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 334.212041][ T6055] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 334.214926][ T6055] usb 5-1: Product: syz [ 334.216516][ T6055] usb 5-1: Manufacturer: syz [ 334.217983][ T6055] usb 5-1: SerialNumber: syz [ 334.220415][ T6055] usb 5-1: config 0 descriptor?? [ 334.221864][T15180] openvswitch: netlink: Flow key attr not present in new flow. [ 334.223464][ T6055] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 334.228601][ T6055] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 334.340588][T15184] overlayfs: bad index found (index=index/00fb210001d3c1c6505e3b4ab98234fa8e7b451348baf686142507000000000000, ftype=2000, origin ftype=8000). [ 334.432832][ T6025] usb 5-1: USB disconnect, device number 7 [ 334.436226][ T6025] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 334.482165][T15196] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2893'. [ 334.689119][T15204] tipc: Enabled bearer , priority 10 [ 334.951190][ T40] audit: type=1326 audit(1755733602.035:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15205 comm="syz.0.2896" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 334.959629][ T40] audit: type=1326 audit(1755733602.035:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15205 comm="syz.0.2896" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 334.965537][T15206] overlayfs: failed to get inode (-116) [ 334.968195][ T40] audit: type=1326 audit(1755733602.035:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15205 comm="syz.0.2896" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 334.969454][T15206] overlayfs: failed to look up (bus) for ino (-116) [ 334.975798][ T40] audit: type=1326 audit(1755733602.035:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15205 comm="syz.0.2896" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 334.975825][ T40] audit: type=1326 audit(1755733602.035:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15205 comm="syz.0.2896" exe="/syz-executor" sig=0 arch=40000003 syscall=296 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 334.991020][ T40] audit: type=1326 audit(1755733602.035:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15205 comm="syz.0.2896" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 334.999940][ T40] audit: type=1326 audit(1755733602.035:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15205 comm="syz.0.2896" exe="/syz-executor" sig=0 arch=40000003 syscall=39 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 335.009223][ T40] audit: type=1326 audit(1755733602.035:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15205 comm="syz.0.2896" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 335.017829][ T40] audit: type=1326 audit(1755733602.035:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15205 comm="syz.0.2896" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 335.325694][T15217] create_pit_timer: 15 callbacks suppressed [ 335.325705][T15217] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 335.343488][T15217] kvm: pic: non byte read [ 335.348459][T15217] kvm: pic: level sensitive irq not supported [ 335.348786][T15217] kvm: pic: non byte read [ 335.354260][T15217] kvm: pic: level sensitive irq not supported [ 335.354627][T15217] kvm: pic: non byte read [ 335.359640][T15217] kvm: pic: level sensitive irq not supported [ 335.359919][T15217] kvm: pic: non byte read [ 335.365422][T15217] kvm: pic: level sensitive irq not supported [ 335.365707][T15217] kvm: pic: non byte read [ 335.371686][T15217] kvm: pic: level sensitive irq not supported [ 335.372593][T15217] kvm: pic: non byte read [ 335.918377][T15230] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2910'. [ 336.791395][ T40] kauditd_printk_skb: 33 callbacks suppressed [ 336.791406][ T40] audit: type=1326 audit(1755733603.875:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15253 comm="syz.5.2907" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f38579 code=0x7ffc0000 [ 336.799990][ T40] audit: type=1326 audit(1755733603.875:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15253 comm="syz.5.2907" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f38579 code=0x7ffc0000 [ 336.806711][ T40] audit: type=1326 audit(1755733603.875:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15253 comm="syz.5.2907" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f38579 code=0x7ffc0000 [ 336.808753][T15254] overlayfs: failed to get inode (-116) [ 336.813262][ T40] audit: type=1326 audit(1755733603.875:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15253 comm="syz.5.2907" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f38579 code=0x7ffc0000 [ 336.813288][ T40] audit: type=1326 audit(1755733603.875:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15253 comm="syz.5.2907" exe="/syz-executor" sig=0 arch=40000003 syscall=296 compat=1 ip=0xf7f38579 code=0x7ffc0000 [ 336.813306][ T40] audit: type=1326 audit(1755733603.875:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15253 comm="syz.5.2907" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f38579 code=0x7ffc0000 [ 336.815242][T15254] overlayfs: failed to look up (bus) for ino (-116) [ 336.821742][ T40] audit: type=1326 audit(1755733603.875:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15253 comm="syz.5.2907" exe="/syz-executor" sig=0 arch=40000003 syscall=39 compat=1 ip=0xf7f38579 code=0x7ffc0000 [ 336.821764][ T40] audit: type=1326 audit(1755733603.875:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15253 comm="syz.5.2907" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f38579 code=0x7ffc0000 [ 336.821780][ T40] audit: type=1326 audit(1755733603.875:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15253 comm="syz.5.2907" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f38579 code=0x7ffc0000 [ 336.861517][ T40] audit: type=1326 audit(1755733603.875:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15253 comm="syz.5.2907" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f38579 code=0x7ffc0000 [ 336.913819][T15258] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 336.925461][T15258] kvm: pic: non byte read [ 336.928262][T15258] kvm: pic: level sensitive irq not supported [ 336.928677][T15258] kvm: pic: non byte read [ 336.933122][T15258] kvm: pic: level sensitive irq not supported [ 336.933407][T15258] kvm: pic: non byte read [ 336.939156][T15258] kvm: pic: level sensitive irq not supported [ 336.939598][T15258] kvm: pic: non byte read [ 336.944060][T15258] kvm: pic: level sensitive irq not supported [ 336.945700][T15258] kvm: pic: level sensitive irq not supported [ 337.031527][T15266] netlink: 'syz.4.2912': attribute type 1 has an invalid length. [ 337.047776][T15266] 8021q: adding VLAN 0 to HW filter on device bond5 [ 337.073888][T15266] bond5: (slave veth11): Enslaving as an active interface with a down link [ 337.096669][T15266] bond5: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 337.104990][T15266] vlan3: entered allmulticast mode [ 337.107219][T15266] veth0_to_bond: entered allmulticast mode [ 337.109536][T15266] veth0_to_bond: entered promiscuous mode [ 337.111657][T15266] veth0_to_bond: left promiscuous mode [ 337.113527][T15266] veth0_to_bond: entered promiscuous mode [ 337.116079][T15266] bond5: (slave vlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 337.124669][T15268] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 337.127537][T15266] veth0_to_bond: left promiscuous mode [ 338.825704][T15312] overlayfs: failed to clone upperpath [ 338.836008][T15292] comedi comedi2: reset error (fatal) [ 338.867850][ T5337] Bluetooth: hci1: unexpected event for opcode 0x0c05 [ 338.869440][T15315] veth0_to_hsr: entered allmulticast mode [ 338.874142][T15315] veth0_to_hsr: left allmulticast mode [ 340.786133][ T8145] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 340.946246][ T8145] usb 10-1: Using ep0 maxpacket: 8 [ 340.949654][ T8145] usb 10-1: config 0 interface 0 has no altsetting 0 [ 340.951739][ T8145] usb 10-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 340.954576][ T8145] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 340.959686][ T8145] usb 10-1: config 0 descriptor?? [ 341.369831][ T8145] mcp2221 0003:04D8:00DD.000A: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.5-1/input0 [ 342.237916][T15379] veth0_to_hsr: entered allmulticast mode [ 342.240275][T15378] veth0_to_hsr: left allmulticast mode [ 342.255363][ T40] kauditd_printk_skb: 33 callbacks suppressed [ 342.255375][ T40] audit: type=1804 audit(1755733609.335:210): pid=15380 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.2939" name="bus" dev="tmpfs" ino=2356 res=1 errno=0 [ 343.563759][ T54] usb 10-1: USB disconnect, device number 15 [ 346.706504][T15440] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2963'. [ 346.723776][T15441] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2956'. [ 346.724854][ T40] audit: type=1804 audit(1755733613.805:211): pid=15442 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.2953" name="bus" dev="tmpfs" ino=2751 res=1 errno=0 [ 347.552710][T15454] tipc: Resetting bearer [ 347.562330][ T8468] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.565114][ T8468] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.568197][ T8468] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.571197][ T8468] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.860891][T15467] netlink: 'syz.2.2962': attribute type 1 has an invalid length. [ 347.871264][T15467] 8021q: adding VLAN 0 to HW filter on device bond0 [ 347.893628][T15467] bond0: (slave veth15): Enslaving as an active interface with a down link [ 347.916985][T15467] bond0: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 347.925643][T15467] vlan2: entered allmulticast mode [ 347.927938][T15467] veth0_to_bond: entered allmulticast mode [ 347.930182][T15467] veth0_to_bond: entered promiscuous mode [ 347.932282][T15467] veth0_to_bond: left promiscuous mode [ 347.934239][T15467] veth0_to_bond: entered promiscuous mode [ 347.936782][T15467] bond0: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 347.941839][T15467] veth0_to_bond: left promiscuous mode [ 349.559308][T15497] tipc: Failed to remove unknown binding: 66,1,1/1999240660:560178075/560178077 [ 349.563497][T15497] tipc: Failed to remove unknown binding: 66,1,1/1999240660:560178075/560178077 [ 349.566799][T15497] tipc: Failed to remove unknown binding: 66,1,1/1999240660:560178075/560178077 [ 349.629223][T15502] tipc: Enabled bearer , priority 0 [ 349.634030][T15502] syzkaller0: entered promiscuous mode [ 349.635896][T15502] syzkaller0: entered allmulticast mode [ 349.646540][T15502] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 349.661674][T15502] tipc: Resetting bearer [ 349.669930][T15501] tipc: Resetting bearer [ 349.674958][T15501] tipc: Disabling bearer [ 351.149737][T15532] netlink: 'syz.0.2978': attribute type 1 has an invalid length. [ 351.159532][T15532] 8021q: adding VLAN 0 to HW filter on device bond6 [ 351.181520][T15532] bond6: (slave veth11): Enslaving as an active interface with a down link [ 351.203605][T15532] bond1: (slave veth0_to_bond): Releasing active interface [ 351.208082][T15532] bond6: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 351.218826][T15532] vlan2: entered allmulticast mode [ 351.220534][T15532] veth0_to_bond: entered allmulticast mode [ 351.222755][T15532] veth0_to_bond: entered promiscuous mode [ 351.224893][T15532] veth0_to_bond: left promiscuous mode [ 351.227562][T15532] veth0_to_bond: entered promiscuous mode [ 351.229529][T15532] bond6: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 351.234817][T15532] veth0_to_bond: left promiscuous mode [ 352.817080][ T8145] lo speed is unknown, defaulting to 1000 [ 352.818575][T15554] tipc: Failed to remove unknown binding: 66,1,1/4:2998181200/2998181202 [ 352.818972][ T8145] syz2: Port: 1 Link DOWN [ 352.822749][T15554] tipc: Failed to remove unknown binding: 66,1,1/4:2998181200/2998181202 [ 352.826378][T15554] tipc: Failed to remove unknown binding: 66,1,1/4:2998181200/2998181202 [ 354.134485][T15585] 9p: Unknown Cache mode or invalid value fscach [ 355.946258][T15610] overlayfs: failed to clone upperpath [ 356.014203][T15614] ªªªªª»: renamed from hsr0 [ 356.624267][T15637] 9pnet: p9_errstr2errno: server reported unknown error 1844674407370955 [ 356.769470][T15649] overlayfs: failed to clone upperpath [ 356.809512][T15655] overlayfs: failed to clone upperpath [ 357.926109][ T62] Bluetooth: hci3: command 0x0c1a tx timeout [ 358.457188][T15688] netlink: 'syz.0.3028': attribute type 1 has an invalid length. [ 358.467179][T15688] 8021q: adding VLAN 0 to HW filter on device bond7 [ 358.480986][T15688] bond7: (slave veth13): Enslaving as an active interface with a down link [ 358.491340][T15688] vlan2: entered allmulticast mode [ 358.493339][T15688] veth0_to_bond: entered promiscuous mode [ 358.495714][T15688] veth0_to_bond: left promiscuous mode [ 358.498422][T15688] bond7: (slave vlan2): Enslaving as an active interface with a down link [ 359.532332][ T40] audit: type=1326 audit(1755733626.615:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15729 comm="syz.0.3041" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 