last executing test programs: 12m33.10890202s ago: executing program 0 (id=906): openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140), 0x315500, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) io_submit(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x400, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) epoll_create1(0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) 12m32.718946378s ago: executing program 0 (id=907): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000000)=0x10000) mmap(&(0x7f0000390000/0x1000)=nil, 0x1000, 0x8, 0x12, 0xffffffffffffffff, 0x7cae1000) socket$inet6(0xa, 0x3, 0x5) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_open_dev$sndpcmp(&(0x7f0000000200), 0x3, 0x40002) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='vnet_tx_trigger\x00', r1}, 0x18) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x1c57, &(0x7f0000000300)={0x0, 0x40ac, 0x10000, 0x2, 0x3f, 0x0, r3}, &(0x7f0000000180), &(0x7f00000001c0)) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0xf0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB=' \x00'/20, @ANYRES32=r5, @ANYBLOB="ae1e020000000000"], 0x20}}, 0x0) openat$vmci(0xffffff9c, &(0x7f00000002c0), 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x26e1, 0x0) close(r7) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) ioctl$SIOCSIFHWADDR(r7, 0x8b06, &(0x7f0000000000)={'wlan1\x00', @random="060000000010"}) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001000010000003a194618d96d6d2e8553", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x5}, @IFLA_BOND_TLB_DYNAMIC_LB={0x5}]}}}]}, 0x44}}, 0x0) r10 = socket$unix(0x1, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) 12m32.252605892s ago: executing program 0 (id=911): r0 = socket$pptp(0x18, 0x1, 0x2) r1 = socket$inet6(0xa, 0x80002, 0x88) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() r3 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, 0x0, &(0x7f0000000200)=0x1e) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000002180)=ANY=[@ANYBLOB="9feb010018000000"], 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) close(r0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000001004000014001a80100002800c000180080016000600000008001b00"], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r5, 0x400455c8, 0x8000000001) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x8, &(0x7f00000002c0)=0x0) io_submit(r7, 0x1, &(0x7f0000000000)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r6, &(0x7f0000000040)="0300ffff0000", 0x6}]) 12m31.498090396s ago: executing program 3 (id=915): openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140), 0x315500, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) io_submit(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x400, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) epoll_create1(0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) 12m31.268530121s ago: executing program 3 (id=916): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c00000015", @ANYRES32=0x0, @ANYBLOB="140001"], 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x800) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x25dfdbfb, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000280)=ANY=[@ANYRES64, @ANYRESOCT, @ANYRES64=0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x1e, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000027c0)={0x11, 0x4, &(0x7f0000000a40)=ANY=[@ANYBLOB="1801000000050000000000000000ea0485000000d000000095"], &(0x7f0000000a00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) setrlimit(0x3, &(0x7f0000000180)={0x7, 0x3}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$SNDCTL_DSP_GETTRIGGER(0xffffffffffffffff, 0x80045010, 0x0) r5 = io_uring_setup(0x7d98, &(0x7f00000003c0)={0x0, 0xe1b3, 0x2, 0x2, 0xffffffff}) r6 = socket$inet(0xa, 0x801, 0x84) connect$inet(r6, &(0x7f0000000000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) setsockopt(r6, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) listen(r6, 0x8) accept4$inet(r6, 0x0, 0x0, 0x80800) close_range(r5, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 12m30.378127756s ago: executing program 3 (id=919): r0 = openat$cgroup_root(0xffffff9c, &(0x7f0000000180)='./cgroup/syz0\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="18020000feffffff0000000000001801000020756c2500000000002020207b1af8ff00000000bfa10000c5a6000000000000f8ffffffb702000008000000b7030000ff7f0000850000007b000000950000f700000000bffd00"/98], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000003c0)="b9ff030768442650e04e7a8c09a5", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$inet6_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000000080)=@gcm_128={{0x304}, "473a4723af5e5ea7", "f1527bdca8525998da297f433e513230", "58478a84", "5a30c2112d6a5a3d"}, 0x28) r3 = fsopen(&(0x7f0000000540)='jfs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000080)='iocharset', &(0x7f00000000c0)='io#harset', 0x0) socket$kcm(0x10, 0x2, 0x0) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x16d000, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r5, 0x5201) ioctl$BTRFS_IOC_DEFRAG_RANGE(r1, 0x40309410, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_BLANKSCREEN(r6, 0x560e, 0x0) ioctl$TIOCSWINSZ(r6, 0x5414, &(0x7f0000000040)={0x9, 0x2, 0x1000, 0x5}) ioctl$RFKILL_IOCTL_NOINPUT(r4, 0x5201) 12m30.30809144s ago: executing program 3 (id=920): r0 = syz_open_dev$loop(&(0x7f0000000100), 0x8, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f00000000c0)={r2, @in6={{0xa, 0x4e23, 0xffffffff, @private0}}}, &(0x7f0000000040)=0x84) sendto$inet(0xffffffffffffffff, &(0x7f0000000000)="256d093faeea9f940a5112b7fde86ff605255fc30147c1f98c4cd9740542397d3e4895950fe25a8c5a130491156bd8d9c3015d022e0575dab5361458a261db130f115a066505851075", 0x49, 0x800, &(0x7f00000000c0)={0x2, 0x4e20, @rand_addr=0x64010100}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000003e000701feffffff00000000017c016d00030000800a000006002000800a00000400020000000000000000"], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r0, 0x8, {0x2a00, 0x80010000, 0x0, 0x1000002, 0x0, 0x0, 0x0, 0xb, 0xc, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r4, &(0x7f0000001840)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x6, 0x0, 0x14}, @ipv4=@generic={{0x5, 0x4, 0x2, 0x2, 0xfc0, 0x67, 0x0, 0xb, 0x73, 0x0, @rand_addr=0x64010120, @broadcast}, "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"}}, 0xfce) 12m30.177930248s ago: executing program 3 (id=921): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESDEC=r1, @ANYBLOB=',wfdno=', @ANYRESOCT=r0]) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) 12m29.989057472s ago: executing program 1 (id=922): r0 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000001b00)={&(0x7f0000000040)=@in6={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x80, 0x0}, 0x2) sendmsg$inet(r0, &(0x7f0000000380)={&(0x7f0000000040)={0xa, 0xa, @local}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xa6820000}, 0xafe6) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CHANNEL(r1, 0x0, 0x0) openat$rtc(0xffffff9c, 0x0, 0x8103, 0x0) syz_usb_connect(0x0, 0x38, &(0x7f0000000300)=ANY=[@ANYBLOB="120101022d3d0b106d040e0ad938361303010902d0a32dfebdbbcb3345d0582ae9ffd2260001daf6907e09048701020300005909050c0308000e59fb022109058c030002040792"], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x3, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x7f) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r2 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, 0x0, &(0x7f0000000080)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000dc0)={0x0, 0x3, 0x1000002, 0x0, 0xff, "d4e9002b2c000000ff00"}) r4 = syz_open_pts(r3, 0x0) r5 = dup(r4) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0x3) dup3(r3, r5, 0x0) r6 = dup3(r4, r3, 0x0) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000000)=0x13) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000840), 0x1a01, 0x0) ioctl$EVIOCGPROP(r7, 0x40047438, &(0x7f0000000180)=""/246) 12m29.759125685s ago: executing program 0 (id=923): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r2, 0xc06864b8, 0x0) syz_io_uring_setup(0x5e2, &(0x7f00000003c0), &(0x7f0000000040)=0x0, &(0x7f0000000180)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002340)=ANY=[@ANYBLOB="4800000010000104feffffff0000000000000000", @ANYRES32=r5, @ANYBLOB="a2490000280037800b0001006970"], 0x48}}, 0x8000) socket$inet_sctp(0x2, 0x5, 0x84) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0xc0601, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f00000003c0)=0x14) r8 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) r9 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000002c0)={'syz', 0x0}, 0x0, 0x0, r8) pipe2$watch_queue(&(0x7f00000003c0)={0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r8, r10, 0x1e) r11 = add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000280)={'fscrypt:', @auto=[0x66, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64, 0x35, 0x0, 0xd, 0x65]}, &(0x7f0000000180)={0x0, "de8d0d27ca969fa15f8b3b7bae39c1b3327d4332f8c149d2d65a347d67f6db7eb90dfdad3cdebaaf421412f812305c9da91699b5a02c1295596f0fd9ec78f2fd", 0x2d}, 0x48, r8) r12 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000440)='kmem_cache_free\x00', r13}, 0x10) keyctl$KEYCTL_MOVE(0x1e, r11, r8, r9, 0x0) capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) syz_io_uring_submit(r3, 0x0, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) io_uring_enter(0xffffffffffffffff, 0xa3d, 0x0, 0x0, 0x0, 0x0) mq_open(&(0x7f000084dff0)='!sali\x1cqxte&\xac\xe87x\x00', 0x6e93ebbbcc0884f2, 0x12e, &(0x7f0000000300)={0x0, 0x1, 0x7}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r2, 0xc01064c8, &(0x7f0000000140)={0x3, 0x0, &(0x7f0000000100)=[0x0, 0x0, 0x0]}) 12m29.423937827s ago: executing program 0 (id=925): socket(0x10, 0x80002, 0xfffffffe) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0xfffc, @broadcast}, 0x2}}, 0x2e) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000000)={0x3, 0x2c, {}, {0xee01}, 0x5, 0x1}) r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) accept4(r0, 0x0, 0x0, 0x0) syz_clone(0x2000211, 0x0, 0x0, 0x0, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0), 0x7e00, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) preadv2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$netlink(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x78}}, 0x0) syz_emit_ethernet(0xf8, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x0) getrlimit(0x6, &(0x7f0000000080)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000000706010800000000000710000a0000040500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) socket$nl_route(0x10, 0x3, 0x0) 12m29.298449433s ago: executing program 3 (id=926): r0 = socket$pptp(0x18, 0x1, 0x2) r1 = socket$inet6(0xa, 0x80002, 0x88) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() r3 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, 0x0, &(0x7f0000000200)=0x1e) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000002180)=ANY=[@ANYBLOB="9feb0100180000000000"], 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) close(r0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000100001080000", @ANYRES32=0x0, @ANYBLOB="000000001004000014001a80100002800c000180080016000600000008001b00"], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r7, 0x400455c8, 0x8000000001) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r8, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x8, &(0x7f00000002c0)=0x0) io_submit(r9, 0x1, &(0x7f0000000000)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r8, &(0x7f0000000040)="0300ffff0000", 0x6}]) 12m28.728234707s ago: executing program 1 (id=929): r0 = syz_open_dev$loop(&(0x7f0000000100), 0x8, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f00000000c0)={r2, @in6={{0xa, 0x4e23, 0xffffffff, @private0}}}, &(0x7f0000000040)=0x84) sendto$inet(0xffffffffffffffff, &(0x7f0000000000)="256d093faeea9f940a5112b7fde86ff605255fc30147c1f98c4cd9740542397d3e4895950fe25a8c5a130491156bd8d9c3015d022e0575dab5361458a261db130f115a066505851075", 0x49, 0x800, &(0x7f00000000c0)={0x2, 0x4e20, @rand_addr=0x64010100}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r0, 0x8, {0x2a00, 0x80010000, 0x0, 0x1000002, 0x0, 0x0, 0x0, 0xb, 0xc, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r3, &(0x7f0000001840)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x6, 0x0, 0x14}, @ipv4=@generic={{0x5, 0x4, 0x2, 0x2, 0xfc0, 0x67, 0x0, 0xb, 0x73, 0x0, @rand_addr=0x64010120, @broadcast}, "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"}}, 0xfce) 12m28.489128385s ago: executing program 1 (id=931): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x10000, 0x25dfdbfb, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x8, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x48, 0x3, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_setup(0x499f, 0x0, 0x0, 0x0) r3 = socket$inet6(0xa, 0x80003, 0x6) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000340)={{{@in=@rand_addr=0x64010100, @in6=@dev={0xfe, 0x80, '\x00', 0x1a}, 0x48, 0x0, 0x3, 0x0, 0xa}, {0x0, 0x0, 0x4, 0x6, 0x0, 0x400000000000000}, {0x0, 0x4, 0x400, 0xa78a}, 0xfffffffe, 0x6e6bb8, 0x1}, {{@in=@broadcast, 0x0, 0x33}, 0x0, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x3, 0x1, 0x7}}, 0xe4) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000000)='scalable\x00', 0x9) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000001c0), 0xc7) sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x11) recvfrom$inet(r4, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) 12m28.05399514s ago: executing program 0 (id=932): r0 = socket$pptp(0x18, 0x1, 0x2) r1 = socket$inet6(0xa, 0x80002, 0x88) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() r3 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, 0x0, &(0x7f0000000200)=0x1e) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) close(r0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000001004000014001a80100002800c000180080016000600000008001b00"], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r7, 0x400455c8, 0x8000000001) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r8, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x8, &(0x7f00000002c0)=0x0) io_submit(r9, 0x1, &(0x7f0000000000)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r8, &(0x7f0000000040)="0300ffff0000", 0x6}]) 12m26.993000271s ago: executing program 1 (id=934): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/sctp\x00') r1 = open_tree(r0, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x20) 12m26.479254694s ago: executing program 1 (id=935): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="b7020000f7ffffffbfa70000000000002402000020fe29817a0af0fff8ffffff69a4f0ff00000000b70600000018d1fe2d6405000000000075040000000000400704000000000000b7040000100000206a0700fe000000008500000005000000b70000000a00000095000000000000000000c2c62f6004ad13aa957e2af5e49a53c2868f0399d909a63796c113a80c19aab9d607000000b6c9483be3f0d3253730e714c46cc4f79fd2b316da4f0de8163f6242fa7323f1740637c48468766af540439fce41f144631ac262dcae18c3d1a1fbe96dc86035b44174f7c0620254ab6d285e6b343185089a0f119e31975e551558050800000000000000125d67857f290870093f38153608561a2128a79cce912d1f05de330800a9f5422bee8ca49166f6a587f2f593775afcd071efc5a972f757521b7b38ec273c2ad3e406f8c124f7dc1c4553229a69df4b2780e6da4420d71489fe383e0b5ce08b750502f2b8add8d2dddde19ac050537e973782b4053150580035fb2c579e1b2100000033d1ee8cab6d236f05b1f7b9f78fd5abfe033eb79f7a0b498366f5edfe311258016fbf47d9c85bf5325bf61419372be377022433e20900a262b20bb8b36de7b0e6c5ebfc5baec1ebe58d4af587d33e2935ad68da6e0fea5c21301f5d002b51a5b60fc741cb2c5d4cd5e896774f9293a6435558795043404ac6eafc8310fbcacca7f971b260fd06d4590ded8429fcd1c9a8dbbdedb32675388df363c0bc536e00448208b72405ebf27ddb402e5a2d675aaad92e183cef1eadc1661140fb567b55c72907a1aca75277a5f0022b1e957ba737f10f1161c5ae6e2cc64072ff3b4e76084922242e63d4b7806e30f786cff147e4bc819060678319a0e5534f5a0db52526c30000000000000000000000a63705b1a60525620acca06d57c055059df7651768310c9085c5f86be6ab819506961ad51f18b35fdc3fd4d0a0dbbdcd494ef168931f27748787bee95d739fef7ee67dd21c34647de82707e41d7db6d981a4fcf0bbd3d38ebb7a2489e28c6b28c0f70092ffb016b7766399555f3e6b538c2c862d17e53eaeb2036f9f0ab6e95e71bda4b5bbf53344264ad93bac1207b31d6e9c78181c7fe204c0b7582d1c762857f2a2e0c60f4a4855591a4f70f94df9629e470701103c40c8f6d3a3068091d62b58999e0a046f9509cb8ddc2a9ad4e0f1f85e5f076218b4b931acdff0c34fc5bdbad17ec481f1c9b17727c14e053e315d0d8d03c24ddaba65c5ce5b1aa04d1f767e25662b155d49460ec720d54044ac2856c11407835f341e2614bcae270000000001000000df7f736aab5d713240b2f40ec7be8251eba969686b2670ddc1a84df6ab12ab3e0cf8747837062233935704ebbd943ef0c5fef29513c7c1d6d2611796dccb45bdfd9e6533ad3574be5b9ea70e0c3b41a32067c03f5f8ed147cd0655c90d656f66eaed18a3c284c4f19417b5d91431759356db5d45ea40c9866957105b6252b0c028c672049ce163126f143f5758faf2a43f4c4f45a69b4e9113f85ae531085c11c75edbdee5af454757cdaff396c15ab9b210c202ffaea96d1bac60c6d6c56a4babc659858789bd479334e13e1c7876f95429431e61400815788c1397b260600d78e7513c58d9ac9474d392cc06f789753e1e7ebf5f1b55e2a64b9150c6580bf48e7bff763034801cccf403108d127b959ffc425a563ea2b90fbe779fd7d2ebfe94"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x2a, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r2 = socket$kcm(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000000)=r1, 0x4) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=@newsa={0xec, 0x15, 0x413, 0x0, 0x0, {{@in=@multicast1, @in6=@dev={0xfe, 0x80, '\x00', 0x26}, 0x0, 0x0, 0x4e24, 0x0, 0x2, 0x20, 0x20, 0x0, 0x0, 0xee00}, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, @in=@dev={0xac, 0x14, 0x14, 0xfe}, {0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x80000001, 0x20000000007}, {0x0, 0x8, 0xcc}, {0xf6}, 0x0, 0x0, 0xa, 0x1, 0x1}}, 0xec}}, 0x0) 12m26.259291695s ago: executing program 1 (id=936): r0 = openat$rdma_cm(0xffffff9c, &(0x7f00000006c0), 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000900)=ANY=[@ANYRES32=r1, @ANYRES16=r1, @ANYRESDEC=r0, @ANYRESDEC=r0, @ANYRES64=r0, @ANYBLOB="2d54d1284b0dba57aa298810ab8c8e3cade508b473ab4f115fc00f96993e1912d075d6fa3edf9f25d1a4d7e40ee5dabb28640b9d6ef450aa4adeca274c4fdd5872f4", @ANYRESOCT=r0, @ANYRES32=r0, @ANYRESHEX], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x34, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r3 = syz_open_dev$video4linux(&(0x7f0000000000), 0x71, 0x0) ioctl$VIDIOC_TRY_DECODER_CMD(r3, 0xc0585605, &(0x7f00000005c0)={0x0, 0x1, @raw_data=[0x97e, 0x0, 0x1012, 0xfffffffe, 0xfffffffd, 0x0, 0xfffffffe, 0xffffffff, 0x0, 0x40000000, 0x84c, 0x0, 0x0, 0x2, 0x0, 0x20000]}) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f00002b5000/0x4000)=nil, 0x4000, 0xb635773f06ebbeef, 0x108011, 0xffffffffffffffff, 0x0) inotify_init() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="34000000100001f8ffffff000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32=r2, @ANYBLOB="08001b"], 0x34}}, 0x4004010) r7 = socket(0x2, 0x3, 0x6) bind$inet(r7, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000b80)=ANY=[@ANYBLOB="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"], 0x13c}}, 0x0) process_vm_readv(r4, &(0x7f0000000280)=[{&(0x7f0000000440)=""/158, 0x9e}, {&(0x7f0000000040)}, {&(0x7f00000009c0)=""/225, 0xe1}], 0x3, &(0x7f0000000800)=[{&(0x7f0000000300)=""/74, 0x4a}, {&(0x7f00000006c0)=""/66, 0x42}, {&(0x7f0000000740)=""/32, 0x20}, {0x0}], 0x4, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x8) recvmsg$unix(r7, &(0x7f0000000140)={&(0x7f00000000c0)=@abs, 0x6e, 0x0, 0x0, &(0x7f00000003c0)}, 0x40) rmdir(&(0x7f00000001c0)='./cgroup/../file0\x00') write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000540)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000500), 0x106}}, 0x20) 12m14.191506346s ago: executing program 32 (id=926): r0 = socket$pptp(0x18, 0x1, 0x2) r1 = socket$inet6(0xa, 0x80002, 0x88) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() r3 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, 0x0, &(0x7f0000000200)=0x1e) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000002180)=ANY=[@ANYBLOB="9feb0100180000000000"], 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) close(r0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000100001080000", @ANYRES32=0x0, @ANYBLOB="000000001004000014001a80100002800c000180080016000600000008001b00"], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r7, 0x400455c8, 0x8000000001) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r8, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x8, &(0x7f00000002c0)=0x0) io_submit(r9, 0x1, &(0x7f0000000000)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r8, &(0x7f0000000040)="0300ffff0000", 0x6}]) 12m12.167992376s ago: executing program 33 (id=932): r0 = socket$pptp(0x18, 0x1, 0x2) r1 = socket$inet6(0xa, 0x80002, 0x88) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() r3 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, 0x0, &(0x7f0000000200)=0x1e) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) close(r0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000001004000014001a80100002800c000180080016000600000008001b00"], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r7, 0x400455c8, 0x8000000001) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r8, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x8, &(0x7f00000002c0)=0x0) io_submit(r9, 0x1, &(0x7f0000000000)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r8, &(0x7f0000000040)="0300ffff0000", 0x6}]) 12m11.142909469s ago: executing program 34 (id=936): r0 = openat$rdma_cm(0xffffff9c, &(0x7f00000006c0), 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000900)=ANY=[@ANYRES32=r1, @ANYRES16=r1, @ANYRESDEC=r0, @ANYRESDEC=r0, @ANYRES64=r0, @ANYBLOB="2d54d1284b0dba57aa298810ab8c8e3cade508b473ab4f115fc00f96993e1912d075d6fa3edf9f25d1a4d7e40ee5dabb28640b9d6ef450aa4adeca274c4fdd5872f4", @ANYRESOCT=r0, @ANYRES32=r0, @ANYRESHEX], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x34, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r3 = syz_open_dev$video4linux(&(0x7f0000000000), 0x71, 0x0) ioctl$VIDIOC_TRY_DECODER_CMD(r3, 0xc0585605, &(0x7f00000005c0)={0x0, 0x1, @raw_data=[0x97e, 0x0, 0x1012, 0xfffffffe, 0xfffffffd, 0x0, 0xfffffffe, 0xffffffff, 0x0, 0x40000000, 0x84c, 0x0, 0x0, 0x2, 0x0, 0x20000]}) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f00002b5000/0x4000)=nil, 0x4000, 0xb635773f06ebbeef, 0x108011, 0xffffffffffffffff, 0x0) inotify_init() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="34000000100001f8ffffff000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32=r2, @ANYBLOB="08001b"], 0x34}}, 0x4004010) r7 = socket(0x2, 0x3, 0x6) bind$inet(r7, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000b80)=ANY=[@ANYBLOB="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"], 0x13c}}, 0x0) process_vm_readv(r4, &(0x7f0000000280)=[{&(0x7f0000000440)=""/158, 0x9e}, {&(0x7f0000000040)}, {&(0x7f00000009c0)=""/225, 0xe1}], 0x3, &(0x7f0000000800)=[{&(0x7f0000000300)=""/74, 0x4a}, {&(0x7f00000006c0)=""/66, 0x42}, {&(0x7f0000000740)=""/32, 0x20}, {0x0}], 0x4, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x8) recvmsg$unix(r7, &(0x7f0000000140)={&(0x7f00000000c0)=@abs, 0x6e, 0x0, 0x0, &(0x7f00000003c0)}, 0x40) rmdir(&(0x7f00000001c0)='./cgroup/../file0\x00') write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000540)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000500), 0x106}}, 0x20) 6m41.556600382s ago: executing program 4 (id=2221): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x10000, 0x25dfdbfb, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x8, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x48, 0x3, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_setup(0x499f, 0x0, 0x0, 0x0) r3 = socket$inet6(0xa, 0x80003, 0x6) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000001c0), 0xc7) recvfrom$inet(r4, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) 6m40.284480376s ago: executing program 4 (id=2227): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f0000000480)=ANY=[], 0x0, 0x8, 0xaf, &(0x7f0000000140)=""/175, 0x82200, 0x12, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x200008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r2, 0x0, 0xe, 0x300, &(0x7f00000002c0)="f57b0bb7994307a7ac95a7c71016", 0x0, 0x0, 0x0, 0x0, 0x38, 0x0, &(0x7f0000000180)="b8"}, 0x3a) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000180), 0x0, &(0x7f00000004c0), 0x40, 0x0) chdir(&(0x7f0000000100)='./file0\x00') lchown(&(0x7f0000000080)='./file1\x00', 0xee01, 0xffffffffffffffff) recvmmsg(r0, 0x0, 0x34, 0x2, 0x0) openat$nvme_fabrics(0xffffff9c, &(0x7f00000002c0), 0x111000, 0x0) sched_setaffinity(0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x2) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000240)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(0x0) r3 = socket$kcm(0x29, 0x5, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r3, 0x119, 0x1, &(0x7f0000000000)=0x2, 0x4) setsockopt$kcm_KCM_RECV_DISABLE(r3, 0x119, 0x1, &(0x7f0000000080), 0x4) mknod(&(0x7f0000000100)='./file1/file3\x00', 0xc000, 0x7) madvise(&(0x7f0000000000/0x600000)=nil, 0xffffffffffffffff, 0x14) 6m39.430373154s ago: executing program 4 (id=2230): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x40c1, 0x1a2) mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f00000001c0)={0x5}) chdir(&(0x7f00000000c0)='./bus\x00') r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x0, @any, 0x804}, 0xe) listen(r2, 0xfffffffd) getsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, &(0x7f0000000180), &(0x7f0000000080)=0xfffffffffffffe92) r3 = syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x80) ioctl$I2C_SMBUS(r3, 0x720, &(0x7f0000000100)={0xfe, 0x4, 0xa, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000240)='./bus\x00', 0x0) recvfrom$unix(r4, &(0x7f0000000080)=""/48, 