last executing test programs: 2m44.762326606s ago: executing program 1 (id=732): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x3}]}, {0x0, [0x2e, 0x0, 0x0, 0x61]}}, 0x0, 0x2e, 0x0, 0x0, 0x0, 0x1600}, 0x28) 2m44.691356806s ago: executing program 1 (id=733): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x3, 0xfffffe0000000001, 0x3, 0xffffffff}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x9, 0x2, 0x180, 0x4, 0x10, 0xf1, 0x50, 0x7fffffffffffe, 0x5, 0x6, 0x9, 0x8000000000000000, 0xf4a, 0x0, 0xbdb], 0xffff1001, 0x4000}) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000200)={0x0, 0x0, 0x300f, 0x2, 0x0, 0x0, 0x0, 0x1}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_ENUMAUDOUT(r6, 0xc0345642, &(0x7f0000000080)={0x1, "7bc7b0eb07939da1ee8efc70c96ced7db5515f1f455fd01ec5750310cb20fa5e"}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r9, {0x8, 0x7}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x8, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x4}]}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) r10 = socket$igmp(0x2, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r10, 0x1, 0x19, &(0x7f00000021c0)='lo\x00', 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@multicast, @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x4, 0x1c, 0x66, 0x0, 0x7, 0x2, 0x0, @private=0xa010102, @local}, {0x11, 0x1, 0x0, @empty}}}}}, 0x0) r11 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r11, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x4000}, 0x48) 2m43.669525352s ago: executing program 1 (id=740): mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000007, 0x2172, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000000)={0xfff}, 0x10) write(r1, &(0x7f0000000180), 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$SNDRV_TIMER_IOCTL_CREATE(r0, 0xc02054a5, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r5 = syz_io_uring_setup(0x497, &(0x7f00000004c0)={0x0, 0x465e, 0x400, 0x7, 0x31d}, &(0x7f00000001c0)=0x0, &(0x7f0000000300)=0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001700)=@newtaction={0xeb4, 0x30, 0x1, 0x20, 0x0, {}, [{0xea0, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x0, 0xe4}, 0x4}}]}, {0x4}, {0xc}, {0xc}}}, @m_pedit={0xe50, 0x2, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x8, 0x8cf9, 0x20000000, 0x67e, 0x7fff}, 0x3, 0x9}, [{0x4, 0x4, 0x3, 0xa7a7, 0x10000, 0x1}, {0x7, 0x2, 0x1, 0x4, 0x7, 0x1}, {0x1, 0x1, 0x7, 0x8, 0x101, 0x2}, {0xef, 0xfffffffb, 0xce0, 0x2, 0xffff, 0x8}, {0x8, 0x7, 0x2c41, 0x3, 0xffff, 0x400}, {0x7, 0x3, 0x3, 0x9, 0x653d, 0x4008}, {0x1000, 0x1, 0x800, 0x3, 0x0, 0x74a}, {0x2, 0xb33, 0xca0, 0xcf5, 0x59, 0x5d1ab42a}, {0xbe0, 0x9, 0x1, 0x3, 0xffff5d3b, 0x7}, {0x3, 0xfffffff9, 0x80000001, 0x2, 0x101, 0x8}, {0x9, 0x6, 0x3, 0x1, 0x2, 0x10001}, {0x200, 0x3, 0xfff0000, 0x7, 0x3, 0x6}, {0x5, 0x8, 0x1, 0x1, 0x4, 0x5}, {0x3, 0x69e2, 0x800, 0x5, 0x2, 0x80000001}, {0x14a529c0, 0x9, 0x2, 0x0, 0x6, 0x3}, {0xfffffff9, 0x0, 0xfffffa13, 0x8, 0xfff, 0x100}, {0x7f, 0x5, 0x1, 0x8, 0x58, 0x66fd}, {0x8, 0x5, 0x7ff, 0x80000000, 0x5, 0x16}, {0x7, 0x70, 0x1, 0x6, 0x7, 0x7}, {0x8, 0xffffff3e, 0x7, 0x2, 0x6, 0x9}, {0xb, 0x0, 0x1ff, 0x1, 0x2, 0x3}, {0x8, 0xffff9fd7, 0x2, 0x4, 0x6cbcbea4, 0x6}, {0x7, 0x5, 0xfffffff8, 0xb, 0x401, 0x3}, {0xfffffff9, 0x0, 0x4a3, 0x4, 0x6, 0x8}, {0x6, 0xe6f4, 0x8, 0x9, 0x7, 0x8}, {0x10001, 0x7, 0x7f, 0x9, 0x0, 0x58eb}, {0x8, 0x8, 0xc, 0xd29, 0xe, 0x6}, {0x6c6, 0x42f3e8c3, 0x80, 0x1, 0x1, 0x6}, {0x4, 0x7f, 0x0, 0xfd3, 0x779d, 0x10000}, {0xd174, 0x2, 0xfffffff7, 0x9, 0x40, 0xb363}, {0x4, 0xdd95, 0x4, 0x50, 0x533e, 0x2}, {0x8, 0x1, 0xba61bc7, 0x7, 0x7, 0xfffffffd}, {0x100, 0x2, 0x8, 0x2, 0x1, 0xef}, {0xffffff0c, 0x6, 0x81, 0x2, 0xfff, 0x3}, {0xf42, 0xaae, 0x0, 0x0, 0xd38, 0x5}, {0x6, 0x277c, 0xd, 0x5f72, 0x4, 0x6}, {0x2, 0x5, 0x391, 0x7c, 0x7, 0x6d}, {0x4, 0xc4d, 0xf, 0xac6, 0x4, 0x9}, {0x3, 0x32bbe, 0xd1b, 0x7, 0x7, 0x7}, {0xf, 0x3, 0x7, 0x50000000, 0x0, 0x81e}, {0x8cf, 0x9, 0xba, 0x8000, 0x2, 0x598}, {0x3, 0x5, 0xa472, 0xb, 0x0, 0x8001}, {0x6, 0x3, 0x8, 0x6, 0x64, 0x1}, {0x6, 0xfff, 0x1, 0x7, 0x200, 0x5}, {0x2, 0x7, 0xfffffff7, 0x9, 0x9, 0x1}, {0x526, 0x7, 0xfffffffa, 0x7, 0xcc, 0xc08}, {0x401, 0x3, 0x5, 0xff, 0xf, 0x101}, {0x0, 0xf33c, 0x2, 0x1, 0x3bc3, 0x4}, {0xb8, 0x5, 0x3, 0x2, 0x6, 0x101}, {0x896, 0x94, 0x7, 0x10, 0x100, 0x7}, {0xfffffffb, 0x401, 0x4, 0x4, 0x2, 0x3ff}, {0x1a0, 0x3e, 0xb, 0x7, 0xffffcf00, 0x6ac5}, {0xfffffffb, 0x84, 0x523dc955, 0x5, 0x2, 0x100}, {0x3, 0x2, 0x10000, 0x0, 0xff, 0xe0000000}, {0xefe, 0x9, 0xff, 0xfff, 0x401, 0x7}, {0xa97b, 0xfffffffc, 0x1, 0xfff, 0xeb1b, 0xfffffffe}, {0xffffff2e, 0xffff, 0xf, 0x3, 0xfffffffa, 0x40}, {0x4, 0x401, 0x0, 0xfe, 0x3, 0x1}, {0xfffff862, 0x8, 0x1ff, 0xfff, 0x0, 0x9}, {0xff, 0x6, 0x9, 0x7, 0x8, 0x1729}, {0xe6cf, 0x6, 0x0, 0x3, 0x46, 0x5}, {0x9, 0x29, 0x5, 0x7f, 0x4, 0x4}, {0xd4a6, 0xddb, 0x8, 0x7, 0x9, 0x2}, {0xffff, 0x2, 0x80000001, 0x9, 0x9, 0x200}, {0x917, 0xe4, 0x3, 0x171b9001, 0x3930, 0x1}, {0x0, 0xa332ea3, 0x5, 0x53d, 0x5, 0x6}, {0x0, 0x8, 0x2, 0x3, 0x1, 0x1c6f}, {0x3ff, 0x50000, 0x4, 0x53, 0xffff, 0x5}, {0xc9, 0x9, 0x2, 0x5d9a, 0x7e, 0xe5}, {0xe, 0x7ee, 0xd2, 0xb, 0x7fffffff, 0x1000000}, {0xe, 0x7, 0x37a2f3df, 0x10000, 0x0, 0x9}, {0x99c, 0x0, 0x5bf6, 0x80000001, 0x47e0}, {0x100, 0x9, 0xf, 0x401, 0xffffffff}, {0x3, 0x6, 0x6, 0x1, 0x7, 0x5}, {0x1, 0x0, 0x4, 0x7fffffff, 0xd, 0x9c}, {0x0, 0x0, 0x4, 0x1, 0x1, 0x81}, {0x7, 0x9, 0xd1, 0xc4ac, 0x28, 0x8001}, {0x80, 0x5, 0xd9, 0x4, 0x7fff, 0x9}, {0x0, 0xd, 0x5, 0xc, 0x8000, 0x7}, {0x6, 0x1, 0x101, 0x801, 0x1, 0x7}, {0xd, 0x92, 0x0, 0x0, 0x5, 0x24611f5b}, {0x1, 0x9, 0x8, 0xa, 0x10001, 0x1}, {0xfff, 0x0, 0x70, 0x80, 0x4, 0x1ff}, {0x7, 0xfffffff8, 0xb073, 0x0, 0xfff, 0x20000007}, {0x6, 0x10, 0xfc4, 0x99a, 0x10000, 0x8}, {0xfff, 0x1768, 0xe, 0x2000000, 0x6, 0x8}, {0x4, 0x1, 0x14, 0x43d73a98, 0x7, 0x1}, {0x9369, 0x8d9, 0x5, 0x2, 0x2}, {0x2, 0xa, 0x9, 0xfffffffe, 0x7, 0xfffffffe}, {0x6, 0x8000, 0x4, 0x132f, 0x0, 0x6}, {0x189, 0x6, 0xcc, 0xde9, 0x10001, 0xd85b}, {0x1, 0x1, 0x7ff, 0x5, 0x3}, {0x400, 0x9, 0x2, 0x1, 0x5}, {0x6, 0xfffffffd, 0x7f, 0x4, 0x3c8f0, 0x4}, {0x1, 0x0, 0x4, 0x0, 0xf, 0x7}, {0x4, 0x3, 0x30000, 0x4, 0x3, 0x5}, {0x7, 0x0, 0xb, 0x4, 0x6d3, 0x10001}, {0x4, 0x7, 0x9, 0x5, 0x7, 0x80000000}, {0x4, 0xfffffffe, 0x9, 0xfef, 0x6, 0x5}, {0x6, 0x1, 0x8, 0x30, 0xc, 0x1}, {0xffffc000, 0x10, 0x401, 0x3ff, 0x4, 0xb40}, {0x6, 0x9, 0x101, 0x0, 0x1ff, 0x8}, {0x7, 0x4, 0xb, 0xdb25, 0x3ff, 0x4}, {0xffffffff, 0x5, 0x1, 0x9, 0x1, 0x9}, {0x4, 0x80000000, 0xfffffac3, 0x280, 0x2, 0x8}, {0x1, 0x10000, 0xffffff01, 0x7, 0x3, 0x80000001}, {0xa0000000, 0xf9, 0x100, 0x7, 0x7fffffff, 0x80000000}, {0xdb3, 0x1, 0x5, 0x4, 0x1, 0xff}, {0xfff, 0x9, 0x61, 0x7, 0x10001, 0x7}, {0x9, 0x7, 0x2, 0x1ed, 0x3, 0x80000000}, {0x9, 0x3, 0x7f, 0x1000, 0x4, 0x7}, {0x8001, 0x3, 0xbf, 0x6, 0x0, 0x4}, {0x9f02, 0x5, 0x1000, 0x3, 0x8d3, 0x822}, {0x3, 0xfffffffb, 0x400, 0x6, 0x5, 0x7}, {0x8, 0x7, 0x9, 0x3, 0xd, 0x7}, {0x4, 0x40, 0x1000, 0x40, 0xffffffff, 0x5}, {0x80000000, 0x7, 0x0, 0x8001, 0x3000000, 0x3260}, {0xfff, 0xfffffff8, 0x80000001, 0x4f9b, 0x14b, 0xd}, {0xfff, 0x4, 0x7ff, 0x0, 0x8000, 0x81}, {0x5, 0x0, 0x5, 0x5, 0x4, 0x8}, {0x4e9, 0x6, 0x0, 0x0, 0x5, 0x8}, {0x8, 0xded, 0x5, 0x4, 0x7fff, 0x7}, {0x3, 0x2, 0x334715b7, 0x80000001, 0x400, 0x2a3}, {0x8, 0x5, 0xffffffff, 0x5, 0x8000, 0x1001}, {0x7, 0x2, 0xffffffff, 0xd, 0x4, 0xe68e}, {0xfffffffd, 0x11b3, 0x2, 0x3, 0x2, 0xfff}, {0xe7, 0x5, 0x4f, 0x9, 0xfffffff6, 0x1}, {0x9, 0xf078, 0x4, 0x7, 0x4}], [{0x2}, {0x1}, {0x3}, {0x5}, {0x1, 0x1}, {0x3, 0x1}, {0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x5}, {0x1}, {0x1}, {0x4}, {}, {0x4, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {}, {0x1, 0x1}, {0x3}, {0x0, 0x1}, {0x1}, {0xa, 0x1}, {0x0, 0x1}, {0x2}, {0x2, 0x1}, {0x5}, {0x5, 0x1}, {0x7}, {}, {0x3, 0x1}, {0x3, 0x1}, {0x5}, {0x3, 0x1}, {0x5, 0x1}, {0x1}, {0x2, 0x1}, {0x4, 0x1}, {}, {0x0, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x5}, {}, {0x4, 0x1}, {0x2}, {0x3, 0x3}, {0x5, 0x1}, {0x2, 0x1}, {0x3}, {0x5, 0x1}, {}, {0x1, 0xdc6c303d40586a1d}, {0x1, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x4}, {0x3}, {0x2}, {}, {0x4}, {0x1, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x2}, {}, {0x2, 0x1}, {}, {0x4, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x5}, {0x2}, {0x2, 0x1}, {0x0, 0x1}, {0x3}, {0x4}, {0x4, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x3, 0x1}, {0x4}, {0x1}, {0x2}, {0x4, 0x1}, {0x3}, {0x0, 0x1}, {0x3}, {0x2}, {0x1}, {0x5, 0x1}, {0x5, 0x67a52f685591514b}, {0x1, 0x1}, {0x4}, {0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x5}, {0x5}, {0x1}, {0x4, 0x1}, {}, {0x0, 0x1}, {0x7144fd07b56162f7}, {0x5, 0x1}, {0x2, 0x1}, {0x5}, {0x4, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x4}, {0x4, 0x1}, {0x5}, {0x4}, {}, {0x2, 0x1}, {0x3, 0x1}, {0x1}, {0x5}, {0x4}, {0x2}, {0x5, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xeb4}}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_WRITE={0x17, 0x40, 0x4004, @fd_index, 0xf, 0x0, 0x0, 0x2}) io_uring_enter(r5, 0x40f9, 0x217, 0xa5, 0x0, 0x0) mmap(&(0x7f0000ae9000/0x3000)=nil, 0x3000, 0x2000008, 0x4010, r3, 0x5100f000) 2m42.111836102s ago: executing program 1 (id=756): r0 = socket(0x25, 0x3, 0x89) fchmodat(0xffffffffffffff9c, 0x0, 0x20) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x4, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb9}, 0x94) prlimit64(0x0, 0x0, &(0x7f0000000300)={0x5, 0x407}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_procfs(r1, &(0x7f0000000040)='smaps\x00') execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x1000) r5 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) close(r5) read$FUSE(r4, &(0x7f0000000640)={0x2020}, 0x2020) execve(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000800)={[&(0x7f0000000940)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01']}) syz_open_dev$tty20(0xc, 0x4, 0x1) r6 = syz_open_procfs(0xffffffffffffffff, 0x0) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000340), r6) r9 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r9, 0x10f, 0x87, &(0x7f00000000c0)={0x41, 0x10000, 0x2, 0x3}, 0x10) sendmsg$TIPC_CMD_SET_NODE_ADDR(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r8, 0x201, 0x70bd2b, 0x25dfdbff, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ipvlan0\x00'}) 2m41.181438924s ago: executing program 1 (id=764): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000480)={0xaa, 0x600}) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000013000/0x4000)=nil, 0x3000, 0x3}) socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newtaction={0x84, 0x30, 0x4, 0x0, 0x0, {}, [{0x70, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x40, 0x1, 0x0, 0x0, {{0x8}, {0x18, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0x14, 0x6, [@IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x80}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0x5, &(0x7f0000000140)={0x0, 0x8f}, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0xb96edc19852066eb}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB='\t\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="020028bd7000fbdbdf25030000000400050014000700ff02000000000000000000000000000108000800ac1414bb"], 0x34}, 0x1, 0x0, 0x0, 0x404c000}, 0xd589ef6926a1bbcb) socket$igmp6(0xa, 0x3, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="58000000020601080000000000000000030000000900020073797a3100000000050001000700000005000500020000000c000780080006400000040111000300686173683a6e65742c6e6574"], 0x58}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) unlink(0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYRES32=r5, @ANYRES32=0x0, @ANYBLOB="81ffffff00000000180012800e0001007769726567756172640000000400028008000a005124deacb12e68d5b042fd94802e899d13e0374769b03ac3273b6ab1188023b587e473253682146a9f24b52e89b42d3c836c1702078fbba099e45a9ddb039922f65e595e5fb3172b8fc94fe9185633ff84974096e32e8d6ce93ad1488698052714e15b7763bfe3d117e145752db35e4553df3a7d153ee8c27ebc9342e6eecf4d1b92e4ac8c64700aec62c72fd06f652ebc960a30868729b4b249183381de3f1879286998f3493e664e810b0c", @ANYRES32, @ANYBLOB], 0x40}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x5, &(0x7f00000003c0)=[{0x9, 0x9f, 0x0, 0x200}, {0x7ff, 0xc, 0xc, 0x9}, {0x17, 0xfe, 0xf, 0x4}, {0x7, 0x18, 0x6, 0x80000005}, {0x7, 0xf}]}, 0x8) sendmsg$inet(r6, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f000801}, 0x0) r7 = getpid() r8 = syz_pidfd_open(r7, 0x0) process_madvise(r8, &(0x7f00000015c0)=[{0x0}, {&(0x7f0000001600)="7fe370522d6af6625215f1793293827ec1fbafd2669ec71d6ec4f18aaa71edae948611d70900e80e4116a3c114041430f19bd4f37e3c7238ed6e6d46979c2220bde96ffe55c88d2e697fd133e5733e1bbb159ba81a1e8e2fb2e51596", 0x5c}, {&(0x7f0000001300)="0454c96113b0da138a30557b0c026d7c7ba28c5cf82e468ed91537d279936ddcf06ef737e0943554457a28db61aea38a154bf19b456388daf4df61c9febcd9b8a2b14929c6f097f4ff11e686a8a37381b9321ae19dd77be474863e35633dec7003568e91eab8e870a93a73b6dea475547a826b25021aecd727c201c9cea0bfba0122b00573c286b821d43d0b4e38ec90b7d08565bf81862bdf5115e75886e742c51e058d0752982da309d53a7c0d320fdbd38bfaa998ff981d15928f783b2728ecc210898685dfc72398e665b7892024c0ab0dcfe9d3fc", 0xd7}, {&(0x7f0000001400)="3e519bc4eb7b0a55b33bdb22cc7ca76aba33506ebcf89e67b16583e68404bbca008b995a73322a4cc7a3c436e94da49121c4f225ccd342612b46beb2f569a7a0423c0cf79f2d94c015b7b47bc11d5fe599214dbe7f92c8a14b6d254a8daa074ece2708f10e912eb72cb22efc14a0d0cc7cea79311ead3200c7aca0e920d83c8d7b92db", 0x83}, {&(0x7f00000017c0)="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", 0x1000}, {&(0x7f00000014c0)="6b553f4de4ed875c9fadc16852f54981bcd646a5262fc3900592194638585e3d2e79f074f796720749ddc1a2661dcb2471a47d963fb4d817dfdb5f52dc8ab642030c2c771646051d08609527b36368b80794b8cb63fe817c3379951a047c5026c2e99eae6dc05c6845529fb603666d78c0e1e5f7bca8f1d8584b7409ccaf0da598af64d7bdd2ae21ac4fb4e07dee96a92a8dddecee7ccbede2d0a7d4f2da90dc3eb4ae8895091f05db58a786519f6fc924a465cc46ae6a9b8705de0705b8bab4f10cddc7756c53eadf4aa6e2379fd85e9c5e7b", 0xd3}], 0x6, 0x9, 0x0) 2m40.761938992s ago: executing program 1 (id=767): unshare(0x2c020400) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2c0000006800010003001000fdffff7f00000000000000000c0002000100000015000000080010"], 0x2c}, 0x1, 0x0, 0x0, 0x24008018}, 0x4000080) (async) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC=0x0], 0x0) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) (async) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) writev(r4, &(0x7f00000005c0)=[{&(0x7f0000000a40)="89", 0x1}], 0x1) (async) close_range(r3, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) syz_open_dev$sg(&(0x7f0000000080), 0xf9ba, 0x143882) (async) r5 = getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x0, 0x0) (async) sched_setaffinity(r5, 0x8, &(0x7f00000000c0)=0x400) (async) fchmod(r1, 0x6) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1, {0x4}}, './file0\x00'}) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), r6) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYBLOB="fab0817dbcb5f31a08002c0000000000140003006272696467655f736c6176655f300000"], 0x3c}, 0x1, 0x0, 0x0, 0x20044010}, 0x4040) 2m25.807643907s ago: executing program 32 (id=767): unshare(0x2c020400) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2c0000006800010003001000fdffff7f00000000000000000c0002000100000015000000080010"], 0x2c}, 0x1, 0x0, 0x0, 0x24008018}, 0x4000080) (async) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC=0x0], 0x0) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) (async) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) writev(r4, &(0x7f00000005c0)=[{&(0x7f0000000a40)="89", 0x1}], 0x1) (async) close_range(r3, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) syz_open_dev$sg(&(0x7f0000000080), 0xf9ba, 0x143882) (async) r5 = getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x0, 0x0) (async) sched_setaffinity(r5, 0x8, &(0x7f00000000c0)=0x400) (async) fchmod(r1, 0x6) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1, {0x4}}, './file0\x00'}) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), r6) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYBLOB="fab0817dbcb5f31a08002c0000000000140003006272696467655f736c6176655f300000"], 0x3c}, 0x1, 0x0, 0x0, 0x20044010}, 0x4040) 4.330526755s ago: executing program 3 (id=1937): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYRESOCT=r0, @ANYBLOB, @ANYRES32=r0, @ANYRESDEC=0x0, @ANYRESHEX=r0, @ANYRES64=r0, @ANYRESDEC=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='mm_migrate_pages\x00', r1, 0x0, 0x5}, 0x18) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) syz_io_uring_setup(0x110, &(0x7f00000003c0)={0x0, 0xfad6, 0x800, 0x1, 0x3}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x482000) readv(r3, &(0x7f0000001900)=[{&(0x7f0000000400)=""/152, 0x1b}], 0x1) fsmount(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x10000000001, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r4 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r4, &(0x7f0000002700)=""/102392, 0x18ff8) r5 = socket$inet(0x2, 0x2, 0x1) setsockopt$inet_mreqn(r5, 0x0, 0x20, 0x0, 0x300) mmap(&(0x7f0000fa2000/0x3000)=nil, 0x3000, 0x3, 0x13, 0xffffffffffffffff, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000380)={0x0, 0x3ff, 0x5}) r7 = eventfd(0x80000) ioctl$VHOST_SET_VRING_BASE(r6, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r6, 0x4004af07, &(0x7f0000000240)=r7) ioctl$VHOST_SET_VRING_KICK(r6, 0x4008af20, &(0x7f00000002c0)={0x1, r7}) ioctl$VHOST_SET_VRING_ADDR(r6, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r6, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000800)=""/90}) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_SET_MEM_TABLE(r6, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r6, 