359.539960][ T40] audit: type=1326 audit(1755733626.615:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15729 comm="syz.0.3041" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 359.546816][ T40] audit: type=1326 audit(1755733626.615:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15729 comm="syz.0.3041" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 359.556424][ T40] audit: type=1326 audit(1755733626.615:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15729 comm="syz.0.3041" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 359.563057][ T40] audit: type=1326 audit(1755733626.615:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15729 comm="syz.0.3041" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 359.569522][ T40] audit: type=1326 audit(1755733626.615:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15729 comm="syz.0.3041" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 359.576236][ T40] audit: type=1326 audit(1755733626.615:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15729 comm="syz.0.3041" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 359.582586][ T40] audit: type=1326 audit(1755733626.615:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15729 comm="syz.0.3041" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 359.589631][ T40] audit: type=1326 audit(1755733626.615:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15729 comm="syz.0.3041" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 359.596326][ T40] audit: type=1326 audit(1755733626.615:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15729 comm="syz.0.3041" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 360.912612][T15754] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 360.922170][T15754] picdev_read: 2 callbacks suppressed [ 360.922187][T15754] kvm: pic: non byte read [ 360.930538][T15754] kvm: pic: level sensitive irq not supported [ 360.930967][T15754] kvm: pic: non byte read [ 360.937795][T15754] kvm: pic: level sensitive irq not supported [ 360.938960][T15754] kvm: pic: non byte read [ 360.944101][T15754] kvm: pic: level sensitive irq not supported [ 360.944374][T15754] kvm: pic: non byte read [ 360.950175][T15754] kvm: pic: level sensitive irq not supported [ 360.950450][T15754] kvm: pic: non byte read [ 360.955105][T15754] kvm: pic: level sensitive irq not supported [ 360.955373][T15754] kvm: pic: non byte read [ 362.158271][T15785] fuse: Unknown parameter '18446744073709551615ÿ' [ 363.876560][T15817] netlink: 116 bytes leftover after parsing attributes in process `syz.0.3066'. [ 365.876915][ T40] kauditd_printk_skb: 280 callbacks suppressed [ 365.876927][ T40] audit: type=1326 audit(1755733632.965:502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15860 comm="syz.4.3078" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f34579 code=0x7ffc0000 [ 365.886343][ T40] audit: type=1326 audit(1755733632.965:503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15860 comm="syz.4.3078" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f34579 code=0x7ffc0000 [ 365.893248][ T40] audit: type=1326 audit(1755733632.965:504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15860 comm="syz.4.3078" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f34579 code=0x7ffc0000 [ 365.900340][ T40] audit: type=1326 audit(1755733632.965:505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15860 comm="syz.4.3078" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f34579 code=0x7ffc0000 [ 365.907300][ T40] audit: type=1326 audit(1755733632.965:506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15860 comm="syz.4.3078" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f34579 code=0x7ffc0000 [ 365.914151][ T40] audit: type=1326 audit(1755733632.965:507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15860 comm="syz.4.3078" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f34579 code=0x7ffc0000 [ 365.921679][ T40] audit: type=1326 audit(1755733632.965:508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15860 comm="syz.4.3078" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f34579 code=0x7ffc0000 [ 365.928954][ T40] audit: type=1326 audit(1755733632.965:509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15860 comm="syz.4.3078" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f34579 code=0x7ffc0000 [ 365.935611][ T40] audit: type=1326 audit(1755733632.965:510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15860 comm="syz.4.3078" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f34579 code=0x7ffc0000 [ 365.942611][ T40] audit: type=1326 audit(1755733632.965:511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15860 comm="syz.4.3078" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f34579 code=0x7ffc0000 [ 366.544053][T15870] netlink: 'syz.0.3079': attribute type 5 has an invalid length. [ 366.547301][T15870] netlink: 'syz.0.3079': attribute type 7 has an invalid length. [ 366.558184][T15870] : entered promiscuous mode [ 369.519026][T15919] lo speed is unknown, defaulting to 1000 [ 369.529410][T15917] netlink: 'syz.2.3094': attribute type 1 has an invalid length. [ 369.561762][T15917] 8021q: adding VLAN 0 to HW filter on device bond4 [ 369.598272][T15917] vlan2: entered allmulticast mode [ 369.599975][T15917] veth1: entered allmulticast mode [ 369.601961][T15917] bond4: (slave vlan2): Opening slave failed [ 369.793176][T15929] bridge3: entered promiscuous mode [ 369.794973][T15929] bridge3: entered allmulticast mode [ 370.709086][T15946] bridge4: entered promiscuous mode [ 370.710790][T15946] bridge4: entered allmulticast mode [ 371.300646][T15955] tipc: Bearer : already 2 bearers with priority 10 [ 371.303648][T15955] tipc: Bearer : trying with adjusted priority [ 371.306335][T15955] tipc: Enabled bearer , priority 9 [ 371.311936][T15955] tipc: Bearer : already 2 bearers with priority 10 [ 371.315019][T15955] tipc: Bearer : trying with adjusted priority [ 371.317723][T15955] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 371.599395][T15967] dummy0: left promiscuous mode [ 371.604874][T15967] xfrm0: left promiscuous mode [ 371.606800][T15967] xfrm0: left allmulticast mode [ 371.609982][T15967] veth0_vlan: left allmulticast mode [ 371.611991][T15967] vlan0: left promiscuous mode [ 371.615711][T15967] macsec0: left promiscuous mode [ 371.621217][T15967] bond4: left allmulticast mode [ 371.623403][T15967] bridge7: left promiscuous mode [ 371.625013][T15967] bridge7: left allmulticast mode [ 371.952673][T15969] bridge0: failed insert local address into bridge forwarding table [ 372.260363][T15981] tipc: Enabling of bearer rejected, failed to enable media [ 372.386141][ T40] kauditd_printk_skb: 257 callbacks suppressed [ 372.386154][ T40] audit: type=1804 audit(1755733639.465:769): pid=15999 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.3113" name="file0" dev="ramfs" ino=75926 res=1 errno=0 [ 372.395546][T16002] tipc: Enabling of bearer rejected, failed to enable media [ 372.446168][T16009] trusted_key: encrypted_key: insufficient parameters specified [ 372.509763][T16015] tipc: Enabled bearer , priority 0 [ 372.513334][T16015] syzkaller0: entered promiscuous mode [ 372.515621][T16015] syzkaller0: entered allmulticast mode [ 372.523501][T16015] tipc: Resetting bearer [ 372.526551][T16014] tipc: Resetting bearer [ 372.530128][T16014] tipc: Disabling bearer [ 373.139870][T16023] syz.5.3122 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 373.623375][T16033] tipc: Enabling of bearer rejected, failed to enable media [ 375.344899][T16077] bridge1: entered promiscuous mode [ 375.346686][T16077] bridge1: entered allmulticast mode [ 377.010853][T16098] tipc: Enabling of bearer rejected, failed to enable media [ 377.017758][T16098] tipc: Enabling of bearer rejected, failed to enable media [ 377.526880][T16113] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3142'. [ 378.097782][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.369663][T16130] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 378.534924][T16137] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3149'. [ 378.616044][ T8140] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 378.766042][ T8140] usb 5-1: Using ep0 maxpacket: 32 [ 378.770747][ T8140] usb 5-1: config 0 has an invalid interface number: 12 but max is 0 [ 378.774488][ T8140] usb 5-1: config 0 has no interface number 0 [ 378.777244][ T8140] usb 5-1: config 0 interface 12 has no altsetting 0 [ 378.781693][ T8140] usb 5-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 378.785597][ T8140] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 378.789096][ T8140] usb 5-1: Product: syz [ 378.790922][ T8140] usb 5-1: Manufacturer: syz [ 378.792926][ T8140] usb 5-1: SerialNumber: syz [ 378.796209][ T8140] usb 5-1: config 0 descriptor?? [ 379.234855][ T8140] f81534 5-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 379.237469][ T8140] f81534 5-1:0.12: f81534_find_config_idx: read failed: -71 [ 379.239794][ T8140] f81534 5-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 379.304489][ T8140] f81534 5-1:0.12: probe with driver f81534 failed with error -71 [ 379.356091][ T8140] usb 5-1: USB disconnect, device number 8 [ 380.165117][ T40] audit: type=1326 audit(1755733647.245:770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16152 comm="syz.0.3155" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 380.186073][ T40] audit: type=1326 audit(1755733647.245:771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16152 comm="syz.0.3155" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 380.193349][ T40] audit: type=1326 audit(1755733647.245:772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16152 comm="syz.0.3155" exe="/syz-executor" sig=0 arch=40000003 syscall=321 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 380.216837][ T40] audit: type=1326 audit(1755733647.245:773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16152 comm="syz.0.3155" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 380.228485][T16151] lo speed is unknown, defaulting to 1000 [ 380.237389][ T40] audit: type=1326 audit(1755733647.245:774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16152 comm="syz.0.3155" exe="/syz-executor" sig=0 arch=40000003 syscall=8 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 380.245675][ T40] audit: type=1326 audit(1755733647.245:775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16152 comm="syz.0.3155" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 380.257211][ T40] audit: type=1326 audit(1755733647.245:776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16152 comm="syz.0.3155" exe="/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 380.265731][ T40] audit: type=1326 audit(1755733647.245:777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16152 comm="syz.0.3155" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 380.274809][ T40] audit: type=1326 audit(1755733647.245:778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16152 comm="syz.0.3155" exe="/syz-executor" sig=0 arch=40000003 syscall=14 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 380.283188][ T40] audit: type=1326 audit(1755733647.245:779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16152 comm="syz.0.3155" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 380.433980][T16151] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3154'. [ 381.098971][T16176] bridge3: entered promiscuous mode [ 381.100936][T16176] bridge3: entered allmulticast mode [ 382.001087][T16188] tipc: Enabled bearer , priority 0 [ 382.003786][T16188] syzkaller0: entered promiscuous mode [ 382.005525][T16188] syzkaller0: entered allmulticast mode [ 382.011215][T16188] tipc: Resetting bearer [ 382.014700][T16187] tipc: Resetting bearer [ 382.017885][T16187] tipc: Disabling bearer [ 383.049320][T16209] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 383.665634][T16222] tipc: Enabled bearer , priority 0 [ 383.676330][T16222] syzkaller0: entered promiscuous mode [ 383.678089][T16222] syzkaller0: entered allmulticast mode [ 383.683767][T16222] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 383.689555][T16222] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3176'. [ 383.701341][T16222] tipc: Resetting bearer [ 383.705409][T16221] tipc: Resetting bearer [ 383.709270][T16221] tipc: Disabling bearer [ 384.136070][T14088] usb 10-1: new high-speed USB device number 16 using dummy_hcd [ 384.286097][T14088] usb 10-1: Using ep0 maxpacket: 32 [ 384.289212][T14088] usb 10-1: config 0 has an invalid interface number: 12 but max is 0 [ 384.291941][T14088] usb 10-1: config 0 has no interface number 0 [ 384.294027][T14088] usb 10-1: config 0 interface 12 has no altsetting 0 [ 384.297891][T14088] usb 10-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 384.300902][T14088] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 384.303511][T14088] usb 10-1: Product: syz [ 384.304959][T14088] usb 10-1: Manufacturer: syz [ 384.306652][T14088] usb 10-1: SerialNumber: syz [ 384.309087][T14088] usb 10-1: config 0 descriptor?? [ 384.574972][T16233] dummy0: left promiscuous mode [ 384.583424][T16233] vlan0: left promiscuous mode [ 384.600177][T16233] bridge3: left