0x30, 0x2, 0x0, 0x0) renameat2(r4, &(0x7f00000001c0)='./file0\x00', r4, &(0x7f0000000200)='./bus/file0\x00', 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r5, &(0x7f0000000540)=""/239, 0xef) 6m39.249283999s ago: executing program 4 (id=2231): r0 = socket$nl_route(0x10, 0x3, 0x0) ppoll(&(0x7f0000002040)=[{r0, 0x8410}], 0x1, &(0x7f0000002080)={0x77359400}, &(0x7f00000020c0)={[0x1, 0x1]}, 0x8) 6m38.385262721s ago: executing program 4 (id=2235): openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f00000001c0)=0x3, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r0, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000340)="b9", 0x1}], 0x1}}], 0x1, 0x20008000) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x2c) setuid(0xee00) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000080)={0x8}) r2 = mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) ppoll(&(0x7f0000000040)=[{r2, 0x20}], 0x1, 0x0, 0x0, 0x0) mq_timedsend(r2, 0x0, 0x0, 0x6, 0x0) mq_timedreceive(r2, &(0x7f000001d600)=""/102372, 0x18fe4, 0x2, 0x0) pselect6(0x40, &(0x7f0000000040)={0x0, 0x3325, 0x4000000000001, 0x300, 0x0, 0x0, 0x0, 0x3}, 0x0, &(0x7f0000000100)={0x8, 0x4, 0x0, 0x0, 0x0, 0x400000000000000, 0x8}, 0x0, 0x0) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "f1a0f9fff9e440b4", "881aae83544dfa6412f91b9057e3f415", "9dca43b6", "9ecb592c6ee49fbd"}, 0x28) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x34, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x4}]}], {0x14}}, 0x7c}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) r4 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x30, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x4}]}], {0x14}}, 0xb8}}, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) socket$kcm(0x10, 0x2, 0x0) close(r0) 6m37.554492384s ago: executing program 4 (id=2240): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x10000, 0x25dfdbfb, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x8, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x48, 0x3, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_setup(0x499f, 0x0, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000340)={{{@in=@rand_addr=0x64010100, @in6=@dev={0xfe, 0x80, '\x00', 0x1a}, 0x48, 0x0, 0x3, 0x0, 0xa}, {0x0, 0x0, 0x4, 0x6, 0x0, 0x400000000000000}, {0x0, 0x4, 0x400, 0xa78a}, 0xfffffffe, 0x6e6bb8, 0x1}, {{@in=@broadcast, 0x0, 0x33}, 0x0, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x3, 0x1, 0x7}}, 0xe4) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000240)=[@mss, @sack_perm, @timestamp, @mss={0x2, 0x1}, @window, @window={0x3, 0x0, 0xfffc}, @timestamp, @timestamp], 0x8) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000000)='scalable\x00', 0x9) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000001c0), 0xc7) sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x11) sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000080)=@newlink={0x20, 0x10, 0x503, 0x1070bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x8091}}, 0x20}}, 0x8800) 6m22.372329133s ago: executing program 35 (id=2240): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x10000, 0x25dfdbfb, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x8, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x48, 0x3, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_setup(0x499f, 0x0, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000340)={{{@in=@rand_addr=0x64010100, @in6=@dev={0xfe, 0x80, '\x00', 0x1a}, 0x48, 0x0, 0x3, 0x0, 0xa}, {0x0, 0x0, 0x4, 0x6, 0x0, 0x400000000000000}, {0x0, 0x4, 0x400, 0xa78a}, 0xfffffffe, 0x6e6bb8, 0x1}, {{@in=@broadcast, 0x0, 0x33}, 0x0, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x3, 0x1, 0x7}}, 0xe4) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000240)=[@mss, @sack_perm, @timestamp, @mss={0x2, 0x1}, @window, @window={0x3, 0x0, 0xfffc}, @timestamp, @timestamp], 0x8) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000000)='scalable\x00', 0x9) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000001c0), 0xc7) sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x11) sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000080)=@newlink={0x20, 0x10, 0x503, 0x1070bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x8091}}, 0x20}}, 0x8800) 4m39.178440512s ago: executing program 5 (id=2674): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000000800009502"]) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000100)={0x34, r6, 0x1, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1b}}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x34}, 0x1, 0x0, 0x0, 0xc00c4}, 0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r4, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c0000001000030500000000fcffffff00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001400128009000100626f6e64000000000400028008000a00", @ANYRES32=r4, @ANYBLOB="793ad942a991a04d88083eca4fe6502c5f82133c897592a829db90cd99cfa955ecc66a198c239825b914232d7a64c5a761b5300209cfed4016bbdf1265fee465916d0515d9593631963ee89d1c6409c612c72d25acd1a010d4dfddaa9a69c894762339618abf4ee9c482324408d2e043438b133c6380c63a0d3306a248270e54c2000000008c52d2644a8ffdc96adaf481110209f2f84f1f07c9915a7df16bc9c7c85d6a6f7801e4e73acb1761e04c306139fd0e61425d192c"], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x60, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r7], 0x5c}}, 0x40) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x14, 0x3, 0x1, 0x101}, 0x14}}, 0x0) socket$unix(0x1, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) r11 = syz_open_dev$sndpcmc(&(0x7f0000000180), 0x0, 0x82000) ioctl$SNDRV_PCM_IOCTL_RESUME(r11, 0x4147, 0x0) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r10, @ANYBLOB="01000000010000001c"], 0x3c}}, 0x0) 4m39.113739611s ago: executing program 5 (id=2675): sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x4040) bpf$MAP_CREATE(0x0, &(0x7f0000001340)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x48) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$sock(r0, &(0x7f0000000cc0)=[{{&(0x7f0000000100)=@l2tp={0x2, 0x0, @broadcast, 0x3}, 0x80, 0x0}}, {{&(0x7f0000000700)=@in6={0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, '\x00', 0x18}, 0x60}, 0x80, 0x0}}], 0x2, 0x48094) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) socket$tipc(0x1e, 0x5, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_freezer_state(r1, &(0x7f0000000180), 0x2, 0x0) write$cgroup_freezer_state(r2, &(0x7f0000000040)='FROZEN\x00', 0x7) 4m38.200757912s ago: executing program 5 (id=2680): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c00000015", @ANYRES32=0x0, @ANYBLOB="140001"], 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x800) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x88, 0x30, 0x1, 0x0, 0x25dfdbfb, {}, [{0x74, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000280)=ANY=[@ANYRES64, @ANYRESOCT, @ANYRES64=0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x1e, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_io_uring_setup(0x131, &(0x7f0000000340)={0x0, 0x5cb1, 0x2, 0x4, 0xfffffffd}, &(0x7f0000000140), 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000027c0)={0x11, 0x4, &(0x7f0000000a40)=ANY=[@ANYBLOB="1801000000050000000000000000ea0485000000d000000095"], &(0x7f0000000a00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) setrlimit(0x3, &(0x7f0000000180)={0x7, 0x3}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$SNDCTL_DSP_GETTRIGGER(0xffffffffffffffff, 0x80045010, 0x0) r5 = io_uring_setup(0x7d98, &(0x7f00000003c0)={0x0, 0xe1b3, 0x2, 0x2, 0xffffffff}) r6 = socket$inet(0xa, 0x801, 0x84) connect$inet(r6, &(0x7f0000000000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) setsockopt(r6, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) listen(r6, 0x8) accept4$inet(r6, 0x0, 0x0, 0x80800) close_range(r5, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 4m37.310296548s ago: executing program 5 (id=2686): fcntl$setstatus(0xffffffffffffffff, 0x4, 0x44000) syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x180) mount$cgroup(0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000300)={0x28, 0x0, 0xffffffff, @host}, 0x10) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x1, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x6, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) 4m36.269720854s ago: executing program 5 (id=2688): openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f00000001c0)=0x3, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r0, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000340)="b9", 0x1}], 0x1}}], 0x1, 0x20008000) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x2c) setuid(0xee00) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000080)={0x8}) r2 = mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) ppoll(&(0x7f0000000040)=[{r2, 0x20}], 0x1, 0x0, 0x0, 0x0) mq_timedsend(r2, 0x0, 0x0, 0x6, 0x0) mq_timedreceive(r2, &(0x7f000001d600)=""/102372, 0x18fe4, 0x2, 0x0) pselect6(0x40, &(0x7f0000000040)={0x0, 0x3325, 0x4000000000001, 0x300, 0x0, 0x0, 0x0, 0x3}, 0x0, &(0x7f0000000100)={0x8, 0x4, 0x0, 0x0, 0x0, 0x400000000000000, 0x8}, 0x0, 0x0) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "f1a0f9fff9e440b4", "881aae83544dfa6412f91b9057e3f415", "9dca43b6", "9ecb592c6ee49fbd"}, 0x28) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x34, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x4}]}], {0x14}}, 0x7c}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) r4 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x30, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x4}]}], {0x14}}, 0xb8}}, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) socket$kcm(0x10, 0x2, 0x0) close(r0) 4m35.451541987s ago: executing program 5 (id=2692): socket$netlink(0x10, 0x3, 0x10) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000140)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f00000002c0)={0x0, 0x0, r1, 0x0, 0x80, 0x5, 0x9, 0x0, {0x9, 0xd6, 0x1c, 0x7, 0xfe, 0x401, 0x7, 0xa, 0x0, 0x52, 0x8000, 0x7e9, 0x401, 0x5, "cb630dab3a0338057401a192419598961f50dc45c87d55b42a28b8f01c0e0e7a"}}) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r2, 0xc02064b9, &(0x7f0000000dc0)={&(0x7f0000000240), &(0x7f0000000200), 0x0, r1, 0xcccccccc}) socket$netlink(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mknodat$loop(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0xc000, 0x0) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xa0090199) syz_open_dev$usbfs(&(0x7f0000000000), 0x200, 0x60000) mkdir(&(0x7f0000000280)='./file0\x00', 0x54) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000b00)) openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x42, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={0x0, r4, 0x0, 0x7}, 0x18) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) r5 = socket(0x10, 0x3, 0x0) write(r5, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14) recvmmsg(r5, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(0xffffffffffffffff, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0x1f4, {}, {}, @raw32={[0x2600]}}], 0xffc8) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) 4m20.419939671s ago: executing program 36 (id=2692): socket$netlink(0x10, 0x3, 0x10) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000140)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f00000002c0)={0x0, 0x0, r1, 0x0, 0x80, 0x5, 0x9, 0x0, {0x9, 0xd6, 0x1c, 0x7, 0xfe, 0x401, 0x7, 0xa, 0x0, 0x52, 0x8000, 0x7e9, 0x401, 0x5, "cb630dab3a0338057401a192419598961f50dc45c87d55b42a28b8f01c0e0e7a"}}) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r2, 0xc02064b9, &(0x7f0000000dc0)={&(0x7f0000000240), &(0x7f0000000200), 0x0, r1, 0xcccccccc}) socket$netlink(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mknodat$loop(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0xc000, 0x0) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xa0090199) syz_open_dev$usbfs(&(0x7f0000000000), 0x200, 0x60000) mkdir(&(0x7f0000000280)='./file0\x00', 0x54) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000b00)) openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x42, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={0x0, r4, 0x0, 0x7}, 0x18) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) r5 = socket(0x10, 0x3, 0x0) write(r5, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14) recvmmsg(r5, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(0xffffffffffffffff, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0x1f4, {}, {}, @raw32={[0x2600]}}], 0xffc8) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) 6.496574772s ago: executing program 8 (id=3717): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r6, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r7, &(0x7f0000000040)={0xa, 0x4001, 0x0, @loopback}, 0x1c) r8 = socket$netlink(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$nl_route(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000280)=ANY=[@ANYBLOB="2000020011ae79eb8ad8b37cba40370e000000000a008000000203080000000004000880"], 0x20}, 0x1, 0x0, 0x0, 0x4805}, 0x4) connect$unix(r7, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) ppoll(&(0x7f0000000080)=[{r2, 0x8c4}], 0x1, 0x0, 0x0, 0x0) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e020000000000000000"], 0x0, 0x37, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="0100000004000000040000000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r9, @ANYBLOB="02000000010000000000000800"/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0), 0x0, 0xfff, 0x1}, 0xffffffffffffff98) 5.092207191s ago: executing program 8 (id=3725): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c00000015", @ANYRES32=0x0, @ANYBLOB="140001"], 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x800) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x25dfdbfb, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000280)=ANY=[@ANYRES64, @ANYRESOCT, @ANYRES64=0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x1e, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_io_uring_setup(0x131, &(0x7f0000000340)={0x0, 0x5cb1, 0x2, 0x4, 0xfffffffd}, &(0x7f0000000140), 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000027c0)={0x11, 0x4, &(0x7f0000000a40)=ANY=[@ANYBLOB="1801000000050000000000000000ea0485000000d000000095"], &(0x7f0000000a00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0, r1}, 0x18) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) setrlimit(0x3, &(0x7f0000000180)={0x7, 0x3}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$SNDCTL_DSP_GETTRIGGER(0xffffffffffffffff, 0x80045010, 0x0) r5 = io_uring_setup(0x7d98, &(0x7f00000003c0)={0x0, 0xe1b3, 0x2, 0x2, 0xffffffff}) r6 = socket$inet(0xa, 0x801, 0x84) connect$inet(r6, &(0x7f0000000000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) setsockopt(r6, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) listen(r6, 0x8) accept4$inet(r6, 0x0, 0x0, 0x80800) close_range(r5, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 4.281667536s ago: executing program 2 (id=3727): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x8044) 4.14405937s ago: executing program 2 (id=3729): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9259}, [@IFLA_IFNAME={0x14, 0x3, 'macvlan0\x00'}, @IFLA_XDP={0x4}, @IFLA_PROTO_DOWN={0x5, 0x27, 0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x8044) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) socket$nl_generic(0x10, 0x3, 0x10) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000000), 0x4) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB="f000000010001307000000000000000020010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000017ec3a458224c2df927bddd765d35f6b0ddfd864b63ea02759e052db42ca6f476bee21384c4685f0da57dd9b0fa9e1a8f4df36bd009519007c3baf1d7fddc688e3684345e8a523657fe35b51bac89bcaefb180274622514c4d49cbf187429becd9ecfd1022261c5a8d481c1c011c13f34bb846424060235a8ab156dbd5bfc3ec04e8b29ca652d95bedf36d9d00d9526e5e761d", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000"], 0xf0}}, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, @none, 0x0, 0x1}, 0xe) syz_open_dev$vim2m(&(0x7f0000000340), 0x7f, 0x2) connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = syz_io_uring_setup(0x893, &(0x7f00000003c0)={0x0, 0xaee1, 0x80, 0x3, 0xb}, &(0x7f0000000340)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = syz_socket_connect_nvme_tcp() recvfrom$inet_nvme(r7, &(0x7f0000000500)=""/131, 0x83, 0x0, 0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r1, 0x0, &(0x7f0000019400)={0x0, 0x0, 0x0}, 0x0, 0x40000000, 0x1, {0xffe}}) io_uring_enter(r4, 0x5361, 0xfffffffd, 0x2, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, 0x0) 4.119828711s ago: executing program 8 (id=3730): r0 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_MMAP_OFFSETS(r0, 0x11b, 0x1, 0x0, &(0x7f0000000200)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r2, 0x4068aea3, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000000c0)={[0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4], 0xeeee0000, 0x8340}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(0xffffffffffffffff, 0xc01064c7, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x16, 0x4, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="6400000002060108000000000000000000faffffffffffffff617368706f72742c6e657400000000050001000700000005000500020000000900020073797a300000000005000400000000001400078008000840000000d3080006400000008000"], 0x64}, 0x1, 0x0, 0x0, 0x2002c0c4}, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) syz_emit_ethernet(0x134, &(0x7f00000008c0)={@link_local, @local, @val={@void, {0x8100, 0x7, 0x0, 0x2}}, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0xfa, 0x0, 0x0, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, {[], "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"}}}}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x19}) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ip_tables_targets\x00') preadv(r7, &(0x7f00000003c0)=[{&(0x7f00000002c0)=""/66, 0x42}], 0x1, 0x85, 0xa) io_uring_enter(0xffffffffffffffff, 0x2ded, 0x3fff, 0x0, 0x0, 0x0) userfaultfd(0x80801) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5b5d}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}]}, @IFLA_ALT_IFNAME={0x14, 0x35, 'wg1\x00'}]}, 0x50}}, 0x44040) syz_open_dev$vbi(0x0, 0x1, 0x2) 3.388291495s ago: executing program 6 (id=3731): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000"]) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000100)={0x34, r6, 0x1, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1b}}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x34}, 0x1, 0x0, 0x0, 0xc00c4}, 0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r4, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c0000001000030500000000fcffffff00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001400128009000100626f6e64000000000400028008000a00", @ANYRES32=r4, @ANYBLOB="793ad942a991a04d88083eca4fe6502c5f82133c897592a829db90cd99cfa955ecc66a198c239825b914232d7a64c5a761b5300209cfed4016bbdf1265fee465916d0515d9593631963ee89d1c6409c612c72d25acd1a010d4dfddaa9a69c894762339618abf4ee9c482324408d2e043438b133c6380c63a0d3306a248270e54c2000000008c52d2644a8ffdc96adaf481110209f2f84f1f07c9915a7df16bc9c7c85d6a6f7801e4e73acb1761e04c306139fd0e61425d192c"], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x60, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r7], 0x5c}}, 0x40) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x14, 0x3, 0x1, 0x101}, 0x14}}, 0x0) socket$unix(0x1, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r10) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) r12 = syz_open_dev$sndpcmc(&(0x7f0000000180), 0x0, 0x82000) ioctl$SNDRV_PCM_IOCTL_RESUME(r12, 0x4147, 0x0) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r11, @ANYBLOB="01000000010000001c"], 0x3c}}, 0x0) 3.183819736s ago: executing program 2 (id=3732): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000000800009502"]) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0xc00c4}, 0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r4, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c0000001000030500000000fcffffff00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001400128009000100626f6e64000000000400028008000a00", @ANYRES32=r4, @ANYBLOB="793ad942a991a04d88083eca4fe6502c5f82133c897592a829db90cd99cfa955ecc66a198c239825b914232d7a64c5a761b5300209cfed4016bbdf1265fee465916d0515d9593631963ee89d1c6409c612c72d25acd1a010d4dfddaa9a69c894762339618abf4ee9c482324408d2e043438b133c6380c63a0d3306a248270e54c2000000008c52d2644a8ffdc96adaf481110209f2f84f1f07c9915a7df16bc9c7c85d6a6f7801e4e73acb1761e04c306139fd0e61425d192c"], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x60, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r6], 0x5c}}, 0x40) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x14, 0x3, 0x1, 0x101}, 0x14}}, 0x0) socket$unix(0x1, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r9) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) r11 = syz_open_dev$sndpcmc(&(0x7f0000000180), 0x0, 0x82000) ioctl$SNDRV_PCM_IOCTL_RESUME(r11, 0x4147, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r10, @ANYBLOB="01000000010000001c"], 0x3c}}, 0x0) 3.123261356s ago: executing program 6 (id=3733): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r2, 0xc06864b8, 0x0) syz_io_uring_setup(0x5e2, &(0x7f00000003c0), &(0x7f0000000040)=0x0, &(0x7f0000000180)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002340)=ANY=[@ANYBLOB="4800000010000104feffffff0000000000000000", @ANYRES32=r5, @ANYBLOB="a2490000280037"], 0x48}}, 0x8000) socket$inet_sctp(0x2, 0x5, 0x84) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0xc0601, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f00000003c0)=0x14) r8 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) r9 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000002c0)={'syz', 0x0}, 0x0, 0x0, r8) pipe2$watch_queue(&(0x7f00000003c0)={0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r8, r10, 0x1e) r11 = add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000280)={'fscrypt:', @auto=[0x66, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64, 0x35, 0x0, 0xd, 0x65]}, &(0x7f0000000180)={0x0, "de8d0d27ca969fa15f8b3b7bae39c1b3327d4332f8c149d2d65a347d67f6db7eb90dfdad3cdebaaf421412f812305c9da91699b5a02c1295596f0fd9ec78f2fd", 0x2d}, 0x48, r8) r12 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r12, @ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000440)='kmem_cache_free\x00', r13}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) keyctl$KEYCTL_MOVE(0x1e, r11, r8, r9, 0x0) capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) syz_io_uring_submit(r3, 0x0, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) io_uring_enter(0xffffffffffffffff, 0xa3d, 0x0, 0x0, 0x0, 0x0) mq_open(&(0x7f000084dff0)='!sali\x1cqxte&\xac\xe87x\x00', 0x6e93ebbbcc0884f2, 0x12e, &(0x7f0000000300)={0x0, 0x1, 0x7}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r2, 0xc01064c8, &(0x7f0000000140)={0x3, 0x0, &(0x7f0000000100)=[0x0, 0x0, 0x0]}) 3.0339162s ago: executing program 7 (id=3734): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r2, 0xc06864b8, 0x0) syz_io_uring_setup(0x5e2, &(0x7f00000003c0), &(0x7f0000000040)=0x0, &(0x7f0000000180)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002340)=ANY=[@ANYBLOB="4800000010000104feffffff0000000000000000", @ANYRES32=r5, @ANYBLOB="a2490000280037"], 0x48}}, 0x8000) socket$inet_sctp(0x2, 0x5, 0x84) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0xc0601, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f00000003c0)=0x14) r8 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) r9 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000002c0)={'syz', 0x0}, 0x0, 0x0, r8) pipe2$watch_queue(&(0x7f00000003c0)={0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r8, r10, 0x1e) r11 = add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000280)={'fscrypt:', @auto=[0x66, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64, 0x35, 0x0, 0xd, 0x65]}, &(0x7f0000000180)={0x0, "de8d0d27ca969fa15f8b3b7bae39c1b3327d4332f8c149d2d65a347d67f6db7eb90dfdad3cdebaaf421412f812305c9da91699b5a02c1295596f0fd9ec78f2fd", 0x2d}, 0x48, r8) r12 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000440)='kmem_cache_free\x00', r13}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) keyctl$KEYCTL_MOVE(0x1e, r11, r8, r9, 0x0) capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) syz_io_uring_submit(r3, 0x0, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) io_uring_enter(0xffffffffffffffff, 0xa3d, 0x0, 0x0, 0x0, 0x0) mq_open(&(0x7f000084dff0)='!sali\x1cqxte&\xac\xe87x\x00', 0x6e93ebbbcc0884f2, 0x12e, &(0x7f0000000300)={0x0, 0x1, 0x7}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r2, 0xc01064c8, &(0x7f0000000140)={0x3, 0x0, &(0x7f0000000100)=[0x0, 0x0, 0x0]}) 3.03352086s ago: executing program 2 (id=3735): socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x8c, 0x30, 0x1, 0x0, 0x0, {}, [{0x78, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[], 0xffffffffffffff2b) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b030040000000004c0012800b00010067656e65766500003c0002800800"], 0x74}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_inet_SIOCSIFNETMASK(r4, 0x891c, &(0x7f000000c940)={'ip6tnl0\x00', {0x2, 0x4e22, @empty}}) bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e20, 0x3, @empty, 0xd}}, 0x24) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000340)=ANY=[@ANYBLOB="180200000000e1ff00000000000000008500000027000000850000005000000095"], &(0x7f0000000080)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000001900)={0x2, {0xc, 0x117, 0x5, 0x104, 0x100}}) r5 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f00000000c0)={0x11, 0x2, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r5, 