0x4004af61, &(0x7f0000000340)=0x1) 4.210697922s ago: executing program 2 (id=1939): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) request_key(&(0x7f0000000140)='big_key\x00', 0x0, 0x0, 0xfffffffffffffff9) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000340)={r1}, 0xffffffb0) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) ioctl$EXT4_IOC_MIGRATE(r3, 0xff06) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, 0x0) syz_emit_vhci(&(0x7f0000000300)=ANY=[@ANYBLOB="043eda0d", @ANYRESOCT=r0], 0xf8) r4 = openat$comedi(0xffffff9c, &(0x7f0000000200)='/dev/comedi1\x00', 0x2000, 0x0) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, &(0x7f0000000140)={'dt2801\x00', [0x3c4, 0xd, 0x2, 0xa, 0x14000000, 0x0, 0xfffffffc, 0x2, 0xffd, 0x8000, 0x4, 0x723, 0x6, 0x7, 0x13, 0x4000100, 0xfeffffa7, 0xd, 0x59, 0x1, 0x3ff, 0x9, 0x1f7, 0xe2e3, 0xaa14, 0x3, 0x6, 0xa, 0x7, 0x2, 0x6]}) socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_GET(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000680)=ANY=[@ANYBLOB="4400000001090300000000000000000005000008300002002c0001800d000300ff0200000000000000000000000000011400040000000000000000000000ffff7f000001"], 0x44}}, 0x44091) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r7 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0]) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040)) chdir(&(0x7f0000000080)='./file0\x00') setpgid(r7, r7) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)=0x0) prlimit64(r8, 0x6, &(0x7f0000000040)={0x5, 0x1}, &(0x7f0000000100)) socket$inet_icmp_raw(0x2, 0x3, 0x1) 4.010664947s ago: executing program 3 (id=1940): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000440)={@flat=@binder={0x73622a85, 0x1, 0x3}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}, @ptr={0x70742a85, 0x11, 0x0, 0x0, 0x0, 0x40}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 4.009604025s ago: executing program 3 (id=1941): socket$packet(0x11, 0x3, 0x300) r0 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000008000000000000005000100070000000900020073797a300000000014000780"], 0x5c}}, 0x0) socket$netlink(0x10, 0x3, 0x15) close(0xffffffffffffffff) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)={0x18, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@nested={0x4, 0x1e}]}, 0x18}, 0x1, 0x3000000, 0x0, 0x42804}, 0x84) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0xffffffffffffffb9}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf6bba6e538fb23ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) 2.978812644s ago: executing program 3 (id=1946): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0/../file0/../file0\x00', &(0x7f0000000080)='devpts\x00', 0x898a, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000010300)={0x2020, 0x0, 0x0, 0x0}, 0x2074) syz_fuse_handle_req(r0, &(0x7f0000006280)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x90, 0x0, 0x2, {0x3, 0x0, 0x0, 0x5, 0x0, 0x1000, {0x1, 0x0, 0x20, 0xfffffffffffffffd, 0xf5, 0x0, 0x6, 0x0, 0x7, 0xa000, 0x2, r1, 0x0, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$pvfs2(&(0x7f00000002c0), &(0x7f0000000300)='./file0/../file0/../file0\x00', &(0x7f0000000340), 0x80, &(0x7f0000000580)=ANY=[@ANYBLOB="646576707473002c3a212dcb40002c2c726f6f746673002c726f6f746673002c6d61736b3d5e4d41595f415050454e442c736d61636b66736465663d767863616e31002c666f776e65723c", @ANYRESDEC=r1, @ANYBLOB="2c73ffffff7f000000000009ec3d25826c6b4b813b3449ea7265f1233b2cd2ba910d6695b93b240db207d036889245e0b8c981f918ef44250f40e255da18b86f9c2a96be951d92cdfe77ec7b39496a18ed3ece487fc2d834ad66242d171fb3b604e7f1d852d485d45bad1ed0ba09171ff3d300366e2e8e8d845296692225494057406bee9509b0ad40f520e1a0dd48ebb2f2f811009eb6d65b097af4e3a4fcd74eeba6b2"]) r2 = socket$key(0xf, 0x3, 0x2) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b800000019000100000000000000000020010000000000000000000000000000ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000002000000000000000000000000000a0000000000000000000000804000000000000000000800"/108], 0xb8}}, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000040)={'vxcan1\x00'}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000740)=ANY=[], 0x118}}, 0x44) sendmsg$key(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="021600000a0000000000000000000000080012000007a18208"], 0x50}}, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x80) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) unlink(&(0x7f0000000040)='./file0\x00') mknod$loop(&(0x7f0000000200)='./file0\x00', 0x6001, 0x0) mount(&(0x7f0000000000)=@sg0, &(0x7f0000000040)='./file0/../file0/../file0\x00', &(0x7f00000000c0)='rootfs\x00', 0x214000, &(0x7f0000000100)=':!-\xcb@\x00') umount2(&(0x7f00000001c0)='./file0/../file0/../file0\x00', 0x5) 2.97757086s ago: executing program 0 (id=1948): r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x50009405, &(0x7f0000000180)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newtaction={0x18, 0x30, 0x1, 0x70bd2b, 0x0, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="540000000206010200000000000000000500000005000100060000000d000300686173683a6e6574001f00000900020073797a31000000000c00078008000640000000400500050002000000050004"], 0x54}}, 0x0) 2.880577369s ago: executing program 4 (id=1950): syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4d8, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x8, [{{0x9, 0x4, 0x0, 0xfe, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0xffff, 0xfd, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x3, 0x0, 0xfd}}}}}]}}]}}, 0x0) r1 = socket(0x10, 0x3, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000340)=ANY=[@ANYBLOB="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", @ANYRES16=r3, @ANYBLOB="010000000000fedbdf250300000004000180"], 0x18}}, 0x0) write(r1, &(0x7f0000000040)="effd00001000ff00fd4344c007110000f3050a00dbfd010000000001ffdf00", 0xfe00) syz_usb_control_io$hid(r0, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000e00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000140)='fib_table_lookup\x00', r4, 0x0, 0x417}, 0x18) r5 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r5, &(0x7f0000000680)={&(0x7f0000000000)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, &(0x7f0000001780)=[{&(0x7f0000000240)="f9", 0x1}], 0x1}, 0x4000080) syz_usb_control_io(r0, &(0x7f0000000080)={0x18, &(0x7f00000012c0)=ANY=[@ANYBLOB="00600010"], 0x0, 0x0, 0x0, 0x0}, 0x0) r6 = syz_open_dev$I2C(&(0x7f0000000100), 0x2, 0x1) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x11, &(0x7f0000001080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, [@snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r7}, {}, {0x85, 0x0, 0x0, 0xa7}}, @call={0x85, 0x0, 0x0, 0x50}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r8}, 0xc) ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f0000000140)) ioctl$I2C_SMBUS(r6, 0x720, &(0x7f0000000800)={0x0, 0x80, 0x0, 0x0}) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) r9 = userfaultfd(0x80001) ioctl$UFFDIO_API(r9, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r9, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_COPY(r9, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) r10 = open(&(0x7f00000005c0)='./bus\x00', 0x64042, 0x0) pwritev2(r10, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x300, 0x1200, 0x0, 0x3) 2.119528772s ago: executing program 3 (id=1951): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)="78e7ec2c7cdad9b4b47380c988ca", 0xe}], 0x1) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi4\x00', 0x20040, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x3b, &(0x7f0000000100)={&(0x7f0000000480)=@can_newroute={0x1c, 0x18, 0x1, 0x0, 0x0, {}, [@CGW_SRC_IF={0x8}]}, 0x1c}}, 0x2cb932a2e4b94d43) 2.019390552s ago: executing program 0 (id=1952): r0 = syz_usb_connect$cdc_ecm(0x0, 0x60, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x4e, 0x1, 0x1, 0x3, 0x28, 0x5, [{{0x9, 0x4, 0x0, 0x6, 0x2, 0x2, 0x6, 0x0, 0x4, {{0xa, 0x24, 0x6, 0x0, 0x0, "e69b6ee338"}, {0x5, 0x24, 0x0, 0xe8dc}, {0xd, 0x24, 0xf, 0x1, 0x7fffffff, 0x0, 0xdd47, 0x6}, [@call_mgmt={0x5, 0x24, 0x1, 0x2, 0x8}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x1, 0xf, 0x4}}], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x4, 0x2a, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x4, 0xf8, 0x1}}}}}]}}]}}, &(0x7f0000000440)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x300, 0x4, 0x9, 0x5d, 0x20, 0xd}, 0x25, &(0x7f00000000c0)={0x5, 0xf, 0x25, 0x3, [@wireless={0xb, 0x10, 0x1, 0xc, 0xad, 0x8, 0xee, 0x7, 0x7}, @wireless={0xb, 0x10, 0x1, 0x8, 0x8a, 0x4, 0x4, 0x29a}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x3, 0x9, 0xffff}]}, 0x7, [{0xa9, &(0x7f0000000100)=@string={0xa9, 0x3, "d0225b4e3b435bdd46f334655ed4c4666cfb298f4026feb7ae842239a3263ce186d2c5aa26690b4f668424d39326db5277143f93368667f1078b56e593082558d47e58206893813e7ab42ad2ee598ceb1b2404953d1ce1e3f772697508a26e0209f7b04c3feb54b54da9e0fe3e5de311ae17ea153be066a985efe9cc96886a905001bef076e3fea14d8158ee8c3487fbf2ed6a604c5a6ba941260d8365c463b5b6a93c7cec324a"}}, {0x50, &(0x7f00000001c0)=@string={0x50, 0x3, "c7293f0db6e7c2a1402ae7045f8b503d2b0affbee2f83e0a46a6cc127976ae1ae36366716ce017c2bd52f90b8d51c9351916fb4111fe6c53451e7ddd04ca1cddd051271d09ad3aa8e56004dec52e"}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x42a}}, {0xd6, &(0x7f0000000280)=@string={0xd6, 0x3, "089fa8a3998cab7450f951c76a5644715365040ff5224032f3709e249d185f41ed0d3ce68e3dad5cdfbb23e850947385bceb09777fec0d0a050b6e020a13805bfcdb31a4a3f7556221d6ca8e1b957ad39b24c91fa111e49ca33495a3470ef5d5d98157bd1728d8cf55cee5000a856dcff8892595f9e973e7ac678a637b890c5ec0f4dd9b405661cb68e38527cc5a6ee834f9f8424383886df80f2ba73c13fb63eff9c91f8857b5d0290868c27202b374d550d22fd2dc25cfe83748e8b66964bf0c0c70587ae1d3d7017e2719a2cbde6800d54d9b"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x304a}}, {0x24, &(0x7f00000003c0)=@string={0x24, 0x3, "fd16ff4f524d7b3566820f7d4480111ab0ad8eff2624e11505874f920fb4574d22ff"}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x411}}]}) syz_usb_control_io(r0, &(0x7f0000000600)={0x18, &(0x7f00000004c0)={0x40, 0x21, 0x15, {0x15, 0x24, "5dca78afe422a5701fd8df740d3f1afda4c8f0"}}, &(0x7f0000000500)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1009}}, &(0x7f0000000540)={0x0, 0xf, 0x24, {0x5, 0xf, 0x24, 0x2, [@ext_cap={0x7, 0x10, 0x2, 0x12, 0x9, 0x5, 0x8}, @ssp_cap={0x18, 0x10, 0xa, 0x8, 0x3, 0xff, 0xf00, 0x8, [0x3f, 0xc030, 0xc0c0]}]}}, &(0x7f0000000580)={0x20, 0x29, 0xf, {0xf, 0x29, 0x5, 0x80, 0xff, 0x5, "935738ff", "ab0380c9"}}, &(0x7f00000005c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x7, 0x0, 0x10, 0x63, 0x9, 0x8001, 0x8}}}, &(0x7f0000000a80)={0x44, &(0x7f0000000640)={0x0, 0x17, 0x63, "ad2332d24ecc83dab5a42a080f7f0b77f6c179b506fb8af82198cd4ad00841d944f0ba45e6e8c62240ec8baf1d5ff1835721bd87ec4e0f2e8b59569ea3673954dfed5001b621bca593a46958c979193bbc6c60e9dee06084397b82cdbaf349d6999353"}, &(0x7f00000006c0)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000700)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000740)={0x20, 0x0, 0x4, {0x3, 0x2}}, &(0x7f0000000780)={0x20, 0x0, 0x4, {0x110, 0x8}}, &(0x7f00000007c0)={0x40, 0x7, 0x2}, &(0x7f0000000800)={0x40, 0x9, 0x1, 0x10}, &(0x7f0000000840)={0x40, 0xb, 0x2, "b555"}, &(0x7f0000000880)={0x40, 0xf, 0x2}, &(0x7f00000008c0)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000000900)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2f}}, &(0x7f0000000940)={0x40, 0x19, 0x2, "038d"}, &(0x7f0000000980)={0x40, 0x1a, 0x2, 0x1}, &(0x7f00000009c0)={0x40, 0x1c, 0x1}, &(0x7f0000000a00)={0x40, 0x1e, 0x1, 0x8}, &(0x7f0000000a40)={0x40, 0x21, 0x1, 0x38}}) r1 = syz_usb_connect(0x5, 0x58f, &(0x7f0000000b00)={{0x12, 0x1, 0x300, 0xdd, 0xda, 0x78, 0x0, 0x54c, 0x9a, 0x75a5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x57d, 0x2, 0x8, 0x5, 0x30, 0x4, [{{0x9, 0x4, 0x36, 0x0, 0xb, 0x95, 0xb5, 0x17, 0x8, [@generic={0x1a, 0x6, "347c687ad1daca506ba96f9ff178212da623a9a5f5d29399"}], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x6, 0x36, 0x4, [@generic={0x3, 0x2, "15"}, @generic={0x80, 0x8, "fa83289279739f76737d5d77444dd0d2553ed7c89811ec7d0c60a319e2780442001c1ca3c068839eb89af05e0e2b5fc068a978061b7fa80ff5d16af00d00286af8eb70f16a7b65c4f57557df0d3d0945957c4610e3f1b423e3b7f182706527e209da95e0f3f9d0964a54f7b917917e5bddf12e9464d0a9912b28a85ff480"}]}}, {{0x9, 0x5, 0xe, 0x2, 0x8, 0x5, 0xec, 0x3, [@generic={0x39, 0x23, "75c4dfe59f24cc39b90778897512b2e8b67dceabe79350d8ad4bdd27dcc0b67daf77cc3be615f1358c2f756c180d4d260ba5f87a3ec06a"}]}}, {{0x9, 0x5, 0x1, 0x3, 0x400, 0x1, 0x5, 0x3, [@generic={0x65, 0x7, "8342623401d8cc71c1aec152375fd492c9d08fa452ea3e6d79623ac2b75f080c95a43f532a77fc5eb4e6211b0865b741bd49b15822ee6d1e5ae22429315d03492887459b7cd40962e4fbdf2d48705437ab004afe048b3ebfafcbe85bd2daabf0579371"}, @generic={0x93, 0xf, "d2a2cfe14b1537de646ad791047c50060dbc30b23ff6318908fb0497a0fd59c8d6332b5e3c82160c8b84f927026a5ec88349a651358201f193eeb396387851ef78d8d2dc33552213aafabf941639ea38cbb85c53589e12e2605effc37972e38e4efcd2c023b4fd6acb520f7612affb69b822904a028d9561e3c5a31d032ccde63b2d22ee98003277e1c4b94c2834935897"}]}}, {{0x9, 0x5, 0x2, 0x10, 0x200, 0x81, 0x9, 0x2, [@generic={0xbe, 0x1, "68c107c6809062161e570d5650c576908a06affe9b3b86c3093406982f4c222042d2d956d9389d388c6d2a8e24d0c6a0e5925cee3890bc993e11a535906a1c86770f44822c1eb8334f425cd92f51f03d2866c6874f339c6301f87d3345e9c3c3197adf81877a516dffeebea7ad8ec06b56f2f2b1730ab31fa668bda89d1b6c3caa810576f5eb927dd022bdf9a0865f728b47870f35c379292d74d32fc9544d987c041d848f9f88100a80821faf156aea1d6dc0518c9327491b74b977"}]}}, {{0x9, 0x5, 0x6, 0x10, 0x20, 0x7, 0xff, 0x3, [@generic={0x12, 0xd, "b0ac6f99f9c2ec1479f8bcccb852a0a1"}]}}, {{0x9, 0x5, 0xe, 0x5b7f40604d5b283b, 0x3ff, 0x44, 0xfd, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x7}]}}, {{0x9, 0x5, 0xd, 0x0, 0x200, 0x2, 0x0, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x8, 0xa605}]}}, {{0x9, 0x5, 0x5, 0x3, 0x400, 0x9, 0x62, 0x0, [@generic={0xd0, 0x3, "a98691b5b49a5e662cf497a490def3e3d3bff21487d8f59aff16a211156a8477e16ef415941bd817173db2d1ef0c9c732568c4e92c918011f2a7e5d6e1b3cbb115da7cd6a18f1c8f980921e96ea2e17211488677bc5e7147f65bf1d557e986bcc6aa6b04b033ac25df31540f2557648201f505f77ae6438174f3716e24a381c862ddd7addde7b72a5e99f7fc114bec0f5b9b7d3317d369ed49c7b7bb59ec5f2bb2e9b97463ec87355db7783cfabb1eb4bae493cdfdbb1c52f149c4aa31d8b8f3782e4d4104838deaf7aed1d08825"}, @generic={0x2e, 0xe, "b6717a67498158cc719b2d7a2c7a0971f2b68ab5302f0da7e9df4ec876068cdd61a1bcb744ec70969dda0ce1"}]}}, {{0x9, 0x5, 0xe, 0x10, 0x20, 0x7f, 0x0, 0x9, [@generic={0x3f, 0x3, "5c8cd4d884ff5662f56f66021bc7d5bfea41925a638e66d6dcce9c4c38e9cf9a4500421d5e4cb68ccf68691f603f4c92aaa749e12e28fa217e4af1e58b"}]}}, {{0x9, 0x5, 0x7, 0x10, 0x20, 0x3, 0x10, 0x0, [@generic={0x6d, 0x3, "c82cd64b117dfb6ba4fc78a4f6d318dd92ca45e33c1f63546e51ec0c42eb4c2002080fd82182b2375000002d1984308f9a5db4baeee6072df0e112f19e4ab32e8f6e43bbaff985fdc5290551a8bd8f27369d728732f6885a29be5007472936ad0c9d969a55b5e36de636aa"}, @generic={0x44, 0x1, "e8714fd9d826b3f95090d664407999b76d419c51a9e1cbbe09a91465cc057159ddf9eb4d478855fb997de760cf2a4b82e9e8debc0f326ff7eefa1de233e24ef69c24"}]}}, {{0x9, 0x5, 0xe, 0x10, 0x3ff, 0xfa, 0x3, 0x54, [@generic={0x19, 0xc, "34e3373a863cc402e8ec360523e6808bfdbd373ab0a767"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x2, 0x81}]}}]}}, {{0x9, 0x4, 0xef, 0x4, 0x2, 0xff, 0x5d, 0x81, 0xd, [@cdc_ecm={{0x5}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0x6, 0x800, 0x0, 0x3}, [@network_terminal={0x7, 0x24, 0xa, 0x7f, 0x5a, 0x4, 0xc}]}], [{{0x9, 0x5, 0x6, 0x0, 0x40, 0x7, 0x0, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x3, 0x2}]}}, {{0x9, 0x5, 0xe, 0x1, 0x20, 0x3, 0x0, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x9, 0x7}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0xc, 0x2}]}}]}}]}}]}}, &(0x7f0000001280)={0xa, &(0x7f00000010c0)={0xa, 0x6, 0x200, 0x26, 0xff, 0x40, 0x40, 0x6}, 0x11e, &(0x7f0000001100)={0x5, 0xf, 0x11e, 0x6, [@ss_container_id={0x14, 0x10, 0x4, 0xc, "c6d0432bad14559b632ad9a4e97018d5"}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x9, 0x0, 0x40}, @generic={0xcd, 0x10, 0x3, "e9e8fffd0cb4a6c14dacd06d6d433a339c329719f450b1f323101ddf13eba2b9fbc65fb12c580524f029ae429e0730378386a3e29e8ec97b682d947f71618260a55a29362c68ba7caeb0234a020b23842b1b10710206016ad0f449ace558faabdc13a0e94a836c3d75076a438dc86898ab3b28c1e0418066fe3c1d6b2a69a1d429db3bc032481338bc4e01168c19ac4bcad860cdb2fad0cf63ab9928c3e26a5dc99caa0e0eec03052ba08ce0d2911e53114d2358d3f62deaeea916992a4262b7e75f08691ed23f38c0e8"}, @ext_cap={0x7, 0x10, 0x2, 0xc, 0x2, 0xf, 0xfffc}, @ssp_cap={0x20, 0x10, 0xa, 0x54, 0x5, 0x4, 0xf00, 0xc, [0xc0, 0xff003f, 0x3f00, 0x0, 0x3f00]}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x1, 0x4, 0x6}]}, 0x1, [{0x4, &(0x7f0000001240)=@lang_id={0x4, 0x3, 0x413}}]}) syz_usb_control_io$sierra_net(r1, &(0x7f0000001340)={0xc, &(0x7f00000012c0)={0x0, 0x30, 0x22, {0x22, 0xa, "41ca43fad5559635ebe4e0b026cbd58fe0eec83bbd60cfaa72ddafcc0dce50fb"}}, &(0x7f0000001300)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xc0c}}}, &(0x7f00000018c0)={0x10, &(0x7f0000001380)={0x0, 0x8, 0xa2, "23e8412640a4d74fc465c0190f3cb9831957b498ccc9c5ebf70dc294d561c843c400264d5a80f77ed0e3a11bdbcd17c12333dedb73cb64b7b016f013c7cecb6a759bc7212dd03d33904ce4c4b7e7debccd0b95bb25df23025ba2e2bd08c69ab0fee9550dda01299eb582407d58af29f34c65489a0bee7d313585ff39d837efddaaef9370c06f21800c0856302a7080fb5749c6fe1a03d561da9703d8b0bc2988578e"}, &(0x7f0000001440)={0xa1, 0x1, 