promiscuous mode [ 384.601864][T16233] bridge3: left allmulticast mode [ 384.725768][T14088] f81534 10-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 384.729757][T14088] f81534 10-1:0.12: f81534_find_config_idx: read failed: -71 [ 384.732150][T14088] f81534 10-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 384.735608][T14088] f81534 10-1:0.12: probe with driver f81534 failed with error -71 [ 384.747628][T14088] usb 10-1: USB disconnect, device number 16 [ 386.452638][T16250] vlan0: left promiscuous mode [ 386.457311][T16250] macsec1: left promiscuous mode [ 386.459598][T16250] macsec1: left allmulticast mode [ 386.462145][T16250] bond3: left promiscuous mode [ 386.464283][T16250] wireguard0: left promiscuous mode [ 386.466685][T16250] wireguard0: left allmulticast mode [ 386.468574][T16250] bond5: left promiscuous mode [ 386.470064][T16250] geneve2: left promiscuous mode [ 386.475530][T16250] vlan2: left allmulticast mode [ 386.478903][T16250] bridge1: left promiscuous mode [ 386.481346][T16250] bridge1: left allmulticast mode [ 386.674223][T16263] netlink: 4400 bytes leftover after parsing attributes in process `syz.5.3184'. [ 388.365221][ T40] kauditd_printk_skb: 7 callbacks suppressed [ 388.365233][ T40] audit: type=1326 audit(1755733655.225:787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16278 comm="syz.2.3193" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707e579 code=0x7ffc0000 [ 388.374208][ T40] audit: type=1326 audit(1755733655.225:788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16278 comm="syz.2.3193" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707e579 code=0x7ffc0000 [ 388.381137][ T40] audit: type=1326 audit(1755733655.235:789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16278 comm="syz.2.3193" exe="/syz-executor" sig=0 arch=40000003 syscall=374 compat=1 ip=0xf707e579 code=0x7ffc0000 [ 388.388805][ T40] audit: type=1326 audit(1755733655.235:790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16278 comm="syz.2.3193" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707e579 code=0x7ffc0000 [ 388.395806][ T40] audit: type=1326 audit(1755733655.235:791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16278 comm="syz.2.3193" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707e579 code=0x7ffc0000 [ 388.406108][ T40] audit: type=1326 audit(1755733655.235:792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16278 comm="syz.2.3193" exe="/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf707e579 code=0x7ffc0000 [ 388.412939][ T40] audit: type=1326 audit(1755733655.235:793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16278 comm="syz.2.3193" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707e579 code=0x7ffc0000 [ 388.419922][ T40] audit: type=1326 audit(1755733655.235:794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16278 comm="syz.2.3193" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707e579 code=0x7ffc0000 [ 388.427966][ T40] audit: type=1326 audit(1755733655.235:795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16278 comm="syz.2.3193" exe="/syz-executor" sig=0 arch=40000003 syscall=343 compat=1 ip=0xf707e579 code=0x7ffc0000 [ 388.434847][ T40] audit: type=1326 audit(1755733884.239:796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16278 comm="syz.2.3193" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707e579 code=0x7ffc0000 [ 390.886729][ T6025] libceph: connect (1)[c::]:6789 error -22 [ 390.888724][ T6025] libceph: mon0 (1)[c::]:6789 connect error [ 390.891776][T16330] tipc: Enabled bearer , priority 0 [ 390.895123][T16330] syzkaller0: entered promiscuous mode [ 390.897250][T16330] syzkaller0: entered allmulticast mode [ 390.908166][T16330] tipc: Resetting bearer [ 390.911870][T16325] tipc: Resetting bearer [ 390.914469][T16325] tipc: Disabling bearer [ 391.036449][T16328] ceph: No mds server is up or the cluster is laggy [ 391.717785][T16342] netlink: 'syz.2.3209': attribute type 1 has an invalid length. [ 391.899194][T16353] bridge5: entered promiscuous mode [ 391.906380][T16353] bridge5: entered allmulticast mode [ 393.771016][T16382] tipc: Enabling of bearer rejected, failed to enable media [ 393.979889][T16393] tipc: Enabling of bearer rejected, failed to enable media [ 394.046581][T16397] netlink: 'syz.5.3216': attribute type 5 has an invalid length. [ 394.049981][T16397] netlink: 'syz.5.3216': attribute type 7 has an invalid length. [ 394.070837][T16397] : entered promiscuous mode [ 396.138895][T16427] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3229'. [ 396.926585][T16438] netlink: 'syz.2.3232': attribute type 5 has an invalid length. [ 396.929265][T16438] netlink: 'syz.2.3232': attribute type 7 has an invalid length. [ 396.945048][T16438] : entered promiscuous mode [ 398.039378][T16462] bridge2: entered promiscuous mode [ 398.041509][T16462] bridge2: entered allmulticast mode [ 398.920174][T16469] tipc: Enabled bearer , priority 0 [ 398.923384][T16469] syzkaller0: entered promiscuous mode [ 398.925385][T16469] syzkaller0: entered allmulticast mode [ 398.933157][T16469] tipc: Resetting bearer [ 398.937478][T16468] tipc: Resetting bearer [ 398.940859][T16468] tipc: Disabling bearer [ 399.085564][T16474] bochs-drm 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 400.058531][T16487] tipc: Enabled bearer , priority 0 [ 400.063465][T16487] syzkaller0: entered promiscuous mode [ 400.065646][T16487] syzkaller0: entered allmulticast mode [ 400.070989][T16487] tipc: Resetting bearer [ 400.074426][T16485] tipc: Resetting bearer [ 400.078073][T16485] tipc: Disabling bearer [ 400.190759][T16496] netlink: 'syz.4.3246': attribute type 5 has an invalid length. [ 400.193277][T16496] netlink: 'syz.4.3246': attribute type 7 has an invalid length. [ 400.203579][T16496] : entered promiscuous mode [ 400.281683][T16499] netlink: 4400 bytes leftover after parsing attributes in process `syz.0.3254'. [ 400.288046][T16499] debugfs: 'Ç`]Š •Iöq¯!¾>Ýsó³Îú*Š®!)\Ç' already exists in 'ieee80211' [ 401.281347][T16517] bridge4: entered promiscuous mode [ 401.283224][T16517] bridge4: entered allmulticast mode [ 402.371851][T16524] tipc: Enabled bearer , priority 0 [ 402.374657][T16524] syzkaller0: entered promiscuous mode [ 402.376526][T16524] syzkaller0: entered allmulticast mode [ 402.383033][T16524] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3257'. [ 402.388137][T16524] tipc: Resetting bearer [ 402.392139][T16521] tipc: Resetting bearer [ 402.395698][T16521] tipc: Disabling bearer [ 402.673372][T16526] netlink: 'syz.0.3258': attribute type 1 has an invalid length. [ 404.324156][T16565] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3267'. [ 404.596279][ T8140] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 404.747235][ T8140] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 404.750806][ T8140] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 404.754080][ T8140] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 404.757164][ T8140] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 404.761300][ T8140] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 404.764120][ T8140] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 404.768766][ T8140] usb 5-1: config 0 descriptor?? [ 405.174953][ T8140] plantronics 0003:047F:FFFF.000B: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 405.423045][T16581] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3270'. [ 406.030312][ T8140] usb 5-1: USB disconnect, device number 9 [ 407.933604][T16627] tipc: Enabled bearer , priority 0 [ 407.936800][T16627] syzkaller0: entered promiscuous mode [ 407.938618][T16627] syzkaller0: entered allmulticast mode [ 407.943783][T16627] tipc: Resetting bearer [ 407.946765][T16626] tipc: Resetting bearer [ 407.949412][T16626] tipc: Disabling bearer [ 408.318335][T16635] tipc: Enabling of bearer rejected, failed to enable media [ 409.379792][T16661] tipc: Enabling of bearer rejected, already enabled [ 409.449474][T16665] tipc: Enabling of bearer rejected, failed to enable media [ 409.944786][T16683] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3301'. [ 409.948424][T16683] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3301'. [ 409.951417][T16683] netlink: 50 bytes leftover after parsing attributes in process `syz.2.3301'. [ 410.417813][T16690] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 412.036574][ T40] kauditd_printk_skb: 24 callbacks suppressed [ 412.036590][ T40] audit: type=1326 audit(1755733908.119:821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16718 comm="syz.5.3311" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f38579 code=0x7ffc0000 [ 412.047844][ T40] audit: type=1326 audit(1755733908.119:822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16718 comm="syz.5.3311" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f38579 code=0x7ffc0000 [ 412.055196][ T40] audit: type=1326 audit(1755733908.119:823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16718 comm="syz.5.3311" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f38579 code=0x7ffc0000 [ 412.055219][ T40] audit: type=1326 audit(1755733908.119:824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16718 comm="syz.5.3311" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f38579 code=0x7ffc0000 [ 412.055234][ T40] audit: type=1326 audit(1755733908.119:825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16718 comm="syz.5.3311" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f38579 code=0x7ffc0000 [ 412.055251][ T40] audit: type=1326 audit(1755733908.119:826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16718 comm="syz.5.3311" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f38579 code=0x7ffc0000 [ 412.055271][ T40] audit: type=1326 audit(1755733908.119:827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16718 comm="syz.5.3311" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f38579 code=0x7ffc0000 [ 412.055289][ T40] audit: type=1326 audit(1755733908.119:828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16718 comm="syz.5.3311" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f38579 code=0x7ffc0000 [ 412.055305][ T40] audit: type=1326 audit(1755733908.119:829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16718 comm="syz.5.3311" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f38579 code=0x7ffc0000 [ 412.055321][ T40] audit: type=1326 audit(1755733908.119:830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16718 comm="syz.5.3311" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f38579 code=0x7ffc0000 [ 412.309965][T16728] netlink: 4400 bytes leftover after parsing attributes in process `syz.2.3310'. [ 412.341775][T16728] debugfs: 'Ç`]Š •Iöq¯!¾>Ýsó³Îú*Š®!)\Ç' already exists in 'ieee80211' [ 412.513527][T16722] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3318'. [ 412.847160][T16749] netlink: 14 bytes leftover after parsing attributes in process `syz.4.3315'. [ 412.855096][T16749] bond0 (unregistering): Released all slaves [ 412.971453][T16751] tipc: Enabled bearer , priority 0 [ 412.975554][T16751] syzkaller0: entered promiscuous mode [ 412.978071][T16751] syzkaller0: entered allmulticast mode [ 412.984051][T16751] tipc: Resetting bearer [ 413.858968][T16774] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 414.154367][T16785] bridge8: entered promiscuous mode [ 414.156346][T16785] bridge8: entered allmulticast mode [ 414.973804][T16794] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3327'. [ 415.590981][T16796] netlink: 'syz.5.3330': attribute type 1 has an invalid length. [ 415.600601][T16796] 8021q: adding VLAN 0 to HW filter on device bond4 [ 415.614987][T16796] bond4: (slave wlan0): Enslaving as an active interface with a down link [ 415.624401][T16796] vlan3: entered allmulticast mode [ 415.626607][T16796] veth1: entered allmulticast mode [ 415.628837][T16796] bond4: (slave vlan3): Opening slave failed [ 417.162785][T16828] netlink: 'syz.0.3338': attribute type 1 has an invalid length. [ 417.176266][T16828] 8021q: adding VLAN 0 to HW filter on device bond8 [ 417.199587][T16828] bond8: (slave veth15): Enslaving as an active interface with a down link [ 418.536084][ T5337] Bluetooth: hci1: unexpected event for opcode 0x202d [ 419.497281][T16865] tipc: Enabled bearer , priority 0 [ 419.514772][T16865] syzkaller0: entered promiscuous mode [ 419.516742][T16865] syzkaller0: entered allmulticast mode [ 419.639308][T16873] tipc: Resetting bearer [ 419.646575][T16872] tipc: Enabling of bearer rejected, already enabled [ 419.667443][T16863] tipc: Resetting bearer [ 419.681517][T16863] tipc: Disabling bearer [ 421.101201][T16902] netlink: 'syz.5.3353': attribute type 5 has an invalid length. [ 421.106703][T16902] netlink: 'syz.5.3353': attribute type 7 has an invalid length. [ 421.628131][T16909] netlink: 240 bytes leftover after parsing attributes in process `syz.4.3356'. [ 421.645229][T16911] tipc: Enabling of bearer rejected, failed to enable media [ 422.670374][T16937] tipc: Enabling of bearer rejected, failed to enable media [ 422.805369][T16941] tipc: Enabling of bearer rejected, failed to enable media [ 422.825890][T16945] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 422.862926][T16951] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3370'. [ 424.487224][T16991] netlink: 4400 bytes leftover after parsing attributes in process `syz.4.3386'. [ 424.522926][T16991] debugfs: 'Ç`]Š •Iöq¯!