0x40045612, &(0x7f0000000080)=0x2) ppoll(&(0x7f00000001c0)=[{r5, 0x204}], 0x1, 0x0, 0x0, 0x0) r6 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000500)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349d1c93701eec5"], 0x0) syz_usb_control_io(r6, 0x0, 0x0) 2.972439315s ago: executing program 8 (id=3736): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9259}, [@IFLA_IFNAME={0x14, 0x3, 'macvlan0\x00'}, @IFLA_XDP={0x4}, @IFLA_PROTO_DOWN={0x5, 0x27, 0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x8044) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) socket$nl_generic(0x10, 0x3, 0x10) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB="f000000010001307000000000000000020010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000017ec3a458224c2df927bddd765d35f6b0ddfd864b63ea02759e052db42ca6f476bee21384c4685f0da57dd9b0fa9e1a8f4df36bd009519007c3baf1d7fddc688e3684345e8a523657fe35b51bac89bcaefb180274622514c4d49cbf187429becd9ecfd1022261c5a8d481c1c011c13f34bb846424060235a8ab156dbd5bfc3ec04e8b29ca652d95bedf36d9d00d9526e5e761d", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000"], 0xf0}}, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, @none, 0x0, 0x1}, 0xe) syz_open_dev$vim2m(&(0x7f0000000340), 0x7f, 0x2) connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = syz_io_uring_setup(0x893, &(0x7f00000003c0)={0x0, 0xaee1, 0x80, 0x3, 0xb}, &(0x7f0000000340)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = syz_socket_connect_nvme_tcp() recvfrom$inet_nvme(r7, &(0x7f0000000500)=""/131, 0x83, 0x0, 0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r1, 0x0, &(0x7f0000019400)={0x0, 0x0, 0x0}, 0x0, 0x40000000, 0x1, {0xffe}}) io_uring_enter(r4, 0x5361, 0xfffffffd, 0x2, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, 0x0) 2.003699903s ago: executing program 7 (id=3737): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x8044) 1.973233229s ago: executing program 7 (id=3738): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000080000"]) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000100)={0x34, r6, 0x1, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1b}}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x34}, 0x1, 0x0, 0x0, 0xc00c4}, 0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r4, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c0000001000030500000000fcffffff00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001400128009000100626f6e64000000000400028008000a00", @ANYRES32=r4, @ANYBLOB="793ad942a991a04d88083eca4fe6502c5f82133c897592a829db90cd99cfa955ecc66a198c239825b914232d7a64c5a761b5300209cfed4016bbdf1265fee465916d0515d9593631963ee89d1c6409c612c72d25acd1a010d4dfddaa9a69c894762339618abf4ee9c482324408d2e043438b133c6380c63a0d3306a248270e54c2000000008c52d2644a8ffdc96adaf481110209f2f84f1f07c9915a7df16bc9c7c85d6a6f7801e4e73acb1761e04c306139fd0e61425d192c"], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x60, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r7], 0x5c}}, 0x40) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x14, 0x3, 0x1, 0x101}, 0x14}}, 0x0) socket$unix(0x1, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r10) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) r12 = syz_open_dev$sndpcmc(&(0x7f0000000180), 0x0, 0x82000) ioctl$SNDRV_PCM_IOCTL_RESUME(r12, 0x4147, 0x0) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r11, @ANYBLOB="01000000010000001c"], 0x3c}}, 0x0) 1.961063877s ago: executing program 6 (id=3739): socket$nl_route(0x10, 0x3, 0x0) ptrace(0x10, 0x0) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x100b7e, 0x0, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0xb1ea, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0xef92, 0x0, 0x0, 0x0) ppoll(0x0, 0x0, &(0x7f0000002080)={0x77359400}, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c00}, 0x0) munmap(&(0x7f0000003000/0x3000)=nil, 0x3000) 1.928308088s ago: executing program 8 (id=3740): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r2, 0xc06864b8, 0x0) syz_io_uring_setup(0x5e2, &(0x7f00000003c0), &(0x7f0000000040)=0x0, &(0x7f0000000180)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002340)=ANY=[@ANYBLOB="4800000010000104feffffff0000000000000000", @ANYRES32=r5, @ANYBLOB="a2490000280037"], 0x48}}, 0x8000) socket$inet_sctp(0x2, 0x5, 0x84) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0xc0601, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f00000003c0)=0x14) r8 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) r9 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000002c0)={'syz', 0x0}, 0x0, 0x0, r8) pipe2$watch_queue(&(0x7f00000003c0)={0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r8, r10, 0x1e) r11 = add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000280)={'fscrypt:', @auto=[0x66, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64, 0x35, 0x0, 0xd, 0x65]}, &(0x7f0000000180)={0x0, "de8d0d27ca969fa15f8b3b7bae39c1b3327d4332f8c149d2d65a347d67f6db7eb90dfdad3cdebaaf421412f812305c9da91699b5a02c1295596f0fd9ec78f2fd", 0x2d}, 0x48, r8) r12 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000440)='kmem_cache_free\x00', r13}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) keyctl$KEYCTL_MOVE(0x1e, r11, r8, r9, 0x0) capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) syz_io_uring_submit(r3, 0x0, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) io_uring_enter(0xffffffffffffffff, 0xa3d, 0x0, 0x0, 0x0, 0x0) mq_open(&(0x7f000084dff0)='!sali\x1cqxte&\xac\xe87x\x00', 0x6e93ebbbcc0884f2, 0x12e, &(0x7f0000000300)={0x0, 0x1, 0x7}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r2, 0xc01064c8, &(0x7f0000000140)={0x3, 0x0, &(0x7f0000000100)=[0x0, 0x0, 0x0]}) 1.758059458s ago: executing program 7 (id=3741): syz_open_dev$tty1(0xc, 0x4, 0x1) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x14, 0x30, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x40010) r1 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$inet6_opts(r1, 0x29, 0x3b, 0x0, 0x0) fsetxattr$security_capability(r0, 0x0, 0xffffffffffffffff, 0x0, 0x6dc4e4980008043c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket(0x2c, 0x4, 0x0) sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x10ffff) openat$kvm(0xffffffffffffff9c, 0x0, 0x2000, 0x0) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) r4 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r4, &(0x7f0000000080)={0x18, 0x0, {0xd, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'veth1\x00'}}, 0x1e) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x40a40, 0x0) ioctl$PPPIOCATTCHAN(r5, 0x40047438, &(0x7f0000000040)=0x2) ioctl$PPPIOCBRIDGECHAN(r5, 0x40047435, &(0x7f0000000200)=0x1) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 1.429141959s ago: executing program 7 (id=3742): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c00000015", @ANYRES32=0x0, @ANYBLOB="140001"], 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x800) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x25dfdbfb, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000280)=ANY=[@ANYRES64, @ANYRESOCT, @ANYRES64=0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x1e, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_io_uring_setup(0x131, &(0x7f0000000340)={0x0, 0x5cb1, 0x2, 0x4, 0xfffffffd}, &(0x7f0000000140), 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000027c0)={0x11, 0x4, &(0x7f0000000a40)=ANY=[@ANYBLOB="1801000000050000000000000000ea0485000000d000000095"], &(0x7f0000000a00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) setrlimit(0x3, &(0x7f0000000180)={0x7, 0x3}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$SNDCTL_DSP_GETTRIGGER(0xffffffffffffffff, 0x80045010, 0x0) r5 = io_uring_setup(0x7d98, &(0x7f00000003c0)={0x0, 0xe1b3, 0x2, 0x2, 0xffffffff}) r6 = socket$inet(0xa, 0x801, 0x84) connect$inet(r6, &(0x7f0000000000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) setsockopt(r6, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) listen(r6, 0x8) accept4$inet(r6, 0x0, 0x0, 0x80800) close_range(r5, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 1.251935338s ago: executing program 8 (id=3743): r0 = socket$pptp(0x18, 0x1, 0x2) r1 = socket$inet6(0xa, 0x80002, 0x88) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() r3 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, 0x0, &(0x7f0000000200)=0x1e) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000002180)=ANY=[@ANYBLOB="9feb010018000000"], 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) close(r0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000100001080000", @ANYRES32=0x0, @ANYBLOB="000000001004000014001a80100002800c000180080016000600000008001b00"], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r7, 0x400455c8, 0x8000000001) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r8, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x8, &(0x7f00000002c0)=0x0) io_submit(r9, 0x1, &(0x7f0000000000)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r8, &(0x7f0000000040)="0300ffff0000", 0x6}]) 987.838176ms ago: executing program 6 (id=3744): r0 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_MMAP_OFFSETS(r0, 0x11b, 0x1, 0x0, &(0x7f0000000200)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r2, 0x4068aea3, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000000c0)={[0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4], 0xeeee0000, 0x8340}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(0xffffffffffffffff, 0xc01064c7, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x16, 0x4, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="6400000002060108000000000000000000faffffffffffffff617368706f72742c6e657400000000050001000700000005000500020000000900020073797a300000000005000400000000001400078008000840000000d3080006400000008000"], 0x64}, 0x1, 0x0, 0x0, 0x2002c0c4}, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) syz_emit_ethernet(0x134, &(0x7f00000008c0)={@link_local, @local, @val={@void, {0x8100, 0x7, 0x0, 0x2}}, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0xfa, 0x0, 0x0, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, {[], "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"}}}}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x19}) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ip_tables_targets\x00') preadv(r7, &(0x7f00000003c0)=[{&(0x7f00000002c0)=""/66, 0x42}], 0x1, 0x85, 0xa) io_uring_enter(0xffffffffffffffff, 0x2ded, 0x3fff, 0x0, 0x0, 0x0) userfaultfd(0x80801) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5b5d}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}]}, @IFLA_ALT_IFNAME={0x14, 0x35, 'wg1\x00'}]}, 0x50}}, 0x44040) syz_open_dev$vbi(0x0, 0x1, 0x2) 583.940242ms ago: executing program 7 (id=3745): r0 = socket$pptp(0x18, 0x1, 0x2) r1 = socket$inet6(0xa, 0x80002, 0x88) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() r3 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, 0x0, &(0x7f0000000200)=0x1e) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000002180)=ANY=[@ANYBLOB="9feb010018000000"], 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) close(r0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000100001080000", @ANYRES32=0x0, @ANYBLOB="000000001004000014001a80100002800c000180080016000600000008001b00"], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r7, 0x400455c8, 0x8000000001) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r8, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x8, &(0x7f00000002c0)=0x0) io_submit(r9, 0x1, &(0x7f0000000000)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r8, &(0x7f0000000040)="0300ffff0000", 0x6}]) 567.510624ms ago: executing program 2 (id=3746): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r2, 0xc06864b8, 0x0) syz_io_uring_setup(0x5e2, &(0x7f00000003c0), &(0x7f0000000040)=0x0, &(0x7f0000000180)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002340)=ANY=[@ANYBLOB="4800000010000104feffffff0000000000000000", @ANYRES32=r5, @ANYBLOB="a2490000280037"], 0x48}}, 0x8000) socket$inet_sctp(0x2, 0x5, 0x84) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0xc0601, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f00000003c0)=0x14) r8 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) r9 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000002c0)={'syz', 0x0}, 0x0, 0x0, r8) pipe2$watch_queue(&(0x7f00000003c0)={0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r8, r10, 0x1e) r11 = add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000280)={'fscrypt:', @auto=[0x66, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64, 0x35, 0x0, 0xd, 0x65]}, &(0x7f0000000180)={0x0, "de8d0d27ca969fa15f8b3b7bae39c1b3327d4332f8c149d2d65a347d67f6db7eb90dfdad3cdebaaf421412f812305c9da91699b5a02c1295596f0fd9ec78f2fd", 0x2d}, 0x48, r8) r12 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB, @ANYRES32=r12, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000440)='kmem_cache_free\x00', r13}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) keyctl$KEYCTL_MOVE(0x1e, r11, r8, r9, 0x0) capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) syz_io_uring_submit(r3, 0x0, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) io_uring_enter(0xffffffffffffffff, 0xa3d, 0x0, 0x0, 0x0, 0x0) mq_open(&(0x7f000084dff0)='!sali\x1cqxte&\xac\xe87x\x00', 0x6e93ebbbcc0884f2, 0x12e, &(0x7f0000000300)={0x0, 0x1, 0x7}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r2, 0xc01064c8, &(0x7f0000000140)={0x3, 0x0, &(0x7f0000000100)=[0x0, 0x0, 0x0]}) 3.273539ms ago: executing program 6 (id=3747): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x8044) 2.736636ms ago: executing program 6 (id=3748): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r2, 0xc06864b8, 0x0) syz_io_uring_setup(0x5e2, &(0x7f00000003c0), &(0x7f0000000040)=0x0, &(0x7f0000000180)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002340)=ANY=[@ANYBLOB="4800000010000104feffffff0000000000000000", @ANYRES32=r5, @ANYBLOB="a2490000280037"], 0x48}}, 0x8000) socket$inet_sctp(0x2, 0x5, 0x84) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0xc0601, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f00000003c0)=0x14) r8 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) r9 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000002c0)={'syz', 0x0}, 0x0, 0x0, r8) pipe2$watch_queue(&(0x7f00000003c0)={0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r8, r10, 0x1e) r11 = add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000280)={'fscrypt:', @auto=[0x66, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64, 0x35, 0x0, 0xd, 0x65]}, &(0x7f0000000180)={0x0, "de8d0d27ca969fa15f8b3b7bae39c1b3327d4332f8c149d2d65a347d67f6db7eb90dfdad3cdebaaf421412f812305c9da91699b5a02c1295596f0fd9ec78f2fd", 0x2d}, 0x48, r8) r12 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000440)='kmem_cache_free\x00', r13}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) keyctl$KEYCTL_MOVE(0x1e, r11, r8, r9, 0x0) capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) syz_io_uring_submit(r3, 0x0, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) io_uring_enter(0xffffffffffffffff, 0xa3d, 0x0, 0x0, 0x0, 0x0) mq_open(&(0x7f000084dff0)='!sali\x1cqxte&\xac\xe87x\x00', 0x6e93ebbbcc0884f2, 0x12e, &(0x7f0000000300)={0x0, 0x1, 0x7}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r2, 0xc01064c8, &(0x7f0000000140)={0x3, 0x0, &(0x7f0000000100)=[0x0, 0x0, 0x0]}) 0s ago: executing program 2 (id=3755): r0 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_MMAP_OFFSETS(r0, 0x11b, 0x1, 0x0, &(0x7f0000000200)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r2, 0x4068aea3, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000000c0)={[0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4], 0xeeee0000, 0x8340}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(0xffffffffffffffff, 0xc01064c7, &(0x7f00000002c0)={0x0, 0x1000000, 0x0}) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="6400000002060108000000000000000000faffffffffffffff617368706f72742c6e657400000000050001000700000005000500020000000900020073797a300000000005000400000000001400078008000840000000d3080006400000008000"], 0x64}, 0x1, 0x0, 0x0, 0x2002c0c4}, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) syz_emit_ethernet(0x134, &(0x7f00000008c0)={@link_local, @local, @val={@void, {0x8100, 0x7, 0x0, 0x2}}, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0xfa, 0x0, 0x0, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, {[], "3ed114fd348a6ae9bc2204e97595f90add99a57e8d8a57d4be5bdd649373bca5f3d7127b615faa1f74ef4ee64ee5a1d4b75a1a09557a2166dccae1d158e6d97a3dace11ffe8b8aa8efb20aef5c2c186b077d68e0332203833e0f4505de1797b9c5c714ef3b9385e0780c286808191f08920c05530f3cbf0604c351831b2ae675bc3e946dcfff970f07dcfd453f4669591506233f7a0ab4354f1f354357ffd39a671e2cc54c8b9b254dfe0ce2d0510234e8fa2503f79395761a545b6ef08b6a8bfbc27d5471c214aa54d36c5206d0058198f91d814546230a577839fbe13e3c54f8c4242c8399d4e4505b5f77b17b71a1f9e4d9e5e0d23e1edea1"}}}}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x19}) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ip_tables_targets\x00') preadv(r7, &(0x7f00000003c0)=[{&(0x7f00000002c0)=""/66, 0x42}], 0x1, 0x85, 0xa) io_uring_enter(0xffffffffffffffff, 0x2ded, 0x3fff, 0x0, 0x0, 0x0) userfaultfd(0x80801) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5b5d}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}]}, @IFLA_ALT_IFNAME={0x14, 0x35, 'wg1\x00'}]}, 0x50}}, 0x44040) syz_open_dev$vbi(0x0, 0x1, 0x2) kernel console output (not intermixed with test programs): e sda1): ext4_lookup:1787: inode #2011: comm dhcpcd-run-hook: iget: checksum invalid [ 883.426340][T23128] EXT4-fs error (device sda1): ext4_lookup:1787: inode #2011: comm dhcpcd-run-hook: iget: checksum invalid [ 883.431329][T23128] EXT4-fs error (device sda1): ext4_lookup:1787: inode #2011: comm dhcpcd-run-hook: iget: checksum invalid [ 883.435594][T23128] EXT4-fs error (device sda1): ext4_lookup:1787: inode #2011: comm dhcpcd-run-hook: iget: checksum invalid [ 883.440953][T23128] EXT4-fs error (device sda1): ext4_lookup:1787: inode #2011: comm dhcpcd-run-hook: iget: checksum invalid [ 883.445181][T23128] EXT4-fs error (device sda1): ext4_lookup:1787: inode #2011: comm dhcpcd-run-hook: iget: checksum invalid [ 883.449827][T23128] EXT4-fs error (device sda1): ext4_lookup:1787: inode #2011: comm dhcpcd-run-hook: iget: checksum invalid [ 883.453699][T23128] EXT4-fs error (device sda1): ext4_lookup:1787: inode #2011: comm dhcpcd-run-hook: iget: checksum invalid [ 883.460211][T23128] EXT4-fs error (device sda1): ext4_lookup:1787: inode #2011: comm dhcpcd-run-hook: iget: checksum invalid [ 883.466889][T23128] EXT4-fs error (device sda1): ext4_lookup:1787: inode #2011: comm dhcpcd-run-hook: iget: checksum invalid [ 884.072838][ T5999] hid-generic 0000:007F:FFFFFFFE.001D: unknown main item tag 0x0 [ 884.076226][ T5999] hid-generic 0000:007F:FFFFFFFE.001D: unknown main item tag 0x0 [ 884.082678][ T5999] hid-generic 0000:007F:FFFFFFFE.001D: unknown main item tag 0x0 [ 884.085673][ T5999] hid-generic 0000:007F:FFFFFFFE.001D: unknown main item tag 0x0 [ 884.161070][ T5999] hid-generic 0000:007F:FFFFFFFE.001D: unknown main item tag 0x0 [ 884.165093][ T5999] hid-generic 0000:007F:FFFFFFFE.001D: unknown main item tag 0x0 [ 884.168324][ T5999] hid-generic 0000:007F:FFFFFFFE.001D: unknown main item tag 0x0 [ 884.171153][ T5999] hid-generic 0000:007F:FFFFFFFE.001D: unknown main item tag 0x0 [ 884.175198][ T5999] hid-generic 0000:007F:FFFFFFFE.001D: unknown main item tag 0x0 [ 884.177520][ T5999] hid-generic 0000:007F:FFFFFFFE.001D: unknown main item tag 0x0 [ 884.179917][ T5999] hid-generic 0000:007F:FFFFFFFE.001D: unknown main item tag 0x0 [ 884.183061][ T5999] hid-generic 0000:007F:FFFFFFFE.001D: unknown main item tag 0x0 [ 884.185421][ T5999] hid-generic 0000:007F:FFFFFFFE.001D: unknown main item tag 0x0 [ 884.187743][ T5999] hid-generic 0000:007F:FFFFFFFE.001D: unknown main item tag 0x0 [ 884.190131][ T5999] hid-generic 0000:007F:FFFFFFFE.001D: unknown main item tag 0x0 [ 884.192607][ T5999] hid-generic 0000:007F:FFFFFFFE.001D: unknown main item tag 0x0 [ 884.194863][ T5999] hid-generic 0000:007F:FFFFFFFE.001D: unknown main item tag 0x0 [ 884.197223][ T5999] hid-generic 0000:007F:FFFFFFFE.001D: unknown main item tag 0x0 [ 884.199508][ T5999] hid-generic 0000:007F:FFFFFFFE.001D: unknown main item tag 0x0 [ 884.202998][ T5999] hid-generic 0000:007F:FFFFFFFE.001D: unknown main item tag 0x0 [ 884.205425][ T5999] hid-generic 0000:007F:FFFFFFFE.001D: unknown main item tag 0x0 [ 884.207755][ T5999] hid-generic 0000:007F:FFFFFFFE.001D: unknown main item tag 0x0 [ 884.210051][ T5999] hid-generic 0000:007F:FFFFFFFE.001D: unknown main item tag 0x0 [ 884.212505][ T5999] hid-generic 0000:007F:FFFFFFFE.001D: unknown main item tag 0x0 [ 884.215624][ T5999] hid-generic 0000:007F:FFFFFFFE.001D: unknown main item tag 0x0 [ 884.217962][ T5999] hid-generic 0000:007F:FFFFFFFE.001D: unknown main item tag 0x0 [ 884.220330][ T5999] hid-generic 0000:007F:FFFFFFFE.001D: unknown main item tag 0x0 [ 884.222840][ T5999] hid-generic 0000:007F:FFFFFFFE.001D: unknown main item tag 0x0 [ 884.227333][ T5999] hid-generic 0000:007F:FFFFFFFE.001D: unknown main item tag 0x0 [ 884.232208][ T5999] hid-generic 0000:007F:FFFFFFFE.001D: unknown main item tag 0x0 [ 884.235260][ T5999] hid-generic 0000:007F:FFFFFFFE.001D: unknown main item tag 0x0 [ 884.238168][ T5999] hid-generic 0000:007F:FFFFFFFE.001D: unknown main item tag 0x0 [ 884.241073][ T5999] hid-generic 0000:007F:FFFFFFFE.001D: unknown main item tag 0x0 [ 884.244253][ T5999] hid-generic 0000:007F:FFFFFFFE.001D: unknown main item tag 0x0 [ 884.247320][ T5999] hid-generic 0000:007F:FFFFFFFE.001D: unknown main item tag 0x0 [ 884.250544][ T5999] hid-generic 0000:007F:FFFFFFFE.001D: unknown main item tag 0x0 [ 884.253717][ T5999] hid-generic 0000:007F:FFFFFFFE.001D: unknown main item tag 0x0 [ 884.256669][ T5999] hid-generic 0000:007F:FFFFFFFE.001D: unknown main item tag 0x0 [ 884.259457][ T5999] hid-generic 0000:007F:FFFFFFFE.001D: unknown main item tag 0x0 [ 884.262777][ T5999] hid-generic 0000:007F:FFFFFFFE.001D: unknown main item tag 0x0 [ 884.265745][ T5999] hid-generic 0000:007F:FFFFFFFE.001D: unknown main item tag 0x0 [ 884.268259][ T5999] hid-generic 0000:007F:FFFFFFFE.001D: unknown main item tag 0x0 [ 884.271055][ T5999] hid-generic 0000:007F:FFFFFFFE.001D: unknown main item tag 0x0 [ 884.275812][ T5999] hid-generic 0000:007F:FFFFFFFE.001D: hidraw1: HID v0.00 Device [syz1] on syz0 [ 884.656099][T23156] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3347'. [ 884.860945][T23159] netlink: 'syz.7.3348': attribute type 1 has an invalid length. [ 884.888397][T23159] 8021q: adding VLAN 0 to HW filter on device bond23 [ 884.893153][T23159] bond22: (slave bond23): making interface the new active one [ 884.896022][T23159] bond22: (slave bond23): Enslaving as an active interface with an up link [ 884.920625][T23159] 8021q: adding VLAN 0 to HW filter on device bond22 [ 884.942352][T17726] Bluetooth: Error in BCSP hdr checksum [ 885.036276][T23164] netlink: 40 bytes leftover after parsing attributes in process `syz.7.3350'. [ 885.073258][ T40] kauditd_printk_skb: 26 callbacks suppressed [ 885.073269][ T40] audit: type=1326 audit(2000000773.055:4136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23162 comm="syz.7.3350" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f13579 code=0x7ffc0000 [ 885.081794][ T40] audit: type=1326 audit(2000000773.055:4137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23162 comm="syz.7.3350" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f13579 code=0x7ffc0000 [ 885.088887][ T40] audit: type=1326 audit(2000000773.055:4138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23162 comm="syz.7.3350" exe="/syz-executor" sig=0 arch=40000003 syscall=288 compat=1 ip=0xf7f13579 code=0x7ffc0000 [ 885.122348][ T40] audit: type=1326 audit(2000000773.055:4139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23162 comm="syz.7.3350" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f13579 code=0x7ffc0000 [ 885.202243][T17744] Bluetooth: Error in BCSP hdr checksum [ 885.243364][ T40] audit: type=1326 audit(2000000773.055:4140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23162 comm="syz.7.3350" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f13579 code=0x7ffc0000 [ 885.249787][ T40] audit: type=1326 audit(2000000773.055:4141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23162 comm="syz.7.3350" exe="/syz-executor" sig=0 arch=40000003 syscall=185 compat=1 ip=0xf7f13579 code=0x7ffc0000 [ 885.256629][ T40] audit: type=1326 audit(2000000773.055:4142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23162 comm="syz.7.3350" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f13579 code=0x7ffc0000 [ 885.263440][ T40] audit: type=1326 audit(2000000773.055:4143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23162 comm="syz.7.3350" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f13579 code=0x7ffc0000 [ 885.286055][ T40] audit: type=1326 audit(2000000773.055:4144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23162 comm="syz.7.3350" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f13579 code=0x7ffc0000 [ 885.320235][ T40] audit: type=1326 audit(2000000773.055:4145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23162 comm="syz.7.3350" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f13579 code=0x7ffc0000 [ 885.775811][T23190] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3353'. [ 886.714364][ T839] hid-generic 0000:007F:FFFFFFFE.001E: unknown main item tag 0x0 [ 886.716770][ T839] hid-generic 0000:007F:FFFFFFFE.001E: unknown main item tag 0x0 [ 886.719059][ T839] hid-generic 0000:007F:FFFFFFFE.001E: unknown main item tag 0x0 [ 886.723700][ T839] hid-generic 0000:007F:FFFFFFFE.001E: unknown main item tag 0x0 [ 886.726099][ T839] hid-generic 