last executing test programs: 12m3.63565305s ago: executing program 2 (id=3): socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413ed50000000f00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x7, 0x4, 0x8, 0x6, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) socket$nl_generic(0x10, 0x3, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x141842, 0x9) socket$xdp(0x2c, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r0, 0x0, 0x4}, 0x18) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = socket(0x10, 0x80002, 0x0) write$P9_RLERRORu(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="1c00000007ffff", @ANYRES16=r3, @ANYRESDEC], 0x52) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@version_u}]}}) 12m3.562345154s ago: executing program 2 (id=5): openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x42, 0x0) r0 = gettid() inotify_init1(0x800) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000280)='.\x00', 0x25000001) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, &(0x7f0000000340)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) io_setup(0x6, &(0x7f0000000680)=0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r1, 0x29, 0x37, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x8) io_submit(r2, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x180a, 0x3000, 0x3, 0x1, 0x80, r1, 0x0, 0x3000}]) io_destroy(r2) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 12m3.338083786s ago: executing program 2 (id=8): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r1, 0x0) setpgid(0x0, r1) mount$afs(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x88, 0x0) r2 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_READY(r2, 0x9360, 0x800000000000001) 12m3.195560059s ago: executing program 2 (id=10): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f00000003c0)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000300)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'xfrm0\x00', 0x0}) sendto$packet(0xffffffffffffffff, &(0x7f0000000180)='`', 0x500, 0x0, &(0x7f0000000240)={0x2f, 0x0, r1, 0x1, 0x0, 0x6, @local}, 0x14) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000280)={0xa, 0x2, 0x0, @empty}, 0x1c) shutdown(r2, 0x1) listen(r2, 0x2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r3, &(0x7f0000000240)="c4", 0x1f9a, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 12m1.71394299s ago: executing program 2 (id=20): socket$inet_smc(0x2b, 0x1, 0x0) socket$l2tp6(0xa, 0x2, 0x73) ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0x401870cb, &(0x7f0000000040)={0x4, 0x9, 0xffffffff, 0x7}) add_key$keyring(0x0, &(0x7f0000000240)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) prctl$PR_GET_TID_ADDRESS(0x28, &(0x7f0000000140)) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) socket$kcm(0x29, 0x5, 0x0) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00005cf000/0x4000)=nil, 0x400000, 0x0, 0x2}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xe) 12m1.671544134s ago: executing program 32 (id=20): socket$inet_smc(0x2b, 0x1, 0x0) socket$l2tp6(0xa, 0x2, 0x73) ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0x401870cb, &(0x7f0000000040)={0x4, 0x9, 0xffffffff, 0x7}) add_key$keyring(0x0, &(0x7f0000000240)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) prctl$PR_GET_TID_ADDRESS(0x28, &(0x7f0000000140)) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) socket$kcm(0x29, 0x5, 0x0) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00005cf000/0x4000)=nil, 0x400000, 0x0, 0x2}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xe) 58.981046941s ago: executing program 1 (id=3409): r0 = socket$key(0xf, 0x3, 0x2) r1 = syz_open_dev$vim2m(&(0x7f0000000100), 0x7, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.usage_percpu\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0xc2c45513, &(0x7f00000000c0)={{0xa, 0x5, 0x9, 0x0, 'syz0\x00', 0x6}, 0x1, [0x400, 0xc52, 0x400, 0xa1, 0x9, 0x3, 0x8, 0xe, 0x4f, 0x8000, 0x4a3, 0x8, 0x1, 0x401, 0xfffffc00, 0xa9, 0x1, 0x7a, 0x0, 0x7, 0x7, 0x0, 0xa41, 0xfff, 0x5, 0x3, 0x9679, 0x10000, 0x5, 0xb, 0x4, 0x800, 0x7, 0x4, 0x5, 0x168, 0x81, 0x2, 0x6f6, 0x2d509e61, 0x0, 0x9, 0x3, 0x80000001, 0x200, 0x9, 0x1, 0x6, 0x8000, 0xfffffffc, 0x731, 0x4, 0x23f, 0x9, 0x8, 0x3, 0x6cd, 0x9, 0x6, 0xa5d, 0x40000000, 0x4, 0xffff8db5, 0x3, 0x3, 0x4, 0x0, 0x2, 0x80000000, 0x3, 0x2, 0x4, 0x4, 0x5, 0x5, 0xfff, 0x3, 0x1ff, 0x280000, 0x5, 0x6, 0x8f, 0x9a8, 0x100, 0xfffffeff, 0xff, 0x1, 0x3, 0x0, 0x7, 0x7, 0x3, 0x3, 0x5496, 0x7, 0xc0000000, 0x4, 0xfffffff9, 0x8, 0x2, 0x4, 0x5, 0x6, 0x100, 0x95, 0x30, 0xffffffff, 0x10001, 0xfffffffe, 0x1, 0x3, 0x9, 0x5, 0x8, 0x8, 0x4, 0x5, 0x2, 0xd, 0x0, 0x40000000, 0x10000, 0xb, 0x6, 0x7f, 0xa398, 0x55, 0x1]}) add_key(0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(0xffffffffffffffff, 0x80585414, 0x0) ioctl$HIDIOCGREPORT(r2, 0x400c4807, &(0x7f0000000040)={0x1, 0x1}) socket$can_j1939(0x1d, 0x2, 0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd74) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000060a0b040000000000000000020000002400048020000180070001006374000014000280080002400000001008000140000000020900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0x78}}, 0x0) r7 = socket$inet6(0xa, 0x1, 0x8010000000000084) bpf$PROG_LOAD(0x5, 0x0, 0x0) bind$inet6(r7, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x308, 0x1, 0x24}, 0x9c) sendmsg$L2TP_CMD_TUNNEL_CREATE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16, @ANYBLOB="2309000000000000000001000000050007000000000008000900000000000600020001000000", @ANYRES32], 0x3c}}, 0x0) sync() setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0xc806, &(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0cc5605, &(0x7f0000000180)={0x1, @vbi={0x0, 0x0, 0x32315241, 0x0, [0x0, 0x80], [0x0, 0x80]}}) sendmsg$key(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000034c0)=ANY=[@ANYBLOB="020e0000100000000000000000000000030005000000000002000000ac1e0001000000000000000003000600000000000200000000000000000000000000000008001200000002"], 0x80}}, 0x4008844) bind$inet6(r4, &(0x7f0000000080)={0xa, 0x4e22, 0xffff, @private2, 0x5}, 0x1c) 57.85352438s ago: executing program 1 (id=3411): write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000580)={0x8, {"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", 0x1000}}, 0x1006) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x8004, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x7, 0x2, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) r6 = openat$kvm(0xffffff9c, &(0x7f0000000180), 0x105280, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r6, 0xc008ae05, &(0x7f00000001c0)=""/13) r7 = dup3(r5, r4, 0x0) mkdirat(r7, &(0x7f0000000280)='./file0\x00', 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x16, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000440)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffea5, 0x0, 0x0, r8}) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x4d, 0xffffffffffffffff, &(0x7f00000003c0)=0x16) 56.579334949s ago: executing program 1 (id=3414): socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) close(0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r2}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) r7 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) read$midi(r7, 0x0, 0x14) close_range(r6, 0xffffffffffffffff, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'gre0\x00'}) 55.954024407s ago: executing program 1 (id=3424): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) openat$fuse(0xffffff9c, &(0x7f0000000340), 0x2, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000040)=0x38) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1d, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000040)='contention_end\x00'}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)={0x14, r2, 0x1}, 0x14}}, 0x0) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ppoll(0x0, 0x0, &(0x7f0000000300)={0x0, 0x3938700}, 0x0, 0x0) sendfile(r0, r0, 0x0, 0x200000) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x6, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'geneve1\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x2d, &(0x7f0000000580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @ldst={0x0, 0x0, 0x4, 0x7, 0x2, 0xffffffffffffffe0, 0x1}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff}, @printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x109}}, @ldst={0x0, 0x2, 0x4, 0x9, 0x6, 0x80, 0x1}, @alu={0x4, 0x0, 0xc, 0x4, 0x0, 0x0, 0x8}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x400}, @tail_call={{0x18, 0x2, 0x1, 0x0, r6}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000340)='GPL\x00', 0xe, 0xed, &(0x7f0000000740)=""/237, 0x21880, 0x1, '\x00', r9, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000003c0)={0x5, 0x2, 0x6, 0x7}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000400)=[r6, r8, r6], &(0x7f00000004c0)=[{0x5, 0x5, 0xd}, {0x5, 0x1, 0x5, 0x7}, {0x1, 0x5, 0x9, 0x6}, {0x6, 0x1, 0xb, 0xa}, {0x5, 0x2, 0x6}], 0x10, 0x40, @void, @value}, 0x94) 55.421770197s ago: executing program 1 (id=3418): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00'}, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0x17, 0x8, 0x40, 0x42, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r0}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001600)={r0, &(0x7f0000000580), &(0x7f0000001580)=""/92}, 0x20) syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x42, 0x1}}}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) socket(0x10, 0x803, 0x0) r5 = socket$netlink(0x10, 0x3, 0x15) writev(r5, &(0x7f0000000000)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80fae0090f000000000000a2bc5603ca00000f7f89000000200000004a2471083ec6811778581acb6c0101ff0000000309", 0x48}], 0x1) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000080000000c"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000180)='kfree\x00', r7}, 0x18) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000011c0)=@newtaction={0xe6c, 0x30, 0x25, 0x0, 0x25dfdbfc, {}, [{0xe58, 0x1, [@m_pedit={0xe54, 0x1, 0x0, 0x0, {{0xa}, {0xe28, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x4}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x8000}, {0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x0, 0xe69d}, {0x0, 0x0, 0x0, 0x3}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, {0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0xfffffffc}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7d}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0xe}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {0x0, 0xfffffffc}, {}, {0x0, 0x2}, {}, {}, {}, {}, {0x0, 0x0, 0x4}, {}, {0xfffffffd}, {}, {0x5}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x7}, {}, {}, {0x6}, {0x0, 0xea}, {}, {0x0, 0x0, 0x0, 0x2}, {0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {0xcf, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x0, 0x2, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0xa3}, {}, {}, {}, {}, {0x0, 0xfffffffe}, {}, {0x0, 0x0, 0xfffffffd}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x4, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x6}], [{}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x4}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe6c}}, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x0, 0x3}, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000001ec0), 0xffffffffffffffff) r10 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x641, 0x0) flock(r10, 0x2) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x30, r9, 0x1, 0x70bd25, 0x0, {{}, {}, {0x14, 0x19, {0x80000000, 0x4000001, 0x1, 0x5}}}}, 0x30}, 0x1, 0x0, 0x0, 0x20040803}, 0x20000000) r11 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_S_CTRL(r11, 0xc008561c, &(0x7f0000000000)={0xf0f03c, 0x2}) 55.177068304s ago: executing program 1 (id=3420): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040), 0x6) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw-serpent-avx\x00'}, 0x58) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) fsopen(&(0x7f0000000180)='devtmpfs\x00', 0x0) r2 = syz_open_procfs(0xffffffffffffffff, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x2c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x61, 0x5, 0x0, 0x7a, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r8, 0x147, 0x0, 0x0, {{}, {}, {0x14, 0x19, {0x1, 0x800000}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4000800}, 0x80c4) connect$inet(r6, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x6}, {0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0x1}, {{@in=@multicast2, 0x0, 0x33}, 0x0, @in=@loopback, 0x3504, 0x0, 0x0, 0xb7, 0xfffffffe, 0x5}}, 0xe8) r9 = syz_open_dev$media(&(0x7f00000007c0), 0x2, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r9, 0xc0487c04, 0x0) ioctl$MEDIA_IOC_SETUP_LINK(r9, 0xc0347c03, &(0x7f0000000e80)={{}, {0x80000000, 0x0, 0x0, [0x3, 0x80]}}) sendmmsg(r6, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000040)="d9cb0800000000000000ad3dbc39ccbd630e8ef9170ccf07ef1800322de53ae3b1", 0x21) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r2, 0xc0205710, &(0x7f0000000000)={0x1, 0x1000, 0x0, 0x1, 0xa41}) ioctl$sock_bt_hci(r0, 0x400448e7, &(0x7f0000000080)) 40.088038277s ago: executing program 33 (id=3420): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040), 0x6) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw-serpent-avx\x00'}, 0x58) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) fsopen(&(0x7f0000000180)='devtmpfs\x00', 0x0) r2 = syz_open_procfs(0xffffffffffffffff, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x2c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x61, 0x5, 0x0, 0x7a, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r8, 0x147, 0x0, 0x0, {{}, {}, {0x14, 0x19, {0x1, 0x800000}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4000800}, 0x80c4) connect$inet(r6, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x6}, {0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0x1}, {{@in=@multicast2, 0x0, 0x33}, 0x0, @in=@loopback, 0x3504, 0x0, 0x0, 0xb7, 0xfffffffe, 0x5}}, 0xe8) r9 = syz_open_dev$media(&(0x7f00000007c0), 0x2, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r9, 0xc0487c04, 0x0) ioctl$MEDIA_IOC_SETUP_LINK(r9, 0xc0347c03, &(0x7f0000000e80)={{}, {0x80000000, 0x0, 0x0, [0x3, 0x80]}}) sendmmsg(r6, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000040)="d9cb0800000000000000ad3dbc39ccbd630e8ef9170ccf07ef1800322de53ae3b1", 0x21) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r2, 0xc0205710, &(0x7f0000000000)={0x1, 0x1000, 0x0, 0x1, 0xa41}) ioctl$sock_bt_hci(r0, 0x400448e7, &(0x7f0000000080)) 5.976598359s ago: executing program 3 (id=3633): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) syz_open_procfs(0x0, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r2, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000240)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "e5ff04", 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x1, 0x0, 0x200, {[@window={0x3, 0x3}]}}}}}}}}, 0x0) 5.967236954s ago: executing program 5 (id=3643): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x268}, 0x1, 0x0, 0x0, 0x1096}, 0x0) syz_open_dev$video4linux(&(0x7f0000000100), 0x8, 0x22c80) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001a1401002abd700001dcdf250800010000000000090002"], 0x24}, 0x1, 0x0, 0x0, 0x4000801}, 0x40800) ioperm(0x0, 0x6, 0x2da3b9f3) r3 = openat$binder_debug(0xffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) fchown(r3, 0x0, 0xffffffffffffffff) r4 = dup(r1) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) socket$nl_netfilter(0x10, 0x3, 0xc) io_uring_enter(0xffffffffffffffff, 0x2ded, 0x4000, 0x0, 0x0, 0x0) openat$rdma_cm(0xffffff9c, &(0x7f0000000240), 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r5, &(0x7f0000001240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x14, r6, 0x1, 0x0, 0x8004}, 0x14}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) r7 = add_key$fscrypt_v1(&(0x7f00000000c0), &(0x7f0000000100)={'fscrypt:', @desc3}, &(0x7f0000000140)={0x0, "9aa064e8c967b606bf482abd5cca6e5414a294532813bb399efa467c29a4de3ddea94eb855226ef2b1256f84edf008805066c345f9ef6f87030d1ce2327379ac"}, 0x48, 0xfffffffffffffffb) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='R\x10rust\xe3c*sgrVex;De', r7) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3000000, 0x80010, 0xffffffffffffffff, 0xfeba0000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)) r8 = accept4$unix(r4, 0x0, &(0x7f0000000080), 0x80800) connect$unix(r8, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) 5.07869198s ago: executing program 0 (id=3634): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x20200, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x800, 0x34324152, 0x2, 0xb, [{}, {}, {0xfffffffd}, {0xfffffffd}, {}, {0x0, 0x1000000}], 0x0, 0x0, 0x0, 0x1}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20004080}, 0x4) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x38f3a, 0x8000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'geneve1\x00'}]}, 0x48}}, 0x0) sendmsg$NL80211_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="100029bd7000fedbdf25410000000c00990008000000050000000800a0000500000008042201d30000000800a000000000e0080022011d030000"], 0x40}, 0x1, 0x0, 0x0, 0x20040004}, 0x4000) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x20) connect$l2tp6(r3, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_SPLICE={0x1e, 0x58, 0x0, @fd_index=0x7, 0x400, {0x0, r2}, 0x77e7f3d6, 0x1, 0x1, {0x0, 0x0, r3}}) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_WASH={0x8, 0xd, 0x1}]}}]}, 0x3c}}, 0x0) sendmmsg$inet6(r3, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1c, 0x0}}], 0x17fd147c801ae9ab, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000200)={@dev}, 0x14) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r7, 0xc00caee0, &(0x7f0000000000)={0x4, 0xffffffffffffffff, 0x1}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20080, 0x80e1}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) close(0xffffffffffffffff) 5.078274824s ago: executing program 5 (id=3635): socket$inet_tcp(0x2, 0x1, 0x0) socket$kcm(0x10, 0x400000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket(0x40000000015, 0x1, 0x0) syz_open_dev$sndctrl(&(0x7f0000000600), 0x0, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020e0000150000000000000000000000030005000000000002004e24ac1e00010000000000000000030006003c000000020000fc34000000000000000000000001001800000000000800120000000200fcffffff0000000006003300000000000000000000000000fe8000000000000000000000000000aa00000000000000000000000000000000040003"], 0xa8}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x3ef, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) socket(0x10, 0x803, 0x0) socket(0x200000100000011, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r2, 0x0, 0x0}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x200401, &(0x7f0000000840)=ANY=[@ANYBLOB="78226e6f65786163638173733d616e792c63616368653d66736361636865"]) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={0xffffffffffffffff, 0x7, 0x18}, 0xc) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x1d, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x9}}}, 0xb8}}, 0x4000) socket$inet6_tcp(0xa, 0x1, 0x0) 5.078082903s ago: executing program 3 (id=3637): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {}, {0x5, 0xffe0}}}, 0x24}}, 0x0) r4 = dup(r0) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) socket$nl_xfrm(0x10, 0x3, 0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3800006, 0x4008031, 0xffffffffffffffff, 0xd6d4a000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000017, 0x4031, 0xffffffffffffffff, 0xb9654000) munlockall() socket$inet6(0xa, 0x80003, 0x6) r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r5, 0x7a0, &(0x7f0000000080)={@my=0x0}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r5, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x20005e, 0x0, 0x9}) r6 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r6, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r6, 