¾>Ýsó³Îú*Š®!)\Ç' already exists in 'ieee80211' [ 425.213462][T17003] tipc: Enabled bearer , priority 0 [ 425.216504][T17003] syzkaller0: entered promiscuous mode [ 425.218277][T17003] syzkaller0: entered allmulticast mode [ 425.257671][T17003] tipc: Resetting bearer [ 425.264223][T17002] tipc: Resetting bearer [ 425.276178][T17002] tipc: Disabling bearer [ 426.968459][T17044] tipc: Enabling of bearer rejected, failed to enable media [ 427.001981][T17044] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3394'. [ 427.031202][T17047] syz_tun: left allmulticast mode [ 427.154630][T17026] delete_channel: no stack [ 427.432643][T17063] loop6: detected capacity change from 0 to 524287999 [ 427.490152][ C0] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2 [ 427.493189][ C0] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2 [ 427.518009][ C0] I/O error, dev loop6, sector 1018 op 0x1:(WRITE) flags 0x8800 phys_seg 128 prio class 2 [ 427.521126][ C0] I/O error, dev loop6, sector 1018 op 0x1:(WRITE) flags 0x8800 phys_seg 128 prio class 2 [ 427.557344][ C2] I/O error, dev loop6, sector 2042 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2 [ 427.560659][ C2] I/O error, dev loop6, sector 2042 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2 [ 427.563932][ C2] I/O error, dev loop6, sector 3066 op 0x1:(WRITE) flags 0x8800 phys_seg 128 prio class 2 [ 427.567283][ C2] I/O error, dev loop6, sector 3066 op 0x1:(WRITE) flags 0x8800 phys_seg 128 prio class 2 [ 427.570477][ C2] I/O error, dev loop6, sector 4090 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2 [ 427.573525][ C2] I/O error, dev loop6, sector 4090 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2 [ 428.205288][T17081] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 429.771922][ T40] kauditd_printk_skb: 58 callbacks suppressed [ 429.771932][ T40] audit: type=1804 audit(1755733925.849:889): pid=17113 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.3412" name="cgroup.controllers" dev="tmpfs" ino=3380 res=1 errno=0 [ 429.781264][ T40] audit: type=1800 audit(1755733925.859:890): pid=17113 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3412" name="cgroup.controllers" dev="tmpfs" ino=3380 res=0 errno=0 [ 429.789913][ T40] audit: type=1800 audit(1755733925.869:891): pid=17113 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3412" name="cgroup.controllers" dev="tmpfs" ino=3380 res=0 errno=0 [ 430.835308][T17123] overlayfs: failed to clone upperpath [ 431.162229][T17132] tipc: Enabled bearer , priority 0 [ 431.172441][T17132] syzkaller0: entered promiscuous mode [ 431.174835][T17132] syzkaller0: entered allmulticast mode [ 431.190377][T17132] sch_tbf: burst 12 is lower than device syzkaller0 mtu (1514) ! [ 431.224449][T17132] tipc: Resetting bearer [ 431.234424][T17131] tipc: Resetting bearer [ 431.264633][T17131] tipc: Disabling bearer [ 434.643880][T17181] bond0 (unregistering): (slave veth15): Releasing active interface [ 434.651665][T17181] bond0 (unregistering): (slave veth0_to_bond): Releasing active interface [ 434.657710][T17181] bond0 (unregistering): Released all slaves [ 435.626374][T17202] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3438'. [ 438.880088][T17593] netlink: 'syz.2.3462': attribute type 10 has an invalid length. [ 438.882725][T17593] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3462'. [ 438.885636][T17593] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 438.975389][T17596] lo speed is unknown, defaulting to 1000 [ 439.142839][T17602] bond6: (slave veth0_to_bond): Releasing active interface [ 439.146579][T17602] team0: Port device vlan0 removed [ 439.149102][T17602] bond0: (slave wlan1): Releasing backup interface [ 439.152599][T17602] bond1: (slave veth7): Releasing active interface [ 439.156047][T17602] bond2: (slave bond3): Releasing active interface [ 439.158837][T17602] bond5: (slave geneve2): Releasing active interface [ 439.161747][T17602] bond6: (slave veth11): Releasing active interface [ 439.164917][T17602] bond7: (slave veth13): Releasing active interface [ 439.167330][T17602] bond7: (slave veth13): the permanent HWaddr of slave - 4a:5c:6e:a1:39:a2 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 439.173895][T17602] bond7: (slave vlan2): Releasing active interface [ 439.177713][T17602] bond8: (slave veth15): Releasing active interface [ 439.186268][T17602] netlink: 'syz.0.3464': attribute type 10 has an invalid length. [ 439.207196][T17602] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 439.529951][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.106981][T17628] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3470'. [ 442.677438][T17680] netlink: 'syz.2.3485': attribute type 1 has an invalid length. [ 442.689221][T17680] bond0: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 442.694143][ T8472] bond0: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 442.697694][T17680] 8021q: adding VLAN 0 to HW filter on device bond0 [ 442.709492][T17680] veth17: entered promiscuous mode [ 442.712314][T17680] bond0: (slave veth17): Enslaving as a backup interface with a down link [ 442.806221][ T8459] bond0: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 443.438555][T17702] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3491'. [ 444.717926][T17735] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3503'. [ 446.650180][T17767] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3511'. [ 446.800401][T17771] lo speed is unknown, defaulting to 1000 [ 447.038548][T17781] netlink: 14 bytes leftover after parsing attributes in process `syz.4.3515'. [ 449.120377][T17821] lo speed is unknown, defaulting to 1000 [ 452.009038][T17885] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 452.012958][T17885] bond0 (unregistering): Released all slaves [ 452.074745][T17888] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3538'. [ 452.127022][T17889] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 452.888245][T17894] netlink: 'syz.0.3540': attribute type 1 has an invalid length. [ 452.912483][T17894] bond0: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 452.922248][T17897] wg2: left promiscuous mode [ 452.923780][T17897] wg2: left allmulticast mode [ 452.927317][T17897] vlan0: left promiscuous mode [ 452.932561][T17897] vlan2: left promiscuous mode [ 452.934145][T17897] bond0: left promiscuous mode [ 452.935721][T17897] vlan2: left allmulticast mode [ 452.937511][T17897] bond0: left allmulticast mode [ 452.939293][T17897] veth9: left promiscuous mode [ 452.941267][T17897] bridge3: left promiscuous mode [ 452.942920][T17897] bridge3: left allmulticast mode [ 452.944983][T17897] bridge4: left promiscuous mode [ 452.947281][T17897] bridge4: left allmulticast mode [ 452.950583][T17897] bridge5: left promiscuous mode [ 452.952261][T17897] bridge5: left allmulticast mode [ 452.954943][T17894] 8021q: adding VLAN 0 to HW filter on device bond0 [ 452.956277][ T8480] bond0: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 452.985071][T17894] veth17: entered promiscuous mode [ 452.988198][T17894] bond0: (slave veth17): Enslaving as a backup interface with a down link [ 453.066260][ T8462] bond0: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 454.123125][T17975] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3549'. [ 454.370010][T17978] bond0 (unregistering): Released all slaves [ 454.482224][T17987] netlink: 'syz.4.3553': attribute type 1 has an invalid length. [ 454.564110][T17987] bond0: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 454.575086][ T8468] bond0: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 454.575625][T17987] 8021q: adding VLAN 0 to HW filter on device bond0 [ 454.599776][T17987] veth13: entered promiscuous mode [ 454.602782][T17987] bond0: (slave veth13): Enslaving as a backup interface with a down link [ 454.686099][ T8480] bond0: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 455.583764][T18175] bond4: (slave wlan0): Releasing active interface [ 455.609423][T18175] bond3: (slave veth9): Releasing active interface [ 457.969664][T18224] netlink: 'syz.0.3572': attribute type 1 has an invalid length. [ 457.989614][T18224] bond9: entered promiscuous mode [ 457.991538][T18224] 8021q: adding VLAN 0 to HW filter on device bond9 [ 458.001224][T18224] 8021q: adding VLAN 0 to HW filter on device bond9 [ 458.004358][T18224] bond9: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 458.010533][T18224] bond9: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 458.015352][T18224] bond9: (slave ip6gre1): making interface the new active one [ 458.018193][T18224] ip6gre1: entered promiscuous mode [ 458.020645][T18224] bond9: (slave ip6gre1): Enslaving as an active interface with an up link [ 458.028018][T18221] batman_adv: batadv0: Adding interface: gretap1 [ 458.030748][T18221] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1560. [ 458.039022][T18221] batman_adv: batadv0: Interface activated: gretap1 [ 458.343829][T18237] lo speed is unknown, defaulting to 1000 [ 458.871526][T18256] comedi comedi0: c6xdigio: I/O port conflict (0x4f2b,3) [ 460.404547][T18284] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3589'. [ 460.853466][T18290] lo speed is unknown, defaulting to 1000 [ 461.327188][T18305] netlink: 'syz.0.3602': attribute type 1 has an invalid length. [ 461.360237][T18305] bond10: (slave vxcan3): The slave device specified does not support setting the MAC address [ 461.364192][T18305] bond10: (slave vxcan3): Error -95 calling set_mac_address [ 461.412123][T18309] gretap1: entered promiscuous mode [ 461.415537][T18309] bond10: (slave gretap1): making interface the new active one [ 461.418757][T18309] bond10: (slave gretap1): Enslaving as an active interface with an up link [ 461.546203][T18309] macvlan2: entered promiscuous mode [ 461.547922][T18309] macvlan2: entered allmulticast mode [ 461.552038][T18309] bond10: entered promiscuous mode [ 461.556041][T18309] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 461.563622][T18309] bond10: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 461.570672][T18309] bond10: left promiscuous mode [ 463.218782][T18338] lo speed is unknown, defaulting to 1000 [ 464.062975][T18351] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3607'. [ 464.066922][T18351] batman_adv: batadv0: Interface deactivated: gretap1 [ 464.069973][T18351] batman_adv: batadv0: Removing interface: gretap1 [ 465.132626][T18360] bond0 (unregistering): (slave ip6gretap1): Removing an active aggregator [ 465.140522][T18360] bond0 (unregistering): (slave ip6gretap1): Releasing backup interface [ 465.145812][T18360] bond0 (unregistering): (slave veth13): Releasing backup interface [ 465.150522][T18360] bond0 (unregistering): Released all slaves [ 466.099750][T18385] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3625'. [ 469.096499][T18440] bridge8: left promiscuous mode [ 469.098708][T18440] bridge8: left allmulticast mode [ 469.102490][T18440] veth13: left promiscuous mode [ 469.454074][ T40] audit: type=1326 audit(1755733965.529:892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18424 comm="syz.5.3626" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f38579 code=0x7fc00000 [ 470.966340][ T40] audit: type=1800 audit(1755733967.049:893): pid=18481 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3643" name="SYSV00000000" dev="hugetlbfs" ino=6 res=0 errno=0 [ 471.266102][ T40] audit: type=1804 audit(1755733967.339:894): pid=18489 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.3644" name="bus" dev="tmpfs" ino=3406 res=1 errno=0 [ 472.005559][T18503] /dev/nullb0: Can't open blockdev [ 472.063677][T18508] geneve2: entered promiscuous mode [ 472.065905][T18508] geneve2: entered allmulticast mode [ 472.069262][ T8472] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 472.076500][ T8472] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 472.079777][ T8472] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 472.086435][ T8472] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 473.789507][T18536] netlink: 'syz.5.3658': attribute type 1 has an invalid length. [ 473.833847][T18536] bond0: (slave vxcan3): The slave device specified does not support setting the MAC address [ 473.838152][T18536] bond0: (slave vxcan3): Error -95 calling set_mac_address [ 473.890911][T18541] gretap2: entered promiscuous mode [ 473.913137][T18541] bond0: (slave gretap2): making interface the new active one [ 473.919195][T18541] bond0: (slave gretap2): Enslaving as an active interface with an up link [ 473.956671][T18536] macvlan2: entered promiscuous mode [ 473.959342][T18536] macvlan2: entered allmulticast mode [ 473.962354][T18536] bond0: entered promiscuous mode [ 473.964966][T18536] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 473.974107][T18536] bond0: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap2 [ 473.983105][T18536] bond0: left promiscuous mode [ 478.026115][T18610] netlink: 'syz.4.3672': attribute type 10 has an invalid length. [ 478.292013][T18618] bridge4: left promiscuous mode [ 