0000:007F:FFFFFFFE.001E: unknown main item tag 0x0 [ 886.728444][ T839] hid-generic 0000:007F:FFFFFFFE.001E: unknown main item tag 0x0 [ 886.730775][ T839] hid-generic 0000:007F:FFFFFFFE.001E: unknown main item tag 0x0 [ 886.730937][T23217] netlink: 40 bytes leftover after parsing attributes in process `syz.7.3355'. [ 886.733509][ T839] hid-generic 0000:007F:FFFFFFFE.001E: unknown main item tag 0x0 [ 886.738575][ T839] hid-generic 0000:007F:FFFFFFFE.001E: unknown main item tag 0x0 [ 886.740908][ T839] hid-generic 0000:007F:FFFFFFFE.001E: unknown main item tag 0x0 [ 886.751487][ T839] hid-generic 0000:007F:FFFFFFFE.001E: unknown main item tag 0x0 [ 886.761297][ T5959] Bluetooth: hci1: command 0x1003 tx timeout [ 886.761302][ T839] hid-generic 0000:007F:FFFFFFFE.001E: unknown main item tag 0x0 [ 886.761316][ T5958] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 886.763154][ T839] hid-generic 0000:007F:FFFFFFFE.001E: unknown main item tag 0x0 [ 886.763169][ T839] hid-generic 0000:007F:FFFFFFFE.001E: unknown main item tag 0x0 [ 886.788429][ T839] hid-generic 0000:007F:FFFFFFFE.001E: unknown main item tag 0x0 [ 886.794168][ T839] hid-generic 0000:007F:FFFFFFFE.001E: unknown main item tag 0x0 [ 886.798841][ T839] hid-generic 0000:007F:FFFFFFFE.001E: unknown main item tag 0x0 [ 886.807550][ T839] hid-generic 0000:007F:FFFFFFFE.001E: unknown main item tag 0x0 [ 886.813249][ T839] hid-generic 0000:007F:FFFFFFFE.001E: unknown main item tag 0x0 [ 886.817658][ T839] hid-generic 0000:007F:FFFFFFFE.001E: unknown main item tag 0x0 [ 886.822400][ T839] hid-generic 0000:007F:FFFFFFFE.001E: unknown main item tag 0x0 [ 886.827015][ T839] hid-generic 0000:007F:FFFFFFFE.001E: unknown main item tag 0x0 [ 886.833242][ T839] hid-generic 0000:007F:FFFFFFFE.001E: unknown main item tag 0x0 [ 886.837900][ T839] hid-generic 0000:007F:FFFFFFFE.001E: unknown main item tag 0x0 [ 886.843588][ T839] hid-generic 0000:007F:FFFFFFFE.001E: unknown main item tag 0x0 [ 886.848182][ T839] hid-generic 0000:007F:FFFFFFFE.001E: unknown main item tag 0x0 [ 886.853977][ T839] hid-generic 0000:007F:FFFFFFFE.001E: unknown main item tag 0x0 [ 886.859731][ T839] hid-generic 0000:007F:FFFFFFFE.001E: unknown main item tag 0x0 [ 886.865959][ T839] hid-generic 0000:007F:FFFFFFFE.001E: unknown main item tag 0x0 [ 886.926391][ T839] hid-generic 0000:007F:FFFFFFFE.001E: unknown main item tag 0x0 [ 886.928777][ T839] hid-generic 0000:007F:FFFFFFFE.001E: unknown main item tag 0x0 [ 886.931123][ T839] hid-generic 0000:007F:FFFFFFFE.001E: unknown main item tag 0x0 [ 886.940815][T23229] netlink: 'syz.2.3358': attribute type 1 has an invalid length. [ 886.976670][T23229] 8021q: adding VLAN 0 to HW filter on device bond16 [ 886.981260][T23229] bond15: (slave bond16): making interface the new active one [ 886.985009][T23229] bond15: (slave bond16): Enslaving as an active interface with an up link [ 887.017771][ T839] hid-generic 0000:007F:FFFFFFFE.001E: unknown main item tag 0x0 [ 887.020207][ T839] hid-generic 0000:007F:FFFFFFFE.001E: unknown main item tag 0x0 [ 887.022782][ T839] hid-generic 0000:007F:FFFFFFFE.001E: unknown main item tag 0x0 [ 887.024765][T23229] 8021q: adding VLAN 0 to HW filter on device bond15 [ 887.025317][ T839] hid-generic 0000:007F:FFFFFFFE.001E: unknown main item tag 0x0 [ 887.030121][ T839] hid-generic 0000:007F:FFFFFFFE.001E: unknown main item tag 0x0 [ 887.032917][ T839] hid-generic 0000:007F:FFFFFFFE.001E: unknown main item tag 0x0 [ 887.035351][ T839] hid-generic 0000:007F:FFFFFFFE.001E: unknown main item tag 0x0 [ 887.037732][ T839] hid-generic 0000:007F:FFFFFFFE.001E: unknown main item tag 0x0 [ 887.040130][ T839] hid-generic 0000:007F:FFFFFFFE.001E: unknown main item tag 0x0 [ 887.042636][ T839] hid-generic 0000:007F:FFFFFFFE.001E: unknown main item tag 0x0 [ 887.044955][ T839] hid-generic 0000:007F:FFFFFFFE.001E: unknown main item tag 0x0 [ 887.051599][ T839] hid-generic 0000:007F:FFFFFFFE.001E: hidraw1: HID v0.00 Device [syz1] on syz0 [ 887.213429][T23247] gfs2: path_lookup on  returned error -2 [ 887.375370][T23251] netlink: 40 bytes leftover after parsing attributes in process `syz.7.3361'. [ 887.922518][T23264] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3362'. [ 888.339360][T23268] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3363'. [ 888.475351][T23261] EXT4-fs error: 1172 callbacks suppressed [ 888.475364][T23261] EXT4-fs error (device sda1): ext4_lookup:1787: inode #2011: comm dhcpcd-run-hook: iget: checksum invalid [ 888.503759][T23261] EXT4-fs error (device sda1): ext4_lookup:1787: inode #2011: comm dhcpcd-run-hook: iget: checksum invalid [ 888.523618][T23261] EXT4-fs error (device sda1): ext4_lookup:1787: inode #2011: comm dhcpcd-run-hook: iget: checksum invalid [ 888.547698][T23261] EXT4-fs error (device sda1): ext4_lookup:1787: inode #2011: comm dhcpcd-run-hook: iget: checksum invalid [ 888.556239][T23261] EXT4-fs error (device sda1): ext4_lookup:1787: inode #2011: comm dhcpcd-run-hook: iget: checksum invalid [ 888.747390][T23273] EXT4-fs error (device sda1): ext4_lookup:1787: inode #2011: comm cat: iget: checksum invalid [ 888.876986][T23274] EXT4-fs error (device sda1): ext4_lookup:1787: inode #2011: comm rm: iget: checksum invalid [ 889.020801][T23278] EXT4-fs error (device sda1): ext4_lookup:1787: inode #2011: comm rm: iget: checksum invalid [ 889.130866][T23280] EXT4-fs error (device sda1): ext4_lookup:1787: inode #2011: comm dhcpcd-run-hook: iget: checksum invalid [ 889.141700][T23282] EXT4-fs error (device sda1): ext4_lookup:1787: inode #2011: comm dhcpcd-run-hook: iget: checksum invalid [ 889.837896][T23294] netlink: 40 bytes leftover after parsing attributes in process `syz.8.3366'. [ 889.855264][T23295] netlink: 40 bytes leftover after parsing attributes in process `syz.7.3367'. [ 890.074814][T23302] netlink: 'syz.2.3368': attribute type 1 has an invalid length. [ 890.124168][T23302] 8021q: adding VLAN 0 to HW filter on device bond18 [ 890.128744][T23302] bond17: (slave bond18): making interface the new active one [ 890.132858][T23302] bond17: (slave bond18): Enslaving as an active interface with an up link [ 890.185550][T23302] 8021q: adding VLAN 0 to HW filter on device bond17 [ 890.425571][T23322] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3371'. [ 891.463241][T23337] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3374'. [ 892.511568][T23363] netlink: 80 bytes leftover after parsing attributes in process `syz.7.3379'. [ 895.046087][T23411] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3386'. [ 895.113898][T23410] netlink: 84 bytes leftover after parsing attributes in process `syz.8.3383'. [ 895.152717][T23413] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3394'. [ 896.009885][T23424] netlink: 80 bytes leftover after parsing attributes in process `syz.6.3388'. [ 896.068362][ T838] usb 13-1: new high-speed USB device number 9 using dummy_hcd [ 896.230770][ T838] usb 13-1: Using ep0 maxpacket: 8 [ 896.233799][ T838] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 201, changing to 11 [ 896.237338][ T838] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 49481, setting to 1024 [ 896.241590][ T838] usb 13-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 896.244411][ T838] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 896.250456][ T838] usb 13-1: config 0 descriptor?? [ 896.457312][T23440] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3391'. [ 896.472548][ T838] iowarrior 13-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 896.563071][ T40] kauditd_printk_skb: 84 callbacks suppressed [ 896.563084][ T40] audit: type=1326 audit(2000000784.545:4230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23438 comm="syz.6.3391" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb7579 code=0x7ffc0000 [ 896.571919][ T40] audit: type=1326 audit(2000000784.545:4231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23438 comm="syz.6.3391" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb7579 code=0x7ffc0000 [ 896.578554][ T40] audit: type=1326 audit(2000000784.545:4232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23438 comm="syz.6.3391" exe="/syz-executor" sig=0 arch=40000003 syscall=288 compat=1 ip=0xf7fb7579 code=0x7ffc0000 [ 896.585288][ T40] audit: type=1326 audit(2000000784.545:4233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23438 comm="syz.6.3391" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb7579 code=0x7ffc0000 [ 896.591940][ T40] audit: type=1326 audit(2000000784.545:4234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23438 comm="syz.6.3391" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb7579 code=0x7ffc0000 [ 896.598955][ T40] audit: type=1326 audit(2000000784.545:4235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23438 comm="syz.6.3391" exe="/syz-executor" sig=0 arch=40000003 syscall=185 compat=1 ip=0xf7fb7579 code=0x7ffc0000 [ 896.601545][T23443] EXT4-fs error: 790 callbacks suppressed [ 896.601556][T23443] EXT4-fs error (device sda1): ext4_lookup:1787: inode #2011: comm dhcpcd-run-hook: iget: checksum invalid [ 896.611394][ T40] audit: type=1326 audit(2000000784.545:4236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23438 comm="syz.6.3391" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb7579 code=0x7ffc0000 [ 896.614166][T23444] EXT4-fs error (device sda1): ext4_lookup:1787: inode #2011: comm dhcpcd-run-hook: iget: checksum invalid [ 896.618946][ T40] audit: type=1326 audit(2000000784.545:4237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23438 comm="syz.6.3391" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb7579 code=0x7ffc0000 [ 896.624441][T23444] EXT4-fs error (device sda1): ext4_lookup:1787: inode #2011: comm dhcpcd-run-hook: iget: checksum invalid [ 896.634019][ T40] audit: type=1326 audit(2000000784.545:4238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23438 comm="syz.6.3391" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb7579 code=0x7ffc0000 [ 896.634409][T23444] EXT4-fs error (device sda1): ext4_lookup:1787: inode #2011: comm dhcpcd-run-hook: iget: checksum invalid [ 896.643311][ T40] audit: type=1326 audit(2000000784.545:4239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23438 comm="syz.6.3391" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb7579 code=0x7ffc0000 [ 896.656205][T23444] EXT4-fs error (device sda1): ext4_lookup:1787: inode #2011: comm dhcpcd-run-hook: iget: checksum invalid [ 896.666460][ T838] usb 13-1: USB disconnect, device number 9 [ 896.712699][T23444] EXT4-fs error (device sda1): ext4_lookup:1787: inode #2011: comm dhcpcd-run-hook: iget: checksum invalid [ 896.716563][T23444] EXT4-fs error (device sda1): ext4_lookup:1787: inode #2011: comm dhcpcd-run-hook: iget: checksum invalid [ 896.720550][T23444] EXT4-fs error (device sda1): ext4_lookup:1787: inode #2011: comm dhcpcd-run-hook: iget: checksum invalid [ 896.724714][T23444] EXT4-fs error (device sda1): ext4_lookup:1787: inode #2011: comm dhcpcd-run-hook: iget: checksum invalid [ 896.728610][T23444] EXT4-fs error (device sda1): ext4_lookup:1787: inode #2011: comm dhcpcd-run-hook: iget: checksum invalid [ 897.388562][T23465] netlink: 'syz.6.3395': attribute type 1 has an invalid length. [ 897.435467][T23465] 8021q: adding VLAN 0 to HW filter on device bond2 [ 897.438969][T23465] bond1: (slave bond2): making interface the new active one [ 897.442356][T23465] bond1: (slave bond2): Enslaving as an active interface with an up link [ 897.475804][T23465] bond1: (slave gretap1): Enslaving as a backup interface with an up link [ 897.519712][T23465] 8021q: adding VLAN 0 to HW filter on device bond1 [ 897.576610][T23478] netlink: 'syz.6.3396': attribute type 1 has an invalid length. [ 897.599373][T23478] 8021q: adding VLAN 0 to HW filter on device bond4 [ 897.602559][T23478] bond3: (slave bond4): making interface the new active one [ 897.605007][T23478] bond3: (slave bond4): Enslaving as an active interface with an up link [ 897.629112][T23478] 8021q: adding VLAN 0 to HW filter on device bond3 [ 897.779715][T23493] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3398'. [ 897.836689][T23496] macvlan0: left promiscuous mode [ 897.838692][T23496] macvlan0: entered allmulticast mode [ 897.841276][T23496] veth1_vlan: entered allmulticast mode [ 897.916021][T23496] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3399'. [ 897.921188][T23500] netlink: 80 bytes leftover after parsing attributes in process `syz.7.3400'. [ 898.394714][T23516] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3402'. [ 899.489210][ T838] hid-generic 0000:007F:FFFFFFFE.001F: unknown main item tag 0x0 [ 899.492299][ T838] hid-generic 0000:007F:FFFFFFFE.001F: unknown main item tag 0x0 [ 899.496846][ T838] hid-generic 0000:007F:FFFFFFFE.001F: unknown main item tag 0x0 [ 899.499497][ T838] hid-generic 0000:007F:FFFFFFFE.001F: unknown main item tag 0x0 [ 899.516127][T23531] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3404'. [ 899.519268][ T838] hid-generic 0000:007F:FFFFFFFE.001F: unknown main item tag 0x0 [ 899.523944][ T838] hid-generic 0000:007F:FFFFFFFE.001F: unknown main item tag 0x0 [ 899.526664][ T838] hid-generic 0000:007F:FFFFFFFE.001F: unknown main item tag 0x0 [ 899.528981][ T838] hid-generic 0000:007F:FFFFFFFE.001F: unknown main item tag 0x0 [ 899.532216][ T838] hid-generic 0000:007F:FFFFFFFE.001F: unknown main item tag 0x0 [ 899.534772][ T838] hid-generic 0000:007F:FFFFFFFE.001F: unknown main item tag 0x0 [ 899.537114][ T838] hid-generic 0000:007F:FFFFFFFE.001F: unknown main item tag 0x0 [ 899.539503][ T838] hid-generic 0000:007F:FFFFFFFE.001F: unknown main item tag 0x0 [ 899.548868][ T838] hid-generic 0000:007F:FFFFFFFE.001F: unknown main item tag 0x0 [ 899.551390][ T838] hid-generic 0000:007F:FFFFFFFE.001F: unknown main item tag 0x0 [ 899.557077][ T838] hid-generic 0000:007F:FFFFFFFE.001F: unknown main item tag 0x0 [ 899.559870][ T838] hid-generic 0000:007F:FFFFFFFE.001F: unknown main item tag 0x0 [ 899.577760][ T838] hid-generic 0000:007F:FFFFFFFE.001F: unknown main item tag 0x0 [ 899.580177][ T838] hid-generic 0000:007F:FFFFFFFE.001F: unknown main item tag 0x0 [ 899.587428][ T838] hid-generic 0000:007F:FFFFFFFE.001F: unknown main item tag 0x0 [ 899.589782][ T838] hid-generic 0000:007F:FFFFFFFE.001F: unknown main item tag 0x0 [ 899.595093][ T838] hid-generic 0000:007F:FFFFFFFE.001F: unknown main item tag 0x0 [ 899.604116][ T838] hid-generic 0000:007F:FFFFFFFE.001F: unknown main item tag 0x0 [ 899.606530][ T838] hid-generic 0000:007F:FFFFFFFE.001F: unknown main item tag 0x0 [ 899.610356][ T838] hid-generic 0000:007F:FFFFFFFE.001F: unknown main item tag 0x0 [ 899.623416][ T838] hid-generic 0000:007F:FFFFFFFE.001F: unknown main item tag 0x0 [ 899.628831][ T838] hid-generic 0000:007F:FFFFFFFE.001F: unknown main item tag 0x0 [ 899.641363][ T838] hid-generic 0000:007F:FFFFFFFE.001F: unknown main item tag 0x0 [ 899.644095][ T838] hid-generic 0000:007F:FFFFFFFE.001F: unknown main item tag 0x0 [ 899.646556][ T838] hid-generic 0000:007F:FFFFFFFE.001F: unknown main item tag 0x0 [ 899.649248][ T838] hid-generic 0000:007F:FFFFFFFE.001F: unknown main item tag 0x0 [ 899.672338][ T838] hid-generic 0000:007F:FFFFFFFE.001F: unknown main item tag 0x0 [ 899.675690][ T838] hid-generic 0000:007F:FFFFFFFE.001F: unknown main item tag 0x0 [ 899.678697][ T838] hid-generic 0000:007F:FFFFFFFE.001F: unknown main item tag 0x0 [ 899.681914][ T838] hid-generic 0000:007F:FFFFFFFE.001F: unknown main item tag 0x0 [ 899.684461][ T838] hid-generic 0000:007F:FFFFFFFE.001F: unknown main item tag 0x0 [ 899.687393][ T838] hid-generic 0000:007F:FFFFFFFE.001F: unknown main item tag 0x0 [ 899.689908][ T838] hid-generic 0000:007F:FFFFFFFE.001F: unknown main item tag 0x0 [ 899.692750][ T838] hid-generic 0000:007F:FFFFFFFE.001F: unknown main item tag 0x0 [ 899.697542][ T838] hid-generic 0000:007F:FFFFFFFE.001F: unknown main item tag 0x0 [ 899.700138][ T838] hid-generic 0000:007F:FFFFFFFE.001F: unknown main item tag 0x0 [ 899.707701][ T838] hid-generic 0000:007F:FFFFFFFE.001F: unknown main item tag 0x0 [ 899.711042][ T838] hid-generic 0000:007F:FFFFFFFE.001F: unknown main item tag 0x0 [ 899.714244][ T838] hid-generic 0000:007F:FFFFFFFE.001F: unknown main item tag 0x0 [ 899.729157][ T838] hid-generic 0000:007F:FFFFFFFE.001F: hidraw1: HID v0.00 Device [syz1] on syz0 [ 899.771807][T23540] netlink: 'syz.6.3405': attribute type 4 has an invalid length. [ 900.134577][T23570] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3409'. [ 900.264294][T23576] netlink: 80 bytes leftover after parsing attributes in process `syz.8.3410'. [ 901.260980][T23604] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3413'. [ 901.380880][T23610] netlink: 40 bytes leftover after parsing attributes in process `syz.8.3421'. [ 902.180061][T23611] EXT4-fs error: 1575 callbacks suppressed [ 902.180073][T23611] EXT4-fs error (device sda1): ext4_lookup:1787: inode #2011: comm dhcpcd-run-hook: iget: checksum invalid [ 902.199725][T23612] EXT4-fs error (device sda1): ext4_lookup:1787: inode #2011: comm dhcpcd-run-hook: iget: checksum invalid [ 902.204550][T23612] EXT4-fs error (device sda1): ext4_lookup:1787: inode #2011: comm dhcpcd-run-hook: iget: checksum invalid [ 902.208565][T23612] EXT4-fs error (device sda1): ext4_lookup:1787: inode #2011: comm dhcpcd-run-hook: iget: checksum invalid [ 902.213437][T23612] EXT4-fs error (device sda1): ext4_lookup:1787: inode #2011: comm dhcpcd-run-hook: iget: checksum invalid [ 902.217341][T23612] EXT4-fs error (device sda1): ext4_lookup:1787: inode #2011: comm dhcpcd-run-hook: iget: checksum invalid [ 902.221279][T23612] EXT4-fs error (device sda1): ext4_lookup:1787: inode #2011: comm dhcpcd-run-hook: iget: checksum invalid [ 902.225131][T23612] EXT4-fs error (device sda1): ext4_lookup:1787: inode #2011: comm dhcpcd-run-hook: iget: checksum invalid [ 902.228878][T23612] EXT4-fs error (device sda1): ext4_lookup:1787: inode #2011: comm dhcpcd-run-hook: iget: checksum invalid [ 902.232666][T23612] EXT4-fs error (device sda1): ext4_lookup:1787: inode #2011: comm dhcpcd-run-hook: iget: checksum invalid [ 902.558632][T23622] netlink: 'syz.8.3417': attribute type 4 has an invalid length. [ 902.603098][ T59] usb 7-1: new high-speed USB device number 51 using dummy_hcd [ 902.781805][ T59] usb 7-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 902.786141][ T59] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 902.790148][ T59] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 902.794454][ T59] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 902.799601][ T59] usb 7-1: config 0 descriptor?? [ 902.804740][ T59] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 903.256430][ T1335] hid-generic 0000:007F:FFFFFFFE.0020: unknown main item tag 0x0 [ 903.259641][ T1335] hid-generic 0000:007F:FFFFFFFE.0020: unknown main item tag 0x0 [ 903.262969][ T1335] hid-generic 0000:007F:FFFFFFFE.0020: unknown main item tag 0x0 [ 903.265422][ T1335] hid-generic 0000:007F:FFFFFFFE.0020: unknown main item tag 0x0 [ 903.267850][ T1335] hid-generic 0000:007F:FFFFFFFE.0020: unknown main item tag 0x0 [ 903.270410][ T1335] hid-generic 0000:007F:FFFFFFFE.0020: unknown main item tag 0x0 [ 903.272830][ T1335] hid-generic 0000:007F:FFFFFFFE.0020: unknown main item tag 0x0 [ 903.275270][ T1335] hid-generic 0000:007F:FFFFFFFE.0020: unknown main item tag 0x0 [ 903.277688][ T1335] hid-generic 0000:007F:FFFFFFFE.0020: unknown main item tag 0x0 [ 903.280167][ T1335] hid-generic 0000:007F:FFFFFFFE.0020: unknown main item tag 0x0 [ 903.283061][ T1335] hid-generic 0000:007F:FFFFFFFE.0020: unknown main item tag 0x0 [ 903.285774][ T1335] hid-generic 0000:007F:FFFFFFFE.0020: unknown main item tag 0x0 [ 903.288208][ T1335] hid-generic 0000:007F:FFFFFFFE.0020: unknown main item tag 0x0 [ 903.290776][ T1335] hid-generic 0000:007F:FFFFFFFE.0020: unknown main item tag 0x0 [ 903.293164][ T1335] hid-generic 0000:007F:FFFFFFFE.0020: unknown main item tag 0x0 [ 903.295607][ T1335] hid-generic 0000:007F:FFFFFFFE.0020: unknown main item tag 0x0 [ 903.297904][ T1335] hid-generic 0000:007F:FFFFFFFE.0020: unknown main item tag 0x0 [ 903.300512][ T1335] hid-generic 0000:007F:FFFFFFFE.0020: unknown main item tag 0x0 [ 903.302881][ T1335] hid-generic 0000:007F:FFFFFFFE.0020: unknown main item tag 0x0 [ 903.305274][ T1335] hid-generic 0000:007F:FFFFFFFE.0020: unknown main item tag 0x0 [ 903.307616][ T1335] hid-generic 0000:007F:FFFFFFFE.0020: unknown main item tag 0x0 [ 903.309962][ T1335] hid-generic 0000:007F:FFFFFFFE.0020: unknown main item tag 0x0 [ 903.312463][ T1335] hid-generic 0000:007F:FFFFFFFE.0020: unknown main item tag 0x0 [ 903.314829][ T1335] hid-generic 0000:007F:FFFFFFFE.0020: unknown main item tag 0x0 [ 903.317139][ T1335] hid-generic 0000:007F:FFFFFFFE.0020: unknown main item tag 0x0 [ 903.319688][ T1335] hid-generic 0000:007F:FFFFFFFE.0020: unknown main item tag 0x0 [ 903.322159][ T1335] hid-generic 0000:007F:FFFFFFFE.0020: unknown main item tag 0x0 [ 903.324530][ T1335] hid-generic 0000:007F:FFFFFFFE.0020: unknown main item tag 0x0 [ 903.326887][ T1335] hid-generic 0000:007F:FFFFFFFE.0020: unknown main item tag 0x0 [ 903.329229][ T1335] hid-generic 0000:007F:FFFFFFFE.0020: unknown main item tag 0x0 [ 903.331694][ T1335] hid-generic 0000:007F:FFFFFFFE.0020: unknown main item tag 0x0 [ 903.334122][ T1335] hid-generic 0000:007F:FFFFFFFE.0020: unknown main item tag 0x0 [ 903.336527][ T1335] hid-generic 0000:007F:FFFFFFFE.0020: unknown main item tag 0x0 [ 903.338957][ T1335] hid-generic 0000:007F:FFFFFFFE.0020: unknown main item tag 0x0 [ 903.341461][ T1335] hid-generic 0000:007F:FFFFFFFE.0020: unknown main item tag 0x0 [ 903.343861][ T1335] hid-generic 0000:007F:FFFFFFFE.0020: unknown main item tag 0x0 [ 903.346189][ T1335] hid-generic 0000:007F:FFFFFFFE.0020: unknown main item tag 0x0 [ 903.348536][ T1335] hid-generic 0000:007F:FFFFFFFE.0020: unknown main item tag 0x0 [ 903.351089][ T1335] hid-generic 0000:007F:FFFFFFFE.0020: unknown main item tag 0x0 [ 903.353480][ T1335] hid-generic 0000:007F:FFFFFFFE.0020: unknown main item tag 0x0 [ 903.355801][ T1335] hid-generic 0000:007F:FFFFFFFE.0020: unknown main item tag 0x0 [ 903.358138][ T1335] hid-generic 0000:007F:FFFFFFFE.0020: unknown main item tag 0x0 [ 903.361193][ T1335] hid-generic 0000:007F:FFFFFFFE.0020: unknown main item tag 0x0 [ 903.365076][ T1335] hid-generic 0000:007F:FFFFFFFE.0020: hidraw1: HID v0.00 Device [syz1] on syz0 [ 904.424409][T23673] netlink: 'syz.7.3427': attribute type 4 has an invalid length. [ 904.493339][T23676] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3428'. [ 905.340882][ T1335] usb 7-1: USB disconnect, device number 51 [ 905.397998][ T59] hid-generic 0000:007F:FFFFFFFE.0021: unknown main item tag 0x0 [ 905.401420][ T59] hid-generic 0000:007F:FFFFFFFE.0021: unknown main item tag 0x0 [ 905.403798][ T59] hid-generic 0000:007F:FFFFFFFE.0021: unknown main item tag 0x0 [ 905.406186][ T59] hid-generic 0000:007F:FFFFFFFE.0021: unknown main item tag 0x0 [ 905.409827][ T59] hid-generic 0000:007F:FFFFFFFE.0021: unknown main item tag 0x0 [ 905.413107][ T59] hid-generic 0000:007F:FFFFFFFE.0021: unknown main item tag 0x0 [ 905.415622][ T59] hid-generic 0000:007F:FFFFFFFE.0021: unknown main item tag 0x0 [ 905.418091][ T59] hid-generic 0000:007F:FFFFFFFE.0021: unknown main item tag 0x0 [ 905.420936][ T59] hid-generic 0000:007F:FFFFFFFE.0021: unknown main item tag 0x0 [ 905.423550][ T59] hid-generic 0000:007F:FFFFFFFE.0021: unknown main item tag 0x0 [ 905.430250][ T59] hid-generic 0000:007F:FFFFFFFE.0021: unknown main item tag 0x0 [ 905.433553][ T59] hid-generic 0000:007F:FFFFFFFE.0021: unknown main item tag 0x0 [ 905.435949][ T59] hid-generic 0000:007F:FFFFFFFE.0021: unknown main item tag 0x0 [ 905.438326][ T59] hid-generic 0000:007F:FFFFFFFE.0021: unknown main item tag 0x0 [ 905.442824][ T59] hid-generic 0000:007F:FFFFFFFE.0021: unknown main item tag 0x0 [ 905.445452][ T59] hid-generic 0000:007F:FFFFFFFE.0021: unknown main item tag 0x0 [ 905.447864][ T59] hid-generic 0000:007F:FFFFFFFE.0021: unknown main item tag 0x0 [ 905.450512][ T59] hid-generic 0000:007F:FFFFFFFE.0021: unknown main item tag 0x0 [ 905.453117][ T59] hid-generic 0000:007F:FFFFFFFE.0021: unknown main item tag 0x0 [ 905.455585][ T59] hid-generic 0000:007F:FFFFFFFE.0021: unknown main item tag 0x0 [ 905.457968][ T59] hid-generic 0000:007F:FFFFFFFE.0021: unknown main item tag 0x0 [ 905.461426][ T59] hid-generic 0000:007F:FFFFFFFE.0021: unknown main item tag 0x0 [ 905.463844][ T59] hid-generic 0000:007F:FFFFFFFE.0021: unknown main item tag 0x0 [ 905.466261][ T59] hid-generic 0000:007F:FFFFFFFE.0021: unknown main item tag 0x0 [ 905.468639][ T59] hid-generic 0000:007F:FFFFFFFE.0021: unknown main item tag 0x0 [ 905.472317][ T59] hid-generic 0000:007F:FFFFFFFE.0021: unknown main item tag 0x0 [ 905.474843][ T59] hid-generic 0000:007F:FFFFFFFE.0021: unknown main item tag 0x0 [ 905.477280][ T59] hid-generic 0000:007F:FFFFFFFE.0021: unknown main item tag 0x0 [ 905.479661][ T59] hid-generic 0000:007F:FFFFFFFE.0021: unknown main item tag 0x0 [ 905.482826][ T59] hid-generic 0000:007F:FFFFFFFE.0021: unknown main item tag 0x0 [ 905.485293][ T59] hid-generic 0000:007F:FFFFFFFE.0021: unknown main item tag 0x0 [ 905.487726][ T59] hid-generic 0000:007F:FFFFFFFE.0021: unknown main item tag 0x0 [ 905.490228][ T59] hid-generic 0000:007F:FFFFFFFE.0021: unknown main item tag 0x0 [ 905.492589][ T59] hid-generic 0000:007F:FFFFFFFE.0021: unknown main item tag 0x0 [ 905.494932][ T59] hid-generic 0000:007F:FFFFFFFE.0021: unknown main item tag 0x0 [ 905.499173][ T59] hid-generic 0000:007F:FFFFFFFE.0021: unknown main item tag 0x0 [ 905.501786][ T59] hid-generic 0000:007F:FFFFFFFE.0021: unknown main item tag 0x0 [ 905.504211][ T59] hid-generic 0000:007F:FFFFFFFE.0021: unknown main item tag 0x0 [ 905.506532][ T59] hid-generic 0000:007F:FFFFFFFE.0021: unknown main item tag 0x0 [ 905.509003][ T59] hid-generic 0000:007F:FFFFFFFE.0021: unknown main item tag 0x0 [ 905.511928][ T59] hid-generic 0000:007F:FFFFFFFE.0021: unknown main item tag 0x0 [ 905.514301][ T59] hid-generic 0000:007F:FFFFFFFE.0021: unknown main item tag 0x0 [ 905.516627][ T59] hid-generic 0000:007F:FFFFFFFE.0021: unknown main item tag 0x0 [ 905.521785][ T59] hid-generic 0000:007F:FFFFFFFE.0021: hidraw1: HID v0.00 Device [syz1] on syz0 [ 905.641745][T23691] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3433'. [ 905.799064][T23693] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3432'. [ 906.055113][ T40] kauditd_printk_skb: 83 callbacks suppressed [ 906.055125][ T40] audit: type=1326 audit(2000000794.036:4323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23690 comm="syz.2.3432" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f93579 code=0x7ffc0000 [ 906.070295][ T40] audit: type=1326 audit(2000000794.046:4324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23690 comm="syz.2.3432" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f93579 code=0x7ffc0000 [ 906.078886][ T40] audit: type=1326 audit(2000000794.056:4325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23690 comm="syz.2.3432" exe="/syz-executor" sig=0 arch=40000003 syscall=288 compat=1 ip=0xf7f93579 code=0x7ffc0000 [ 906.113090][ T40] audit: type=1326 audit(2000000794.066:4326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23690 comm="syz.2.3432" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f93579 code=0x7ffc0000 [ 906.121664][ T40] audit: type=1326 audit(2000000794.066:4327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23690 comm="syz.2.3432" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f93579 code=0x7ffc0000 [ 906.130809][ T40] audit: type=1326 audit(2000000794.076:4328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23690 comm="syz.2.3432" exe="/syz-executor" sig=0 arch=40000003 syscall=185 compat=1 ip=0xf7f93579 code=0x7ffc0000 [ 906.138906][ T40] audit: type=1326 audit(2000000794.076:4329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23690 comm="syz.2.3432" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f93579 code=0x7ffc0000 [ 906.147364][ T40] audit: type=1326 audit(2000000794.076:4330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23690 comm="syz.2.3432" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f93579 code=0x7ffc0000 [ 906.155759][ T40] audit: type=1326 audit(2000000794.076:4331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23690 comm="syz.2.3432" exe="/syz-executor" sig=0 arch=40000003 syscall=426 compat=1 ip=0xf7f93579 code=0x7ffc0000 [ 906.164290][ T40] audit: type=1326 audit(2000000794.076:4332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23690 comm="syz.2.3432" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f93579 code=0x7ffc0000 [ 907.181897][T23740] EXT4-fs error: 775 callbacks suppressed [ 907.181908][T23740] EXT4-fs error (device sda1): ext4_lookup:1787: inode #2011: comm mkdir: iget: checksum invalid [ 907.200852][T23737] EXT4-fs error (device sda1): ext4_lookup:1787: inode #2011: comm dhcpcd-run-hook: iget: checksum invalid [ 907.205769][T23737] EXT4-fs error (device sda1): ext4_lookup:1787: inode #2011: comm dhcpcd-run-hook: iget: checksum invalid [ 907.209701][T23737] EXT4-fs error (device sda1): ext4_lookup:1787: inode #2011: comm dhcpcd-run-hook: iget: checksum invalid [ 907.215734][T23737] EXT4-fs error (device sda1): ext4_lookup:1787: inode #2011: comm dhcpcd-run-hook: iget: checksum invalid [ 907.219791][T23737] EXT4-fs error (device sda1): ext4_lookup:1787: inode #2011: comm dhcpcd-run-hook: iget: checksum invalid [ 907.271533][T23742] EXT4-fs error (device sda1): ext4_lookup:1787: inode #2011: comm cat: iget: checksum invalid [ 907.326965][T23743] EXT4-fs error (device sda1): ext4_lookup:1787: inode #2011: comm rm: iget: checksum invalid [ 907.406592][T23745] EXT4-fs error (device sda1): ext4_lookup:1787: inode #2011: comm rm: iget: checksum invalid [ 907.724919][T23747] netlink: 'syz.7.3438': attribute type 1 has an invalid length. [ 907.793373][T23747] 8021q: adding VLAN 0 to HW filter on device bond25 [ 907.796377][T23747] bond24: (slave bond25): making interface the new active one [ 907.799748][T23747] bond24: (slave bond25): Enslaving as an active interface with an up link [ 907.817395][T23751] netlink: 80 bytes leftover after parsing attributes in process `syz.2.3439'. [ 907.842850][T23747] 8021q: adding VLAN 0 to HW filter on device bond24 [ 909.121767][T23769] netlink: 'syz.2.3444': attribute type 4 has an invalid length. [ 909.153065][T23775] netlink: 40 bytes leftover after parsing attributes in process `syz.7.3445'. [ 909.293936][T23779] EXT4-fs error (device sda1): ext4_lookup:1787: inode #2011: comm dhcpcd-run-hook: iget: checksum invalid [ 909.672337][T23793] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3447'. [ 910.407346][T23800] netlink: 'syz.7.3448': attribute type 1 has an invalid length. [ 910.545569][T23800] 8021q: adding VLAN 0 to HW filter on device bond26 [ 910.603657][T23803] 8021q: adding VLAN 0 to HW filter on device bond27 [ 910.608397][T23803] bond26: (slave bond27): making interface the new active one [ 910.613597][T23803] bond26: (slave bond27): Enslaving as an active interface with an up link [ 910.665125][T23811] netlink: 40 bytes leftover after parsing attributes in process `syz.8.3449'. [ 912.203961][T17728] Bluetooth: Error in BCSP hdr checksum [ 912.461561][T17724] Bluetooth: Error in BCSP hdr checksum [ 912.567686][ T5999] hid-generic 0000:007F:FFFFFFFE.0022: unknown main item tag 0x0 [ 912.570344][ T5999] hid-generic 0000:007F:FFFFFFFE.0022: unknown main item tag 0x0 [ 912.572795][ T5999] hid-generic 0000:007F:FFFFFFFE.0022: unknown main item tag 0x0 [ 912.575141][ T5999] hid-generic 0000:007F:FFFFFFFE.0022: unknown main item tag 0x0 [ 912.578011][ T5999] hid-generic 0000:007F:FFFFFFFE.0022: unknown main item tag 0x0 [ 912.580885][ T5999] hid-generic 0000:007F:FFFFFFFE.0022: unknown main item tag 0x0 [ 912.583368][ T5999] hid-generic 0000:007F:FFFFFFFE.0022: unknown main item tag 0x0 [ 912.585674][ T5999] hid-generic 0000:007F:FFFFFFFE.0022: unknown main item tag 0x0 [ 912.588038][ T5999] hid-generic 0000:007F:FFFFFFFE.0022: unknown main item tag 0x0 [ 912.591232][ T5999] hid-generic 0000:007F:FFFFFFFE.0022: unknown main item tag 0x0 [ 912.593868][ T5999] hid-generic 0000:007F:FFFFFFFE.0022: unknown main item tag 0x0 [ 912.596424][ T5999] hid-generic 0000:007F:FFFFFFFE.0022: unknown main item tag 0x0 [ 912.598878][ T5999] hid-generic 0000:007F:FFFFFFFE.0022: unknown main item tag 0x0 [ 912.601666][ T5999] hid-generic 0000:007F:FFFFFFFE.0022: unknown main item tag 0x0 [ 912.604370][ T5999] hid-generic 0000:007F:FFFFFFFE.0022: unknown main item tag 0x0 [ 912.606852][ T5999] hid-generic 0000:007F:FFFFFFFE.0022: unknown main item tag 0x0 [ 912.609435][ T5999] hid-generic 0000:007F:FFFFFFFE.0022: unknown main item tag 0x0 [ 912.612182][ T5999] hid-generic 0000:007F:FFFFFFFE.0022: unknown main item tag 0x0 [ 912.616027][ T5999] hid-generic 0000:007F:FFFFFFFE.0022: unknown main item tag 0x0 [ 912.618544][ T5999] hid-generic 0000:007F:FFFFFFFE.0022: unknown main item tag 0x0 [ 912.621056][ T5999] hid-generic 0000:007F:FFFFFFFE.0022: unknown main item tag 0x0 [ 912.623758][ T5999] hid-generic 0000:007F:FFFFFFFE.0022: unknown main item tag 0x0 [ 912.626766][ T5999] hid-generic 0000:007F:FFFFFFFE.0022: unknown main item tag 0x0 [ 912.629601][ T5999] hid-generic 0000:007F:FFFFFFFE.0022: unknown main item tag 0x0 [ 912.632443][ T5999] hid-generic 0000:007F:FFFFFFFE.0022: unknown main item tag 0x0 [ 912.635106][ T5999] hid-generic 0000:007F:FFFFFFFE.0022: unknown main item tag 0x0 [ 912.637912][ T5999] hid-generic 0000:007F:FFFFFFFE.0022: unknown main item tag 0x0 [ 912.640960][ T5999] hid-generic 0000:007F:FFFFFFFE.0022: unknown main item tag 0x0 [ 912.643720][ T5999] hid-generic 0000:007F:FFFFFFFE.0022: unknown main item tag 0x0 [ 912.646795][ T5999] hid-generic 0000:007F:FFFFFFFE.0022: unknown main item tag 0x0 [ 912.649906][ T5999] hid-generic 0000:007F:FFFFFFFE.0022: unknown main item tag 0x0 [ 912.652807][ T5999] hid-generic 0000:007F:FFFFFFFE.0022: unknown main item tag 0x0 [ 912.655420][ T5999] hid-generic 0000:007F:FFFFFFFE.0022: unknown main item tag 0x0 [ 912.658375][ T5999] hid-generic 0000:007F:FFFFFFFE.0022: unknown main item tag 0x0 [ 912.661135][ T5999] hid-generic 0000:007F:FFFFFFFE.0022: unknown main item tag 0x0 [ 912.663713][ T5999] hid-generic 0000:007F:FFFFFFFE.0022: unknown main item tag 0x0 [ 912.667026][ T5999] hid-generic 0000:007F:FFFFFFFE.0022: unknown main item tag 0x0 [ 912.670299][ T5999] hid-generic 0000:007F:FFFFFFFE.0022: unknown main item tag 0x0 [ 912.673543][ T5999] hid-generic 0000:007F:FFFFFFFE.0022: unknown main item tag 0x0 [ 912.676419][ T5999] hid-generic 0000:007F:FFFFFFFE.0022: unknown main item tag 0x0 [ 912.679710][ T5999] hid-generic 0000:007F:FFFFFFFE.0022: unknown main item tag 0x0 [ 912.682404][ T5999] hid-generic 0000:007F:FFFFFFFE.0022: unknown main item tag 0x0 [ 912.684886][ T5999] hid-generic 0000:007F:FFFFFFFE.0022: unknown main item tag 0x0 [ 912.692575][ T5999] hid-generic 0000:007F:FFFFFFFE.0022: hidraw1: HID v0.00 Device [syz1] on syz0 [ 912.703003][T23847] EXT4-fs error: 527 callbacks suppressed [ 912.703013][T23847] EXT4-fs error (device sda1): ext4_lookup:1787: inode #1109: comm fido_id: iget: checksum invalid [ 912.800052][T23854] gfs2: path_lookup on  returned error -2 [ 913.210175][T23863] netlink: 'syz.6.3459': attribute type 1 has an invalid length. [ 913.233825][T23863] 8021q: adding VLAN 0 to HW filter on device bond6 [ 913.239111][T23863] bond5: (slave bond6): making interface the new active one [ 913.245040][T23863] bond5: (slave bond6): Enslaving as an active interface with an up link [ 913.282433][T23863] 8021q: adding VLAN 0 to HW filter on device bond5 [ 913.969900][ T5958] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 914.271000][T23882] netlink: 40 bytes leftover after parsing attributes in process `syz.8.3463'. [ 914.302328][ T40] kauditd_printk_skb: 43 callbacks suppressed [ 914.302338][ T40] audit: type=1326 audit(2000000802.286:4376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23880 comm="syz.8.3463" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf711e579 code=0x7ffc0000 [ 914.311482][ T40] audit: type=1326 audit(2000000802.286:4377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23880 comm="syz.8.3463" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf711e579 code=0x7ffc0000 [ 914.318087][ T40] audit: type=1326 audit(2000000802.286:4378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23880 comm="syz.8.3463" exe="/syz-executor" sig=0 arch=40000003 syscall=288 compat=1 ip=0xf711e579 code=0x7ffc0000 [ 914.340850][ T40] audit: type=1326 audit(2000000802.286:4379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23880 comm="syz.8.3463" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf711e579 code=0x7ffc0000 [ 914.347566][ T40] audit: type=1326 audit(2000000802.286:4380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23880 comm="syz.8.3463" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf711e579 code=0x7ffc0000 [ 914.353521][T23886] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3464'. [ 914.361966][ T40] audit: type=1326 audit(2000000802.286:4381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23880 comm="syz.8.3463" exe="/syz-executor" sig=0 arch=40000003 syscall=185 compat=1 ip=0xf711e579 code=0x7ffc0000 [ 914.369305][ T40] audit: type=1326 audit(2000000802.286:4382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23880 comm="syz.8.3463" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf711e579 code=0x7ffc0000 [ 914.452355][ T40] audit: type=1326 audit(2000000802.286:4383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23880 comm="syz.8.3463" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf711e579 code=0x7ffc0000 [ 914.484734][ T40] audit: type=1326 audit(2000000802.286:4384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23880 comm="syz.8.3463" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf711e579 code=0x7ffc0000 [ 914.506405][ T40] audit: type=1326 audit(2000000802.286:4385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23880 comm="syz.8.3463" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf711e579 code=0x7ffc0000 [ 914.525330][T23888] EXT4-fs error (device sda1): ext4_lookup:1787: inode #2011: comm dhcpcd-run-hook: iget: checksum invalid [ 914.585568][T23890] EXT4-fs error (device sda1): ext4_lookup:1787: inode #2011: comm dhcpcd-run-hook: iget: checksum invalid [ 914.590219][T23890] EXT4-fs error (device sda1): ext4_lookup:1787: inode #2011: comm dhcpcd-run-hook: iget: checksum invalid [ 914.594577][T23890] EXT4-fs error (device sda1): ext4_lookup:1787: inode #2011: comm dhcpcd-run-hook: iget: checksum invalid [ 914.598830][T23890] EXT4-fs error (device sda1): ext4_lookup:1787: inode #2011: comm dhcpcd-run-hook: iget: checksum invalid [ 914.602931][T23890] EXT4-fs error (device sda1): ext4_lookup:1787: inode #2011: comm dhcpcd-run-hook: iget: checksum invalid [ 914.606743][T23890] EXT4-fs error (device sda1): ext4_lookup:1787: inode #2011: comm dhcpcd-run-hook: iget: checksum invalid [ 914.610569][T23890] EXT4-fs error (device sda1): ext4_lookup:1787: inode #2011: comm dhcpcd-run-hook: iget: checksum invalid [ 914.614444][T23890] EXT4-fs error (device sda1): ext4_lookup:1787: inode #2011: comm dhcpcd-run-hook: iget: checksum invalid [ 915.685835][T23917] netlink: 'syz.7.3468': attribute type 1 has an invalid length. [ 915.812293][T23921] 8021q: adding VLAN 0 to HW filter on device bond29 [ 915.838227][T23921] bond28: (slave bond29): making interface the new active one [ 915.845639][T23921] bond28: (slave bond29): Enslaving as an active interface with an up link [ 915.944012][T23917] 8021q: adding VLAN 0 to HW filter on device bond28 [ 916.202472][T23928] gfs2: path_lookup on  returned error -2 [ 916.947504][T17079] Bluetooth: Error in BCSP hdr checksum [ 916.999738][T17723] Bluetooth: Error in BCSP hdr checksum [ 917.497613][T23939] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3480'. [ 918.529681][ T5959] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 919.081571][T23961] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3476'. [ 919.197493][T23964] EXT4-fs error: 255 callbacks suppressed [ 919.197510][T23964] EXT4-fs error (device sda1): ext4_lookup:1787: inode #2011: comm dhcpcd-run-hook: iget: checksum invalid [ 919.209764][T23965] EXT4-fs error (device sda1): ext4_lookup:1787: inode #2011: comm dhcpcd-run-hook: iget: checksum invalid [ 919.215433][T23965] EXT4-fs error (device sda1): ext4_lookup:1787: inode #2011: comm dhcpcd-run-hook: iget: checksum invalid [ 919.221657][T23965] EXT4-fs error (device sda1): ext4_lookup:1787: inode #2011: comm dhcpcd-run-hook: iget: checksum invalid [ 919.225194][T23965] EXT4-fs error (device sda1): ext4_lookup:1787: inode #2011: comm dhcpcd-run-hook: iget: checksum invalid [ 919.229173][T23965] EXT4-fs error (device sda1): ext4_lookup:1787: inode #2011: comm dhcpcd-run-hook: iget: checksum invalid [ 919.236028][T23965] EXT4-fs error (device sda1): ext4_lookup:1787: inode #2011: comm dhcpcd-run-hook: iget: checksum invalid [ 919.240390][T23965] EXT4-fs error (device sda1): ext4_lookup:1787: inode #2011: comm dhcpcd-run-hook: iget: checksum invalid [ 919.245417][T23965] EXT4-fs error (device sda1): ext4_lookup:1787: inode #2011: comm dhcpcd-run-hook: iget: checksum invalid [ 919.250665][T23965] EXT4-fs error (device sda1): ext4_lookup:1787: inode #2011: comm dhcpcd-run-hook: iget: checksum invalid [ 919.624939][T23972] netlink: 'syz.2.3477': attribute type 1 has an invalid length. [ 919.712328][T23972] 8021q: adding VLAN 0 to HW filter on device bond20 [ 919.800522][T23972] bond19: (slave bond20): making interface the new active one [ 919.830468][T23972] bond19: (slave bond20): Enslaving as an active interface with an up link [ 919.970179][T23972] 8021q: adding VLAN 0 to HW filter on device bond19 [ 919.974470][T23981] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 919.994241][T23981] netlink: 80 bytes leftover after parsing attributes in process `syz.6.3478'. [ 920.036864][T23988] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 920.048965][T23988] netlink: 80 bytes leftover after parsing attributes in process `syz.7.3481'. [ 921.713981][T24024] netlink: 40 bytes leftover after parsing attributes in process `syz.7.3483'. [ 921.764881][ T40] kauditd_printk_skb: 28 callbacks suppressed [ 921.764897][ T40] audit: type=1326 audit(2000000809.737:4414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24020 comm="syz.7.3483" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f13579 code=0x7ffc0000 [ 921.782464][ T40] audit: type=1326 audit(2000000809.737:4415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24020 comm="syz.7.3483" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f13579 code=0x7ffc0000 [ 921.792306][ T40] audit: type=1326 audit(2000000809.747:4416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24020 comm="syz.7.3483" exe="/syz-executor" sig=0 arch=40000003 syscall=288 compat=1 ip=0xf7f13579 code=0x7ffc0000 [ 921.802295][ T40] audit: type=1326 audit(2000000809.747:4417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24020 comm="syz.7.3483" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f13579 code=0x7ffc0000 [ 921.811472][ T40] audit: type=1326 audit(2000000809.747:4418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24020 comm="syz.7.3483" exe="/syz-executor" sig=0 arch=40000003 syscall=185 compat=1 ip=0xf7f13579 code=0x7ffc0000 [ 921.819663][ T40] audit: type=1326 audit(2000000809.747:4419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24020 comm="syz.7.3483" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f13579 code=0x7ffc0000 [ 921.826474][ T40] audit: type=1326 audit(2000000809.757:4420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24020 comm="syz.7.3483" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f13579 code=0x7ffc0000 [ 921.833413][ T40] audit: type=1326 audit(2000000809.757:4421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24020 comm="syz.7.3483" exe="/syz-executor" sig=0 arch=40000003 syscall=426 compat=1 ip=0xf7f13579 code=0x7ffc0000 [ 921.840408][ T40] audit: type=1326 audit(2000000809.757:4422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24020 comm="syz.7.3483" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f13579 code=0x7ffc0000 [ 921.847560][ T40] audit: type=1326 audit(2000000809.757:4423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24020 comm="syz.7.3483" exe="/syz-executor" sig=0 arch=40000003 syscall=277 compat=1 ip=0xf7f13579 code=0x7ffc0000 [ 922.851721][T24057] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3486'. [ 924.533401][T24091] netlink: 80 bytes leftover after parsing attributes in process `syz.6.3492'. [ 924.541055][T24085] netlink: 'syz.2.3491': attribute type 4 has an invalid length. [ 924.887052][T24101] netlink: 80 bytes leftover after parsing attributes in process `syz.8.3495'. [ 924.952819][T24102] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3493'. [ 925.256676][T24109] EXT4-fs error: 1178 callbacks suppressed [ 925.256689][T24109] EXT4-fs error (device sda1): ext4_lookup:1787: inode #2011: comm dhcpcd-run-hook: iget: checksum invalid [ 925.267408][T24112] EXT4-fs error (device sda1): ext4_lookup:1787: inode #2011: comm dhcpcd-run-hook: iget: checksum invalid [ 925.271526][T24112] EXT4-fs error (device sda1): ext4_lookup:1787: inode #2011: comm dhcpcd-run-hook: iget: checksum invalid [ 925.276183][T24112] EXT4-fs error (device sda1): ext4_lookup:1787: inode #2011: comm dhcpcd-run-hook: iget: checksum invalid [ 925.280317][T24112] EXT4-fs error (device sda1): ext4_lookup:1787: inode #2011: comm dhcpcd-run-hook: iget: checksum invalid [ 925.284325][T24112] EXT4-fs error (device sda1): ext4_lookup:1787: inode #2011: comm dhcpcd-run-hook: iget: checksum invalid [ 925.288301][T24112] EXT4-fs error (device sda1): ext4_lookup:1787: inode #2011: comm dhcpcd-run-hook: iget: checksum invalid [ 925.294499][T24112] EXT4-fs error (device sda1): ext4_lookup:1787: inode #2011: comm dhcpcd-run-hook: iget: checksum invalid [ 925.299449][T24112] EXT4-fs error (device sda1): ext4_lookup:1787: inode #2011: comm dhcpcd-run-hook: iget: checksum invalid [ 925.303804][T24112] EXT4-fs error (device sda1): ext4_lookup:1787: inode #2011: comm dhcpcd-run-hook: iget: checksum invalid [ 926.345609][T24151] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3498'. [ 926.639358][T17744] Bluetooth: Error in BCSP hdr checksum [ 926.899456][T17728] Bluetooth: Error in BCSP hdr checksum [ 928.438993][ T5959] Bluetooth: hci1: command 0x1003 tx timeout [ 928.441180][ T5958] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 928.820121][T24198] gfs2: path_lookup on  returned error -2 [ 929.583221][T24209] netlink: 'syz.2.3509': attribute type 4 has an invalid length. [ 929.683121][T24211] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3510'. [ 930.840387][T24232] gfs2: path_lookup on  returned error -2 [ 930.921620][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 930.923686][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 930.965237][T24235] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 930.974163][T24235] netlink: 80 bytes leftover after parsing attributes in process `syz.7.3516'. [ 931.143542][T24241] gfs2: path_lookup on  returned error -2 [ 931.964742][T24248] netlink: 'syz.7.3519': attribute type 4 has an invalid length. [ 932.013598][T24246] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3518'. [ 932.016363][T24246] netlink: 'syz.2.3518': attribute type 5 has an invalid length. [ 932.019137][T24246] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3518'. [ 932.025333][T24246] geneve3: entered promiscuous mode [ 932.027049][T24246] geneve3: entered allmulticast mode [ 932.447738][T24257] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3521'. [ 932.528790][T20050] usb 7-1: new high-speed USB device number 52 using dummy_hcd [ 932.733882][T24262] netlink: 80 bytes leftover after parsing attributes in process `syz.8.3523'. [ 932.759190][T20050] usb 7-1: Using ep0 maxpacket: 8 [ 932.768297][T20050] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 201, changing to 11 [ 932.772260][T20050] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 49481, setting to 1024 [ 932.775679][T20050] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 932.778521][T20050] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 932.786118][T20050] usb 7-1: config 0 descriptor?? [ 933.032470][T20050] iowarrior 7-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 933.234213][T20050] usb 7-1: USB disconnect, device number 52 [ 934.003207][T24287] netlink: 40 bytes leftover after parsing attributes in process `syz.7.3527'. [ 934.042267][ T40] kauditd_printk_skb: 24 callbacks suppressed [ 934.042279][ T40] audit: type=1326 audit(2000000822.017:4448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24284 comm="syz.7.3527" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f13579 code=0x7ffc0000 [ 934.054090][ T40] audit: type=1326 audit(2000000822.017:4449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24284 comm="syz.7.3527" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f13579 code=0x7ffc0000 [ 934.081463][ T40] audit: type=1326 audit(2000000822.017:4450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24284 comm="syz.7.3527" exe="/syz-executor" sig=0 arch=40000003 syscall=288 compat=1 ip=0xf7f13579 code=0x7ffc0000 [ 934.095751][ T40] audit: type=1326 audit(2000000822.017:4451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24284 comm="syz.7.3527" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f13579 code=0x7ffc0000 [ 934.110544][ T40] audit: type=1326 audit(2000000822.017:4452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24284 comm="syz.7.3527" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f13579 code=0x7ffc0000 [ 934.118423][T24289] EXT4-fs error: 650 callbacks suppressed [ 934.118432][T24289] EXT4-fs error (device sda1): ext4_lookup:1787: inode #2011: comm dhcpcd-run-hook: iget: checksum invalid [ 934.125993][ T40] audit: type=1326 audit(2000000822.027:4453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24284 comm="syz.7.3527" exe="/syz-executor" sig=0 arch=40000003 syscall=185 compat=1 ip=0xf7f13579 code=0x7ffc0000 [ 934.126899][T24290] EXT4-fs error (device sda1): ext4_lookup:1787: inode #2011: comm dhcpcd-run-hook: iget: checksum invalid [ 934.132876][ T40] audit: type=1326 audit(2000000822.027:4454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24284 comm="syz.7.3527" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f13579 code=0x7ffc0000 [ 934.145054][ T40] audit: type=1326 audit(2000000822.027:4455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24284 comm="syz.7.3527" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f13579 code=0x7ffc0000 [ 934.152452][ T40] audit: type=1326 audit(2000000822.027:4456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24284 comm="syz.7.3527" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f13579 code=0x7ffc0000 [ 934.159360][ T40] audit: type=1326 audit(2000000822.027:4457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24284 comm="syz.7.3527" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f13579 code=0x7ffc0000 [ 934.170713][T24290] EXT4-fs error (device sda1): ext4_lookup:1787: inode #2011: comm dhcpcd-run-hook: iget: checksum invalid [ 934.174677][T24290] EXT4-fs error (device sda1): ext4_lookup:1787: inode #2011: comm dhcpcd-run-hook: iget: checksum invalid [ 934.178499][T24290] EXT4-fs error (device sda1): ext4_lookup:1787: inode #2011: comm dhcpcd-run-hook: iget: checksum invalid [ 934.183065][T24290] EXT4-fs error (device sda1): ext4_lookup:1787: inode #2011: comm dhcpcd-run-hook: iget: checksum invalid [ 934.186934][T24290] EXT4-fs error (device sda1): ext4_lookup:1787: inode #2011: comm dhcpcd-run-hook: iget: checksum invalid [ 934.191534][T24290] EXT4-fs error (device sda1): ext4_lookup:1787: inode #2011: comm dhcpcd-run-hook: iget: checksum invalid [ 934.195393][T24290] EXT4-fs error (device sda1): ext4_lookup:1787: inode #2011: comm dhcpcd-run-hook: iget: checksum invalid [ 934.199708][T24290] EXT4-fs error (device sda1): ext4_lookup:1787: inode #2011: comm dhcpcd-run-hook: iget: checksum invalid [ 934.637821][T24305] netlink: 'syz.6.3529': attribute type 1 has an invalid length. [ 934.639465][T24307] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3530'. [ 934.846264][T24314] 8021q: adding VLAN 0 to HW filter on device bond8 [ 934.856546][T24314] bond7: (slave bond8): making interface the new active one [ 934.860076][T24314] bond7: (slave bond8): Enslaving as an active interface with an up link [ 934.923468][T24319] gfs2: path_lookup on  returned error -2 [ 935.017639][T24305] 8021q: adding VLAN 0 to HW filter on device bond7 [ 935.840381][T24354] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 935.846473][T24354] netlink: 80 bytes leftover after parsing attributes in process `syz.2.3535'. [ 936.232115][ T839] usb 11-1: new high-speed USB device number 31 using dummy_hcd [ 936.378681][ T839] usb 11-1: Using ep0 maxpacket: 8 [ 936.389777][ T839] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 201, changing to 11 [ 936.393308][ T839] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 49481, setting to 1024 [ 936.396740][ T839] usb 11-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 936.402272][ T839] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 936.408967][ T839] usb 11-1: config 0 descriptor?? [ 936.672997][ T839] iowarrior 11-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 937.001588][T24371] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3536'. [ 937.004812][T24371] netlink: 'syz.8.3536': attribute type 5 has an invalid length. [ 937.007298][T24371] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3536'. [ 937.010173][ T839] usb 11-1: USB disconnect, device number 31 [ 937.090938][T24371] geneve3: entered promiscuous mode [ 937.092840][T24371] geneve3: entered allmulticast mode [ 937.433391][T24380] netlink: 80 bytes leftover after parsing attributes in process `syz.2.3539'. [ 937.653562][ T839] usb 13-1: new high-speed USB device number 10 using dummy_hcd [ 937.867175][ T839] usb 13-1: Using ep0 maxpacket: 8 [ 937.881026][ T839] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 201, changing to 11 [ 937.884651][ T839] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 49481, setting to 1024 [ 937.888414][ T839] usb 13-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 937.891388][ T839] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 937.914476][ T839] usb 13-1: config 0 descriptor?? [ 938.049971][T24388] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3541'. [ 938.208593][T17726] Bluetooth: Error in BCSP hdr checksum [ 938.242884][ T839] iowarrior 13-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 938.444043][T20050] usb 13-1: USB disconnect, device number 10 [ 938.512342][T24409] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 938.517381][T24409] netlink: 80 bytes leftover after parsing attributes in process `syz.2.3543'. [ 938.763952][T24419] gfs2: path_lookup on  returned error -2 [ 939.118747][T24433] EXT4-fs error: 1193 callbacks suppressed [ 939.118760][T24433] EXT4-fs error (device sda1): ext4_lookup:1787: inode #2011: comm dhcpcd-run-hook: iget: checksum invalid [ 939.127440][T24433] EXT4-fs error (device sda1): ext4_lookup:1787: inode #2011: comm dhcpcd-run-hook: iget: checksum invalid [ 939.131346][T24433] EXT4-fs error (device sda1): ext4_lookup:1787: inode #2011: comm dhcpcd-run-hook: iget: checksum invalid [ 939.135268][T24433] EXT4-fs error (device sda1): ext4_lookup:1787: inode #2011: comm dhcpcd-run-hook: iget: checksum invalid [ 939.141132][T24433] EXT4-fs error (device sda1): ext4_lookup:1787: inode #2011: comm dhcpcd-run-hook: iget: checksum invalid [ 939.146211][T24433] EXT4-fs error (device sda1): ext4_lookup:1787: inode #2011: comm dhcpcd-run-hook: iget: checksum invalid [ 939.151385][T24433] EXT4-fs error (device sda1): ext4_lookup:1787: inode #2011: comm dhcpcd-run-hook: iget: checksum invalid [ 939.155903][T24433] EXT4-fs error (device sda1): ext4_lookup:1787: inode #2011: comm dhcpcd-run-hook: iget: checksum invalid [ 939.159906][T24433] EXT4-fs error (device sda1): ext4_lookup:1787: inode #2011: comm dhcpcd-run-hook: iget: checksum invalid [ 939.164765][T24433] EXT4-fs error (device sda1): ext4_lookup:1787: inode #2011: comm dhcpcd-run-hook: iget: checksum invalid [ 939.488552][T17726] Bluetooth: Error in BCSP hdr checksum [ 939.536155][T24441] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 939.544656][T24441] netlink: 80 bytes leftover after parsing attributes in process `syz.8.3546'. [ 939.958380][ T5958] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 939.958399][T18011] Bluetooth: hci1: command 0x1003 tx timeout [ 940.167317][T24452] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3548'. [ 940.668427][T24464] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 940.687367][T24464] netlink: 80 bytes leftover after parsing attributes in process `syz.7.3550'. [ 941.238290][ T5959] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 941.644620][T24483] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3555'. [ 941.738627][T20050] usb 13-1: new high-speed USB device number 11 using dummy_hcd [ 942.001078][T17726] Bluetooth: Error in BCSP hdr checksum [ 942.138233][T20050] usb 13-1: Using ep0 maxpacket: 8 [ 942.141463][T20050] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 201, changing to 11 [ 942.145046][T20050] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 49481, setting to 1024 [ 942.148609][T20050] usb 13-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 942.151345][T20050] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 942.155349][T20050] usb 13-1: config 0 descriptor?? [ 942.212110][T24488] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 942.219604][T24488] netlink: 80 bytes leftover after parsing attributes in process `syz.7.3556'. [ 942.258300][T17726] Bluetooth: Error in BCSP hdr checksum [ 942.416905][T20050] iowarrior 13-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 942.602574][T24493] gfs2: path_lookup on  returned error -2 [ 942.617172][T20050] usb 13-1: USB disconnect, device number 11 [ 942.673670][T24495] netlink: 'syz.7.3558': attribute type 1 has an invalid length. [ 943.395418][T24505] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 943.406052][T24505] netlink: 80 bytes leftover after parsing attributes in process `syz.8.3560'. [ 943.798346][ T5959] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 943.798930][ T5958] Bluetooth: hci1: command 0x1003 tx timeout [ 943.828063][ T1335] usb 11-1: new high-speed USB device number 32 using dummy_hcd [ 943.869482][T24516] netlink: 40 bytes leftover after parsing attributes in process `syz.8.3563'. [ 943.915321][ T40] kauditd_printk_skb: 28 callbacks suppressed [ 943.915332][ T40] audit: type=1326 audit(2000000831.888:4486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24513 comm="syz.8.3563" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf711e579 code=0x7ffc0000 [ 943.932211][ T40] audit: type=1326 audit(2000000831.908:4487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24513 comm="syz.8.3563" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf711e579 code=0x7ffc0000 [ 943.939054][ T40] audit: type=1326 audit(2000000831.908:4488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24513 comm="syz.8.3563" exe="/syz-executor" sig=0 arch=40000003 syscall=288 compat=1 ip=0xf711e579 code=0x7ffc0000 [ 943.945834][ T40] audit: type=1326 audit(2000000831.908:4489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24513 comm="syz.8.3563" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf711e579 code=0x7ffc0000 [ 943.952837][ T40] audit: type=1326 audit(2000000831.908:4490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24513 comm="syz.8.3563" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf711e579 code=0x7ffc0000 [ 943.959829][ T40] audit: type=1326 audit(2000000831.908:4491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24513 comm="syz.8.3563" exe="/syz-executor" sig=0 arch=40000003 syscall=185 compat=1 ip=0xf711e579 code=0x7ffc0000 [ 943.966579][ T40] audit: type=1326 audit(2000000831.908:4492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24513 comm="syz.8.3563" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf711e579 code=0x7ffc0000 [ 943.973519][ T40] audit: type=1326 audit(2000000831.908:4493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24513 comm="syz.8.3563" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf711e579 code=0x7ffc0000 [ 943.981590][ T40] audit: type=1326 audit(2000000831.908:4494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24513 comm="syz.8.3563" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf711e579 code=0x7ffc0000 [ 943.990945][ T40] audit: type=1326 audit(2000000831.908:4495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24513 comm="syz.8.3563" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf711e579 code=0x7ffc0000 [ 944.005192][ T1335] usb 11-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 944.010677][ T1335] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 944.029234][ T1335] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 944.033582][ T1335] usb 11-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 944.039271][ T1335] usb 11-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 944.042798][ T1335] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 944.047476][ T1335] usb 11-1: config 0 descriptor?? [ 944.055165][T24509] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 944.139490][T24524] EXT4-fs error: 236 callbacks suppressed [ 944.139501][T24524] EXT4-fs error (device sda1): ext4_lookup:1787: inode #2011: comm cat: iget: checksum invalid [ 944.194531][T24525] EXT4-fs error (device sda1): ext4_lookup:1787: inode #2011: comm rm: iget: checksum invalid [ 944.254915][T24528] EXT4-fs error (device sda1): ext4_lookup:1787: inode #2011: comm rm: iget: checksum invalid [ 944.390663][T24530] EXT4-fs error (device sda1): ext4_lookup:1787: inode #2011: comm dhcpcd-run-hook: iget: checksum invalid [ 944.402967][T24531] EXT4-fs error (device sda1): ext4_lookup:1787: inode #2011: comm dhcpcd-run-hook: iget: checksum invalid [ 944.406955][T24531] EXT4-fs error (device sda1): ext4_lookup:1787: inode #2011: comm dhcpcd-run-hook: iget: checksum invalid [ 944.411156][T24531] EXT4-fs error (device sda1): ext4_lookup:1787: inode #2011: comm dhcpcd-run-hook: iget: checksum invalid [ 944.414800][T24531] EXT4-fs error (device sda1): ext4_lookup:1787: inode #2011: comm dhcpcd-run-hook: iget: checksum invalid [ 944.419812][T24531] EXT4-fs error (device sda1): ext4_lookup:1787: inode #2011: comm dhcpcd-run-hook: iget: checksum invalid [ 944.425183][T24531] EXT4-fs error (device sda1): ext4_lookup:1787: inode #2011: comm dhcpcd-run-hook: iget: checksum invalid [ 944.470127][ C3] raw-gadget.0 gadget.6: ignoring, device is not running [ 944.472582][ C3] raw-gadget.0 gadget.6: ignoring, device is not running [ 944.475043][ C3] raw-gadget.0 gadget.6: ignoring, device is not running [ 944.477249][ T1335] usbhid 11-1:0.0: can't add hid device: -32 [ 944.479311][ T1335] usbhid 11-1:0.0: probe with driver usbhid failed with error -32 [ 944.483329][ T1335] usb 11-1: USB disconnect, device number 32 [ 945.108467][T24560] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3568'. [ 945.113123][T17771] Bluetooth: Error in BCSP hdr checksum [ 945.181500][T24554] netlink: 'syz.6.3567': attribute type 4 has an invalid length. [ 945.444003][T24575] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3569'. [ 946.208759][T24594] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 946.214026][T24594] netlink: 80 bytes leftover after parsing attributes in process `syz.7.3571'. [ 946.447507][T24609] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3572'. [ 946.758622][T17771] Bluetooth: Error in BCSP hdr checksum [ 946.847938][ T5959] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 947.018222][T17723] Bluetooth: Error in BCSP hdr checksum [ 947.288155][ T1335] usb 13-1: new high-speed USB device number 12 using dummy_hcd [ 947.449962][ T1335] usb 13-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 947.453698][ T1335] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 947.457121][ T1335] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 947.460739][ T1335] usb 13-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 947.464664][ T1335] usb 13-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 947.467455][ T1335] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 947.471326][ T1335] usb 13-1: config 0 descriptor?? [ 947.474148][T24627] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 947.895357][ T1335] usbhid 13-1:0.0: can't add hid device: -71 [ 947.897748][ T1335] usbhid 13-1:0.0: probe with driver usbhid failed with error -71 [ 947.905153][ T1335] usb 13-1: USB disconnect, device number 12 [ 947.991434][T24635] netlink: 'syz.7.3577': attribute type 4 has an invalid length. [ 948.024662][T24639] gfs2: path_lookup on  returned error -2 [ 948.131280][T24642] netlink: 40 bytes leftover after parsing attributes in process `syz.7.3579'. [ 948.468892][T24654] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 948.487119][T24654] netlink: 80 bytes leftover after parsing attributes in process `syz.8.3580'. [ 948.527896][ T5959] Bluetooth: hci4: command 0x1003 tx timeout [ 948.530001][ T5958] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 948.685238][T24662] netlink: 84 bytes leftover after parsing attributes in process `syz.7.3581'. [ 949.117856][T20050] usb 12-1: new high-speed USB device number 23 using dummy_hcd [ 949.200004][T24671] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 949.204019][T24671] netlink: 80 bytes leftover after parsing attributes in process `syz.2.3583'. [ 949.277816][T20050] usb 12-1: Using ep0 maxpacket: 8 [ 949.286776][T20050] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 201, changing to 11 [ 949.291068][T20050] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 49481, setting to 1024 [ 949.294725][T20050] usb 12-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 949.297445][T20050] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 949.319461][T20050] usb 12-1: config 0 descriptor?? [ 949.567535][T20050] iowarrior 12-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 949.773567][ T59] usb 12-1: USB disconnect, device number 23 [ 950.437412][T24685] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(7) [ 950.439560][T24685] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 950.443334][T24685] vhci_hcd vhci_hcd.0: Device attached [ 950.610823][T24690] gfs2: path_lookup on  returned error -2 [ 950.677916][ T6249] usb 49-1: new low-speed USB device number 16 using vhci_hcd [ 950.721406][T24692] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3589'. [ 951.737267][T24702] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 951.746148][T24702] netlink: 80 bytes leftover after parsing attributes in process `syz.7.3590'. [ 952.286245][T24711] netlink: 40 bytes leftover after parsing attributes in process `syz.8.3592'. [ 952.330437][ T40] kauditd_printk_skb: 65 callbacks suppressed [ 952.330454][ T40] audit: type=1326 audit(2000000840.298:4561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24709 comm="syz.8.3592" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf711e579 code=0x7ffc0000 [ 952.340045][ T40] audit: type=1326 audit(2000000840.298:4562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24709 comm="syz.8.3592" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf711e579 code=0x7ffc0000 [ 952.346877][ T40] audit: type=1326 audit(2000000840.298:4563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24709 comm="syz.8.3592" exe="/syz-executor" sig=0 arch=40000003 syscall=288 compat=1 ip=0xf711e579 code=0x7ffc0000 [ 952.353788][ T40] audit: type=1326 audit(2000000840.298:4564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24709 comm="syz.8.3592" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf711e579 code=0x7ffc0000 [ 952.360730][ T40] audit: type=1326 audit(2000000840.298:4565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24709 comm="syz.8.3592" exe="/syz-executor" sig=0 arch=40000003 syscall=185 compat=1 ip=0xf711e579 code=0x7ffc0000 [ 952.367455][ T40] audit: type=1326 audit(2000000840.298:4566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24709 comm="syz.8.3592" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf711e579 code=0x7ffc0000 [ 952.375564][ T40] audit: type=1326 audit(2000000840.308:4567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24709 comm="syz.8.3592" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf711e579 code=0x7ffc0000 [ 952.381400][T24715] EXT4-fs error: 1313 callbacks suppressed [ 952.381410][T24715] EXT4-fs error (device sda1): ext4_lookup:1787: inode #2011: comm dhcpcd-run-hook: iget: checksum invalid [ 952.382578][T24713] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 952.383318][ T40] audit: type=1326 audit(2000000840.308:4568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24709 comm="syz.8.3592" exe="/syz-executor" sig=0 arch=40000003 syscall=426 compat=1 ip=0xf711e579 code=0x7ffc0000 [ 952.383368][ T40] audit: type=1326 audit(2000000840.308:4569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24709 comm="syz.8.3592" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf711e579 code=0x7ffc0000 [ 952.383390][ T40] audit: type=1326 audit(2000000840.308:4570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24709 comm="syz.8.3592" exe="/syz-executor" sig=0 arch=40000003 syscall=277 compat=1 ip=0xf711e579 code=0x7ffc0000 [ 952.387003][T24717] EXT4-fs error (device sda1): ext4_lookup:1787: inode #2011: comm dhcpcd-run-hook: iget: checksum invalid [ 952.393962][T24713] netlink: 80 bytes leftover after parsing attributes in process `syz.7.3593'. [ 952.420533][T24717] EXT4-fs error (device sda1): ext4_lookup:1787: inode #2011: comm dhcpcd-run-hook: iget: checksum invalid [ 952.424424][T24717] EXT4-fs error (device sda1): ext4_lookup:1787: inode #2011: comm dhcpcd-run-hook: iget: checksum invalid [ 952.428337][T24717] EXT4-fs error (device sda1): ext4_lookup:1787: inode #2011: comm dhcpcd-run-hook: iget: checksum invalid [ 952.431994][T24717] EXT4-fs error (device sda1): ext4_lookup:1787: inode #2011: comm dhcpcd-run-hook: iget: checksum invalid [ 952.435783][T24717] EXT4-fs error (device sda1): ext4_lookup:1787: inode #2011: comm dhcpcd-run-hook: iget: checksum invalid [ 952.439715][T24717] EXT4-fs error (device sda1): ext4_lookup:1787: inode #2011: comm dhcpcd-run-hook: iget: checksum invalid [ 952.443530][T24717] EXT4-fs error (device sda1): ext4_lookup:1787: inode #2011: comm dhcpcd-run-hook: iget: checksum invalid [ 952.447290][T24717] EXT4-fs error (device sda1): ext4_lookup:1787: inode #2011: comm dhcpcd-run-hook: iget: checksum invalid [ 952.785776][T24733] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 952.791544][T24733] netlink: 80 bytes leftover after parsing attributes in process `syz.2.3602'. [ 952.995200][T24744] netlink: 40 bytes leftover after parsing attributes in process `syz.8.3595'. [ 953.178887][T24686] vhci_hcd: connection reset by peer [ 953.183216][T17726] vhci_hcd: stop threads [ 953.184679][T17726] vhci_hcd: release socket [ 953.191120][T17726] vhci_hcd: disconnect device [ 953.851293][T24769] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3599'. [ 954.284266][T24775] gfs2: path_lookup on  returned error -2 [ 954.846215][T24777] netlink: 80 bytes leftover after parsing attributes in process `syz.2.3601'. [ 955.476059][T24787] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3604'. [ 955.958421][ T6249] vhci_hcd: vhci_device speed not set [ 955.989651][T17724] Bluetooth: Error in BCSP hdr checksum [ 956.249141][T17723] Bluetooth: Error in BCSP hdr checksum [ 956.404190][T24794] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3606'. [ 956.532203][T24800] gfs2: path_lookup on  returned error -2 [ 956.893525][T24813] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 956.896231][T24813] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 956.907577][T24813] vhci_hcd vhci_hcd.0: Device attached [ 957.137331][ T6249] usb 41-1: new low-speed USB device number 18 using vhci_hcd [ 957.255665][T24826] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 957.263357][T24826] netlink: 80 bytes leftover after parsing attributes in process `syz.6.3608'. [ 957.398082][T24833] EXT4-fs error: 914 callbacks suppressed [ 957.398095][T24833] EXT4-fs error (device sda1): ext4_lookup:1787: inode #2011: comm dhcpcd-run-hook: iget: checksum invalid [ 957.406629][T24834] EXT4-fs error (device sda1): ext4_lookup:1787: inode #2011: comm dhcpcd-run-hook: iget: checksum invalid [ 957.410576][T24834] EXT4-fs error (device sda1): ext4_lookup:1787: inode #2011: comm dhcpcd-run-hook: iget: checksum invalid [ 957.414311][T24834] EXT4-fs error (device sda1): ext4_lookup:1787: inode #2011: comm dhcpcd-run-hook: iget: checksum invalid [ 957.418295][T24834] EXT4-fs error (device sda1): ext4_lookup:1787: inode #2011: comm dhcpcd-run-hook: iget: checksum invalid [ 957.422011][T24834] EXT4-fs error (device sda1): ext4_lookup:1787: inode #2011: comm dhcpcd-run-hook: iget: checksum invalid [ 957.425990][T24834] EXT4-fs error (device sda1): ext4_lookup:1787: inode #2011: comm dhcpcd-run-hook: iget: checksum invalid [ 957.429917][T24834] EXT4-fs error (device sda1): ext4_lookup:1787: inode #2011: comm dhcpcd-run-hook: iget: checksum invalid [ 957.434527][T24834] EXT4-fs error (device sda1): ext4_lookup:1787: inode #2011: comm dhcpcd-run-hook: iget: checksum invalid [ 957.439250][T24834] EXT4-fs error (device sda1): ext4_lookup:1787: inode #2011: comm dhcpcd-run-hook: iget: checksum invalid [ 957.797793][ T5958] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 957.799388][ T5959] Bluetooth: hci1: command 0x1003 tx timeout [ 957.839687][T24849] gfs2: path_lookup on  returned error -2 [ 959.032342][T24866] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3615'. [ 959.424602][T24873] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3616'. [ 959.465416][ T40] kauditd_printk_skb: 42 callbacks suppressed [ 959.465428][ T40] audit: type=1326 audit(2000000847.439:4613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24870 comm="syz.6.3616" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb7579 code=0x7ffc0000 [ 959.474399][ T40] audit: type=1326 audit(2000000847.439:4614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24870 comm="syz.6.3616" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb7579 code=0x7ffc0000 [ 959.482450][ T40] audit: type=1326 audit(2000000847.439:4615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24870 comm="syz.6.3616" exe="/syz-executor" sig=0 arch=40000003 syscall=288 compat=1 ip=0xf7fb7579 code=0x7ffc0000 [ 959.490010][ T40] audit: type=1326 audit(2000000847.439:4616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24870 comm="syz.6.3616" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb7579 code=0x7ffc0000 [ 959.498107][ T40] audit: type=1326 audit(2000000847.439:4617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24870 comm="syz.6.3616" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb7579 code=0x7ffc0000 [ 959.510303][ T40] audit: type=1326 audit(2000000847.439:4618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24870 comm="syz.6.3616" exe="/syz-executor" sig=0 arch=40000003 syscall=185 compat=1 ip=0xf7fb7579 code=0x7ffc0000 [ 959.524467][ T40] audit: type=1326 audit(2000000847.439:4619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24870 comm="syz.6.3616" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb7579 code=0x7ffc0000 [ 959.533133][ T40] audit: type=1326 audit(2000000847.439:4620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24870 comm="syz.6.3616" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb7579 code=0x7ffc0000 [ 959.548501][ T40] audit: type=1326 audit(2000000847.439:4621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24870 comm="syz.6.3616" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb7579 code=0x7ffc0000 [ 959.561922][ T40] audit: type=1326 audit(2000000847.439:4622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24870 comm="syz.6.3616" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb7579 code=0x7ffc0000 [ 959.667683][T24815] vhci_hcd: connection reset by peer [ 959.685686][T17744] vhci_hcd: stop threads [ 959.687555][T17744] vhci_hcd: release socket [ 959.704877][T17744] vhci_hcd: disconnect device [ 959.994785][T24895] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 960.000568][T24895] netlink: 80 bytes leftover after parsing attributes in process `syz.8.3618'. [ 960.280400][T24905] gfs2: path_lookup on  returned error -2 [ 960.348825][T24908] netlink: 'syz.7.3620': attribute type 1 has an invalid length. [ 960.381458][T24908] 8021q: adding VLAN 0 to HW filter on device bond33 [ 960.385734][T24908] bond32: (slave bond33): making interface the new active one [ 960.389303][T24908] bond32: (slave bond33): Enslaving as an