0x7a0, &(0x7f0000000240)={@host, 0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r6, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x20005e}) 4.936525645s ago: executing program 0 (id=3639): r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x3309) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd74) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) r3 = socket(0x10, 0x80002, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010e7010000000000000000000000000a20000000000a03000000000000000000070000000c00044000000000000000021c000000090a010400000000000000000700000008000a4000000003"], 0x64}, 0x1, 0x0, 0x0, 0x4004001}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000d0425bd7000fcdbff2500000000", @ANYRES32=0x0, @ANYBLOB="1000000000c600001c0012800b00010062726964676500000c0002800800130011000000"], 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmmsg$alg(r3, &(0x7f00000000c0), 0x492492492492627, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'veth1_to_bridge\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="18010000540000012abd7000fedbdf250700000078ce1fb15b9f1a873589c5321d6db9adcdcd43a2e79155f9a7d0030000005f85b739a3fb3696ff05af41dbce777638ebb68736a78464cbb3e6e52211c99afe761e3b57eb5cdc0738", @ANYRES32=r8, @ANYBLOB="20000100", @ANYRES32=r8, @ANYBLOB="00000400fe88000000000000000000000000010186dd000020000100", @ANYRES32=r8, @ANYBLOB="01010000ac14143900000000000000000000000086dd000020000100", @ANYRES32=r5, @ANYBLOB="0101000000000000000000000000000000000000c5b3000020000100", @ANYRES32=r8, @ANYBLOB="000001002001000000000000000000000000000086dd000020000100", @ANYRES32=r5, @ANYBLOB="01030000fc0000000000000000000000000000000000000020000100", @ANYRES32=r5, @ANYBLOB="0002010000000000000000000000ffffffffffff0800000020000100", @ANYRES32=0x0, @ANYBLOB="02030100ac1e010100000000000000000000000086dd000020000100", @ANYRES32=0x0, @ANYBLOB="01010200ac1414bb0000000000000000000000008edd0000"], 0x118}, 0x1, 0x0, 0x0, 0x40001}, 0x40) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f0000000540)={@rand_addr=' \x01\x00', @local, @private1, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x4400046, r5}) creat(&(0x7f0000000040)='./file0\x00', 0x81) socket$inet_smc(0x2b, 0x1, 0x0) close(0x3) 4.908290642s ago: executing program 5 (id=3649): socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$vim2m(&(0x7f00000000c0), 0x7, 0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_test', 0x141a82, 0x0) socket$netlink(0x10, 0x3, 0x2) sendfile(r3, r3, &(0x7f0000000000)=0x7, 0x4) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0xa0000, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000240)=[@mss, @window={0x3, 0xf20f, 0xf}, @timestamp, @mss={0x2, 0x1}, @window, @window={0x3, 0x0, 0xfffc}, @timestamp, @timestamp], 0x8) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000040)='nv\x00', 0x3) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000001c0), 0xc7) sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r4, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) socket$nl_netfilter(0x10, 0x3, 0xc) 4.03388886s ago: executing program 4 (id=3642): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2, 0x80010, 0xffffffffffffffff, 0x6a561000) r1 = syz_open_dev$vim2m(&(0x7f0000000500), 0x6, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0x5460, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$midi(&(0x7f00000001c0), 0xac, 0x0) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r5, 0x201, 0x0, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0xffffffff}}}, 0x24}}, 0x20000010) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r6, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x4e20, 0x4e49bf67, @mcast2}}}, 0x84) setsockopt$inet6_MCAST_MSFILTER(r6, 0x29, 0x30, &(0x7f0000000b00)={0xb, {{0xa, 0x0, 0x0, @mcast2}}, 0x0, 0x1, [{{0xa, 0x0, 0x0, @remote}}]}, 0x10c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000003a80)={0x0, 0x1c, &(0x7f0000003980)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000003ac0)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x6d, &(0x7f0000000080), &(0x7f00000000c0)=0x3930) 4.033415376s ago: executing program 3 (id=3644): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) openat$dlm_monitor(0xffffff9c, &(0x7f0000000000), 0x40, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x0, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000009c0)={&(0x7f0000000740)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x7, [@datasec={0x6, 0x0, 0x0, 0xf, 0x1, [], '\t'}, @datasec={0x0, 0x0, 0x0, 0xf, 0x3, [], "e10418"}]}, {0x0, [0x0, 0x2e, 0x61, 0x61, 0x30]}}, 0x0, 0x3b, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) nanosleep(&(0x7f0000000000)={0x80000000, 0x8}, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000100)='./file0\x00') pwritev2(0xffffffffffffffff, &(0x7f0000000980)=[{0x0}, {&(0x7f0000000500)="be81e1310fb465f31a42f6efa58772d291c57be2782f6ff63ea3517e50771580447f7d195ee15e186027d518b2c77a051895fece1dc014c33d6928ab0376cf4077399b51451472f53be50af6897bc0fa353cad9156d19de3665191fdf17a2f07f4286cea5c10fbb81feb85e406524a47b19781", 0x73}, {0x0}], 0x3, 0x5, 0xa, 0x14) timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) timer_settime(0x0, 0x1, &(0x7f000006b000)={{0x0, 0x8}, {0x77359400}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x64) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@metacopy_off}]}) chdir(&(0x7f0000000140)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x181942, 0x0) 4.030430687s ago: executing program 0 (id=3652): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x300) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6(0xa, 0x1, 0x0) socketpair(0x23, 0x80009, 0x88, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@mcast2, 0x0, 0x2b}, 0x0, @in=@empty}}, 0xe8) r5 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r5, 0x1, 0x8, 0x0, 0x0) sendmsg$key(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb4, 0x13, 0xcb23c9c9931e99e9, 0x70bd2c, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x60, 0x0, 0x0, 0x0, 0xee01}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x3}}, 0xb4}, 0x1, 0x0, 0x0, 0x80}, 0x0) 3.707025092s ago: executing program 5 (id=3645): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) socket$inet(0x2, 0x6, 0x0) syz_open_procfs(0x0, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0x14, 0x2d, 0x101, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r4) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r5, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000240)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "e5ff04", 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x1, 0x0, 0x200, {[@window={0x3, 0x3}]}}}}}}}}, 0x0) getpid() 3.004345262s ago: executing program 4 (id=3646): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x268}, 0x1, 0x0, 0x0, 0x1096}, 0x0) syz_open_dev$video4linux(&(0x7f0000000100), 0x8, 0x22c80) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001a1401002abd700001dcdf250800010000000000090002"], 0x24}, 0x1, 0x0, 0x0, 0x4000801}, 0x40800) ioperm(0x0, 0x6, 0x2da3b9f3) r3 = openat$binder_debug(0xffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) fchown(r3, 0x0, 0xffffffffffffffff) r4 = dup(r1) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) socket$nl_netfilter(0x10, 0x3, 0xc) io_uring_enter(0xffffffffffffffff, 0x2ded, 0x4000, 0x0, 0x0, 0x0) openat$rdma_cm(0xffffff9c, &(0x7f0000000240), 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r5, &(0x7f0000001240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x14, r6, 0x1, 0x0, 0x8004}, 0x14}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) r7 = add_key$fscrypt_v1(&(0x7f00000000c0), &(0x7f0000000100)={'fscrypt:', @desc3}, &(0x7f0000000140)={0x0, "9aa064e8c967b606bf482abd5cca6e5414a294532813bb399efa467c29a4de3ddea94eb855226ef2b1256f84edf008805066c345f9ef6f87030d1ce2327379ac"}, 0x48, 0xfffffffffffffffb) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='R\x10rust\xe3c*sgrVex;De', r7) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3000000, 0x80010, 0xffffffffffffffff, 0xfeba0000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)) r8 = accept4$unix(r4, 0x0, &(0x7f0000000080), 0x80800) connect$unix(r8, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) 2.853222043s ago: executing program 0 (id=3647): openat$cdrom(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = socket$inet(0x2, 0x4000000000080001, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) recvmmsg(r0, 0x0, 0x0, 0x12140, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/wakeup_count', 0x101a02, 0x0) sendfile(r4, r4, 0x0, 0x101) fdatasync(r3) mount(0x0, 0x0, &(0x7f0000000080)='proc\x00', 0x0, 0x0) getdents(0xffffffffffffffff, &(0x7f0000001280)=""/4075, 0xffb) getsockopt$inet_mreqsrc(r0, 0x0, 0x28, 0x0, &(0x7f00000002c0)) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$ARPT_SO_GET_INFO(r5, 0x0, 0x60, &(0x7f0000000700)={'filter\x00', 0x0, [0x9, 0x9]}, &(0x7f0000000780)=0x44) r6 = memfd_create(&(0x7f0000000300)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xae\xd1md\xc8\x85\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;2\xb5\xe1jS\xeb\xbf%||\xa0\x8e\x01\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x4) execveat(r6, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) symlink(&(0x7f00000049c0)='.\x00', &(0x7f00000059c0)='./file0\x00') syz_init_net_socket$ax25(0x3, 0x3, 0xcd) 2.344053486s ago: executing program 4 (id=3648): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {}, {0x5, 0xffe0}}}, 0x24}}, 0x0) r4 = dup(r0) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) socket$nl_xfrm(0x10, 0x3, 0x6) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x6, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3800006, 0x4008031, 0xffffffffffffffff, 0xd6d4a000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000017, 0x4031, 0xffffffffffffffff, 0xb9654000) munlockall() r5 = socket$inet6(0xa, 0x80003, 0x6) r6 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r6, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r6, 0x7a0, &(0x7f0000000080)={@my=0x0}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r6, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x20005e, 0x0, 0x9}) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000240)={@host, 0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(0xffffffffffffffff, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x20005e}) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x100, 0x100, 0x9, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000), 0xcff5, r7}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500), &(0x7f0000000280), 0x2, r7}, 0x38) sendmmsg(r5, &(0x7f0000000480), 0x2e9, 0x0) 2.153929263s ago: executing program 3 (id=3650): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYBLOB="04133edac90004e7"], 0x8) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x58, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="8fcf"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) socket$netlink(0x10, 0x3, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) socket$pppoe(0x18, 0x1, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x2, 0x0, 0x3, 0x8000}, 0x0, &(0x7f00000002c0)={0x3ff, 0xf7fffffffffff4f3, 0x0, 0x2, 0x0, 0x0, 0x7fffffff, 0xffffffffffffffb1}, 0x0, 0x0) ioctl$KIOCSOUND(r3, 0x4b2f, 0x4) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x94, r4, 0x300, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x94}}, 0x41) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000280)=ANY=[@ANYRESHEX=0x0, @ANYRESDEC=0x0]) socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c00078018000180140002"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) 2.14770982s ago: executing program 5 (id=3651): syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet(0x2, 0x6, 0x0) syz_open_procfs(0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000240)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "e5ff04", 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x1, 0x0, 0x200, {[@window={0x3, 0x3}]}}}}}}}}, 0x0) getpid() 2.057180399s ago: executing program 5 (id=3653): socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$video(&(0x7f0000000180), 0x3ff, 0x2000) r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x8801, 0x0) socket$packet(0x11, 0x2, 0x300) socket$inet6_tcp(0xa, 0x1, 0x0) ioperm(0x0, 0x9, 0x5) inotify_init1(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = syz_io_uring_setup(0x4d7, &(0x7f0000000200)={0x0, 0x7a7b, 0x10000, 0x3, 0x316}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f00000000c0)={0x1, 0xff, 0x5, 0xfffc, 0x0, "f682756c98cc948c"}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x1c, 0x7, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4080}, 0x24044894) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000000)={0x0, 0xff80, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="50010000100001000000000000020000ac1414bb000000000000000000000000000000000000000000000000000000004e2400004e2000"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x150}}, 0x0) mmap(&(0x7f000085e000/0x3000)=nil, 0x3000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) ftruncate(0xffffffffffffffff, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendfile(r7, 0xffffffffffffffff, 0x0, 0x578410eb) write$midi(0xffffffffffffffff, &(0x7f0000000500)="10d36c13fa692d4208d9a32d50542c1b9ede29cd68155c6fea5262324ffb61a7e3f8d0872a74ee090aa03314c9df72ffaafdbf84ff90606e3aee244b3300e5bea5e74c75956d56c00bb7c3eaba7691a38a144bd330ee599a98d6d22bb5c161c28382a9d9fb5b107ad71f937952296aed8b51183ec15b4c7bc6ca5b130cf50a21b09e882445011994b5026c16be73af6bc257aee5ed9cc670a8b127af0a17fe6f1c06b024821ff71095157013afa687a2f845874eeb44fca95dfd5ce2343f7f4d94e92705046f8d919f3dba0490d142d19ef0fb14553c7fc7c25cb3d4075440e9692fa81e499f48f39cd9880bae20eb358a9470f3", 0xf4) socket$packet(0x11, 0x3, 0x300) 1.949030063s ago: executing program 0 (id=3654): syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x6, 0x2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x5}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000100)={0x4, 0x0, 0x0, 0x1000, &(0x7f0000ffe000/0x1000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000000000002100004000000000ff"]) ioctl$KVM_RUN(r6, 0xae80, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r7 = socket$inet6(0xa, 0x80002, 0x0) r8 = syz_open_dev$video(0x0, 0xa7, 0x0) ioctl$VIDIOC_S_FMT(r8, 0xc0d05605, 0x0) quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0) ioctl$VIDIOC_DBG_S_REGISTER(r8, 0x4038564f, 0x0) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @local, 0x2}, 0x1c) sendmmsg$inet6(r7, 0x0, 0x0, 0x4001c00) 1.366505339s ago: executing program 4 (id=3655): syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000240)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "e5ff04", 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x1, 0x0, 0x200, {[@window={0x3, 0x3}]}}}}}}}}, 0x0) 1.366010716s ago: executing program 3 (id=3656): r0 = socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0xe, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x0, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0xffffffffffffffff, 0x4}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x3, 0x4, &(0x7f0000000080)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x20}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x88b81, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000100)=0x14) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f00000002c0)={0x8040000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r5 = openat$incfs(0xffffffffffffff9c, 0x0, 0x100, 0x1c4) openat(r5, &(0x7f0000000040)='./file0\x00', 0x18801, 0x100) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) syz_clone(0x20304000, 0x0, 0x0, 0x0, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f00000006c0)="df", 0x1}], 0x1}}], 0x1, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x0) 1.096893528s ago: executing program 4 (id=3657): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000fcffffffb702000000000000b703000001000100850000002d00000085000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mkdirat(0xffffffffffffff9c, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) mount$9p_unix(&(0x7f0000000180)='./file0/file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x10000, &(0x7f0000000440)={'trans=unix,', {[{@debug}, {@access_user}, {@access_uid={'access', 0x3d, 0xee01}}, {@access_user}, {@dfltgid}, {@loose}], [{@smackfstransmute={'smackfstransmute', 0x3d, 'bridge0\x00'}}, {@fsmagic={'fsmagic', 0x3d, 0x7}}]}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@ipv4_newrule={0x1c, 0x20, 0x300, 0x0, 0x25dfdbfb, {0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x1c}}, 0x40) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x1c, 0x8, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) pipe2$9p(&(0x7f0000000100), 0x80000) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x48, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, r5, 0x800, 0x55007}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x2}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc, 0x23, 0x1}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) timer_settime(0x0, 0x1, &(0x7f0000000240)={{0x77359400}, {0x0, 0x9}}, 0x0) iopl(0x3) 146.911212ms ago: executing program 3 (id=3658): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_open_dev$swradio(&(0x7f0000000000), 0x0, 0x2) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) socketpair$unix(0x1, 0x2, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b000000070000000200"], 0x48) r0 = socket$inet6(0xa, 0x800, 0x0) socket$tipc(0x1e, 0x2, 0x0) bind$inet6(r0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x300000e, 0x50032, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x17, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000020000000000000018000000000000950000000000000000000000002d7a5474c95c490aae3a585373f8de935a76496b4dbb16b27d0afe753441c41d53d660"], &(0x7f0000000040)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) r1 = syz_io_uring_setup(0x38fe, 0x0, 0x0, &(0x7f00000001c0)) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x77359400}, {0x0, 0x3938700}}, 0x0) io_uring_enter(r1, 0x2def, 0x4000, 0x0, 0x0, 0x0) getresuid(0x0, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104a5270b7357000000925e4a44", @ANYRES32, @ANYBLOB="0dfa130016000000240012000c00010000000000000000000c0002f60800000001180000080001"], 0x44}}, 0x0) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x20, 0x19, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x20}}, 0x4010010) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507"], 0x48}}, 0x0) 12.179014ms ago: executing program 4 (id=3659): r0 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000200000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) socket$nl_route(0x10, 0x3, 0x0) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x54ecb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000300)="68541e73ebca8eab21305de0595d717834d408f1ac3ee2a879951a4abc8ffa2e0b23c323ea4f993be1e198ddb7457680508ca42484897aa4ee6261d2c06d622a8f6ed1fc2749da", 0x47) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000800)=ANY=[], 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1313f, 0xffffffffffffffff, 0x0, 0x0, &(0x7f00000003c0), 0x10, 0x746, @void, @value}, 0x94) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r4) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r5, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r4, 0x4010744d, &(0x7f0000000180)) bind$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x712, 0x0, 0xfffffffffffffd25) 0s ago: executing program 0 (id=3660): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) socket$inet(0x2, 0x6, 0x0) syz_open_procfs(0x0, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0x14, 0x2d, 0x101, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r4) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r5, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000240)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "e5ff04", 