last executing test programs: 7m30.24307284s ago: executing program 3 (id=230): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) socket$igmp6(0xa, 0x3, 0x2) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0xffffffff, 0xffdffffe}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) io_uring_enter(r1, 0x47f4, 0x0, 0x0, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000980)) 7m29.403402689s ago: executing program 3 (id=235): r0 = socket(0x10, 0x803, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x100, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newtfilter={0x94, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x5, 0xfff3}, {}, {0x7, 0xffff}}, [@filter_kind_options=@f_matchall={{0xd}, {0x60, 0x2, [@TCA_MATCHALL_ACT={0x54, 0x2, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x6fe2}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0xb380, 0x4, 0x0, 0x100d87, 0x6}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}]}}]}, 0x94}}, 0x0) 7m29.255587662s ago: executing program 3 (id=236): socket(0x40000000015, 0x5, 0x0) ptrace$setregset(0x4205, 0x0, 0x1, &(0x7f0000000100)={&(0x7f0000000040)="dcef58b7f29c1f7c93d183044aedba283413e674c7719c33a4b17f028f68610a6c55bb2bf8282853f3e16f8394a8676ff55a3507e2ad50248c6130863b0f7433c7fbc9b978a39eae88bffd05d139cedbee444f7c", 0x54}) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d3e457201e040b40e73e000000010902"], 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) ioctl$HIDIOCGCOLLECTIONINFO(0xffffffffffffffff, 0xc0104811, &(0x7f0000000080)={0x0, 0x0, 0xa12, 0xffffffff}) r0 = openat$kvm(0x0, &(0x7f0000000240), 0x1, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4048aecb, &(0x7f0000000080)=ANY=[@ANYRES16=r1]) ioctl$KVM_GET_VCPU_EVENTS(r2, 0xc048aeca, &(0x7f0000000080)) 7m27.982427879s ago: executing program 3 (id=244): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, 0x0) setpgid(0x0, r0) mount$afs(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x88, 0x0) r1 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_READY(r1, 0x9360, 0x800000000000001) 7m27.850439648s ago: executing program 3 (id=246): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000000c0)='./bus\x00') chdir(&(0x7f00000000c0)='./bus\x00') r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85) mkdir(&(0x7f0000000200)='./file0\x00', 0x8) lseek(r0, 0x8000000000000001, 0x4) 7m27.563021332s ago: executing program 3 (id=250): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x32, 0x0, &(0x7f0000000400)=[@increfs], 0xfffffcb0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f00000002c0)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000440)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0xf0, 0x0, 0x0, 0x78, 0x18, &(0x7f00000004c0)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x9}, @ptr={0x70742a85, 0x0, 0x0, 0xd0, 0x1, 0x8}, @ptr={0x70742a85, 0x5, 0x0, 0x0, 0x1, 0xc8}}, &(0x7f0000000300)={0x0, 0x28, 0x50}}, 0x1000}], 0x0, 0x0, 0x0}) 7m27.529716435s ago: executing program 32 (id=250): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x32, 0x0, &(0x7f0000000400)=[@increfs], 0xfffffcb0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f00000002c0)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000440)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0xf0, 0x0, 0x0, 0x78, 0x18, &(0x7f00000004c0)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x9}, @ptr={0x70742a85, 0x0, 0x0, 0xd0, 0x1, 0x8}, @ptr={0x70742a85, 0x5, 0x0, 0x0, 0x1, 0xc8}}, &(0x7f0000000300)={0x0, 0x28, 0x50}}, 0x1000}], 0x0, 0x0, 0x0}) 6m39.306285027s ago: executing program 1 (id=663): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r1, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r1, 0x1000) r2 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) r3 = dup(r2) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) modify_ldt$write2(0x11, &(0x7f00000000c0)={0x1008, 0x20000800, 0x4000, 0x0, 0x2, 0x0, 0x1, 0x1}, 0x10) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r3, 0x800448d2, &(0x7f0000000240)={0x1, &(0x7f0000000180)=[{@fixed}]}) 6m38.761475162s ago: executing program 1 (id=666): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x88d, &(0x7f00000005c0)={0x0, 0x1423, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000200)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x11, 0x0, @fd, 0x0, 0x0, 0x0, {0x40}}) io_uring_enter(r2, 0x75fa, 0xe475, 0x0, 0x0, 0x0) 6m38.457132724s ago: executing program 1 (id=671): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, 0x0, 0x0) unshare(0x22020600) r0 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x80) r2 = openat$cgroup_ro(r1, &(0x7f0000001100)='pids.events\x00', 0x5000000, 0x0) readv(r2, &(0x7f00000012c0)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1) 6m37.118042655s ago: executing program 1 (id=675): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x94) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, 0x0) setpgid(0x0, r0) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x10000, 0x0) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_CATATONIC(r1, 0x9362, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 6m36.933871481s ago: executing program 1 (id=677): r0 = fanotify_init(0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2800000010005fba0000002000b1000000000000", @ANYRES32=0x0, @ANYBLOB="80000200e180000008001b"], 0x28}}, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002cbd70100400000005000000080009000200000008000c00a80a000008000b00000000000600010005"], 0x34}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f0000001280)={{0x12, 0x1, 0x300, 0x0, 0x1f, 0x66, 0x8, 0x58f, 0x6610, 0x4805, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x4, 0x95, 0x70, 0x81, [{{0x9, 0x4, 0x0, 0x81, 0x0, 0xff, 0xff, 0xff, 0x2}}]}}]}}, &(0x7f0000001700)={0xffffffa0, 0x0, 0x0, 0x0, 0x23}) 6m36.672007745s ago: executing program 1 (id=680): syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x403}}]}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[], 0x14}}, 0x4000) sendmsg$WG_CMD_GET_DEVICE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[], 0x2b08}}, 0x4000806) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000340)=@ccm_128={{0x303}, "30693241a6f04035", "e0e6d476803da0686d23e136c58671e3", '\x00', "c962b0c0b5d958c9"}, 0x28) recvmmsg(r0, &(0x7f0000001040)=[{{0x0, 0x0, 0x0}, 0x2002}, {{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f00000007c0)=""/94, 0x5e}], 0x1}, 0x4}], 0x2, 0x40000002, 0x0) 6m36.552762133s ago: executing program 33 (id=680): syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x403}}]}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[], 0x14}}, 0x4000) sendmsg$WG_CMD_GET_DEVICE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[], 0x2b08}}, 0x4000806) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000340)=@ccm_128={{0x303}, "30693241a6f04035", "e0e6d476803da0686d23e136c58671e3", '\x00', "c962b0c0b5d958c9"}, 0x28) recvmmsg(r0, &(0x7f0000001040)=[{{0x0, 0x0, 0x0}, 0x2002}, {{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f00000007c0)=""/94, 0x5e}], 0x1}, 0x4}], 0x2, 0x40000002, 0x0) 6m6.109272554s ago: executing program 5 (id=946): socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000001400030500008000ffdbdf25021856ff", @ANYRES32=r3, @ANYBLOB="080002007f"], 0x20}, 0x1, 0x0, 0x0, 0xc090}, 0x48006) recvfrom$inet6(r0, &(0x7f0000000000)=""/42, 0x2a, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000000)="48050000150019", 0x7}], 0x1) r4 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r4, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 6m5.994657868s ago: executing program 5 (id=951): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x2, 0x805, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r0 = syz_io_uring_setup(0x1458, &(0x7f00000003c0)={0x0, 0x4, 0x10180, 0x2000, 0x3ae}, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='9'], 0x38}, 0x1, 0x0, 0x0, 0x41}, 0x37aea8e708e70634) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x6a, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2040, 0x1}) io_uring_enter(r0, 0x2d3e, 0xfffffffd, 0x0, 0x0, 0x0) 6m5.977764409s ago: executing program 5 (id=953): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000940)=@newqdisc={0x34, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x4000080) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r0, &(0x7f0000000800)="4103082c1116480401020200c52cf7c25975e005b02f000006892f000300897c6b118777faffffff3066090cb600c5471d130a66321a54e7df305fbe258161b6fd8f2428652265d94c6fdbaefc57376a57c2feffff188be9427c323ef024a37016d2a7f9ab6e7941a6fc4f95aa73c1dfff4941f6503b5bd8c91db22cd33795481c94085fa12cdc679ac2a5d7b5d99b93fb07acb0da680e78b74c74aae8d7690d5986a9af81622a0ac210bc7b5ca5fed11cb54d046642670041e846bb184ff5d39fe8516d2d2a8d84e6e7dfcb2b8a8023444db513a3d7a124b59f0a5cd36489dbbb75cce3145d0ea3c3aa21af7cbcbc7a7575db782e757ca543109f5ddcec4930aa91f4119ea3d1f56140cb86cfe0724b23904ef5d05c725ee23918a502b1afe09fb0757d", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) read$FUSE(r0, &(0x7f000000a000)={0x2020}, 0x2020) 6m5.921007636s ago: executing program 5 (id=956): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x94) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, 0x0) setpgid(0x0, r0) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x10000, 0x0) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file2\x00', 0x0, 0x844020, 0x0) ioctl$AUTOFS_IOC_CATATONIC(r1, 0x9362, 0x0) 6m5.757073928s ago: executing program 5 (id=958): sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) setsockopt$inet6_opts(r0, 0x29, 0x39, 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0x0, 0x1, 0x1009, 0x7f}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0x0, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r4, {}, {0xffe0, 0xa}, {0x1, 0x10}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x4}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x3}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000051}, 0x4000) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000840)={r1, @in6={{0xa, 0x4e22, 0x80, @empty, 0x5d4e}}, 0x2, 0x2, 0x614, 0x4, 0xd, 0x7, 0x4}, 0x9c) 6m3.031810129s ago: executing program 5 (id=996): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x801) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, 0x0) dup(0xffffffffffffffff) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff)='X', 0x1, 0x0, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000, 0x1, 0x900}) 6m2.934809593s ago: executing program 34 (id=996): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x801) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, 0x0) dup(0xffffffffffffffff) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff)='X', 0x1, 0x0, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000, 0x1, 0x900}) 5.226832605s ago: executing program 6 (id=2806): ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) close(0x3) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$kcm(0x2, 0xa, 0x2) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r2, &(0x7f0000000100), 0x10) r3 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x3cfa, 0x0, 0x2, 0x3b9}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r3, 0x47f6, 0x0, 0x2, 0x0, 0x0) 4.81455739s ago: executing program 4 (id=2809): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x1a, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e76, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0xc}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x880}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x3, 0x8, 0x201, 0x0, 0x0, {0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x4004800}, 0x4004004) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="090000000600000004000000fc07"], 0x48) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000003c0)="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", 0x2000, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000002480), 0xce4, r4}, 0x38) 4.629227309s ago: executing program 2 (id=2811): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfa11, 0xffffffff}, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[], 0x5c}}, 0x0) set_mempolicy(0x3, &(0x7f00000000c0)=0x3, 0x5) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_emit_ethernet(0x52, &(0x7f0000000b00)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd604dd308001c0600fc010000000800", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="70020100907800"], 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000700)=ANY=[@ANYBLOB="b601000000000000bd110000000000008510000002000000850000007600000095000000000000009500a5050000000077d8f3b4000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f68a7d06d75357f21699cdc6751dfb265a0e3ccae669e173a649c1cfd6587d472d64e7cc955d77578f4c35235138d5421f9453559c35da860e8ef14142b2a3e314422b854421eed734ceb1efeecb9c66854c3b3ffe1b4ce25d7c983c005c03bf3a48dfe3e26e7a23129d6606fd28a697a9d552af6d9a9df2c3af333e2008e11bbec0727cb3f647535deb6277f5696833a71011a7d06602e2fd5234712596b696418f163d1a13ed38a682f87925bfa753f631cd027edd68149ee99eebc6f7d6dd4ae59af7588c8e1f4efab57644ccb1973d7879b70a70001040000000000000000d7900a820b63278f4e9a217b98ef7042ad2a923132f208fd8289eaf8cd00000000000009d27d753a300800000000000000a5686f2fccc33e3e34c3969c5ad781302d40e97a8ad10ce0cbe17366d5ac6af2fca2360a15b80400d52040ef7b28d300747877e176fe4c4b8e40dbf260f5a9f7eee30293c1b163b795d0aef4deb851a30000f569dc8f39943f889008e1ec914faa9e6cd0b3b4b3b5db666ebeb49d6a62019d76459e70b459543c4ac42e53b4ad4c77cff373ebd95848f01864e456969cd28000170996016aceb583df5ee4dd722e8c350af489f9a900000000a0dcc36b3d7c734a9cce0439f832a20d7cbdcda5dff3ba92dd66afb9d74aa222038994dcd3e7784dbea1e51a15b0f1a040cc63177f8fafa3192fc8e5552da1a982ab8dfe31ad1a0968faa47c2069d6bf09c3aa4f0fc128cb578d99b08a150b4cc4b22f6a464c6398c952519818a44a1b223ff502df87865c276588ea478e328e8277e811b99ce1acfecaf8e2c55ccc4b8eae0a61635514e99ffd438784060f23ba74c0b30b1180d935832deb686d789ba1d436d116394534e88492a42b8bf050c719661a2dc50b3a1dcfbc871e5c27e3d7260f6fa589e40000b89db451ff994845f6b49c12e89291398bcb3c06ef1289f74e0b0e2cab592d35f82a69e7284223a171c616b1f0fee6c4711d7aecb69746064d2c096554975d605ebe646302bf3d5cf32a9a09915ae3f3d4eb96615d7b237da56cd5e9904a19e145f25b6d98eb2c019967f553b61d0e80d6913cee9f8d18469a654a239a84a85debbc02846ac5791278f18c6759e3b513a68284d2efc30587e433431b2896a3bd48020af67e9ac071b2dd6dc3b9efae4ff03558fa619aea909c7f2416e7e7da1c51ccc7e6ac27412f728dc6d80da8adf317ca863ed683897321f8c8bb5a5d953d6783b7a06353ee496bbdff418de3e53234df87756eb99e330253cf5da4aa1a9648a38f07e2d302b4165983db4f7b8972923fffa8c03c288512a3a38fbd7c816a44634f7a03fab30811b7b93257bea4369ba46024dee5e9b0b2c3d3324e9b7c1f99ab9bb3f498b1485373b79ec84a67dad4e37575dab87ce55a9a69ed856a4c4410d1242ac1bd1539094a641cc086c2c53e363beafc74ab4e9ff320373705cbf5644586ffe60d293944fa2d9dc18b55f1af5c42f27747bef1ffd0c1766f062d47d61bf9f64e6ee288fa7fc12d48da526527b9f5c318c93ec447cb8b5eee7aa8a1e85696af3dfef96657c0545c8ebd96528d9c28828e5befd80d684b03b6d153da3e3cbd3bfbf4a9375b8ad04a1d241bcb5d5505cb6cc7a44e2e24bd0b1ca4879caaff59d0ce39dc7f3fea447f4e46967855208e63ec988bd2692afefbed2b001205e4b30ee8fe417defa566a73ace8f01f7181de0ef25f1744896a3c38859e6148c42454949cd64b1a888e7fe9c2d86bb01023b6ddeb67f5eb038af3e460c771518a4126c338b0390d459361e03adf6e6b558b3651a0e33d101b5febfff82794203da18db6fcf89715c2d338f78d8b9220171b41f528f857a7cb79ca990de1208777e13faaa9b9cb9e67797b07d9eb9e909410b50c5d981d9a72aa36498b630519d1530ef0000000000000000000037fcffffffffffffff8db8379bd2044c652dff399a9f8bfa4e9c507f049d18837464276830461ee203ba51f6102d262fc9a26bc3638ecce24e65c55da6efaa462f03d0e119c963a8c7a522b59f5a7b44d018cb2648383073d9e032492cae44350bc0a85697f431392eb22cae093e85954af97d6d7b2e6e8f43353062275ad1578a431594243452a2bfb89f91d8eaac038e9e17136e7c698f73faaabb3d00000000000080014573789425c4c32da528d89356aa6d2ae6da082e756c80cf39053431080ea6cbf9997a5a0ddad0b9d12bc3f880476ab32f0feaac5f16e61f7b72b8c9082eec423c6b3eaecfdcc9ec72795e7696421c83b76c2d6bac19bc875d009679778d8ef97d7e05329649d97b0dc54bea9b650873de2d3d702690176e0b23ee5cb5e469a8d1612d611722e6200e3a297d92f8e1de98326c5ef2b89d4e2d47767cd755783e5d865e373338e96ceb8399f296c59b2d70ca27735ecaff62982616d3ac1ab041733bce119d8002a6c8a2b08b32551b2313b1a2ff41b3f04af61c69c85cb2da48215727271bac2ffdeb62d9f5dc4845f1c3f63dc806e615ee8d28d6d7f181e30807afa27f41d0364c746a65a47464db68f3c433d88dd625db35fded2c86d75af88efaf20c8b37c644b6c4e773a9589200faa553bc92f916b75ddbfa18ab73979f46947b35914286d2499a0b8c970000000000000000f4fe74e0c26ab52329bd600627b256ca44dd121ffc8dbb6e5f70cbe03efccac70375b30cc927574d254d1b46c607e8b1ca7d1511568c3ef4b6b885f4582bdcef74e5e010627fc8e4fe00000000000000000000869d9640f06b11df2971909b90133983308ea4f033de613763f32d913bcbe9dd082a6fff197a20730269e6cfd31275395833f1c2b8a50a94c30cceae2a11fe9b9b835d0da73891c0b3ce22dea6bf31e7f51808cf72f44b4455b77a778440795e152dc1b7bb0a5636aa4742ce4d331a47de5836539cdf289176527277b70c8162aaf6f9475418b478329f3565450acfaf07000000eab8cabfa97e35081967bb92a264b07e8003d2f15537e72a1e4ca5ec1e2aaaf8236ecdefbaf512c75e636b6b6f518ad20521f909b12e9bc97e408e0dc82f950d12705f35708bc862196abb27e8d7991b5273987f38c4706289ff4f6130cee76465d487a07a74452f87da2029bd3debd9870335d58d3fe1ac80574fa3ea312997ab81bc6f569ffdb10ba3f20a86d95128d13e0c778998d3b3114bfb07bd61e4bff8a5e2ce4aa572c63e09b44ca4a181bcfe4eec3ce843c65c4948169fe639a186acc2b4a96c6b8d4d2e6d53ab97bea01eab953e6e89e3af34d4ada217bc6fda0fb2095c49195d0d6f365ca80a955b9ec81240a84ef672afa369fc8e3d444ba35d0f51a0065a3b982d09dfc6874fc0d8079b185447cb8a695e132d4d613a529d9c77e2a8f7320ecf698e8a2b170fd601dc1a9767a38b10788e92d1356f6a6c1bcfb2d31b46e735db13f1be80bac1b6be04fd98610000000000000000000000000000139af5493f74751c5e2501a4936bc4a0fa516117f4ccadc692003adee0a080eba2f1059660c0ee0e9aec72d4d0fe095632e4f641b0e34c611c5b3e0ba05fa36542d40837dda323910672a9097d68398fd3539686e4288db0d6bf7cb8a1835f46dfe11865a66ef47e736dada06677a5bca133d6cbc8fe5c4557e51b006bdccd7c5f32ff1d9e8b130f77df09236870fb3de5b87b4f8acc13df534eba329b86670000000000000000b27a2616c03cdf6c009447a652bca9b325e73c0737d5b717945e4fe7a169c5e2c54fc71a4104aa7cf0f5d30e2fcd9503650edbd8a5971a9a1fde5e5df37469ae204a6e899eacc1e63034cbabc5604739881cb82604bed3e53696a0606b26b879ef232a1a038291389593d1575cb79aa8284cf01a7e1a456acab9d8d608ad69d4c4b56492af7004e7ed9d47c5db3d76a00bea7c804f3a3638408bc1636f1009b7f185f51606918eaa0ab6bef11ae3d300"], &(0x7f0000000080)='GPL\x00', 0x9, 0x34, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) 3.961539464s ago: executing program 6 (id=2812): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000300)="d8000000180081064e81f782db4cb904021d0800067c7c09e8fe0ba1bc0004000200142603600e1208001e0003070401a8000600200e02400400027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x40802, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x70bd26, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x18, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0xd}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x20040881}, 0x40000) writev(r1, &(0x7f0000000180)=[{0x0}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, 0x0, 0x0, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) ioctl$KDSETLED(r1, 0x2201, 0x79) 3.695883519s ago: executing program 4 (id=2815): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) userfaultfd(0x81000) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) r3 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) accept4(r3, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, 0x0, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xd, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x30000000}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x50, 0x6000000}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0xb0a3}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0xf1}, {0x7, 0x1, 0x2, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r4}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x3, 0x8, 0x0, 0xffff, 0xfffffff3}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.610903742s ago: executing program 6 (id=2816): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) syz_io_uring_setup(0x6b00, &(0x7f00000004c0)={0x0, 0x8b7c, 0x2800, 0x7, 0x22}, &(0x7f0000000940)=0x0, &(0x7f0000000280)) r1 = openat$ppp(0xffffff9c, 0x0, 0x4340, 0x0) ioctl$PPPIOCSMRRU(r1, 0x4004743b, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, 0x0, 0x0, 0x4) timer_settime(0x0, 0x1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x8, 0x42, 0x43, 0xc0, 0xffffffffffffffff, 0x5}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000080), 0x1003, r5}, 0x38) 3.11077516s ago: executing program 2 (id=2819): r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) io_setup(0x400006, &(0x7f0000000140)) syz_open_procfs(0x0, &(0x7f0000000480)='fd/3\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$KVM_CAP_HALT_POLL(0xffffffffffffffff, 