478.293680][T18618] bridge4: left allmulticast mode [ 478.298420][T18618] veth17: left promiscuous mode [ 479.426706][T18642] delete_channel: no stack [ 480.594662][T18676] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3688'. [ 480.598440][T18676] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3688'. [ 480.611476][ T8472] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 480.614609][ T8472] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 480.617717][ T8472] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 480.621260][ T8472] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 481.183152][T18678] bridge2: left promiscuous mode [ 481.187439][T18678] bridge2: left allmulticast mode [ 481.196898][T18678] tipc: Resetting bearer [ 481.199822][T18678] syzkaller0: left promiscuous mode [ 481.201563][T18678] syzkaller0: left allmulticast mode [ 481.205861][T18678] veth17: left promiscuous mode [ 481.208260][T18678] bond9: left promiscuous mode [ 481.209903][T18678] ip6gre1: left promiscuous mode [ 481.212584][T18678] gretap1: left promiscuous mode [ 482.850071][T18702] rdma_rxe: rxe_newlink: failed to add syz_tun [ 482.856783][T18704] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3699'. [ 482.861045][T18704] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3699'. [ 483.161171][T18720] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 484.613990][ T40] audit: type=1326 audit(1755733980.689:895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18723 comm="syz.0.3704" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be579 code=0x7fc00000 [ 486.684016][T18774] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3717'. [ 486.690199][T18774] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3717'. [ 486.713566][ T8462] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 486.718358][ T8462] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 486.721825][ T8462] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 486.726536][ T8462] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 487.758612][T18228] libceph: connect (1)[c::]:6789 error -22 [ 487.761080][T18228] libceph: mon0 (1)[c::]:6789 connect error [ 487.917886][T18795] ceph: No mds server is up or the cluster is laggy [ 489.634789][T18876] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3734'. [ 489.638828][T18876] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3734'. [ 489.668271][ T8473] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 489.670928][ T8473] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 489.673753][ T8473] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 489.676445][ T8473] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 489.982792][ T54] libceph: connect (1)[c::]:6789 error -101 [ 489.984867][ T54] libceph: mon0 (1)[c::]:6789 connect error [ 489.992844][ T8480] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 489.995659][ T8480] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 489.998735][ T8480] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 490.002106][T18882] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 490.127978][T18878] ceph: No mds server is up or the cluster is laggy [ 491.419995][ T40] audit: type=1326 audit(1755733987.499:896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18891 comm="syz.5.3740" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f38579 code=0x7fc00000 [ 491.996696][ T40] audit: type=1326 audit(1755733988.079:897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18891 comm="syz.5.3740" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f38579 code=0x7fc00000 [ 492.919426][T18930] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3748'. [ 493.594151][T18949] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3753'. [ 496.349112][T18987] geneve2: left promiscuous mode [ 496.350876][T18987] geneve2: left allmulticast mode [ 496.354496][ T8462] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 496.357435][ T8462] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 496.363565][ T8462] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 496.368153][ T8462] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 496.370745][ T8462] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 496.373353][ T8462] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 496.376274][ T8462] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 496.378890][ T8462] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 497.713881][T19024] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3772'. [ 499.789301][T19074] syz.2.3784: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 499.793833][T19074] CPU: 2 UID: 0 PID: 19074 Comm: syz.2.3784 Not tainted syzkaller #0 PREEMPT(full) [ 499.793850][T19074] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 499.793857][T19074] Call Trace: [ 499.793862][T19074] [ 499.793867][T19074] dump_stack_lvl+0x16c/0x1f0 [ 499.793905][T19074] warn_alloc+0x248/0x3a0 [ 499.793923][T19074] ? __pfx_warn_alloc+0x10/0x10 [ 499.793935][T19074] ? __pfx_stack_trace_save+0x10/0x10 [ 499.793950][T19074] ? kasan_save_stack+0x42/0x60 [ 499.793964][T19074] ? kasan_save_stack+0x33/0x60 [ 499.793975][T19074] ? kasan_save_track+0x14/0x30 [ 499.793987][T19074] ? xskq_create+0x52/0x1d0 [ 499.793998][T19074] ? xsk_setsockopt+0x74e/0x9a0 [ 499.794008][T19074] ? do_sock_setsockopt+0xf3/0x1d0 [ 499.794024][T19074] ? xskq_create+0xfb/0x1d0 [ 499.794034][T19074] __vmalloc_node_range_noprof+0xff5/0x14b0 [ 499.794047][T19074] ? xskq_create+0xfb/0x1d0 [ 499.794058][T19074] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 499.794071][T19074] ? xskq_create+0xfb/0x1d0 [ 499.794081][T19074] vmalloc_user_noprof+0x9e/0xe0 [ 499.794090][T19074] ? xskq_create+0xfb/0x1d0 [ 499.794101][T19074] xskq_create+0xfb/0x1d0 [ 499.794111][T19074] xsk_setsockopt+0x74e/0x9a0 [ 499.794121][T19074] ? __pfx_aa_sk_perm+0x10/0x10 [ 499.794135][T19074] ? __pfx_xsk_setsockopt+0x10/0x10 [ 499.794146][T19074] ? aa_sock_opt_perm+0xfd/0x1c0 [ 499.794156][T19074] ? __pfx_xsk_setsockopt+0x10/0x10 [ 499.794166][T19074] do_sock_setsockopt+0xf3/0x1d0 [ 499.794181][T19074] __sys_setsockopt+0x120/0x1a0 [ 499.794194][T19074] __ia32_sys_setsockopt+0xbc/0x160 [ 499.794207][T19074] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 499.794222][T19074] __do_fast_syscall_32+0x7c/0x3a0 [ 499.794236][T19074] do_fast_syscall_32+0x32/0x80 [ 499.794249][T19074] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 499.794263][T19074] RIP: 0023:0xf707e579 [ 499.794271][T19074] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 499.794281][T19074] RSP: 002b:00000000f546e55c EFLAGS: 00000296 ORIG_RAX: 000000000000016e [ 499.794297][T19074] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000000011b [ 499.794303][T19074] RDX: 0000000000000006 RSI: 0000000080000000 RDI: 0000000000000004 [ 499.794310][T19074] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 499.794317][T19074] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 499.794324][T19074] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 499.794335][T19074] [ 499.794339][T19074] Mem-Info: [ 499.869886][T19077] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3784'. [ 499.899635][T19074] active_anon:11082 inactive_anon:6835 isolated_anon:0 [ 499.899635][T19074] active_file:10868 inactive_file:8008 isolated_file:0 [ 499.899635][T19074] unevictable:1768 dirty:699 writeback:0 [ 499.899635][T19074] slab_reclaimable:7631 slab_unreclaimable:74329 [ 499.899635][T19074] mapped:24859 shmem:16930 pagetables:1571 [ 499.899635][T19074] sec_pagetables:326 bounce:0 [ 499.899635][T19074] kernel_misc_reclaimable:0 [ 499.899635][T19074] free:27977 free_pcp:16972 free_cma:0 [ 499.925905][T19074] Node 0 active_anon:116kB inactive_anon:20kB active_file:0kB inactive_file:8kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:5724kB dirty:0kB writeback:0kB shmem:3740kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7408kB pagetables:1312kB sec_pagetables:1124kB all_unreclaimable? yes Balloon:0kB [ 499.941812][T19074] Node 1 active_anon:44412kB inactive_anon:27320kB active_file:43472kB inactive_file:32024kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:93812kB dirty:2796kB writeback:0kB shmem:63980kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7280kB pagetables:5072kB sec_pagetables:180kB all_unreclaimable? no Balloon:0kB [ 499.969896][T19074] Node 0 DMA free:2092kB boost:0kB min:760kB low:948kB high:1136kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:176kB local_pcp:4kB free_cma:0kB [ 499.979703][T19074] lowmem_reserve[]: 0 288 288 288 288 [ 499.981558][T19074] Node 0 DMA32 free:15816kB boost:0kB min:13220kB low:16524kB high:19828kB reserved_highatomic:4096KB free_highatomic:920KB active_anon:116kB inactive_anon:20kB active_file:0kB inactive_file:4kB unevictable:3536kB writepending:0kB present:1032196kB managed:295148kB mlocked:0kB bounce:0kB free_pcp:11072kB local_pcp:3624kB free_cma:0kB [ 500.002682][T19074] lowmem_reserve[]: 0 0 0 0 0 [ 500.009501][T19074] Node 1 DMA32 free:96800kB boost:0kB min:47140kB low:58924kB high:70708kB reserved_highatomic:2048KB free_highatomic:2048KB active_anon:43980kB inactive_anon:27320kB active_file:43472kB inactive_file:31924kB unevictable:3536kB writepending:2796kB present:1048432kB managed:948220kB mlocked:0kB bounce:0kB free_pcp:53992kB local_pcp:8308kB free_cma:0kB [ 500.019998][T19074] lowmem_reserve[]: 0 0 0 0 0 [ 500.021634][T19074] Node 0 DMA: 3*4kB (UM) 0*8kB 6*16kB (U) 6*32kB (UM) 2*64kB (UM) 1*128kB (M) 0*256kB 1*512kB (M) 1*1024kB (M) 0*2048kB 0*4096kB = 2092kB [ 500.026267][T19074] Node 0 DMA32: 302*4kB (UH) 114*8kB (UEH) 62*16kB (UEH) 37*32kB (UMH) 32*64kB (UEH) 20*128kB (UMEH) 3*256kB (U) 4*512kB (UM) 2*1024kB (UM) 1*2048kB (M) 0*4096kB = 15816kB [ 500.031895][T19074] Node 1 DMA32: 988*4kB (UM) 983*8kB (UME) 288*16kB (UME) 283*32kB (UME) 400*64kB (UME) 103*128kB (UME) 69*256kB (UM) 15*512kB (UM) 3*1024kB (M) 2*2048kB (UH) 0*4096kB = 96776kB [ 500.037900][T19074] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 500.040948][T19074] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 500.044099][T19074] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 500.050427][T19074] Node 1 hugepages_total=4 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 500.056095][T19074] 36571 total pagecache pages [ 500.057714][T19074] 814 pages in swap cache [ 500.066147][T19074] Free swap = 104640kB [ 500.068069][T19074] Total swap = 124996kB [ 500.069402][T19074] 524155 pages RAM [ 500.070651][T19074] 0 pages HighMem/MovableOnly [ 500.072143][T19074] 209473 pages reserved [ 500.073472][T19074] 0 pages cma reserved [ 500.137511][T19085] macvlan0: entered promiscuous mode [ 500.139308][T19085] netlink: 'syz.5.3787': attribute type 1 has an invalid length. [ 500.141863][T19085] netlink: 'syz.5.3787': attribute type 2 has an invalid length. [ 500.174877][T19095] macvlan0: left promiscuous mode [ 500.212925][T19095] gretap2: left promiscuous mode [ 500.218871][ T8462] netdevsim netdevsim5 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 500.221616][ T8462] netdevsim netdevsim5 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 500.224242][ T8462] netdevsim netdevsim5 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 500.227219][ T8462] netdevsim netdevsim5 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 500.496057][T18228] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 500.647677][T18228] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 500.651443][T18228] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 500.654835][T18228] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 500.657992][T18228] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 500.662790][T18228] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 500.665654][T18228] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 500.669110][T18228] usb 5-1: Manufacturer: syz [ 500.671966][T18228] usb 5-1: config 0 descriptor?? [ 500.916073][T18228] rc_core: IR keymap rc-hauppauge not found [ 500.918008][T18228] Registered IR keymap rc-empty [ 500.919697][T18228] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 500.936075][T18228] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 500.958844][T18228] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/rc/rc0 [ 500.964515][T18228] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/rc/rc0/input25 [ 500.979326][T18228] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 500.985741][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.206148][T18228] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 501.226045][T18228] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 501.246165][T18228] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 501.266222][T18228] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 501.286260][T18228] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 501.306087][T18228] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 501.326210][T18228] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 501.346116][T18228] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 501.376086][T18228] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 501.406469][T18228] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 