0x400, "bb42798cd013140d3a5d26051a3bc7d6e52c9f752ef109af1359e294b79d1bfd051a2e24dcc889d6052a647ef44791c9772c036367649c78defcdb14c9a548290ef5fd9039b77749dbb528ece9b8d5ce63065d0eacd58133a39e935ffb49e8331662ea054dc79359ea10445a15aae0bc5288730f68cb3c9468d5948a5abb99369ab935a4f31a8e803ddbe4ad4aaab998f6fee913706a83737952e9e514205bdac9a0d51c405ab59bf7a7a636ce0f35658c8b35a7d8fd7102b1b61d9bbe8f8bf443cf9c8465c4276590365a0cf84210df2dc92b9655d19bacc17717a5383fc8f6dc2647cfaf429c8f1e4ee6140e65b0f9300981d2810fcd21c58f7baf8579213364ca246d7440559e1e54cb3a8aa425a1f94256180b08a7534269003c08e5ceec1c544f429ceedbbdead0675aa5bcd133c17d17928143bcefbef1fa50b2061e1e0c50d6910910587e12c228408d8d1d5ef5877075411d18308671b88edbc43b79c9498f2d14c434a0e46ad6ff2aba633ae21412446500e3d6bf6bf8d8451ed460ef48829471ad0d06d762abe92190a67e164be0017983fa7d497898447df41c9647c30cb7646c8a9c63f6b0a504cbcd90304f7b3b2d399f6bb61a8fe75d0eb40db550f1f5c1e8392b85cb0ed2338b5951e03add5e183b25f0a85436805953c2085dfdadccb1309fb26ee4aaf580ac0a2cad8d3d38e3771068fa94eaad353b36ed2dc156659638f7abde929b116bab594436c06c072a7c06ef4e1c3e214764a54f3faec5969563b8d1478fce48d713d44c1e52d94f7c7425cb9b95c0facb662cf2b4cd866dc2abb43ceb163bc14fcd0af380e6e8da69b9cc81066a5043e4cc21d8a16e134188552a538dac77d2caa29b20a668bebd1e1d7348fac7fe8e9d45b769541038ee0ceed7e90024eaed1fd7e84c8df2ace9f80e26eb03b277758e69b9b57314db1ab8f1ccd632716582fd53c3809ca4d2b88de59f2e3af655abefecffe4f21a55c803c192897cfb74a5913ecb0796295f59c1fd7ca1001955688dcdc2f40a15dfd079a7bb63cb8d02802b12ebb90747101d3735a3180557cabf15db86d3cc83aa7d929913070fa0cbb8bd6ba1c27962682e63083aa861fb2d5aa1f79f9c14d345d2cb52e29725a92936635843d2196a451a68311079485e3407879f0ab173662189911904441981a9ce607b605cfc359f077d8fcd79cc66c6c13a70016fbea5545d1abe58ead6d1a4dae70a6d1a1bf7871f492fa96dbc8de97fb8998fb774f6ab5aacfada5d186121a44a6e7979e66ca2ba31c9dd96dbfa749df33ef5f49c6383b5f9518d38ad2bf30402acc8af3ce4891c37d1215247ea00404739cd8cc92cd1e67cc286849811f680665227e1f8045fbac9e79751f474d3bac3659fba5018bdd107ce045404ab0377f9344bd93feb165953742405dc64d2807547a932"}, &(0x7f0000001880)={0x21, 0x0, 0x2, "89c1"}}) syz_usb_control_io$hid(r1, &(0x7f0000001ac0)={0x14, &(0x7f0000001900)={0x20, 0x11, 0xbc, {0xbc, 0x8, "727957136b5829179d33c0736fce61e5fb487fd7f1325e0df1428aec5c2982892661a1cfc637f64a07e37e5ef354b4b392cbb83eb09e0400a282fed9042fdf0a96688d1e529b363f743aab0c6777316c93b5382f2aac7eda21aea70714f2ec3f8d59adc9e08d1d820100f0fd8bd6c0938ce5ad094e4627cfd2c575f3d85cec0a76602d466cd96566e605c8ac17bcc46afe3276da853eed6fc5d293a3fe6ed8d12385691e502511726224affebfbdcae3e25a73f588e9f003ef0a"}}, &(0x7f0000001a00)={0x0, 0x3, 0x2e, @string={0x2e, 0x3, "c51dbc7cf231f36ba9a1d19775de61f291abb12dacfc01b6e02eba08067c2091e1b2e9bfed1a05ce4a204b57"}}, &(0x7f0000001a40)={0x0, 0x22, 0x2, {[@global=@item_012={0x1, 0x1, 0xa, "8c"}]}}, &(0x7f0000001a80)={0x0, 0x21, 0x9, {0x9, 0x21, 0x2, 0x1, 0x1, {0x22, 0xe10}}}}, &(0x7f0000001c80)={0x18, &(0x7f0000001b00)={0x40, 0x9, 0x75, "c51927933f34dac9d85b2ea7ef5395b6c1ac05c9550d18efdc549574df68e8e0e36e2ced20e9d628b26a903a65983be82d319d14a9919fa4bdec4aac59e2ef8681fe3f7a1c9ca73ac218280c2fc90c75fc78d1bcb8d450304b5644836072170efaf64e937a494e31925e609d3d58132bd7d841d417"}, &(0x7f0000001b80)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000001bc0)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000001c00)={0x20, 0x1, 0x26, "335fd22f72d8f6356c6df01b2ee258acc8b0a96548d956e23f3da060a56f6e411bd0e13ce83e"}, &(0x7f0000001c40)={0x20, 0x3, 0x1}}) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000001e40)={0xc, &(0x7f0000001cc0)={0x0, 0xf, 0xfe, {0xfe, 0x9, "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"}}, &(0x7f0000001e00)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000002000)={0x10, &(0x7f0000001e80)={0xb10230fbbbbfb48a, 0x11, 0xf8, "c1fa510b3a4fe5c44eafe65363fd7ad3cf1d22c0da000a66a2d25146c3148076c888a99fc41b7152004166106414ba195c9a38375961f91fbc87aae5fb5e5ef2579cdc7c7cc7118f568ae3b43034f9c629f424faa234eec0016f22847a396e49447a5a366c82447359bb438a64857eab4774b0962009f19300c0b1c8165cc201f2bd582d1f24a263773f3517d8d383de1261d62cdba71559e4d1ca4f03c421bd7debd8d2bf215f940dcf484a5b0e0d101dbd31331e1be901ef0d778056c5916536e3ceec23557294a012c65dacb3e87831fd5d2de7cc86a6fcbfcc51bab4b01217407f78332fc0e809ae789b43ae04157ae41086ea8b5afe"}, &(0x7f0000001f80)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000001fc0)={0x0, 0x8, 0x1}}) syz_usb_control_io$uac1(r1, &(0x7f0000002140)={0xc, &(0x7f0000002040)={0x0, 0x22, 0x96, {0x96, 0x9, "45e452c15318a9b627caea7083665240f8b59183637525e637c9c56fa658599176a5d9aa337f5bfcf28417847c44665ba688e97b9e46f3de7cd163b52959fc0bacbb6a547ec5297924fb91610a67e94024adcce6a0dce580811ac6a8ffc5bbf687c4e550f6f728df8fc39144a827e477c8ff9334d7c0f335cd6787c8cf193ab580be3c63a2fbc122df4902131f88f39bb66244d0"}}, &(0x7f0000002100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x180c}}}, &(0x7f0000002380)={0x24, &(0x7f0000002180)={0x40, 0xd, 0x24, "668aed2f274cbbbdf82c5a7472dea68c251b4671c9f086996225718a6118012f27c998d0"}, &(0x7f00000021c0)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000002200)={0x0, 0x8, 0x1, 0x2a}, &(0x7f0000002240)={0x20, 0x81, 0x1, '_'}, &(0x7f0000002280)={0x20, 0x82, 0x1, "1e"}, &(0x7f00000022c0)={0x20, 0x83, 0x2, "1ac0"}, &(0x7f0000002300)={0x20, 0x84, 0x1, "c7"}, &(0x7f0000002340)={0x20, 0x85, 0x3, "36c6bd"}}) r2 = syz_open_dev$evdev(&(0x7f00000023c0), 0x4, 0x4c0200) ioctl$EVIOCGMASK(r2, 0x80104592, &(0x7f0000002440)={0x12, 0x28, &(0x7f0000002400)="41be8659dbf17d8ae463e8d9a70bd13c136c026379eefa4e503023af5b356cc57882c0a106eb5659"}) syz_usb_control_io$printer(r1, &(0x7f00000025c0)={0xc, &(0x7f0000002480)={0x0, 0xc, 0xf8, {0xf8, 0x24, "e16717a56d2a20dfe21a52c5fd5d9728f90a1053c218c71df33dc8e36b21adfbf292ca178f114ae34ed95e70c59834ee715d6824b547daeb3702df8963bd3bdc7e3f7b474727c87885e665ed0548ead10d7063d16a17210d3918dfbc7eaaf471d035e098497d4865956c53fed9983c4a5ee4f71491fef573787ed1bdce0cf3d601fe7feddabef469b41f6c6d0ae328862dcd84040f4cf3005f82c5b60a5dc7b8fb5723e1cacdb82622cc0513841fb2fa46919da1cb3e64caebea7e42e4c9348984a7728520d5ecd5541a114b6cfff41f9f819f5f48f95f92972b3b12dd0cd3ba902e1d45b82d36dbc4b8a11b7e82523aab261d321fde"}}, &(0x7f0000002580)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1023}}}, &(0x7f0000002880)={0x1c, &(0x7f0000002600)={0x20, 0xf, 0x83, "853b74e33ca236425c79650d4647304c9938a4238af40b299a3886a8936074ff0da8d56a1c8002896d3687e248b1d83cf69eeb20ad118a227c5a24fcc862ee71784ba15c74ca2d3ac7049943612ea966b660fd57847e3d284990281566b1051135afa7087e97d5a0ec59a519f3da01099300716c743051c40804cc4c7fe6c2955b486a"}, &(0x7f00000026c0)={0x0, 0xa, 0x1, 0xc}, &(0x7f0000002700)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000002740)={0x20, 0x0, 0x98, {0x96, "bee365d13997a2e448fc103e8216a8666839f6aa141347c1c56a640fcc42c4e6c0e6b707124bf49658a7ca68acadb455ac29971eb59387d4ba1f2a3cf8565f292159404399783b151d12bbfa914c372afa70cc15fb601bf5ff6902fd18ca5f57ef6ebc5f3b21e060ce7c5e36e07e9cb7450add61a178b9b975d78342c1cc98a77746b6913090aca989bda27c9c1111bb64c590e06183"}}, &(0x7f0000002800)={0x20, 0x1, 0x1, 0x6}, &(0x7f0000002840)={0x20, 0x0, 0x1, 0x7}}) ioctl$BTRFS_IOC_GET_DEV_STATS(r2, 0xc4089434, &(0x7f00000028c0)={0x0, 0x0, 0x1, [0x4, 0x2, 0x1, 0xef3, 0xcf68], [0x40, 0x22d, 0xd5, 0x0, 0x3, 0x7, 0x14, 0xffffffff, 0x7, 0x0, 0x8001, 0x40, 0x100000000, 0x800, 0x6, 0x0, 0x9, 0xfffffffffffffffd, 0xe6a, 0x7fffffff, 0x10000, 0x3, 0x4, 0x200, 0x7, 0xfffffffffffffffd, 0x0, 0x3, 0x0, 0x81, 0x1, 0x7, 0x89cc, 0x4, 0x3, 0x9, 0xfffffffffffffffc, 0x2, 0x4b, 0x9e03, 0x81, 0x6, 0x0, 0x2, 0x1, 0x3, 0xffffffffffffffff, 0x372, 0x4, 0xffffffff, 0x7, 0x4, 0x800, 0xd2, 0xffffffff, 0x9, 0x400, 0xe65, 0x5514d87d, 0x8, 0x1, 0x4, 0x7, 0x80000000, 0x4, 0x6e0, 0xc1, 0x97e0, 0x4, 0x7, 0x10001, 0x100000001, 0x7, 0x6, 0xe0, 0x2, 0xc77d, 0x5b82, 0x4, 0x4, 0x8, 0x40, 0x4, 0x9000, 0xfffffffffffffd9a, 0x5, 0xdb3, 0x123899d3, 0x9, 0x800, 0xffffffffffffff08, 0x1, 0x1, 0x2, 0xffffffff, 0x1000, 0x200, 0x1a32, 0x9, 0x10, 0x3, 0x7, 0x0, 0x4, 0xffffffffffffffff, 0x5, 0x8000, 0x400, 0x1, 0x2, 0xef, 0x739b, 0x44, 0x7fff, 0x1, 0x3, 0x7fffffff, 0x3ff, 0x7, 0x10, 0xa000000]}) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000002d40), 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000002dc0)={'syztnl2\x00', &(0x7f0000002d80)={'syztnl1\x00', 0x0, 0x80, 0x8000, 0x1, 0x8, {{0x6, 0x4, 0x0, 0x25, 0x18, 0x67, 0x0, 0x2, 0x29, 0x0, @empty, @local, {[@end]}}}}}) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000002e80)={&(0x7f0000002d00)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000002e40)={&(0x7f0000002e00)={0x30, r3, 0x21b, 0x70bd28, 0x25dfdbfb, {}, [@GTPA_TID={0xc}, @GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_LINK={0x8, 0x1, r4}]}, 0x30}, 0x1, 0x0, 0x0, 0x44}, 0x8805) syz_io_uring_submit(0x0, 0x0, &(0x7f0000002ec0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x58}) syz_usb_connect$sierra_net(0x2, 0x3f, &(0x7f0000002f00)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x4, 0x2, 0x20, 0x2, 0xc0, 0x7}, {0x9, 0x5, 0x80, 0x2, 0x3ff, 0x6, 0x2, 0xc}, {0x9, 0x5, 0x80, 0x3, 0x10, 0x8, 0x1, 0x4}}}}}}]}}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000002f40)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_CONN_TIMEOUT(r5, 0x10f, 0x82, &(0x7f0000002f80)=0x7, 0x4) r6 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_inet_sctp_SIOCINQ(r6, 0x541b, &(0x7f0000002fc0)) ioctl$I2C_RDWR(0xffffffffffffffff, 0x707, &(0x7f0000003040)={&(0x7f0000003000)}) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000003080)={'vcan0\x00'}) setsockopt$inet_opts(r6, 0x0, 0xd, &(0x7f00000030c0)="93b9e3f2be46f6d0e5e67af81a71b742f51083adb049863767cb28e7b5846aec144bb46b4798397cc7a805e1ec6d9b9963dcd3570cb59be081d19b44813e692121ab32598642fe0e37d516c99a278c77f9a0eca62c28766dbf8fc5ffad480e5696f95224d6eb6a3aab26950fc78d6dbf4e68476f334ecb78e4a2312e94fec4fafd86602bbdc8f8a53dc6363ff3", 0x8d) getsockopt$IP_SET_OP_GET_BYNAME(r5, 0x1, 0x53, &(0x7f0000003180)={0x6, 0x7, 'syz2\x00'}, &(0x7f00000031c0)=0x28) r7 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000003200)={0x4, 0x2, 0x1000, 0x2000, &(0x7f0000ffc000/0x2000)=nil}) syz_usb_control_io$rtl8150(r1, &(0x7f00000033c0)={0xc, &(0x7f0000003240)={0x20, 0x23, 0xa8, {0xa8, 0x7, "5879bb85aec61c98cceb104172d1ec7b095963bb843aad2e6df8dcfabbda735805f02ab9556cc5647468a4060877a4724aa87644c9b003d64b02efbfa5cdf83121d8f69c94721bc10b83b12025130f6cf81083c3d1f39f65434c4a03fadea360f2844b8307048ce5b9e43fbdf4160316a3cecd25aa6137fe8eb51515980f6db4fe9003c5a57f8c44c04db7cc4c966f25d6b7baabaf42f5fe6bca9bfcec2989b150cd719df294"}}, &(0x7f0000003300)={0x0, 0x3, 0x90, @string={0x90, 0x3, "c360e355e36aa172978eece60da7e8be608aacbe5f2e3391872058cd89f5934d5cc508ca5cd5033eb4f3757a91b5a102685deaa907bc7c916761a80cb78f684c2ba321d2ece2cab60a11b707ade24f648df0dfc300a57bebfc3b7a42e9246f658d29c0d77efc808a9b78fa984ad34b52298f36cccdabd6cf5e115c51b3c0d85886a18cba92337903277b18cc1759"}}}, &(0x7f00000035c0)={0x18, &(0x7f0000003400)={0x0, 0x17, 0xa6, "0776c26cc15a1b6a06e90072f07b626cabad050b46676cc28c0390c17138f464c970c44267b0918e988653b0ca4254eceb06ddd455f700ea2787c35317535d122c60e5433a8001ad5a221f45283d426c279125adbb5265af73437de26d568b31149142ed08051e0dd4bc0bd70f6fac2969e9f97c43433a5983418996c9e9054d7cab0d5530ccb721a61083041ffbc1cc7f6298bc20bb1c147011cc0952092cd818acc0499fc6"}, &(0x7f00000034c0)={0x0, 0xa, 0x1}, &(0x7f0000003500)={0x0, 0x8, 0x1, 0xa}, &(0x7f0000003540), &(0x7f0000003580)={0x40, 0x5, 0x6, "76c36fd05ffa"}}) setsockopt$inet6_tcp_TCP_ULP(r7, 0x6, 0x1f, &(0x7f0000003600), 0x3) sendmsg$WG_CMD_SET_DEVICE(r7, &(0x7f0000003740)={&(0x7f0000003640)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000003700)={&(0x7f0000003680)={0x6c, 0x0, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}, @WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e22}, @WGDEVICE_A_PRIVATE_KEY={0x24}]}, 0x6c}, 0x1, 0x0, 0x0, 0x5f7787e71e67cc13}, 0x810) socket$inet6_udp(0xa, 0x2, 0x0) 1.899907703s ago: executing program 2 (id=1953): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000880)=@raw={'raw\x00', 0x8, 0x3, 0x22c, 0x0, 0xa, 0x148, 0x100, 0x60, 0x198, 0x2a8, 0x2a8, 0x198, 0x2a8, 0x7fffffe, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'bridge0\x00'}, 0x0, 0x94, 0x100, 0x0, {0x200003ae, 0x7f00}, [@inet=@rpfilter={{0x24}, {0xc}}]}, @common=@unspec=@NFLOG={0x6c, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f2f7b9f28413d9d8ad470ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc2d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28}}], {{'\x00', 0xc8, 0x70, 0x94}, {0x24}}}}, 0x288) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x100008b}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) sendmsg$nl_route(r6, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000001000010400000000fcffffff00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001400030076657468305f746f5f626f6e6400000014002b8008000100", @ANYRES32=r7], 0x48}}, 0x0) sendmsg$nl_xfrm(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0xb8}}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r8 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) writev(r8, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000000)='dummy0\x00', 0xc) syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) rmdir(&(0x7f0000000100)='./file1\x00') sendmmsg$inet(r0, &(0x7f00000020c0), 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="40000000100039042abd7000ebf7ffff000003e4", @ANYRES32=0x0, @ANYBLOB="03000000c81006000a000200aaaaaaaaaaaa0000140003006261746164765f736c6176655f300000"], 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x4008000) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000600)=ANY=[@ANYBLOB="f8000007ea4800160033060000000000000080ff0100000f0000000000000000ebff000000000000000000190000000000000a00800000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="7f000001000000000000000000000000000004d23200000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000000000000ffffffffffffffff0001000000000000050000000000000004000000020000000000000006000000020000000a000418190000000c0015005c07350001000000"], 0xf8}}, 0x0) 1.478268864s ago: executing program 0 (id=1954): chdir(&(0x7f0000000140)='./cgroup\x00') (async) chdir(&(0x7f0000000140)='./cgroup\x00') r0 = open$dir(&(0x7f0000000040)='./cgroup\x00', 0x408000, 0xa) open_tree(r0, &(0x7f0000000080)='./file0\x00', 0x101100) r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f0000000000)='.\x00', 0x50007a2) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0) 1.477713582s ago: executing program 0 (id=1955): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) io_cancel(0x0, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x4e22, 0x0, @private1}, 0x7f) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0x6}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x14, 0x18, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x3}}, @NFT_MSG_DELTABLE={0x3c, 0x2, 0xa, 0x801, 0x0, 0xfffffff5, {0x1, 0x0, 0x8}, [@NFTA_TABLE_USERDATA={0x4}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELSET={0x14, 0xb, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x4}}], {0x14}}, 0xcc}}, 0xc0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='veth0\x00', 0x10) connect$inet6(0xffffffffffffffff, &(0x7f0000000240)={0xa, 0x4e22, 0x0, @private1, 0xd}, 0x1c) socket$inet_udp(0x2, 0x2, 0x0) r2 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r2, &(0x7f00000002c0)={0x1, 0x6}, 0x2) write$USERIO_CMD_REGISTER(r2, &(0x7f00000000c0), 0x2) write$USERIO_CMD_SEND_INTERRUPT(r2, &(0x7f0000000100)={0x2, 0x85}, 0x2) 1.220610344s ago: executing program 4 (id=1956): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x9, 0x2, 0x180, 0x4, 0x10, 0xf1, 0x50, 0x7fffffffffffe, 0x5, 0x6, 0x9, 0x8000000000000000, 0xf4a, 0x0, 0xbdb], 0xffff1001, 0x4000}) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000200)={0x0, 0x0, 0x300f, 0x2, 0x0, 0x0, 0x0, 0x1}) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$VIDIOC_ENUMAUDOUT(0xffffffffffffffff, 0xc0345642, &(0x7f0000000080)={0x1, "7bc7b0eb07939da1ee8efc70c96ced7db5515f1f455fd01ec5750310cb20fa5e"}) r2 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x8, 0x7}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x8, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x4}]}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@multicast, @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x4, 0x1c, 0x66, 0x0, 0x7, 0x2, 0x0, @private=0xa010102, @local}, {0x11, 0x1, 0x0, @empty}}}}}, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x4000}, 0x48) 976.595883ms ago: executing program 4 (id=1957): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x11000) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000001780), 0x0, &(0x7f0000001c00)=ANY=[]) vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x40, 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0xc7) mount$nfs(&(0x7f0000000040)='@\a', 0x0, 0x0, 0x20887b, 0x0) mount$nfs(&(0x7f0000000080)='@\a', 0x0, &(0x7f0000000500), 0x20040c1, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000800)=@ipv6_delrule={0x24, 0x21, 0x11, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_L3MDEV={0x5, 0x13, 0x1}]}, 0x24}}, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) r4 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC_PROXY(r4, 0x29, 0xd2, &(0x7f0000000600)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @empty}}, 0x5c) setsockopt$MRT6_ADD_MFC_PROXY(r4, 0x29, 0xcd, &(0x7f00000000c0)={{0xa, 0x2, 0x0, @local}, {0xa, 0x0, 0x0, @empty}}, 0x5c) sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000180)=ANY=[@ANYRES64=r1, @ANYRESHEX=r4, @ANYBLOB="010800040000000000000b00200008000300", @ANYRES32=r3, @ANYBLOB="0a000600080211000001000030005080110001004abee33908f8eef16f162471f4000000080007000000000005000200020000000800030005ac0f", @ANYRES8=r0], 0x58}}, 