0x4068aea3, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz1\x00', 0x0, 0x8}) r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r1, 0x40405514, &(0x7f0000000540)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0xfffffffffffffe00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff]}) 2.717696241s ago: executing program 2 (id=2820): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000066000000004b64ffec850000006d000000c50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) unshare(0x6a040000) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) socket$inet_icmp_raw(0x2, 0x3, 0x1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = socket$kcm(0x29, 0x5, 0x0) r4 = syz_io_uring_setup(0x10c, &(0x7f0000000380)={0x0, 0x5885, 0x10, 0x0, 0x2c1}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_SEND={0x1a, 0x40, 0x0, r3, 0x0, 0x0, 0x5c, 0x10}) io_uring_enter(r4, 0x3516, 0x701f, 0x0, 0x0, 0x0) r7 = socket(0x21, 0x2, 0x10000000000002) connect$rxrpc(r7, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8000, @multicast2}}, 0x24) sendmmsg(r7, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[{0x10, 0x110, 0x1}], 0x10, 0xe000}, 0x5}], 0x1, 0x0) recvmmsg(r7, &(0x7f0000002940)=[{{0x0, 0x0, 0x0}}], 0xf000, 0x10002, 0x0) 2.651789219s ago: executing program 6 (id=2821): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x8, 0x395, 0x5, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x2, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socket$igmp6(0xa, 0x3, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r2 = io_uring_setup(0x332, &(0x7f0000000080)={0x0, 0x21e, 0x10}) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) syz_fuse_handle_req(r3, &(0x7f00000020c0)="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", 0x2000, &(0x7f0000006e40)={&(0x7f0000000340)={0x50, 0x0, 0x1000000000, {0x7, 0x21, 0x0, 0x772d62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) 2.644864101s ago: executing program 4 (id=2822): r0 = syz_open_dev$media(&(0x7f00000006c0), 0x4007, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f0000000940)=0xffffffffffffffff) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0x7c80, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x20000) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r5, 0x40a85323, &(0x7f0000000140)={{0x8, 0xe}, 'port0\x00', 0x10, 0x1021, 0x80000001, 0x13, 0x11, 0x4, 0x8, 0x0, 0x2, 0x3}) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000980000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb702000000", @ANYRES32, @ANYBLOB="0000000000000000b7050000080000a8c5000000a5000000180100002020640500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3d, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r3) io_setup(0x1, &(0x7f0000000180)) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r3, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000940)={0x1b4, r6, 0x400, 0x70bd27, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_REKEY_DATA={0x20, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="faeaee48bcaef6da44fa327f698d7138"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x6}]}, @NL80211_ATTR_REKEY_DATA={0x70, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x1ff}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xa}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="bbe7977b74716943a03763b5e9c81bfb"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="a7ec9fa40a1f3fe1d50e4ae63e575ac55b785bd7a756d7c91ab3d67232e668f9"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="75ef4b6ed2cbfb642604b408820820a1c52eba13101a15f4"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xf}]}, @NL80211_ATTR_REKEY_DATA={0x78, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="6cd1699b8eab982edb4209c88a7ec52efe9e00e108fb4cf1524cf4ac72f4805d"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xfffffffe}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x13}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="193c8bad4b43d0eb464c5b318ca7d86361c1937140b512e1"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xffff}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x800}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="00001f0000000000920000000500"}]}, @NL80211_ATTR_REKEY_DATA={0x34, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="0a295adda342ca72580b03606534171365549875fe22fccc5facac146a3ffe8e"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "54ff734dab0b5921"}]}, @NL80211_ATTR_REKEY_DATA={0x4}, @NL80211_ATTR_REKEY_DATA={0x60, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="943ffdf98fed2332bf91d0a82504ac0dc2c600fb0a419610"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x3}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="4fb54613fac31933566cb8ac54ee64c0"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="4554dc951153c42d186fbf0d8fa2391296c5c2e00dd262fbacdd4dc22b4e7515"}]}]}, 0x1b4}, 0x1, 0x0, 0x0, 0x4048101}, 0x40) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@ipv6_newroute={0x1c, 0x18, 0xffffffffffffffff, 0x0, 0x25dfdbfd, {0xa, 0x0, 0x0, 0x0, 0xff, 0x2, 0xfd, 0x9}}, 0x1c}}, 0x20000010) r7 = socket$inet6(0xa, 0x3, 0xff) sendmmsg$inet6(r7, &(0x7f0000004f00)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @private1}, 0x1c, 0x0}}], 0x1, 0x0) getsockopt$CAN_RAW_JOIN_FILTERS(r2, 0x65, 0x6, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2.460565898s ago: executing program 4 (id=2823): r0 = landlock_create_ruleset(&(0x7f00000002c0)={0x3f2e}, 0x8, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000300)={0x692e}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x4, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x110) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) umount2(&(0x7f0000000340)='./file0\x00', 0x0) 2.104380139s ago: executing program 2 (id=2824): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000340)=ANY=[@ANYBLOB="0f000000040000000800000002000000000000", @ANYBLOB, @ANYRES32=0x0, @ANYRES32], 0x50) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r1, 0x0, 0xd}, 0x18) socket$inet(0x2, 0x4000000000000001, 0x0) sendmsg$netlink(r0, &(0x7f0000007d80)={0x0, 0x0, 0x0}, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000280), 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="c0260000410007010000000007000000017c00000400fc80a72601"], 0x26c0}}, 0x4010) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000004a40)=ANY=[@ANYBLOB="c0260000410007010000000007000000027c00000400fc80a72601"], 0x26c0}}, 0x4010) 2.102042618s ago: executing program 0 (id=2832): syz_open_dev$video(&(0x7f0000000b40), 0x7, 0x28000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000640)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000200)={0x1, 0x1, 0x0, 0x0, 0x0}) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000040)={0xf, 0x203a, 0x0, 0xf, 0x400, 0xb, 0x0, 0x23}) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000006c0015000000d9fece23b82004000000", @ANYRES32=r3, @ANYBLOB="000080000000000018003480050035"], 0x38}, 0x1, 0x300}, 0x20044041) r4 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r4, &(0x7f0000000140), 0x4924b68, 0x0) 2.030938849s ago: executing program 0 (id=2825): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) pipe2$watch_queue(&(0x7f0000000280), 0x80) add_key(&(0x7f0000000040)='cifs.spnego\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[], 0x30}}, 0x4000040) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x10) io_uring_enter(0xffffffffffffffff, 0x207a98, 0x0, 0x0, 0x0, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) r3 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f00000000c0)={0x84, @multicast2, 0x15, 0x3, 'rr\x00', 0x30, 0x4, 0x68}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010101, 0x4e21, 0x3, 'lc\x00', 0x11, 0x3240, 0x3d}, {@loopback, 0x4e23, 0x4, 0x8628, 0x12d5c, 0x12d5c}}, 0x44) setsockopt$IP_VS_SO_SET_DELDEST(r2, 0x0, 0x488, &(0x7f0000000280)={{0x84, @empty, 0x4e20, 0x3, 'lblc\x00', 0x1d, 0x2, 0x2a}, {@loopback, 0x4e23, 0x10000, 0xc24, 0x9, 0xfffffffc}}, 0x44) 1.506178933s ago: executing program 2 (id=2826): mmap$xdp(&(0x7f000048c000/0x1000)=nil, 0x1000, 0x3000009, 0x2010, 0xffffffffffffffff, 0x180000000) r0 = openat$comedi(0xffffffffffffff9c, 0x0, 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) open$dir(0x0, 0x80082, 0x0) open$dir(&(0x7f0000000140)='./file0\x00', 0x1, 0x0) inotify_init1(0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x82, 0x0) ioctl$TCXONC(r1, 0x540a, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="1900000004000000040000000200010000000000", @ANYRES32, @ANYBLOB="0100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x48) 1.413637071s ago: executing program 6 (id=2827): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) io_setup(0x1000, &(0x7f0000000400)=0x0) openat$sysfs(0xffffff9c, &(0x7f0000000040)='/sys/kernel/uevent_helper', 0x644081, 0x96) io_submit(r0, 0x0, 0x0) r1 = socket(0x23, 0x5, 0x0) listen(r1, 0x0) sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000009c0)=ANY=[], 0x58}, 0x1, 0x0, 0x0, 0x4004080}, 0x20001041) listen(0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) accept4$inet6(r1, 0x0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000980)={0x2020}, 0x2020) 1.217346787s ago: executing program 4 (id=2828): setfsgid(0xee00) syz_open_procfs(0x0, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$dri(&(0x7f0000000080), 0x8004, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)={0x30, 0x3e, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0xc, 0x2, 0x0, 0x1, [@nested={0x8, 0x17, 0x0, 0x1, [@nested={0x4, 0x14}]}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x381d40) read$snddsp(0xffffffffffffffff, &(0x7f0000000280)=""/223, 0xdf) syz_emit_ethernet(0x3e, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa408100312086dd60fca33f000800ff2360b80e000000e4ff000000000000aafe8000000000000000000000000000bb2f63000200000000"], 0x0) 1.0433789s ago: executing program 0 (id=2829): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) socket$inet_icmp_raw(0x2, 0x3, 0x1) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x7fff, 0x0, 0x1}}, 0x40) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/246, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000001180)={0x1, 0x0, [{0x0, 0x73, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0x0, 0xff60, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000012}, 0x94) r3 = dup(r0) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r3, 0x0, 0x0, 0x0, {0xa0b0}, 0x3}) 953.668553ms ago: executing program 0 (id=2830): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e0000000400000008000000080000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) bpf$MAP_CREATE(0x600000000000000, &(0x7f0000000580)=ANY=[@ANYBLOB="0f00000004000000040000000200020000000000", @ANYRES32=0x1, @ANYBLOB="fdffffff00"/18, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000010000400"/28], 0x48) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000005e00679a3601ffc4910700004f78d4c1a0731cccff"], 0x1c}}, 0x0) recvmmsg(r2, &(0x7f00000065c0)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x40000022, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000080)={0x0, @empty, @private}, &(0x7f00000001c0)=0xc) ioctl$sock_inet6_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f0000000200)={@private1={0xfc, 0x1, '\x00', 0x1}, 0x23, r3}) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x4, &(0x7f0000000180)=ANY=[], &(0x7f0000000000)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x41100, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r4}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000008000000000000000000910095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r6 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r5, r5, 0x2f, 0x0, @void}, 0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000140)=r6, 0x4) mlock2(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000240)={r6, 0x0, 0x0}, 0x10) 598.261027ms ago: executing program 2 (id=2831): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) move_pages(0x0, 0x0, &(0x7f0000000700), &(0x7f0000000740), &(0x7f0000000780)=[0x0], 0x2) r2 = inotify_init() syz_open_pts(0xffffffffffffffff, 0x0) inotify_add_watch(r2, &(0x7f00000000c0)='.\x00', 0x5000009) r3 = open(&(0x7f0000000180)='./bus\x00', 0x189a7c, 0x113) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r4 = open(&(0x7f0000000040)='./bus\x00', 0x4e142, 0x0) pwritev2(r4, &(0x7f0000000680)=[{&(0x7f0000000200)="05", 0x6a000}], 0x1, 0x6000000, 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x37fffee, 0x4002011, r3, 0x0) 596.245436ms ago: executing program 0 (id=2840): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x5e, &(0x7f0000000300)={@local, @local, @val, {@canfd={0xd, {{0x0, 0x1, 0x1, 0x1}, 0x40, 0x1, 0x0, 0x0, "8400508b9e8f74f8503f8de983a6f3371636f3d635444b04947d6ebeb748e42e0e21e5e8d6bb014cae3d3345b8ffd9b608c1e5b12d11d17bc77f104b9f253a30"}}}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0) socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@ipv4_newroute={0x2c, 0x18, 0x1, 0xfffffffd, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9}, [@RTA_GATEWAY={0x8, 0x5, @private=0xa010101}, @RTA_NH_ID={0x8, 0x1e, 0xf847}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) socket$nl_netfilter(0x10, 0x3, 0xc) socket$packet(0x11, 0x3, 0x300) r3 = syz_io_uring_setup(0x460, &(0x7f0000000480)={0x0, 0x40000020, 0x10, 0x2, 0x34f}, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x2f, 0x1, 0x0, 0x4}]}, 0x8) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_MADVISE={0x19, 0x7b, 0x0, 0x0, 0x0, &(0x7f0000011000/0x4000)=nil, 0x4000, 0xc}) io_uring_enter(r3, 0x47bc, 0x0, 0x0, 0x0, 0x0) 489.927895ms ago: executing program 0 (id=2833): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x25dfdbfe, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xffffffff, 0x11e41e7a, 0xffffffffffffffff, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x8000}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x14, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$pokeuser(0x6, r3, 0x118, 0x50000089) r4 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt$sock_int(r4, 0x1, 0x22, 0x0, &(0x7f0000000080)) 271.678897ms ago: executing program 6 (id=2834): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000004340)=""/102376, 0x18fe8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xe, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) close(r2) r4 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1a1) fcntl$setlease(r4, 0x400, 0x1) r5 = memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xecz\xabq\x95t*T9\xa9\b X \x04\"\x17\xbf\xcb\xccF\xda\xcf\xdd^\xa0\x15\xc0\xcb^h>\x1b\xb5d\xc7\x7f0\x9a&\xb0\x12#\x9c`\xa6\xed\x05\x95g\a\xccYb\xaf\xe9\xb6G?\x9f\xf5\xfe\xc1\xc0JJ\xc8\xd9d\x80\x13\x8fX\xb4\x19\xc4\\\xcb\x89-)\x90\x01\v\xac^\xdbBQ|\xaej;\x92\\\xf8u\x19Y\xee\x99EI\xf1t\xadn<\x9b\xc9\x87\xd0\xa7\x1a\x81\xb9\xc87sq\xd7\x15\xd6\x91O\x9c\x99!9>\xff\xa8\xfa\xe6=d\xcf\xca\xa9\xc61!\xc6P\x13\xd0\x88gZ\xbe\xdfl\xfa\xff\xb0m;d07tx\xbb\xabd\xe5\x16\xc4\xae\xf0', 0x0) sendmmsg(r1, &(0x7f00000006c0)=[{{&(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x4e20, @empty}, 0x3, 0x1, 0x0, 0x4}}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000380)="f0b23a4f935659b1e45d1daa71469b022b0381ab492750106930d4d1dded70544f475f6165eac725ec22b55daa109554b3b628b1931bc71585bc652aca4e53b6b735892dfeb8f7979ae16f6914bb437e6bcd60311b84d92199166d789648ce1db5300872e95aabba7ef5c5caa0b411baf80bb885f1de72eeb60b57bc6fb0616d5ea019f6bc2cf0d36ff2b6c88301da75e4a07bdba5547a2068b262f8113227904bb5196f94903714df1e647734b080802ea7086cf6e5ac538f652ee2a3eb5e9a4d9b3847aa255fe13218257871016c327c493e", 0xd3}, {0x0}, {&(0x7f0000000100)="3b7d9df0fa3f18c115ad2a60b9d5bdb6f9d2d3778064dbb39c01ee7ca80ed70d0c96c76ca4e489fb145e6d6856f8a439e4c035d7b4eb0bb2b0dd79eb377c56c3afd8e61cd622775f1d7edf0255dcb360e6ec7855b44dffe2", 0x58}], 0x3, &(0x7f0000000480)=[{0xc, 0x117, 0x50000000}, {0xc, 0x107, 0x9}, {0x4c, 0x104, 0x3, "fd5d72a0737c577edb49dd22ba398bc586b8ddd29ed2e031c24f4ccb1a1c7e0eff71441593e88594a81254e059241888555e2d299bd044bcc6aab36a9e71cbe9"}, {0xc, 0x1, 0x4}], 0x70}}], 0x1, 0x4004) write$binfmt_script(r5, &(0x7f0000000340)={'#! ', './file0'}, 0xb) execveat(r5, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 0s ago: executing program 4 (id=2835): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket(0x22, 0x2, 0x3) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x3c, r3, 0x1, 0x0, 0x0, {0x54}, [{{@nsim={{0xe, 0x2}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8001}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1b, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0xc, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}, 0x94) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000140)={0x1000, "340b7832ceefd131b8e6498c25f58fad9987ffe93bbabd18cf501922de974a27"}) ppoll(&(0x7f0000000000)=[{}], 0x1, 0x0, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): type=1326 audit(1758580022.252:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12591 comm="syz.6.1636" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700e579 code=0x7ffc0000 [ 250.879522][ T40] audit: type=1326 audit(1758580022.252:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12591 comm="syz.6.1636" exe="/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf700e579 code=0x7ffc0000 [ 250.886493][ T40] audit: type=1326 audit(1758580022.252:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12591 comm="syz.6.1636" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700e579 code=0x7ffc0000 [ 250.893434][ T40] audit: type=1326 audit(1758580022.252:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12591 comm="syz.6.1636" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700e579 code=0x7ffc0000 [ 250.900247][ T40] audit: type=1326 audit(1758580022.252:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12591 comm="syz.6.1636" exe="/syz-executor" sig=0 arch=40000003 syscall=260 compat=1 ip=0xf700e579 code=0x7ffc0000 [ 251.399735][T13870] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1637'. [ 252.427656][T14445] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1641'. [ 253.061803][T14469] netlink: 'syz.4.1649': attribute type 1 has an invalid length. [ 253.087818][T14469] 8021q: adding VLAN 0 to HW filter on device bond4 [ 253.142048][T14469] 8021q: adding VLAN 0 to HW filter on device bond4 [ 253.145558][T14469] bond4: (slave vxcan1): The slave device specified does not support setting the MAC address [ 253.151843][T14469] bond4: (slave vxcan1): Error -95 calling set_mac_address [ 253.265420][T14473] veth9: entered promiscuous mode [ 253.296020][T14473] bond4: (slave veth9): Enslaving as an active interface with a down link [ 253.599518][T14469] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1649'. [ 253.602924][T14469] 8021q: adding VLAN 0 to HW filter on device bond4 [ 254.700957][T14488] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1662'. [ 254.709781][T14488] tipc: Enabled bearer , priority 10 [ 255.250440][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.252588][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.783620][T14531] lo speed is unknown, defaulting to 1000 [ 255.929464][T14532] picdev_write: 20 callbacks suppressed [ 255.929530][T14532] kvm: pic: non byte write [ 255.951598][T14532] kvm: pic: single mode not supported [ 255.951615][T14532] pic_ioport_write: 1 callbacks suppressed [ 255.951628][T14532] kvm: pic: level sensitive irq not supported [ 255.971416][T14532] kvm: pic: level sensitive irq not supported [ 255.976074][T14532] kvm: pic: level sensitive irq not supported [ 255.983064][T14532] kvm: pic: single mode not supported [ 255.987515][T14532] kvm: pic: single mode not supported [ 255.989323][T14532] kvm: pic: level sensitive irq not supported [ 255.994922][T14532] kvm: pic: level sensitive irq not supported [ 256.004053][T14532] kvm: pic: single mode not supported [ 256.008504][T14532] kvm: pic: single mode not supported [ 256.010381][T14532] kvm: pic: level sensitive irq not supported [ 256.020202][T14532] kvm: pic: single mode not supported [ 256.023039][T14532] kvm: pic: single mode not supported [ 256.027171][T14532] kvm: pic: single mode not supported [ 256.033466][T14532] kvm: pic: single mode not supported [ 256.039782][T14532] kvm: pic: single mode not supported [ 256.041614][T14532] kvm: pic: level sensitive irq not supported [ 256.454103][T14541] netlink: 'syz.2.1661': attribute type 1 has an invalid length. [ 256.486409][T14541] 8021q: adding VLAN 0 to HW filter on device bond8 [ 256.513142][T14541] 8021q: adding VLAN 0 to HW filter on device bond8 [ 256.515835][T14541] bond8: (slave vxcan3): The slave device specified does not support setting the MAC address [ 256.520749][T14541] bond8: (slave vxcan3): Error -95 calling set_mac_address [ 256.577393][T14545] veth7: entered promiscuous mode [ 256.582076][T14545] bond8: (slave veth7): Enslaving as an active interface with a down link [ 256.636200][T14541] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1661'. [ 256.644143][T14541] 8021q: adding VLAN 0 to HW filter on device bond8 [ 257.486035][T14561] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1666'. [ 257.493490][T14561] tipc: Started in network mode [ 257.495135][T14561] tipc: Node identity fe800000000000000000000000000016, cluster identity 4711 [ 257.497986][T14561] tipc: Enabling of bearer rejected, failed to enable media [ 258.808739][ T29] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 258.968630][ T29] usb 5-1: Using ep0 maxpacket: 32 [ 258.973110][ T29] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 258.975771][ T29] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 258.978511][ T29] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 258.981379][ T29] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 258.984259][ T29] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 258.987465][ T29] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 258.991564][ T29] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 258.994389][ T29] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.001968][ T29] usb 5-1: config 0 descriptor?? [ 259.212482][ T29] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 3 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 259.219976][ T29] usb 5-1: USB disconnect, device number 3 [ 259.225593][ T29] usblp0: removed [ 259.443448][ T40] kauditd_printk_skb: 294 callbacks suppressed [ 259.443464][ T40] audit: type=1326 audit(1758580259.859:495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14578 comm="syz.0.1672" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de579 code=0x7ffc0000 [ 259.462952][ T40] audit: type=1326 audit(1758580259.869:496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14578 comm="syz.0.1672" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70de598 code=0x7ffc0000 [ 259.482951][ T40] audit: type=1326 audit(1758580259.869:497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14578 comm="syz.0.1672" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70de598 code=0x7ffc0000 [ 259.486530][T14589] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1673'. [ 259.501271][ T40] audit: type=1326 audit(1758580259.869:498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14578 comm="syz.0.1672" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70de598 code=0x7ffc0000 [ 259.510211][ T40] audit: type=1326 audit(1758580259.869:499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14578 comm="syz.0.1672" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de579 code=0x7ffc0000 [ 259.518974][ T40] audit: type=1326 audit(1758580259.869:500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14578 comm="syz.0.1672" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70de598 code=0x7ffc0000 [ 259.527615][ T40] audit: type=1326 audit(1758580259.869:501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14578 comm="syz.0.1672" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70de598 code=0x7ffc0000 [ 259.536409][ T40] audit: type=1326 audit(1758580259.869:502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14578 comm="syz.0.1672" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70de598 code=0x7ffc0000 [ 259.545195][ T40] audit: type=1326 audit(1758580259.869:503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14578 comm="syz.0.1672" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de579 code=0x7ffc0000 [ 259.554086][ T40] audit: type=1326 audit(1758580259.869:504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14578 comm="syz.0.1672" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70de598 code=0x7ffc0000 [ 261.838406][T14628] ceph: No mds server is up or the cluster is laggy [ 262.082003][T14639] netlink: 'syz.0.1685': attribute type 1 has an invalid length. [ 262.094952][T14639] 8021q: adding VLAN 0 to HW filter on device bond5 [ 262.114739][T14639] 8021q: adding VLAN 0 to HW filter on device bond5 [ 262.116989][T14639] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address [ 262.121399][T14639] bond5: (slave vxcan3): Error -95 calling set_mac_address [ 262.340585][T14646] veth5: entered promiscuous mode [ 262.358529][T14646] bond5: (slave veth5): Enslaving as an active interface with a down link [ 262.396498][T14639] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1685'. [ 262.401799][T14639] 8021q: adding VLAN 0 to HW filter on device bond5 [ 263.069835][T14656] lo speed is unknown, defaulting to 1000 [ 263.298742][ T61] usb 11-1: new high-speed USB device number 4 using dummy_hcd [ 263.458884][ T61] usb 11-1: Using ep0 maxpacket: 8 [ 263.463938][ T61] usb 11-1: config 0 has an invalid interface number: 55 but max is 0 [ 263.467332][ T61] usb 11-1: config 0 has no interface number 0 [ 263.470046][ T61] usb 11-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 263.478186][ T61] usb 11-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 263.488696][ T61] usb 11-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 263.493299][ T61] usb 11-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 263.591802][ T61] usb 11-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 263.594934][ T61] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.606715][ T61] usb 11-1: config 0 descriptor?? [ 263.613317][ T61] ldusb 11-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 263.828465][T14657] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 264.247826][T14645] Set syz1 is full, maxelem 65536 reached [ 264.273756][T14655] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 264.277595][ T61] usb 11-1: USB disconnect, device number 4 [ 264.280989][ T61] ldusb 11-1:0.55: LD USB Device #0 now disconnected [ 264.377989][T14669] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 266.624039][ T40] kauditd_printk_skb: 777 callbacks suppressed [ 266.624056][ T40] audit: type=1326 audit(1758580267.039:1282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14705 comm="syz.2.1705" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f83579 code=0x0 [ 269.469844][T14770] syz_tun: entered allmulticast mode [ 269.477595][T14770] dvmrp1: entered allmulticast mode [ 269.483060][T14769] syz_tun: left allmulticast mode [ 269.536312][T14772] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1723'. [ 269.571195][T14772] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1723'. [ 269.581491][T14772] batadv1: entered promiscuous mode [ 269.583644][T14772] batadv1: entered allmulticast mode [ 269.638232][T14777] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1723'. [ 269.650136][T14777] batadv1: entered promiscuous mode [ 269.652022][T14777] batadv1: entered allmulticast mode [ 270.544882][T14785] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1735'. [ 272.097284][T14807] tipc: Enabling of bearer rejected, failed to enable media [ 273.033891][T14823] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1740'. [ 273.086098][T14825] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1741'. [ 274.974165][T14867] bridge0: port 3(syz_tun) entered learning state [ 275.135997][T14873] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 275.139953][T14873] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 275.142292][T14873] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 275.144570][T14873] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 275.146881][T14873] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 275.149296][T14873] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 275.151626][T14873] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 275.154014][T14873] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 275.156284][ T40] audit: type=1804 audit(1758580275.569:1283): pid=14871 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1754" name="bus" dev="tmpfs" ino=2797 res=1 errno=0 [ 275.162825][T14873] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 275.165162][T14873] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 275.546726][T14896] IPVS: Error connecting to the multicast addr [ 275.568292][T14887] cgroup: fork rejected by pids controller in /syz4 [ 276.990894][T15016] syzkaller0: entered promiscuous mode [ 276.992658][T15016] syzkaller0: entered allmulticast mode [ 278.197190][T15020] netlink: 'syz.4.1768': attribute type 3 has an invalid length. [ 278.200607][T15020] netlink: 'syz.4.1768': attribute type 3 has an invalid length. [ 278.366789][T15043] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1777'. [ 279.132643][T16265] lo speed is unknown, defaulting to 1000 [ 279.356976][T16277] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1781'. [ 279.833913][T16286] tipc: Resetting bearer [ 281.634533][T16341] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 282.766418][T16368] netlink: 'syz.4.1803': attribute type 2 has an invalid length. [ 282.768925][T16368] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1803'. [ 282.778538][T16368] : entered promiscuous mode [ 283.828688][ T61] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 283.978793][ T61] usb 5-1: Using ep0 maxpacket: 32 [ 283.982825][ T61] usb 5-1: config 0 has an invalid interface number: 12 but max is 0 [ 283.986158][ T61] usb 5-1: config 0 has no interface number 0 [ 283.988519][ T61] usb 5-1: config 0 interface 12 has no altsetting 0 [ 283.992972][ T61] usb 5-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 283.995797][ T61] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.998415][ T61] usb 5-1: Product: syz [ 283.999870][ T61] usb 5-1: Manufacturer: syz [ 284.001358][ T61] usb 5-1: SerialNumber: syz [ 284.004085][ T61] usb 5-1: config 0 descriptor?? [ 284.175513][T16390] netlink: 'syz.2.1818': attribute type 1 has an invalid length. [ 284.196602][T16390] 8021q: adding VLAN 0 to HW filter on device bond9 [ 284.222568][T16390] 8021q: adding VLAN 0 to HW filter on device bond9 [ 284.225668][T16390] bond9: (slave vxcan3): The slave device specified does not support setting the MAC address [ 284.230300][T16390] bond9: (slave vxcan3): Error -95 calling set_mac_address [ 284.244570][ T40] audit: type=1804 audit(1758580284.659:1284): pid=16393 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1810" name="bus" dev="tmpfs" ino=2293 res=1 errno=0 [ 284.304221][T16394] bond10: entered promiscuous mode [ 284.311776][T16394] 8021q: adding VLAN 0 to HW filter on device bond10 [ 284.316805][ T40] audit: type=1326 audit(1758580284.729:1285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16396 comm="syz.6.1811" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700e579 code=0x7ffc0000 [ 284.326000][T16394] bond9: (slave bond10): Enslaving as an active interface with a down link [ 284.338886][ T40] audit: type=1326 audit(1758580284.749:1286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16396 comm="syz.6.1811" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf700e579 code=0x7ffc0000 [ 284.355845][ T40] audit: type=1326 audit(1758580284.749:1287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16396 comm="syz.6.1811" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700e579 code=0x7ffc0000 [ 284.372254][ T40] audit: type=1326 audit(1758580284.749:1288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16396 comm="syz.6.1811" exe="/syz-executor" sig=0 arch=40000003 syscall=196 compat=1 ip=0xf700e579 code=0x7ffc0000 [ 284.379201][T16390] macvlan1: entered promiscuous mode [ 284.380683][T16390] macvlan1: entered allmulticast mode [ 284.382487][T16390] bond9: entered promiscuous mode [ 284.384321][T16390] 8021q: adding VLAN 0 to HW filter on device macvlan1 [ 284.387172][ T40] audit: type=1326 audit(1758580284.749:1289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16396 comm="syz.6.1811" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700e579 code=0x7ffc0000 [ 284.396120][T16390] bond9: left promiscuous mode [ 284.414314][ T61] f81534 5-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 284.416745][ T61] f81534 5-1:0.12: f81534_find_config_idx: read failed: -71 [ 284.419465][ T61] f81534 5-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 284.421957][ T61] f81534 5-1:0.12: probe with driver f81534 failed with error -71 [ 284.429804][ T61] usb 5-1: USB disconnect, device number 4 [ 284.512557][T16402] netlink: 72 bytes leftover after parsing attributes in process `syz.6.1812'. [ 285.331600][ T5976] Bluetooth: hci2: command 0x0405 tx timeout [ 286.510848][T16440] netlink: 'syz.2.1823': attribute type 16 has an invalid length. [ 286.513305][T16440] netlink: 'syz.2.1823': attribute type 17 has an invalid length. [ 286.520526][T16440] 0ªî{X¹¦: left allmulticast mode [ 286.537836][T16440] 8021q: adding VLAN 0 to HW filter on device bond0 [ 286.562611][T16440] 8021q: adding VLAN 0 to HW filter on device team0 [ 286.572585][T16440] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 287.040091][T16456] tipc: Enabled bearer , priority 0 [ 287.043123][T16456] syzkaller0: entered promiscuous mode [ 287.045171][T16456] syzkaller0: entered allmulticast mode [ 287.051588][T16456] tipc: Resetting bearer [ 287.055482][T16455] tipc: Resetting bearer [ 287.066451][T16455] tipc: Disabling bearer [ 287.464048][T16463] wireguard0: entered promiscuous mode [ 287.467076][T16463] wireguard0: entered allmulticast mode [ 287.575028][T16468] lo speed is unknown, defaulting to 1000 [ 287.612434][ T40] audit: type=1326 audit(1758580288.029:1290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16467 comm="syz.0.1832" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf70de579 code=0x0 [ 287.693995][T16472] tipc: Enabling of bearer rejected, failed to enable media [ 287.882521][T16477] netlink: 'syz.2.1834': attribute type 1 has an invalid length. [ 287.914488][T16477] bond11: (slave geneve4): Enslaving as an active interface with an up link [ 287.917438][T10273] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 287.920166][T10273] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 287.922779][T10273] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 287.925370][T10273] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 288.528406][T16490] syz.0.1837: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 288.533685][T16490] CPU: 0 UID: 0 PID: 16490 Comm: syz.0.1837 Not tainted syzkaller #0 PREEMPT(full) [ 288.533701][T16490] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 288.533709][T16490] Call Trace: [ 288.533713][T16490] [ 288.533718][T16490] dump_stack_lvl+0x16c/0x1f0 [ 288.533759][T16490] warn_alloc+0x248/0x3a0 [ 288.533779][T16490] ? __pfx_warn_alloc+0x10/0x10 [ 288.533791][T16490] ? __pfx_stack_trace_save+0x10/0x10 [ 288.533808][T16490] ? kasan_save_stack+0x42/0x60 [ 288.533821][T16490] ? kasan_save_stack+0x33/0x60 [ 288.533834][T16490] ? kasan_save_track+0x14/0x30 [ 288.533847][T16490] ? xskq_create+0x52/0x1d0 [ 288.533884][T16490] ? xsk_setsockopt+0x74e/0x9a0 [ 288.533900][T16490] ? do_sock_setsockopt+0xf0/0x1d0 [ 288.533914][T16490] ? xskq_create+0xfb/0x1d0 [ 288.533929][T16490] __vmalloc_node_range_noprof+0xff5/0x14b0 [ 288.533945][T16490] ? xskq_create+0xfb/0x1d0 [ 288.533962][T16490] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 288.533977][T16490] ? xskq_create+0xfb/0x1d0 [ 288.533991][T16490] vmalloc_user_noprof+0x9e/0xe0 [ 288.534001][T16490] ? xskq_create+0xfb/0x1d0 [ 288.534015][T16490] xskq_create+0xfb/0x1d0 [ 288.534029][T16490] xsk_setsockopt+0x74e/0x9a0 [ 288.534041][T16490] ? __pfx_aa_sk_perm+0x10/0x10 [ 288.534056][T16490] ? __pfx_xsk_setsockopt+0x10/0x10 [ 288.534069][T16490] ? find_held_lock+0x2b/0x80 [ 288.534081][T16490] ? aa_sock_opt_perm+0xfd/0x1c0 [ 288.534092][T16490] ? __pfx_xsk_setsockopt+0x10/0x10 [ 288.534106][T16490] do_sock_setsockopt+0xf0/0x1d0 [ 288.534119][T16490] __sys_setsockopt+0x120/0x1a0 [ 288.534136][T16490] __ia32_sys_setsockopt+0xbc/0x160 [ 288.534151][T16490] ? lockdep_hardirqs_on+0x7c/0x110 [ 288.534175][T16490] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 288.534192][T16490] __do_fast_syscall_32+0x7c/0x300 [ 288.534211][T16490] do_fast_syscall_32+0x32/0x80 [ 288.534222][T16490] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 288.534237][T16490] RIP: 0023:0xf70de579 [ 288.534246][T16490] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 288.534257][T16490] RSP: 002b:00000000f54ce55c EFLAGS: 00000296 ORIG_RAX: 000000000000016e [ 288.534268][T16490] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 000000000000011b [ 288.534274][T16490] RDX: 0000000000000006 RSI: 0000000080000000 RDI: 0000000000000004 [ 288.534280][T16490] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 288.534286][T16490] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 288.534292][T16490] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 288.534305][T16490] [ 288.534309][T16490] Mem-Info: [ 288.619351][T16490] active_anon:10188 inactive_anon:10402 isolated_anon:0 [ 288.619351][T16490] active_file:3512 inactive_file:14635 isolated_file:0 [ 288.619351][T16490] unevictable:18615 dirty:425 writeback:0 [ 288.619351][T16490] slab_reclaimable:6636 slab_unreclaimable:68655 [ 288.619351][T16490] mapped:29067 shmem:18043 pagetables:1651 [ 288.619351][T16490] sec_pagetables:321 bounce:0 [ 288.619351][T16490] kernel_misc_reclaimable:0 [ 288.619351][T16490] free:20915 free_pcp:12346 free_cma:0 [ 288.633517][T16490] Node 0 active_anon:196kB inactive_anon:92kB active_file:12kB inactive_file:184kB unevictable:13192kB isolated(anon):0kB isolated(file):0kB mapped:24kB dirty:0kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:9192kB pagetables:2092kB sec_pagetables:1124kB all_unreclaimable? yes Balloon:0kB [ 288.643239][T16490] Node 1 active_anon:40656kB inactive_anon:41516kB active_file:14036kB inactive_file:58356kB unevictable:61268kB isolated(anon):0kB isolated(file):0kB mapped:116244kB dirty:1700kB writeback:0kB shmem:68636kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7544kB pagetables:4512kB sec_pagetables:160kB all_unreclaimable? no Balloon:0kB [ 288.653011][T16490] Node 0 DMA free:1912kB boost:0kB min:760kB low:948kB high:1136kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:4kB active_file:0kB inactive_file:0kB unevictable:172kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:520kB local_pcp:56kB free_cma:0kB [ 288.662142][T16490] lowmem_reserve[]: 0 288 288 288 288 [ 288.663844][T16490] Node 0 DMA32 free:16796kB boost:0kB min:13220kB low:16524kB high:19828kB reserved_highatomic:4096KB free_highatomic:532KB active_anon:196kB inactive_anon:88kB active_file:12kB inactive_file:184kB unevictable:13020kB writepending:0kB present:1032196kB managed:295076kB mlocked:0kB bounce:0kB free_pcp:9096kB local_pcp:2100kB free_cma:0kB [ 288.673516][T16490] lowmem_reserve[]: 0 0 0 0 0 [ 288.675156][T16490] Node 1 DMA32 free:64452kB boost:0kB min:47140kB low:58924kB high:70708kB reserved_highatomic:10240KB free_highatomic:2536KB active_anon:40756kB inactive_anon:41516kB active_file:14036kB inactive_file:58356kB unevictable:61268kB writepending:1700kB present:1048432kB managed:948220kB mlocked:4kB bounce:0kB free_pcp:40120kB local_pcp:1372kB free_cma:0kB [ 288.685335][T16490] lowmem_reserve[]: 0 0 0 0 0 [ 288.686851][T16490] Node 0 DMA: 24*4kB (UM) 13*8kB (UM) 3*16kB (UM) 4*32kB (UM) 0*64kB 0*128kB 0*256kB 1*512kB (M) 1*1024kB (M) 0*2048kB 0*4096kB = 1912kB [ 288.691782][T16490] Node 0 DMA32: 205*4kB (UMEH) 105*8kB (UMEH) 120*16kB (UMEH) 67*32kB (UMEH) 39*64kB (MEH) 21*128kB (UME) 9*256kB (UM) 3*512kB (M) 2*1024kB (UM) 0*2048kB 0*4096kB = 16796kB [ 288.697152][T16490] Node 1 DMA32: 30*4kB (EH) 38*8kB (UMEH) 42*16kB (UMEH) 55*32kB (EH) 83*64kB (UMEH) 81*128kB (UMEH) 59*256kB (UMEH) 36*512kB (UME) 12*1024kB (UM) 0*2048kB 0*4096kB = 64360kB [ 288.702842][T16490] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 288.705980][T16490] Node 0 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 288.708951][T16490] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 288.711948][T16490] Node 1 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 288.714902][T16490] 53571 total pagecache pages [ 288.716389][T16490] 539 pages in swap cache [ 288.717784][T16490] Free swap = 80396kB [ 288.719222][T16490] Total swap = 124996kB [ 288.720591][T16490] 524155 pages RAM [ 288.721879][T16490] 0 pages HighMem/MovableOnly [ 288.723357][T16490] 209491 pages reserved [ 288.724665][T16490] 0 pages cma reserved [ 288.921931][T16498] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1839'. [ 290.595612][T16513] netlink: 'syz.2.1843': attribute type 1 has an invalid length. [ 290.619301][T16513] bond12: (slave vxcan3): The slave device specified