501.409373][T18228] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 501.414022][T18228] usb 5-1: USB disconnect, device number 10 [ 502.305190][T19125] lo speed is unknown, defaulting to 1000 [ 502.402473][T19128] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3793'. [ 502.405425][T19128] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3793'. [ 503.367503][T18227] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 503.526065][T18227] usb 5-1: Using ep0 maxpacket: 8 [ 503.531541][T18227] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 503.536579][T18227] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 503.541499][T18227] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 503.545396][T18227] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 503.552142][T18227] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 503.555916][T18227] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 503.768737][T18227] usb 5-1: GET_CAPABILITIES returned 0 [ 503.770575][T18227] usbtmc 5-1:16.0: can't read capabilities [ 503.973709][ T40] audit: type=1326 audit(1755734000.049:898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19135 comm="syz.0.3798" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 503.981114][ T40] audit: type=1326 audit(1755734000.049:899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19135 comm="syz.0.3798" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 503.987885][ T40] audit: type=1326 audit(1755734000.049:900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19135 comm="syz.0.3798" exe="/syz-executor" sig=0 arch=40000003 syscall=144 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 503.994929][ T40] audit: type=1326 audit(1755734000.049:901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19135 comm="syz.0.3798" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 504.002027][ T40] audit: type=1326 audit(1755734000.049:902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19135 comm="syz.0.3798" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 504.009086][ T40] audit: type=1326 audit(1755734000.049:903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19135 comm="syz.0.3798" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 504.016676][ T40] audit: type=1326 audit(1755734000.049:904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19135 comm="syz.0.3798" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 504.025492][ T40] audit: type=1326 audit(1755734000.049:905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19135 comm="syz.0.3798" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 504.033441][ T40] audit: type=1326 audit(1755734000.049:906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19135 comm="syz.0.3798" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 504.068951][T19149] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3802'. [ 504.845823][ T40] audit: type=1326 audit(1755734000.919:907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19158 comm="syz.5.3805" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f38579 code=0x7ffc0000 [ 506.156235][T18227] usb 5-1: USB disconnect, device number 11 [ 507.733057][T19223] tipc: Enabled bearer , priority 10 [ 507.737207][T19223] tipc: Enabling of bearer rejected, failed to enable media [ 508.116437][T19234] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3823'. [ 508.119302][T19234] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3823'. [ 510.978532][T19263] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3829'. [ 510.987369][ T8473] Bluetooth: hci4: Frame reassembly failed (-84) [ 510.989451][T19274] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 510.991554][ T8473] Bluetooth: hci4: Frame reassembly failed (-84) [ 511.589325][T19286] netlink: 'syz.2.3837': attribute type 27 has an invalid length. [ 511.625808][T19286] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 513.046137][ T62] Bluetooth: hci4: command 0x1003 tx timeout [ 513.048577][ T5337] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 513.586148][T19324] batadv_slave_0: entered promiscuous mode [ 515.157045][T19346] usb usb8: usbfs: process 19346 (syz.0.3851) did not claim interface 0 before use [ 515.277001][T19350] netlink: 'syz.4.3854': attribute type 10 has an invalid length. [ 515.569540][T19354] bond0: entered promiscuous mode [ 515.571266][T19354] bond0: entered allmulticast mode [ 515.573030][T19354] 8021q: adding VLAN 0 to HW filter on device bond0 [ 517.270161][T19405] netlink: 'syz.0.3865': attribute type 10 has an invalid length. [ 518.409879][T19426] lo speed is unknown, defaulting to 1000 [ 519.732206][T18227] hid_parser_main: 5 callbacks suppressed [ 519.732219][T18227] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 519.797330][T18227] hid-generic 0000:0000:0000.000C: hidraw1: HID v0.00 Device [syz1] on syz0 [ 520.276087][T18227] usb 10-1: new high-speed USB device number 17 using dummy_hcd [ 520.436052][T18227] usb 10-1: Using ep0 maxpacket: 32 [ 520.439396][T18227] usb 10-1: config index 0 descriptor too short (expected 29220, got 36) [ 520.442562][T18227] usb 10-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 520.445364][T18227] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 520.448309][T18227] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 520.451356][T18227] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 520.454480][T18227] usb 10-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 520.458626][T18227] usb 10-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 520.462084][T18227] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 520.466561][T18227] usb 10-1: config 0 descriptor?? [ 520.684466][T18227] usblp 10-1:0.0: usblp0: USB Bidirectional printer dev 17 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 520.692301][T18227] usb 10-1: USB disconnect, device number 17 [ 520.695106][T18227] usblp0: removed [ 520.739725][T19467] 9p: Unknown Cache mode or invalid value fscach [ 520.817890][T19468] bridge_slave_0: default FDB implementation only supports local addresses [ 521.126632][ T54] usb 10-1: new high-speed USB device number 18 using dummy_hcd [ 521.276115][ T54] usb 10-1: Using ep0 maxpacket: 32 [ 521.279292][ T54] usb 10-1: config index 0 descriptor too short (expected 29220, got 36) [ 521.281862][ T54] usb 10-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 521.284745][ T54] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 521.288127][ T54] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 521.291800][ T54] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 521.295055][ T54] usb 10-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 521.299181][ T54] usb 10-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 521.302061][ T54] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 521.305403][ T54] usb 10-1: config 0 descriptor?? [ 521.512831][ T54] usblp 10-1:0.0: usblp0: USB Bidirectional printer dev 18 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 521.713725][ T54] usb 10-1: USB disconnect, device number 18 [ 521.717512][ T54] usblp0: removed [ 521.753380][T19478] netlink: 'syz.4.3886': attribute type 4 has an invalid length. [ 522.754838][T19497] afs: Unknown parameter '' [ 523.947433][T19517] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 524.095655][T19521] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2147484288 (4294968576 ns) > initial count (34 ns). Using initial count to start timer. [ 524.217183][T19525] netlink: 'syz.4.3898': attribute type 2 has an invalid length. [ 524.219740][T19525] netlink: 'syz.4.3898': attribute type 11 has an invalid length. [ 524.222375][T19525] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3898'. [ 525.423557][T19533] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3900'. [ 525.566863][T19544] cdrom: dropping to single frame dma [ 526.034264][T19556] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 526.038234][T19556] overlayfs: missing 'lowerdir' [ 526.203151][T19561] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3908'. [ 526.456084][T18227] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 526.616122][T18227] usb 5-1: Using ep0 maxpacket: 8 [ 526.618956][T18227] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 526.622004][T18227] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 526.625065][T18227] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 526.628214][T18227] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 526.632258][T18227] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 526.635123][T18227] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 526.856530][T18227] usb 5-1: GET_CAPABILITIES returned 0 [ 526.858451][T18227] usbtmc 5-1:16.0: can't read capabilities [ 527.153464][T18227] usb 5-1: USB disconnect, device number 12 [ 527.437353][T19588] netlink: 'syz.4.3916': attribute type 39 has an invalid length. [ 529.091851][T19632] lo speed is unknown, defaulting to 1000 [ 529.140213][T19635] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3925'. [ 529.192040][T19641] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3928'. [ 529.506621][T19649] lo speed is unknown, defaulting to 1000 [ 533.157536][T19710] netlink: 2048 bytes leftover after parsing attributes in process `syz.5.3950'. [ 533.160807][T19710] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3950'. [ 534.671100][T19724] netlink: 17 bytes leftover after parsing attributes in process `syz.0.3945'. [ 534.675794][T19724] netlink: zone id is out of range [ 534.679328][T19724] netlink: zone id is out of range [ 534.681404][T19724] netlink: zone id is out of range [ 534.683536][T19724] netlink: zone id is out of range [ 534.685737][T19724] netlink: zone id is out of range [ 534.688071][T19724] netlink: zone id is out of range [ 534.690144][T19724] netlink: zone id is out of range [ 534.691913][T19724] netlink: zone id is out of range [ 534.693962][T19724] netlink: zone id is out of range [ 534.695632][T19724] netlink: zone id is out of range [ 535.140274][T19742] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3952'. [ 535.250459][T19749] lo speed is unknown, defaulting to 1000 [ 535.492082][T19762] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 535.661816][T19769] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3961'. [ 535.665596][T19769] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3961'. [ 537.734700][ T5337] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 537.832830][T19800] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3970'. [ 537.860787][T19800] hsr_slave_1 (unregistering): left promiscuous mode [ 537.860931][T19802] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3971'. [ 537.866696][T19802] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3971'. [ 537.880336][T19802] netlink: 'syz.0.3971': attribute type 10 has an invalid length. [ 537.883752][T19802] bridge0: port 1(team0) entered blocking state [ 537.886959][T19802] bridge0: port 1(team0) entered disabled state [ 537.889167][T19802] team0: entered allmulticast mode [ 538.726683][T19839] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3982'. [ 538.786557][T19837] bond5: (slave veth0_to_bond): Releasing active interface [ 538.790470][T19837] bond5: (slave veth11): Releasing active interface [ 539.451909][T18228] libceph: connect (1)[c::]:6789 error -22 [ 539.454475][T18228] libceph: mon0 (1)[c::]:6789 connect error [ 539.612202][T19847] ceph: No mds server is up or the cluster is laggy [ 540.463872][T19880] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(11) [ 540.466275][T19880] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 540.470116][T19880] vhci_hcd vhci_hcd.0: Device attached [ 540.656033][T14088] vhci_hcd: vhci_device speed not set [ 540.726144][T14088] usb 47-1: new high-speed USB device number 2 using vhci_hcd [ 541.167910][T19882] vhci_hcd: connection reset by peer [ 541.169771][ T8473] vhci_hcd: stop threads [ 541.171635][ T8473] vhci_hcd: release socket [ 541.173791][ T8473] vhci_hcd: disconnect device [ 542.267769][T19920] netlink: 5 bytes leftover after parsing attributes in process `syz.2.4002'. [ 542.286126][T19920] 0ªî{X¹¦: renamed from gretap0 [ 542.288734][T19920] 0ªî{X¹¦: entered allmulticast mode [ 542.296473][T19920] net_ratelimit: 73 callbacks suppressed [ 542.296486][T19920] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 542.745751][T19927] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4004'. [ 542.933252][T19929] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 543.669024][ T40] kauditd_printk_skb: 47 callbacks suppressed [ 543.669083][ T40] audit: type=1326 audit(1755734039.749:955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19949 comm="syz.2.4012" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf707e579 code=0x0 [ 544.448762][ T6055] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 544.597637][ T6055] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 544.603473][ T6055] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 544.608163][ T6055] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 544.616062][ T6055] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 544.619468][ T6055] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 