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x1, 0x0, 0x200, {[@window={0x3, 0x3}]}}}}}}}}, 0x0) getpid() kernel console output (not intermixed with test programs): r" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe4579 code=0x7ffc0000 [ 418.095835][ T40] audit: type=1326 audit(2000000130.809:829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13289 comm="syz.4.1999" exe="/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf7fe4579 code=0x7ffc0000 [ 418.137282][ T40] audit: type=1326 audit(2000000130.889:830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13289 comm="syz.4.1999" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe4579 code=0x7ffc0000 [ 420.196697][T13328] lo speed is unknown, defaulting to 1000 [ 420.273216][T13328] syzkaller0 speed is unknown, defaulting to 1000 [ 420.604673][T13331] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 421.329365][T13348] netlink: 156 bytes leftover after parsing attributes in process `syz.4.2016'. [ 421.509978][T13348] bond0: (slave wlan1): Releasing backup interface [ 421.529928][T13348] mac80211_hwsim hwsim11 wlan1 (unregistering): left promiscuous mode [ 421.537059][T13348] mac80211_hwsim hwsim11 wlan1 (unregistering): left allmulticast mode [ 422.254058][T13373] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2024'. [ 422.256913][T13373] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2024'. [ 422.328716][T13370] gre0: Master is either lo or non-ether device [ 422.412617][T13373] Cannot find add_set index 0 as target [ 423.120155][T13383] IPVS: stopping backup sync thread 13219 ... [ 423.325436][T13390] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2028'. [ 423.593592][T13396] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2030'. [ 424.090568][T13408] lo speed is unknown, defaulting to 1000 [ 424.309167][T13408] syzkaller0 speed is unknown, defaulting to 1000 [ 424.367262][T13416] openvswitch: netlink: Missing key (keys=40, expected=80) [ 424.372341][T13416] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2035'. [ 424.799559][T13419] capability: warning: `syz.4.2036' uses 32-bit capabilities (legacy support in use) [ 425.420340][T13434] pim6reg: entered allmulticast mode [ 425.436966][T13434] pim6reg: left allmulticast mode [ 426.513970][T13455] IPVS: Unknown mcast interface: wlan0 [ 427.378654][T13467] IPVS: length: 246 != 24 [ 428.488698][T13483] siw: device registration error -23 [ 428.980425][ T40] kauditd_printk_skb: 47 callbacks suppressed [ 428.980437][ T40] audit: type=1326 audit(2000000142.359:878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13484 comm="syz.1.2053" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e579 code=0x7ffc0000 [ 429.053403][ T40] audit: type=1326 audit(2000000142.359:879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13484 comm="syz.1.2053" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e579 code=0x7ffc0000 [ 429.136762][ T40] audit: type=1326 audit(2000000142.359:880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13484 comm="syz.1.2053" exe="/syz-executor" sig=0 arch=40000003 syscall=125 compat=1 ip=0xf705e579 code=0x7ffc0000 [ 429.162396][ T40] audit: type=1326 audit(2000000142.359:881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13484 comm="syz.1.2053" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e579 code=0x7ffc0000 [ 429.198601][ T40] audit: type=1326 audit(2000000142.359:882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13484 comm="syz.1.2053" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e579 code=0x7ffc0000 [ 429.241366][ T40] audit: type=1326 audit(2000000142.359:883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13484 comm="syz.1.2053" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf705e579 code=0x7ffc0000 [ 429.289527][ T40] audit: type=1326 audit(2000000142.359:884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13484 comm="syz.1.2053" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e579 code=0x7ffc0000 [ 429.359546][ T40] audit: type=1326 audit(2000000142.359:885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13484 comm="syz.1.2053" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e579 code=0x7ffc0000 [ 429.397241][ T40] audit: type=1326 audit(2000000142.359:886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13484 comm="syz.1.2053" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf705e579 code=0x7ffc0000 [ 429.406919][ T40] audit: type=1326 audit(2000000142.359:887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13484 comm="syz.1.2053" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e579 code=0x7ffc0000 [ 429.570030][T13505] IPVS: sync thread started: state = BACKUP, mcast_ifn = wlan0, syncid = 1, id = 0 [ 431.398097][T13526] netlink: 'syz.1.2071': attribute type 11 has an invalid length. [ 431.537800][T13526] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2071'. [ 432.154979][T13542] netlink: 'syz.0.2065': attribute type 4 has an invalid length. [ 432.164804][T13542] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2065'. [ 432.202480][T13542] : renamed from bond0 (while UP) [ 432.226252][T13544] IPVS: Unknown mcast interface: wlan0 [ 432.528763][T13549] lo speed is unknown, defaulting to 1000 [ 432.859475][T13549] syzkaller0 speed is unknown, defaulting to 1000 [ 433.890062][T13565] /dev/nullb0: Can't lookup blockdev [ 434.524104][T13575] lo speed is unknown, defaulting to 1000 [ 434.843196][T13575] syzkaller0 speed is unknown, defaulting to 1000 [ 435.915416][T13587] ptrace attach of "/syz-executor exec"[6077] was attempted by ""[13587] [ 437.531825][ T40] kauditd_printk_skb: 1 callbacks suppressed [ 437.531840][ T40] audit: type=1326 audit(2000000150.919:889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13608 comm="syz.0.2084" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e579 code=0x7ffc0000 [ 437.597164][ T40] audit: type=1326 audit(2000000150.919:890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13608 comm="syz.0.2084" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e579 code=0x7ffc0000 [ 437.637790][ T40] audit: type=1326 audit(2000000150.919:891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13608 comm="syz.0.2084" exe="/syz-executor" sig=0 arch=40000003 syscall=125 compat=1 ip=0xf706e579 code=0x7ffc0000 [ 437.657288][ T40] audit: type=1326 audit(2000000150.919:892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13608 comm="syz.0.2084" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e579 code=0x7ffc0000 [ 437.680575][ T40] audit: type=1326 audit(2000000150.919:893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13608 comm="syz.0.2084" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e579 code=0x7ffc0000 [ 437.704823][ T40] audit: type=1326 audit(2000000150.919:894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13608 comm="syz.0.2084" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf706e579 code=0x7ffc0000 [ 437.730066][ T40] audit: type=1326 audit(2000000150.919:895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13608 comm="syz.0.2084" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e579 code=0x7ffc0000 [ 437.806574][T13614] ptrace attach of "/syz-executor exec"[5955] was attempted by "©¡y4¦mC£‰€ÛÍ鳘2‡} R™WHMšhO~úã'‘Ò·\x0b*¾v=Ya¬ÿìF EѦõæêbñ Ä 7×k~° ¹ØCÓ\x0aˆP).Ûñœ•IÀ´2¤ü”á;`k$ÇTÏÇ?Ns_k!e‘£°ëš¥wJ>0_„ ^ëp9’šHTÙ‹f|~_²tPS\x5cXñh³¶Š%ª_\x1b¸×âºîÑu}ýýjØpŒ«s)@/±TkjÙÿ·-«%, {É\x0cr\x0dl ñ–ù\x07mp_ra \x0d¸Ü‘ÙT¤æ\x0cwö®?Õ:£ÜGI^¾pFJ6}÷\x1bÛrHäÓ¸¹SðÙ\x07ªÀ±Â2ŸSúÝL-‚ý½\x0dÝâ”\x5c¬uàbR!Óá\x0b¸éVÚåI÷݄ЊGÚ\x09&ÁÀ]/Ëê÷å‘ H97ªÄix°â$±=ƒCB”ˆÄ~÷ñØO‘àŠ·¼eGæ*ê¨ëO¿0ùö„„gò^àrÚ%Eé§à3‚AcàÖ¶|p‹%\x0aq¼qLÇš:’X|a2‘8;µp\x0di—mzÐU#§Z¾ûÙuõC8)1m…:8\x22\x1b%]eŸ€VþµZHûJ€ÜV‰ÉAZ‡|'I´Ó)ç@<±0ó=Q@yƒ“p5Ìú޲³»—eÂ~‰\x1b+³\x1bËS’¸ÀöYÁΔ‰µañçh,ÓU¶'+î¥#yW}òá‹ó˜àêÍ\x07Ð j¤'Oyeø.ÖÅ\x5cðÇè.dŸÄ`ÓˆLGÅ\x0aÒ‡(’IPô›±´*ÒÜ“ô„mn“™k\x0dõÿ$.@<@ÏÝÔ„+ßÏX)0r(l–\x0aý¼¢ÿÏ8á‘ç BûÎÀS\x0aß^`à%‹»MÕ* ^MCv{Ɖb‘ˆ!¢uþÛc e¤ÂãªñöýÇÛÎGÊj¢²þy©Ú;zêû*†ÄT®Y™ë¹\x0d¶ÊÕ¯Þ±µ‚VmF¹‹„2vžÝæòÍÁ¤ø¦©fHy:œ”£™§ô‘@Z*Ÿ”Á[v*\x0a\x07AwŒ°”(ÖN*ýEIZepê¿ý’¿­†ló²âm°uŸáÂVÁç­+æÈ—QSìó¶˜Ç^à$ÄP°žF'QÛŸ›\x0aº¯8.y›ÞWîc¾ÇèÕ ^Ãa0< [ 438.101061][ T40] audit: type=1326 audit(2000000150.919:896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13608 comm="syz.0.2084" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e579 code=0x7ffc0000 [ 438.234549][ T40] audit: type=1326 audit(2000000150.919:897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13608 comm="syz.0.2084" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf706e579 code=0x7ffc0000 [ 438.252438][T13622] netlink: 'syz.3.2087': attribute type 4 has an invalid length. [ 438.257219][ T40] audit: type=1326 audit(2000000150.919:898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13608 comm="syz.0.2084" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e579 code=0x7ffc0000 [ 439.475992][T13647] lo speed is unknown, defaulting to 1000 [ 439.568435][ T1414] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.575467][T13647] syzkaller0 speed is unknown, defaulting to 1000 [ 440.593416][T13668] IPVS: stopping backup sync thread 13255 ... [ 440.649583][T13676] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 440.655541][T13676] batman_adv: batadv0: Removing interface: virt_wifi0 [ 441.096428][T13682] lo speed is unknown, defaulting to 1000 [ 441.169966][T13682] syzkaller0 speed is unknown, defaulting to 1000 [ 441.771712][T13691] tmpfs: Unknown parameter 'us–öpÅta_block_hardlimit' [ 443.149453][T13709] IPVS: stopping backup sync thread 13714 ... [ 443.894016][T13725] gre0: Master is either lo or non-ether device [ 444.214555][ T40] kauditd_printk_skb: 1 callbacks suppressed [ 444.214565][ T40] audit: type=1326 audit(2000000157.559:900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13730 comm="syz.1.2117" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e579 code=0x7ffc0000 [ 444.247251][ T40] audit: type=1326 audit(2000000157.559:901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13730 comm="syz.1.2117" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e579 code=0x7ffc0000 [ 444.270134][ T40] audit: type=1326 audit(2000000157.559:902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13730 comm="syz.1.2117" exe="/syz-executor" sig=0 arch=40000003 syscall=30 compat=1 ip=0xf705e579 code=0x7ffc0000 [ 444.296397][ T40] audit: type=1326 audit(2000000157.559:903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13730 comm="syz.1.2117" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e579 code=0x7ffc0000 [ 444.335376][ T40] audit: type=1326 audit(2000000157.559:904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13730 comm="syz.1.2117" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e579 code=0x7ffc0000 [ 444.365908][ T40] audit: type=1326 audit(2000000157.559:905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13730 comm="syz.1.2117" exe="/syz-executor" sig=0 arch=40000003 syscall=321 compat=1 ip=0xf705e579 code=0x7ffc0000 [ 444.388783][ T40] audit: type=1326 audit(2000000157.559:906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13730 comm="syz.1.2117" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e579 code=0x7ffc0000 [ 444.416887][ T40] audit: type=1326 audit(2000000157.559:907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13730 comm="syz.1.2117" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e579 code=0x7ffc0000 [ 444.433727][ T40] audit: type=1326 audit(2000000157.569:908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13730 comm="syz.1.2117" exe="/syz-executor" sig=0 arch=40000003 syscall=224 compat=1 ip=0xf705e579 code=0x7ffc0000 [ 444.515177][ T40] audit: type=1326 audit(2000000157.569:909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13730 comm="syz.1.2117" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e579 code=0x7ffc0000 [ 444.953245][T13738] netlink: 'syz.4.2119': attribute type 1 has an invalid length. [ 445.157721][T13748] IPVS: Unknown mcast interface: wlan0 [ 445.660334][T13753] openvswitch: netlink: Missing key (keys=40, expected=80) [ 445.671755][T13753] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2124'. [ 446.541968][T13775] netlink: 'syz.4.2129': attribute type 11 has an invalid length. [ 446.717779][T13775] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2129'. [ 447.981292][T13794] futex_wake_op: syz.3.2133 tries to shift op by -33; fix this program [ 449.614013][T13812] siw: device registration error -23 [ 449.878362][T13826] bond4 (unregistering): Released all slaves [ 450.931345][ T40] kauditd_printk_skb: 196 callbacks suppressed [ 450.931360][ T40] audit: type=1804 audit(2000000164.319:1106): pid=13843 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.2145" name="file0" dev="tmpfs" ino=2941 res=1 errno=0 [ 451.130575][T13842] overlayfs: failed to resolve './file1': -2 [ 451.781579][T13849] IPVS: Unknown mcast interface: wlan0 [ 452.040223][T13852] ebtables: wrong size: *len 264, entries_size 144, replsz 144 [ 452.396831][T13862] tipc: Failed to remove unknown binding: 66,1,1/0:2065915200/2065915202 [ 452.407405][T13862] tipc: Failed to remove unknown binding: 66,1,1/0:2065915200/2065915202 [ 452.429694][T13862] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2159'. [ 453.582521][T13884] IPVS: stopping backup sync thread 13505 ... [ 454.274312][T13902] netlink: 71 bytes leftover after parsing attributes in process `syz.0.2164'. [ 454.422404][T13905] lo speed is unknown, defaulting to 1000 [ 454.495693][T13905] syzkaller0 speed is unknown, defaulting to 1000 [ 454.784406][T13913] IPVS: stopping backup sync thread 13916 ... [ 454.791517][T13916] IPVS: sync thread started: state = BACKUP, mcast_ifn = wlan0, syncid = 1, id = 0 [ 461.337246][T13971] batadv_slave_0: entered promiscuous mode [ 462.030146][T13967] batadv_slave_0: left promiscuous mode [ 464.270570][T13984] macsec0: entered promiscuous mode [ 464.272281][T13984] macsec0: entered allmulticast mode [ 464.273954][T13984] veth1_macvtap: entered allmulticast mode [ 464.990064][T13996] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 466.017606][T14003] Cannot find add_set index 3 as target [ 466.409893][T14010] netlink: 'syz.0.2196': attribute type 1 has an invalid length. [ 466.528113][T14014] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 466.590186][T14014] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 466.708489][T14014] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 466.794339][T14014] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 466.987027][T14014] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 467.030479][T14014] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 467.050706][T14014] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 467.082597][T14014] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 467.998152][T14052] tipc: Started in network mode [ 467.999776][T14052] tipc: Node identity ac14140f, cluster identity 4711 [ 468.001974][T14052] tipc: New replicast peer: 255.255.255.255 [ 468.018492][T14052] tipc: Enabled bearer , priority 10 [ 468.994869][T14074] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 469.146929][ T60] tipc: Node number set to 2886997007 [ 470.307568][T14109] Cannot find del_set index 320 as target [ 470.320322][T14109] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2217'. [ 470.330339][T14109] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2217'. [ 473.762629][T14158] xt_CT: No such helper "pptp" [ 474.604657][T14177] lo speed is unknown, defaulting to 1000 [ 474.870658][T14177] syzkaller0 speed is unknown, defaulting to 1000 [ 477.434306][T14217] lo speed is unknown, defaulting to 1000 [ 477.549441][T14217] syzkaller0 speed is unknown, defaulting to 1000 [ 478.473343][T14252] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2257'. [ 479.599452][T14275] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2262'. [ 480.528733][T14301] IPVS: sync thread started: state = BACKUP, mcast_ifn = wlan0, syncid = 1, id = 0 [ 480.535363][T14297] IPVS: stopping backup sync thread 14301 ... [ 481.548139][ T40] audit: type=1800 audit(2000000194.928:1107): pid=14322 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2276" name="SYSV00000000" dev="hugetlbfs" ino=2 res=0 errno=0 [ 481.731752][T14328] IPVS: stopping backup sync thread 14332 ... [ 481.771857][T14326] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 481.817673][T14326] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2278'. [ 484.532727][T14365] lo speed is unknown, defaulting to 1000 [ 484.660014][T14366] syz.0.2287 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 484.730975][T14365] syzkaller0 speed is unknown, defaulting to 1000 [ 484.782198][T14368] IPVS: stopping backup sync thread 14370 ... [ 485.418266][T14385] netlink: 'syz.4.2293': attribute type 29 has an invalid length. [ 486.221393][T14401] netlink: 'syz.4.2293': attribute type 29 has an invalid length. [ 486.310566][T14385] netlink: 'syz.4.2293': attribute type 29 has an invalid length. [ 486.707656][T14404] IPVS: stopping backup sync thread 14411 ... [ 486.774239][T14406] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 486.777184][T14406] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 487.455832][T14425] overlayfs: failed to clone upperpath [ 488.178107][T14432] xt_CT: You must specify a L4 protocol and not use inversions on it [ 488.364692][T14439] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2308'. [ 489.132236][T14442] lo speed is unknown, defaulting to 1000 [ 489.174675][T14443] IPVS: length: 78 != 8 [ 489.539686][T14442] syzkaller0 speed is unknown, defaulting to 1000 [ 489.579277][T14449] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2312'. [ 490.727874][T14464] veth0_to_team: left allmulticast mode [ 490.736188][T14464] netlink: 'syz.1.2315': attribute type 10 has an invalid length. [ 491.436403][T14475] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2317'. [ 491.999987][T14497] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2322'. [ 492.120673][T14501] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2323'. [ 492.200708][T14504] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2324'. [ 492.278432][T14507] netlink: 'syz.4.2325': attribute type 1 has an invalid length. [ 492.406752][T14509] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2326'. [ 492.484657][T14504]  (unregistering): Released all slaves [ 492.970581][T14521] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2330'. [ 493.014414][T14524] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2329'. [ 494.637542][T14554] bond0: (slave bond_slave_0): Releasing backup interface [ 494.654674][T14554] bond_slave_0: left promiscuous mode [ 494.659884][T14554] bond0: (slave bond_slave_1): Releasing backup interface [ 494.672649][T14558] netlink: 'syz.3.2338': attribute type 10 has an invalid length. [ 494.675236][T14554] bond_slave_1: left promiscuous mode [ 494.697769][T14554] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 494.708483][T14554] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 494.756909][T14554] bond0: (slave macvlan2): Releasing backup interface [ 494.771573][T14564] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2339'. [ 494.771773][T14554] macvlan2: left promiscuous mode [ 494.833955][T14554] bond1: (slave geneve2): Releasing active interface [ 494.842522][ T40] audit: type=1326 audit(2000000208.228:1108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14549 comm="syz.0.2337" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e579 code=0x7ffc0000 [ 494.855017][T14554] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 494.859606][T14554] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 494.862978][T14554] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 494.867015][ T40] audit: type=1326 audit(2000000208.228:1109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14549 comm="syz.0.2337" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e579 code=0x7ffc0000 [ 494.887019][T14554] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 494.887300][ T40] audit: type=1326 audit(2000000208.228:1110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14549 