does not support setting the MAC address [ 290.623025][T16513] bond12: (slave vxcan3): Error -95 calling set_mac_address [ 290.673093][T16518] macvlan1: entered promiscuous mode [ 290.674920][T16518] macvlan1: entered allmulticast mode [ 290.677440][T16518] bond12: entered promiscuous mode [ 290.681505][T16518] 8021q: adding VLAN 0 to HW filter on device macvlan1 [ 290.685770][T16518] bond12: left promiscuous mode [ 292.457755][ T40] audit: type=1800 audit(1758580292.869:1291): pid=16554 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1854" name="nullb0" dev="tmpfs" ino=2932 res=0 errno=0 [ 292.577844][T16563] overlayfs: failed to clone upperpath [ 293.839551][T16604] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1867'. [ 293.842562][T16604] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1867'. [ 295.845548][T16642] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1875'. [ 296.448743][ T63] Bluetooth: hci2: command 0x0405 tx timeout [ 297.595718][T16666] tipc: Enabled bearer , priority 10 [ 297.606478][T16666] tipc: Bearer : already 2 bearers with priority 10 [ 297.609630][T16666] tipc: Bearer : trying with adjusted priority [ 297.612539][T16666] tipc: Enabling of bearer rejected, failed to enable media [ 297.901417][T16672] overlayfs: failed to clone lowerpath [ 298.387344][T16690] sg_write: process 653 (syz.6.1890) changed security contexts after opening file descriptor, this is not allowed. [ 298.393334][ T40] audit: type=1326 audit(1758580298.799:1292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16689 comm="syz.6.1890" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700e579 code=0x7ffc0000 [ 298.401266][ T40] audit: type=1326 audit(1758580298.799:1293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16689 comm="syz.6.1890" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700e579 code=0x7ffc0000 [ 298.408005][ T40] audit: type=1326 audit(1758580298.799:1294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16689 comm="syz.6.1890" exe="/syz-executor" sig=0 arch=40000003 syscall=175 compat=1 ip=0xf700e579 code=0x7ffc0000 [ 298.414790][ T40] audit: type=1326 audit(1758580298.799:1295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16689 comm="syz.6.1890" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700e579 code=0x7ffc0000 [ 298.433688][ T40] audit: type=1326 audit(1758580298.799:1296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16689 comm="syz.6.1890" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700e579 code=0x7ffc0000 [ 298.440741][ T40] audit: type=1326 audit(1758580298.799:1297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16689 comm="syz.6.1890" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf700e579 code=0x7ffc0000 [ 298.448051][ T40] audit: type=1326 audit(1758580298.799:1298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16689 comm="syz.6.1890" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700e579 code=0x7ffc0000 [ 298.456341][ T40] audit: type=1326 audit(1758580298.799:1299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16689 comm="syz.6.1890" exe="/syz-executor" sig=0 arch=40000003 syscall=270 compat=1 ip=0xf700e579 code=0x7ffc0000 [ 298.463571][ T40] audit: type=1326 audit(1758580298.799:1300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16689 comm="syz.6.1890" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700e579 code=0x7ffc0000 [ 298.471091][ T40] audit: type=1326 audit(1758580298.799:1301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16689 comm="syz.6.1890" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf700e579 code=0x7ffc0000 [ 298.546500][T16695] kvm: faulting far call emulation tainted memory [ 298.549319][T16695] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 298.866738][T16701] netlink: 'syz.2.1893': attribute type 1 has an invalid length. [ 298.883711][T16701] 8021q: adding VLAN 0 to HW filter on device bond13 [ 298.905866][T16701] 8021q: adding VLAN 0 to HW filter on device bond13 [ 298.908441][T16701] bond13: (slave vxcan3): The slave device specified does not support setting the MAC address [ 298.913015][T16701] bond13: (slave vxcan3): Error -95 calling set_mac_address [ 298.957647][T16703] macvlan1: entered promiscuous mode [ 298.960988][T16703] macvlan1: entered allmulticast mode [ 298.963207][T16703] bond13: entered promiscuous mode [ 298.965802][T16703] 8021q: adding VLAN 0 to HW filter on device macvlan1 [ 298.972514][T16703] bond13: left promiscuous mode [ 299.025006][T16705] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1894'. [ 299.030036][T16705] veth0_macvtap: left promiscuous mode [ 299.395858][T16714] netlink: 'syz.4.1898': attribute type 10 has an invalid length. [ 299.401057][T16709] xfrm0: left promiscuous mode [ 299.403497][T16709] xfrm0: left allmulticast mode [ 299.407044][T16709] 0ªX¹¦D: left allmulticast mode [ 299.411921][T16709] bridge2: left allmulticast mode [ 299.415294][T16709] veth7: left promiscuous mode [ 299.417704][T16709] bond10: left promiscuous mode [ 299.427335][T16714] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 299.430217][T10704] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 20004 - 0 [ 299.433692][T10704] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 20004 - 0 [ 299.436367][T10704] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 20004 - 0 [ 299.440118][T10704] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 20004 - 0 [ 302.825926][T16775] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1911'. [ 303.462890][T16791] netlink: 'syz.6.1917': attribute type 1 has an invalid length. [ 303.488212][T16791] 8021q: adding VLAN 0 to HW filter on device bond2 [ 303.545325][T16791] bond2: (slave veth9): Enslaving as an active interface with a down link [ 303.587145][T16791] bond2: (slave veth0_to_bond): making interface the new active one [ 303.595683][T16791] veth0_to_bond: entered promiscuous mode [ 303.598475][T16791] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 303.619965][T16791] vlan2: entered allmulticast mode [ 303.622335][T16791] veth0_to_bond: entered allmulticast mode [ 303.626258][T16791] bond2: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 306.456653][T16855] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1936'. [ 306.605555][T16871] geneve2: entered promiscuous mode [ 306.610060][T10708] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.613488][T10708] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.616813][T10708] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.621515][T10708] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.053152][T16878] bridge0: port 3(syz_tun) entered disabled state [ 307.263197][T16878] bridge0: port 2(bridge_slave_1) entered disabled state [ 307.266686][T16878] bridge0: port 1(bridge_slave_0) entered disabled state [ 307.355695][T16878] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 307.362242][T16878] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 307.458698][T16878] veth7: left promiscuous mode [ 307.463360][T16878] wireguard0: left promiscuous mode [ 307.465324][T16878] wireguard0: left allmulticast mode [ 307.501698][ T1328] lo speed is unknown, defaulting to 1000 [ 307.504212][ T1328] syz0: Port: 1 Link DOWN [ 307.504268][T10708] netdevsim netdevsim6 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.509224][T10708] netdevsim netdevsim6 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.511932][T10708] netdevsim netdevsim6 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.514704][T10708] netdevsim netdevsim6 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.846096][T16888] netlink: 'syz.6.1942': attribute type 5 has an invalid length. [ 307.849483][T16888] netlink: 'syz.6.1942': attribute type 7 has an invalid length. [ 307.910539][T16888] : entered promiscuous mode [ 308.190245][T16890] syz_tun: entered allmulticast mode [ 308.569782][T16901] overlayfs: failed to clone lowerpath [ 309.577415][ T40] kauditd_printk_skb: 20 callbacks suppressed [ 309.577425][ T40] audit: type=1326 audit(1758580309.989:1322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16920 comm="syz.6.1953" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf700e579 code=0x0 [ 310.534532][T16948] netlink: 'syz.0.1958': attribute type 5 has an invalid length. [ 310.537617][T16948] netlink: 'syz.0.1958': attribute type 7 has an invalid length. [ 310.559382][T16948] : entered promiscuous mode [ 311.715840][T16970] ªªªªª»: renamed from hsr0 [ 312.588659][T16979] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1969'. [ 313.554367][T16999] netlink: 'syz.2.1972': attribute type 5 has an invalid length. [ 313.556851][T16999] netlink: 'syz.2.1972': attribute type 7 has an invalid length. [ 313.571393][T16999] : entered promiscuous mode [ 315.804697][T17024] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1988'. [ 316.671123][ T40] audit: type=1326 audit(1758580317.089:1323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17027 comm="syz.2.1979" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f83598 code=0x7ffc0000 [ 316.686113][ T40] audit: type=1326 audit(1758580317.089:1324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17027 comm="syz.2.1979" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f83598 code=0x7ffc0000 [ 316.693467][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.695945][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 316.701154][ T40] audit: type=1326 audit(1758580317.089:1325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17027 comm="syz.2.1979" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f83598 code=0x7ffc0000 [ 316.709718][ T40] audit: type=1326 audit(1758580317.089:1326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17027 comm="syz.2.1979" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f83579 code=0x7ffc0000 [ 316.716426][ T40] audit: type=1326 audit(1758580317.089:1327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17027 comm="syz.2.1979" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f83598 code=0x7ffc0000 [ 316.723404][ T40] audit: type=1326 audit(1758580317.089:1328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17027 comm="syz.2.1979" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f83598 code=0x7ffc0000 [ 316.730149][ T40] audit: type=1326 audit(1758580317.089:1329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17027 comm="syz.2.1979" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f83579 code=0x7ffc0000 [ 316.736908][ T40] audit: type=1326 audit(1758580317.089:1330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17027 comm="syz.2.1979" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f83598 code=0x7ffc0000 [ 316.743853][ T40] audit: type=1326 audit(1758580317.089:1331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17027 comm="syz.2.1979" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f83598 code=0x7ffc0000 [ 316.757432][ T40] audit: type=1326 audit(1758580317.089:1332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17027 comm="syz.2.1979" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f83598 code=0x7ffc0000 [ 320.530125][T17092] netlink: 'syz.4.1993': attribute type 5 has an invalid length. [ 320.532690][T17092] netlink: 'syz.4.1993': attribute type 7 has an invalid length. [ 320.944287][T17098] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1998'. [ 322.504632][T17129] tipc: Enabled bearer , priority 10 [ 322.914473][T17135] wg2: left promiscuous mode [ 322.916344][T17135] wg2: left allmulticast mode [ 323.213918][T17135] wireguard0: left promiscuous mode [ 323.215340][T17135] wireguard0: left allmulticast mode [ 323.217139][T17135] vlan0: left promiscuous mode [ 323.218886][T17135] vlan0: left allmulticast mode [ 323.220304][T17135] hsr_slave_1: left allmulticast mode [ 323.222776][T17135] veth9: left promiscuous mode [ 323.229735][T17135] geneve2: left promiscuous mode [ 323.236077][T10721] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.238930][T10721] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.241664][T10721] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.244224][T10721] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.990785][T17150] netlink: 'syz.2.2012': attribute type 5 has an invalid length. [ 323.995873][T17150] netlink: 'syz.2.2012': attribute type 7 has an invalid length. [ 324.098980][T17151] hsr0: entered allmulticast mode [ 324.100740][T17151] hsr_slave_0: entered allmulticast mode [ 324.110889][T17151] hsr_slave_0: left promiscuous mode [ 324.135528][T17151] hsr0 (unregistering): left allmulticast mode [ 324.485492][T17154] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2015'. [ 324.491432][T17154] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2015'. [ 324.525269][T17154] netlink: 'syz.0.2015': attribute type 9 has an invalid length. [ 326.695574][T17187] bridge0: port 3(syz_tun) entered disabled state [ 326.701601][T17187] bridge0: port 2(bridge_slave_1) entered disabled state [ 326.704394][T17187] bridge0: port 1(bridge_slave_0) entered disabled state [ 326.815282][T17187] wg2: left promiscuous mode [ 326.817307][T17187] wg2: left allmulticast mode [ 326.854879][T17187] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 326.863902][T17187] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 326.931963][T17187] bond2: left allmulticast mode [ 326.938139][T17187] vlan0: left promiscuous mode [ 326.940032][T17187] bond4: left promiscuous mode [ 326.942019][T17187] gretap2: left promiscuous mode [ 326.943793][T17187] vlan0: left allmulticast mode [ 326.945559][T17187] bond4: left allmulticast mode [ 326.947490][T17187] gretap2: left allmulticast mode [ 326.952355][T17187] vlan1: left promiscuous mode [ 326.953936][T17187] hsr_slave_1: left promiscuous mode [ 326.956064][T17187] vlan1: left allmulticast mode [ 326.961859][T17187] veth5: left promiscuous mode [ 326.991548][ T60] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.995193][ T60] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.998194][ T60] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.001746][ T60] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.390949][T17199] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2034'. [ 327.445719][T17204] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2025'. [ 328.453052][T17222] tipc: Enabled bearer , priority 0 [ 328.456438][T17222] syzkaller0: entered promiscuous mode [ 328.458265][T17222] syzkaller0: entered allmulticast mode [ 328.470835][T17222] tipc: Resetting bearer [ 328.922611][T17229] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2029'. [ 328.941387][T17231] tipc: Enabling of bearer rejected, already enabled [ 329.108530][T17241] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2038'. [ 329.265963][T17241] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 329.271339][T17241] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 329.275499][T17241] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 329.280771][T17241] bond0 (unregistering): Released all slaves [ 329.468690][ T6040] tipc: Node number set to 4269801494 [ 329.970488][T17256] delete_channel: no stack [ 330.157997][T17262] netlink: 'syz.4.2050': attribute type 33 has an invalid length. [ 330.161438][T17262] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2050'. [ 330.166292][T17262] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2050'. [ 330.521728][T17277] block nbd0: server does not support multiple connections per device. [ 330.526631][T17277] block nbd0: shutting down sockets [ 332.528059][T17318] lo speed is unknown, defaulting to 1000 [ 333.940394][T17344] netlink: 'syz.0.2070': attribute type 10 has an invalid length. [ 333.945536][T17344] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 336.240631][T17375] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2079'. [ 336.289803][T17377] tipc: Enabled bearer , priority 0 [ 336.292824][T17377] syzkaller0: entered promiscuous mode [ 336.294602][T17377] syzkaller0: entered allmulticast mode [ 336.338110][T17377] tipc: Resetting bearer [ 336.347907][T17376] tipc: Resetting bearer [ 336.381035][T17376] tipc: Disabling bearer [ 336.518064][T17383] tipc: Enabling of bearer rejected, failed to enable media [ 336.993344][T17401] netlink: 136784 bytes leftover after parsing attributes in process `syz.2.2087'. [ 336.997390][T17401] netlink: zone id is out of range [ 337.000765][T17401] netlink: zone id is out of range [ 337.003125][T17401] netlink: zone id is out of range [ 337.005112][T17401] netlink: zone id is out of range [ 337.006993][T17401] netlink: zone id is out of range [ 337.010181][T17401] netlink: zone id is out of range [ 337.011914][T17401] netlink: zone id is out of range [ 337.013810][T17401] netlink: zone id is out of range [ 337.015857][T17401] netlink: zone id is out of range [ 337.059296][T17401] netlink: zone id is out of range [ 337.653789][T17415] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 337.662193][T17415] cramfs: wrong magic [ 339.479513][T18140] netlink: 'syz.6.2098': attribute type 1 has an invalid length. [ 339.527367][T18140] bond3: (slave geneve2): Opening slave failed [ 340.447702][T19857] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2110'. [ 341.429159][T19869] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2112'. [ 342.140865][T19883] netlink: 'syz.6.2109': attribute type 1 has an invalid length. [ 342.161693][T19883] 8021q: adding VLAN 0 to HW filter on device bond4 [ 342.228236][T19883] 8021q: adding VLAN 0 to HW filter on device bond4 [ 342.232031][T19883] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 342.246621][T19883] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 342.303001][T19887] bond5: entered promiscuous mode [ 342.307101][T19887] 8021q: adding VLAN 0 to HW filter on device bond5 [ 342.310251][T19887] bond4: (slave bond5): Enslaving as an active interface with a down link [ 342.346862][T19883] macvlan2: entered promiscuous mode [ 342.349539][T19883] macvlan2: entered allmulticast mode [ 342.352098][T19883] bond4: entered promiscuous mode [ 342.354611][T19883] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 342.358732][T19883] bond4: left promiscuous mode [ 342.804009][T19894] netfs: Couldn't get user pages (rc=-14) [ 343.298138][T19902] sysfs: cannot create duplicate filename '/class/ieee80211/!