active interface with an up link [ 960.418577][ T59] hid-generic 0000:007F:FFFFFFFE.0023: unknown main item tag 0x0 [ 960.421083][ T59] hid-generic 0000:007F:FFFFFFFE.0023: unknown main item tag 0x0 [ 960.424348][ T59] hid-generic 0000:007F:FFFFFFFE.0023: unknown main item tag 0x0 [ 960.427534][ T59] hid-generic 0000:007F:FFFFFFFE.0023: unknown main item tag 0x0 [ 960.430314][ T59] hid-generic 0000:007F:FFFFFFFE.0023: unknown main item tag 0x0 [ 960.432699][ T59] hid-generic 0000:007F:FFFFFFFE.0023: unknown main item tag 0x0 [ 960.435125][ T59] hid-generic 0000:007F:FFFFFFFE.0023: unknown main item tag 0x0 [ 960.437781][ T59] hid-generic 0000:007F:FFFFFFFE.0023: unknown main item tag 0x0 [ 960.440365][ T59] hid-generic 0000:007F:FFFFFFFE.0023: unknown main item tag 0x0 [ 960.440614][T24908] 8021q: adding VLAN 0 to HW filter on device bond32 [ 960.442784][ T59] hid-generic 0000:007F:FFFFFFFE.0023: unknown main item tag 0x0 [ 960.442800][ T59] hid-generic 0000:007F:FFFFFFFE.0023: unknown main item tag 0x0 [ 960.442812][ T59] hid-generic 0000:007F:FFFFFFFE.0023: unknown main item tag 0x0 [ 960.442824][ T59] hid-generic 0000:007F:FFFFFFFE.0023: unknown main item tag 0x0 [ 960.454593][ T59] hid-generic 0000:007F:FFFFFFFE.0023: unknown main item tag 0x0 [ 960.456988][ T59] hid-generic 0000:007F:FFFFFFFE.0023: unknown main item tag 0x0 [ 960.459588][ T59] hid-generic 0000:007F:FFFFFFFE.0023: unknown main item tag 0x0 [ 960.462004][ T59] hid-generic 0000:007F:FFFFFFFE.0023: unknown main item tag 0x0 [ 960.475529][ T59] hid-generic 0000:007F:FFFFFFFE.0023: unknown main item tag 0x0 [ 960.478492][ T59] hid-generic 0000:007F:FFFFFFFE.0023: unknown main item tag 0x0 [ 960.481350][ T59] hid-generic 0000:007F:FFFFFFFE.0023: unknown main item tag 0x0 [ 960.483932][ T59] hid-generic 0000:007F:FFFFFFFE.0023: unknown main item tag 0x0 [ 960.486411][ T59] hid-generic 0000:007F:FFFFFFFE.0023: unknown main item tag 0x0 [ 960.489127][ T59] hid-generic 0000:007F:FFFFFFFE.0023: unknown main item tag 0x0 [ 960.491654][ T59] hid-generic 0000:007F:FFFFFFFE.0023: unknown main item tag 0x0 [ 960.494195][ T59] hid-generic 0000:007F:FFFFFFFE.0023: unknown main item tag 0x0 [ 960.497967][ T59] hid-generic 0000:007F:FFFFFFFE.0023: unknown main item tag 0x0 [ 960.500554][ T59] hid-generic 0000:007F:FFFFFFFE.0023: unknown main item tag 0x0 [ 960.503083][ T59] hid-generic 0000:007F:FFFFFFFE.0023: unknown main item tag 0x0 [ 960.505611][ T59] hid-generic 0000:007F:FFFFFFFE.0023: unknown main item tag 0x0 [ 960.508369][ T59] hid-generic 0000:007F:FFFFFFFE.0023: unknown main item tag 0x0 [ 960.511491][ T59] hid-generic 0000:007F:FFFFFFFE.0023: unknown main item tag 0x0 [ 960.514116][ T59] hid-generic 0000:007F:FFFFFFFE.0023: unknown main item tag 0x0 [ 960.516524][ T59] hid-generic 0000:007F:FFFFFFFE.0023: unknown main item tag 0x0 [ 960.519121][ T59] hid-generic 0000:007F:FFFFFFFE.0023: unknown main item tag 0x0 [ 960.521566][ T59] hid-generic 0000:007F:FFFFFFFE.0023: unknown main item tag 0x0 [ 960.523997][ T59] hid-generic 0000:007F:FFFFFFFE.0023: unknown main item tag 0x0 [ 960.526438][ T59] hid-generic 0000:007F:FFFFFFFE.0023: unknown main item tag 0x0 [ 960.529362][ T59] hid-generic 0000:007F:FFFFFFFE.0023: unknown main item tag 0x0 [ 960.532057][ T59] hid-generic 0000:007F:FFFFFFFE.0023: unknown main item tag 0x0 [ 960.534466][ T59] hid-generic 0000:007F:FFFFFFFE.0023: unknown main item tag 0x0 [ 960.537030][ T59] hid-generic 0000:007F:FFFFFFFE.0023: unknown main item tag 0x0 [ 960.539572][ T59] hid-generic 0000:007F:FFFFFFFE.0023: unknown main item tag 0x0 [ 960.541974][ T59] hid-generic 0000:007F:FFFFFFFE.0023: unknown main item tag 0x0 [ 960.546434][ T59] hid-generic 0000:007F:FFFFFFFE.0023: hidraw1: HID v0.00 Device [syz1] on syz0 [ 960.980547][T24933] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3624'. [ 961.401548][T24944] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3625'. [ 961.849001][T24949] netlink: 'syz.7.3627': attribute type 4 has an invalid length. [ 961.928558][T17729] Bluetooth: Error in BCSP hdr checksum [ 962.025473][T24954] netlink: 40 bytes leftover after parsing attributes in process `syz.7.3628'. [ 962.235170][T24959] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 962.242441][T24959] netlink: 80 bytes leftover after parsing attributes in process `syz.6.3629'. [ 962.277064][ T6249] vhci_hcd: vhci_device speed not set [ 962.453249][T24966] EXT4-fs error: 1046 callbacks suppressed [ 962.453261][T24966] EXT4-fs error (device sda1): ext4_lookup:1787: inode #2011: comm rm: iget: checksum invalid [ 962.488322][T24967] EXT4-fs error (device sda1): ext4_lookup:1787: inode #2011: comm dhcpcd-run-hook: iget: checksum invalid [ 962.498126][T24970] EXT4-fs error (device sda1): ext4_lookup:1787: inode #2011: comm dhcpcd-run-hook: iget: checksum invalid [ 962.510150][T24970] EXT4-fs error (device sda1): ext4_lookup:1787: inode #2011: comm dhcpcd-run-hook: iget: checksum invalid [ 962.519918][T24970] EXT4-fs error (device sda1): ext4_lookup:1787: inode #2011: comm dhcpcd-run-hook: iget: checksum invalid [ 962.528271][T24970] EXT4-fs error (device sda1): ext4_lookup:1787: inode #2011: comm dhcpcd-run-hook: iget: checksum invalid [ 962.536663][T24970] EXT4-fs error (device sda1): ext4_lookup:1787: inode #2011: comm dhcpcd-run-hook: iget: checksum invalid [ 962.546171][T24970] EXT4-fs error (device sda1): ext4_lookup:1787: inode #2011: comm dhcpcd-run-hook: iget: checksum invalid [ 962.559294][T24970] EXT4-fs error (device sda1): ext4_lookup:1787: inode #2011: comm dhcpcd-run-hook: iget: checksum invalid [ 962.563084][T24970] EXT4-fs error (device sda1): ext4_lookup:1787: inode #2011: comm dhcpcd-run-hook: iget: checksum invalid [ 962.750795][T24981] netlink: 40 bytes leftover after parsing attributes in process `syz.8.3632'. [ 963.617874][T25001] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3633'. [ 963.717075][ T5959] Bluetooth: hci1: command 0x1003 tx timeout [ 963.719345][ T5958] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 964.714137][T25026] gfs2: path_lookup on  returned error -2 [ 964.767036][T25028] netlink: 'syz.6.3635': attribute type 1 has an invalid length. [ 964.810814][T25028] 8021q: adding VLAN 0 to HW filter on device bond10 [ 964.814108][T25028] bond9: (slave bond10): making interface the new active one [ 964.816724][T25028] bond9: (slave bond10): Enslaving as an active interface with an up link [ 964.885928][T25028] 8021q: adding VLAN 0 to HW filter on device bond9 [ 965.224226][T25037] netlink: 'syz.2.3638': attribute type 4 has an invalid length. [ 965.411329][T25044] netlink: 'syz.2.3639': attribute type 1 has an invalid length. [ 965.562149][T25046] 8021q: adding VLAN 0 to HW filter on device bond22 [ 965.595973][T25046] bond21: (slave bond22): making interface the new active one [ 965.603562][T25046] bond21: (slave bond22): Enslaving as an active interface with an up link [ 965.738950][T25044] 8021q: adding VLAN 0 to HW filter on device bond21 [ 966.303955][T25057] netlink: 40 bytes leftover after parsing attributes in process `syz.8.3642'. [ 966.546993][ T40] kauditd_printk_skb: 44 callbacks suppressed [ 966.547006][ T40] audit: type=1326 audit(2000000854.349:4667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25055 comm="syz.8.3642" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf711e579 code=0x7ffc0000 [ 966.556935][ T40] audit: type=1326 audit(2000000854.349:4668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25055 comm="syz.8.3642" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf711e579 code=0x7ffc0000 [ 966.566820][ T40] audit: type=1326 audit(2000000854.359:4669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25055 comm="syz.8.3642" exe="/syz-executor" sig=0 arch=40000003 syscall=288 compat=1 ip=0xf711e579 code=0x7ffc0000 [ 966.573273][ T40] audit: type=1326 audit(2000000854.359:4670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25055 comm="syz.8.3642" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf711e579 code=0x7ffc0000 [ 966.586827][ T40] audit: type=1326 audit(2000000854.359:4671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25055 comm="syz.8.3642" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf711e579 code=0x7ffc0000 [ 966.593579][ T40] audit: type=1326 audit(2000000854.359:4672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25055 comm="syz.8.3642" exe="/syz-executor" sig=0 arch=40000003 syscall=185 compat=1 ip=0xf711e579 code=0x7ffc0000 [ 966.606813][ T40] audit: type=1326 audit(2000000854.359:4673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25055 comm="syz.8.3642" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf711e579 code=0x7ffc0000 [ 966.616787][ T40] audit: type=1326 audit(2000000854.359:4674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25055 comm="syz.8.3642" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf711e579 code=0x7ffc0000 [ 966.624003][ T40] audit: type=1326 audit(2000000854.359:4675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25055 comm="syz.8.3642" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf711e579 code=0x7ffc0000 [ 966.633808][ T40] audit: type=1326 audit(2000000854.359:4676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25055 comm="syz.8.3642" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf711e579 code=0x7ffc0000 [ 967.057035][T25076] netlink: 80 bytes leftover after parsing attributes in process `syz.6.3644'. [ 967.241778][T25085] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3645'. [ 967.504289][T25090] EXT4-fs error: 1177 callbacks suppressed [ 967.504301][T25090] EXT4-fs error (device sda1): ext4_lookup:1787: inode #2011: comm rm: iget: checksum invalid [ 967.554947][T25092] EXT4-fs error (device sda1): ext4_lookup:1787: inode #2011: comm rm: iget: checksum invalid [ 967.584620][T25093] EXT4-fs error (device sda1): ext4_lookup:1787: inode #2011: comm dhcpcd-run-hook: iget: checksum invalid [ 967.591769][T25094] EXT4-fs error (device sda1): ext4_lookup:1787: inode #2011: comm dhcpcd-run-hook: iget: checksum invalid [ 967.596194][T25094] EXT4-fs error (device sda1): ext4_lookup:1787: inode #2011: comm dhcpcd-run-hook: iget: checksum invalid [ 967.601860][T25094] EXT4-fs error (device sda1): ext4_lookup:1787: inode #2011: comm dhcpcd-run-hook: iget: checksum invalid [ 967.605594][T25094] EXT4-fs error (device sda1): ext4_lookup:1787: inode #2011: comm dhcpcd-run-hook: iget: checksum invalid [ 967.609633][T25094] EXT4-fs error (device sda1): ext4_lookup:1787: inode #2011: comm dhcpcd-run-hook: iget: checksum invalid [ 967.613426][T25094] EXT4-fs error (device sda1): ext4_lookup:1787: inode #2011: comm dhcpcd-run-hook: iget: checksum invalid [ 967.618013][T25094] EXT4-fs error (device sda1): ext4_lookup:1787: inode #2011: comm dhcpcd-run-hook: iget: checksum invalid [ 967.851569][T25105] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3654'. [ 967.857144][T25101] netlink: 'syz.8.3647': attribute type 4 has an invalid length. [ 968.011626][T25111] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3646'. [ 968.210890][T25115] netlink: 'syz.6.3648': attribute type 1 has an invalid length. [ 968.250329][T25115] 8021q: adding VLAN 0 to HW filter on device bond12 [ 968.253392][T25115] bond11: (slave bond12): making interface the new active one [ 968.256050][T25115] bond11: (slave bond12): Enslaving as an active interface with an up link [ 968.302436][T25115] 8021q: adding VLAN 0 to HW filter on device bond11 [ 968.427063][T17729] Bluetooth: Error in BCSP hdr checksum [ 968.848263][ T5959] Bluetooth: hci5: command 0x0406 tx timeout [ 969.649779][T25180] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3656'. [ 970.116634][ T5958] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 970.269856][T25187] netlink: 80 bytes leftover after parsing attributes in process `syz.2.3658'. [ 970.360955][T25190] netlink: 'syz.7.3659': attribute type 1 has an invalid length. [ 970.384022][T25190] 8021q: adding VLAN 0 to HW filter on device bond35 [ 970.387382][T25190] bond34: (slave bond35): making interface the new active one [ 970.390282][T25190] bond34: (slave bond35): Enslaving as an active interface with an up link [ 970.417965][T25190] 8021q: adding VLAN 0 to HW filter on device bond34 [ 970.562378][T25198] netlink: 40 bytes leftover after parsing attributes in process `syz.7.3660'. [ 971.983566][T25237] netlink: 40 bytes leftover after parsing attributes in process `syz.7.3665'. [ 972.105310][ T40] kauditd_printk_skb: 47 callbacks suppressed [ 972.105321][ T40] audit: type=1326 audit(2000000860.079:4724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25232 comm="syz.7.3665" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f13579 code=0x7ffc0000 [ 972.118213][ T40] audit: type=1326 audit(2000000860.099:4725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25232 comm="syz.7.3665" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f13579 code=0x7ffc0000 [ 972.128370][ T40] audit: type=1326 audit(2000000860.099:4726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25232 comm="syz.7.3665" exe="/syz-executor" sig=0 arch=40000003 syscall=288 compat=1 ip=0xf7f13579 code=0x7ffc0000 [ 972.155458][ T40] audit: type=1326 audit(2000000860.099:4727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25232 comm="syz.7.3665" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f13579 code=0x7ffc0000 [ 972.175689][ T40] audit: type=1326 audit(2000000860.099:4728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25232 comm="syz.7.3665" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f13579 code=0x7ffc0000 [ 972.196680][ T40] audit: type=1326 audit(2000000860.099:4729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25232 comm="syz.7.3665" exe="/syz-executor" sig=0 arch=40000003 syscall=185 compat=1 ip=0xf7f13579 code=0x7ffc0000 [ 972.205689][ T40] audit: type=1326 audit(2000000860.099:4730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25232 comm="syz.7.3665" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f13579 code=0x7ffc0000 [ 972.214979][ T40] audit: type=1326 audit(2000000860.099:4731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25232 comm="syz.7.3665" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f13579 code=0x7ffc0000 [ 972.223947][ T40] audit: type=1326 audit(2000000860.099:4732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25232 comm="syz.7.3665" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f13579 code=0x7ffc0000 [ 972.231265][ T40] audit: type=1326 audit(2000000860.109:4733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25232 comm="syz.7.3665" exe="/syz-executor" sig=0 arch=40000003 syscall=426 compat=1 ip=0xf7f13579 code=0x7ffc0000 [ 972.554156][T25265] EXT4-fs error: 1443 callbacks suppressed [ 972.554168][T25265] EXT4-fs error (device sda1): ext4_lookup:1787: inode #2011: comm rm: iget: checksum invalid [ 972.626653][T17728] Bluetooth: Error in BCSP hdr checksum [ 972.645927][T25267] EXT4-fs error (device sda1): ext4_lookup:1787: inode #2011: comm dhcpcd-run-hook: iget: checksum invalid [ 972.657595][T25268] EXT4-fs error (device sda1): ext4_lookup:1787: inode #2011: comm dhcpcd-run-hook: iget: checksum invalid [ 972.661664][T25268] EXT4-fs error (device sda1): ext4_lookup:1787: inode #2011: comm dhcpcd-run-hook: iget: checksum invalid [ 972.665305][T25268] EXT4-fs error (device sda1): ext4_lookup:1787: inode #2011: comm dhcpcd-run-hook: iget: checksum invalid [ 972.669439][T25268] EXT4-fs error (device sda1): ext4_lookup:1787: inode #2011: comm dhcpcd-run-hook: iget: checksum invalid [ 972.676696][T25268] EXT4-fs error (device sda1): ext4_lookup:1787: inode #2011: comm dhcpcd-run-hook: iget: checksum invalid [ 972.680658][T25268] EXT4-fs error (device sda1): ext4_lookup:1787: inode #2011: comm dhcpcd-run-hook: iget: checksum invalid [ 972.694757][T25268] EXT4-fs error (device sda1): ext4_lookup:1787: inode #2011: comm dhcpcd-run-hook: iget: checksum invalid [ 972.698652][T25268] EXT4-fs error (device sda1): ext4_lookup:1787: inode #2011: comm dhcpcd-run-hook: iget: checksum invalid [ 972.958102][T25282] netlink: 'syz.7.3668': attribute type 1 has an invalid length. [ 972.982674][T25282] 8021q: adding VLAN 0 to HW filter on device bond37 [ 972.985944][T25282] bond36: (slave bond37): making interface the new active one [ 972.989689][T25282] bond36: (slave bond37): Enslaving as an active interface with an up link [ 973.020992][T25282] 8021q: adding VLAN 0 to HW filter on device bond36 [ 973.303754][T25302] netlink: 'syz.2.3671': attribute type 1 has an invalid length. [ 973.540193][T25302] 8021q: adding VLAN 0 to HW filter on device bond24 [ 973.543747][T25302] bond23: (slave bond24): making interface the new active one [ 973.552620][T25302] bond23: (slave bond24): Enslaving as an active interface with an up link [ 974.100831][T25302] 8021q: adding VLAN 0 to HW filter on device bond23 [ 974.122128][T25324] netlink: 'syz.7.3672': attribute type 4 has an invalid length. [ 974.227670][T25330] netlink: 40 bytes leftover after parsing attributes in process `syz.8.3673'. [ 974.447753][ T5959] Bluetooth: hci1: command 0x1003 tx timeout [ 974.452015][ T5958] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 974.662598][T25350] netlink: 'syz.8.3677': attribute type 1 has an invalid length. [ 974.680702][T25354] netlink: 40 bytes leftover after parsing attributes in process `syz.7.3676'. [ 974.716366][T25355] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3675'. [ 974.720241][T25350] 8021q: adding VLAN 0 to HW filter on device bond15 [ 974.724746][T25350] bond14: (slave bond15): making interface the new active one [ 974.733034][T25350] bond14: (slave bond15): Enslaving as an active interface with an up link [ 974.784457][T25350] 8021q: adding VLAN 0 to HW filter on device bond14 [ 974.852491][T25362] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3678'. [ 975.975298][T25396] gfs2: path_lookup on  returned error -2 [ 976.566374][T17728] Bluetooth: Error in BCSP hdr checksum [ 976.836505][T17728] Bluetooth: Error in BCSP hdr checksum [ 977.177536][T25419] netlink: 'syz.2.3683': attribute type 4 has an invalid length. [ 978.009317][T25438] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3688'. [ 978.225325][T25442] netlink: 80 bytes leftover after parsing attributes in process `syz.2.3689'. [ 978.316313][T25444] netlink: 80 bytes leftover after parsing attributes in process `syz.8.3690'. [ 978.356318][ T5958] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 979.027683][T17079] Bluetooth: Error in BCSP hdr checksum [ 979.128992][T25458] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3693'. [ 979.230098][T25465] EXT4-fs error: 1575 callbacks suppressed [ 979.230110][T25465] EXT4-fs error (device sda1): ext4_lookup:1787: inode #2011: comm dhcpcd-run-hook: iget: checksum invalid [ 979.240825][ T40] kauditd_printk_skb: 65 callbacks suppressed [ 979.240841][ T40] audit: type=1326 audit(2000000867.220:4799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25456 comm="syz.2.3693" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f93579 code=0x7ffc0000 [ 979.241929][T25466] EXT4-fs error (device sda1): ext4_lookup:1787: inode #2011: comm dhcpcd-run-hook: iget: checksum invalid [ 979.247232][ T40] audit: type=1326 audit(2000000867.220:4800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25456 comm="syz.2.3693" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f93579 code=0x7ffc0000 [ 979.251387][T25466] EXT4-fs error (device sda1): ext4_lookup:1787: inode #2011: comm dhcpcd-run-hook: iget: checksum invalid [ 979.258444][ T40] audit: type=1326 audit(2000000867.220:4801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25456 comm="syz.2.3693" exe="/syz-executor" sig=0 arch=40000003 syscall=288 compat=1 ip=0xf7f93579 code=0x7ffc0000 [ 979.266231][T25466] EXT4-fs error (device sda1): ext4_lookup:1787: inode #2011: comm dhcpcd-run-hook: iget: checksum invalid [ 979.266354][T25466] EXT4-fs error (device sda1): ext4_lookup:1787: inode #2011: comm dhcpcd-run-hook: iget: checksum invalid [ 979.266481][T25466] EXT4-fs error (device sda1): ext4_lookup:1787: inode #2011: comm dhcpcd-run-hook: iget: checksum invalid [ 979.266579][T25466] EXT4-fs error (device sda1): ext4_lookup:1787: inode #2011: comm dhcpcd-run-hook: iget: checksum invalid [ 979.266669][T25466] EXT4-fs error (device sda1): ext4_lookup:1787: inode #2011: comm dhcpcd-run-hook: iget: checksum invalid [ 979.298397][ T40] audit: type=1326 audit(2000000867.220:4802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25456 comm="syz.2.3693" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f93579 code=0x7ffc0000 [ 979.299691][T25466] EXT4-fs error (device sda1): ext4_lookup:1787: inode #2011: comm dhcpcd-run-hook: iget: checksum invalid [ 979.307597][ T40] audit: type=1326 audit(2000000867.220:4803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25456 comm="syz.2.3693" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f93579 code=0x7ffc0000 [ 979.310824][T25466] EXT4-fs error (device sda1): ext4_lookup:1787: inode #2011: comm dhcpcd-run-hook: iget: checksum invalid [ 979.319957][ T40] audit: type=1326 audit(2000000867.230:4804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25456 comm="syz.2.3693" exe="/syz-executor" sig=0 arch=40000003 syscall=185 compat=1 ip=0xf7f93579 code=0x7ffc0000 [ 979.331429][ T40] audit: type=1326 audit(2000000867.230:4805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25456 comm="syz.2.3693" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f93579 code=0x7ffc0000 [ 979.338622][ T40] audit: type=1326 audit(2000000867.230:4806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25456 comm="syz.2.3693" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f93579 code=0x7ffc0000 [ 979.346883][ T40] audit: type=1326 audit(2000000867.230:4807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25456 comm="syz.2.3693" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f93579 code=0x7ffc0000 [ 979.356218][ T40] audit: type=1326 audit(2000000867.230:4808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25456 comm="syz.2.3693" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f93579 code=0x7ffc0000 [ 979.985610][T25481] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3695'. [ 980.004352][T25481] netlink: 48 bytes leftover after parsing attributes in process `syz.8.3695'. [ 980.037221][T25481] geneve4: entered promiscuous mode [ 980.038755][T25481] geneve4: entered allmulticast mode [ 980.064669][T25486] netlink: 'syz.2.3696': attribute type 1 has an invalid length. [ 980.116788][T25486] 8021q: adding VLAN 0 to HW filter on device bond26 [ 980.121197][T25486] bond25: (slave bond26): making interface the new active one [ 980.123958][T25486] bond25: (slave bond26): Enslaving as an active interface with an up link [ 980.173718][T25486] 8021q: adding VLAN 0 to HW filter on device bond25 [ 980.391652][T25499] netlink: 'syz.6.3705': attribute type 4 has an invalid length. [ 980.496162][ T60] usb 13-1: new high-speed USB device number 13 using dummy_hcd [ 980.503050][T25514] netlink: 80 bytes leftover after parsing attributes in process `syz.6.3698'. [ 980.645995][ T60] usb 13-1: Using ep0 maxpacket: 8 [ 980.648923][ T60] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 201, changing to 11 [ 980.652397][ T60] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 49481, setting to 1024 [ 980.655809][ T60] usb 13-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 980.658679][ T60] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 980.663122][ T60] usb 13-1: config 0 descriptor?? [ 980.756106][ T5958] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 980.756136][ T5959] Bluetooth: hci1: command 0x1003 tx timeout [ 980.870983][ T60] iowarrior 13-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 980.949499][T25523] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3700'. [ 981.231602][ T59] usb 13-1: USB disconnect, device number 13 [ 981.432460][T25531] netlink: 40 bytes leftover after parsing attributes in process `syz.7.3702'. [ 982.686119][T17728] Bluetooth: Error in BCSP hdr checksum [ 983.242101][T25595] netlink: 80 bytes leftover after parsing attributes in process `syz.6.3708'. [ 983.921422][T25605] gfs2: path_lookup on  returned error -2 [ 984.072338][T25607] netlink: 'syz.2.3710': attribute type 1 has an invalid length. [ 984.114385][T25607] 8021q: adding VLAN 0 to HW filter on device bond28 [ 984.119229][T25607] bond27: (slave bond28): making interface the new active one [ 984.121812][T25607] bond27: (slave bond28): Enslaving as an active interface with an up link [ 984.210326][T25607] 8021q: adding VLAN 0 to HW filter on device bond27 [ 984.435871][ T5959] Bluetooth: hci1: command 0x1003 tx timeout [ 984.435967][ T5958] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 985.939277][T25643] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 985.943242][T25643] netlink: 80 bytes leftover after parsing attributes in process `syz.2.3719'. [ 986.132083][T25650] netlink: 40 bytes leftover after parsing attributes in process `syz.7.3720'. [ 986.181566][ T40] kauditd_printk_skb: 21 callbacks suppressed [ 986.181601][ T40] audit: type=1326 audit(2000000874.160:4830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25647 comm="syz.7.3720" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f13579 code=0x7ffc0000 [ 986.199315][ T40] audit: type=1326 audit(2000000874.160:4831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25647 comm="syz.7.3720" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f13579 code=0x7ffc0000 [ 986.209685][ T40] audit: type=1326 audit(2000000874.160:4832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25647 comm="syz.7.3720" exe="/syz-executor" sig=0 arch=40000003 syscall=288 compat=1 ip=0xf7f13579 