comm="syz.0.2337" exe="/syz-executor" sig=0 arch=40000003 syscall=125 compat=1 ip=0xf706e579 code=0x7ffc0000 [ 494.913018][ T40] audit: type=1326 audit(2000000208.228:1111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14549 comm="syz.0.2337" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e579 code=0x7ffc0000 [ 494.935895][ T40] audit: type=1326 audit(2000000208.228:1112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14549 comm="syz.0.2337" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e579 code=0x7ffc0000 [ 494.968332][ T40] audit: type=1326 audit(2000000208.228:1113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14549 comm="syz.0.2337" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf706e579 code=0x7ffc0000 [ 494.975300][ T40] audit: type=1326 audit(2000000208.228:1114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14549 comm="syz.0.2337" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e579 code=0x7ffc0000 [ 495.017192][ T40] audit: type=1326 audit(2000000208.228:1115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14549 comm="syz.0.2337" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e579 code=0x7ffc0000 [ 495.023994][ T40] audit: type=1326 audit(2000000208.228:1116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14549 comm="syz.0.2337" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf706e579 code=0x7ffc0000 [ 495.058779][ T40] audit: type=1326 audit(2000000208.228:1117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14549 comm="syz.0.2337" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e579 code=0x7ffc0000 [ 495.820464][T14587] netlink: 'syz.0.2346': attribute type 3 has an invalid length. [ 496.300008][T14601] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2349'. [ 496.872057][T14619] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2354'. [ 496.909059][T14621] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2355'. [ 496.955996][T14621] xt_CT: You must specify a L4 protocol and not use inversions on it [ 497.428021][T14626] overlayfs: failed to clone upperpath [ 497.560682][T14622] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2356'. [ 497.691567][T14638] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2360'. [ 497.757595][T14631] lo speed is unknown, defaulting to 1000 [ 497.830609][T14631] syzkaller0 speed is unknown, defaulting to 1000 [ 498.256398][T14647] overlay: ./file0 is not a directory [ 499.167748][T14659] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2366'. [ 499.989695][T14680] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2372'. [ 500.022545][T14667] lo speed is unknown, defaulting to 1000 [ 500.142675][T14667] syzkaller0 speed is unknown, defaulting to 1000 [ 500.899061][ T1414] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.046883][T14682] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2373'. [ 501.050678][T14682] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2373'. [ 501.217516][T14696] IPVS: stopping backup sync thread 14698 ... [ 501.221619][T14698] IPVS: sync thread started: state = BACKUP, mcast_ifn = wlan0, syncid = 1, id = 0 [ 501.362897][T14705] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2377'. [ 501.578671][T14712] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2381'. [ 501.663546][T14716] netlink: 168 bytes leftover after parsing attributes in process `syz.0.2382'. [ 501.666842][T14716] netlink: 168 bytes leftover after parsing attributes in process `syz.0.2382'. [ 501.795394][T14718] lo speed is unknown, defaulting to 1000 [ 501.874301][T14718] syzkaller0 speed is unknown, defaulting to 1000 [ 502.568753][T14738] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2388'. [ 503.088511][T14748] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2389'. [ 503.381174][T14760] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2393'. [ 505.550970][T14805] siw: device registration error -23 [ 505.557416][T14806] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2405'. [ 505.561246][T14805] fuse: Unknown parameter '184467440737095516150xffffffffffffffff' [ 505.804680][T14807] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2405'. [ 506.048886][T14809] netlink: 'syz.0.2407': attribute type 1 has an invalid length. [ 506.277949][T14822] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2410'. [ 506.285736][T14822] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 506.289115][T14822] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 506.291489][T14823] netlink: 'syz.0.2411': attribute type 8 has an invalid length. [ 506.292037][T14822] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 506.298017][T14822] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 506.303531][T14823] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2411'. [ 506.341812][T14822] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 506.344465][T14822] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 506.347371][T14822] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 506.350871][T14822] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 506.739600][T14833] IPVS: Unknown mcast interface: wlan0 [ 507.032429][T14844] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 507.220977][T14844] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 507.342926][T14844] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 507.458859][T14844] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 507.646396][T14844] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 507.689459][T14844] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 507.724428][T14844] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 507.766997][T14844] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 508.638205][T14869] IPVS: sync thread started: state = BACKUP, mcast_ifn = wlan0, syncid = 1, id = 0 [ 508.647311][T14863] IPVS: stopping backup sync thread 14869 ... [ 508.952236][T14865] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2423'. [ 509.278592][T14885] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2428'. [ 511.029561][T14910] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2434'. [ 511.164420][T14917] IPVS: sync thread started: state = BACKUP, mcast_ifn = wlan0, syncid = 1, id = 0 [ 511.165510][T14916] IPVS: stopping backup sync thread 14917 ... [ 512.137908][T14923] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2437'. [ 513.754795][T14958] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 513.780746][T14958] batman_adv: batadv0: Removing interface: virt_wifi0 [ 513.800978][T14951] netlink: 'syz.4.2445': attribute type 10 has an invalid length. [ 513.997959][T14958] bond2: (slave bond3): Releasing backup interface [ 514.003909][T14958] bond2: (slave bond3): the permanent HWaddr of slave - 7e:d3:60:37:70:86 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 514.020269][T14958] bond2: (slave gretap1): making interface the new active one [ 514.061110][T14958] bond2: (slave gretap1): Releasing backup interface [ 514.207472][T14966] IPVS: stopping backup sync thread 14969 ... [ 514.418552][T14972] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2449'. [ 514.529411][T14974] tipc: Failed to remove unknown binding: 66,1,1/2886997162:2704570774/2704570776 [ 514.537274][T14974] tipc: Failed to remove unknown binding: 66,1,1/2886997162:2704570774/2704570776 [ 514.550916][T14974] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2450'. [ 514.599719][T14977] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2451'. [ 516.350570][T14998] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2457'. [ 516.790089][T15013] IPVS: Unknown mcast interface: wlan0 [ 516.904630][ T5989] libceph: connect (1)[c::]:6789 error -101 [ 516.907221][T15009] ceph: No mds server is up or the cluster is laggy [ 516.913074][ T5989] libceph: mon0 (1)[c::]:6789 connect error [ 517.294659][T15024] gfs2: gfs2 mount does not exist [ 517.838033][T15036] netlink: 'syz.3.2469': attribute type 1 has an invalid length. [ 518.462520][T15052] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2473'. [ 519.010303][ T40] kauditd_printk_skb: 1 callbacks suppressed [ 519.010315][ T40] audit: type=1326 audit(2000000232.388:1119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15058 comm="syz.0.2474" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf706e579 code=0x0 [ 519.118889][T15063] wg1: entered promiscuous mode [ 519.137207][T15063] wg1: entered allmulticast mode [ 519.143791][T15063] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 519.167308][T15063] CIFS mount error: No usable UNC path provided in device string! [ 519.167308][T15063] [ 519.170532][T15063] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 519.362082][T15070] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2477'. [ 519.443120][T15075] IPVS: sync thread started: state = BACKUP, mcast_ifn = wlan0, syncid = 1, id = 0 [ 519.453287][T15067] IPVS: stopping backup sync thread 15075 ... [ 519.497307][T15077] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2479'. [ 521.545914][T15111] lo speed is unknown, defaulting to 1000 [ 521.616547][T15111] syzkaller0 speed is unknown, defaulting to 1000 [ 521.828572][T15120] IPVS: sync thread started: state = BACKUP, mcast_ifn = wlan0, syncid = 1, id = 0 [ 521.832072][T15116] IPVS: stopping backup sync thread 15120 ... [ 522.016359][T15125] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2491'. [ 523.289170][T15148] netlink: 'syz.0.2497': attribute type 1 has an invalid length. [ 524.211048][ T58] libceph: connect (1)[c::]:6789 error -101 [ 524.213573][ T58] libceph: mon0 (1)[c::]:6789 connect error [ 524.244548][T15164] ceph: No mds server is up or the cluster is laggy [ 525.272019][ T40] audit: type=1326 audit(2000000238.658:1120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15182 comm="syz.4.2507" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe4579 code=0x7ffc0000 [ 525.293216][T15183] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2507'. [ 525.296446][ T40] audit: type=1326 audit(2000000238.658:1121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15182 comm="syz.4.2507" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe4579 code=0x7ffc0000 [ 525.319980][T15183] overlayfs: failed to clone upperpath [ 525.322422][ T40] audit: type=1326 audit(2000000238.678:1122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15182 comm="syz.4.2507" exe="/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf7fe4579 code=0x7ffc0000 [ 525.332107][ T40] audit: type=1326 audit(2000000238.678:1123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15182 comm="syz.4.2507" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe4579 code=0x7ffc0000 [ 525.591568][ T40] audit: type=1326 audit(2000000238.678:1124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15182 comm="syz.4.2507" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe4579 code=0x7ffc0000 [ 525.607262][ T40] audit: type=1326 audit(2000000238.678:1125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15182 comm="syz.4.2507" exe="/syz-executor" sig=0 arch=40000003 syscall=340 compat=1 ip=0xf7fe4579 code=0x7ffc0000 [ 525.614089][ T40] audit: type=1326 audit(2000000238.678:1126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15182 comm="syz.4.2507" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe4579 code=0x7ffc0000 [ 525.621446][ T40] audit: type=1326 audit(2000000238.678:1127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15182 comm="syz.4.2507" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe4579 code=0x7ffc0000 [ 525.629974][ T40] audit: type=1326 audit(2000000238.678:1128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15182 comm="syz.4.2507" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7fe4579 code=0x7ffc0000 [ 525.647227][ T40] audit: type=1326 audit(2000000238.678:1129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15182 comm="syz.4.2507" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe4579 code=0x7ffc0000 [ 525.825214][T15189] netlink: 'syz.1.2509': attribute type 1 has an invalid length. [ 526.907459][T15210] netlink: 'syz.3.2517': attribute type 10 has an invalid length. [ 526.910038][T15210] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2517'. [ 526.927240][T15210] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 528.227555][T15234] netlink: 'syz.0.2520': attribute type 10 has an invalid length. [ 528.784037][T15240] netlink: 'syz.4.2523': attribute type 10 has an invalid length. [ 528.793959][T15248] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2524'. [ 528.870711][T15248] overlayfs: failed to clone upperpath [ 529.337516][T15255] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2529'. [ 530.112243][T15268] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2532'. [ 532.219682][T15309] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2540'. [ 532.287498][T15310] IPVS: Unknown mcast interface: wlan0 [ 533.370607][T15332] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2547'. [ 534.318137][T15353] /dev/nullb0: Can't lookup blockdev [ 534.400078][T15351] IPVS: stopping backup sync thread 15357 ... [ 534.634104][T15348] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2553'. [ 535.021382][T15372] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2559'. [ 535.045219][T15373] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2558'. [ 536.339602][T15397] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2566'. [ 536.709903][T15411] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2570'. [ 536.837081][T15402] wireguard0: entered promiscuous mode [ 536.839013][T15402] wireguard0: entered allmulticast mode [ 537.319802][T15425] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2573'. [ 538.042172][T15441] netlink: 'syz.1.2578': attribute type 10 has an invalid length. [ 538.044631][T15441] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2578'. [ 538.049997][T15438] lo speed is unknown, defaulting to 1000 [ 538.057188][T15441] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 538.128674][T15438] syzkaller0 speed is unknown, defaulting to 1000 [ 540.882950][T15492] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2590'. [ 541.002144][T15491] IPVS: stopping backup sync thread 15495 ... [ 542.827526][T15526] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2600'. [ 544.086274][T15537] overlayfs: failed to clone upperpath [ 545.758441][T15566] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2609'. [ 547.433828][T15608] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2620'. [ 547.787252][T15596] ipvlan1: entered promiscuous mode [ 547.798904][T15596] bridge0: port 1(ipvlan1) entered blocking state [ 547.811225][T15596] bridge0: port 1(ipvlan1) entered disabled state [ 547.813422][T15596] ipvlan1: entered allmulticast mode [ 547.815145][T15596] bridge0: entered allmulticast mode [ 547.832534][T15596] ipvlan1: left allmulticast mode [ 547.837015][T15606] xt_CT: You must specify a L4 protocol and not use inversions on it [ 547.845775][T15596] bridge0: left allmulticast mode [ 547.970190][T15616] dvmrp8: entered allmulticast mode [ 547.979387][T15612] dvmrp8: left allmulticast mode [ 548.339135][T15622] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2623'. [ 548.539660][T15625] overlayfs: failed to clone upperpath [ 548.548190][T15625] overlayfs: failed to resolve './file1/file0': -2 [ 548.907889][T15630] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2627'. [ 549.490814][ T9] libceph: connect (1)[c::]:6789 error -101 [ 549.495940][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 549.523208][T15645] ceph: No mds server is up or the cluster is laggy [ 549.798133][T15650] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2632'. [ 550.034079][T15660] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2634'. [ 550.113262][T15662] IPVS: sync thread started: state = BACKUP, mcast_ifn = wlan0, syncid = 1, id = 0 [ 550.116224][T15652] IPVS: stopping backup sync thread 15662 ... [ 550.800443][T15677] lo speed is unknown, defaulting to 1000 [ 550.897809][T15677] syzkaller0 speed is unknown, defaulting to 1000 [ 552.016702][T15710] tipc: New replicast peer: 255.255.255.255 [ 552.055596][T15710] tipc: Enabled bearer , priority 10 [ 552.075663][T15708] befs: (loop1): No write support. Marking filesystem read-only [ 552.088837][T15708] syz.0.2646: attempt to access beyond end of device [ 552.088837][T15708] loop1: rw=0, sector=0, nr_sectors = 2 limit=0 [ 552.097963][T15708] befs: (loop1): unable to read superblock [ 552.348327][T15715] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2647'. [ 553.140801][T15739] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2652'. [ 553.802126][T15744] 8021q: adding VLAN 0 to HW filter on device bond2 [ 554.038440][T15762] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2658'. [ 554.081401][T15765] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2659'. [ 554.216129][T15770] netlink: 'syz.0.2661': attribute type 5 has an invalid length. [ 554.227294][T15770] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2661'. [ 554.646171][T15782] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2663'. [ 554.657027][T15773] set match dimension is over the limit! [ 555.771035][T15793] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2665'. [ 555.898195][T15806] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2669'. [ 556.104429][T15813] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2670'. [ 556.776057][T15828] lo speed is unknown, defaulting to 1000 [ 556.880634][T15828] syzkaller0 speed is unknown, defaulting to 1000 [ 557.326098][T15848] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2678'. [ 557.543252][T15852] netlink: 'syz.0.2680': attribute type 1 has an invalid length. [ 557.636553][T15856] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2681'. [ 558.347278][T15859] wireguard0: entered promiscuous mode [ 558.349161][T15859] wireguard0: entered allmulticast mode [ 558.578938][T15873] overlayfs: failed to clone upperpath [ 558.859898][T15871] lo speed is unknown, defaulting to 1000 [ 559.192611][T15871] syzkaller0 speed is unknown, defaulting to 1000 [ 559.479841][T15890] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2690'. [ 559.602872][T15884] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2689'. [ 560.349668][T15907] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2694'. [ 560.565075][T15911] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2694'. [ 561.640840][T15929] lo speed is unknown, defaulting to 1000 [ 561.713993][T15929] syzkaller0 speed is unknown, defaulting to 1000 [ 561.942994][T15939] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2701'. [ 562.087329][T15941] SET target dimension over the limit! [ 562.095990][T15947] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2704'. [ 562.102576][T15947] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2704'. [ 562.116300][T15947] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2704'. [ 562.125298][T15947] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2704'. [ 562.130956][T15947] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2704'. [ 562.342476][ T1414] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.875349][T15965] sctp: [Deprecated]: syz.4.2708 (pid 15965) Use of struct sctp_assoc_value in delayed_ack socket option. [ 562.875349][T15965] Use struct sctp_sack_info instead [ 563.021952][T15968] tipc: Enabled bearer , priority 0 [ 563.504117][T15973] IPVS: Unknown mcast interface: vcan0 [ 564.874941][T15991] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 564.877770][T15991] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 564.950896][T15999] __nla_validate_parse: 4 callbacks suppressed [ 564.950911][T15999] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2717'. [ 565.017873][T15996] overlayfs: failed to clone upperpath [ 565.229061][T16007] IPVS: Unknown mcast interface: wlan0 [ 565.647572][T16017] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2722'. [ 566.119846][T16021] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2724'. [ 