寿$ûÌÌULÙ' [ 343.302184][T19902] CPU: 1 UID: 0 PID: 19902 Comm: syz.0.2114 Not tainted syzkaller #0 PREEMPT(full) [ 343.302206][T19902] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 343.302218][T19902] Call Trace: [ 343.302224][T19902] [ 343.302231][T19902] dump_stack_lvl+0x16c/0x1f0 [ 343.302262][T19902] sysfs_warn_dup+0x7f/0xa0 [ 343.302283][T19902] sysfs_do_create_link_sd+0x124/0x140 [ 343.302304][T19902] sysfs_create_link+0x61/0xc0 [ 343.302324][T19902] device_add+0x62c/0x1aa0 [ 343.302345][T19902] ? __pfx_device_add+0x10/0x10 [ 343.302361][T19902] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 343.302387][T19902] ? ieee80211_set_bitrate_flags+0x243/0x6b0 [ 343.302414][T19902] wiphy_register+0x1df4/0x29f0 [ 343.302429][T19902] ? netdev_run_todo+0x864/0x1320 [ 343.302444][T19902] ? __dev_printk+0x210/0x270 [ 343.302472][T19902] ? __pfx_wiphy_register+0x10/0x10 [ 343.302495][T19902] ? ieee80211_init_rate_ctrl_alg+0x125/0x6b0 [ 343.302523][T19902] ieee80211_register_hw+0x2546/0x4120 [ 343.302558][T19902] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 343.302586][T19902] ? find_held_lock+0x2b/0x80 [ 343.302604][T19902] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 343.302627][T19902] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 343.302651][T19902] ? __hrtimer_setup+0x176/0x280 [ 343.302677][T19902] mac80211_hwsim_new_radio+0x3034/0x54d0 [ 343.302710][T19902] ? trace_kmalloc+0x2b/0xd0 [ 343.302728][T19902] ? __kmalloc_node_track_caller_noprof+0x23e/0x510 [ 343.302749][T19902] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 343.302774][T19902] ? hwsim_new_radio_nl+0xa0e/0x12c0 [ 343.302793][T19902] ? __asan_memcpy+0x3c/0x60 [ 343.302814][T19902] hwsim_new_radio_nl+0xb51/0x12c0 [ 343.302835][T19902] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 343.302862][T19902] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 343.302880][T19902] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 343.302903][T19902] genl_family_rcv_msg_doit+0x209/0x2f0 [ 343.302923][T19902] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 343.302950][T19902] ? bpf_lsm_capable+0x9/0x10 [ 343.302964][T19902] ? security_capable+0x7e/0x260 [ 343.302982][T19902] ? ns_capable+0xd7/0x110 [ 343.303002][T19902] genl_rcv_msg+0x55c/0x800 [ 343.303024][T19902] ? __pfx_genl_rcv_msg+0x10/0x10 [ 343.303041][T19902] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 343.303063][T19902] ? __lock_acquire+0x62e/0x1ce0 [ 343.303088][T19902] netlink_rcv_skb+0x158/0x420 [ 343.303111][T19902] ? __pfx_genl_rcv_msg+0x10/0x10 [ 343.303128][T19902] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 343.303162][T19902] ? netlink_deliver_tap+0x1ae/0xd30 [ 343.303296][T19902] ? is_vmalloc_addr+0x86/0xa0 [ 343.303318][T19902] genl_rcv+0x28/0x40 [ 343.303332][T19902] netlink_unicast+0x5a7/0x870 [ 343.303359][T19902] ? __pfx_netlink_unicast+0x10/0x10 [ 343.303383][T19902] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 343.303414][T19902] netlink_sendmsg+0x8d1/0xdd0 [ 343.303443][T19902] ? __pfx_netlink_sendmsg+0x10/0x10 [ 343.303470][T19902] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 343.303492][T19902] ____sys_sendmsg+0xa98/0xc70 [ 343.303514][T19902] ? __pfx_____sys_sendmsg+0x10/0x10 [ 343.303531][T19902] ? get_compat_msghdr+0x11a/0x170 [ 343.303558][T19902] ? __pfx_futex_wake_mark+0x10/0x10 [ 343.303585][T19902] ___sys_sendmsg+0x134/0x1d0 [ 343.303610][T19902] ? __pfx____sys_sendmsg+0x10/0x10 [ 343.303645][T19902] ? find_held_lock+0x2b/0x80 [ 343.303678][T19902] __sys_sendmsg+0x16d/0x220 [ 343.303702][T19902] ? __pfx___sys_sendmsg+0x10/0x10 [ 343.303725][T19902] ? __ia32_sys_futex_time32+0x1d9/0x460 [ 343.303763][T19902] ? rcu_is_watching+0x12/0xc0 [ 343.303785][T19902] __do_fast_syscall_32+0x7c/0x300 [ 343.303813][T19902] do_fast_syscall_32+0x32/0x80 [ 343.303829][T19902] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 343.303849][T19902] RIP: 0023:0xf70de579 [ 343.303861][T19902] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 343.303877][T19902] RSP: 002b:00000000f548c55c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 343.303893][T19902] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000080000040 [ 343.303904][T19902] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 343.303914][T19902] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 343.303923][T19902] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 343.303932][T19902] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 343.303955][T19902] [ 343.936422][T19907] tipc: Resetting bearer [ 343.949959][T19907] netlink: 'syz.0.2115': attribute type 1 has an invalid length. [ 343.982877][T19907] bond6: (slave geneve2): Enslaving as an active interface with an up link [ 343.986627][T10714] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 343.989667][T10714] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 343.993173][T10714] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 343.996719][T10714] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 344.039129][T19912] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2117'. [ 345.864428][T19943] netlink: 'syz.4.2127': attribute type 1 has an invalid length. [ 345.931432][T19943] bond5: (slave geneve3): Enslaving as an active interface with an up link [ 345.935480][T10721] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 345.953526][T10721] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 345.957252][T10721] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 345.965404][T10721] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 346.903717][T19960] netlink: 'syz.0.2131': attribute type 1 has an invalid length. [ 346.927314][T19960] 8021q: adding VLAN 0 to HW filter on device bond7 [ 346.958699][T19960] 8021q: adding VLAN 0 to HW filter on device bond7 [ 346.961082][T19960] bond7: (slave vxcan3): The slave device specified does not support setting the MAC address [ 346.965364][T19960] bond7: (slave vxcan3): Error -95 calling set_mac_address [ 347.006462][T19963] bond8: entered promiscuous mode [ 347.009457][T19963] 8021q: adding VLAN 0 to HW filter on device bond8 [ 347.012630][T19963] bond7: (slave bond8): Enslaving as an active interface with a down link [ 347.050369][T19960] macvlan0: entered promiscuous mode [ 347.052304][T19960] macvlan0: entered allmulticast mode [ 347.054404][T19960] bond7: entered promiscuous mode [ 347.056410][T19960] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 347.099240][T19960] bond7: left promiscuous mode [ 347.285665][T19968] lo speed is unknown, defaulting to 1000 [ 347.542745][T19968] netlink: 'syz.4.2135': attribute type 13 has an invalid length. [ 347.560877][T19968] net_ratelimit: 4052 callbacks suppressed [ 347.560896][T19968] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 348.636402][T19991] netlink: 'syz.4.2139': attribute type 1 has an invalid length. [ 348.723260][T19991] bond6: (slave vxcan1): The slave device specified does not support setting the MAC address [ 348.726949][T19991] bond6: (slave vxcan1): Error -95 calling set_mac_address [ 348.750299][ T5976] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 348.753362][ T5976] CPU: 1 UID: 0 PID: 5976 Comm: kworker/u33:4 Not tainted syzkaller #0 PREEMPT(full) [ 348.753380][ T5976] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 348.753388][ T5976] Workqueue: hci2 hci_rx_work [ 348.753407][ T5976] Call Trace: [ 348.753412][ T5976] [ 348.753417][ T5976] dump_stack_lvl+0x16c/0x1f0 [ 348.753436][ T5976] sysfs_warn_dup+0x7f/0xa0 [ 348.753452][ T5976] sysfs_create_dir_ns+0x24b/0x2b0 [ 348.753467][ T5976] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 348.753481][ T5976] ? find_held_lock+0x2b/0x80 [ 348.753496][ T5976] ? do_raw_spin_unlock+0x172/0x230 [ 348.753515][ T5976] kobject_add_internal+0x2c4/0x9b0 [ 348.753529][ T5976] kobject_add+0x16e/0x240 [ 348.753540][ T5976] ? __pfx_kobject_add+0x10/0x10 [ 348.753553][ T5976] ? do_raw_spin_unlock+0x172/0x230 [ 348.753570][ T5976] ? kobject_put+0xab/0x5a0 [ 348.753584][ T5976] device_add+0x288/0x1aa0 [ 348.753596][ T5976] ? __pfx_dev_set_name+0x10/0x10 [ 348.753609][ T5976] ? __pfx_device_add+0x10/0x10 [ 348.753620][ T5976] ? mgmt_send_event_skb+0x2fb/0x460 [ 348.753638][ T5976] hci_conn_add_sysfs+0x17e/0x230 [ 348.753654][ T5976] le_conn_complete_evt+0x1075/0x1d70 [ 348.753673][ T5976] ? preempt_count_sub+0x130/0x160 [ 348.753687][ T5976] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 348.753700][ T5976] ? hci_event_packet+0x459/0x11c0 [ 348.753718][ T5976] hci_le_conn_complete_evt+0x23c/0x370 [ 348.753737][ T5976] hci_le_meta_evt+0x354/0x5e0 [ 348.753752][ T5976] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 348.753769][ T5976] hci_event_packet+0x682/0x11c0 [ 348.753784][ T5976] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 348.753800][ T5976] ? __pfx_hci_event_packet+0x10/0x10 [ 348.753816][ T5976] ? kcov_remote_start+0x3c9/0x6d0 [ 348.753832][ T5976] ? lockdep_hardirqs_on+0x7c/0x110 [ 348.753852][ T5976] hci_rx_work+0x2c5/0x16b0 [ 348.753867][ T5976] ? rcu_is_watching+0x12/0xc0 [ 348.753880][ T5976] process_one_work+0x9cf/0x1b70 [ 348.753903][ T5976] ? __pfx_process_one_work+0x10/0x10 [ 348.753924][ T5976] ? assign_work+0x1a0/0x250 [ 348.753941][ T5976] worker_thread+0x6c8/0xf10 [ 348.753955][ T5976] ? __kthread_parkme+0x19e/0x250 [ 348.753969][ T5976] ? __pfx_worker_thread+0x10/0x10 [ 348.753979][ T5976] kthread+0x3c5/0x780 [ 348.753995][ T5976] ? __pfx_kthread+0x10/0x10 [ 348.754011][ T5976] ? rcu_is_watching+0x12/0xc0 [ 348.754021][ T5976] ? __pfx_kthread+0x10/0x10 [ 348.754037][ T5976] ret_from_fork+0x56d/0x730 [ 348.754053][ T5976] ? __pfx_kthread+0x10/0x10 [ 348.754069][ T5976] ret_from_fork_asm+0x1a/0x30 [ 348.754089][ T5976] [ 348.754104][ T5976] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 348.777434][T19997] macvlan0: entered promiscuous mode [ 348.779069][ T5976] Bluetooth: hci2: failed to register connection device [ 348.781116][T19997] macvlan0: entered allmulticast mode [ 348.855169][T19997] bond6: entered promiscuous mode [ 348.857238][T19997] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 348.873498][T19997] bond6: left promiscuous mode [ 349.024702][ T40] kauditd_printk_skb: 789 callbacks suppressed [ 349.024713][ T40] audit: type=1800 audit(1758580349.439:2122): pid=19999 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2140" name="nullb0" dev="tmpfs" ino=862 res=0 errno=0 [ 349.578723][T10270] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 20004 - 0 [ 349.582130][T10270] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 20004 - 0 [ 349.585530][T10270] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 20004 - 0 [ 349.597623][T10270] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 20004 - 0 [ 351.415176][T20033] lo speed is unknown, defaulting to 1000 [ 351.465192][ T40] audit: type=1326 audit(1758580351.879:2123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20036 comm="syz.2.2150" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f83579 code=0x7ffc0000 [ 351.472757][ T40] audit: type=1326 audit(1758580351.889:2124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20036 comm="syz.2.2150" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f83579 code=0x7ffc0000 [ 351.479861][ T40] audit: type=1326 audit(1758580351.889:2125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20036 comm="syz.2.2150" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f83579 code=0x7ffc0000 [ 351.486547][ T40] audit: type=1326 audit(1758580351.889:2126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20036 comm="syz.2.2150" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f83579 code=0x7ffc0000 [ 351.493801][ T40] audit: type=1326 audit(1758580351.889:2127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20036 comm="syz.2.2150" exe="/syz-executor" sig=0 arch=40000003 syscall=196 compat=1 ip=0xf7f83579 code=0x7ffc0000 [ 351.517213][ T40] audit: type=1326 audit(1758580351.889:2128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20036 comm="syz.2.2150" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f83579 code=0x7ffc0000 [ 351.524457][ T40] audit: type=1326 audit(1758580351.889:2129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20036 comm="syz.2.2150" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f83579 code=0x7ffc0000 [ 351.572196][T20042] loop8: detected capacity change from 0 to 7 [ 351.585574][T20042] Dev loop8: unable to read RDB block 7 [ 351.587492][T20042] loop8: AHDI p1 p2 p3 [ 351.618335][T20042] loop8: partition table partially beyond EOD, truncated [ 351.628512][T20042] loop8: p1 start 1601398130 is beyond EOD, truncated [ 351.630876][T20042] loop8: p2 start 1702059890 is beyond EOD, truncated [ 351.693160][T20043] Dev loop8: unable to read RDB block 7 [ 351.695509][T20043] loop8: AHDI p1 p2 p3 [ 351.697210][T20043] loop8: partition table partially beyond EOD, truncated [ 351.701371][T20043] loop8: p1 start 1601398130 is beyond EOD, truncated [ 351.704438][T20043] loop8: p2 start 1702059890 is beyond EOD, truncated [ 352.316382][T20047] netlink: 'syz.6.2151': attribute type 1 has an invalid length. [ 352.399324][T20047] bond6: (slave vxcan3): The slave device specified does not support setting the MAC address [ 352.403178][T20047] bond6: (slave vxcan3): Error -95 calling set_mac_address [ 352.451308][T20054] gretap2: entered promiscuous mode [ 352.457255][T20054] bond6: (slave gretap2): making interface the new active one [ 352.459993][T20054] bond6: (slave gretap2): Enslaving as an active interface with an up link [ 352.509432][T20047] macvlan2: entered promiscuous mode [ 352.511687][T20047] macvlan2: entered allmulticast mode [ 352.514600][T20047] bond6: entered promiscuous mode [ 352.517419][T20047] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 352.629316][T20047] bond6: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap2 [ 352.633958][T20047] bond6: left promiscuous mode [ 356.528472][T20105] netlink: 'syz.4.2164': attribute type 5 has an invalid length. [ 356.538639][T20105] netlink: 'syz.4.2164': attribute type 7 has an invalid length. [ 356.838674][T20112] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 356.860979][T20112] cramfs: wrong magic [ 358.938276][T20137] netlink: 'syz.2.2179': attribute type 5 has an invalid length. [ 358.941822][T20137] netlink: 'syz.2.2179': attribute type 7 has an invalid length. [ 360.061268][T20142] netlink: 'syz.0.2183': attribute type 16 has an invalid length. [ 360.064452][T20142] netlink: 'syz.0.2183': attribute type 17 has an invalid length. [ 360.153404][T20142] bridge0: port 3(syz_tun) entered blocking state [ 360.156148][T20142] bridge0: port 3(syz_tun) entered forwarding state [ 360.166910][T20142] 8021q: adding VLAN 0 to HW filter on device bond0 [ 360.179755][T20142] 8021q: adding VLAN 0 to HW filter on device team0 [ 360.202503][T20142] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 360.872627][T20161] netlink: 'syz.0.2187': attribute type 5 has an invalid length. [ 360.875237][T20161] netlink: 'syz.0.2187': attribute type 7 has an invalid length. [ 364.080990][T20207] tipc: Enabled bearer , priority 0 [ 364.086495][T20207] syzkaller0: entered promiscuous mode [ 364.089113][T20207] syzkaller0: entered allmulticast mode [ 364.641624][T20209] tipc: Resetting bearer [ 364.650836][T20206] tipc: Resetting bearer [ 364.659502][T20206] tipc: Disabling bearer [ 364.887017][T20221] netlink: 'syz.2.2195': attribute type 5 has an invalid length. [ 366.018980][T20235] netlink: 'syz.4.2198': attribute type 16 has an invalid length. [ 366.021564][T20235] netlink: 'syz.4.2198': attribute type 17 has an invalid length. [ 366.064301][T20235] 8021q: adding VLAN 0 to HW filter on device team0 [ 366.068442][T20235] tipc: Resetting bearer [ 366.072550][T20235] tipc: Resetting bearer [ 366.078330][T20235] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 366.102862][T20241] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2199'. [ 366.929099][ T5976] Bluetooth: hci2: command 0x0405 tx timeout [ 366.930087][T20248] bridge0: port 2(syz_tun) entered blocking state [ 366.933968][T20248] bridge0: port 2(syz_tun) entered disabled state [ 366.937653][T20248] syz_tun: entered allmulticast mode [ 366.946874][T20248] syz_tun: entered promiscuous mode [ 367.759012][T20264] hsr_slave_0: left promiscuous mode [ 367.781104][T20264] hsr_slave_1: left promiscuous mode [ 368.075988][T20273] netlink: 'syz.2.2208': attribute type 10 has an invalid length. [ 368.233889][T20273] bridge0: entered promiscuous mode [ 368.235975][T20273] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 369.221654][T20292] netlink: 'syz.6.2211': attribute type 5 has an invalid length. [ 369.225875][T20292] netlink: 'syz.6.2211': attribute type 7 has an invalid length. [ 370.727443][T20307] hsr_slave_0: left promiscuous mode [ 370.731483][T20307] hsr_slave_1: left promiscuous mode [ 371.067426][T20322] netlink: 'syz.6.2218': attribute type 10 has an invalid length. [ 371.114624][T20322] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 371.636647][T20323] tipc: Resetting bearer [ 372.414194][T20337] bridge0: port 3(syz_tun) entered learning state [ 373.327025][T20349] bridge0: port 4(erspan0) entered blocking state [ 373.329761][T20349] bridge0: port 4(erspan0) entered disabled state [ 373.332392][T20349] erspan0: entered allmulticast mode [ 373.335976][T20349] erspan0: entered promiscuous mode [ 373.338968][T20349] bridge0: port 4(erspan0) entered blocking state [ 373.341971][T20349] bridge0: port 4(erspan0) entered forwarding state [ 374.191769][T20362] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2231'. [ 374.313627][T20362] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 374.340269][T20362] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 374.573612][T20362] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 374.577730][T20362] bridge0: port 4(erspan0) entered disabled state [ 374.580841][T20362] bridge0: port 3(syz_tun) entered disabled state [ 374.720449][T20362] bond0 (unregistering): Released all slaves [ 375.019524][T20374] lo speed is unknown, defaulting to 1000 [ 375.451379][T20374] netlink: 'syz.0.2234': attribute type 13 has an invalid length. [ 375.458947][T20374] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 376.189249][T20389] bridge0: port 3(erspan0) entered blocking state [ 376.198807][T20389] bridge0: port 3(erspan0) entered disabled state [ 376.201853][T20389] erspan0: entered allmulticast mode [ 376.208921][T20389] erspan0: entered promiscuous mode [ 378.124552][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.128951][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.634832][T20433] lo speed is unknown, defaulting to 1000 [ 380.068338][T20433] netlink: 'syz.6.2249': attribute type 13 has an invalid length. [ 380.643717][T20433] bridge0: port 3(syz_tun) entered blocking state [ 380.646659][T20433] bridge0: port 3(syz_tun) entered forwarding state [ 380.676484][T20449] netlink: 'syz.4.2253': attribute type 4 has an invalid length. [ 380.684776][T20449] netlink: 17 bytes leftover after parsing attributes in process `syz.4.2253'. [ 380.871246][T20433] syz.6.2249: vmalloc error: size 4194304, failed to allocated page array size 8192, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 380.879241][T20433] CPU: 2 UID: 0 PID: 20433 Comm: syz.6.2249 Not tainted syzkaller #0 PREEMPT(full) [ 380.879266][T20433] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 380.879276][T20433] Call Trace: [ 380.879282][T20433] [ 380.879289][T20433] dump_stack_lvl+0x16c/0x1f0 [ 380.879319][T20433] warn_alloc+0x248/0x3a0 [ 380.879341][T20433] ? __pfx_warn_alloc+0x10/0x10 [ 380.879378][T20433] ? pfifo_fast_change_tx_queue_len+0x156/0xbb0 [ 380.879400][T20433] ? __vmalloc_node_noprof+0xad/0xf0 [ 380.879421][T20433] __vmalloc_node_range_noprof+0x101b/0x14b0 [ 380.879437][T20433] ? dev_qdisc_change_tx_queue_len+0x169/0x380 [ 380.879459][T20433] ? netif_change_tx_queue_len+0x1a1/0x1e0 [ 380.879492][T20433] ? pfifo_fast_change_tx_queue_len+0x156/0xbb0 [ 380.879521][T20433] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 380.879541][T20433] ? ___kmalloc_large_node+0xed/0x160 [ 380.879571][T20433] __kvmalloc_node_noprof+0x30a/0x620 [ 380.879589][T20433] ? pfifo_fast_change_tx_queue_len+0x156/0xbb0 [ 380.879613][T20433] ? pfifo_fast_change_tx_queue_len+0x156/0xbb0 [ 380.879638][T20433] ? pfifo_fast_change_tx_queue_len+0x156/0xbb0 [ 380.879772][T20433] pfifo_fast_change_tx_queue_len+0x156/0xbb0 [ 380.879798][T20433] ? __pfx_dev_deactivate_many+0x10/0x10 [ 380.879821][T20433] ? ib_device_get_by_netdev+0x121/0x520 [ 380.879839][T20433] ? vxlan_netdevice_event+0x11f/0x370 [ 380.879860][T20433] ? __pfx_ib_device_get_by_netdev+0x10/0x10 [ 380.879881][T20433] ? __pfx_pfifo_fast_change_tx_queue_len+0x10/0x10 [ 380.879902][T20433] ? dev_deactivate+0x15c/0x1c0 [ 380.879933][T20433] ? __pfx_pfifo_fast_change_tx_queue_len+0x10/0x10 [ 380.879954][T20433] dev_qdisc_change_tx_queue_len+0x169/0x380 [ 380.879986][T20433] netif_change_tx_queue_len+0x1a1/0x1e0 [ 380.880011][T20433] ? __pfx_netif_change_tx_queue_len+0x10/0x10 [ 380.880039][T20433] ? netif_change_flags+0x10d/0x160 [ 380.880066][T20433] do_setlink.constprop.0+0xd00/0x4380 [ 380.880096][T20433] ? preempt_schedule_common+0x44/0xc0 [ 380.880122][T20433] ? __pfx_do_setlink.constprop.0+0x10/0x10 [ 380.880147][T20433] ? preempt_count_add+0x76/0x150 [ 380.880175][T20433] ? __lock_acquire+0xb97/0x1ce0 [ 380.880206][T20433] ? __mutex_trylock_common+0xe9/0x250 [ 380.880229][T20433] ? __pfx___mutex_trylock_common+0x10/0x10 [ 380.880253][T20433] ? __pfx___might_resched+0x10/0x10 [ 380.880271][T20433] ? rcu_is_watching+0x12/0xc0 [ 380.880288][T20433] ? trace_contention_end+0xdd/0x130 [ 380.880311][T20433] ? __mutex_lock+0x1c5/0x1060 [ 380.880334][T20433] ? __nla_validate_parse+0x600/0x2880 [ 380.880356][T20433] ? rcu_is_watching+0x12/0xc0 [ 380.880389][T20433] ? __pfx___mutex_lock+0x10/0x10 [ 380.880430][T20433] rtnl_newlink+0x18e0/0x2000 [ 380.880463][T20433] ? __pfx_rtnl_newlink+0x10/0x10 [ 380.880489][T20433] ? __kernel_text_address+0xd/0x40 [ 380.880504][T20433] ? unwind_get_return_address+0x59/0xa0 [ 380.880524][T20433] ? arch_stack_walk+0xa6/0x100 [ 380.880552][T20433] ? __lock_acquire+0x62e/0x1ce0 [ 380.880576][T20433] ? rcu_is_watching+0x12/0xc0 [ 380.880602][T20433] ? find_held_lock+0x2b/0x80 [ 380.880616][T20433] ? __pfx_rtnl_newlink+0x10/0x10 [ 380.880688][T20433] ? __pfx_rtnl_newlink+0x10/0x10 [ 380.880711][T20433] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 380.880727][T20433] ? __pfx_rtnl_newlink+0x10/0x10 [ 380.880752][T20433] rtnetlink_rcv_msg+0x95b/0xe90 [ 380.880771][T20433] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 380.880792][T20433] ? __lock_acquire+0x62e/0x1ce0 [ 380.880819][T20433] netlink_rcv_skb+0x158/0x420 [ 380.880845][T20433] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 380.880862][T20433] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 380.880896][T20433] ? netlink_deliver_tap+0x1ae/0xd30 [ 380.880919][T20433] ? is_vmalloc_addr+0x86/0xa0 [ 380.880942][T20433] netlink_unicast+0x5a7/0x870 [ 380.880971][T20433] ? __pfx_netlink_unicast+0x10/0x10 [ 380.881029][T20433] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 