0x0) 876.328879ms ago: executing program 4 (id=1958): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000002940), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000002980)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(0xffffffffffffffff, &(0x7f0000002b40)={0x0, 0x0, &(0x7f0000002b00)={&(0x7f00000029c0)={0x20, r2, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x20004084}, 0x40800) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000001b00)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r0, &(0x7f0000001bc0)={&(0x7f0000001ac0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001b80)={&(0x7f0000001b40)={0x24, r2, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x2a, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4c008}, 0x14) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[{0x40, 0x25, 0x2, 0x8}, {0x6, 0x0, 0x6, 0x1}]}, 0x8) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r1, &(0x7f0000000140)="24000000010006", 0x7) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000001c0)={0x80, 0x0, 0x1, 0x4, 0x0, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x54, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x35}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x20044885}, 0x0) r5 = socket(0x6, 0x5, 0x576) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r5) sendmsg$NL80211_CMD_ABORT_SCAN(r5, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, r7, 0x800, 0x70bd2d, 0x7, {{}, {@void, @val={0xc, 0x99, {0x6, 0x21}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x4040) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000280), r5) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r5, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r8, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4804}, 0x880) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0xfffffffffffffde8, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000d0"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffefb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xb1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r9}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x80, 0x1, 0x28}, 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000300)='timer_start\x00', r10}, 0x18) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) r11 = syz_open_dev$vcsn(&(0x7f0000000380), 0x7, 0x111a00) mknodat(r11, &(0x7f00000003c0)='./file0\x00', 0x1, 0x5) r12 = syz_genetlink_get_family_id$fou(&(0x7f0000000440), r5) sendmsg$FOU_CMD_DEL(r11, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r12, 0x2, 0x70bd25, 0x25dfdbfb, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @loopback}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4044800}, 0x800) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r6, 0xc0c09425, &(0x7f0000000540)={"64779cf117f8b5ff5a6701567dcc0501", 0x0, 0x0, {0x4, 0x6}, {0x7, 0x1f}, 0x3, [0xe0, 0x9, 0xa45, 0x1ff, 0x9, 0x1, 0x7, 0x8, 0x4, 0x5, 0xfffffffffffffff7, 0x742, 0xffffffffffffe86d, 0x4, 0x8, 0x5]}) 831.844506ms ago: executing program 3 (id=1959): socket$key(0xf, 0x3, 0x2) r0 = getpid() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000800)={{0x4, 0x0, 0x9, 0x8001, 'syz0\x00', 0xc22}, 0x2, 0x200, 0x9, r0, 0x0, 0x7fff, 'syz1\x00', 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000940)=@newchain={0x8cc, 0x64, 0x208, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xfff8, 0xfff1}, {0xfff2, 0x7}, {0xffe0, 0x7}}, [@TCA_CHAIN={0x8}, @filter_kind_options=@f_flow={{0x9}, {0x884, 0x2, [@TCA_FLOW_PERTURB={0x8, 0xc, 0x81}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1c021}, @TCA_FLOW_ADDEND={0x8, 0x5, 0x8}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0x579}, @TCA_FLOW_PERTURB={0x8}, @TCA_FLOW_POLICE={0x848, 0xa, 0x0, 0x1, [@TCA_POLICE_RATE={0x404, 0x2, [0x8, 0xc, 0x4, 0x9, 0x7f, 0xbe, 0x2, 0xd3d4, 0x7ee, 0xc2, 0x2, 0x9, 0x6, 0xab, 0x3b, 0x35, 0x41, 0x7, 0x1, 0x0, 0xf, 0x6, 0xb8b, 0xe, 0xc, 0x7, 0x2, 0x3, 0x0, 0x2, 0x6e, 0x0, 0x2162, 0x8, 0x3, 0x2, 0x8, 0x4, 0x7f, 0x4, 0x4, 0x3, 0xffff16fd, 0x1, 0x0, 0x2e, 0x81, 0x7f, 0xffffffff, 0x1, 0x4, 0x3, 0xfffffff4, 0x4, 0x7, 0xfffffffe, 0x9, 0x4, 0x2, 0xfffffe00, 0x8, 0x80000000, 0x548, 0xc, 0x9, 0x5, 0x2, 0x1, 0x4f, 0x5, 0xffffffff, 0xb, 0x6, 0x4, 0xffffffff, 0x81, 0x8001, 0x18ba, 0x10000, 0x8, 0x9, 0x9, 0x7fffffff, 0x2, 0x5, 0x2, 0xfffeffff, 0x982, 0x3ff, 0x3, 0x7, 0x0, 0x7, 0x7a3, 0x3, 0x4, 0x7f, 0x1, 0xc, 0x0, 0xa5e, 0x38, 0x3, 0x2, 0x5, 0x0, 0x5, 0x1, 0x3, 0x9, 0x4, 0xafb, 0x81, 0x9, 0x0, 0x7e0d, 0x4, 0xc, 0x2, 0x8, 0x1, 0x0, 0x38b, 0x3, 0x6, 0x8, 0x3, 0x155, 0x9, 0x8, 0x554, 0x2, 0x73dd, 0x3, 0x4, 0x3, 0x400, 0x0, 0x6, 0x3, 0x5, 0xda4, 0x9, 0x3, 0xda, 0x60000, 0x0, 0x4, 0xfffffc00, 0x4, 0x3, 0x4, 0x9, 0x15bd, 0x40, 0x100, 0xff, 0x7, 0x5, 0x5, 0xffff, 0x7f, 0x0, 0x4, 0x100, 0x8, 0x2, 0x58, 0xa9, 0x1ff, 0x896, 0xaf, 0xfffffbf9, 0x4, 0x5, 0x0, 0xff, 0x4c38, 0x1, 0x7, 0x2, 0x5c, 0x7, 0x0, 0x6, 0x3, 0x9, 0x4, 0x7fffffff, 0x9, 0x5, 0x6, 0x4, 0x100, 0x0, 0x4, 0x1, 0x800, 0x7, 0x5, 0x7fff, 0x0, 0xb, 0x80000000, 0x0, 0x7, 0xa4, 0x100, 0x1, 0x7, 0xef, 0x2, 0x1, 0x8, 0x40, 0x9, 0x10000, 0x7, 0x9, 0x7da, 0x4, 0x6, 0x0, 0x0, 0x0, 0x80000000, 0x7, 0x8, 0x7fffffff, 0x73c6, 0x3, 0x4, 0x3, 0x3, 0xc00000, 0x7fffffff, 0x80, 0x5, 0x7f, 0x1, 0xa, 0xfab, 0x1000, 0x1, 0x3ecb, 0x95b, 0x4a6e, 0x0, 0xe7cf, 0x10000, 0xfffffff9, 0x4e91, 0x268, 0x9, 0x0, 0xffff]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x9, 0x1, 0x7, 0xfffffffa, 0x3ff, {0x3, 0x1, 0xcc9, 0x5, 0x2, 0x6}, {0xb2, 0x2, 0x1, 0x9, 0x8000, 0x5}, 0x3, 0x4ccabf85}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9, 0x1dbc, 0xfffffffd, 0x2, 0x8c39, 0x0, 0x8, 0x0, 0xb, 0x9, 0x48, 0x0, 0xc, 0xffffe995, 0x7, 0x8, 0x80000001, 0x5, 0x1, 0xa5bb, 0x3, 0x5, 0x0, 0x7fffffff, 0x6, 0x3ff, 0xfffffffd, 0xf, 0x9, 0x1, 0x7, 0x2, 0x2, 0x8, 0x5, 0x819d, 0x5, 0x7, 0x9, 0x8b0, 0x4, 0x5, 0x8, 0x0, 0x2, 0x6, 0x1, 0xf5, 0x3, 0x8, 0xf9b9, 0x1, 0x0, 0xc6e3, 0x0, 0xfffffc01, 0x7, 0x5, 0x0, 0x38, 0xffff, 0x7ff, 0xc, 0x3, 0x2, 0x83e, 0x9ee, 0xa, 0x7, 0x8, 0x7f, 0x4, 0x2, 0xe, 0x9, 0x8000, 0xfffffffd, 0x5, 0xb, 0x401, 0x0, 0x7, 0x9, 0xb4, 0x7, 0xb, 0x1, 0x101, 0x1, 0x9, 0x9, 0x8, 0x9, 0x6, 0x400, 0x6, 0x9, 0x1, 0x48b96feb, 0x5, 0x0, 0xfffffff8, 0xffff, 0x3, 0x2, 0x7, 0x4, 0x5, 0x80a0, 0x7, 0x8, 0x0, 0x1ff, 0x0, 0x6, 0x3, 0x7, 0x1, 0x9, 0x1000, 0xc0000, 0x5, 0x3, 0x2, 0xb, 0x4, 0x7f, 0xdc20, 0x3, 0x8, 0x6, 0x400, 0x4, 0x4, 0x4, 0x2, 0x8000, 0x5, 0x5, 0x8, 0x4, 0x1, 0x1000, 0xa73d, 0x2, 0x80, 0x101, 0x0, 0x7fff, 0xfffffffa, 0x2, 0x101, 0x10, 0x4, 0x7ff, 0x0, 0x1000, 0x5, 0x7, 0x0, 0x6, 0x9, 0x44, 0x0, 0x6, 0x4, 0x2, 0x3, 0x8, 0x7, 0x1, 0x37a, 0xfffffffc, 0x5, 0x1, 0x6, 0x6, 0x312, 0xf0, 0x7, 0x556, 0x6, 0x5, 0x2, 0x40, 0x7210, 0x6, 0x6, 0x372, 0x8, 0x0, 0x96e, 0xa2, 0x7, 0x3, 0x789a, 0x8000, 0x4, 0x2, 0x6, 0x2, 0x80000000, 0x2, 0x3, 0xe211, 0x10, 0x3, 0x1, 0x94d, 0x0, 0x6a9, 0x0, 0xe, 0x7, 0x100, 0x20, 0x2, 0x2, 0x3, 0x101, 0x5, 0x0, 0x10000, 0xe212, 0x2000000, 0x80000000, 0x5, 0xfffffffd, 0x8, 0x9, 0x6, 0xc, 0xb, 0x4, 0x4, 0x1, 0x554, 0x6, 0x8000, 0xffff, 0x8000, 0x871, 0x3, 0x3, 0xa58, 0x100, 0x80, 0x1, 0x8000, 0x3, 0xffffffff, 0x0, 0x1ff, 0x3, 0x3, 0x5]}]}, @TCA_FLOW_DIVISOR={0x8}, @TCA_FLOW_BASECLASS={0x8, 0x3, {0x3, 0x1}}]}}, @TCA_CHAIN={0x8, 0xb, 0xffffff7f}, @TCA_RATE={0x6, 0x5, {0x6, 0x9}}]}, 0x8cc}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r3, 0x6, 0x3, &(0x7f0000000180)=0x6, 0x4) getsockopt$inet6_tcp_int(r3, 0x6, 0x1e, 0x0, &(0x7f0000000040)) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) socket$netlink(0x10, 0x3, 0x15) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) pipe(&(0x7f00000001c0)) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f0000000080), 0x0, 0x4014, 0x0, 0x0) shutdown(r5, 0x1) r6 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) preadv(r6, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/98, 0x62}], 0x1, 0x0, 0x0) 768.705775ms ago: executing program 4 (id=1960): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r1, @ANYBLOB="90200000000000001c0012800b00010067656e65766500000c0002"], 0x44}, 0x1, 0x2}, 0x4050) 768.440519ms ago: executing program 2 (id=1961): bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x3, 0x3ffdcf, 0xaf0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value=0x80010000}, 0x50) 768.061943ms ago: executing program 2 (id=1962): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="286a03000000000000bd7000ffdbdf25000000000000000008000100000000000800010002000000"], 0x28}, 0x1, 0x0, 0x0, 0x14}, 0x8080) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0100000002020000ec0b000007"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000000), 0x105, r4}, 0x38) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f00000004c0)={0x1, 0x0, [{0x49, 0x0, 0x6}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f0000000300)=ANY=[], &(0x7f0000000280)='GPL\x00', 0xa, 0xb9, &(0x7f0000000140)=""/185, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r8 = syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042) io_setup(0x400, &(0x7f00000003c0)=0x0) io_submit(r9, 0x1, &(0x7f0000000480)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r8, 0x0}]) write$RDMA_USER_CM_CMD_CREATE_ID(r8, 0x0, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r12, @ANYBLOB="08002600b409000008002700010000000800a100000000000500190b090000000500180115"], 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x0) r13 = syz_open_dev$dri(&(0x7f00000008c0), 0x3, 0x402) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r13, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r13, 0xc06864a1, &(0x7f0000000100)={0x0, 0x0, r14}) r15 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r15, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}}, 0x0, 0x0, 0x0, 0x0, "ddfd3b7ed7c6a1c172a987ae5ce3cafd64c9a736831a5912d606798fb75c9981c4b3ac0e06891ff18bc5543ed57215a3c45f9154dfa319e52a15a2b9acf80c07fb1a854dad742eef6187f2304844c296"}, 0xd8) 696.734447ms ago: executing program 4 (id=1963): r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c45, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/custom1\x00', 0x800, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) socket(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d1030000"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) flock(r0, 0x5) flock(0xffffffffffffffff, 0x2) dup3(0xffffffffffffffff, r0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="19000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYBLOB='\x00'/14], 0x50) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-384\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)=@delqdisc={0x84, 0x25, 0x1, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x2, 0xd}, {0xd, 0x5}, {0xc, 0x6}}, [@q_dsmark={{0xb}, {0x18, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x9}]}}, @q_dsmark={{0xb}, {0x30, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x3ff}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x8}, @TCA_DSMARK_SET_TC_INDEX={0x18}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x810}, 0x801) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0xc, &(0x7f0000000500)=ANY=[@ANYRES32=r2, @ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) 551.848093ms ago: executing program 0 (id=1964): syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4d8, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x8, [{{0x9, 0x4, 0x0, 0xfe, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0xffff, 0xfd, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x3, 0x0, 0xfd}}}}}]}}]}}, 0x0) r1 = socket(0x10, 0x3, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000340)=ANY=[@ANYBLOB="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", @ANYRES16=r3, @ANYBLOB="010000000000fedbdf250300000004000180"], 0x18}}, 0x0) write(r1, &(0x7f0000000040)="effd00001000ff00fd4344c007110000f3050a00dbfd010000000001ffdf00", 0xfe00) syz_usb_control_io$hid(r0, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000e00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000140)='fib_table_lookup\x00', r4, 0x0, 0x417}, 0x18) r5 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r5, &(0x7f0000000680)={&(0x7f0000000000)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, &(0x7f0000001780)=[{&(0x7f0000000240)="f9", 0x1}], 0x1}, 0x4000080) syz_usb_control_io(r0, &(0x7f0000000080)={0x18, &(0x7f00000012c0)=ANY=[@ANYBLOB="00600010"], 0x0, 0x0, 0x0, 0x0}, 0x0) r6 = syz_open_dev$I2C(&(0x7f0000000100), 0x2, 0x1) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x11, &(0x7f0000001080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, [@snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r7}, {}, {0x85, 0x0, 0x0, 0xa7}}, @call={0x85, 0x0, 0x0, 0x50}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r8}, 0xc) ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f0000000140)) ioctl$I2C_SMBUS(r6, 0x720, &(0x7f0000000800)={0x0, 0x80, 0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r9 = userfaultfd(0x80001) ioctl$UFFDIO_API(r9, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r9, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_COPY(r9, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) r10 = open(&(0x7f00000005c0)='./bus\x00', 0x64042, 0x0) pwritev2(r10, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x300, 0x1200, 0x0, 0x3) 60.794729ms ago: executing program 2 (id=1965): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@newlink={0x48, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x1414, 0x2021}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x1}, @IFLA_MACVLAN_MACADDR={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xfffffffffffffedb, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="5400000010000100000000008100000000000000", @ANYRES32=r2], 0x54}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) 501.448µs ago: executing program 2 (id=1966): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, 0x0, 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TCSETS(r1, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400000, 0x14, "3eccd8000000000000000010000000040100"}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) r4 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r4, &(0x7f0000000080)={'exec ', ':\x00'}, 0x7) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r5 = socket$inet_udp(0x2, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x8010800) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) syz_init_net_socket$ax25(0x3, 0x3, 0xcf) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x40000, 0x25dfdbff, {}, [@NHA_OIF={0x8, 0x5, r9}]}, 0x20}}, 0x8040) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x20, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r9, 0x192}}, 0x20}}, 0x0) r10 = fsopen(&(0x7f0000000100)='vfat\x00', 0x0) fsconfig$FSCONFIG_SET_PATH(r10, 0x3, &(0x7f0000000180)='utf8', &(0x7f0000000340)='./file2\x00', 0xffffffffffffff9c) bind$inet(r5, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) setsockopt$sock_int(r5, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r5, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r5, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) 0s ago: executing program 0 (id=1967): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000b0000003c0000003c000000020000000000000002000004080000000000000003000000000000000000000002000000000000000000000000000002000000000000000000000004"], 0x0, 0x56}, 0x28) kernel console output (not intermixed with test programs): d3): udf_load_vrs: No anchor found [ 239.510974][T10872] UDF-fs: Scanning with blocksize 4096 failed [ 239.513021][T10872] UDF-fs: warning (device nbd3): udf_fill_super: No partition found (1) [ 239.861859][ T5352] loop4: [POWERTEC] p1 p2 p3 p4 p5 p6 [ 239.863813][ T5352] loop4: p1 size 2037579776 extends beyond EOD, truncated [ 239.869231][ T5352] loop4: p2 start 4294901760 is beyond EOD, truncated [ 239.871358][ T5352] loop4: p3 start 4294836224 is beyond EOD, truncated [ 239.882598][ T5352] loop4: p4 size 327680 extends beyond EOD, truncated [ 239.886129][ T5352] loop4: p5 size 8323072 extends beyond EOD, truncated [ 239.889049][ T5352] loop4: p6 start 8192 is beyond EOD, truncated [ 240.462292][ C2] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 241.186700][ T5352] loop4: [POWERTEC] p1 p2 p3 p4 p5 p6 [ 241.189316][ T5352] loop4: p1 size 2037579776 extends beyond EOD, truncated [ 241.195365][ T5352] loop4: p2 start 4294901760 is beyond EOD, truncated [ 241.198399][ T5352] loop4: p3 start 4294836224 is beyond EOD, truncated [ 241.201352][ T5352] loop4: p4 size 327680 extends beyond EOD, truncated [ 241.206400][ T5352] loop4: p5 size 8323072 extends beyond EOD, truncated [ 241.210522][ T5352] loop4: p6 start 8192 is beyond EOD, truncated [ 241.229656][T10904] 9p: Bad value for 'wfdno' [ 241.363895][T10907] wg1: entered promiscuous mode [ 241.365577][T10907] wg1: entered allmulticast mode [ 241.375786][T10909] loop2: detected capacity change from 0 to 7 [ 241.391241][T10396] Dev loop2: unable to read RDB block 7 [ 241.393404][T10396] loop2: unable to read partition table [ 241.399864][T10396] loop2: partition table beyond EOD, truncated [ 241.413098][T10909] Dev loop2: unable to read RDB block 7 [ 241.415467][T10909] loop2: unable to read partition table [ 241.426476][T10909] loop2: partition table beyond EOD, truncated [ 241.428441][T10909] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 241.581816][ T5352] loop4: [POWERTEC] p1 p2 p3 p4 p5 p6 [ 241.584317][ T5352] loop4: p1 size 2037579776 extends beyond EOD, truncated [ 241.587432][ T5352] loop4: p2 start 4294901760 is beyond EOD, truncated [ 241.589640][ T5352] loop4: p3 start 4294836224 is beyond EOD, truncated [ 241.591798][ T5352] loop4: p4 size 327680 extends beyond EOD, truncated [ 241.595146][ T5352] loop4: p5 size 8323072 extends beyond EOD, truncated [ 241.598108][ T5352] loop4: p6 start 8192 is beyond EOD, truncated [ 241.636124][T10920] 9p: Bad value for 'wfdno' [ 241.727665][ T5952] Bluetooth: unknown link type 128 [ 241.802368][T10925] wg1: left promiscuous mode [ 241.804033][T10925] wg1: left allmulticast mode [ 241.817304][T10925] erspan1: left allmulticast mode [ 241.820416][T10925] vlan2: left promiscuous mode [ 242.736231][ T5352] loop4: [POWERTEC] p1 p2 p3 p4 p5 p6 [ 242.742449][ T5352] loop4: p1 size 2037579776 extends beyond EOD, truncated [ 242.745768][ T5352] loop4: p2 start 4294901760 is beyond EOD, truncated [ 242.748332][ T5352] loop4: p3 start 4294836224 is beyond EOD, truncated [ 242.750728][ T5352] loop4: p4 size 327680 extends beyond EOD, truncated [ 242.764380][ T5352] loop4: p5 size 8323072 extends beyond EOD, truncated [ 242.772572][ T5352] loop4: p6 start 8192 is beyond EOD, truncated [ 242.790985][T10938] 9p: Bad value for 'wfdno' [ 242.812279][T10935] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 243.619056][T10946] syzkaller0: entered promiscuous mode [ 243.621320][T10946] syzkaller0: entered allmulticast mode [ 243.650634][ T5352] loop4: [POWERTEC] p1 p2 p3 p4 p5 p6 [ 243.654225][ T5352] loop4: p1 size 2037579776 extends beyond EOD, truncated [ 243.657570][ T5352] loop4: p2 start 4294901760 is beyond EOD, truncated [ 243.659750][ T5352] loop4: p3 start 4294836224 is beyond EOD, truncated [ 243.661868][ T5352] loop4: p4 size 327680 extends beyond EOD, truncated [ 243.665953][ T5352] loop4: p5 size 8323072 extends beyond EOD, truncated [ 243.669146][ T5352] loop4: p6 start 8192 is beyond EOD, truncated [ 243.733746][ T5944] Bluetooth: hci3: command 0x0c1a tx timeout [ 243.734958][T10950] Bluetooth: hci2: Frame reassembly failed (-84) [ 243.763280][ T1143] Bluetooth: hci2: Frame reassembly failed (-84) [ 244.994103][T10973] 9p: Bad value for 'wfdno' [ 245.812389][ T5952] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 245.866624][ T5352] loop4: [POWERTEC] p1 p2 p3 p4 p5 p6 [ 245.869485][ T5352] loop4: p1 size 2037579776 extends beyond EOD, truncated [ 245.877113][ T5352] loop4: p2 start 4294901760 is beyond EOD, truncated [ 245.880037][ T5352] loop4: p3 start 4294836224 is beyond EOD, truncated [ 245.883087][ T5352] loop4: p4 size 327680 extends beyond EOD, truncated [ 245.888212][ T5352] loop4: p5 size 8323072 extends beyond EOD, truncated [ 245.893804][ T5352] loop4: p6 start 8192 is beyond EOD, truncated [ 246.123032][T11001] fuse: Bad value for 'rootmode' [ 246.939812][T11011] 9p: Bad value for 'wfdno' [ 247.034030][ T5352] loop4: [POWERTEC] p1 p2 p3 p4 p5 p6 [ 247.036618][ T5352] loop4: p1 size 2037579776 extends beyond EOD, truncated [ 247.040597][ T5352] loop4: p2 start 4294901760 is beyond EOD, truncated [ 247.043911][ T5352] loop4: p3 start 4294836224 is beyond EOD, truncated [ 247.046625][ T5352] loop4: p4 size 327680 extends beyond EOD, truncated [ 247.050057][ T5352] loop4: p5 size 8323072 extends beyond EOD, truncated [ 247.054543][ T5352] loop4: p6 start 8192 is beyond EOD, truncated [ 247.085324][ T5352] loop4: [POWERTEC] p1 p2 p3 p4 p5 p6 [ 247.089064][ T5352] loop4: p1 size 2037579776 extends beyond EOD, truncated [ 247.093257][ T5352] loop4: p2 start 4294901760 is beyond EOD, truncated [ 247.096051][ T5352] loop4: p3 start 4294836224 is beyond EOD, truncated [ 247.098929][ T5352] loop4: p4 size 327680 extends beyond EOD, truncated [ 247.103325][ T5352] loop4: p5 size 8323072 extends beyond EOD, truncated [ 247.107609][ T5352] loop4: p6 start 8192 is beyond EOD, truncated [ 247.226422][T11021] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 247.230744][T11020] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1364'. [ 247.239036][T11021] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 247.246789][T11021] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 247.254484][T11021] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 247.260284][T11021] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 247.266268][T11020] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 247.268632][T11017] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 247.276495][T11017] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 247.621619][T11027] syzkaller0: entered promiscuous mode [ 247.623368][T11027] syzkaller0: entered allmulticast mode [ 247.738764][T11029] tipc: Enabled bearer , priority 0 [ 247.741802][T11029] syzkaller0: entered promiscuous mode [ 247.744438][T11029] syzkaller0: entered allmulticast mode [ 247.754623][T11029] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1368'. [ 247.760152][T11029] tipc: Resetting bearer [ 247.777837][T11028] tipc: Resetting bearer [ 247.788930][T11028] tipc: Disabling bearer [ 247.811032][T11031] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1369'. [ 247.823239][ T5352] loop4: [POWERTEC] p1 p2 p3 p4 p5 p6 [ 247.825727][ T5352] loop4: p1 size 2037579776 extends beyond EOD, truncated [ 247.829755][ T5352] loop4: p2 start 4294901760 is beyond EOD, truncated [ 247.832452][ T5352] loop4: p3 start 4294836224 is beyond EOD, truncated [ 247.835084][ T5352] loop4: p4 size 327680 extends beyond EOD, truncated [ 247.838921][ T5352] loop4: p5 size 8323072 extends beyond EOD, truncated [ 247.843018][ T5352] loop4: p6 start 8192 is beyond EOD, truncated [ 247.876926][T11037] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1372'. [ 247.984192][T11044] xt_bpf: check failed: parse error [ 248.028261][ T40] kauditd_printk_skb: 10 callbacks suppressed [ 248.028276][ T40] audit: type=1326 audit(1766000350.982:504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11047 comm="syz.0.1376" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf702d579 code=0x0 [ 248.450488][T11052] 9p: Bad value for 'rfdno' [ 248.498122][T11054] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1378'. [ 248.501290][T11054] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1378'. [ 248.790585][T11063] netlink: 'syz.2.1382': attribute type 11 has an invalid length. [ 248.839103][ T5352] loop4: [POWERTEC] p1 p2 p3 p4 p5 p6 [ 248.840884][ T5352] loop4: p1 size 2037579776 extends beyond EOD, truncated [ 248.843904][ T5352] loop4: p2 start 4294901760 is beyond EOD, truncated [ 248.846006][ T5352] loop4: p3 start 4294836224 is beyond EOD, truncated [ 248.848050][ T5352] loop4: p4 size 327680 extends beyond EOD, truncated [ 248.850740][ T5352] loop4: p5 size 8323072 extends beyond EOD, truncated [ 248.854177][ T5352] loop4: p6 start 8192 is beyond EOD, truncated [ 248.921702][T11069] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1383'. [ 248.946585][ T5352] loop4: [POWERTEC] p1 p2 p3 p4 p5 p6 [ 248.948911][ T5352] loop4: p1 size 2037579776 extends beyond EOD, truncated [ 248.955051][ T5352] loop4: p2 start 4294901760 is beyond EOD, truncated [ 248.957873][ T5352] loop4: p3 start 4294836224 is beyond EOD, truncated [ 248.960545][ T5352] loop4: p4 size 327680 extends beyond EOD, truncated [ 248.964352][ T5352] loop4: p5 size 8323072 extends beyond EOD, truncated [ 248.967833][ T5352] loop4: p6 start 8192 is beyond EOD, truncated [ 249.202849][T11074] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1386'. [ 250.093434][ T5352] loop4: [POWERTEC] p1 p2 p3 p4 p5 p6 [ 250.095278][ T5352] loop4: p1 size 2037579776 extends beyond EOD, truncated [ 250.099623][ T5352] loop4: p2 start 4294901760 is beyond EOD, truncated [ 250.105526][ T5352] loop4: p3 start 4294836224 is beyond EOD, truncated [ 250.108418][ T5352] loop4: p4 size 327680 extends beyond EOD, truncated [ 250.112637][ T5352] loop4: p5 size 8323072 extends beyond EOD, truncated [ 250.117303][ T5352] loop4: p6 start 8192 is beyond EOD, truncated [ 250.993760][T11103] RDS: rds_bind could not find a transport for ::ffff:172.30.1.1, load rds_tcp or rds_rdma? [ 251.040243][ T5352] loop4: [POWERTEC] p1 p2 p3 p4 p5 p6 [ 251.043118][ T5352] loop4: p1 size 2037579776 extends beyond EOD, truncated [ 251.047416][ T5352] loop4: p2 start 4294901760 is beyond EOD, truncated [ 251.050207][ T5352] loop4: p3 start 4294836224 is beyond EOD, truncated [ 251.052980][ T5352] loop4: p4 size 327680 extends beyond EOD, truncated [ 251.055983][ T5352] loop4: p5 size 8323072 extends beyond EOD, truncated [ 251.060162][ T5352] loop4: p6 start 8192 is beyond EOD, truncated [ 251.241328][ T5352] loop4: [POWERTEC] p1 p2 p3 p4 p5 p6 [ 251.245043][ T5352] loop4: p1 size 2037579776 extends beyond EOD, truncated [ 251.248882][ T5352] loop4: p2 start 4294901760 is beyond EOD, truncated [ 251.251166][ T5352] loop4: p3 start 4294836224 is beyond EOD, truncated [ 251.254473][ T5352] loop4: p4 size 327680 extends beyond EOD, truncated [ 251.258965][ T5352] loop4: p5 size 8323072 extends beyond EOD, truncated [ 251.264916][ T5352] loop4: p6 start 8192 is beyond EOD, truncated [ 251.325557][ T5352] loop4: [POWERTEC] p1 p2 p3 p4 p5 p6 [ 251.328116][ T5352] loop4: p1 size 2037579776 extends beyond EOD, truncated [ 251.335552][ T5352] loop4: p2 start 4294901760 is beyond EOD, truncated [ 251.338499][ T5352] loop4: p3 start 4294836224 is beyond EOD, truncated [ 251.341285][ T5352] loop4: p4 size 327680 extends beyond EOD, truncated [ 251.346966][ T5352] loop4: p5 size 8323072 extends beyond EOD, truncated [ 251.351190][ T5352] loop4: p6 start 8192 is beyond EOD, truncated [ 251.487035][T11119] netlink: 'syz.0.1399': attribute type 1 has an invalid length. [ 251.541842][T11112] 9pnet_virtio: no channels available for device syz [ 251.697565][ T5352] loop4: [POWERTEC] p1 p2 p3 p4 p5 p6 [ 251.700134][ T5352] loop4: p1 size 2037579776 extends beyond EOD, truncated [ 251.705188][ T5352] loop4: p2 start 4294901760 is beyond EOD, truncated [ 251.707711][ T5352] loop4: p3 start 4294836224 is beyond EOD, truncated [ 251.709836][ T5352] loop4: p4 size 327680 extends beyond EOD, truncated [ 251.713273][ T5352] loop4: p5 size 8323072 extends beyond EOD, truncated [ 251.717092][ T5352] loop4: p6 start 8192 is beyond EOD, truncated [ 251.717764][T11131] tipc: Enabling of bearer rejected, failed to enable media [ 251.723640][T11130] syzkaller0: entered promiscuous mode [ 251.732924][T11130] syzkaller0: entered allmulticast mode [ 251.767957][ T5352] loop4: [POWERTEC] p1 p2 p3 p4 p5 p6 [ 251.769870][ T5352] loop4: p1 size 2037579776 extends beyond EOD, truncated [ 251.773096][ T5352] loop4: p2 start 4294901760 is beyond EOD, truncated [ 251.775446][ T5352] loop4: p3 start 4294836224 is beyond EOD, truncated [ 251.777642][ T5352] loop4: p4 size 327680 extends beyond EOD, truncated [ 251.780598][ T5352] loop4: p5 size 8323072 extends beyond EOD, truncated [ 251.784568][ T5352] loop4: p6 start 8192 is beyond EOD, truncated [ 251.822207][ T5352] loop4: [POWERTEC] p1 p2 p3 p4 p5 p6 [ 251.825521][ T5352] loop4: p1 size 2037579776 extends beyond EOD, truncated [ 251.829579][ T5352] loop4: p2 start 4294901760 is beyond EOD, truncated [ 251.832301][ T5352] loop4: p3 start 4294836224 is beyond EOD, truncated [ 251.835381][ T5352] loop4: p4 size 327680 extends beyond EOD, truncated [ 251.839084][ T5352] loop4: p5 size 8323072 extends beyond EOD, truncated [ 251.843766][ T5352] loop4: p6 start 8192 is beyond EOD, truncated [ 251.934386][T11142] tipc: Enabled bearer , priority 0 [ 251.988351][T11142] syzkaller0: entered promiscuous mode [ 251.990689][T11142] syzkaller0: entered allmulticast mode [ 252.017145][T11142] tipc: Resetting bearer [ 252.041718][T11141] tipc: Resetting bearer [ 252.260363][T11149] RDS: rds_bind could not find a transport for ::ffff:172.30.1.5, load rds_tcp or rds_rdma? [ 252.797072][ T5352] loop4: [POWERTEC] p1 p2 p3 p4 p5 p6 [ 252.799607][ T5352] loop4: p1 size 2037579776 extends beyond EOD, truncated [ 252.809209][ T5352] loop4: p2 start 4294901760 is beyond EOD, truncated [ 252.813543][ T5352] loop4: p3 start 4294836224 is beyond EOD, truncated [ 252.816676][ T5352] loop4: p4 size 327680 extends beyond EOD, truncated [ 252.821562][ T5352] loop4: p5 size 8323072 extends beyond EOD, truncated [ 252.827172][ T5352] loop4: p6 start 8192 is beyond EOD, truncated [ 252.974661][ T5352] loop4: [POWERTEC] p1 p2 p3 p4 p5 p6 [ 252.976733][ T5352] loop4: p1 size 2037579776 extends beyond EOD, truncated [ 252.979881][ T5352] loop4: p2 start 4294901760 is beyond EOD, truncated [ 252.982804][ T5352] loop4: p3 start 4294836224 is beyond EOD, truncated [ 252.985167][ T5352] loop4: p4 size 327680 extends beyond EOD, truncated [ 252.988353][ T5352] loop4: p5 size 8323072 extends beyond EOD, truncated [ 252.991878][ T5352] loop4: p6 start 8192 is beyond EOD, truncated [ 253.262823][T11141] tipc: Disabling bearer [ 253.285149][T11154] bond3: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 253.289997][T11154] bond3 (unregistering): Released all slaves [ 253.332790][ T5352] loop4: [POWERTEC] p1 p2 p3 p4 p5 p6 [ 253.335511][ T5352] loop4: p1 size 2037579776 extends beyond EOD, truncated [ 253.339662][ T5352] loop4: p2 start 4294901760 is beyond EOD, truncated [ 253.342002][ T5352] loop4: p3 start 4294836224 is beyond EOD, truncated [ 253.345227][ T5352] loop4: p4 size 327680 extends beyond EOD, truncated [ 253.349091][ T5352] loop4: p5 size 8323072 extends beyond EOD, truncated [ 253.352860][ T5352] loop4: p6 start 8192 is beyond EOD, truncated ./file0/file0[ 253.634484][ T5352] loop4: [POWERTEC] p1 p2 p3 p4 p5 p6 [ 253.636972][ T5352] loop4: p1 size 2037579776 extends beyond EOD, truncated [ 253.641206][ T5352] loop4: p2 start 4294901760 is beyond EOD, truncated [ 253.647732][ T5352] loop4: p3 start 4294836224 is beyond EOD, truncated [ 253.650683][ T5352] loop4: p4 size 327680 extends beyond EOD, truncated [ 253.661245][ T5352] loop4: p5 size 8323072 extends beyond EOD, truncated [ 253.665558][ T5352] loop4: p6 start 8192 is beyond EOD, truncated [ 253.697803][ T5352] loop4: [POWERTEC] p1 p2 p3 p4 p5 p6 [ 253.700369][ T5352] loop4: p1 size 2037579776 extends beyond EOD, truncated [ 253.704604][ T5352] loop4: p2 start 4294901760 is beyond EOD, truncated [ 253.707469][ T5352] loop4: p3 start 4294836224 is beyond EOD, truncated [ 253.710412][ T5352] loop4: p4 size 327680 extends beyond EOD, truncated [ 253.772670][ T5352] loop4: p5 size 8323072 extends beyond EOD, truncated [ 253.822497][ T5352] loop4: p6 start 8192 is beyond EOD, truncated [ 254.009688][ T1231] bond0: (slave dummy0): interface is now down [ 254.022281][ T1231] bond0: (slave dummy0): interface is now down [ 254.025443][ T1231] bond0: now running without any active interface! [ 254.139957][T11196] x_tables: duplicate underflow at hook 1 [ 254.151935][T11196] hub 8-0:1.0: USB hub found [ 254.160550][T11196] hub 8-0:1.0: 1 port detected [ 255.072841][T11220] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 255.088287][T11220] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 255.196050][ T5352] loop4: [POWERTEC] p1 p2 p3 p4 p5 p6 [ 255.198394][ T5352] loop4: p1 size 2037579776 extends beyond EOD, truncated [ 255.201957][ T5352] loop4: p2 start 4294901760 is beyond EOD, truncated [ 255.211787][ T5352] loop4: p3 start 4294836224 is beyond EOD, truncated [ 255.214713][ T5352] loop4: p4 size 327680 extends beyond EOD, truncated [ 255.217565][ T5352] loop4: p5 size 8323072 extends beyond EOD, truncated [ 255.225038][ T5352] loop4: p6 start 8192 is beyond EOD, truncated [ 255.254747][T11224] netlink: 'syz.3.1433': attribute type 1 has an invalid length. [ 255.273470][T11224] bond2: entered promiscuous mode [ 255.275511][T11224] bond2: entered allmulticast mode [ 255.277656][T11224] 8021q: adding VLAN 0 to HW filter on device bond2 [ 255.287369][T11224] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1433'. [ 255.412848][T11224] bond2 (unregistering): Released all slaves [ 255.608453][T11232] vhci_hcd vhci_hcd.0: port 0 already used [ 255.695223][T11238] tipc: Enabled bearer , priority 10 [ 255.752046][T11240] syzkaller0: entered promiscuous mode [ 255.762293][T11240] syzkaller0: entered allmulticast mode [ 256.113421][ T5352] loop4: [POWERTEC] p1 p2 p3 p4 p5 p6 [ 256.115278][ T5352] loop4: p1 size 2037579776 extends beyond EOD, truncated [ 256.118296][ T5352] loop4: p2 start 4294901760 is beyond EOD, truncated [ 256.120467][ T5352] loop4: p3 start 4294836224 is beyond EOD, truncated [ 256.122774][ T5352] loop4: p4 size 327680 extends beyond EOD, truncated [ 256.125732][ T5352] loop4: p5 size 8323072 extends beyond EOD, truncated [ 256.131096][ T5352] loop4: p6 start 8192 is beyond EOD, truncated [ 256.169120][T11248] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1439'. [ 256.812351][ T6078] tipc: Node number set to 1447818763 [ 257.230176][T11275] lo speed is unknown, defaulting to 1000 [ 257.252350][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 257.674554][ T5352] loop4: [POWERTEC] p1 p2 p3 p4 p5 p6 [ 257.676411][ T5352] loop4: p1 size 2037579776 extends beyond EOD, truncated [ 257.692240][ T5352] loop4: p2 start 4294901760 is beyond EOD, truncated [ 257.694708][ T5352] loop4: p3 start 4294836224 is beyond EOD, truncated [ 257.696849][ T5352] loop4: p4 size 327680 extends beyond EOD, truncated [ 257.699587][ T5352] loop4: p5 size 8323072 extends beyond EOD, truncated [ 257.705309][ T5352] loop4: p6 start 8192 is beyond EOD, truncated [ 258.160091][T11295] comedi comedi1: c6xdigio: I/O port conflict (0x2,3) [ 258.186148][ T5352] loop4: [POWERTEC] p1 p2 p3 p4 p5 p6 [ 258.188557][ T5352] loop4: p1 size 2037579776 extends beyond EOD, truncated [ 258.193374][ T5352] loop4: p2 start 4294901760 is beyond EOD, truncated [ 258.196302][ T5352] loop4: p3 start 