566.597911][T16033] netlink: 'syz.3.2727': attribute type 1 has an invalid length. [ 567.219749][T16048] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2731'. [ 567.295427][T16040] Invalid ELF header magic: != ELF [ 567.882881][T16057] IPVS: Unknown mcast interface: wlan0 [ 568.072714][T16060] lo speed is unknown, defaulting to 1000 [ 568.143966][T16060] syzkaller0 speed is unknown, defaulting to 1000 [ 569.087370][T16074] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2738'. [ 569.142332][T16074] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 569.145084][T16074] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 569.245439][T16071] netlink: 'syz.0.2737': attribute type 9 has an invalid length. [ 569.248667][T16071] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2737'. [ 569.253945][T16071] hsr0: entered promiscuous mode [ 569.255917][T16071] macvlan0: entered promiscuous mode [ 569.257716][T16071] macvlan0: entered allmulticast mode [ 569.259430][T16071] hsr0: entered allmulticast mode [ 569.261014][T16071] hsr_slave_0: entered allmulticast mode [ 569.764352][T16089] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2740'. [ 569.931890][T16088] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2742'. [ 570.019347][T16088] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2742'. [ 570.022869][T16088] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2742'. [ 570.069314][T16093] lo speed is unknown, defaulting to 1000 [ 570.107611][T16101] IPVS: sync thread started: state = BACKUP, mcast_ifn = wlan0, syncid = 1, id = 0 [ 570.108535][T16100] IPVS: stopping backup sync thread 16101 ... [ 570.223780][T16093] syzkaller0 speed is unknown, defaulting to 1000 [ 570.321466][T16099] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 570.324254][T16099] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 571.037160][T16111] netlink: 'syz.1.2748': attribute type 4 has an invalid length. [ 572.191610][T16140] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2754'. [ 572.597832][T16156] IPVS: sync thread started: state = BACKUP, mcast_ifn = wlan0, syncid = 1, id = 0 [ 572.603694][T16151] IPVS: stopping backup sync thread 16156 ... [ 573.568807][T16172] lo speed is unknown, defaulting to 1000 [ 573.722218][T16179] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2762'. [ 573.820032][T16172] syzkaller0 speed is unknown, defaulting to 1000 [ 573.941248][T16182] No control pipe specified [ 573.944990][T16182] No control pipe specified [ 575.682541][T16218] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2772'. [ 576.714635][T16230] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2776'. [ 576.722435][T16230] netlink: 177 bytes leftover after parsing attributes in process `syz.3.2776'. [ 580.495584][T16296] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2793'. [ 580.808149][T16309] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2796'. [ 581.224654][T16314] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2797'. [ 582.584383][T16320] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2798'. [ 583.391317][T16341] 9pnet_fd: Insufficient options for proto=fd [ 583.427636][T16335] lo speed is unknown, defaulting to 1000 [ 583.504250][T16335] syzkaller0 speed is unknown, defaulting to 1000 [ 583.945001][T16351] siw: device registration error -23 [ 583.963581][T16351] fuse: Unknown parameter '184467440737095516150xffffffffffffffff' [ 584.230486][T16358] No control pipe specified [ 584.231926][T16360] overlayfs: failed to clone upperpath [ 584.233841][T16358] No control pipe specified [ 585.403647][T16379] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2824'. [ 585.419768][T16379] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 585.422421][T16379] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 585.424944][T16379] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 585.427826][T16379] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 585.464822][T16379] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 585.468174][T16379] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 585.470706][T16379] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 585.473305][T16379] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 586.246415][T16392] netlink: 168 bytes leftover after parsing attributes in process `syz.3.2819'. [ 586.253773][T16392] netlink: 168 bytes leftover after parsing attributes in process `syz.3.2819'. [ 586.747901][T16396] lo speed is unknown, defaulting to 1000 [ 586.856862][T16396] syzkaller0 speed is unknown, defaulting to 1000 [ 587.447664][T16395] xt_recent: Unsupported userspace flags (000000fe) [ 587.724444][T16409] lo speed is unknown, defaulting to 1000 [ 587.807497][T16409] syzkaller0 speed is unknown, defaulting to 1000 [ 588.528310][T16421] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2827'. [ 588.621095][ T40] kauditd_printk_skb: 52 callbacks suppressed [ 588.621106][ T40] audit: type=1800 audit(588.502:1182): pid=16426 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2827" name="SYSV798dd824" dev="tmpfs" ino=0 res=0 errno=0 [ 589.047270][T16431] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2829'. [ 590.294136][T16446] trusted_key: encrypted_key: insufficient parameters specified [ 591.284622][T16470] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2839'. [ 593.023129][T16502] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2848'. [ 593.075127][T16492] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2846'. [ 593.078278][T16492] netlink: 'syz.4.2846': attribute type 9 has an invalid length. [ 593.081156][T16492] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2846'. [ 593.757564][T16506] netdevsim netdevsim3 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 593.888742][T16506] netdevsim netdevsim3 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 593.929738][T16516] xt_CT: No such helper "pptp" [ 594.260227][T16506] netdevsim netdevsim3 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 594.499647][T16506] netdevsim netdevsim3 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 594.717599][T16506] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 594.769344][T16506] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 594.803731][T16506] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 594.836509][T16506] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 594.979270][T16543] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2855'. [ 595.023366][T16541] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2856'. [ 595.860263][T16559] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2861'. [ 596.668060][T16577] ceph: No mds server is up or the cluster is laggy [ 597.093720][T16587] lo speed is unknown, defaulting to 1000 [ 597.175581][T16587] syzkaller0 speed is unknown, defaulting to 1000 [ 597.523530][T16572] trusted_key: encrypted_key: insufficient parameters specified [ 597.595546][T16598] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2868'. [ 598.068602][T16611] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2872'. [ 598.235464][T16613] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2873'. [ 599.105402][T16618] lo speed is unknown, defaulting to 1000 [ 599.225085][T16618] syzkaller0 speed is unknown, defaulting to 1000 [ 599.927928][T16632] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2880'. [ 600.281784][T16643] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2890'. [ 600.574131][T16646] No control pipe specified [ 600.581087][T16646] No control pipe specified [ 600.982690][ T5987] libceph: connect (1)[c::]:6789 error -101 [ 600.984747][ T5987] libceph: mon0 (1)[c::]:6789 connect error [ 601.021329][T16648] ceph: No mds server is up or the cluster is laggy [ 601.159272][T16662] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2886'. [ 601.538727][T16668] overlayfs: failed to clone upperpath [ 601.930885][T16676] netlink: 168 bytes leftover after parsing attributes in process `syz.4.2893'. [ 601.938191][T16676] netlink: 168 bytes leftover after parsing attributes in process `syz.4.2893'. [ 601.960953][T16675] /dev/nullb0: Can't lookup blockdev [ 602.072644][T16680] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2892'. [ 602.297237][T16685] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2902'. [ 602.739077][T16683] ceph: No mds server is up or the cluster is laggy [ 602.813067][T16685] IPVS: Unknown mcast interface: vcan0 [ 602.819983][T16685] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2902'. [ 603.462317][T16699] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2896'. [ 603.484524][T16699] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 603.487199][T16699] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 603.490243][T16699] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 603.493189][T16699] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 603.507287][T16699] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 603.509946][T16699] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 603.512541][T16699] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 603.515157][T16699] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 603.811068][T16717] lo speed is unknown, defaulting to 1000 [ 604.100976][T16717] syzkaller0 speed is unknown, defaulting to 1000 [ 604.984967][T16738] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2907'. [ 605.458631][T16744] netlink: 'syz.1.2909': attribute type 10 has an invalid length. [ 605.467176][T16744] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2909'. [ 605.477235][T16744] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 605.748348][ T40] audit: type=1326 audit(605.632:1183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16749 comm="syz.4.2918" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe4579 code=0x7ffc0000 [ 605.756666][ T40] audit: type=1326 audit(605.632:1184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16749 comm="syz.4.2918" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe4579 code=0x7ffc0000 [ 605.833786][T16754] sctp: [Deprecated]: syz.3.2911 (pid 16754) Use of struct sctp_assoc_value in delayed_ack socket option. [ 605.833786][T16754] Use struct sctp_sack_info instead [ 605.897282][ T40] audit: type=1326 audit(605.632:1185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16749 comm="syz.4.2918" exe="/syz-executor" sig=0 arch=40000003 syscall=277 compat=1 ip=0xf7fe4579 code=0x7ffc0000 [ 605.905170][ T40] audit: type=1326 audit(605.632:1186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16749 comm="syz.4.2918" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe4579 code=0x7ffc0000 [ 605.937347][ T40] audit: type=1326 audit(605.632:1187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16749 comm="syz.4.2918" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe4579 code=0x7ffc0000 [ 605.943722][ T40] audit: type=1326 audit(605.632:1188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16749 comm="syz.4.2918" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7fe4579 code=0x7ffc0000 [ 605.953522][T16756] tipc: Enabled bearer , priority 0 [ 605.967164][ T40] audit: type=1326 audit(605.632:1189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16749 comm="syz.4.2918" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe4579 code=0x7ffc0000 [ 605.973531][ T40] audit: type=1326 audit(605.632:1190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16749 comm="syz.4.2918" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe4579 code=0x7ffc0000 [ 605.997178][ T40] audit: type=1326 audit(605.632:1191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16749 comm="syz.4.2918" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7fe4579 code=0x7ffc0000 [ 606.003565][ T40] audit: type=1326 audit(605.632:1192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16749 comm="syz.4.2918" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe4579 code=0x7ffc0000 [ 606.247283][T16758] wireguard0: entered promiscuous mode [ 606.249673][T16758] wireguard0: entered allmulticast mode [ 607.839183][T16789] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2927'. [ 607.977288][T16792] netlink: 168 bytes leftover after parsing attributes in process `syz.1.2919'. [ 607.981079][T16792] netlink: 168 bytes leftover after parsing attributes in process `syz.1.2919'. [ 608.227989][T16799] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2920'. [ 609.378887][T16812] sctp: [Deprecated]: syz.1.2926 (pid 16812) Use of struct sctp_assoc_value in delayed_ack socket option. [ 609.378887][T16812] Use struct sctp_sack_info instead [ 609.384336][T16813] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2925'. [ 609.499499][T16816] tipc: Enabled bearer , priority 0 [ 609.659987][T16824] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2928'. [ 610.136886][T16829] dvmrp8: entered allmulticast mode [ 610.184902][T16834] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2931'. [ 610.364515][T16839] netlink: 168 bytes leftover after parsing attributes in process `syz.1.2932'. [ 610.374261][T16839] netlink: 168 bytes leftover after parsing attributes in process `syz.1.2932'. [ 610.942483][T16827] dvmrp8: left allmulticast mode [ 610.967712][T16847] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2935'. [ 611.018340][T16847] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 611.020919][T16847] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 611.023531][T16847] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 611.026076][T16847] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 611.056859][T16847] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 611.060015][T16847] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 611.062936][T16847] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 611.065714][T16847] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 612.210570][T16884] tipc: Enabled bearer , priority 0 [ 612.932196][T16910] __nla_validate_parse: 5 callbacks suppressed [ 612.932207][T16910] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2953'. [ 613.030993][T16913] netlink: 'syz.4.2955': attribute type 10 has an invalid length. [ 613.033450][T16913] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2955'. [ 613.036230][T16913] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 613.258561][T16918] befs: (loop9): No write support. Marking filesystem read-only [ 613.261647][T16918] syz.4.2957: attempt to access beyond end of device [ 613.261647][T16918] loop9: rw=0, sector=0, nr_sectors = 2 limit=0 [ 613.270678][T16917] netlink: 168 bytes leftover after parsing attributes in process `syz.0.2964'. [ 613.273422][T16917] netlink: 168 bytes leftover after parsing attributes in process `syz.0.2964'. [ 613.279272][T16918] befs: (loop9): unable to read superblock [ 613.445684][T16926] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2959'. [ 613.709051][T16935] overlayfs: failed to clone lowerpath [ 613.752544][T16938] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2961'. [ 614.029703][T16948] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2965'. [ 614.543526][T16959] netlink: 168 bytes leftover after parsing attributes in process `syz.4.2968'. [ 614.551618][T16959] netlink: 168 bytes leftover after parsing attributes in process `syz.4.2968'. [ 616.727629][T16992] overlayfs: failed to clone upperpath [ 616.731037][T16992] lo speed is unknown, defaulting to 1000 [ 616.733212][T16992] lo speed is unknown, defaulting to 1000 [ 616.745779][T16992] lo speed is unknown, defaulting to 1000 [ 617.001176][T16992] infiniband sz1: set down [ 617.003821][ T59] lo speed is unknown, defaulting to 1000 [ 617.016276][T16992] infiniband sz1: added lo [ 617.052397][T16992] RDS/IB: sz1: added [ 617.053765][T16992] smc: adding ib device sz1 with port count 1 [ 617.055721][T16992] smc: ib device sz1 port 1 has pnetid [ 617.081159][ T60] lo speed is unknown, defaulting to 1000 [ 617.083529][T16992] lo speed is unknown, defaulting to 1000 [ 617.508381][T17002] netlink: 168 bytes leftover after parsing attributes in process `syz.0.2977'. [ 617.510833][T16992] lo speed is unknown, defaulting to 1000 [ 617.851504][T16992] lo speed is unknown, defaulting to 1000 [ 617.995850][T16992] lo speed is unknown, defaulting to 1000 [ 618.707394][T17013] wireguard0: entered promiscuous mode [ 618.709227][T17013] wireguard0: entered allmulticast mode [ 619.146845][T17031] __nla_validate_parse: 1 callbacks suppressed [ 619.146856][T17031] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2985'. [ 619.151643][T17031] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2985'. [ 619.828245][T17044] siw: device registration error -23 [ 620.422164][T17051] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 620.512102][T17045] netlink: 'syz.0.2988': attribute type 4 has an invalid length. [ 620.515073][T17045] netlink: 'syz.0.2988': attribute type 4 has an invalid length. [ 620.526468][ T58] lo speed is unknown, defaulting to 1000 [ 620.528524][ T58] syz2: Port: 1 Link ACTIVE [ 620.568998][T17054] netlink: 'syz.1.2991': attribute type 1 has an invalid length. [ 620.677511][T17059] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2991'. [ 620.677832][T17054] 8021q: adding VLAN 0 to HW filter on device bond4 [ 620.694325][T17054] bond3: (slave bond4): making interface the new active one [ 620.703092][T17054] bond3: (slave bond4): Enslaving as an active interface with an up link [ 620.712607][T17065] overlayfs: failed to clone lowerpath [ 620.750284][T17068] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2995'. [ 620.808183][T17054] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2991'. [ 620.929165][T17075] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2996'. [ 621.102666][T17080] netlink: 168 bytes leftover after parsing attributes in process `syz.1.2999'. [ 621.107272][T17080] netlink: 168 bytes leftover after parsing attributes in process `syz.1.2999'. [ 622.515225][T17112] netlink: 168 bytes leftover after parsing attributes in process `syz.4.3008'. [ 622.527172][T17112] netlink: 168 bytes leftover after parsing attributes in process `syz.4.3008'. [ 623.057449][ T46] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 623.197524][T17132] Cache volume key already in use (9p,syz,) [ 623.470761][T17144] IPVS: sync thread started: state = BACKUP, mcast_ifn = wlan0, syncid = 1, id = 0 [ 623.477179][T17139] IPVS: stopping backup sync thread 17144 ... [ 623.780728][ T1414] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.239567][T17148] overlayfs: failed to clone upperpath [ 624.408232][T17157] __nla_validate_parse: 2 callbacks suppressed [ 624.408242][T17157] netlink: 168 bytes leftover after parsing attributes in process `syz.0.3020'. [ 624.422897][T17157] netlink: 168 bytes leftover after parsing attributes in process `syz.0.3020'. [ 625.031643][T17168] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3025'. [ 625.035752][T17168] netlink: 6 bytes leftover after parsing attributes in process `syz.0.3025'. [ 625.125688][T17178] IPVS: sync thread started: state = BACKUP, mcast_ifn = wlan0, syncid = 1, id = 0 [ 625.700151][ T46] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 626.300332][T17201] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3031'. [ 626.866709][T17210] "syz.3.3035" (17210) uses obsolete ecb(arc4) skcipher [ 626.903864][T17210] overlay: ./file0 is not a directory [ 627.204721][T17221] IPVS: stopping backup sync thread 17178 ... [ 627.215338][ T40] kauditd_printk_skb: 311 callbacks suppressed [ 627.215348][ T40] audit: type=1326 audit(627.091:1504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17227 comm="syz.4.3038" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe4579 code=0x7ffc0000 [ 627.408437][ T40] audit: type=1326 audit(627.101:1505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17227 comm="syz.4.3038" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe4579 code=0x7ffc0000 [ 627.442921][ T40] audit: type=1326 audit(627.101:1506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17227 