544.627537][ T6055] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 544.630829][ T6055] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 544.633758][ T6055] usb 5-1: Product: syz [ 544.635419][ T6055] usb 5-1: Manufacturer: syz [ 544.640044][ T6055] cdc_wdm 5-1:1.0: skipping garbage [ 544.641762][ T6055] cdc_wdm 5-1:1.0: skipping garbage [ 544.643967][ T6055] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 544.645881][ T6055] cdc_wdm 5-1:1.0: Unknown control protocol [ 544.918057][ T6055] usb 5-1: USB disconnect, device number 13 [ 545.316119][T18228] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 545.358159][T19972] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4018'. [ 545.361388][T19972] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4018'. [ 545.446087][T18228] usb 5-1: device descriptor read/64, error -71 [ 545.686030][T18228] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 545.816120][T18228] usb 5-1: device descriptor read/64, error -71 [ 545.836066][T14088] vhci_hcd: vhci_device speed not set [ 545.926643][T18228] usb usb5-port1: attempt power cycle [ 546.024874][ T8141] libceph: connect (1)[c::]:6789 error -101 [ 546.027779][ T8141] libceph: mon0 (1)[c::]:6789 connect error [ 546.266023][T18228] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 546.286614][ T8141] libceph: connect (1)[c::]:6789 error -101 [ 546.286801][T18228] usb 5-1: device descriptor read/8, error -71 [ 546.289600][ T8141] libceph: mon0 (1)[c::]:6789 connect error [ 546.526076][T18228] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 546.546575][T18228] usb 5-1: device descriptor read/8, error -71 [ 546.656277][T18228] usb usb5-port1: unable to enumerate USB device [ 546.691497][T19985] ceph: No mds server is up or the cluster is laggy [ 546.948847][T20001] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(7) [ 546.951635][T20001] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 546.955084][T20001] vhci_hcd vhci_hcd.0: Device attached [ 547.162454][T20007] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4027'. [ 547.206037][ T8141] usb 47-1: new low-speed USB device number 3 using vhci_hcd [ 547.322223][T20010] bochs-drm 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 547.609567][T20002] vhci_hcd: connection reset by peer [ 547.612004][ T8473] vhci_hcd: stop threads [ 547.613594][ T8473] vhci_hcd: release socket [ 547.615227][ T8473] vhci_hcd: disconnect device [ 548.528850][T20030] 9p: Unknown Cache mode or invalid value fscach [ 548.550596][T20033] bridge_slave_0: default FDB implementation only supports local addresses [ 548.596592][T20028] lo speed is unknown, defaulting to 1000 [ 549.174075][ T62] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 549.210688][T20042] kvm: pic: non byte read [ 549.213115][T20042] kvm: pic: non byte write [ 549.768433][T14088] IPVS: starting estimator thread 0... [ 549.886053][T20058] IPVS: using max 57 ests per chain, 136800 per kthread [ 549.907021][T20065] syz.4.4042 (20065): attempted to duplicate a private mapping with mremap. This is not supported. [ 550.156205][ T62] Bluetooth: hci1: unexpected event for opcode 0x200d [ 550.295810][T20076] openvswitch: netlink: Key type 29 is not supported [ 550.649120][ T40] audit: type=1326 audit(1755734046.729:956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20081 comm="syz.4.4049" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f34579 code=0x7ffc0000 [ 550.658287][ T40] audit: type=1326 audit(1755734046.729:957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20081 comm="syz.4.4049" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f34579 code=0x7ffc0000 [ 550.667296][ T40] audit: type=1326 audit(1755734046.729:958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20081 comm="syz.4.4049" exe="/syz-executor" sig=0 arch=40000003 syscall=393 compat=1 ip=0xf7f34579 code=0x7ffc0000 [ 550.676492][ T40] audit: type=1326 audit(1755734046.729:959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20081 comm="syz.4.4049" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f34579 code=0x7ffc0000 [ 550.696134][ T40] audit: type=1326 audit(1755734046.729:960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20081 comm="syz.4.4049" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f34579 code=0x7ffc0000 [ 550.703469][ T40] audit: type=1326 audit(1755734046.729:961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20081 comm="syz.4.4049" exe="/syz-executor" sig=0 arch=40000003 syscall=394 compat=1 ip=0xf7f34579 code=0x7ffc0000 [ 550.722632][ T40] audit: type=1326 audit(1755734046.729:962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20081 comm="syz.4.4049" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f34579 code=0x7ffc0000 [ 550.729993][ T40] audit: type=1326 audit(1755734046.729:963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20081 comm="syz.4.4049" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f34579 code=0x7ffc0000 [ 550.737227][ T40] audit: type=1326 audit(1755734046.729:964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20081 comm="syz.4.4049" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f34579 code=0x7ffc0000 [ 550.743733][ T40] audit: type=1326 audit(1755734046.729:965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20081 comm="syz.4.4049" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f34579 code=0x7ffc0000 [ 551.629422][ T8459] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 551.633664][ T8459] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 551.701110][T20115] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4057'. [ 552.317119][ T8141] vhci_hcd: vhci_device speed not set [ 552.427715][T20132] netlink: 'syz.2.4060': attribute type 1 has an invalid length. [ 552.453280][T20132] 8021q: adding VLAN 0 to HW filter on device bond6 [ 552.456194][T20132] bond5: (slave bond6): making interface the new active one [ 552.458837][T20132] bond5: (slave bond6): Enslaving as an active interface with an up link [ 552.475927][T20132] bond5: (slave gretap0): Enslaving as a backup interface with an up link [ 552.487842][T20132] 8021q: adding VLAN 0 to HW filter on device bond5 [ 554.753206][T20178] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 554.759651][T20178] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 554.765439][T20178] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 556.610578][T20210] 9pnet_virtio: no channels available for device € [ 556.990645][T20217] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4082'. [ 557.267903][T20223] sctp: [Deprecated]: syz.5.4085 (pid 20223) Use of struct sctp_assoc_value in delayed_ack socket option. [ 557.267903][T20223] Use struct sctp_sack_info instead [ 557.719838][T20238] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4088'. [ 558.486055][ T62] Bluetooth: hci3: command 0x0c1a tx timeout [ 558.553691][T20255] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4099'. [ 558.564250][T20255] : entered promiscuous mode [ 558.851146][T20258] bridge_slave_0: default FDB implementation only supports local addresses [ 558.943248][T20257] 9p: Unknown Cache mode or invalid value fscach [ 559.253831][ T40] kauditd_printk_skb: 3 callbacks suppressed [ 559.253843][ T40] audit: type=1800 audit(1755734055.329:969): pid=20260 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.4093" name="bus" dev="overlay" ino=2582 res=0 errno=0 [ 559.374601][T20262] tipc: Enabled bearer , priority 0 [ 559.379139][T20262] syzkaller0: entered promiscuous mode [ 559.382667][T20262] syzkaller0: entered allmulticast mode [ 559.394471][T20262] tipc: Resetting bearer [ 559.403491][T20261] tipc: Resetting bearer [ 559.407289][T20261] tipc: Disabling bearer [ 559.816875][T20278] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 559.819503][T20278] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 559.822968][T20278] vhci_hcd vhci_hcd.0: Device attached [ 560.175561][ T8141] usb 37-1: new low-speed USB device number 2 using vhci_hcd [ 560.449418][T20279] vhci_hcd: connection reset by peer [ 560.451353][ T8473] vhci_hcd: stop threads [ 560.452723][ T8473] vhci_hcd: release socket [ 560.454427][ T8473] vhci_hcd: disconnect device [ 560.716338][T20298] could not allocate digest TFM handle cryptd(blake2b-160) [ 561.619023][T20318] 9p: Unknown Cache mode or invalid value fscach [ 561.777722][T20318] bridge_slave_0: default FDB implementation only supports local addresses [ 562.455909][T20327] bond0 (unregistering): (slave ip6gretap1): Removing an active aggregator [ 562.460212][T20327] bond0 (unregistering): (slave ip6gretap1): Releasing backup interface [ 562.464448][T20327] bond0 (unregistering): (slave veth17): Releasing backup interface [ 562.467992][T20327] bond0 (unregistering): Released all slaves [ 562.880513][ T5337] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 563.357899][T20340] Process accounting resumed [ 564.969027][T20366] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4123'. [ 564.972495][T20366] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4123'. [ 564.988244][ T40] audit: type=1326 audit(2000000001.989:970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20365 comm="syz.5.4123" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f38579 code=0x0 [ 565.019606][T20370] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 565.040906][T20373] netlink: 'syz.5.4123': attribute type 10 has an invalid length. [ 565.160463][T20374] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4124'. [ 565.276090][ T8141] vhci_hcd: vhci_device speed not set [ 566.285878][T20389] could not allocate digest TFM handle cryptd(blake2b-160) [ 566.607848][T20404] lo speed is unknown, defaulting to 1000 [ 567.713236][T20415] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 567.716173][T20415] UDF-fs: Scanning with blocksize 2048 failed [ 567.719258][T20415] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 567.722073][T20415] UDF-fs: Scanning with blocksize 4096 failed [ 568.431845][T20433] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9) [ 568.434903][T20433] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 568.438415][T20433] vhci_hcd vhci_hcd.0: Device attached [ 568.806281][ T54] usb 37-1: new high-speed USB device number 3 using vhci_hcd [ 569.193811][T20434] vhci_hcd: connection reset by peer [ 569.196780][ T8500] vhci_hcd: stop threads [ 569.198395][ T8500] vhci_hcd: release socket [ 569.200459][ T8500] vhci_hcd: disconnect device [ 569.958208][T20453] 9pnet_virtio: no channels available for device € [ 571.567805][T20468] bond0 (unregistering): (slave gretap2): Releasing active interface [ 571.571802][T20468] bond0 (unregistering): Released all slaves [ 571.583331][T20466] lo speed is unknown, defaulting to 1000 [ 572.515011][T20481] netlink: 'syz.5.4151': attribute type 10 has an invalid length. [ 572.518858][T20481] rdma_rxe: rxe_newlink: failed to add syz_tun [ 573.620099][T20505] netlink: zone id is out of range [ 573.622316][T20505] netlink: zone id is out of range [ 573.624707][T20505] netlink: zone id is out of range [ 573.627128][T20505] netlink: zone id is out of range [ 573.628888][T20505] netlink: zone id is out of range [ 573.630983][T20505] netlink: zone id is out of range [ 573.633174][T20505] netlink: zone id is out of range [ 573.635398][T20505] netlink: zone id is out of range [ 573.641044][T20505] netlink: zone id is out of range [ 573.643330][T20505] netlink: zone id is out of range [ 573.646932][T20504] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4158'. [ 573.673375][T20510] lo speed is unknown, defaulting to 1000 [ 573.916026][ T54] vhci_hcd: vhci_device speed not set [ 574.909918][ T40] audit: type=1326 audit(2000000011.909:971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20529 comm="syz.0.4162" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 574.918387][ T40] audit: type=1326 audit(2000000011.909:972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20529 comm="syz.0.4162" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 574.925858][ T40] audit: type=1326 audit(2000000011.909:973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20529 comm="syz.0.4162" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf70be5a7 code=0x7ffc0000 [ 574.933980][ T40] audit: type=1326 audit(2000000011.909:974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20529 comm="syz.0.4162" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 574.941224][ T40] audit: type=1326 audit(2000000011.909:975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20529 comm="syz.0.4162" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 574.948356][ T40] audit: type=1326 audit(2000000011.909:976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20529 comm="syz.0.4162" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf70be5a7 code=0x7ffc0000 [ 574.955551][ T40] audit: type=1326 audit(2000000011.909:977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20529 comm="syz.0.4162" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 574.962271][ T40] audit: type=1326 audit(2000000011.909:978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20529 comm="syz.0.4162" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 