4294836224 is beyond EOD, truncated [ 258.199080][ T5352] loop4: p4 size 327680 extends beyond EOD, truncated [ 258.204077][ T5352] loop4: p5 size 8323072 extends beyond EOD, truncated [ 258.208016][ T5352] loop4: p6 start 8192 is beyond EOD, truncated [ 258.395539][T11302] debugfs: 'ttyS3' already exists in 'caif_serial' [ 258.419116][T11305] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 258.421005][T11305] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 258.423625][T11305] vhci_hcd vhci_hcd.0: Device attached [ 258.797111][T11309] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1457'. [ 258.912733][ T10] usb 46-1: SetAddress Request (2) to port 0 [ 258.914625][ T10] usb 46-1: new SuperSpeed USB device number 2 using vhci_hcd [ 259.031813][T11306] vhci_hcd: connection reset by peer [ 259.033862][ T1231] vhci_hcd vhci_hcd.4: stop threads [ 259.035569][ T1231] vhci_hcd vhci_hcd.4: release socket [ 259.038269][ T1231] vhci_hcd vhci_hcd.4: disconnect device [ 259.473887][T11336] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1463'. [ 259.578539][T11343] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1465'. [ 259.583606][T11343] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1465'. [ 260.295810][ T1418] ieee802154 phy0 wpan0: encryption failed: -22 [ 260.298367][ T1418] ieee802154 phy1 wpan1: encryption failed: -22 [ 260.528598][ T5352] loop4: [POWERTEC] p1 p2 p3 p4 p5 p6 [ 260.531137][ T5352] loop4: p1 size 2037579776 extends beyond EOD, truncated [ 260.554442][ T5352] loop4: p2 start 4294901760 is beyond EOD, truncated [ 260.557441][ T5352] loop4: p3 start 4294836224 is beyond EOD, truncated [ 260.560373][ T5352] loop4: p4 size 327680 extends beyond EOD, truncated [ 260.586485][ T5352] loop4: p5 size 8323072 extends beyond EOD, truncated [ 260.589464][ T5352] loop4: p6 start 8192 is beyond EOD, truncated [ 260.616250][ T5352] loop4: [POWERTEC] p1 p2 p3 p4 p5 p6 [ 260.618295][ T5352] loop4: p1 size 2037579776 extends beyond EOD, truncated [ 260.621779][ T5352] loop4: p2 start 4294901760 is beyond EOD, truncated [ 260.624138][ T5352] loop4: p3 start 4294836224 is beyond EOD, truncated [ 260.626502][ T5352] loop4: p4 size 327680 extends beyond EOD, truncated [ 260.629383][ T5352] loop4: p5 size 8323072 extends beyond EOD, truncated [ 260.633259][ T5352] loop4: p6 start 8192 is beyond EOD, truncated [ 260.973456][T11405] syzkaller0: entered promiscuous mode [ 260.975834][T11405] syzkaller0: entered allmulticast mode [ 261.019769][T11411] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1479'. [ 261.086723][T11420] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1479'. [ 261.153716][T11425] 9p: Bad value for 'rfdno' [ 261.218590][T11420] dlm: no locking on control device [ 261.665292][ T5352] loop4: [POWERTEC] p1 p2 p3 p4 p5 p6 [ 261.667327][ T5352] loop4: p1 size 2037579776 extends beyond EOD, truncated [ 261.682339][ T5352] loop4: p2 start 4294901760 is beyond EOD, truncated [ 261.684664][ T5352] loop4: p3 start 4294836224 is beyond EOD, truncated [ 261.686929][ T5352] loop4: p4 size 327680 extends beyond EOD, truncated [ 261.693111][ T5352] loop4: p5 size 8323072 extends beyond EOD, truncated [ 261.702619][ T5352] loop4: p6 start 8192 is beyond EOD, truncated [ 261.740310][T11450] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1487'. [ 262.000261][T11466] tipc: Enabled bearer , priority 0 [ 262.037513][T11467] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 262.037905][T11465] tipc: Disabling bearer [ 262.039595][T11467] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 262.079660][T11467] vhci_hcd vhci_hcd.0: Device attached [ 262.133930][T11479] 9p: Bad value for 'rfdno' [ 262.198439][T11474] syzkaller0: entered promiscuous mode [ 262.201104][T11474] syzkaller0: entered allmulticast mode [ 262.593382][T11493] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(13) [ 262.595596][T11493] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 262.603960][T11469] vhci_hcd: connection closed [ 262.604268][ T1142] vhci_hcd vhci_hcd.4: stop threads [ 262.606006][T11493] vhci_hcd vhci_hcd.0: Device attached [ 262.607562][ T1142] vhci_hcd vhci_hcd.4: release socket [ 262.608212][ T1142] vhci_hcd vhci_hcd.4: disconnect device [ 262.621743][T11493] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(15) [ 262.623863][T11493] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 262.628249][T11493] vhci_hcd vhci_hcd.0: Device attached [ 262.632241][T11493] vhci_hcd vhci_hcd.0: pdev(2) rhport(2) sockfd(17) [ 262.634347][T11493] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 262.652428][T11493] vhci_hcd vhci_hcd.0: Device attached [ 262.654911][T11493] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 262.658858][T11493] vhci_hcd vhci_hcd.0: pdev(2) rhport(4) sockfd(21) [ 262.661002][T11493] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 262.672366][T11493] vhci_hcd vhci_hcd.0: Device attached [ 262.691982][T11493] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(23) [ 262.694151][T11493] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 262.699614][T11493] vhci_hcd vhci_hcd.0: Device attached [ 262.703056][T11493] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 262.716155][T11493] vhci_hcd vhci_hcd.0: pdev(2) rhport(6) sockfd(27) [ 262.718327][T11493] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 262.721618][T11493] vhci_hcd vhci_hcd.0: Device attached [ 262.727361][T11493] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 262.774502][T11504] vhci_hcd: connection closed [ 262.774831][T11502] vhci_hcd: connection closed [ 262.775299][T11498] vhci_hcd: connection closed [ 262.776516][ T8908] vhci_hcd vhci_hcd.2: stop threads [ 262.778605][T11496] vhci_hcd: connection closed [ 262.780106][ T8908] vhci_hcd vhci_hcd.2: release socket [ 262.780247][T11500] vhci_hcd: connection closed [ 262.786758][T11494] vhci_hcd: connection closed [ 262.789040][ T8908] vhci_hcd vhci_hcd.2: disconnect device [ 262.792807][ T8908] vhci_hcd vhci_hcd.2: stop threads [ 262.794487][ T8908] vhci_hcd vhci_hcd.2: release socket [ 262.796253][ T8908] vhci_hcd vhci_hcd.2: disconnect device [ 262.798288][ T8908] vhci_hcd vhci_hcd.2: stop threads [ 262.799967][ T8908] vhci_hcd vhci_hcd.2: release socket [ 262.801715][ T8908] vhci_hcd vhci_hcd.2: disconnect device [ 262.804055][ T8908] vhci_hcd vhci_hcd.2: stop threads [ 262.805769][ T8908] vhci_hcd vhci_hcd.2: release socket [ 262.807530][ T8908] vhci_hcd vhci_hcd.2: disconnect device [ 262.809467][ T8908] vhci_hcd vhci_hcd.2: stop threads [ 262.811148][ T8908] vhci_hcd vhci_hcd.2: release socket [ 262.813396][ T8908] vhci_hcd vhci_hcd.2: disconnect device [ 262.815423][ T8908] vhci_hcd vhci_hcd.2: stop threads [ 262.817116][ T8908] vhci_hcd vhci_hcd.2: release socket [ 262.818865][ T8908] vhci_hcd vhci_hcd.2: disconnect device [ 262.842223][ T6027] usb 41-1: new low-speed USB device number 7 using vhci_hcd [ 262.845363][ T6027] usb 41-1: enqueue for inactive port 0 [ 262.912385][ T6027] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 263.059354][T11512] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1499'. [ 263.218747][ T5352] loop4: [POWERTEC] p1 p2 p3 p4 p5 p6 [ 263.221071][ T5352] loop4: p1 size 2037579776 extends beyond EOD, truncated [ 263.224783][ T5352] loop4: p2 start 4294901760 is beyond EOD, truncated [ 263.228050][ T5352] loop4: p3 start 4294836224 is beyond EOD, truncated [ 263.230769][ T5352] loop4: p4 size 327680 extends beyond EOD, truncated [ 263.235496][ T5352] loop4: p5 size 8323072 extends beyond EOD, truncated [ 263.239523][ T5352] loop4: p6 start 8192 is beyond EOD, truncated [ 263.253835][ T1231] wlan1: Trigger new scan to find an IBSS to join [ 263.377288][T11524] syzkaller0: entered promiscuous mode [ 263.380567][T11524] syzkaller0: entered allmulticast mode [ 263.872532][ T5352] loop4: [POWERTEC] p1 p2 p3 p4 p5 p6 [ 263.874257][ T5352] loop4: p1 size 2037579776 extends beyond EOD, truncated [ 263.878045][ T5352] loop4: p2 start 4294901760 is beyond EOD, truncated [ 263.880575][ T5352] loop4: p3 start 4294836224 is beyond EOD, truncated [ 263.883534][ T5352] loop4: p4 size 327680 extends beyond EOD, truncated [ 263.886837][ T5352] loop4: p5 size 8323072 extends beyond EOD, truncated [ 263.889816][ T5352] loop4: p6 start 8192 is beyond EOD, truncated [ 263.972225][ T10] usb 46-1: device descriptor read/8, error -110 [ 264.050815][T11539] x_tables: duplicate underflow at hook 1 [ 264.053109][T11539] hub 8-0:1.0: USB hub found [ 264.054884][T11539] hub 8-0:1.0: 1 port detected [ 264.065480][T11541] netlink: 'syz.3.1510': attribute type 11 has an invalid length. [ 264.145759][T11545] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(13) [ 264.147836][T11545] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 264.150273][T11545] vhci_hcd vhci_hcd.0: Device attached [ 264.155952][T11545] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(15) [ 264.158122][T11545] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 264.160835][T11545] vhci_hcd vhci_hcd.0: Device attached [ 264.165173][T11545] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(17) [ 264.167814][T11545] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 264.170697][T11545] vhci_hcd vhci_hcd.0: Device attached [ 264.173662][T11545] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 264.177347][T11545] vhci_hcd vhci_hcd.0: pdev(3) rhport(4) sockfd(21) [ 264.179226][T11545] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 264.181808][T11545] vhci_hcd vhci_hcd.0: Device attached [ 264.185135][T11545] vhci_hcd vhci_hcd.0: port 0 already used [ 264.187901][T11545] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 264.192209][ T34] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 264.192957][T11545] vhci_hcd vhci_hcd.0: pdev(3) rhport(6) sockfd(27) [ 264.197999][T11545] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 264.201238][T11545] vhci_hcd vhci_hcd.0: Device attached [ 264.206507][T11545] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 264.215981][T11556] vhci_hcd: connection closed [ 264.216330][T11552] vhci_hcd: connection closed [ 264.216579][T11548] vhci_hcd: connection closed [ 264.216665][T11546] vhci_hcd: connection closed [ 264.218416][ T8908] vhci_hcd vhci_hcd.3: stop threads [ 264.218651][T11550] vhci_hcd: connection closed [ 264.226684][ T8908] vhci_hcd vhci_hcd.3: release socket [ 264.229887][ T8908] vhci_hcd vhci_hcd.3: disconnect device [ 264.231975][ T8908] vhci_hcd vhci_hcd.3: stop threads [ 264.234056][ T8908] vhci_hcd vhci_hcd.3: release socket [ 264.235785][ T8908] vhci_hcd vhci_hcd.3: disconnect device [ 264.237733][ T8908] vhci_hcd vhci_hcd.3: stop threads [ 264.239392][ T8908] vhci_hcd vhci_hcd.3: release socket [ 264.241717][ T8908] vhci_hcd vhci_hcd.3: disconnect device [ 264.245435][ T8908] vhci_hcd vhci_hcd.3: stop threads [ 264.247102][ T8908] vhci_hcd vhci_hcd.3: release socket [ 264.248826][ T8908] vhci_hcd vhci_hcd.3: disconnect device [ 264.250826][ T8908] vhci_hcd vhci_hcd.3: stop threads [ 264.253203][ T8908] vhci_hcd vhci_hcd.3: release socket [ 264.255074][ T8908] vhci_hcd vhci_hcd.3: disconnect device [ 264.332546][ T34] usb 9-1: device descriptor read/64, error -71 [ 264.392727][ T10] usb usb46-port1: attempt power cycle [ 264.472192][ T6048] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 264.592188][ T34] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 264.722198][ T34] usb 9-1: device descriptor read/64, error -71 [ 264.832499][ T34] usb usb9-port1: attempt power cycle [ 264.954205][T11587] syzkaller0: entered promiscuous mode [ 264.956566][T11587] syzkaller0: entered allmulticast mode [ 265.172281][ T34] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 265.192564][ T34] usb 9-1: device descriptor read/8, error -71 [ 265.352907][ T5950] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 265.381867][T11598] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1526'. [ 265.382640][T11599] bond1: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 265.385959][T11598] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1526'. [ 265.394719][T11599] bond1 (unregistering): Released all slaves [ 265.432328][ T34] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 265.454312][ T34] usb 9-1: device descriptor read/8, error -71 [ 265.562339][ T34] usb usb9-port1: unable to enumerate USB device [ 265.782600][ T10] usb usb46-port1: unable to enumerate USB device [ 266.292454][ T1231] wlan1: Trigger new scan to find an IBSS to join [ 266.385191][T11617] netlink: 'syz.0.1532': attribute type 5 has an invalid length. [ 266.964873][ T5352] loop4: [POWERTEC] p1 p2 p3 p4 p5 p6 [ 266.967451][ T5352] loop4: p1 size 2037579776 extends beyond EOD, truncated [ 266.971671][ T5352] loop4: p2 start 4294901760 is beyond EOD, truncated [ 266.975045][ T5352] loop4: p3 start 4294836224 is beyond EOD, truncated [ 266.977974][ T5352] loop4: p4 size 327680 extends beyond EOD, truncated [ 266.982218][ T5352] loop4: p5 size 8323072 extends beyond EOD, truncated [ 266.986460][ T5352] loop4: p6 start 8192 is beyond EOD, truncated [ 267.266302][T11642] syzkaller0: entered promiscuous mode [ 267.268771][T11642] syzkaller0: entered allmulticast mode [ 267.437050][T11648] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1543'. [ 267.647403][T11665] fuse: Bad value for 'rootmode' [ 267.739267][T11670] : renamed from bond_slave_0 [ 267.888250][ T5352] loop4: [POWERTEC] p1 p2 p3 p4 p5 p6 [ 267.893076][ T5352] loop4: p1 size 2037579776 extends beyond EOD, truncated [ 267.905010][ T5352] loop4: p2 start 4294901760 is beyond EOD, truncated [ 267.908500][ T5352] loop4: p3 start 4294836224 is beyond EOD, truncated [ 267.914114][ T5352] loop4: p4 size 327680 extends beyond EOD, truncated [ 267.920531][ T5352] loop4: p5 size 8323072 extends beyond EOD, truncated [ 267.926783][ T5352] loop4: p6 start 8192 is beyond EOD, truncated [ 268.760416][ T5352] loop4: [POWERTEC] p1 p2 p3 p4 p5 p6 [ 268.762410][ T5352] loop4: p1 size 2037579776 extends beyond EOD, truncated [ 268.771318][ T5352] loop4: p2 start 4294901760 is beyond EOD, truncated [ 268.773660][T11689] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1557'. [ 268.776398][ T5352] loop4: p3 start 4294836224 is beyond EOD, truncated [ 268.778553][ T5352] loop4: p4 size 327680 extends beyond EOD, truncated [ 268.782302][T11689] openvswitch: netlink: EtherType 5dd is less than min 600 [ 268.785019][ T5352] loop4: p5 size 8323072 extends beyond EOD, truncated [ 268.802613][ T5352] loop4: p6 start 8192 is beyond EOD, truncated [ 268.861335][ T5352] loop4: [POWERTEC] p1 p2 p3 p4 p5 p6 [ 268.867149][ T5352] loop4: p1 size 2037579776 extends beyond EOD, truncated [ 268.875347][ T5352] loop4: p2 start 4294901760 is beyond EOD, truncated [ 268.877533][ T5352] loop4: p3 start 4294836224 is beyond EOD, truncated [ 268.879695][ T5352] loop4: p4 size 327680 extends beyond EOD, truncated [ 268.883514][ T5352] loop4: p5 size 8323072 extends beyond EOD, truncated [ 268.887410][ T5352] loop4: p6 start 8192 is beyond EOD, truncated [ 268.906755][T11697] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1560'. [ 268.921196][T11697] erspan0: entered promiscuous mode [ 268.923974][T11697] macvtap1: entered promiscuous mode [ 268.926355][T11697] macvtap1: entered allmulticast mode [ 268.928072][T11697] erspan0: entered allmulticast mode [ 268.933886][T11697] erspan0: left allmulticast mode [ 268.935627][T11697] erspan0: left promiscuous mode [ 268.939067][ T5352] loop4: [POWERTEC] p1 p2 p3 p4 p5 p6 [ 268.940158][T11698] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1560'. [ 268.940979][ T5352] loop4: p1 size 2037579776 extends beyond EOD, [ 268.944178][T11698] erspan0: entered promiscuous mode [ 268.945455][ T5352] truncated [ 268.946243][T11698] erspan0: entered allmulticast mode [ 268.953779][ T5352] loop4: p2 start 4294901760 is beyond EOD, truncated [ 268.956046][ T5352] loop4: p3 start 4294836224 is beyond EOD, truncated [ 268.958201][ T5352] loop4: p4 size 327680 extends beyond EOD, truncated [ 268.962178][ T5352] loop4: p5 size 8323072 extends beyond EOD, truncated [ 268.966118][ T5352] loop4: p6 start 8192 is beyond EOD, truncated [ 269.106508][ T5352] loop4: [POWERTEC] p1 p2 p3 p4 p5 p6 [ 269.108453][ T5352] loop4: p1 size 2037579776 extends beyond EOD, truncated [ 269.111569][ T5352] loop4: p2 start 4294901760 is beyond EOD, truncated [ 269.114115][ T5352] loop4: p3 start 4294836224 is beyond EOD, truncated [ 269.116299][ T5352] loop4: p4 size 327680 extends beyond EOD, truncated [ 269.120218][ T5352] loop4: p5 size 8323072 extends beyond EOD, truncated [ 269.124157][ T5352] loop4: p6 start 8192 is beyond EOD, truncated [ 269.483335][ T1142] wlan1: Trigger new scan to find an IBSS to join [ 269.650569][T11720] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1565'. [ 269.718149][T11724] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1566'. [ 269.721884][T11724] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1566'. [ 270.225630][ T5352] loop4: [POWERTEC] p1 p2 p3 p4 p5 p6 [ 270.227541][ T5352] loop4: p1 size 2037579776 extends beyond EOD, truncated [ 270.230987][ T5352] loop4: p2 start 4294901760 is beyond EOD, truncated [ 270.234341][ T5352] loop4: p3 start 4294836224 is beyond EOD, truncated [ 270.242154][ T5352] loop4: p4 size 327680 extends beyond EOD, truncated [ 270.245069][ T5352] loop4: p5 size 8323072 extends beyond EOD, truncated [ 270.252257][ T5352] loop4: p6 start 8192 is beyond EOD, truncated [ 270.300375][T11737] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1571'. [ 