comm="syz.4.3038" exe="/syz-executor" sig=0 arch=40000003 syscall=30 compat=1 ip=0xf7fe4579 code=0x7ffc0000 [ 627.450457][ T40] audit: type=1326 audit(627.101:1507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17227 comm="syz.4.3038" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe4579 code=0x7ffc0000 [ 627.475322][ T40] audit: type=1326 audit(627.271:1508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17227 comm="syz.4.3038" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe4579 code=0x7ffc0000 [ 627.492616][ T40] audit: type=1326 audit(627.291:1509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17227 comm="syz.4.3038" exe="/syz-executor" sig=0 arch=40000003 syscall=321 compat=1 ip=0xf7fe4579 code=0x7ffc0000 [ 627.518693][ T40] audit: type=1326 audit(627.291:1510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17227 comm="syz.4.3038" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe4579 code=0x7ffc0000 [ 627.541403][ T40] audit: type=1326 audit(627.291:1511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17227 comm="syz.4.3038" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe4579 code=0x7ffc0000 [ 627.559205][ T40] audit: type=1326 audit(627.291:1512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17227 comm="syz.4.3038" exe="/syz-executor" sig=0 arch=40000003 syscall=224 compat=1 ip=0xf7fe4579 code=0x7ffc0000 [ 627.567038][ T40] audit: type=1326 audit(627.291:1513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17227 comm="syz.4.3038" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe4579 code=0x7ffc0000 [ 627.627029][T17236] ceph: No mds server is up or the cluster is laggy [ 628.136749][T17247] overlayfs: failed to clone lowerpath [ 628.278258][ T6686] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 628.315327][T17254] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3046'. [ 628.435491][T17260] netlink: 168 bytes leftover after parsing attributes in process `syz.1.3047'. [ 628.444012][T17260] netlink: 168 bytes leftover after parsing attributes in process `syz.1.3047'. [ 628.857835][T17265] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 628.881139][T17265] netlink: 830 bytes leftover after parsing attributes in process `syz.0.3049'. [ 628.971194][T17270] netlink: 168 bytes leftover after parsing attributes in process `syz.1.3050'. [ 629.905337][T17300] __nla_validate_parse: 1 callbacks suppressed [ 629.905348][T17300] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3057'. [ 629.915877][T17298] netlink: 'syz.4.3058': attribute type 23 has an invalid length. [ 630.247600][T17307] netlink: 168 bytes leftover after parsing attributes in process `syz.4.3060'. [ 630.250365][T17307] netlink: 168 bytes leftover after parsing attributes in process `syz.4.3060'. [ 630.679773][T17317] netlink: 168 bytes leftover after parsing attributes in process `syz.4.3064'. [ 630.682490][T17317] netlink: 168 bytes leftover after parsing attributes in process `syz.4.3064'. [ 631.103847][T17332] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3067'. [ 631.226416][T17323] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3065'. [ 631.229263][T17323] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3065'. [ 631.457904][ T6705] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 631.496412][T17344] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3068'. [ 631.633240][T17350] netlink: 168 bytes leftover after parsing attributes in process `syz.3.3071'. [ 631.947819][ T5987] libceph: connect (1)[c::]:6789 error -101 [ 631.950951][ T5987] libceph: mon0 (1)[c::]:6789 connect error [ 632.138319][T17358] netlink: 'syz.3.3074': attribute type 10 has an invalid length. [ 632.141069][T17358] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 632.217348][ T5987] libceph: connect (1)[c::]:6789 error -101 [ 632.222871][ T5987] libceph: mon0 (1)[c::]:6789 connect error [ 632.455528][T17349] ceph: No mds server is up or the cluster is laggy [ 633.069175][T17380] CIFS mount error: No usable UNC path provided in device string! [ 633.069175][T17380] [ 633.087339][T17380] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 634.037604][ T46] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 634.161191][T17396] A link change request failed with some changes committed already. Interface bond1 may have been left with an inconsistent configuration, please check. [ 635.040765][T17413] overlayfs: failed to clone upperpath [ 635.047608][T17413] rdma_rxe: rxe_newlink: failed to add lo [ 635.112256][ T40] kauditd_printk_skb: 181 callbacks suppressed [ 635.112267][ T40] audit: type=1326 audit(634.981:1695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17417 comm="syz.1.3093" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e579 code=0x7ffc0000 [ 635.150359][ T40] audit: type=1326 audit(634.981:1696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17417 comm="syz.1.3093" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e579 code=0x7ffc0000 [ 635.179907][ T40] audit: type=1326 audit(635.041:1697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17417 comm="syz.1.3093" exe="/syz-executor" sig=0 arch=40000003 syscall=146 compat=1 ip=0xf705e579 code=0x7ffc0000 [ 635.337267][ T40] audit: type=1326 audit(635.131:1698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17417 comm="syz.1.3093" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e579 code=0x7ffc0000 [ 635.367648][ T40] audit: type=1326 audit(635.131:1699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17417 comm="syz.1.3093" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e579 code=0x7ffc0000 [ 635.609026][ T40] audit: type=1326 audit(635.491:1700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17428 comm="syz.3.3095" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ae579 code=0x7ffc0000 [ 635.624750][T17429] overlayfs: failed to clone upperpath [ 635.646129][ T40] audit: type=1326 audit(635.491:1701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17428 comm="syz.3.3095" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ae579 code=0x7ffc0000 [ 635.667150][ T40] audit: type=1326 audit(635.501:1702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17428 comm="syz.3.3095" exe="/syz-executor" sig=0 arch=40000003 syscall=296 compat=1 ip=0xf70ae579 code=0x7ffc0000 [ 635.696809][ T40] audit: type=1326 audit(635.501:1703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17428 comm="syz.3.3095" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ae579 code=0x7ffc0000 [ 635.732706][ T40] audit: type=1326 audit(635.501:1704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17428 comm="syz.3.3095" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ae579 code=0x7ffc0000 [ 636.070457][T17443] __nla_validate_parse: 15 callbacks suppressed [ 636.070469][T17443] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3097'. [ 636.260015][T17446] netlink: 168 bytes leftover after parsing attributes in process `syz.3.3098'. [ 636.269991][T17446] netlink: 168 bytes leftover after parsing attributes in process `syz.3.3098'. [ 636.434284][T17452] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3099'. [ 637.175568][T17464] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3104'. [ 637.217484][ T6705] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 637.342499][T17462] No control pipe specified [ 637.351811][T17462] No control pipe specified [ 637.824435][T17475] IPVS: sync thread started: state = BACKUP, mcast_ifn = wlan0, syncid = 1, id = 0 [ 637.827660][T17468] IPVS: stopping backup sync thread 17475 ... [ 637.926143][T17473] "syz.1.3106" (17473) uses obsolete ecb(arc4) skcipher [ 637.981732][T17476] overlay: ./file0 is not a directory [ 638.143813][T17478] netlink: 168 bytes leftover after parsing attributes in process `syz.3.3108'. [ 638.160955][T17478] netlink: 168 bytes leftover after parsing attributes in process `syz.3.3108'. [ 638.213643][T17487] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3110'. [ 638.894890][T17503] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3116'. [ 638.918246][T17503] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 638.920887][T17503] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 638.923460][T17503] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 638.925995][T17503] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 639.004079][T17482] overlayfs: failed to clone upperpath [ 639.091750][T17503] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 639.094296][T17503] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 639.097270][T17503] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 639.100000][T17503] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 639.141083][ T6667] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 639.575967][T17518] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3118'. [ 639.586383][T17510] IPVS: Unknown mcast interface: wlan0 [ 639.807900][T17518] netlink: 'syz.0.3118': attribute type 10 has an invalid length. [ 641.475628][T17548] ceph: No mds server is up or the cluster is laggy [ 642.367511][ T6686] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 642.387327][T17568] IPVS: sync thread started: state = BACKUP, mcast_ifn = wlan0, syncid = 1, id = 0 [ 642.395108][T17567] IPVS: stopping backup sync thread 17568 ... [ 642.840626][T17565] overlayfs: failed to clone upperpath [ 642.886265][T17576] netlink: 'syz.3.3133': attribute type 23 has an invalid length. [ 643.851915][T17581] __nla_validate_parse: 2 callbacks suppressed [ 643.851931][T17581] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3135'. [ 643.858454][T17581] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3135'. [ 644.050136][T17596] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3138'. [ 644.925674][ T6667] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 645.059297][T17619] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3142'. [ 645.158068][T17625] netlink: 168 bytes leftover after parsing attributes in process `syz.1.3143'. [ 645.161947][T17625] netlink: 168 bytes leftover after parsing attributes in process `syz.1.3143'. [ 645.322958][ T40] kauditd_printk_skb: 382 callbacks suppressed [ 645.322970][ T40] audit: type=1326 audit(645.201:2087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17621 comm="syz.4.3145" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe4579 code=0x7ffc0000 [ 645.343540][ T40] audit: type=1326 audit(645.201:2088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17621 comm="syz.4.3145" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe4579 code=0x7ffc0000 [ 645.437188][T17622] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 645.529680][ T40] audit: type=1326 audit(645.201:2089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17621 comm="syz.4.3145" exe="/syz-executor" sig=0 arch=40000003 syscall=361 compat=1 ip=0xf7fe4579 code=0x7ffc0000 [ 645.574766][T17635] netlink: 168 bytes leftover after parsing attributes in process `syz.3.3146'. [ 645.588922][T17635] netlink: 168 bytes leftover after parsing attributes in process `syz.3.3146'. [ 645.607380][ T40] audit: type=1326 audit(645.201:2090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17621 comm="syz.4.3145" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe4579 code=0x7ffc0000 [ 645.614391][ T40] audit: type=1326 audit(645.201:2091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17621 comm="syz.4.3145" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe4579 code=0x7ffc0000 [ 645.675233][ T40] audit: type=1326 audit(645.201:2092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17621 comm="syz.4.3145" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7fe4579 code=0x7ffc0000 [ 645.737205][ T40] audit: type=1326 audit(645.201:2093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17621 comm="syz.4.3145" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe4579 code=0x7ffc0000 [ 645.744171][ T40] audit: type=1326 audit(645.201:2094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17621 comm="syz.4.3145" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe4579 code=0x7ffc0000 [ 645.777177][ T40] audit: type=1326 audit(645.201:2095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17621 comm="syz.4.3145" exe="/syz-executor" sig=0 arch=40000003 syscall=361 compat=1 ip=0xf7fe4579 code=0x7ffc0000 [ 645.783581][ T40] audit: type=1326 audit(645.201:2096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17621 comm="syz.4.3145" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe4579 code=0x7ffc0000 [ 647.533019][T17677] overlay: Unknown parameter 'appraise_type' [ 648.168747][ T6686] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 648.259437][T17688] netlink: 'syz.0.3160': attribute type 23 has an invalid length. [ 648.738701][T17697] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 648.742339][T17697] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 648.811215][T17697] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 648.814662][T17697] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 648.901556][T17697] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 648.905691][T17697] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 648.950579][T17697] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 648.953757][T17697] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 649.020950][T17697] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 649.023632][T17697] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 649.031005][T17697] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 649.033606][T17697] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 649.042935][T17697] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 649.046126][T17697] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 649.053560][T17697] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 649.056195][T17697] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 650.657825][ T46] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 651.567378][T17730] CIFS mount error: No usable UNC path provided in device string! [ 651.567378][T17730] [ 651.570593][T17730] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 652.000117][T17727] netlink: 'syz.0.3177': attribute type 2 has an invalid length. [ 652.031101][T17722] overlayfs: failed to clone upperpath [ 653.135123][T17753] wireguard0: entered promiscuous mode [ 653.152985][T17753] wireguard0: entered allmulticast mode [ 653.297586][ T6686] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 654.017895][T17767] syz_tun: entered allmulticast mode [ 654.501727][T17767] syz_tun: left allmulticast mode [ 654.512271][T17779] 9pnet_virtio: no channels available for device syz [ 654.515610][T17779] netlink: 168 bytes leftover after parsing attributes in process `syz.3.3186'. [ 654.518621][T17779] netlink: 168 bytes leftover after parsing attributes in process `syz.3.3186'. [ 654.629777][T17773] netlink: 168 bytes leftover after parsing attributes in process `syz.1.3184'. [ 654.632629][T17773] netlink: 168 bytes leftover after parsing attributes in process `syz.1.3184'. [ 655.296551][T17791] overlay: Unknown parameter 'appraise_type' [ 655.711868][T17795] overlayfs: failed to clone upperpath [ 656.431239][ T6686] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 656.584662][T17814] netlink: 168 bytes leftover after parsing attributes in process `syz.0.3196'. [ 656.592046][T17814] netlink: 168 bytes leftover after parsing attributes in process `syz.0.3196'. [ 657.916999][T17825] lo speed is unknown, defaulting to 1000 [ 657.994265][T17825] syzkaller0 speed is unknown, defaulting to 1000 [ 657.996987][T17825] lo speed is unknown, defaulting to 1000 [ 658.977738][ T46] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 658.984786][T17850] netlink: 168 bytes leftover after parsing attributes in process `syz.1.3206'. [ 658.997243][T17850] netlink: 168 bytes leftover after parsing attributes in process `syz.1.3206'. [ 660.417355][T17881] IPVS: sync thread started: state = BACKUP, mcast_ifn = wlan0, syncid = 1, id = 0 [ 660.430658][T17877] IPVS: stopping backup sync thread 17881 ... [ 660.520836][T17876] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 660.653278][T17880] overlayfs: failed to clone upperpath [ 660.661869][T17880] rdma_rxe: rxe_newlink: failed to add lo [ 660.697837][T17886] lo speed is unknown, defaulting to 1000 [ 661.293999][T17886] syzkaller0 speed is unknown, defaulting to 1000 [ 661.309568][T17886] lo speed is unknown, defaulting to 1000 [ 662.221057][ T46] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 663.258510][T17921] /dev/nullb0: Can't lookup blockdev [ 663.583009][T17930] netlink: 168 bytes leftover after parsing attributes in process `syz.3.3228'. [ 663.585947][T17930] netlink: 168 bytes leftover after parsing attributes in process `syz.3.3228'. [ 664.038989][T17937] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3231'. [ 664.050260][T17937] netlink: 'syz.0.3231': attribute type 1 has an invalid length. [ 664.053225][T17937] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3231'. [ 664.581949][T17944] overlayfs: failed to clone lowerpath [ 664.750776][ T6705] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 665.898840][T17959] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3235'. [ 666.048195][T17956] lo speed is unknown, defaulting to 1000 [ 666.719420][T17968] netlink: 168 bytes leftover after parsing attributes in process `syz.1.3238'. [ 666.725667][T17968] netlink: 168 bytes leftover after parsing attributes in process `syz.1.3238'. [ 667.297748][ T6705] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 668.211122][T17956] syzkaller0 speed is unknown, defaulting to 1000 [ 668.213844][T17956] lo speed is unknown, defaulting to 1000 [ 668.255220][T17987] netlink: 168 bytes leftover after parsing attributes in process `syz.3.3245'. [ 668.263487][T17987] netlink: 168 bytes leftover after parsing attributes in process `syz.3.3245'. [ 668.889603][T18005] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3249'. [ 669.977471][T14873] libceph: connect (1)[c::]:6789 error -101 [ 669.980053][T14873] libceph: mon0 (1)[c::]:6789 connect error [ 670.028014][T18023] erspan0: left promiscuous mode [ 670.138374][T18014] ceph: No mds server is up or the cluster is laggy [ 670.498148][ T46] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 670.988718][T18039] netlink: 168 bytes leftover after parsing attributes in process `syz.3.3255'. [ 670.991739][T18039] netlink: 168 bytes leftover after parsing attributes in process `syz.3.3255'. [ 671.211089][T18048] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3258'. [ 671.757717][T18054] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3259'. [ 672.122489][T18064] IPVS: sync thread started: state = BACKUP, mcast_ifn = wlan0, syncid = 1, id = 0 [ 672.125808][T18063] IPVS: stopping backup sync thread 18064 ... [ 672.417844][ T46] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 673.195680][T18073] /dev/nullb0: Can't lookup blockdev [ 673.393318][T18079] netlink: 168 bytes leftover after parsing attributes in process `syz.3.3266'. [ 673.403185][T18079] netlink: 168 bytes leftover after parsing attributes in process `syz.3.3266'. [ 673.607813][T18089] netlink: 168 bytes leftover after parsing attributes in process `syz.1.3269'. [ 673.610911][T18089] netlink: 168 bytes leftover after parsing attributes in process `syz.1.3269'. [ 673.660957][T18083] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3267'. [ 673.966354][T18083] team0: entered promiscuous mode [ 673.969571][T18083] 8021q: adding VLAN 0 to HW filter on device team0 [ 674.015145][T18097] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3270'. [ 674.104263][T18093] lo speed is unknown, defaulting to 1000 [ 674.177696][T18093] syzkaller0 speed is unknown, defaulting to 1000 [ 674.180455][T18093] lo speed is unknown, defaulting to 1000 [ 674.379479][T18103] IPVS: sync thread started: state = BACKUP, mcast_ifn = wlan0, syncid = 1, id = 0 [ 674.382894][T18101] IPVS: stopping backup sync thread 18103 ... [ 675.248487][T18115] siw: device registration error -23 [ 675.256427][T18115] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3275'. [ 675.627435][ T6705] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 676.609214][T18137] overlayfs: failed to clone lowerpath [ 676.824163][T18142] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3281'. [ 677.040738][T18147] fuse: Unknown parameter 'Ud' [ 677.548662][ T6686] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 677.765274][T18154] /dev/nullb0: Can't lookup blockdev [ 678.785567][T18168] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3285'. [ 679.207354][T18175] lo speed is unknown, defaulting to 1000 [ 679.441354][T18175] syzkaller0 speed is unknown, defaulting to 1000 [ 679.444217][T18175] lo speed is unknown, defaulting to 1000 [ 680.687673][T18196] lo speed is unknown, defaulting to 1000 [ 680.785661][T18196] syzkaller0 speed is unknown, defaulting to 1000 [ 680.790087][T18196] lo speed is unknown, defaulting to 1000 [ 681.378997][ T6705] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 681.955413][T18208] netlink: 'syz.4.3294': attribute type 1 has an invalid length. [ 682.389239][T18214] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3297'. [ 682.956384][T18219] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3299'. [ 684.428401][T18239] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3303'. [ 685.229795][ T1414] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.305649][T18250] lo speed is unknown, defaulting to 1000 [ 685.918300][T18250] syzkaller0 speed is unknown, defaulting to 1000 [ 685.925188][T18250] lo speed is unknown, defaulting to 1000 [ 686.030617][T18259] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3307'. [ 686.263723][T18262] IPVS: Unknown mcast interface: wlan0 [ 687.861095][T18281] 9pnet_virtio: no channels available for device syz [ 687.864455][T18281] netlink: 168 bytes leftover after parsing attributes in process `syz.4.3314'. [ 687.877237][T18281] netlink: 168 bytes leftover after parsing attributes in process `syz.4.3314'. [ 688.289047][T18285] netlink: 168 bytes leftover after parsing attributes in process `syz.3.3308'. [ 688.291902][T18285] netlink: 168 bytes leftover after parsing attributes in process `syz.3.3308'. [ 688.297351][T18287] »»»»»»7: left promiscuous mode [ 688.321333][T18287] tunl0: left promiscuous mode [ 688.340979][T18287] gre0: left promiscuous mode [ 688.477549][T18287] gretap0: left promiscuous mode [ 688.498711][T18287] erspan0: left promiscuous mode [ 688.519139][T18287] ip_vti0: left promiscuous mode [ 688.538660][T18287] ip6_vti0: left promiscuous mode [ 688.549150][T18287] sit0: left promiscuous mode [ 688.573499][T18287] ip6tnl0: left promiscuous mode [ 688.589737][T18287] ip6gre0: left promiscuous mode [ 688.641494][T18287] syz_tun: left promiscuous mode [ 689.037668][T18287] ip6gretap0: left promiscuous mode [ 689.057431][T18287] bridge0: left promiscuous mode [ 689.088592][T18287] vcan0: left promiscuous mode [ 689.137989][T18287] ÿ: left promiscuous mode [ 689.175463][T18287] nlmon0: left promiscuous mode [ 689.196957][T18287] caif0: left promiscuous mode [ 689.201808][T18287] batadv0: left allmulticast mode [ 689.831787][T18300] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3317'. [ 691.541481][T18287] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 691.544780][T18287] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 691.549585][T18287] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 691.552882][T18287] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 691.558124][T18287] vlan2: left promiscuous mode [ 691.562467][T18287] vlan2: left allmulticast mode [ 691.569780][T18287] hsr_slave_1: left allmulticast mode [ 691.576813][T18287] vlan4: left allmulticast mode [ 691.583547][T18287] bond0: left allmulticast mode [ 691.599486][T18287] ip6erspan0: left promiscuous mode [ 692.419879][T18319] netlink: 168 bytes leftover after parsing attributes in process `syz.4.3323'. [ 692.422939][T18319] netlink: 168 bytes leftover after parsing attributes in process `syz.4.3323'. [ 692.888295][T18323] overlayfs: failed to clone upperpath [ 693.059543][T18333] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3325'. [ 693.362559][T18337] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3327'. [ 693.368274][T18337] bridge0: port 1(vlan0) entered blocking state [ 693.370367][T18337] bridge0: port 1(vlan0) entered disabled state [ 693.372406][T18337] vlan0: entered allmulticast mode [ 693.374065][T18337] bridge0: entered allmulticast mode [ 693.376773][T18337] vlan0: left allmulticast mode [ 693.378433][T18337] bridge0: left allmulticast mode [ 694.613345][T18328] kexec: Could not allocate control_code_buffer [ 694.817604][T18356] netlink: 168 bytes leftover after parsing attributes in process `syz.0.3331'. [ 694.820424][T18356] netlink: 168 bytes leftover after parsing attributes in process `syz.0.3331'. [ 695.135020][T18354] wireguard0: entered promiscuous mode [ 695.136772][T18354] wireguard0: entered allmulticast mode [ 695.367492][T18366] netlink: 168 bytes leftover after parsing attributes in process `syz.4.3334'. [ 695.370376][T18366] netlink: 168 bytes leftover after parsing attributes in process `syz.4.3334'. [ 695.425102][T18363] netlink: 5 bytes leftover after parsing attributes in process `syz.0.3333'. [ 695.705082][T18369] netlink: 168 bytes leftover after parsing attributes in process `syz.4.3335'. [ 695.708761][T18369] netlink: 168 bytes leftover after parsing attributes in process `syz.4.3335'. [ 695.944805][T18374] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3336'. [ 696.244571][T18383] overlayfs: failed to clone upperpath [ 696.490023][T14873] libceph: connect (1)[c::]:6789 error -101 [ 696.492095][T14873] libceph: mon0 (1)[c::]:6789 connect error [ 696.509759][T18384] IPVS: sync thread started: state = BACKUP, mcast_ifn = wlan0, syncid = 1, id = 0 [ 696.570222][T18392] ceph: No mds server is up or the cluster is laggy [ 696.720380][T18401] lo speed is unknown, defaulting to 1000 [ 696.739361][T18350] IPVS: stopping backup sync thread 18384 ... [ 697.377734][ T6665] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 697.481696][T18401] syzkaller0 speed is unknown, defaulting to 1000 [ 697.490235][T18401] lo speed is unknown, defaulting to 1000 [ 698.657401][ T6665] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 699.597356][T18430] wireguard0: entered promiscuous mode [ 699.599302][T18430] wireguard0: entered allmulticast mode [ 699.671213][T18436] __nla_validate_parse: 7 callbacks suppressed [ 699.671223][T18436] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3350'. [ 700.240913][T18440] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3351'. [ 700.727626][T18443] netlink: 168 bytes leftover after parsing attributes in process `syz.1.3353'. [ 700.731128][T18443] netlink: 168 bytes leftover after parsing attributes in process `syz.1.3353'. [ 700.875300][T18451] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3354'. [ 701.541115][T18463] lo speed is unknown, defaulting to 1000 [ 701.929574][T18463] syzkaller0 speed is unknown, defaulting to 1000 [ 701.933479][T18463] lo speed is unknown, defaulting to 1000 [ 702.551309][T18469] netlink: 168 bytes leftover after parsing attributes in process `syz.4.3358'. [ 702.554976][T18469] netlink: 168 bytes leftover after parsing attributes in process `syz.4.3358'. [ 703.162805][ T6686] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 703.614246][T18485] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3362'. [ 703.632002][T18491] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3364'. [ 703.957409][T18497] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3365'. [ 704.511137][ T6665] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 705.549604][T18528] __nla_validate_parse: 3 callbacks suppressed [ 705.549616][T18528] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3373'. [ 706.493107][T18536] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3375'. [ 707.998166][T18564] netlink: 168 bytes leftover after parsing attributes in process `syz.0.3382'. [ 708.007227][T18564] netlink: 168 bytes leftover after parsing attributes in process `syz.0.3382'. [ 708.020242][T18566] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3384'. [ 708.020397][T18568] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3383'. [ 708.290518][T18577] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3385'. [ 708.328581][T18578] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3386'. [ 708.931329][ T6705] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 709.648099][T18600] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3392'. [ 709.660181][T18600] netlink: 'syz.4.3392': attribute type 10 has an invalid length. [ 709.947477][T18609] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3393'. [ 710.179039][ T46] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 711.048103][T18632] gretap0: left promiscuous mode [ 711.389376][T18637] /dev/nullb0: Can't lookup blockdev [ 711.482719][T18632] wg1: left promiscuous mode [ 711.484215][T18632] wg1: left allmulticast mode [ 711.713376][T18632] netdevsim netdevsim0 eth0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 711.715989][T18632] netdevsim netdevsim0 eth1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 711.727180][T18632] netdevsim netdevsim0 eth2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 711.729826][T18632] netdevsim netdevsim0 eth3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 711.767972][T18632] veth3: left promiscuous mode [ 711.777220][T18632] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 711.779844][T18632] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 711.782426][T18632] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 711.785009][T18632] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 711.802261][T18632] veth5: left promiscuous mode [ 711.804374][T18632] hsr0: left allmulticast mode [ 711.805923][T18632] hsr_slave_0: left allmulticast mode [ 711.817760][T18632] macvlan0: left promiscuous mode [ 711.819730][T18632] macvlan0: left allmulticast mode [ 711.837083][T18291] lo speed is unknown, defaulting to 1000 [ 711.848008][T18291] syz2: Port: 1 Link DOWN [ 712.604010][T18641] __nla_validate_parse: 3 callbacks suppressed [ 712.604022][T18641] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3401'. [ 713.521772][T18662] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3407'. [ 713.525537][T18662] netlink: 'syz.1.3407': attribute type 19 has an invalid length. [ 713.591819][T18662] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 713.595290][T18662] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 713.598779][T18662] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 713.602117][T18662] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 713.640678][T18662] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 713.643723][T18662] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 713.646793][T18662] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 713.649442][T18662] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 715.110161][T18677] netlink: 'syz.0.3410': attribute type 1 has an invalid length. [ 717.131326][T18709] netlink: 'syz.0.3417': attribute type 1 has an invalid length. [ 717.333305][T18704] ceph: No mds server is up or the cluster is laggy [ 717.346859][ T5989] libceph: connect (1)[c::]:6789 error -101 [ 717.348998][ T5989] libceph: mon0 (1)[c::]:6789 connect error [ 717.708215][T18716] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3418'. [ 721.249328][T18742] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3426'. [ 722.697268][T18752] netlink: 168 bytes leftover after parsing attributes in process `syz.4.3427'. [ 722.700101][T18752] netlink: 168 bytes leftover after parsing attributes in process `syz.4.3427'. [ 724.892412][T18768] "syz.4.3432" (18768) uses obsolete ecb(arc4) skcipher [ 725.749226][T18763] No control pipe specified [ 730.521908][T18787] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3436'. [ 730.628065][T18791] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3435'. [ 730.941982][ T40] kauditd_printk_skb: 7 callbacks suppressed [ 730.941998][ T40] audit: type=1326 audit(730.821:2104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18784 comm="syz.0.3435" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e579 code=0x7fc00000 [ 731.100006][T18800] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3439'. [ 731.566967][T18808] Process accounting resumed [ 732.775165][T18823] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3445'. [ 733.159271][T13174] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 733.166498][T13174] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 733.170076][T13174] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 733.186825][T13174] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 733.192432][T13174] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 733.254453][T18834] lo speed is unknown, defaulting to 1000 [ 733.469644][T18834] syzkaller0 speed is unknown, defaulting to 1000 [ 733.477282][T18834] lo speed is unknown, defaulting to 1000 [ 734.055578][T18834] chnl_net:caif_netlink_parms(): no params data found [ 734.075142][T18850] netlink: 168 bytes leftover after parsing attributes in process `syz.3.3450'. [ 734.079145][T18850] netlink: 168 bytes leftover after parsing attributes in process `syz.3.3450'. [ 734.181076][T18834] bridge0: port 1(bridge_slave_0) entered blocking state [ 734.183446][T18834] bridge0: port 1(bridge_slave_0) entered disabled state [ 734.185864][T18834] bridge_slave_0: entered allmulticast mode [ 734.188677][T18834] bridge_slave_0: entered promiscuous mode [ 734.194571][T18834] bridge0: port 2(bridge_slave_1) entered blocking state [ 734.197792][T18834] bridge0: port 2(bridge_slave_1) entered disabled state [ 734.200968][T18834] bridge_slave_1: entered allmulticast mode [ 734.204826][T18834] bridge_slave_1: entered promiscuous mode [ 734.268315][T18834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 734.272824][T18834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 734.359019][T18834] team0: Port device team_slave_0 added [ 734.362923][T18834] team0: Port device team_slave_1 added [ 734.465172][T18834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 734.469104][T18834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 734.479245][T18834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 734.485179][T18834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 734.488123][T18834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 734.498653][T18834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 734.619599][T18834] hsr_slave_0: entered promiscuous mode [ 734.622740][T18834] hsr_slave_1: entered promiscuous mode [ 734.625584][T18834] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 734.630628][T18834] Cannot create hsr debugfs directory [ 734.769405][T18834] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 734.775234][T18834] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 734.803171][T18834] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 734.821152][T18834] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 734.836783][T18834] bridge0: port 2(bridge_slave_1) entered blocking state [ 734.839419][T18834] bridge0: port 2(bridge_slave_1) entered forwarding state [ 734.841891][T18834] bridge0: port 1(bridge_slave_0) entered blocking state [ 734.844126][T18834] bridge0: port 1(bridge_slave_0) entered forwarding state [ 734.880630][T18834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 734.893977][T18834] 8021q: adding VLAN 0 to HW filter on device team0 [ 734.899743][ T6657] bridge0: port 1(bridge_slave_0) entered disabled state [ 734.905560][ T6657] bridge0: port 2(bridge_slave_1) entered disabled state [ 734.951561][ T6657] bridge0: port 1(bridge_slave_0) entered blocking state [ 734.954621][ T6657] bridge0: port 1(bridge_slave_0) entered forwarding state [ 734.972145][ T6665] bridge0: port 2(bridge_slave_1) entered blocking state [ 734.974657][ T6665] bridge0: port 2(bridge_slave_1) entered forwarding state [ 735.002367][T18834] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 735.153716][T18834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 735.227261][T13174] Bluetooth: hci4: command tx timeout [ 735.454110][T18834] veth0_vlan: entered promiscuous mode [ 735.472729][T18834] veth1_vlan: entered promiscuous mode [ 735.514867][T18834] veth0_macvtap: entered promiscuous mode [ 735.520780][T18834] veth1_macvtap: entered promiscuous mode [ 735.530947][T18834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 735.535852][T18834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 735.544177][T18834] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 735.546946][T18834] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 735.550219][T18834] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 735.557963][T18834] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 735.603216][ T6665] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 735.604381][T18885] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3455'. [ 735.610438][ T6665] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 735.637269][ T6686] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 735.640114][ T6686] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 736.177365][ T40] audit: type=1800 audit(736.051:2105): pid=18897 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3457" name="nullb0" dev="tmpfs" ino=1264 res=0 errno=0 [ 736.192374][T18895] lo speed is unknown, defaulting to 1000 [ 736.434875][T18895] syzkaller0 speed is unknown, defaulting to 1000 [ 736.439016][T18895] lo speed is unknown, defaulting to 1000 [ 736.499956][ T836] libceph: connect (1)[c::]:6789 error -99 [ 736.504250][ T836] libceph: mon0 (1)[c::]:6789 connect error [ 736.607880][T18907] ceph: No mds server is up or the cluster is laggy [ 737.071901][T18930] "syz.0.3464" (18930) uses obsolete ecb(arc4) skcipher [ 737.309264][T13174] Bluetooth: hci4: command tx timeout [ 738.073666][T18940] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3467'. [ 738.246827][T18943] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3466'. [ 738.968069][T18958] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3470'. [ 739.271676][T18962] lo speed is unknown, defaulting to 1000 [ 739.344799][T18962] syzkaller0 speed is unknown, defaulting to 1000 [ 739.347610][T18962] lo speed is unknown, defaulting to 1000 [ 739.401908][T13174] Bluetooth: hci4: command tx timeout [ 739.475693][ T40] audit: type=1326 audit(739.351:2106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18954 comm="syz.4.3470" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe4579 code=0x7fc00000 [ 740.366605][T18978] No control pipe specified [ 740.687671][T18992] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3478'. [ 741.457962][T13174] Bluetooth: hci4: command tx timeout [ 741.467609][ T9] libceph: connect (1)[c::]:6789 error -101 [ 741.469604][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 741.473084][ T9] libceph: connect (1)[c::]:6789 error -101 [ 741.475021][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 741.524961][T19004] ceph: No mds server is up or the cluster is laggy [ 741.820825][T17883] libceph: connect (1)[c::]:6789 error -101 [ 741.822931][T17883] libceph: mon0 (1)[c::]:6789 connect error [ 741.871666][T19014] ceph: No mds server is up or the cluster is laggy [ 741.939028][ T40] audit: type=1800 audit(741.821:2107): pid=19019 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3485" name="nullb0" dev="tmpfs" ino=2439 res=0 errno=0 [ 742.229940][ T40] audit: type=1800 audit(742.111:2108): pid=19028 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3487" name="nullb0" dev="tmpfs" ino=4232 res=0 errno=0 [ 742.613317][T19035] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3488'. [ 742.852780][T19030] bridge0: port 2(bridge_slave_1) entered disabled state [ 