380.881179][T20433] netlink_sendmsg+0x8d1/0xdd0 [ 380.881210][T20433] ? __pfx_netlink_sendmsg+0x10/0x10 [ 380.881237][T20433] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 380.881261][T20433] ____sys_sendmsg+0xa98/0xc70 [ 380.881283][T20433] ? __pfx_____sys_sendmsg+0x10/0x10 [ 380.881300][T20433] ? get_compat_msghdr+0x11a/0x170 [ 380.881328][T20433] ? __pfx_futex_wake_mark+0x10/0x10 [ 380.881357][T20433] ___sys_sendmsg+0x134/0x1d0 [ 380.881395][T20433] ? __pfx____sys_sendmsg+0x10/0x10 [ 380.881433][T20433] ? find_held_lock+0x2b/0x80 [ 380.881465][T20433] __sys_sendmsg+0x16d/0x220 [ 380.881490][T20433] ? __pfx___sys_sendmsg+0x10/0x10 [ 380.881514][T20433] ? __pfx_bpf_trace_run2+0x10/0x10 [ 380.881544][T20433] ? syscall_trace_enter+0x1cb/0x240 [ 380.881572][T20433] ? rcu_is_watching+0x12/0xc0 [ 380.881593][T20433] __do_fast_syscall_32+0x7c/0x300 [ 380.881621][T20433] do_fast_syscall_32+0x32/0x80 [ 380.881635][T20433] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 380.881656][T20433] RIP: 0023:0xf700e579 [ 380.881670][T20433] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 380.881687][T20433] RSP: 002b:00000000f53fe55c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 380.881703][T20433] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000180 [ 380.881714][T20433] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 380.881724][T20433] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 380.881733][T20433] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 380.881743][T20433] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 380.881766][T20433] [ 380.881773][T20433] Mem-Info: [ 381.102214][T20433] active_anon:7203 inactive_anon:5401 isolated_anon:31 [ 381.102214][T20433] active_file:2010 inactive_file:1190 isolated_file:37 [ 381.102214][T20433] unevictable:18614 dirty:259 writeback:19 [ 381.102214][T20433] slab_reclaimable:6928 slab_unreclaimable:67882 [ 381.102214][T20433] mapped:30487 shmem:12390 pagetables:1654 [ 381.102214][T20433] sec_pagetables:324 bounce:0 [ 381.102214][T20433] kernel_misc_reclaimable:0 [ 381.102214][T20433] free:41141 free_pcp:1985 free_cma:0 [ 381.121160][T20433] Node 0 active_anon:2900kB inactive_anon:96kB active_file:12kB inactive_file:172kB unevictable:13192kB isolated(anon):0kB isolated(file):0kB mapped:2760kB dirty:0kB writeback:0kB shmem:6276kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:9204kB pagetables:2024kB sec_pagetables:1128kB all_unreclaimable? yes Balloon:0kB [ 381.134177][T20433] Node 1 active_anon:27412kB inactive_anon:21508kB active_file:8028kB inactive_file:4588kB unevictable:61164kB isolated(anon):124kB isolated(file):148kB mapped:120388kB dirty:1036kB writeback:76kB shmem:44784kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7436kB pagetables:4492kB sec_pagetables:168kB all_unreclaimable? no Balloon:0kB [ 381.147361][T20433] Node 0 DMA free:2080kB boost:0kB min:760kB low:948kB high:1136kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:172kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:56kB local_pcp:0kB free_cma:0kB [ 381.156696][T20433] lowmem_reserve[]: 0 288 288 288 288 [ 381.158831][T20433] Node 0 DMA32 free:17076kB boost:2048kB min:15268kB low:18572kB high:21876kB reserved_highatomic:2048KB free_highatomic:8KB active_anon:2900kB inactive_anon:96kB active_file:12kB inactive_file:172kB unevictable:13020kB writepending:0kB present:1032196kB managed:295076kB mlocked:0kB bounce:0kB free_pcp:2868kB local_pcp:176kB free_cma:0kB [ 381.168964][T20433] lowmem_reserve[]: 0 0 0 0 0 [ 381.170943][T20433] Node 1 DMA32 free:144852kB boost:0kB min:47140kB low:58924kB high:70708kB reserved_highatomic:2048KB free_highatomic:928KB active_anon:28812kB inactive_anon:21508kB active_file:8128kB inactive_file:4588kB unevictable:59764kB writepending:1048kB present:1048432kB managed:948220kB mlocked:0kB bounce:0kB free_pcp:2548kB local_pcp:908kB free_cma:0kB [ 381.184915][T20433] lowmem_reserve[]: 0 0 0 0 0 [ 381.187100][T20433] Node 0 DMA: 36*4kB (UM) 0*8kB 4*16kB (UM) 2*32kB (UM) 0*64kB 0*128kB 1*256kB (M) 1*512kB (M) 1*1024kB (M) 0*2048kB 0*4096kB = 2064kB [ 381.192715][T20433] Node 0 DMA32: 5*4kB (UMEH) 12*8kB (ME) 10*16kB (UME) 78*32kB (UME) 75*64kB (UME) 30*128kB (UME) 14*256kB (UME) 2*512kB (ME) 1*1024kB (U) 0*2048kB 0*4096kB = 17044kB [ 381.200001][T20433] Node 1 DMA32: 14*4kB (UE) 25*8kB (UME) 210*16kB (UEH) 302*32kB (UEH) 204*64kB (UMEH) 183*128kB (UMEH) 101*256kB (UMEH) 48*512kB (UME) 27*1024kB (UM) 4*2048kB (M) 0*4096kB = 136032kB [ 381.208113][T20433] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 381.212286][T20433] Node 0 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 381.216226][T20433] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 381.220532][T20433] Node 1 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 381.224579][T20433] 35142 total pagecache pages [ 381.226725][T20433] 750 pages in swap cache [ 381.228674][T20433] Free swap = 52052kB [ 381.230533][T20433] Total swap = 124996kB [ 381.232477][T20433] 524155 pages RAM [ 381.234280][T20433] 0 pages HighMem/MovableOnly [ 381.236571][T20433] 209491 pages reserved [ 381.238658][T20433] 0 pages cma reserved [ 381.243878][T20433] ip6gretap0: refused to change device tx_queue_len [ 381.247007][T20433] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check. [ 381.254828][ T61] lo speed is unknown, defaulting to 1000 [ 381.259088][ T61] syz0: Port: 1 Link ACTIVE [ 382.375908][T20477] netlink: 14 bytes leftover after parsing attributes in process `syz.6.2261'. [ 382.459259][T20477] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 382.467102][T20477] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 382.474003][T20477] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 382.477873][T20477] bridge0: port 3(syz_tun) entered disabled state [ 382.713459][T20477] bond0 (unregistering): Released all slaves [ 383.247890][ T40] audit: type=1326 audit(1758580383.659:2130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20486 comm="syz.6.2263" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700e579 code=0x7ffc0000 [ 383.269841][ T40] audit: type=1326 audit(1758580383.659:2131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20486 comm="syz.6.2263" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700e579 code=0x7ffc0000 [ 383.276692][ T40] audit: type=1326 audit(1758580383.679:2132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20486 comm="syz.6.2263" exe="/syz-executor" sig=0 arch=40000003 syscall=374 compat=1 ip=0xf700e579 code=0x7ffc0000 [ 383.285422][ T40] audit: type=1326 audit(1758580383.679:2133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20486 comm="syz.6.2263" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700e579 code=0x7ffc0000 [ 383.293135][ T40] audit: type=1326 audit(1758580383.679:2134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20486 comm="syz.6.2263" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700e579 code=0x7ffc0000 [ 383.325516][ T40] audit: type=1326 audit(1758580383.679:2135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20486 comm="syz.6.2263" exe="/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf700e579 code=0x7ffc0000 [ 383.350393][ T40] audit: type=1326 audit(1758580383.679:2136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20486 comm="syz.6.2263" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700e579 code=0x7ffc0000 [ 383.361308][ T40] audit: type=1326 audit(1758580383.679:2137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20486 comm="syz.6.2263" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700e579 code=0x7ffc0000 [ 383.371883][ T40] audit: type=1326 audit(1758580383.679:2138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20486 comm="syz.6.2263" exe="/syz-executor" sig=0 arch=40000003 syscall=343 compat=1 ip=0xf700e579 code=0x7ffc0000 [ 383.380544][ T40] audit: type=1326 audit(1758580612.685:2139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20486 comm="syz.6.2263" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700e579 code=0x7ffc0000 [ 383.424070][T20495] tipc: Enabled bearer , priority 0 [ 383.427481][T20495] syzkaller0: entered promiscuous mode [ 383.430593][T20495] syzkaller0: entered allmulticast mode [ 383.438003][T20495] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 383.801185][T20501] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2266'. [ 383.809743][T20502] tipc: Resetting bearer [ 383.814142][T20493] tipc: Resetting bearer [ 383.864910][T20493] tipc: Disabling bearer [ 384.262189][T20507] lo speed is unknown, defaulting to 1000 [ 384.662421][T20507] netlink: 'syz.2.2267': attribute type 13 has an invalid length. [ 384.670191][T20507] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 385.392158][T20523] overlayfs: failed to clone upperpath [ 388.565204][T20575] tipc: Enabling of bearer rejected, failed to enable media [ 391.202549][ T40] kauditd_printk_skb: 23 callbacks suppressed [ 391.202563][ T40] audit: type=1326 audit(1758580620.615:2163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20609 comm="syz.4.2294" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce579 code=0x7ffc0000 [ 391.231788][ T40] audit: type=1326 audit(1758580620.615:2164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20609 comm="syz.4.2294" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce579 code=0x7ffc0000 [ 391.267106][ T40] audit: type=1326 audit(1758580620.615:2165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20609 comm="syz.4.2294" exe="/syz-executor" sig=0 arch=40000003 syscall=374 compat=1 ip=0xf70ce579 code=0x7ffc0000 [ 391.280151][ T40] audit: type=1326 audit(1758580620.615:2166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20609 comm="syz.4.2294" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce579 code=0x7ffc0000 [ 391.298972][ T40] audit: type=1326 audit(1758580620.615:2167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20609 comm="syz.4.2294" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce579 code=0x7ffc0000 [ 391.307093][ T40] audit: type=1326 audit(1758580620.645:2168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20609 comm="syz.4.2294" exe="/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf70ce579 code=0x7ffc0000 [ 391.318816][ T40] audit: type=1326 audit(1758580620.645:2169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20609 comm="syz.4.2294" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce579 code=0x7ffc0000 [ 391.328680][ T40] audit: type=1326 audit(1758580620.645:2170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20609 comm="syz.4.2294" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce579 code=0x7ffc0000 [ 391.348951][ T40] audit: type=1326 audit(1758580620.645:2171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20609 comm="syz.4.2294" exe="/syz-executor" sig=0 arch=40000003 syscall=343 compat=1 ip=0xf70ce579 code=0x7ffc0000 [ 391.360284][ T40] audit: type=1326 audit(1758580849.654:2172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20609 comm="syz.4.2294" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce579 code=0x7ffc0000 [ 393.135868][T20647] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2303'. [ 395.930242][ T10] IPVS: starting estimator thread 0... [ 396.028685][T20685] IPVS: using max 25 ests per chain, 60000 per kthread [ 399.420138][T20730] team0: Port device team_slave_0 removed [ 399.802044][T20741] loop8: detected capacity change from 0 to 7 [ 399.804793][T20741] Dev loop8: unable to read RDB block 7 [ 399.806646][T20741] loop8: AHDI p1 p2 p3 [ 399.808202][T20741] loop8: partition table partially beyond EOD, truncated [ 399.811134][T20741] loop8: p1 start 1601398130 is beyond EOD, truncated [ 399.813358][T20741] loop8: p2 start 1702059890 is beyond EOD, truncated [ 399.950249][T20688] Dev loop8: unable to read RDB block 7 [ 399.952358][T20688] loop8: AHDI p1 p2 p3 [ 399.954122][T20688] loop8: partition table partially beyond EOD, truncated [ 399.956594][T20688] loop8: p1 start 1601398130 is beyond EOD, truncated [ 399.961229][T20688] loop8: p2 start 1702059890 is beyond EOD, truncated [ 399.974142][T20741] Dev loop8: unable to read RDB block 7 [ 399.976449][T20741] loop8: AHDI p1 p2 p3 [ 399.978173][T20741] loop8: partition table partially beyond EOD, truncated [ 399.983014][T20741] loop8: p1 start 1601398130 is beyond EOD, truncated [ 399.985855][T20741] loop8: p2 start 1702059890 is beyond EOD, truncated [ 401.395651][T20771] tipc: Enabling of bearer rejected, failed to enable media [ 401.520235][T20775] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2334'. [ 401.624947][T20777] tipc: Enabled bearer , priority 0 [ 401.630257][T20777] syzkaller0: entered promiscuous mode [ 401.634175][T20777] syzkaller0: entered allmulticast mode [ 401.660170][T20777] tipc: Resetting bearer [ 401.678794][T20776] tipc: Resetting bearer [ 401.731578][T20776] tipc: Disabling bearer [ 405.644667][T20845] tipc: Enabling of bearer rejected, failed to enable media [ 406.050293][T20858] 8021q: adding VLAN 0 to HW filter on device bond0 [ 406.166057][T20858] erspan0: left allmulticast mode [ 406.168172][T20858] erspan0: left promiscuous mode [ 406.175062][T20858] bridge0: port 4(erspan0) entered disabled state [ 406.264889][T20858] syz_tun: left allmulticast mode [ 406.267018][T20858] syz_tun: left promiscuous mode [ 406.300901][T20858] bridge0: port 3(syz_tun) entered disabled state [ 406.326841][T20858] bridge_slave_0: left allmulticast mode [ 406.329256][T20858] bridge_slave_0: left promiscuous mode [ 406.334544][T20858] bridge0: port 1(bridge_slave_0) entered disabled state [ 406.349660][T20858] bridge_slave_1: left allmulticast mode [ 406.351618][T20858] bridge_slave_1: left promiscuous mode [ 406.356719][T20858] bridge0: port 2(bridge_slave_1) entered disabled state [ 406.381883][T20858] team0: Port device team_slave_0 removed [ 406.386303][T20858] team0: Port device team_slave_1 removed [ 406.389015][T20858] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 406.391959][T20858] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 406.395476][T20858] bond1: (slave gretap1): Releasing active interface [ 406.397664][T20858] gretap1: left allmulticast mode [ 406.400869][T20858] bond3: (slave veth3): Releasing active interface [ 406.404233][T20858] bond4: (slave gretap2): Releasing active interface [ 406.408996][T20858] bond5: (slave veth5): Releasing active interface [ 406.412811][T20858] bond6: (slave geneve2): Releasing backup interface [ 406.418668][T20858] bond7: (slave bond8): Releasing active interface [ 406.423371][T10273] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 20004 - 0 [ 406.426280][T10273] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 20004 - 0 [ 406.429154][T10273] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 20004 - 0 [ 406.432305][T10273] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 20004 - 0 [ 407.079621][T20875] team0: Port device team_slave_0 removed [ 407.270177][T20878] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2360'. [ 407.985556][T20889] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 409.125050][T20903] netlink: 'syz.2.2369': attribute type 1 has an invalid length. [ 409.600144][T20910] team0: Port device team_slave_0 removed [ 410.038884][T20926] tipc: Enabling of bearer rejected, already enabled [ 410.044345][T20926] tipc: Resetting bearer [ 410.104431][T20928] tipc: Enabling of bearer rejected, already enabled [ 410.111236][T20928] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2377'. [ 410.301158][ T40] kauditd_printk_skb: 25 callbacks suppressed [ 410.301169][ T40] audit: type=1326 audit(1758580868.714:2198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20931 comm="syz.0.2386" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de579 code=0x7ffc0000 [ 410.309793][ T40] audit: type=1326 audit(1758580868.714:2199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20931 comm="syz.0.2386" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de579 code=0x7ffc0000 [ 410.316619][ T40] audit: type=1326 audit(1758580868.714:2200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20931 comm="syz.0.2386" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf70de579 code=0x7ffc0000 [ 410.325185][ T40] audit: type=1326 audit(1758580868.714:2201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20931 comm="syz.0.2386" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf70de5a7 code=0x7ffc0000 [ 410.339361][ T40] audit: type=1326 audit(1758580868.714:2202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20931 comm="syz.0.2386" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf70de579 code=0x7ffc0000 [ 410.348495][ T40] audit: type=1326 audit(1758580868.714:2203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20931 comm="syz.0.2386" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf70de5a7 code=0x7ffc0000 [ 410.358050][ T40] audit: type=1326 audit(1758580868.714:2204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20931 comm="syz.0.2386" exe="/syz-executor" sig=0 arch=40000003 syscall=343 compat=1 ip=0xf70de579 code=0x7ffc0000 [ 410.365251][ T40] audit: type=1326 audit(1758580868.714:2205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20931 comm="syz.0.2386" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de579 code=0x7ffc0000 [ 410.378681][ T40] audit: type=1326 audit(1758580868.714:2206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20931 comm="syz.0.2386" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de579 code=0x7ffc0000 [ 410.387685][ T40] audit: type=1326 audit(1758580868.714:2207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20931 comm="syz.0.2386" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de579 code=0x7ffc0000 [ 410.451743][T20940] netlink: del zone limit has 4 unknown bytes [ 412.208406][T20967] tipc: Enabling of bearer rejected, failed to enable media [ 413.699003][T20990] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2392'. [ 414.691847][T21012] lo speed is unknown, defaulting to 1000 [ 414.742411][T21017] tipc: Enabling of bearer rejected, already enabled [ 414.756990][T21017] tipc: Bearer : already 2 bearers with priority 10 [ 414.760255][T21017] tipc: Bearer : trying with adjusted priority [ 414.762869][T21017] tipc: Enabling of bearer rejected, failed to enable media [ 417.218751][ T34] usb 11-1: new high-speed USB device number 5 using dummy_hcd [ 417.369311][ T34] usb 11-1: Using ep0 maxpacket: 8 [ 417.372549][ T34] usb 11-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 417.375661][ T34] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 417.379090][ T34] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 800 [ 417.382838][ T34] usb 11-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 417.388643][ T34] usb 11-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 417.391877][ T34] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 417.432146][ T40] kauditd_printk_skb: 837 callbacks suppressed [ 417.432163][ T40] audit: type=1800 audit(1758580875.844:3045): pid=21077 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2411" name="bus" dev="ramfs" ino=51130 res=0 errno=0 [ 417.677092][ T34] usb 11-1: usb_control_msg returned -32 [ 417.680093][ T34] usbtmc 11-1:16.0: can't read capabilities [ 417.954106][ T61] usb 11-1: USB disconnect, device number 5 [ 418.119594][T21093] netlink: del zone limit has 4 unknown bytes [ 418.318947][ T5976] Bluetooth: hci2: unexpected event for opcode 0x202d [ 419.986436][ T61] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 419.992527][ T61] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 419.994874][ T61] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 420.001900][ T61] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 420.005114][ T61] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 420.008774][ T61] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 420.011839][ T61] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 420.015167][ T61] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 420.018477][ T61] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 420.022932][ T61] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 420.034598][ T61] hid-generic 0000:0000:0000.0006: hidraw1: HID v0.00 Device [syz0] on syz0 [ 420.216062][T21134] fido_id[21134]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 421.739358][T21153] tipc: Enabling of bearer rejected, failed to enable media [ 421.994689][T21162] netlink: 4400 bytes leftover after parsing attributes in process `syz.2.2433'. [ 423.128501][T21183] tipc: Enabled bearer , priority 0 [ 423.132018][T21183] syzkaller0: entered promiscuous mode [ 423.133793][T21183] syzkaller0: entered allmulticast mode [ 423.149040][T21183] tipc: Resetting bearer [ 423.153458][T21182] tipc: Resetting bearer [ 423.165313][T21182] tipc: Disabling bearer [ 425.182100][T21215] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(5) [ 425.184779][T21215] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 425.189538][T21215] vhci_hcd vhci_hcd.0: Device attached [ 425.539600][ T6054] usb 50-1: SetAddress Request (2) to port 0 [ 425.542878][ T6054] usb 50-1: new SuperSpeed USB device number 2 using vhci_hcd [ 425.731657][T21216] vhci_hcd: connection reset by peer [ 425.747402][T10263] vhci_hcd: stop threads [ 425.749377][T10263] vhci_hcd: release socket [ 425.779968][T10263] vhci_hcd: disconnect device [ 427.235435][ T40] audit: type=1800 audit(1758580885.644:3046): pid=21251 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2455" name="bus" dev="ramfs" ino=53319 res=0 errno=0 [ 427.731020][T21263] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2457'. [ 427.732059][T21264] netlink: 'syz.2.2460': attribute type 4 has an invalid length. [ 427.851793][T21267] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 428.309402][T21272] tipc: Enabling of bearer rejected, already enabled [ 428.314422][T21272] sch_tbf: burst 9 is lower than device syzkaller0 mtu (313) ! [ 428.618483][ T40] audit: type=1800 audit(1758580887.024:3047): pid=21285 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2465" name="bus" dev="ramfs" ino=53372 res=0 errno=0 [ 428.809483][ T40] audit: type=1804 audit(1758580887.214:3048): pid=21291 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.2468" name="bus" dev="tmpfs" ino=3816 res=1 errno=0 [ 429.551930][T21306] input: syz1 as /devices/virtual/input/input9 [ 430.151604][T21309] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 430.600631][T21322] binder: BINDER_SET_CONTEXT_MGR bad uid 60928 != 0 [ 430.603471][T21322] binder: 21321:21322 ioctl 4018620d 80000040 returned -1 [ 430.628815][ T6054] usb 50-1: device descriptor read/8, error -110 [ 430.743539][T21326] tipc: Enabled bearer , priority 0 [ 430.747532][T21326] mac80211_hwsim hwsim15 syzkaller0: entered promiscuous mode [ 430.750833][T21326] mac80211_hwsim hwsim15 syzkaller0: entered allmulticast mode [ 430.893252][T21333] netlink: 4400 bytes leftover after parsing attributes in process `syz.0.2484'. [ 430.925163][T21333] debugfs: 'Ç`]Š •Iöq¯!