574.968921][ T40] audit: type=1326 audit(2000000011.909:979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20529 comm="syz.0.4162" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf70be5a7 code=0x7ffc0000 [ 574.976402][ T40] audit: type=1326 audit(2000000011.909:980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20529 comm="syz.0.4162" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 575.330738][T20547] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4165'. [ 575.627243][T20553] netlink: 'syz.5.4168': attribute type 2 has an invalid length. [ 575.629653][T20553] netlink: 'syz.5.4168': attribute type 11 has an invalid length. [ 575.632150][T20553] netlink: 132 bytes leftover after parsing attributes in process `syz.5.4168'. [ 576.213034][T20564] ------------[ cut here ]------------ [ 576.214840][T20564] kernfs: can not remove 'bind', no directory [ 576.216986][T20564] WARNING: CPU: 1 PID: 20564 at fs/kernfs/dir.c:1706 kernfs_remove_by_name_ns+0xff/0x110 [ 576.220004][T20564] Modules linked in: [ 576.221534][T20564] CPU: 1 UID: 0 PID: 20564 Comm: syz.0.4170 Not tainted syzkaller #0 PREEMPT(full) [ 576.227062][T20564] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 576.231312][T20564] RIP: 0010:kernfs_remove_by_name_ns+0xff/0x110 [ 576.233957][T20564] Code: 48 89 df 31 db e8 61 a2 ff ff 48 89 ef e8 59 0c 37 ff eb b1 e8 42 7d 5b ff 90 48 c7 c7 80 56 c3 8b 4c 89 e6 e8 82 70 1a ff 90 <0f> 0b 90 90 eb b4 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 [ 576.241158][T20564] RSP: 0018:ffffc9000c587788 EFLAGS: 00010286 [ 576.243719][T20564] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffc9000cfb1000 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 576.246645][T20564] RDX: 0000000000080000 RSI: ffffffff817a02d5 RDI: 0000000000000001 [ 576.250113][T20564] RBP: ffffffff8f503ba0 R08: 0000000000000001 R09: 0000000000000000 [ 576.253200][T20564] R10: 0000000000000001 R11: 203a73666e72656b R12: ffffffff8c426de0 [ 576.256791][T20564] R13: 0000000000000000 R14: 0000000000000002 R15: ffff88804ff1c120 [ 576.260469][T20564] FS: 0000000000000000(0000) GS:ffff8880975c4000(0063) knlGS:00000000f546cb40 [ 576.263897][T20564] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 576.266777][T20564] CR2: 00000000f737719c CR3: 000000006e3a6000 CR4: 0000000000352ef0 [ 576.269854][T20564] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 576.272707][T20564] DR3: 0000000000000006 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 576.276068][T20564] Call Trace: [ 576.277224][T20564] [ 576.278177][T20564] driver_remove_file+0x4a/0x60 [ 576.279827][T20564] bus_remove_driver+0x224/0x2c0 [ 576.281925][T20564] driver_unregister+0x76/0xb0 [ 576.283904][T20564] comedi_device_detach_locked+0x12c/0xa50 [ 576.286413][T20564] ? bpf_lsm_capable+0x9/0x10 [ 576.288384][T20564] ? security_capable+0x7e/0x260 [ 576.290399][T20564] do_devconfig_ioctl+0x555/0x710 [ 576.292468][T20564] ? __mutex_lock+0x1c5/0x1060 [ 576.294425][T20564] ? __pfx_do_devconfig_ioctl+0x10/0x10 [ 576.296678][T20564] ? rcu_is_watching+0x12/0xc0 [ 576.298584][T20564] ? trace_sched_exit_tp+0xd1/0x120 [ 576.300761][T20564] ? __schedule+0x11a3/0x5de0 [ 576.302648][T20564] ? tomoyo_path_number_perm+0x470/0x580 [ 576.305107][T20564] comedi_unlocked_ioctl+0x165d/0x2f00 [ 576.307456][T20564] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 576.309890][T20564] ? __pfx___schedule+0x10/0x10 [ 576.311883][T20564] ? rcu_is_watching+0x12/0xc0 [ 576.313742][T20564] ? trace_irq_enable.constprop.0+0xd4/0x120 [ 576.316182][T20564] ? tomoyo_path_number_perm+0x295/0x580 [ 576.318425][T20564] ? rcu_is_watching+0x12/0xc0 [ 576.320339][T20564] ? lock_release+0x201/0x2f0 [ 576.322239][T20564] ? tomoyo_path_number_perm+0x18d/0x580 [ 576.324416][T20564] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 576.326882][T20564] comedi_compat_ioctl+0x1d0/0x990 [ 576.328981][T20564] ? __pfx_comedi_compat_ioctl+0x10/0x10 [ 576.331298][T20564] ? audit_log_end+0x14a/0x2b0 [ 576.333242][T20564] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 576.335535][T20564] ? do_vfs_ioctl+0x128/0x14f0 [ 576.337496][T20564] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 576.339512][T20564] ? rcu_is_watching+0x12/0xc0 [ 576.341429][T20564] ? __fget_files+0x204/0x3c0 [ 576.343312][T20564] ? hook_file_ioctl_common+0x145/0x410 [ 576.345466][T20564] ? __fget_files+0x20e/0x3c0 [ 576.347438][T20564] ? __ia32_compat_sys_openat+0xf0/0x210 [ 576.349677][T20564] ? __pfx_comedi_compat_ioctl+0x10/0x10 [ 576.351931][T20564] __ia32_compat_sys_ioctl+0x23f/0x370 [ 576.354119][T20564] __do_fast_syscall_32+0x7c/0x3a0 [ 576.356286][T20564] do_fast_syscall_32+0x32/0x80 [ 576.358252][T20564] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 576.360752][T20564] RIP: 0023:0xf70be579 [ 576.362379][T20564] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 576.370317][T20564] RSP: 002b:00000000f546c55c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 576.373658][T20564] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000040946400 [ 576.376988][T20564] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 576.380190][T20564] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 576.383473][T20564] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 576.393019][T20564] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 576.396217][T20564] [ 576.397459][T20564] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 576.399955][T20564] CPU: 1 UID: 0 PID: 20564 Comm: syz.0.4170 Not tainted syzkaller #0 PREEMPT(full) [ 576.403674][T20564] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 576.407889][T20564] Call Trace: [ 576.409249][T20564] [ 576.410449][T20564] dump_stack_lvl+0x3d/0x1f0 [ 576.412314][T20564] vpanic+0x6e8/0x7a0 [ 576.413947][T20564] ? __pfx_vpanic+0x10/0x10 [ 576.415774][T20564] ? kernfs_remove_by_name_ns+0xff/0x110 [ 576.417997][T20564] panic+0xca/0xd0 [ 576.419522][T20564] ? __pfx_panic+0x10/0x10 [ 576.421336][T20564] check_panic_on_warn+0xab/0xb0 [ 576.423361][T20564] __warn+0xf6/0x3c0 [ 576.424973][T20564] ? kernfs_remove_by_name_ns+0xff/0x110 [ 576.427252][T20564] report_bug+0x3c3/0x580 [ 576.428985][T20564] ? kernfs_remove_by_name_ns+0xff/0x110 [ 576.431226][T20564] handle_bug+0x184/0x210 [ 576.432904][T20564] exc_invalid_op+0x17/0x50 [ 576.434737][T20564] asm_exc_invalid_op+0x1a/0x20 [ 576.436712][T20564] RIP: 0010:kernfs_remove_by_name_ns+0xff/0x110 [ 576.439219][T20564] Code: 48 89 df 31 db e8 61 a2 ff ff 48 89 ef e8 59 0c 37 ff eb b1 e8 42 7d 5b ff 90 48 c7 c7 80 56 c3 8b 4c 89 e6 e8 82 70 1a ff 90 <0f> 0b 90 90 eb b4 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 [ 576.446806][T20564] RSP: 0018:ffffc9000c587788 EFLAGS: 00010286 [ 576.449229][T20564] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffc9000cfb1000 [ 576.452500][T20564] RDX: 0000000000080000 RSI: ffffffff817a02d5 RDI: 0000000000000001 [ 576.455780][T20564] RBP: ffffffff8f503ba0 R08: 0000000000000001 R09: 0000000000000000 [ 576.458911][T20564] R10: 0000000000000001 R11: 203a73666e72656b R12: ffffffff8c426de0 [ 576.462075][T20564] R13: 0000000000000000 R14: 0000000000000002 R15: ffff88804ff1c120 [ 576.464984][T20564] ? __warn_printk+0x1a5/0x350 [ 576.466820][T20564] ? kernfs_remove_by_name_ns+0xfe/0x110 [ 576.468587][T20564] driver_remove_file+0x4a/0x60 [ 576.470355][T20564] bus_remove_driver+0x224/0x2c0 [ 576.472329][T20564] driver_unregister+0x76/0xb0 [ 576.474301][T20564] comedi_device_detach_locked+0x12c/0xa50 [ 576.476607][T20564] ? bpf_lsm_capable+0x9/0x10 [ 576.478542][T20564] ? security_capable+0x7e/0x260 [ 576.480529][T20564] do_devconfig_ioctl+0x555/0x710 [ 576.482561][T20564] ? __mutex_lock+0x1c5/0x1060 [ 576.484521][T20564] ? __pfx_do_devconfig_ioctl+0x10/0x10 [ 576.486744][T20564] ? rcu_is_watching+0x12/0xc0 [ 576.488649][T20564] ? trace_sched_exit_tp+0xd1/0x120 [ 576.490781][T20564] ? __schedule+0x11a3/0x5de0 [ 576.492684][T20564] ? tomoyo_path_number_perm+0x470/0x580 [ 576.494925][T20564] comedi_unlocked_ioctl+0x165d/0x2f00 [ 576.497066][T20564] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 576.499372][T20564] ? __pfx___schedule+0x10/0x10 [ 576.501331][T20564] ? rcu_is_watching+0x12/0xc0 [ 576.503260][T20564] ? trace_irq_enable.constprop.0+0xd4/0x120 [ 576.505534][T20564] ? tomoyo_path_number_perm+0x295/0x580 [ 576.507714][T20564] ? rcu_is_watching+0x12/0xc0 [ 576.509620][T20564] ? lock_release+0x201/0x2f0 [ 576.511502][T20564] ? tomoyo_path_number_perm+0x18d/0x580 [ 576.513707][T20564] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 576.516092][T20564] comedi_compat_ioctl+0x1d0/0x990 [ 576.517972][T20564] ? __pfx_comedi_compat_ioctl+0x10/0x10 [ 576.520108][T20564] ? audit_log_end+0x14a/0x2b0 [ 576.521954][T20564] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 576.524439][T20564] ? do_vfs_ioctl+0x128/0x14f0 [ 576.526287][T20564] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 576.528248][T20564] ? rcu_is_watching+0x12/0xc0 [ 576.530182][T20564] ? __fget_files+0x204/0x3c0 [ 576.532061][T20564] ? hook_file_ioctl_common+0x145/0x410 [ 576.534286][T20564] ? __fget_files+0x20e/0x3c0 [ 576.536180][T20564] ? __ia32_compat_sys_openat+0xf0/0x210 [ 576.538408][T20564] ? __pfx_comedi_compat_ioctl+0x10/0x10 [ 576.540629][T20564] __ia32_compat_sys_ioctl+0x23f/0x370 [ 576.542825][T20564] __do_fast_syscall_32+0x7c/0x3a0 [ 576.544845][T20564] do_fast_syscall_32+0x32/0x80 [ 576.546785][T20564] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 576.549232][T20564] RIP: 0023:0xf70be579 [ 576.550852][T20564] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 576.558353][T20564] RSP: 002b:00000000f546c55c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 576.561528][T20564] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000040946400 [ 576.564634][T20564] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 576.567706][T20564] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 576.570821][T20564] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 576.573976][T20564] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 576.577080][T20564] [ 576.579108][T20564] Kernel Offset: disabled [ 576.580792][T20564] Rebooting in 86400 seconds.. VM DIAGNOSIS: 23:50:43 Registers: info registers vcpu 0 CPU#0 RAX=0000000000ce8424 RBX=0000000000000000 RCX=ffffffff8b908bf9 RDX=ffffed1005646656 RSI=ffffffff8c162c80 RDI=ffffffff8190cca1 RBP=fffffbfff1c52ef8 RSP=ffffffff8e207e08 R8 =0000000000000000 R9 =ffffed1005646655 R10=ffff88802b2332ab R11=0000000000000001 R12=0000000000000000 R13=ffffffff8e2977c0 R14=ffffffff90ab7690 R15=0000000000000000 RIP=ffffffff8b90775f RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880974c4000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000800ee018 CR3=00000000564a3000 CR4=00352ef0 DR0=0000000000000680 DR1=0000000000000003 DR2=0000000000000007 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000ff ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4e4f4954504f5f4e 4153410063657865 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000049 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85616b45 RDI=ffffffff9b0f8680 RBP=ffffffff9b0f8640 RSP=ffffc9000c5870f0 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=552031203a555043 R12=0000000000000000 R13=0000000000000049 R14=ffffffff9b0f8640 R15=ffffffff85616ae0 RIP=ffffffff85616b6f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff8880975c4000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f737719c CR3=000000006e3a6000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000006 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000ff ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4e4f4954504f5f4e 4153410063657865 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=000000000007ffff RBX=ffff888012b9f800 RCX=ffffc9000ca04000 RDX=0000000000080000 RSI=ffffffff8a366c0d RDI=ffff888012b9f800 RBP=ffffc9000746fd58 RSP=ffffc9000746f988 R8 =0000000000000005 R9 =0000000000000000 R10=00000000000088c7 R11=0000000000000000 R12=0000000000000000 R13=0000000080000002 R14=ffffc9000746fd9c R15=0000000080000002 RIP=ffffffff81bb0e36 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff8880976c4000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f732ff8c CR3=000000006e3a6000 CR4=00352ef0 DR0=0000000000000680 DR1=0000000000000003 DR2=0000000000000007 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000ff ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4e4f4954504f5f4e 4153410063657865 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000000 RBX=ffff88802b341d80 RCX=ffffffff81af11d1 RDX=ffff8880212aa440 RSI=ffffffff81af11ab RDI=0000000000000005 RBP=0000000000000003 RSP=ffffc90000bdf888 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=dffffc0000000000 R13=ffffed10056683b1 R14=0000000000000001 R15=0000000000000001 RIP=ffffffff81af11ad RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880977c4000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f73e50fc CR3=000000000e380000 CR4=00352ef0 DR0=0000000000000680 DR1=0000000000000003 DR2=0000000000000007 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000ff ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4e4f4954504f5f4e 4153410063657865 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000