742.855257][T19030] bridge0: port 1(bridge_slave_0) entered disabled state [ 742.935510][T19030] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 742.943559][T19030] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 743.032064][T19030] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 743.035072][T19030] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 743.038862][T19030] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 743.042176][T19030] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 743.097451][T19045] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3491'. [ 744.036457][T17883] libceph: connect (1)[c::]:6789 error -101 [ 744.041267][T17883] libceph: mon0 (1)[c::]:6789 connect error [ 744.122747][T19061] ceph: No mds server is up or the cluster is laggy [ 744.314416][T19077] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3499'. [ 744.335118][ T9] libceph: connect (1)[c::]:6789 error -101 [ 744.337943][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 744.390382][T19066] ceph: No mds server is up or the cluster is laggy [ 744.466062][T19085] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3508'. [ 744.473704][T19085] netlink: 'syz.0.3508': attribute type 19 has an invalid length. [ 744.482686][T19085] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 744.486175][T19085] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 744.489908][T19085] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 744.493417][T19085] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 744.502085][T19085] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 744.505582][T19085] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 744.509501][T19085] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 744.512925][T19085] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 744.746407][T19096] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3500'. [ 744.827288][T19095] overlayfs: failed to clone upperpath [ 745.265048][ T40] audit: type=1326 audit(745.141:2109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19082 comm="syz.5.3500" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de579 code=0x7fc00000 [ 745.551382][T19113] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3506'. [ 745.579961][T19109] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3507'. [ 745.606539][T19109] team0: entered promiscuous mode [ 745.608752][T19109] 8021q: adding VLAN 0 to HW filter on device team0 [ 745.691304][T19120] netlink: 168 bytes leftover after parsing attributes in process `syz.3.3510'. [ 745.695061][T19120] netlink: 168 bytes leftover after parsing attributes in process `syz.3.3510'. [ 745.821674][T19125] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3509'. [ 745.834493][T19127] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3513'. [ 745.841810][T19127] netlink: 'syz.4.3513': attribute type 19 has an invalid length. [ 745.855012][T19127] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 745.858815][T19127] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 745.862247][T19127] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 745.865687][T19127] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 745.877422][T19127] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 745.880968][T19127] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 745.884448][T19127] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 745.888039][T19127] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 746.280095][T19138] IPVS: Unknown mcast interface: wlan0 [ 746.669593][ T1414] ieee802154 phy1 wpan1: encryption failed: -22 [ 746.945346][T19149] xt_CT: You must specify a L4 protocol and not use inversions on it [ 747.462001][T19158] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3520'. [ 747.646385][T19168] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3523'. [ 747.649338][T19168] netlink: 'syz.3.3523': attribute type 19 has an invalid length. [ 747.744872][T19168] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 747.748368][T19168] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 747.751447][T19168] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 747.754428][T19168] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 747.760875][T19168] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 747.763506][T19168] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 747.766128][T19168] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 747.768963][T19168] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 747.947291][ T40] audit: type=1326 audit(747.821:2110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19154 comm="syz.4.3519" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe4579 code=0x7fc00000 [ 748.069712][ T59] libceph: connect (1)[c::]:6789 error -101 [ 748.072134][ T59] libceph: mon0 (1)[c::]:6789 connect error [ 748.168141][T19183] ceph: No mds server is up or the cluster is laggy [ 748.228032][T14873] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 748.238983][T19187] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3529'. [ 748.377168][T19193] ceph: No mds server is up or the cluster is laggy [ 748.380869][T14873] usb 10-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 748.384031][T14873] usb 10-1: config 0 interface 0 has no altsetting 0 [ 748.399010][T14873] usb 10-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 748.401942][T14873] usb 10-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 748.404611][T14873] usb 10-1: Product: syz [ 748.405985][T14873] usb 10-1: Manufacturer: syz [ 748.408312][T14873] usb 10-1: SerialNumber: syz [ 748.419566][T14873] usb 10-1: config 0 descriptor?? [ 748.429695][T14873] usb 10-1: selecting invalid altsetting 0 [ 748.447477][T19197] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3538'. [ 748.498747][T19204] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3531'. [ 748.690238][T14873] usb 10-1: USB disconnect, device number 2 [ 748.895322][T19218] netlink: 168 bytes leftover after parsing attributes in process `syz.0.3535'. [ 748.902653][T19218] netlink: 168 bytes leftover after parsing attributes in process `syz.0.3535'. [ 748.955310][T19220] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3536'. [ 748.971094][T19220] netlink: 'syz.0.3536': attribute type 19 has an invalid length. [ 748.995597][T19220] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 748.998365][T19220] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 749.000987][T19220] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 749.003531][T19220] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 749.021394][T19220] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 749.025090][T19220] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 749.028501][T19220] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 749.031938][T19220] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 749.644352][T19235] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 750.050591][T19244] team0: Mode changed to "loadbalance" [ 750.443761][T19254] xt_limit: Overflow, try lower: 0/0 [ 751.382446][T19274] __nla_validate_parse: 6 callbacks suppressed [ 751.382456][T19274] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3551'. [ 751.397041][T19274] team0: entered promiscuous mode [ 751.402039][T19274] 8021q: adding VLAN 0 to HW filter on device team0 [ 751.712644][T19281] lo speed is unknown, defaulting to 1000 [ 751.858365][T19281] syzkaller0 speed is unknown, defaulting to 1000 [ 751.861146][T19281] lo speed is unknown, defaulting to 1000 [ 752.132572][T19287] netlink: 168 bytes leftover after parsing attributes in process `syz.4.3554'. [ 752.135456][T19287] netlink: 168 bytes leftover after parsing attributes in process `syz.4.3554'. [ 752.480714][T19298] netlink: 168 bytes leftover after parsing attributes in process `syz.4.3557'. [ 752.483625][T19298] netlink: 168 bytes leftover after parsing attributes in process `syz.4.3557'. [ 752.507209][ T59] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 752.671958][ T59] usb 10-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 752.676183][ T59] usb 10-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 752.708646][ T59] usb 10-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 752.711516][ T59] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 752.746615][T19291] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 752.754505][ T59] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 754.530584][ T40] audit: type=1800 audit(754.411:2111): pid=19321 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3565" name="nullb0" dev="tmpfs" ino=2439 res=0 errno=0 [ 754.991465][T19330] wireguard0: entered promiscuous mode [ 754.993426][T19330] wireguard0: entered allmulticast mode [ 755.127709][T17883] usb 10-1: USB disconnect, device number 3 [ 755.232508][T19333] netlink: 168 bytes leftover after parsing attributes in process `syz.5.3567'. [ 755.235500][T19333] netlink: 168 bytes leftover after parsing attributes in process `syz.5.3567'. [ 755.487393][ T40] audit: type=1800 audit(755.371:2112): pid=19340 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3570" name="nullb0" dev="tmpfs" ino=4232 res=0 errno=0 [ 757.027298][T19365] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3575'. [ 757.049683][T19366] netlink: 168 bytes leftover after parsing attributes in process `syz.0.3576'. [ 757.077468][T19366] netlink: 168 bytes leftover after parsing attributes in process `syz.0.3576'. [ 757.420494][T19380] siw: device registration error -23 [ 758.575322][T19390] tipc: Resetting bearer [ 758.644694][T19390] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3582'. [ 758.960388][T19391] Process accounting resumed [ 759.413487][T19409] IPVS: Unknown mcast interface: wlan0 [ 759.477236][T19403] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3586'. [ 759.658043][T19416] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3588'. [ 759.664021][T19416] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3588'. [ 759.672247][T19416] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3588'. [ 759.677372][T19416] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3588'. [ 759.815055][T19418] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3589'. [ 760.408345][ T40] audit: type=1800 audit(760.291:2113): pid=19434 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3595" name="nullb0" dev="tmpfs" ino=2439 res=0 errno=0 [ 761.590093][T17883] libceph: connect (1)[c::]:6789 error -101 [ 761.592881][T17883] libceph: mon0 (1)[c::]:6789 connect error [ 761.676248][T19472] ceph: No mds server is up or the cluster is laggy [ 761.744592][T19459] veth1_macvtap: left allmulticast mode [ 761.748652][T19459] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 761.751303][T19459] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 761.753926][T19459] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 761.756540][T19459] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 761.858774][T19478] netlink: 'syz.4.3605': attribute type 5 has an invalid length. [ 761.866619][T19478] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 761.871238][T19478] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 761.874336][T19478] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 761.893558][T19478] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 761.899453][T19478] geneve2: entered promiscuous mode [ 761.901143][T19478] geneve2: entered allmulticast mode [ 762.520812][T19496] __nla_validate_parse: 6 callbacks suppressed [ 762.520823][T19496] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3609'. [ 762.715117][T19503] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3611'. [ 762.884626][T19509] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3621'. [ 764.609050][T19536] siw: device registration error -23 [ 765.063339][T19537] Process accounting resumed [ 765.265019][T19556] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3619'. [ 765.323631][T19548] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3623'. [ 765.329970][T19560] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3626'. [ 765.332789][T19560] netlink: 'syz.0.3626': attribute type 19 has an invalid length. [ 765.338137][T19560] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 765.340718][T19560] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 765.343224][T19560] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 765.345782][T19560] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 765.350807][T19560] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 765.353404][T19560] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 765.355958][T19560] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 765.358591][T19560] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 765.389468][T19559] netlink: 168 bytes leftover after parsing attributes in process `syz.5.3624'. [ 765.392415][T19559] netlink: 168 bytes leftover after parsing attributes in process `syz.5.3624'. [ 765.813446][T19572] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 767.884087][T19602] Process accounting resumed [ 767.911854][T19609] netlink: 168 bytes leftover after parsing attributes in process `syz.5.3635'. [ 767.915843][T19609] netlink: 168 bytes leftover after parsing attributes in process `syz.5.3635'. [ 768.015000][T19614] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3639'. [ 768.019675][T19614] netlink: 'syz.0.3639': attribute type 19 has an invalid length. [ 768.029053][T19614] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 768.032455][T19614] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 768.035822][T19614] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 768.039274][T19614] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 768.077345][T19614] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 768.080859][T19614] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 768.084349][T19614] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 768.087900][T19614] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 770.097789][T19634] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 772.715524][T19690] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 773.074236][T19696] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3658'. [ 773.093569][ T45] BUG: sleeping function called from invalid context at mm/util.c:743 [ 773.100130][ T45] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 45, name: kcompactd1 [ 773.108205][ T45] preempt_count: 1, expected: 0 [ 773.110192][ T45] RCU nest depth: 0, expected: 0 [ 773.112849][ T45] 1 lock held by kcompactd1/45: [ 773.114654][ T45] #0: ffff88804251e5c8 (&mapping->i_private_lock){+.+.}-{3:3}, at: __buffer_migrate_folio+0x25b/0x690 [ 773.118740][ T45] Preemption disabled at: [ 773.118749][ T45] [<0000000000000000>] 0x0 [ 773.122384][ T45] CPU: 0 UID: 0 PID: 45 Comm: kcompactd1 Not tainted 6.15.0-rc3-syzkaller-00076-ge72e9e693307 #0 PREEMPT(full) [ 773.122399][ T45] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 773.122406][ T45] Call Trace: [ 773.122421][ T45] [ 773.122426][ T45] dump_stack_lvl+0x16c/0x1f0 [ 773.122445][ T45] __might_resched+0x3c0/0x5e0 [ 773.122458][ T45] ? __free_frozen_pages+0x72a/0xff0 [ 773.122469][ T45] ? __pfx___might_resched+0x10/0x10 [ 773.122483][ T45] folio_mc_copy+0xfb/0x190 [ 773.122500][ T45] __migrate_folio.constprop.0+0xa1/0x3d0 [ 773.122517][ T45] __buffer_migrate_folio+0x5cd/0x690 [ 773.122534][ T45] ? __pfx_buffer_migrate_folio_norefs+0x10/0x10 [ 773.122548][ T45] move_to_new_folio+0x1d9/0x700 [ 773.122564][ T45] migrate_pages_batch+0x201d/0x31a0 [ 773.122581][ T45] ? __pfx_compaction_free+0x10/0x10 SYZFAIL: failed to recv rpc [ 773.122596][ T45] ? __pfx_migrate_pages_batch+0x10/0x10 [ 773.122613][ T45] ? migrate_folio_done+0x298/0x340 [ 773.122629][ T45] migrate_pages_sync+0x12d/0x8a0 [ 773.122644][ T45] ? __pfx_compaction_alloc+0x10/0x10 fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 773.122653][ T45] ? __pfx_compaction_free+0x10/0x10 [ 773.122665][ T45] ? __pfx_migrate_pages_sync+0x10/0x10 [ 773.122689][ T45] migrate_pages+0x1b28/0x2350 [ 773.122704][ T45] ? __pfx_compaction_alloc+0x10/0x10 [ 773.122714][ T45] ? __pfx_compaction_free+0x10/0x10 [ 773.122726][ T45] ? __pfx_migrate_pages+0x10/0x10 [ 773.122743][ T45] ? __pfx_isolate_migratepages_block+0x10/0x10 [ 773.122759][ T45] compact_zone+0x1f6c/0x45f0 [ 773.122782][ T45] ? __lock_acquire+0xaa4/0x1ba0 [ 773.122815][ T45] ? __pfx_compact_zone+0x10/0x10 [ 773.122841][ T45] compact_node+0x1a4/0x2d0 [ 773.122861][ T45] ? __pfx_compact_node+0x10/0x10 [ 773.122878][ T45] ? __pfx___might_resched+0x10/0x10 [ 773.122916][ T45] ? __pfx_extfrag_for_order+0x10/0x10 [ 773.122938][ T45] ? rcu_is_watching+0x12/0xc0 [ 773.122951][ T45] kcompactd+0x762/0xea0 [ 773.122963][ T45] ? __pfx_kcompactd+0x10/0x10 [ 773.122973][ T45] ? find_held_lock+0x2b/0x80 [ 773.122985][ T45] ? __pfx_autoremove_wake_function+0x10/0x10 [ 773.122998][ T45] ? lockdep_hardirqs_on+0x7c/0x110 [ 773.123013][ T45] ? __kthread_parkme+0x19e/0x250 [ 773.123027][ T45] ? __pfx_kcompactd+0x10/0x10 [ 773.123037][ T45] kthread+0x3c2/0x780 [ 773.123052][ T45] ? __pfx_kthread+0x10/0x10 [ 773.123066][ T45] ? __pfx_kthread+0x10/0x10 [ 773.123080][ T45] ? __pfx_kthread+0x10/0x10 [ 773.123094][ T45] ? __pfx_kthread+0x10/0x10 [ 773.123108][ T45] ? rcu_is_watching+0x12/0xc0 [ 773.123119][ T45] ? __pfx_kthread+0x10/0x10 [ 773.123134][ T45] ret_from_fork+0x45/0x80 [ 773.123144][ T45] ? __pfx_kthread+0x10/0x10 [ 773.123159][ T45] ret_from_fork_asm+0x1a/0x30 [ 773.123181][ T45] VM DIAGNOSIS: 18:28:46 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000000 RBX=ffffc90004ea7b60 RCX=0000000000000000 RDX=0000000000000000 RSI=ffffffff84feff44 RDI=ffffc90004ea7b60 RBP=ffffffff84feff30 RSP=ffffc90000007880 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=0000000000000000 R13=dffffc0000000000 R14=0000000000000000 R15=ffffc90004ea7b28 RIP=ffffffff84feff6d RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880977bf000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000002f71dff8 CR3=000000006a05a000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=000000000000000e DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000e8768d RBX=0000000000000001 RCX=ffffffff8b6f13e9 RDX=0000000000000000 RSI=ffffffff8dbe98c0 RDI=ffffffff8bf44f80 RBP=ffffed1003b57488 RSP=ffffc9000046fdf8 R8 =0000000000000001 R9 =ffffed10056665bd R10=ffff88802b332deb R11=0000000000000000 R12=0000000000000001 R13=ffff88801daba440 R14=ffffffff90866910 R15=0000000000000000 RIP=ffffffff8b6efc7f RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880978bf000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000080021000 CR3=00000000583ec000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 EAX=00000000 EBX=ffffffff ECX=81f13a8d EDX=00000000 ESI=f6d0f000 EDI=f690f820 EBP=f6a6e958 ESP=ffb3a160 EIP=f714ed4c EFL=00000246 [---Z-P-] CPL=3 II=0 A20=1 SMM=0 HLT=0 ES =002b 00000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0023 00000000 ffffffff 00c0fb00 DPL=3 CS32 [-RA] SS =002b 00000000 ffffffff 00c0f300 DPL=3 DS [-WA] DS =002b 00000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 00000000 ffffffff 00c00000 GS =0063 56932440 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 00000000 ffffffff 00c00000 TR =0040 00091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000002f816ffc CR3=0000000059ba4000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=000000000007ffff RBX=1ffff92001ac2f31 RCX=ffffc9000c803000 RDX=0000000000080000 RSI=ffffffff81f5b0a1 RDI=0000000000000001 RBP=ffffea0001741e40 RSP=ffffc9000d617978 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=04fff00000020101 R13=fffffe7fffffffff R14=ffffc9000d6179c8 R15=04fff00000020108 RIP=ffffffff81baaa46 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888097abf000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000583e8a0c CR3=0000000064058000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=000000000000000e DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000