¾>Ýsó³Îú*Š®!)\Ç' already exists in 'ieee80211' [ 431.060383][ T6054] usb usb50-port1: attempt power cycle [ 431.090678][T21340] 8021q: adding VLAN 0 to HW filter on device bond0 [ 431.143674][T21340] syz_tun: left allmulticast mode [ 431.146016][T21340] syz_tun: left promiscuous mode [ 431.148334][T21340] bridge0: port 3(syz_tun) entered disabled state [ 431.182387][T21340] bridge_slave_0: left allmulticast mode [ 431.189303][T21340] bridge_slave_0: left promiscuous mode [ 431.192896][T21340] bridge0: port 1(bridge_slave_0) entered disabled state [ 431.207930][T21340] bridge_slave_1: left allmulticast mode [ 431.210292][T21340] bridge_slave_1: left promiscuous mode [ 431.212281][T21340] bridge0: port 2(bridge_slave_1) entered disabled state [ 431.221826][T21340] bond2: (slave veth0_to_bond): Releasing active interface [ 431.224898][T21340] veth0_to_bond: left promiscuous mode [ 431.255090][T21340] team0: Port device team_slave_1 removed [ 431.257832][T21340] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 431.262988][T21340] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 431.266550][T21340] bond1: (slave veth7): Releasing active interface [ 431.271337][T21340] bond2: (slave veth9): Releasing active interface [ 431.274651][T21340] bond4: (slave bond5): Releasing active interface [ 431.283897][T21340] bond6: (slave gretap2): Releasing active interface [ 431.988165][ T6054] usb usb50-port1: unable to enumerate USB device [ 432.128732][ T40] audit: type=1800 audit(1758580890.534:3049): pid=21350 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.2480" name="bus" dev="ramfs" ino=53424 res=0 errno=0 [ 432.683166][T21368] input: syz1 as /devices/virtual/input/input10 [ 433.464320][T21370] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 433.537211][ T40] audit: type=1326 audit(1758580891.944:3050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21378 comm="syz.6.2497" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700e579 code=0x7ffc0000 [ 433.547021][ T40] audit: type=1326 audit(1758580891.944:3051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21378 comm="syz.6.2497" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700e579 code=0x7ffc0000 [ 433.590055][ T40] audit: type=1326 audit(1758580891.964:3052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21378 comm="syz.6.2497" exe="/syz-executor" sig=0 arch=40000003 syscall=321 compat=1 ip=0xf700e579 code=0x7ffc0000 [ 433.597321][ T40] audit: type=1326 audit(1758580891.964:3053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21378 comm="syz.6.2497" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700e579 code=0x7ffc0000 [ 433.606685][ T40] audit: type=1326 audit(1758580891.964:3054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21378 comm="syz.6.2497" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700e579 code=0x7ffc0000 [ 433.614648][ T40] audit: type=1326 audit(1758580891.984:3055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21378 comm="syz.6.2497" exe="/syz-executor" sig=0 arch=40000003 syscall=8 compat=1 ip=0xf700e579 code=0x7ffc0000 [ 433.622832][ T40] audit: type=1326 audit(1758580891.984:3056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21378 comm="syz.6.2497" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700e579 code=0x7ffc0000 [ 433.629749][ T40] audit: type=1326 audit(1758580892.004:3057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21378 comm="syz.6.2497" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700e579 code=0x7ffc0000 [ 433.636498][ T40] audit: type=1326 audit(1758580892.004:3058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21378 comm="syz.6.2497" exe="/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf700e579 code=0x7ffc0000 [ 433.645348][ T40] audit: type=1326 audit(1758580892.004:3059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21378 comm="syz.6.2497" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700e579 code=0x7ffc0000 [ 434.116242][T21400] bond6: option mode: unable to set because the bond device has slaves [ 434.133774][T21400] 8021q: adding VLAN 0 to HW filter on device macvlan1 [ 434.142414][T21400] bond6: (slave macvlan1): making interface the new active one [ 434.149252][T21400] macvlan1: entered promiscuous mode [ 434.151772][T21400] bond6: (slave macvlan1): Enslaving as an active interface with an up link [ 434.170166][T21400] syz_tun: left allmulticast mode [ 434.172005][T21400] syz_tun: left promiscuous mode [ 434.173805][T21400] bridge0: port 2(syz_tun) entered disabled state [ 434.181690][T21400] bond0: (slave bridge0): Releasing backup interface [ 434.186158][T21400] bridge0: left promiscuous mode [ 434.227617][T21400] bridge_slave_0: left allmulticast mode [ 434.230679][T21400] bridge_slave_0: left promiscuous mode [ 434.233216][T21400] bridge0: port 1(bridge_slave_0) entered disabled state [ 434.240610][T21400] bond0: (slave bond_slave_0): Releasing backup interface [ 434.243800][T21400] bond_slave_0: left promiscuous mode [ 434.246637][T21400] team0: Port device team_slave_1 removed [ 434.252188][T21400] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 434.256242][T21400] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 434.271345][T21400] bond1: (slave bond2): Releasing backup interface [ 434.277966][T21400] bond3: (slave gretap1): Releasing active interface [ 434.280581][T21400] gretap1: left allmulticast mode [ 434.285329][T21400] bond4: (slave veth3): Releasing active interface [ 434.289157][T21400] bond5: (slave geneve2): Releasing active interface [ 434.293769][T21400] bond6: (slave macvlan0): Releasing active interface [ 434.296798][T21400] bond6: (slave macvlan0): the permanent HWaddr of slave - 26:6e:84:08:c4:76 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 434.305199][T21400] bond7: left allmulticast mode [ 434.306791][T21400] bond7: left promiscuous mode [ 434.308946][T21400] bridge5: port 1(bond7) entered disabled state [ 434.314540][T21400] geneve3: left allmulticast mode [ 434.316741][T21400] geneve3: left promiscuous mode [ 434.328785][T21400] bridge5: port 2(geneve3) entered disabled state [ 434.342967][T21400] bond8: (slave veth7): Releasing active interface [ 434.350608][T21400] bond9: (slave bond10): Releasing active interface [ 434.354711][T21400] bond11: (slave geneve4): Releasing backup interface [ 434.362480][T21400] bond6: (slave macvlan1): Releasing active interface [ 434.364902][T21400] macvlan1: left promiscuous mode [ 435.134776][T21414] tipc: Enabling of bearer rejected, already enabled [ 435.141243][T21414] netem: change failed [ 439.574053][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.576861][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.688176][T21522] netlink: 4400 bytes leftover after parsing attributes in process `syz.6.2525'. [ 441.694025][T21522] debugfs: 'Ç`]Š •Iöq¯!¾>Ýsó³Îú*Š®!)\Ç' already exists in 'ieee80211' [ 442.586620][T21540] tipc: Enabling of bearer rejected, already enabled [ 442.601528][T21540] tipc: Resetting bearer [ 442.713602][ T40] kauditd_printk_skb: 2018 callbacks suppressed [ 442.713619][ T40] audit: type=1800 audit(1758580901.124:5078): pid=21548 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.2538" name="SYSV00000000" dev="hugetlbfs" ino=2 res=0 errno=0 [ 442.717626][T21550] lo speed is unknown, defaulting to 1000 [ 443.341084][T21556] tipc: Enabling of bearer rejected, already enabled [ 443.452662][T21558] syzkaller1: entered promiscuous mode [ 443.454453][T21558] syzkaller1: entered allmulticast mode [ 444.528721][ T61] usb 11-1: new high-speed USB device number 6 using dummy_hcd [ 444.688678][ T61] usb 11-1: Using ep0 maxpacket: 16 [ 444.693316][ T61] usb 11-1: config 33 has 0 interfaces, different from the descriptor's value: 9 [ 444.696391][ T61] usb 11-1: New USB device found, idVendor=1fd2, idProduct=6006, bcdDevice= 0.00 [ 444.701633][ T61] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 445.019671][ T6054] usb 11-1: USB disconnect, device number 6 [ 446.276476][T21604] netlink: 'syz.6.2553': attribute type 1 has an invalid length. [ 449.032200][T21646] netlink: 4400 bytes leftover after parsing attributes in process `syz.4.2560'. [ 449.041879][T21646] debugfs: 'Ç`]Š •Iöq¯!¾>Ýsó³Îú*Š®!)\Ç' already exists in 'ieee80211' [ 449.096907][ T40] audit: type=1800 audit(1758580907.444:5079): pid=21640 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2568" name="bus" dev="ramfs" ino=53676 res=0 errno=0 [ 449.704700][T21651] tipc: Enabling of bearer rejected, already enabled [ 450.187601][T21662] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 450.190329][T21662] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 450.195668][T21662] vhci_hcd vhci_hcd.0: Device attached [ 450.471811][ T6054] usb 38-1: SetAddress Request (2) to port 0 [ 450.473889][ T6054] usb 38-1: new SuperSpeed USB device number 2 using vhci_hcd [ 451.027054][T21664] vhci_hcd: connection reset by peer [ 451.034264][T10277] vhci_hcd: stop threads [ 451.037373][T10277] vhci_hcd: release socket [ 451.040695][T10277] vhci_hcd: disconnect device [ 451.856959][T21685] netlink: 'syz.0.2572': attribute type 11 has an invalid length. [ 451.860208][T21685] netlink: 212 bytes leftover after parsing attributes in process `syz.0.2572'. [ 451.866817][T21685] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2572'. [ 452.538824][ T40] audit: type=1800 audit(1758580910.944:5080): pid=21693 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2582" name="bus" dev="ramfs" ino=55512 res=0 errno=0 [ 453.229003][T21697] syz.4.2575 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 453.300728][T21704] tipc: Enabling of bearer rejected, already enabled [ 453.992964][T21718] lo speed is unknown, defaulting to 1000 [ 454.412663][T21724] tipc: Enabled bearer , priority 0 [ 454.420374][T21723] tipc: Enabling of bearer rejected, already enabled [ 454.457257][T21728] vlan1: entered promiscuous mode [ 454.459690][T21728] hsr_slave_1: entered promiscuous mode [ 454.461666][T21728] vlan1: entered allmulticast mode [ 454.463283][T21728] hsr_slave_1: entered allmulticast mode [ 454.526647][T21728] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2586'. [ 454.899951][T21735] lo speed is unknown, defaulting to 1000 [ 455.251978][ T40] audit: type=1800 audit(1758580913.658:5081): pid=21746 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2588" name="bus" dev="ramfs" ino=56581 res=0 errno=0 [ 455.586394][ T6054] usb 38-1: device descriptor read/8, error -110 [ 455.670058][ T61] usb 11-1: new high-speed USB device number 7 using dummy_hcd [ 455.833582][ T61] usb 11-1: Using ep0 maxpacket: 16 [ 455.842121][ T61] usb 11-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 455.846548][ T61] usb 11-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 455.852675][ T61] usb 11-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 455.856847][ T61] usb 11-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 455.860349][ T61] usb 11-1: Product: syz [ 455.862182][ T61] usb 11-1: Manufacturer: syz [ 455.865292][ T61] usb 11-1: SerialNumber: syz [ 455.875864][ T61] usb 11-1: config 0 descriptor?? [ 456.096066][ T34] usb 11-1: USB disconnect, device number 7 [ 456.106807][T21754] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2590'. [ 456.110819][T21754] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2590'. [ 456.111223][ T6054] usb usb38-port1: attempt power cycle [ 456.729530][ T6054] usb usb38-port1: unable to enumerate USB device [ 458.227096][ T40] audit: type=1800 audit(1758580916.408:5082): pid=21805 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2602" name="bus" dev="ramfs" ino=54201 res=0 errno=0 [ 459.102724][T21817] netlink: 6 bytes leftover after parsing attributes in process `syz.6.2604'. [ 460.277533][ T40] audit: type=1800 audit(1758580918.354:5083): pid=21834 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.2618" name="SYSV798dd82c" dev="hugetlbfs" ino=0 res=0 errno=0 [ 461.842571][ T40] audit: type=1804 audit(1758580919.738:5084): pid=21851 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.2612" name="/newroot/363/bus" dev="tmpfs" ino=1923 res=1 errno=0 [ 462.411237][T21866] tipc: Resetting bearer [ 462.414550][T21866] syzkaller0: left promiscuous mode [ 462.416443][T21866] syzkaller0: left allmulticast mode [ 462.419642][T21866] bond8: left promiscuous mode [ 462.935124][T21871] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2619'. [ 463.094346][T21881] erspan0: left allmulticast mode [ 463.096258][T21881] erspan0: left promiscuous mode [ 463.102173][T21881] bridge0: port 3(erspan0) entered disabled state [ 463.130717][T21881] bridge_slave_0: left allmulticast mode [ 463.133637][T21881] bridge_slave_0: left promiscuous mode [ 463.136964][T21881] bridge0: port 1(bridge_slave_0) entered disabled state [ 463.147266][T21881] bridge_slave_1: left allmulticast mode [ 463.151092][T21881] bridge_slave_1: left promiscuous mode [ 463.153922][T21881] bridge0: port 2(bridge_slave_1) entered disabled state [ 463.170238][T21881] team0: Port device team_slave_1 removed [ 463.177951][T21881] bond1: (slave gretap1): Releasing active interface [ 463.180622][T21881] gretap1: left allmulticast mode [ 463.184044][T21881] bond3: (slave erspan1): Releasing active interface [ 463.189134][T21881] bond4: (slave veth9): Releasing active interface [ 463.193037][T21881] bond5: (slave geneve3): Releasing backup interface [ 463.196949][T21884] team0: Mode changed to "random" [ 463.239967][T21881] vlan0: entered promiscuous mode [ 463.241974][T21881] hsr_slave_1: entered promiscuous mode [ 463.244977][T21881] team0: Port device vlan0 added [ 463.249209][T21881] tipc: Enabling of bearer rejected, already enabled [ 463.385683][T21887] Bluetooth: MGMT ver 1.23 [ 464.840669][T21912] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2630'. [ 465.088786][ T40] audit: type=1800 audit(1758580922.853:5085): pid=21919 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2631" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 465.152710][T21923] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2633'. [ 465.416890][T21923] team0: Port device vlan0 removed [ 465.423415][T21931] team0: Mode changed to "random" [ 465.425188][T21932] vlan0: entered promiscuous mode [ 465.426940][T21932] syz_tun: entered promiscuous mode [ 465.429012][T21935] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 465.463116][T21937] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2637'. [ 465.780821][T21948] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2640'. [ 465.891019][T21950] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2640'. [ 469.603804][T21977] No control pipe specified [ 469.606962][T21977] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2644'. [ 470.082868][ T40] audit: type=1326 audit(1758580927.521:5086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21982 comm="syz.0.2651" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de579 code=0x7ffc0000 [ 470.093505][ T40] audit: type=1326 audit(1758580927.530:5087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21982 comm="syz.0.2651" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de579 code=0x7ffc0000 [ 470.290018][T21996] team0: Mode changed to "random" [ 470.292996][T21996] vlan0: entered promiscuous mode [ 470.294741][T21996] bond4: entered promiscuous mode [ 470.300126][T21996] tipc: Enabled bearer , priority 0 [ 471.731876][T22021] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2654'. [ 474.322856][T22052] netlink: 'syz.6.2661': attribute type 5 has an invalid length. [ 474.331674][T22052] netlink: 'syz.6.2661': attribute type 1 has an invalid length. [ 474.334320][T22052] netlink: 224 bytes leftover after parsing attributes in process `syz.6.2661'. [ 476.654563][T22104] lo speed is unknown, defaulting to 1000 [ 477.980926][T22121] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2684'. [ 479.770984][T22149] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2685'. [ 480.346352][ T40] audit: type=1804 audit(1758580937.128:5088): pid=22157 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.2694" name="bus" dev="tmpfs" ino=3449 res=1 errno=0 [ 481.330392][T22170] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2689'. [ 482.502893][ T40] audit: type=1804 audit(1758580939.148:5089): pid=22184 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.2700" name="bus" dev="tmpfs" ino=3455 res=1 errno=0 [ 484.437745][T22195] netlink: 'syz.4.2695': attribute type 5 has an invalid length. [ 485.064226][T22210] syzkaller1: entered promiscuous mode [ 485.066560][T22210] syzkaller1: entered allmulticast mode [ 485.893306][T22219] netlink: 'syz.0.2704': attribute type 1 has an invalid length. [ 486.002800][T22219] bond9: (slave ip6gretap0): Enslaving as a backup interface with an up link [ 486.018079][T10278] bond9: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 486.019150][T22219] 8021q: adding VLAN 0 to HW filter on device bond9 [ 486.113880][T22219] veth7: entered promiscuous mode [ 486.119983][T22219] bond9: (slave veth7): Enslaving as a backup interface with a down link [ 486.161638][T10263] bond9: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 486.477058][T22232] netlink: 'syz.2.2707': attribute type 5 has an invalid length. [ 489.096108][T22276] netlink: 'syz.6.2715': attribute type 1 has an invalid length. [ 489.135960][T22276] bond7: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 489.157335][T10710] bond7: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 489.157919][T22276] 8021q: adding VLAN 0 to HW filter on device bond7 [ 489.198226][T22276] veth11: entered promiscuous mode [ 489.202925][T22276] bond7: (slave veth11): Enslaving as a backup interface with a down link [ 489.273362][T10710] bond7: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 489.796424][ T34] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 489.978111][ T34] usb 5-1: Using ep0 maxpacket: 16 [ 489.981596][ T34] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 489.985759][ T34] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 489.992170][ T34] usb 5-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 489.996089][ T34] usb 5-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 489.999935][ T34] usb 5-1: Product: syz [ 490.001674][ T34] usb 5-1: Manufacturer: syz [ 490.004455][ T34] usb 5-1: SerialNumber: syz [ 490.009271][ T34] usb 5-1: config 0 descriptor?? [ 492.639367][ T10] usb 5-1: USB disconnect, device number 5 [ 