code=0x7ffc0000 [ 986.217585][ T40] audit: type=1326 audit(2000000874.160:4833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25647 comm="syz.7.3720" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f13579 code=0x7ffc0000 [ 986.225268][ T40] audit: type=1326 audit(2000000874.160:4834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25647 comm="syz.7.3720" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f13579 code=0x7ffc0000 [ 986.237264][ T40] audit: type=1326 audit(2000000874.160:4835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25647 comm="syz.7.3720" exe="/syz-executor" sig=0 arch=40000003 syscall=185 compat=1 ip=0xf7f13579 code=0x7ffc0000 [ 986.253328][ T40] audit: type=1326 audit(2000000874.160:4836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25647 comm="syz.7.3720" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f13579 code=0x7ffc0000 [ 986.270475][ T40] audit: type=1326 audit(2000000874.160:4837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25647 comm="syz.7.3720" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f13579 code=0x7ffc0000 [ 986.280916][T25652] EXT4-fs error: 1310 callbacks suppressed [ 986.280926][T25652] EXT4-fs error (device sda1): ext4_lookup:1787: inode #2011: comm dhcpcd-run-hook: iget: checksum invalid [ 986.288423][ T40] audit: type=1326 audit(2000000874.180:4838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25647 comm="syz.7.3720" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f13579 code=0x7ffc0000 [ 986.298993][ T40] audit: type=1326 audit(2000000874.180:4839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25647 comm="syz.7.3720" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f13579 code=0x7ffc0000 [ 986.308380][T25653] EXT4-fs error (device sda1): ext4_lookup:1787: inode #2011: comm dhcpcd-run-hook: iget: checksum invalid [ 986.312531][T25653] EXT4-fs error (device sda1): ext4_lookup:1787: inode #2011: comm dhcpcd-run-hook: iget: checksum invalid [ 986.318112][T25653] EXT4-fs error (device sda1): ext4_lookup:1787: inode #2011: comm dhcpcd-run-hook: iget: checksum invalid [ 986.322111][T25653] EXT4-fs error (device sda1): ext4_lookup:1787: inode #2011: comm dhcpcd-run-hook: iget: checksum invalid [ 986.326446][T25653] EXT4-fs error (device sda1): ext4_lookup:1787: inode #2011: comm dhcpcd-run-hook: iget: checksum invalid [ 986.330455][T25653] EXT4-fs error (device sda1): ext4_lookup:1787: inode #2011: comm dhcpcd-run-hook: iget: checksum invalid [ 986.334313][T25653] EXT4-fs error (device sda1): ext4_lookup:1787: inode #2011: comm dhcpcd-run-hook: iget: checksum invalid [ 986.344241][T25653] EXT4-fs error (device sda1): ext4_lookup:1787: inode #2011: comm dhcpcd-run-hook: iget: checksum invalid [ 986.348559][T25653] EXT4-fs error (device sda1): ext4_lookup:1787: inode #2011: comm dhcpcd-run-hook: iget: checksum invalid [ 986.949943][T25668] netlink: 'syz.6.3721': attribute type 1 has an invalid length. [ 987.044550][T25672] 8021q: adding VLAN 0 to HW filter on device bond14 [ 987.049979][T25672] bond13: (slave bond14): making interface the new active one [ 987.052599][T25672] bond13: (slave bond14): Enslaving as an active interface with an up link [ 987.066193][T25675] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3722'. [ 987.084792][T25668] 8021q: adding VLAN 0 to HW filter on device bond13 [ 988.148759][T25717] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3729'. [ 988.234386][T25723] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 988.241074][T25723] netlink: 80 bytes leftover after parsing attributes in process `syz.8.3730'. [ 988.916592][T25733] netlink: 'syz.6.3731': attribute type 1 has an invalid length. [ 988.971463][T25733] 8021q: adding VLAN 0 to HW filter on device bond16 [ 988.982748][T25733] bond15: (slave bond16): making interface the new active one [ 988.985579][T25733] bond15: (slave bond16): Enslaving as an active interface with an up link [ 989.054146][T25738] netlink: 'syz.2.3732': attribute type 1 has an invalid length. [ 989.074305][T25733] 8021q: adding VLAN 0 to HW filter on device bond15 [ 989.134700][T25738] 8021q: adding VLAN 0 to HW filter on device bond30 [ 989.137969][T25738] bond29: (slave bond30): making interface the new active one [ 989.140495][T25738] bond29: (slave bond30): Enslaving as an active interface with an up link [ 989.163961][T25738] 8021q: adding VLAN 0 to HW filter on device bond29 [ 989.220695][T25747] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3733'. [ 989.256018][T25750] netlink: 40 bytes leftover after parsing attributes in process `syz.7.3734'. [ 989.270367][T25749] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3736'. [ 989.574729][T25751] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3735'. [ 989.583191][T25751] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3735'. [ 989.592285][T25751] geneve4: entered promiscuous mode [ 989.594012][T25751] geneve4: entered allmulticast mode [ 990.205585][ T60] usb 7-1: new high-speed USB device number 53 using dummy_hcd [ 990.334208][T25782] netlink: 'syz.7.3738': attribute type 1 has an invalid length. [ 990.396212][T25786] netlink: 40 bytes leftover after parsing attributes in process `syz.8.3740'. [ 990.399993][T25782] 8021q: adding VLAN 0 to HW filter on device bond39 [ 990.402878][T25782] bond38: (slave bond39): making interface the new active one [ 990.405335][T25782] bond38: (slave bond39): Enslaving as an active interface with an up link [ 990.425655][ T60] usb 7-1: Using ep0 maxpacket: 8 [ 990.431068][ T60] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 201, changing to 11 [ 990.434329][ T60] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 49481, setting to 1024 [ 990.437902][ T60] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 990.440819][ T60] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 990.451921][ T60] usb 7-1: config 0 descriptor?? [ 990.469128][T25782] 8021q: adding VLAN 0 to HW filter on device bond38 [ 990.640140][T25797] netlink: 'syz.7.3741': attribute type 4 has an invalid length. [ 990.659075][ T60] iowarrior 7-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 990.865697][ T60] usb 7-1: USB disconnect, device number 53 [ 991.297312][T25833] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 991.303226][T25833] netlink: 80 bytes leftover after parsing attributes in process `syz.6.3744'. [ 991.325792][T25831] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3743'. [ 991.366972][T25830] EXT4-fs error: 1443 callbacks suppressed [ 991.366985][T25830] EXT4-fs error (device sda1): ext4_lookup:1787: inode #2011: comm dhcpcd-run-hook: iget: checksum invalid [ 991.373310][T25830] EXT4-fs error (device sda1): ext4_lookup:1787: inode #2011: comm dhcpcd-run-hook: iget: checksum invalid [ 991.381416][T25830] EXT4-fs error (device sda1): ext4_lookup:1787: inode #2011: comm dhcpcd-run-hook: iget: checksum invalid [ 991.388048][T25830] EXT4-fs error (device sda1): ext4_lookup:1787: inode #2011: comm dhcpcd-run-hook: iget: checksum invalid [ 991.392615][T25830] EXT4-fs error (device sda1): ext4_lookup:1787: inode #2011: comm dhcpcd-run-hook: iget: checksum invalid [ 991.408731][T25830] EXT4-fs error (device sda1): ext4_lookup:1787: inode #2011: comm dhcpcd-run-hook: iget: checksum invalid [ 991.413464][T25830] EXT4-fs error (device sda1): ext4_lookup:1787: inode #2011: comm dhcpcd-run-hook: iget: checksum invalid [ 991.418186][T25830] EXT4-fs error (device sda1): ext4_lookup:1787: inode #2011: comm dhcpcd-run-hook: iget: checksum invalid [ 991.422814][T25830] EXT4-fs error (device sda1): ext4_lookup:1787: inode #2011: comm dhcpcd-run-hook: iget: checksum invalid [ 991.427403][T25830] EXT4-fs error (device sda1): ext4_lookup:1787: inode #2011: comm dhcpcd-run-hook: iget: checksum invalid [ 991.616599][T17744] Bluetooth: Error in BCSP hdr checksum [ 991.789401][T25847] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3746'. [ 991.955100][T25849] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3745'. [ 992.144938][ T40] kauditd_printk_skb: 63 callbacks suppressed [ 992.144949][ T40] audit: type=1326 audit(2000000880.121:4903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25844 comm="syz.2.3746" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f93579 code=0x7ffc0000 [ 992.156472][ T40] audit: type=1326 audit(2000000880.141:4904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25844 comm="syz.2.3746" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f93579 code=0x7ffc0000 [ 992.275885][T17724] Bluetooth: Error in BCSP hdr checksum [ 992.277501][T25860] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 992.359004][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.361071][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 992.370710][ T40] audit: type=1326 audit(2000000880.351:4905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25859 comm="syz.6.3748" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb7579 code=0x7ffc0000 [ 992.380098][ T40] audit: type=1326 audit(2000000880.361:4906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25859 comm="syz.6.3748" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb7579 code=0x7ffc0000 [ 992.389852][ T40] audit: type=1326 audit(2000000880.361:4907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25859 comm="syz.6.3748" exe="/syz-executor" sig=0 arch=40000003 syscall=288 compat=1 ip=0xf7fb7579 code=0x7ffc0000 [ 992.397056][ T40] audit: type=1326 audit(2000000880.361:4908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25859 comm="syz.6.3748" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb7579 code=0x7ffc0000 [ 992.404087][ T40] audit: type=1326 audit(2000000880.361:4909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25859 comm="syz.6.3748" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb7579 code=0x7ffc0000 [ 992.411026][ T40] audit: type=1326 audit(2000000880.361:4910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25859 comm="syz.6.3748" exe="/syz-executor" sig=0 arch=40000003 syscall=185 compat=1 ip=0xf7fb7579 code=0x7ffc0000 [ 992.418377][ T40] audit: type=1326 audit(2000000880.361:4911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25859 comm="syz.6.3748" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb7579 code=0x7ffc0000 [ 992.425249][ T40] audit: type=1326 audit(2000000880.361:4912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25859 comm="syz.6.3748" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb7579 code=0x7ffc0000 [ 992.754425][ T1420] ================================================================== [ 992.756958][ T1420] BUG: KASAN: slab-use-after-free in handle_tx+0x5a5/0x630 [ 992.759216][ T1420] Read of size 8 at addr ffff8880647bb020 by task aoe_tx0/1420 [ 992.762559][ T1420] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 992.763924][ T1420] CPU: 3 UID: 0 PID: 1420 Comm: aoe_tx0 Not tainted 6.16.0-rc1-syzkaller #0 PREEMPT(full) [ 992.763939][ T1420] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 992.763946][ T1420] Call Trace: [ 992.763951][ T1420] [ 992.763955][ T1420] dump_stack_lvl+0x116/0x1f0 [ 992.763983][ T1420] print_report+0xcd/0x680 [ 992.763993][ T1420] ? __virt_addr_valid+0x81/0x610 [ 992.764004][ T1420] ? __phys_addr+0xe8/0x180 [ 992.764015][ T1420] ? handle_tx+0x5a5/0x630 [ 992.764024][ T1420] kasan_report+0xe0/0x110 [ 992.764034][ T1420] ? handle_tx+0x5a5/0x630 [ 992.764045][ T1420] handle_tx+0x5a5/0x630 [ 992.764056][ T1420] dev_hard_start_xmit+0x94/0x740 [ 992.764073][ T1420] __dev_queue_xmit+0x7eb/0x43e0 [ 992.764087][ T1420] ? lockdep_hardirqs_on+0x7c/0x110 [ 992.764103][ T1420] ? rcu_is_watching+0x12/0xc0 [ 992.764114][ T1420] ? __pfx___dev_queue_xmit+0x10/0x10 [ 992.764128][ T1420] ? __pv_queued_spin_lock_slowpath+0x28d/0xcf0 [ 992.764146][ T1420] ? __lock_acquire+0xb8a/0x1c90 [ 992.764159][ T1420] ? __lock_acquire+0xb8a/0x1c90 [ 992.764173][ T1420] ? do_raw_spin_lock+0x12c/0x2b0 [ 992.764188][ T1420] ? find_held_lock+0x2b/0x80 [ 992.764198][ T1420] ? skb_dequeue+0x126/0x180 [ 992.764211][ T1420] ? find_held_lock+0x2b/0x80 [ 992.764220][ T1420] ? rcu_is_watching+0x12/0xc0 [ 992.764231][ T1420] tx+0xcc/0x190 [ 992.764242][ T1420] ? __pfx_tx+0x10/0x10 [ 992.764252][ T1420] kthread+0x1e1/0x3e0 [ 992.764261][ T1420] ? find_held_lock+0x2b/0x80 [ 992.764270][ T1420] ? __pfx_kthread+0x10/0x10 [ 992.764279][ T1420] ? __pfx_default_wake_function+0x10/0x10 [ 992.764290][ T1420] ? lockdep_hardirqs_on+0x7c/0x110 [ 992.764305][ T1420] ? __kthread_parkme+0x19e/0x250 [ 992.764318][ T1420] ? __pfx_kthread+0x10/0x10 [ 992.764326][ T1420] kthread+0x3c2/0x780 [ 992.764340][ T1420] ? __pfx_kthread+0x10/0x10 [ 992.764354][ T1420] ? rcu_is_watching+0x12/0xc0 [ 992.764363][ T1420] ? __pfx_kthread+0x10/0x10 [ 992.764377][ T1420] ret_from_fork+0x5d4/0x6f0 [ 992.764391][ T1420] ? __pfx_kthread+0x10/0x10 [ 992.764404][ T1420] ret_from_fork_asm+0x1a/0x30 [ 992.764417][ T1420] [ 992.764421][ T1420] [ 992.832088][ T1420] Allocated by task 25865: [ 992.833515][ T1420] kasan_save_stack+0x33/0x60 [ 992.834999][ T1420] kasan_save_track+0x14/0x30 [ 992.836652][ T1420] __kasan_kmalloc+0xaa/0xb0 [ 992.838111][ T1420] alloc_tty_struct+0x96/0x8c0 [ 992.839612][ T1420] tty_init_dev.part.0+0x1e/0x500 [ 992.841186][ T1420] tty_open+0xa50/0xf90 [ 992.842512][ T1420] chrdev_open+0x231/0x6a0 [ 992.843946][ T1420] do_dentry_open+0x744/0x1c10 [ 992.845467][ T1420] vfs_open+0x82/0x3f0 [ 992.846826][ T1420] path_openat+0x1de4/0x2cb0 [ 992.848484][ T1420] do_filp_open+0x20b/0x470 [ 992.850427][ T1420] do_sys_openat2+0x11b/0x1d0 [ 992.852033][ T1420] __ia32_compat_sys_openat+0x16d/0x210 [ 992.853786][ T1420] __do_fast_syscall_32+0x7c/0x3a0 [ 992.855395][ T1420] do_fast_syscall_32+0x32/0x80 [ 992.856934][ T1420] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 992.859016][ T1420] [ 992.859785][ T1420] Freed by task 839: [ 992.861024][ T1420] kasan_save_stack+0x33/0x60 [ 992.862514][ T1420] kasan_save_track+0x14/0x30 [ 992.864009][ T1420] kasan_save_free_info+0x3b/0x60 [ 992.865581][ T1420] __kasan_slab_free+0x51/0x70 [ 992.867103][ T1420] kfree+0x2b4/0x4d0 [ 992.868566][ T1420] process_one_work+0x9cf/0x1b70 [ 992.870696][ T1420] worker_thread+0x6c8/0xf10 [ 992.872248][ T1420] kthread+0x3c2/0x780 [ 992.873583][ T1420] ret_from_fork+0x5d4/0x6f0 [ 992.875047][ T1420] ret_from_fork_asm+0x1a/0x30 [ 992.876555][ T1420] [ 992.877341][ T1420] Last potentially related work creation: [ 992.879173][ T1420] kasan_save_stack+0x33/0x60 [ 992.880654][ T1420] kasan_record_aux_stack+0xa7/0xc0 [ 992.882302][ T1420] insert_work+0x36/0x230 [ 992.883685][ T1420] __queue_work+0x97e/0x10f0 [ 992.885140][ T1420] queue_work_on+0x1a4/0x1f0 [ 992.886631][ T1420] release_tty+0x4de/0x5d0 [ 992.888178][ T1420] tty_release_struct+0xb7/0xe0 [ 992.890254][ T1420] tty_release+0xe2d/0x1430 [ 992.891860][ T1420] __fput+0x402/0xb70 [ 992.893149][ T1420] task_work_run+0x150/0x240 [ 992.894914][ T1420] exit_to_user_mode_loop+0xeb/0x110 [ 992.896769][ T1420] __do_fast_syscall_32+0x2ac/0x3a0 [ 992.898639][ T1420] do_fast_syscall_32+0x32/0x80 [ 992.900170][ T1420] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 992.902147][ T1420] [ 992.902942][ T1420] The buggy address belongs to the object at ffff8880647bb000 [ 992.902942][ T1420] which belongs to the cache kmalloc-cg-2k of size 2048 [ 992.907329][ T1420] The buggy address is located 32 bytes inside of [ 992.907329][ T1420] freed 2048-byte region [ffff8880647bb000, ffff8880647bb800) [ 992.912418][ T1420] [ 992.913195][ T1420] The buggy address belongs to the physical page: [ 992.915190][ T1420] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x647b8 [ 992.917931][ T1420] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 992.920548][ T1420] memcg:ffff888046d67b01 [ 992.921884][ T1420] flags: 0x4fff00000000040(head|node=1|zone=1|lastcpupid=0x7ff) [ 992.924261][ T1420] page_type: f5(slab) [ 992.925527][ T1420] raw: 04fff00000000040 ffff88801b44c140 dead000000000122 0000000000000000 [ 992.928264][ T1420] raw: 0000000000000000 0000000000080008 00000000f5000000 ffff888046d67b01 [ 992.930920][ T1420] head: 04fff00000000040 ffff88801b44c140 dead000000000122 0000000000000000 [ 992.933616][ T1420] head: 0000000000000000 0000000000080008 00000000f5000000 ffff888046d67b01 [ 992.936281][ T1420] head: 04fff00000000003 ffffea000191ee01 00000000ffffffff 00000000ffffffff [ 992.939238][ T1420] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 992.942001][ T1420] page dumped because: kasan: bad access detected [ 992.944020][ T1420] page_owner tracks the page as allocated [ 992.945796][ T1420] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 22386, tgid 22386 (syz-executor), ts 992214001797, free_ts 992128166722 [ 992.952889][ T1420] post_alloc_hook+0x1c0/0x230 [ 992.954405][ T1420] get_page_from_freelist+0x1321/0x3890 [ 992.956133][ T1420] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 992.958099][ T1420] alloc_pages_mpol+0x1fb/0x550 [ 992.960158][ T1420] new_slab+0x23b/0x330 [ 992.961703][ T1420] ___slab_alloc+0xd9c/0x1940 [ 992.963211][ T1420] __slab_alloc.constprop.0+0x56/0xb0 [ 992.964887][ T1420] __kvmalloc_node_noprof+0x3b1/0x620 [ 992.966581][ T1420] xt_alloc_table_info+0x3e/0xa0 [ 992.968174][ T1420] translate_compat_table+0xbf7/0x18d0 [ 992.969893][ T1420] compat_do_replace+0x255/0x3c0 [ 992.971468][ T1420] do_ip6t_set_ctl+0x55d/0xa70 [ 992.972997][ T1420] nf_setsockopt+0x8d/0xf0 [ 992.974397][ T1420] ipv6_setsockopt+0x135/0x170 [ 992.975903][ T1420] tcp_setsockopt+0xa7/0x100 [ 992.977360][ T1420] do_sock_setsockopt+0x221/0x470 [ 992.979382][ T1420] page last free pid 5659 tgid 5659 stack trace: [ 992.981791][ T1420] __free_frozen_pages+0x7fe/0x1180 [ 992.983454][ T1420] __put_partials+0x16d/0x1c0 [ 992.984943][ T1420] qlist_free_all+0x4d/0x120 [ 992.986427][ T1420] kasan_quarantine_reduce+0x195/0x1e0 [ 992.988130][ T1420] __kasan_slab_alloc+0x69/0x90 [ 992.989663][ T1420] kmem_cache_alloc_lru_noprof+0x1d0/0x3b0 [ 992.991482][ T1420] __d_alloc+0x31/0xaa0 [ 992.992832][ T1420] d_alloc+0x4a/0x1e0 [ 992.994099][ T1420] d_alloc_parallel+0xe3/0x12e0 [ 992.995616][ T1420] lookup_open.isra.0+0x665/0x1580 [ 992.997214][ T1420] path_openat+0x893/0x2cb0 [ 992.998656][ T1420] do_filp_open+0x20b/0x470 [ 993.000085][ T1420] do_sys_openat2+0x11b/0x1d0 [ 993.001566][ T1420] __x64_sys_openat+0x174/0x210 [ 993.003113][ T1420] do_syscall_64+0xcd/0x490 [ 993.004543][ T1420] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 993.007027][ T1420] [ 993.008034][ T1420] Memory state around the buggy address: [ 993.009989][ T1420] ffff8880647baf00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 993.012460][ T1420] ffff8880647baf80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 993.014957][ T1420] >ffff8880647bb000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 993.017434][ T1420] ^ [ 993.019291][ T1420] ffff8880647bb080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 993.021842][ T1420] ffff8880647bb100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 993.024392][ T1420] ================================================================== [ 993.027054][ T1420] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 993.029392][ T1420] CPU: 3 UID: 0 PID: 1420 Comm: aoe_tx0 Not tainted 6.16.0-rc1-syzkaller #0 PREEMPT(full) [ 993.032555][ T1420] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 993.035964][ T1420] Call Trace: [ 993.037047][ T1420] [ 993.038056][ T1420] dump_stack_lvl+0x3d/0x1f0 [ 993.039543][ T1420] panic+0x71c/0x800 [ 993.040933][ T1420] ? __pfx_panic+0x10/0x10 [ 993.042501][ T1420] ? irqentry_exit+0x3b/0x90 [ 993.044018][ T1420] ? lockdep_hardirqs_on+0x7c/0x110 [ 993.045694][ T1420] ? handle_tx+0x5a5/0x630 [ 993.047175][ T1420] ? check_panic_on_warn+0x1f/0xb0 [ 993.049198][ T1420] ? handle_tx+0x5a5/0x630 [ 993.051097][ T1420] check_panic_on_warn+0xab/0xb0 [ 993.052664][ T1420] end_report+0x107/0x170 [ 993.054046][ T1420] kasan_report+0xee/0x110 [ 993.055480][ T1420] ? handle_tx+0x5a5/0x630 [ 993.056899][ T1420] handle_tx+0x5a5/0x630 [ 993.058351][ T1420] dev_hard_start_xmit+0x94/0x740 [ 993.059933][ T1420] __dev_queue_xmit+0x7eb/0x43e0 [ 993.061543][ T1420] ? lockdep_hardirqs_on+0x7c/0x110 [ 993.063199][ T1420] ? rcu_is_watching+0x12/0xc0 [ 993.064697][ T1420] ? __pfx___dev_queue_xmit+0x10/0x10 [ 993.066394][ T1420] ? __pv_queued_spin_lock_slowpath+0x28d/0xcf0 [ 993.068397][ T1420] ? __lock_acquire+0xb8a/0x1c90 [ 993.069964][ T1420] ? __lock_acquire+0xb8a/0x1c90 [ 993.071561][ T1420] ? do_raw_spin_lock+0x12c/0x2b0 [ 993.073142][ T1420] ? find_held_lock+0x2b/0x80 [ 993.074643][ T1420] ? skb_dequeue+0x126/0x180 [ 993.076103][ T1420] ? find_held_lock+0x2b/0x80 [ 993.077585][ T1420] ? rcu_is_watching+0x12/0xc0 [ 993.079588][ T1420] tx+0xcc/0x190 [ 993.081093][ T1420] ? __pfx_tx+0x10/0x10 [ 993.082415][ T1420] kthread+0x1e1/0x3e0 [ 993.083700][ T1420] ? find_held_lock+0x2b/0x80 [ 993.085172][ T1420] ? __pfx_kthread+0x10/0x10 [ 993.086650][ T1420] ? __pfx_default_wake_function+0x10/0x10 [ 993.088495][ T1420] ? lockdep_hardirqs_on+0x7c/0x110 [ 993.090145][ T1420] ? __kthread_parkme+0x19e/0x250 [ 993.091753][ T1420] ? __pfx_kthread+0x10/0x10 [ 993.093208][ T1420] kthread+0x3c2/0x780 [ 993.094517][ T1420] ? __pfx_kthread+0x10/0x10 [ 993.095973][ T1420] ? rcu_is_watching+0x12/0xc0 [ 993.097482][ T1420] ? __pfx_kthread+0x10/0x10 [ 993.099367][ T1420] ret_from_fork+0x5d4/0x6f0 [ 993.101343][ T1420] ? __pfx_kthread+0x10/0x10 [ 993.102970][ T1420] ret_from_fork_asm+0x1a/0x30 [ 993.104480][ T1420] [ 993.106132][ T1420] Kernel Offset: disabled [ 993.107499][ T1420] Rebooting in 86400 seconds.. VM DIAGNOSIS: 15:11:23 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000000 RBX=0000000000000003 RCX=0000000000000002 RDX=ffff888022ce2440 RSI=ffffffff8169e3e1 RDI=ffffffff8bf559e0 RBP=ffff88805f5f0d40 RSP=ffffc900005876a8 R8 =0000000000000001 R9 =0000000000000001 R10=ffffffff90882757 R11=0000000000000001 R12=0000000000000003 R13=0000000000000003 R14=ffff88802b23cd40 R15=ffffed100bebe1a8 RIP=ffffffff8b7bd7cf RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888097762000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000032ce1ffc CR3=000000006aec3000 CR4=00352ef0 DR0=000003ffffffffff DR1=000000000000064f DR2=0000000000000006 DR3=0000000000000006 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000002af7e45 RBX=0000000000000001 RCX=ffffffff8b7bec69 RDX=0000000000000000 RSI=ffffffff8dc12c9a RDI=ffffffff8bf559e0 RBP=ffffed1003b5c488 RSP=ffffc9000046fdf8 R8 =0000000000000001 R9 =ffffed1005666645 R10=ffff88802b33322b R11=0000000000000001 R12=0000000000000001 R13=ffff88801dae2440 R14=ffffffff90882750 R15=0000000000000000 RIP=ffffffff8b7bd7cf RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888097862000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000080e9b000 CR3=0000000061a9a000 CR4=00352ef0 DR0=000003ffffffffff DR1=000000000000064f DR2=0000000000000006 DR3=0000000000000006 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=00000000c4a30efd RBX=0000000000000001 RCX=0000000052460e0c RDX=0000000000000000 RSI=00000000f41d676c RDI=ffff888023545398 RBP=ffff888023544880 RSP=ffffc90021017300 R8 =0000000000000000 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000001 R12=ffff888023545370 R13=ffff888023545398 R14=0000000083043796 R15=0000000000000001 RIP=ffffffff8197e7ff RFL=00000082 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007fb5afe83c80 ffffffff 00c00000 GS =0000 ffff888097962000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fb5b011f4b4 CR3=000000004b666000 CR4=00352ef0 DR0=000003ffffffffff DR1=000000000000064f DR2=0000000000000006 DR3=0000000000000006 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000ff0000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000000ffff ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 002b002b002b002c 002b000000004554 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000004554 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 002d002b002b002b 002c002b00000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000030 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000018 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb5b01eeb20 00007fb5b01ef050 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000020 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff8557d3d5 RDI=ffffffff9ae6ca80 RBP=ffffffff9ae6ca40 RSP=ffffc9000798f458 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000032343154 R12=0000000000000000 R13=0000000000000020 R14=ffffffff9ae6ca40 R15=ffffffff8557d370 RIP=ffffffff8557d3ff RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888097a62000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000055f0406d4008 CR3=00000000503f2000 CR4=00352ef0 DR0=000003ffffffffff DR1=000000000000064f DR2=0000000000000006 DR3=0000000000000006 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000004040101 Opmask01=0000000000000001 Opmask02=0000000001010037 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6e69626572004d52 4c4147495300676e 697361656c657200 4d52455447495300 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4b4c474057004d52 4c4147495300424b 4c56444049405700 4d52455447495300 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 803e000400000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 80410004803e0004 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000e002400000001 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000003e800002710 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0a65640a65640a20 3236207020205f62 0a65203620202020 2036203330002036 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 bfbfbfbfbfbfbfbf bfbfbfbfbfbfbfbf bfbfbfbfbfbfbfbf bfbff52532232d20 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 262821df2e2e33df 3228df3232202b22 df312e232d2435bf 2324353124322431 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000