492.732176][T22328] netlink: 'syz.2.2726': attribute type 1 has an invalid length. [ 492.783841][T22328] bond14: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 492.802900][T10710] bond14: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 492.809650][T22328] 8021q: adding VLAN 0 to HW filter on device bond14 [ 492.843224][T22328] veth11: entered promiscuous mode [ 492.847870][T22328] bond14: (slave veth11): Enslaving as a backup interface with a down link [ 492.928777][T10277] bond14: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 493.157163][T22335] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2727'. [ 494.649956][ T40] audit: type=1804 audit(1758580950.345:5090): pid=22351 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.2731" name="bus" dev="tmpfs" ino=3508 res=1 errno=0 [ 496.421999][T22380] evm: overlay not supported [ 497.830684][T22401] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2745'. [ 498.297532][ T40] audit: type=1326 audit(1758580953.927:5091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22411 comm="syz.0.2748" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de579 code=0x7ffc0000 [ 498.306455][ T40] audit: type=1326 audit(1758580953.927:5092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22411 comm="syz.0.2748" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de579 code=0x7ffc0000 [ 498.314757][ T40] audit: type=1326 audit(1758580953.927:5093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22411 comm="syz.0.2748" exe="/syz-executor" sig=0 arch=40000003 syscall=164 compat=1 ip=0xf70de579 code=0x7ffc0000 [ 498.327520][ T40] audit: type=1326 audit(1758580953.927:5094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22411 comm="syz.0.2748" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de579 code=0x7ffc0000 [ 498.335968][ T40] audit: type=1326 audit(1758580953.955:5095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22411 comm="syz.0.2748" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de579 code=0x7ffc0000 [ 498.353106][ T40] audit: type=1326 audit(1758580953.955:5096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22411 comm="syz.0.2748" exe="/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf70de579 code=0x7ffc0000 [ 498.363761][ T40] audit: type=1326 audit(1758580953.955:5097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22411 comm="syz.0.2748" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de579 code=0x7ffc0000 [ 498.374607][ T40] audit: type=1326 audit(1758580953.955:5098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22411 comm="syz.0.2748" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de579 code=0x7ffc0000 [ 498.391680][ T40] audit: type=1326 audit(1758580953.955:5099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22411 comm="syz.0.2748" exe="/syz-executor" sig=0 arch=40000003 syscall=340 compat=1 ip=0xf70de579 code=0x7ffc0000 [ 498.610136][T22418] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 498.612692][T22418] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 498.617885][T22418] vhci_hcd vhci_hcd.0: Device attached [ 498.872693][ T6054] usb 37-1: new low-speed USB device number 2 using vhci_hcd [ 499.236853][T22419] vhci_hcd: connection reset by peer [ 499.244772][T10277] vhci_hcd: stop threads [ 499.246291][T10277] vhci_hcd: release socket [ 499.248944][T10277] vhci_hcd: disconnect device [ 500.418050][T22451] overlayfs: missing 'lowerdir' [ 500.728113][T22450] batman_adv: batadv0: Adding interface: gretap3 [ 500.730459][T22450] batman_adv: batadv0: The MTU of interface gretap3 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 500.742811][T22450] batman_adv: batadv0: Interface activated: gretap3 [ 502.105533][ T40] kauditd_printk_skb: 24 callbacks suppressed [ 502.105548][ T40] audit: type=1326 audit(1758580957.491:5124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22476 comm="syz.6.2763" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700e579 code=0x7ffc0000 [ 502.117689][ T40] audit: type=1326 audit(1758580957.491:5125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22476 comm="syz.6.2763" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700e579 code=0x7ffc0000 [ 502.126059][ T40] audit: type=1326 audit(1758580957.491:5126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22476 comm="syz.6.2763" exe="/syz-executor" sig=0 arch=40000003 syscall=164 compat=1 ip=0xf700e579 code=0x7ffc0000 [ 502.132821][ T40] audit: type=1326 audit(1758580957.491:5127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22476 comm="syz.6.2763" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700e579 code=0x7ffc0000 [ 502.140242][ T40] audit: type=1326 audit(1758580957.491:5128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22476 comm="syz.6.2763" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700e579 code=0x7ffc0000 [ 502.149291][ T40] audit: type=1326 audit(1758580957.501:5129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22476 comm="syz.6.2763" exe="/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf700e579 code=0x7ffc0000 [ 502.158290][ T40] audit: type=1326 audit(1758580957.501:5130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22476 comm="syz.6.2763" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700e579 code=0x7ffc0000 [ 502.165643][ T40] audit: type=1326 audit(1758580957.501:5131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22476 comm="syz.6.2763" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700e579 code=0x7ffc0000 [ 502.173327][ T40] audit: type=1326 audit(1758580957.501:5132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22476 comm="syz.6.2763" exe="/syz-executor" sig=0 arch=40000003 syscall=340 compat=1 ip=0xf700e579 code=0x7ffc0000 [ 502.180324][ T40] audit: type=1326 audit(1758580957.501:5133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22476 comm="syz.6.2763" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700e579 code=0x7ffc0000 [ 502.452168][T22484] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(5) [ 502.455094][T22484] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 502.521900][T22484] vhci_hcd vhci_hcd.0: Device attached [ 502.796319][ T9253] usb 49-1: new low-speed USB device number 2 using vhci_hcd [ 503.022005][T22485] vhci_hcd: connection reset by peer [ 503.030670][T16867] vhci_hcd: stop threads [ 503.033731][T16867] vhci_hcd: release socket [ 503.035317][T16867] vhci_hcd: disconnect device [ 504.168562][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 504.336122][ T6054] vhci_hcd: vhci_device speed not set [ 504.671982][T22513] netlink: zone id is out of range [ 504.674549][T22513] netlink: zone id is out of range [ 504.678251][T22513] netlink: zone id is out of range [ 504.681569][T22513] netlink: zone id is out of range [ 504.708084][T22513] netlink: set zone limit has 4 unknown bytes [ 504.758877][T22513] netlink: del zone limit has 4 unknown bytes [ 508.259044][ T9253] vhci_hcd: vhci_device speed not set [ 508.440033][ T40] kauditd_printk_skb: 20 callbacks suppressed [ 508.440115][ T40] audit: type=1800 audit(1758580963.412:5154): pid=22559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2784" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 511.322378][T22599] 8021q: adding VLAN 0 to HW filter on device bond0 [ 511.338777][ T2216] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 511.344311][T22599] 8021q: adding VLAN 0 to HW filter on device team0 [ 511.353503][T22599] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 511.541130][ T2216] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 512.082871][ T1147] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 512.468111][T22628] lo speed is unknown, defaulting to 1000 [ 512.533669][ T40] audit: type=1326 audit(1758580967.238:5155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22623 comm="syz.0.2801" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf70de579 code=0x0 [ 512.901933][ T40] audit: type=1804 audit(1758580967.547:5156): pid=22638 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.2803" name="bus" dev="tmpfs" ino=4240 res=1 errno=0 [ 513.232934][T10718] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 513.240609][T10718] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 513.674222][T22644] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2804'. [ 513.809231][ T2216] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 514.443231][T22650] netlink: 'syz.2.2814': attribute type 10 has an invalid length. [ 514.455228][T22650] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 515.705898][T22674] netlink: 'syz.6.2812': attribute type 4 has an invalid length. [ 516.962258][T22697] lo speed is unknown, defaulting to 1000 [ 517.506501][ C3] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 517.699121][T22714] netlink: zone id is out of range [ 517.701790][T22714] netlink: zone id is out of range [ 517.704721][T22714] netlink: zone id is out of range [ 517.716205][T22714] netlink: zone id is out of range [ 517.799242][T22714] netlink: set zone limit has 4 unknown bytes [ 517.836498][T22720] netlink: del zone limit has 4 unknown bytes [ 518.739839][T22735] openvswitch: netlink: Missing valid actions attribute. [ 518.742898][T22735] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 519.284777][ T40] audit: type=1804 audit(1758580973.561:5157): pid=22744 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.2831" name="bus" dev="tmpfs" ino=4288 res=1 errno=0 [ 519.723178][T10720] ------------[ cut here ]------------ [ 519.725894][T10720] WARNING: CPU: 1 PID: 10720 at io_uring/io_uring.c:2980 io_ring_exit_work+0x3fc/0x10f0 [ 519.730984][T10720] Modules linked in: [ 519.733428][T10720] CPU: 1 UID: 0 PID: 10720 Comm: kworker/u32:59 Not tainted syzkaller #0 PREEMPT(full) [ 519.739837][T10720] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 519.744686][T10720] Workqueue: iou_exit io_ring_exit_work [ 519.747061][T10720] RIP: 0010:io_ring_exit_work+0x3fc/0x10f0 [ 519.749527][T10720] Code: 0f 85 0a 0b 00 00 48 8b 05 e1 67 4b 09 4c 8b 74 24 68 31 ff 49 29 c6 4c 89 f6 e8 5f 5b e5 fc 4d 85 f6 79 12 e8 e5 5f e5 fc 90 <0f> 0b 90 48 c7 44 24 60 70 17 00 00 e8 d3 5f e5 fc 48 8b 74 24 60 [ 519.757581][T10720] RSP: 0018:ffffc90006227a90 EFLAGS: 00010293 [ 519.760056][T10720] RAX: 0000000000000000 RBX: ffff8880296906c8 RCX: ffffffff84d5aa31 [ 519.763991][T10720] RDX: ffff88805f1d8000 RSI: ffffffff84d5aa3b RDI: 0000000000000007 [ 519.767271][T10720] RBP: ffffc90006227c50 R08: 0000000000000007 R09: 0000000000000000 [ 519.770555][T10720] R10: fffffffffffffffe R11: 0000000000000000 R12: ffff888029690000 [ 519.773940][T10720] R13: dffffc0000000000 R14: fffffffffffffffe R15: ffff888029690040 [ 519.777222][T10720] FS: 0000000000000000(0000) GS:ffff8880975ba000(0000) knlGS:0000000000000000 [ 519.781298][T10720] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 519.784466][T10720] CR2: 00000000f7395f40 CR3: 000000006d879000 CR4: 0000000000352ef0 [ 519.787795][T10720] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 519.791076][T10720] DR3: 00000000e08e000e DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 519.794431][T10720] Call Trace: [ 519.795874][T10720] [ 519.797186][T10720] ? do_raw_spin_lock+0x12c/0x2b0 [ 519.799589][T10720] ? __pfx_io_ring_exit_work+0x10/0x10 [ 519.802073][T10720] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 519.804591][T10720] ? debug_object_deactivate+0x1ec/0x3a0 [ 519.807022][T10720] ? rcu_is_watching+0x12/0xc0 [ 519.809059][T10720] process_one_work+0x9cf/0x1b70 [ 519.811160][T10720] ? __pfx_process_one_work+0x10/0x10 [ 519.813444][T10720] ? assign_work+0x1a0/0x250 [ 519.815730][T10720] worker_thread+0x6c8/0xf10 [ 519.817769][T10720] ? __pfx_worker_thread+0x10/0x10 [ 519.820165][T10720] kthread+0x3c5/0x780 [ 519.821909][T10720] ? __pfx_kthread+0x10/0x10 [ 519.823886][T10720] ? rcu_is_watching+0x12/0xc0 [ 519.825884][T10720] ? __pfx_kthread+0x10/0x10 [ 519.827996][T10720] ret_from_fork+0x56d/0x730 [ 519.830032][T10720] ? __pfx_kthread+0x10/0x10 [ 519.832131][T10720] ret_from_fork_asm+0x1a/0x30 [ 519.834311][T10720] [ 519.835667][T10720] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 519.838760][T10720] CPU: 1 UID: 0 PID: 10720 Comm: kworker/u32:59 Not tainted syzkaller #0 PREEMPT(full) [ 519.842731][T10720] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 519.847730][T10720] Workqueue: iou_exit io_ring_exit_work [ 519.850135][T10720] Call Trace: [ 519.851549][T10720] [ 519.852810][T10720] dump_stack_lvl+0x3d/0x1f0 [ 519.854746][T10720] vpanic+0x6e8/0x7a0 [ 519.856535][T10720] ? __pfx_vpanic+0x10/0x10 [ 519.858448][T10720] ? io_ring_exit_work+0x3fc/0x10f0 [ 519.860643][T10720] panic+0xca/0xd0 [ 519.862338][T10720] ? __pfx_panic+0x10/0x10 [ 519.864371][T10720] ? check_panic_on_warn+0x1f/0xb0 [ 519.866774][T10720] check_panic_on_warn+0xab/0xb0 [ 519.869110][T10720] __warn+0xf6/0x3c0 [ 519.870920][T10720] ? io_ring_exit_work+0x3fc/0x10f0 [ 519.873105][T10720] report_bug+0x3c3/0x580 [ 519.874936][T10720] ? io_ring_exit_work+0x3fc/0x10f0 [ 519.877181][T10720] handle_bug+0x184/0x210 [ 519.879007][T10720] exc_invalid_op+0x17/0x50 [ 519.880937][T10720] asm_exc_invalid_op+0x1a/0x20 [ 519.882998][T10720] RIP: 0010:io_ring_exit_work+0x3fc/0x10f0 [ 519.885286][T10720] Code: 0f 85 0a 0b 00 00 48 8b 05 e1 67 4b 09 4c 8b 74 24 68 31 ff 49 29 c6 4c 89 f6 e8 5f 5b e5 fc 4d 85 f6 79 12 e8 e5 5f e5 fc 90 <0f> 0b 90 48 c7 44 24 60 70 17 00 00 e8 d3 5f e5 fc 48 8b 74 24 60 [ 519.893467][T10720] RSP: 0018:ffffc90006227a90 EFLAGS: 00010293 [ 519.896028][T10720] RAX: 0000000000000000 RBX: ffff8880296906c8 RCX: ffffffff84d5aa31 [ 519.899319][T10720] RDX: ffff88805f1d8000 RSI: ffffffff84d5aa3b RDI: 0000000000000007 [ 519.902594][T10720] RBP: ffffc90006227c50 R08: 0000000000000007 R09: 0000000000000000 [ 519.905796][T10720] R10: fffffffffffffffe R11: 0000000000000000 R12: ffff888029690000 [ 519.909053][T10720] R13: dffffc0000000000 R14: fffffffffffffffe R15: ffff888029690040 [ 519.912385][T10720] ? io_ring_exit_work+0x3f1/0x10f0 [ 519.914634][T10720] ? io_ring_exit_work+0x3fb/0x10f0 [ 519.916838][T10720] ? do_raw_spin_lock+0x12c/0x2b0 [ 519.919070][T10720] ? __pfx_io_ring_exit_work+0x10/0x10 [ 519.921428][T10720] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 519.923884][T10720] ? debug_object_deactivate+0x1ec/0x3a0 [ 519.926251][T10720] ? rcu_is_watching+0x12/0xc0 [ 519.928336][T10720] process_one_work+0x9cf/0x1b70 [ 519.930545][T10720] ? __pfx_process_one_work+0x10/0x10 [ 519.932928][T10720] ? assign_work+0x1a0/0x250 [ 519.934874][T10720] worker_thread+0x6c8/0xf10 [ 519.936735][T10720] ? __pfx_worker_thread+0x10/0x10 [ 519.938622][T10720] kthread+0x3c5/0x780 [ 519.940156][T10720] ? __pfx_kthread+0x10/0x10 [ 519.941971][T10720] ? rcu_is_watching+0x12/0xc0 [ 519.944034][T10720] ? __pfx_kthread+0x10/0x10 [ 519.945985][T10720] ret_from_fork+0x56d/0x730 [ 519.947915][T10720] ? __pfx_kthread+0x10/0x10 [ 519.949668][T10720] ret_from_fork_asm+0x1a/0x30 [ 519.951453][T10720] [ 519.953487][T10720] Kernel Offset: disabled [ 519.955341][T10720] Rebooting in 86400 seconds.. VM DIAGNOSIS: 22:27:42 Registers: info registers vcpu 0 CPU#0 RAX=0000000000040000 RBX=ffff888021b65370 RCX=00000000fe6b2606 RDX=8048bc4b1ef64140 RSI=0000000061cd5729 RDI=ffff888021b65370 RBP=0000000000000000 RSP=ffffc9000e67f578 R8 =8048bc4b1ef64140 R9 =0000000000000001 R10=0000000000000000 R11=0000000000000000 R12=ffff888021b65370 R13=ffff888021b64880 R14=000000004140a2c7 R15=0000000000000004 RIP=ffffffff81974892 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff8880974ba000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000080005000 CR3=000000006d879000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=000000000586000e DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000ff ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4e4f4954504f5f4e 4153410063657865 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000044 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff8561e695 RDI=ffffffff9b102780 RBP=ffffffff9b102740 RSP=ffffc90006227400 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000000 R12=0000000000000000 R13=0000000000000044 R14=ffffffff9b102740 R15=ffffffff8561e630 RIP=ffffffff8561e6bf RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880975ba000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f7395f40 CR3=000000006d879000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=00000000e08e000e DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000ff ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4e4f4954504f5f4e 4153410063657865 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=ffff88802b341d40 RCX=ffffffff81af1301 RDX=ffff888072342440 RSI=0000000000000000 RDI=0000000000000005 RBP=0000000000000003 RSP=ffffc90006337888 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=dffffc0000000000 R13=ffffed10056683a9 R14=0000000000000001 R15=0000000000000001 RIP=ffffffff81af12d6 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880976ba000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000056aa94c0 CR3=000000000e380000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000ff ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4e4f4954504f5f4e 4153410063657865 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000001 RBX=ffffea0001e68cc0 RCX=ffffffff8b90455a RDX=1ffff11004d28738 RSI=ffffed1004d28738 RDI=0000000000000001 RBP=0000000000000038 RSP=ffffc90002f476d8 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000000 R12=0000000024000105 R13=dffffc0000000000 R14=ffff888026943ba8 R15=ffff8880269439c0 RIP=ffffffff81bb0a20 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007fb3cb5af300 ffffffff 00c00000 GS =0000 ffff8880977ba000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000055c59e6f8f40 CR3=00000000242d9000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fcffc200 Opmask01=000000000000ffff Opmask02=00000000ffffffff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6af65d0e98c79339 d071cca071005e06 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 d84af749e4cde23a dbf90735105dbd1d ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 30772baedc9f6bc8 34b93a257b975342 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 baa2007ba1af7d5b beea170124a139d5 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000000cd00 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000040 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0d5c76d4d40d3296 0000013bd42b5172 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 d2d7b26200800100 00800100d4c41de0 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 d37457ce0000013b 0000013b00000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 008001000000013b 0000013b0000013b ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 1104a21be05f93ac b33662fdc8533eeb ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 c493fbf76e87f94b 254a38f5f820e500 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a54ff53a3c6ef372 bb67ae856a09e667 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5be0cd191f83d9ab 9b05688c510e527f ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=00eddfa489c6a482 cbf22842d71d85d9 00eddfa489c6a482 cbf22842d71d85d9 00eddfa489c6a482 cbf22842d71d85d9 00eddfa489c6a482 cbf22842d71d85d9 ZMM18=93a99ca3e4dc35c2 48b7b008d7071b10 93a99ca3e4dc35c2 48b7b008d7071b10 93a99ca3e4dc35c2 48b7b008d7071b10 93a99ca3e4dc35c2 48b7b008d7071b10 ZMM19=831b000000000000 0000000000000004 831b000000000000 0000000000000003 831b000000000000 0000000000000002 831b000000000000 0000000000000001 ZMM20=0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 080158f201dc0800 05bfbff002010000 000806060104b000 080005bfbff80300 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 020005bfbff40300 040005bfbff00308 0288020508028000 0502800200080006 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0800020800080171 f0220000020d0000 00060000000e0000 0003000000100000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0608439a00737562 2f2e01ffffffffff fffffff308018003 04a6080001c4e9f8 ZMM25=48b7b00848b7b008 48b7b00848b7b008 48b7b00848b7b008 48b7b00848b7b008 48b7b00848b7b008 48b7b00848b7b008 48b7b00848b7b008 48b7b00848b7b008 ZMM26=e4dc35c2e4dc35c2 e4dc35c2e4dc35c2 e4dc35c2e4dc35c2 e4dc35c2e4dc35c2 e4dc35c2e4dc35c2 e4dc35c2e4dc35c2 e4dc35c2e4dc35c2 e4dc35c2e4dc35c2 ZMM27=93a99ca393a99ca3 93a99ca393a99ca3 93a99ca393a99ca3 93a99ca393a99ca3 93a99ca393a99ca3 93a99ca393a99ca3 93a99ca393a99ca3 93a99ca393a99ca3 ZMM28=000000100000000f 0000000e0000000d 0000000c0000000b 0000000a00000009 0000000800000007 0000000600000005 0000000400000003 0000000200000001 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=821b0000821b0000 821b0000821b0000 821b0000821b0000 821b0000821b0000 821b0000821b0000 821b0000821b0000 821b0000821b0000 821b0000821b0000