270.500407][T11748] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1574'. [ 270.582490][ T1231] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 271.370258][T11760] lo speed is unknown, defaulting to 1000 [ 271.583490][T11768] syzkaller0: entered promiscuous mode [ 271.585380][T11768] syzkaller0: entered allmulticast mode [ 271.659353][T11754] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1576'. [ 271.659434][ T5352] loop4: [POWERTEC] p1 p2 p3 p4 p5 p6 [ 271.664825][ T5352] loop4: p1 size 2037579776 extends beyond EOD, truncated [ 271.670097][ T5352] loop4: p2 start 4294901760 is beyond EOD, truncated [ 271.680074][ T5352] loop4: p3 start 4294836224 is beyond EOD, truncated [ 271.691156][ T5352] loop4: p4 size 327680 extends beyond EOD, truncated [ 271.761081][ T5352] loop4: p5 size 8323072 extends beyond EOD, truncated [ 271.770025][ T5352] loop4: p6 start 8192 is beyond EOD, truncated [ 271.812291][ C2] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 271.846809][T11775] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(13) [ 271.848998][T11775] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 271.851541][T11775] vhci_hcd vhci_hcd.0: Device attached [ 271.854908][T11775] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(15) [ 271.857081][T11775] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 271.859794][T11775] vhci_hcd vhci_hcd.0: Device attached [ 271.865191][T11775] vhci_hcd vhci_hcd.0: pdev(2) rhport(2) sockfd(17) [ 271.867989][T11775] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 271.871339][T11775] vhci_hcd vhci_hcd.0: Device attached [ 271.874851][T11775] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 271.880875][T11775] vhci_hcd vhci_hcd.0: pdev(2) rhport(4) sockfd(21) [ 271.883657][T11775] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 271.887037][T11775] vhci_hcd vhci_hcd.0: Device attached [ 271.891854][T11775] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(23) [ 271.894636][T11775] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 271.898098][T11775] vhci_hcd vhci_hcd.0: Device attached [ 271.901520][T11775] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 271.908444][T11775] vhci_hcd vhci_hcd.0: pdev(2) rhport(6) sockfd(27) [ 271.910801][T11775] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 271.913886][T11775] vhci_hcd vhci_hcd.0: Device attached [ 271.917630][T11775] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 271.929785][T11789] vhci_hcd: connection closed [ 271.930081][T11786] vhci_hcd: connection closed [ 271.931794][T11784] vhci_hcd: connection closed [ 271.931955][T11782] vhci_hcd: connection closed [ 271.933575][ T1143] vhci_hcd vhci_hcd.2: stop threads [ 271.935247][T11777] vhci_hcd: connection closed [ 271.936584][T11780] vhci_hcd: connection closed [ 271.939717][ T1143] vhci_hcd vhci_hcd.2: release socket [ 271.945113][ T1143] vhci_hcd vhci_hcd.2: disconnect device [ 271.947821][ T1143] vhci_hcd vhci_hcd.2: stop threads [ 271.949545][ T1143] vhci_hcd vhci_hcd.2: release socket [ 271.951441][ T1143] vhci_hcd vhci_hcd.2: disconnect device [ 271.955063][ T1143] vhci_hcd vhci_hcd.2: stop threads [ 271.958224][ T1143] vhci_hcd vhci_hcd.2: release socket [ 271.960098][ T1143] vhci_hcd vhci_hcd.2: disconnect device [ 271.963177][ T1143] vhci_hcd vhci_hcd.2: stop threads [ 271.965091][ T1143] vhci_hcd vhci_hcd.2: release socket [ 271.967091][ T1143] vhci_hcd vhci_hcd.2: disconnect device [ 271.969287][ T1143] vhci_hcd vhci_hcd.2: stop threads [ 271.971060][ T1143] vhci_hcd vhci_hcd.2: release socket [ 271.977532][ T1143] vhci_hcd vhci_hcd.2: disconnect device [ 271.979929][ T1143] vhci_hcd vhci_hcd.2: stop threads [ 271.981959][ T1143] vhci_hcd vhci_hcd.2: release socket [ 271.987345][ T1143] vhci_hcd vhci_hcd.2: disconnect device [ 272.060542][ T5352] loop4: [POWERTEC] p1 p2 p3 p4 p5 p6 [ 272.063433][ T5352] loop4: p1 size 2037579776 extends beyond EOD, truncated [ 272.069543][ T5352] loop4: p2 start 4294901760 is beyond EOD, truncated [ 272.073685][ T5352] loop4: p3 start 4294836224 is beyond EOD, truncated [ 272.078246][ T5352] loop4: p4 size 327680 extends beyond EOD, truncated [ 272.086474][ T5352] loop4: p5 size 8323072 extends beyond EOD, truncated [ 272.094357][ T5352] loop4: p6 start 8192 is beyond EOD, truncated [ 272.530924][T11797] netlink: 'syz.2.1584': attribute type 10 has an invalid length. [ 272.593291][ T5352] loop4: [POWERTEC] p1 p2 p3 p4 p5 p6 [ 272.595178][ T5352] loop4: p1 size 2037579776 extends beyond EOD, truncated [ 272.598535][ T5352] loop4: p2 start 4294901760 is beyond EOD, truncated [ 272.600712][ T5352] loop4: p3 start 4294836224 is beyond EOD, truncated [ 272.605007][ T5352] loop4: p4 size 327680 extends beyond EOD, truncated [ 272.607858][ T5352] loop4: p5 size 8323072 extends beyond EOD, truncated [ 272.610673][ T5352] loop4: p6 start 8192 is beyond EOD, truncated [ 272.750621][T11804] IPVS: persistence engine module ip_vs_pe_s not found [ 272.825276][ T5352] loop4: [POWERTEC] p1 p2 p3 p4 p5 p6 [ 272.827209][ T5352] loop4: p1 size 2037579776 extends beyond EOD, truncated [ 272.842408][ T5352] loop4: p2 start 4294901760 is beyond EOD, truncated [ 272.845589][ T5352] loop4: p3 start 4294836224 is beyond EOD, truncated [ 272.848424][ T5352] loop4: p4 size 327680 extends beyond EOD, truncated [ 272.852677][ T5352] loop4: p5 size 8323072 extends beyond EOD, truncated [ 272.856742][ T5352] loop4: p6 start 8192 is beyond EOD, truncated [ 273.352981][T11823] netlink: 'syz.3.1585': attribute type 10 has an invalid length. [ 273.665093][ T5352] loop4: [POWERTEC] p1 p2 p3 p4 p5 p6 [ 273.667566][ T5352] loop4: p1 size 2037579776 extends beyond EOD, truncated [ 273.671786][ T5352] loop4: p2 start 4294901760 is beyond EOD, truncated [ 273.680749][ T5352] loop4: p3 start 4294836224 is beyond EOD, truncated [ 273.683171][T11819] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1585'. [ 273.683739][ T5352] loop4: p4 size 327680 extends beyond EOD, truncated [ 273.686461][T11819] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1585'. [ 273.693101][ T61] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 273.698146][ T5352] loop4: p5 size 8323072 extends beyond EOD, truncated [ 273.701783][ T5352] loop4: p6 start 8192 is beyond EOD, truncated [ 273.850679][ T5352] loop4: [POWERTEC] p1 p2 p3 p4 p5 p6 [ 273.853375][ T5352] loop4: p1 size 2037579776 extends beyond EOD, truncated [ 273.856878][ T5352] loop4: p2 start 4294901760 is beyond EOD, truncated [ 273.858871][ T5352] loop4: p3 start 4294836224 is beyond EOD, truncated [ 273.860933][ T5352] loop4: p4 size 327680 extends beyond EOD, truncated [ 273.864653][ T5352] loop4: p5 size 8323072 extends beyond EOD, truncated [ 273.868503][ T5352] loop4: p6 start 8192 is beyond EOD, truncated [ 273.943489][T11828] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(13) [ 273.946450][T11828] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 273.963441][T11828] vhci_hcd vhci_hcd.0: Device attached [ 273.985177][T11828] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(15) [ 273.987336][T11828] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 273.990367][T11835] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1594'. [ 273.994031][T11828] vhci_hcd vhci_hcd.0: Device attached [ 274.000470][T11835] 0ªX¹¦À: renamed from caif0 [ 274.004334][T11828] vhci_hcd vhci_hcd.0: pdev(4) rhport(2) sockfd(17) [ 274.006429][T11828] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 274.009054][T11828] vhci_hcd vhci_hcd.0: Device attached [ 274.009858][T11835] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 274.048095][T11841] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 274.113666][T11847] syzkaller0: entered promiscuous mode [ 274.115559][T11847] syzkaller0: entered allmulticast mode [ 274.121196][T11841] vhci_hcd vhci_hcd.0: pdev(4) rhport(4) sockfd(22) [ 274.123318][T11841] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 274.126029][T11844] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(25) [ 274.128100][T11844] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 274.130721][T11844] vhci_hcd vhci_hcd.0: Device attached [ 274.133692][T11841] vhci_hcd vhci_hcd.0: Device attached [ 274.136992][T11828] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 274.141327][T11828] vhci_hcd vhci_hcd.0: pdev(4) rhport(6) sockfd(27) [ 274.143618][T11828] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 274.146575][T11828] vhci_hcd vhci_hcd.0: Device attached [ 274.153403][T11828] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 274.160977][T11854] vhci_hcd: connection closed [ 274.161059][T11849] vhci_hcd: connection closed [ 274.161596][T11837] vhci_hcd: connection closed [ 274.161709][T11829] vhci_hcd: connection closed [ 274.162822][T11832] vhci_hcd: connection closed [ 274.164967][ T61] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 274.166503][T11848] vhci_hcd: connection closed [ 274.181710][ T227] vhci_hcd vhci_hcd.4: stop threads [ 274.186311][ T227] vhci_hcd vhci_hcd.4: release socket [ 274.188508][ T227] vhci_hcd vhci_hcd.4: disconnect device [ 274.190879][ T227] vhci_hcd vhci_hcd.4: stop threads [ 274.193845][ T227] vhci_hcd vhci_hcd.4: release socket [ 274.196059][ T227] vhci_hcd vhci_hcd.4: disconnect device [ 274.198433][ T227] vhci_hcd vhci_hcd.4: stop threads [ 274.200504][ T227] vhci_hcd vhci_hcd.4: release socket [ 274.203313][ T227] vhci_hcd vhci_hcd.4: disconnect device [ 274.205400][ T227] vhci_hcd vhci_hcd.4: stop threads [ 274.207069][ T227] vhci_hcd vhci_hcd.4: release socket [ 274.208787][ T227] vhci_hcd vhci_hcd.4: disconnect device [ 274.210679][ T227] vhci_hcd vhci_hcd.4: stop threads [ 274.213356][ T227] vhci_hcd vhci_hcd.4: release socket [ 274.215126][ T227] vhci_hcd vhci_hcd.4: disconnect device [ 274.217268][ T227] vhci_hcd vhci_hcd.4: stop threads [ 274.218925][ T227] vhci_hcd vhci_hcd.4: release socket [ 274.223605][ T227] vhci_hcd vhci_hcd.4: disconnect device [ 274.252322][ T10] usb 45-1: new low-speed USB device number 6 using vhci_hcd [ 274.254860][ T10] usb 45-1: enqueue for inactive port 0 [ 274.432269][ T10] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 274.830925][ T5352] loop4: [POWERTEC] p1 p2 p3 p4 p5 p6 [ 274.833482][ T5352] loop4: p1 size 2037579776 extends beyond EOD, truncated [ 274.840865][ T5352] loop4: p2 start 4294901760 is beyond EOD, truncated [ 274.850981][ T5352] loop4: p3 start 4294836224 is beyond EOD, truncated [ 274.861860][ T5352] loop4: p4 size 327680 extends beyond EOD, truncated [ 274.866603][ T5352] loop4: p5 size 8323072 extends beyond EOD, truncated [ 274.872046][ T5352] loop4: p6 start 8192 is beyond EOD, truncated [ 274.900136][ T5352] loop4: [POWERTEC] p1 p2 p3 p4 p5 p6 [ 274.902127][ T5352] loop4: p1 size 2037579776 extends beyond EOD, truncated [ 274.905366][ T5352] loop4: p2 start 4294901760 is beyond EOD, truncated [ 274.909711][ T5352] loop4: p3 start 4294836224 is beyond EOD, truncated [ 274.912158][ T5352] loop4: p4 size 327680 extends beyond EOD, truncated [ 274.917344][ T5352] loop4: p5 size 8323072 extends beyond EOD, truncated [ 274.923718][ T5352] loop4: p6 start 8192 is beyond EOD, truncated [ 274.958960][ T5352] loop4: [POWERTEC] p1 p2 p3 p4 p5 p6 [ 274.960991][ T5352] loop4: p1 size 2037579776 extends beyond EOD, truncated [ 274.965410][ T5352] loop4: p2 start 4294901760 is beyond EOD, truncated [ 274.967699][ T5352] loop4: p3 start 4294836224 is beyond EOD, truncated [ 274.969918][ T5352] loop4: p4 size 327680 extends beyond EOD, truncated [ 274.974677][ T5352] loop4: p5 size 8323072 extends beyond EOD, truncated [ 274.977775][ T5352] loop4: p6 start 8192 is beyond EOD, truncated [ 275.923325][T11904] syzkaller0: entered promiscuous mode [ 275.925191][T11904] syzkaller0: entered allmulticast mode [ 275.930170][ T5352] loop4: [POWERTEC] p1 p2 p3 p4 p5 p6 [ 275.931975][ T5352] loop4: p1 size 2037579776 extends beyond EOD, truncated [ 275.942775][ T5352] loop4: p2 start 4294901760 is beyond EOD, truncated [ 275.944938][ T5352] loop4: p3 start 4294836224 is beyond EOD, truncated [ 275.947078][ T5352] loop4: p4 size 327680 extends beyond EOD, truncated [ 275.949839][ T5352] loop4: p5 size 8323072 extends beyond EOD, truncated [ 275.954275][ T5352] loop4: p6 start 8192 is beyond EOD, truncated [ 275.978951][T11906] syzkaller0: entered promiscuous mode [ 275.989953][T11906] syzkaller0: entered allmulticast mode [ 276.130201][ T5352] loop4: [POWERTEC] p1 p2 p3 p4 p5 p6 [ 276.133143][ T5352] loop4: p1 size 2037579776 extends beyond EOD, truncated [ 276.137648][ T5352] loop4: p2 start 4294901760 is beyond EOD, truncated [ 276.140477][ T5352] loop4: p3 start 4294836224 is beyond EOD, truncated [ 276.146388][T11913] bond1: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 276.150575][ T5352] loop4: p4 size 327680 extends beyond EOD, truncated [ 276.151125][T11913] bond1 (unregistering): Released all slaves [ 276.155435][ T5352] loop4: p5 size 8323072 extends beyond EOD, truncated [ 276.161914][ T5352] loop4: p6 start 8192 is beyond EOD, truncated [ 276.527198][ T5352] loop4: [POWERTEC] p1 p2 p3 p4 p5 p6 [ 276.533851][ T5352] loop4: p1 size 2037579776 extends beyond EOD, truncated [ 276.541741][ T6526] bond0: (slave bond_slave_0): interface is now down [ 276.545323][ T5352] loop4: p2 start 4294901760 is beyond EOD, truncated [ 276.545499][ T6526] bond0: (slave bond_slave_1): interface is now down [ 276.553827][ T5352] loop4: p3 start 4294836224 is beyond EOD, truncated [ 276.560066][ T5352] loop4: p4 size 327680 extends beyond EOD, truncated [ 276.561855][ T6526] bond0: now running without any active interface! [ 276.567077][ T5352] loop4: p5 size 8323072 extends beyond EOD, truncated [ 276.576804][ T5352] loop4: p6 start 8192 is beyond EOD, truncated [ 276.607268][ T5352] loop4: [POWERTEC] p1 p2 p3 p4 p5 p6 [ 276.609883][ T5352] loop4: p1 size 2037579776 extends beyond EOD, truncated [ 276.615207][ T5352] loop4: p2 start 4294901760 is beyond EOD, truncated [ 276.619548][ T5352] loop4: p3 start 4294836224 is beyond EOD, truncated [ 276.623413][ T5352] loop4: p4 size 327680 extends beyond EOD, truncated [ 276.627777][ T5352] loop4: p5 size 8323072 extends beyond EOD, truncated [ 276.632469][ T5352] loop4: p6 start 8192 is beyond EOD, truncated [ 276.670370][T11939] netlink: 'syz.0.1624': attribute type 3 has an invalid length. [ 276.724129][T11948] syzkaller0: entered promiscuous mode [ 276.726333][T11948] syzkaller0: entered allmulticast mode [ 277.201765][T11959] syzkaller1: entered allmulticast mode [ 277.575012][T11972] tmpfs: Bad value for 'mpol' [ 277.636926][T11973] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 277.639007][T11973] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 277.647351][T11973] vhci_hcd vhci_hcd.0: Device attached [ 277.932227][ T34] usb 42-1: SetAddress Request (10) to port 0 [ 277.934950][ T34] usb 42-1: new SuperSpeed USB device number 10 using vhci_hcd [ 278.382571][ T5352] loop4: [POWERTEC] p1 p2 p3 p4 p5 p6 [ 278.390308][ T5352] loop4: p1 size 2037579776 extends beyond EOD, truncated [ 278.396269][T11974] vhci_hcd: connection reset by peer [ 278.398685][ T1231] vhci_hcd vhci_hcd.2: stop threads [ 278.400473][ T1231] vhci_hcd vhci_hcd.2: release socket [ 278.402368][ T1231] vhci_hcd vhci_hcd.2: disconnect device [ 278.402393][ T5352] loop4: p2 start 4294901760 is beyond EOD, truncated [ 278.411769][T11990] netlink: 'syz.4.1639': attribute type 1 has an invalid length. [ 278.412236][ T5352] loop4: p3 start 4294836224 is beyond EOD, truncated [ 278.420560][ T5352] loop4: p4 size 327680 extends beyond EOD, truncated [ 278.427529][T11990] bond1: entered promiscuous mode [ 278.429708][T11990] bond1: entered allmulticast mode [ 278.432266][T11990] 8021q: adding VLAN 0 to HW filter on device bond1 [ 278.433080][ T5352] loop4: p5 size 8323072 extends beyond EOD, truncated [ 278.443660][ T5352] loop4: p6 start 8192 is beyond EOD, truncated [ 278.446967][T11990] erspan1: entered allmulticast mode [ 278.452795][T11990] bond1: (slave erspan1): making interface the new active one [ 278.455479][T11990] erspan1: entered promiscuous mode [ 278.457893][T11990] bond1: (slave erspan1): Enslaving as an active interface with an up link [ 278.464230][T11990] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1639'. [ 278.527131][T11990] bond1 (unregistering): (slave erspan1): Releasing active interface [ 278.530395][T11990] erspan1: left promiscuous mode [ 278.535205][T11990] bond1 (unregistering): Released all slaves [ 278.830377][T11995] syz.4.1640: page allocation failure: order:2, mode:0xcc1(GFP_KERNEL|GFP_DMA), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 278.835421][T11995] CPU: 1 UID: 0 PID: 11995 Comm: syz.4.1640 Not tainted syzkaller #0 PREEMPT(full) [ 278.835436][T11995] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 278.835442][T11995] Call Trace: [ 278.835446][T11995] [ 278.835451][T11995] dump_stack_lvl+0x16c/0x1f0 [ 278.835472][T11995] warn_alloc+0x248/0x3a0 [ 278.835486][T11995] ? __pfx_warn_alloc+0x10/0x10 [ 278.835497][T11995] ? __mutex_unlock_slowpath+0x161/0x790 [ 278.835523][T11995] __alloc_frozen_pages_noprof+0xe9b/0x2430 [ 278.835542][T11995] ? stack_trace_save+0x8e/0xc0 [ 278.835558][T11995] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 278.835576][T11995] ? kasan_save_track+0x14/0x30 [ 278.835590][T11995] ? __kasan_kmalloc+0xaa/0xb0 [ 278.835602][T11995] ? __kmalloc_noprof+0x33d/0x910 [ 278.835617][T11995] ? comedi_isadma_alloc+0x10d/0x6e0 [ 278.835632][T11995] ? pcl816_attach+0x901/0xb20 [ 278.835651][T11995] __alloc_pages_noprof+0xb/0x1b0 [ 278.835664][T11995] __dma_direct_alloc_pages.constprop.0+0x4c5/0x950 [ 278.835683][T11995] ? __pfx___dma_direct_alloc_pages.constprop.0+0x10/0x10 [ 278.835701][T11995] ? dma_alloc_from_dev_coherent+0x2e4/0x570 [ 278.835713][T11995] dma_direct_alloc+0x8f/0x580 [ 278.835730][T11995] dma_alloc_attrs+0x185/0x2b0 [ 278.835743][T11995] ? __pfx_dma_alloc_attrs+0x10/0x10 [ 278.835754][T11995] ? __kmalloc_noprof+0x35d/0x910 [ 278.835765][T11995] ? dma_direct_supported+0xca/0x220 [ 278.835783][T11995] comedi_isadma_alloc+0x3de/0x6e0 [ 278.835800][T11995] ? __pfx_comedi_isadma_alloc+0x10/0x10 [ 278.835816][T11995] ? request_threaded_irq+0x2c8/0x3e0 [ 278.835828][T11995] pcl816_attach+0x901/0xb20 [ 278.835842][T11995] comedi_device_attach+0x3b3/0x900 [ 278.835858][T11995] do_devconfig_ioctl+0x1b1/0x710 [ 278.835874][T11995] ? comedi_unlocked_ioctl+0x167/0x2eb0 [ 278.835884][T11995] ? __pfx_do_devconfig_ioctl+0x10/0x10 [ 278.835905][T11995] ? kasan_save_track+0x14/0x30 [ 278.835918][T11995] ? kasan_save_free_info+0x3b/0x60 [ 278.835928][T11995] ? __kasan_slab_free+0x5f/0x80 [ 278.835941][T11995] ? kfree+0x2f8/0x6e0 [ 278.835950][T11995] ? tomoyo_path_number_perm+0x470/0x580 [ 278.835962][T11995] ? security_file_ioctl_compat+0x9b/0x240 [ 278.835974][T11995] ? __ia32_compat_sys_ioctl+0xc3/0x370 [ 278.835987][T11995] ? __do_fast_syscall_32+0xe8/0x680 [ 278.836004][T11995] comedi_unlocked_ioctl+0x1582/0x2eb0 [ 278.836018][T11995] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 278.836037][T11995] ? kasan_quarantine_put+0x10a/0x240 [ 278.836050][T11995] ? lockdep_hardirqs_on+0x7c/0x110 [ 278.836067][T11995] ? find_held_lock+0x2b/0x80 [ 278.836080][T11995] ? tomoyo_path_number_perm+0x295/0x580 [ 278.836094][T11995] ? tomoyo_path_number_perm+0x18d/0x580 [ 278.836106][T11995] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 278.836120][T11995] comedi_compat_ioctl+0x1ed/0xda0 [ 278.836130][T11995] ? __pfx_comedi_compat_ioctl+0x10/0x10 [ 278.836140][T11995] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 278.836158][T11995] ? do_vfs_ioctl+0x128/0x14f0 [ 278.836170][T11995] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 278.836186][T11995] ? find_held_lock+0x2b/0x80 [ 278.836198][T11995] ? hook_file_ioctl_common+0x144/0x410 [ 278.836214][T11995] ? __fget_files+0x20e/0x3c0 [ 278.836227][T11995] ? fdget_pos+0x290/0x370 [ 278.836244][T11995] ? __pfx_comedi_compat_ioctl+0x10/0x10 [ 278.836255][T11995] __ia32_compat_sys_ioctl+0x242/0x370 [ 278.836269][T11995] __do_fast_syscall_32+0xe8/0x680 [ 278.836286][T11995] do_fast_syscall_32+0x32/0x80 [ 278.836302][T11995] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 278.836315][T11995] RIP: 0023:0xf704d579 [ 278.836324][T11995] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 278.836334][T11995] RSP: 002b:00000000f543d55c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 278.836344][T11995] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000040946400 [ 278.836351][T11995] RDX: 00000000800000c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 278.836357][T11995] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 278.836362][T11995] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 278.836368][T11995] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 278.836381][T11995] [ 278.836385][T11995] Mem-Info: [ 279.032140][T11995] active_anon:2734 inactive_anon:1581 isolated_anon:0 [ 279.032140][T11995] active_file:4305 inactive_file:13094 isolated_file:0 [ 279.032140][T11995] unevictable:1768 dirty:286 writeback:0 [ 279.032140][T11995] slab_reclaimable:6773 slab_unreclaimable:66652 [ 279.032140][T11995] mapped:23262 shmem:2880 pagetables:1261 [ 279.032140][T11995] sec_pagetables:314 bounce:0 [ 279.032140][T11995] kernel_misc_reclaimable:0 [ 279.032140][T11995] free:60247 free_pcp:0 free_cma:0 [ 279.146122][T11995] Node 0 active_anon:588kB inactive_anon:4kB active_file:0kB inactive_file:156kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:548kB dirty:4kB writeback:0kB shmem:4068kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:9088kB pagetables:1976kB sec_pagetables:1148kB all_unreclaimable? no Balloon:0kB [ 279.183827][T11995] Node 0 DMA free:2728kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 279.198437][T11995] lowmem_reserve[]: 0 289 289 289 289 [ 279.200661][T11995] Node 0 DMA: 40*4kB (U) 21*8kB (UE) 8*16kB (UE) 15*32kB (UE) 4*64kB (UE) 0*128kB 0*256kB 1*512kB (E) 1*1024kB (E) 0*2048kB 0*4096kB = 2728kB [ 279.206236][T11995] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 279.209332][T11995] Node 0 hugepages_total=1 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 279.212338][T11995] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 279.215435][T11995] Node 1 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 279.230350][T11995] 22819 total pagecache pages [ 279.232054][T11995] 711 pages in swap cache [ 279.233700][T11995] Free swap = 106640kB [ 279.235164][T11995] Total swap = 124996kB [ 279.236554][T11995] 524155 pages RAM [ 279.237821][T11995] 0 pages HighMem/MovableOnly [ 279.239361][T11995] 209057 pages reserved [ 279.240787][T11995] 0 pages cma reserved [ 279.299670][ T5352] loop4: [POWERTEC] p1 p2 p3 p4 p5 p6 [ 279.303688][ T5352] loop4: p1 size 2037579776 extends beyond EOD, truncated [ 279.306744][ T5352] loop4: p2 start 4294901760 is beyond EOD, truncated [ 279.309212][ T5352] loop4: p3 start 4294836224 is beyond EOD, truncated [ 279.312018][ T5352] loop4: p4 size 327680 extends beyond EOD, truncated [ 279.320820][ T5352] loop4: p5 size 8323072 extends beyond EOD, truncated [ 279.327378][ T5352] loop4: p6 start 8192 is beyond EOD, truncated [ 279.332538][T12010] syzkaller0: entered promiscuous mode [ 279.334874][T12010] syzkaller0: entered allmulticast mode [ 279.354413][T12011] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 279.369965][T12011] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 279.550761][ T5352] loop4: [POWERTEC] p1 p2 p3 p4 p5 p6 [ 279.553339][ T5352] loop4: p1 size 2037579776 extends beyond EOD, truncated [ 279.557130][ T5352] loop4: p2 start 4294901760 is beyond EOD, truncated [ 279.559894][ T5352] loop4: p3 start 4294836224 is beyond EOD, truncated [ 279.564269][ T5352] loop4: p4 size 327680 extends beyond EOD, truncated [ 279.568026][ T5352] loop4: p5 size 8323072 extends beyond EOD, truncated [ 279.574586][ T5352] loop4: p6 start 8192 is beyond EOD, truncated [ 279.802521][ T5352] loop4: [POWERTEC] p1 p2 p3 p4 p5 p6 [ 279.804425][ T5352] loop4: p1 size 2037579776 extends beyond EOD, truncated [ 279.823603][ T5352] loop4: p2 start 4294901760 is beyond EOD, truncated [ 279.832357][ T5352] loop4: p3 start 4294836224 is beyond EOD, truncated [ 279.835394][ T5352] loop4: p4 size 327680 extends beyond EOD, truncated [ 279.843712][ T5352] loop4: p5 size 8323072 extends beyond EOD, truncated [ 279.862535][ T5352] loop4: p6 start 8192 is beyond EOD, truncated [ 279.896739][ T5352] loop4: [POWERTEC] p1 p2 p3 p4 p5 p6 [ 279.899178][ T5352] loop4: p1 size 2037579776 extends beyond EOD, truncated [ 279.907150][ T5352] loop4: p2 start 4294901760 is beyond EOD, truncated [ 279.909995][ T5352] loop4: p3 start 4294836224 is beyond EOD, truncated [ 279.913129][ T5352] loop4: p4 size 327680 extends beyond EOD, truncated [ 279.916820][ T5352] loop4: p5 size 8323072 extends beyond EOD, truncated [ 279.923181][ T5352] loop4: p6 start 8192 is beyond EOD, truncated [ 281.163662][T12044] sctp: [Deprecated]: syz.3.1655 (pid 12044) Use of struct sctp_assoc_value in delayed_ack socket option. [ 281.163662][T12044] Use struct sctp_sack_info instead [ 281.678513][ T5352] loop4: [POWERTEC] p1 p2 p3 p4 p5 p6 [ 281.681121][ T5352] loop4: p1 size 2037579776 extends beyond EOD, truncated [ 281.685532][ T5352] loop4: p2 start 4294901760 is beyond EOD, truncated [ 281.688577][ T5352] loop4: p3 start 4294836224 is beyond EOD, truncated [ 281.691326][ T5352] loop4: p4 size 327680 extends beyond EOD, truncated [ 281.698689][T12047] syzkaller0: entered promiscuous mode [ 281.698692][ T5352] loop4: p5 size 8323072 extends beyond EOD, truncated [ 281.700487][T12047] syzkaller0: entered allmulticast mode [ 281.710920][ T5352] loop4: p6 start 8192 is beyond EOD, truncated [ 281.929298][ T5352] loop4: [POWERTEC] p1 p2 p3 p4 p5 p6 [ 281.938133][ T5352] loop4: p1 size 2037579776 extends beyond EOD, truncated [ 281.944292][ T5352] loop4: p2 start 4294901760 is beyond EOD, truncated [ 281.946826][ T5352] loop4: p3 start 4294836224 is beyond EOD, truncated [ 281.948954][ T5352] loop4: p4 size 327680 extends beyond EOD, truncated [ 281.961824][ T5352] loop4: p5 size 8323072 extends beyond EOD, truncated [ 281.964969][ T5352] loop4: p6 start 8192 is beyond EOD, truncated [ 282.281755][T12071] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1664'. [ 282.285264][T12071] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1664'. [ 282.479928][T12078] netlink: 'syz.3.1667': attribute type 10 has an invalid length. [ 282.487769][T12078] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 282.492300][ T6283] bond0: (slave dummy0): interface is now down [ 282.495268][ T6283] bond0: now running without any active interface! [ 283.012264][ T34] usb 42-1: device descriptor read/8, error -110 [ 283.477759][T12101] geneve4: entered allmulticast mode [ 283.633183][ T34] usb usb42-port1: attempt power cycle [ 283.740884][ T40] audit: type=1326 audit(1766000386.692:505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12129 comm="syz.0.1679" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf702d579 code=0x0 [ 283.804915][T12133] openvswitch: netlink: IPv4 tun info is not correct [ 284.223539][ T34] usb usb42-port1: unable to enumerate USB device [ 284.880216][T12141] syzkaller0: entered promiscuous mode [ 284.881994][T12141] syzkaller0: entered allmulticast mode [ 285.204543][ T10] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 285.243617][ T5352] loop4: [POWERTEC] p1 p2 p3 p4 p5 p6 [ 285.246163][ T5352] loop4: p1 size 2037579776 extends beyond EOD, truncated [ 285.250288][ T5352] loop4: p2 start 4294901760 is beyond EOD, truncated [ 285.254713][ T5352] loop4: p3 start 4294836224 is beyond EOD, truncated [ 285.256972][ T5352] loop4: p4 size 327680 extends beyond EOD, truncated [ 285.260647][ T5352] loop4: p5 size 8323072 extends beyond EOD, truncated [ 285.265200][ T5352] loop4: p6 start 8192 is beyond EOD, truncated [ 285.305701][T12152] tipc: Enabled bearer , priority 0 [ 285.308925][T12151] tipc: Resetting bearer [ 285.362168][ T10] usb 8-1: Using ep0 maxpacket: 8 [ 285.367754][ T10] usb 8-1: config 0 interface 0 has no altsetting 0 [ 285.372194][ T10] usb 8-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 285.377629][ T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.391033][ T10] usb 8-1: config 0 descriptor?? [ 285.656051][T12156] netlink: 'syz.3.1683': attribute type 1 has an invalid length. [ 285.899143][ T10] mcp2221 0003:04D8:00DD.0006: unknown main item tag 0x0 [ 285.901405][ T10] mcp2221 0003:04D8:00DD.0006: unknown main item tag 0x0 [ 285.903917][ T10] mcp2221 0003:04D8:00DD.0006: unknown main item tag 0x0 [ 285.906222][ T10] mcp2221 0003:04D8:00DD.0006: unknown main item tag 0x0 [ 285.908527][ T10] mcp2221 0003:04D8:00DD.0006: unknown main item tag 0x0 [ 285.911176][ T10] mcp2221 0003:04D8:00DD.0006: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 286.415498][T12151] tipc: Disabling bearer [ 286.419598][T12154] tipc: Enabled bearer , priority 0 [ 286.537026][ T10] usb 8-1: USB disconnect, device number 3 [ 286.549061][ T5352] loop4: [POWERTEC] p1 p2 p3 p4 p5 p6 [ 286.550935][ T5352] loop4: p1 size 2037579776 extends beyond EOD, truncated [ 286.558748][ T5352] loop4: p2 start 4294901760 is beyond EOD, truncated [ 286.560986][ T5352] loop4: p3 start 4294836224 is beyond EOD, truncated [ 286.567319][ T5352] loop4: p4 size 327680 extends beyond EOD, truncated [ 286.574278][ T5352] loop4: p5 size 8323072 extends beyond EOD, truncated [ 286.583610][ T5352] loop4: p6 start 8192 is beyond EOD, truncated [ 287.745763][T12186] netlink: 'syz.2.1693': attribute type 1 has an invalid length. [ 287.785205][T12186] 8021q: adding VLAN 0 to HW filter on device bond1 [ 287.794747][T12189] vhci_hcd vhci_hcd.0: port 0 already used [ 287.822704][T12194] bond1: (slave geneve2): making interface the new active one [ 287.825791][T12194] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 287.842573][ T8908] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.849876][ T8908] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.860158][ T8908] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.866183][T12196] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1695'. [ 287.870264][ T8908] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.880599][T12196] bridge0: port 2(bridge_slave_1) entered disabled state [ 287.883383][ T5352] loop4: [POWERTEC] p1 p2 p3 p4 p5 p6 [ 287.884148][T12196] bridge0: port 1(bridge_slave_0) entered disabled state [ 287.885885][ T5352] loop4: p1 size 2037579776 extends beyond EOD, truncated [ 287.891898][ T5352] loop4: p2 start 4294901760 is beyond EOD, truncated [ 287.894448][ T5352] loop4: p3 start 4294836224 is beyond EOD, truncated [ 287.897261][ T5352] loop4: p4 size 327680 extends beyond EOD, truncated [ 287.922425][ T5352] loop4: p5 size 8323072 extends beyond EOD, truncated [ 287.926622][ T5352] loop4: p6 start 8192 is beyond EOD, truncated [ 287.965973][ T5352] loop4: [POWERTEC] p1 p2 p3 p4 p5 p6 [ 287.970148][ T5352] loop4: p1 size 2037579776 extends beyond EOD, truncated [ 288.158602][ T5352] loop4: p2 start 4294901760 is beyond EOD, truncated [ 288.160876][ T5352] loop4: p3 start 4294836224 is beyond EOD, truncated [ 288.163306][ T5352] loop4: p4 size 327680 extends beyond EOD, truncated [ 288.166973][ T5352] loop4: p5 size 8323072 extends beyond EOD, truncated [ 288.383335][ T5352] loop4: p6 start 8192 is beyond EOD, truncated [ 288.802597][T12213] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1708'. [ 288.850661][ T5352] loop4: [POWERTEC] p1 p2 p3 p4 p5 p6 [ 288.855123][ T5352] loop4: p1 size 2037579776 extends beyond EOD, truncated [ 288.858193][ T5352] loop4: p2 start 4294901760 is beyond EOD, truncated [ 288.860443][ T5352] loop4: p3 start 4294836224 is beyond EOD, truncated [ 288.864038][ T5352] loop4: p4 size 327680 extends beyond EOD, truncated [ 288.866921][ T5352] loop4: p5 size 8323072 extends beyond EOD, truncated [ 288.869796][ T5352] loop4: p6 start 8192 is beyond EOD, truncated [ 288.937306][T12220] tipc: Enabled bearer , priority 0 [ 288.981247][ T5352] loop4: [POWERTEC] p1 p2 p3 p4 p5 p6 [ 288.983247][ T5352] loop4: p1 size 2037579776 extends beyond EOD, truncated [ 288.986210][ T5352] loop4: p2 start 4294901760 is beyond EOD, truncated [ 288.988346][ T5352] loop4: p3 start 4294836224 is beyond EOD, truncated [ 288.990470][ T5352] loop4: p4 size 327680 extends beyond EOD, truncated [ 288.993637][ T5352] loop4: p5 size 8323072 extends beyond EOD, truncated [ 288.996700][ T5352] loop4: p6 start 8192 is beyond EOD, truncated [ 288.997022][T12216] syzkaller0: entered promiscuous mode [ 289.000779][T12216] syzkaller0: entered allmulticast mode [ 289.003591][T12216] tipc: Resetting bearer [ 289.057615][T12214] tipc: Resetting bearer [ 289.069878][T12228] netlink: 'syz.0.1703': attribute type 1 has an invalid length. [ 289.241711][ T5352] loop4: [POWERTEC] p1 p2 p3 p4 p5 p6 [ 289.245570][ T5352] loop4: p1 size 2037579776 extends beyond EOD, truncated [ 289.249908][ T5352] loop4: p2 start 4294901760 is beyond EOD, truncated [ 289.253557][ T5352] loop4: p3 start 4294836224 is beyond EOD, truncated [ 289.256625][ T5352] loop4: p4 size 327680 extends beyond EOD, truncated [ 289.261189][ T5352] loop4: p5 size 8323072 extends beyond EOD, truncated [ 289.265384][ T5352] loop4: p6 start 8192 is beyond EOD, truncated [ 289.379500][ T5352] loop4: [POWERTEC] p1 p2 p3 p4 p5 p6 [ 289.381535][ T5352] loop4: p1 size 2037579776 extends beyond EOD, truncated [ 289.384817][ T5352] loop4: p2 start 4294901760 is beyond EOD, truncated [ 289.387026][ T5352] loop4: p3 start 4294836224 is beyond EOD, truncated [ 289.389249][ T5352] loop4: p4 size 327680 extends beyond EOD, truncated [ 289.392567][ T5352] loop4: p5 size 8323072 extends beyond EOD, truncated [ 289.396126][ T5352] loop4: p6 start 8192 is beyond EOD, truncated [ 289.426546][T12240] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1709'. [ 289.432416][T12240] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1709'. [ 289.469085][ T5352] loop4: [POWERTEC] p1 p2 p3 p4 p5 p6 [ 289.471702][ T5352] loop4: p1 size 2037579776 extends beyond EOD, truncated [ 289.476713][ T5352] loop4: p2 start 4294901760 is beyond EOD, truncated [ 289.479602][ T5352] loop4: p3 start 4294836224 is beyond EOD, truncated [ 289.482628][ T5352] loop4: p4 size 327680 extends beyond EOD, truncated [ 289.486831][ T5352] loop4: p5 size 8323072 extends beyond EOD, truncated [ 289.490958][ T5352] loop4: p6 start 8192 is beyond EOD, truncated [ 290.079112][T12214] tipc: Disabling bearer [ 290.101774][T12228] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 290.105504][T12235] wg1: entered promiscuous mode [ 290.121183][T12235] wg1: entered allmulticast mode [ 290.353964][ T5352] loop4: [POWERTEC] p1 p2 p3 p4 p5 p6 [ 290.356428][ T5352] loop4: p1 size 2037579776 extends beyond EOD, truncated [ 290.361100][ T5352] loop4: p2 start 4294901760 is beyond EOD, truncated [ 290.364393][ T5352] loop4: p3 start 4294836224 is beyond EOD, truncated [ 290.367234][ T5352] loop4: p4 size 327680 extends beyond EOD, truncated [ 290.372399][ T5352] loop4: p5 size 8323072 extends beyond EOD, truncated [ 290.377225][ T5352] loop4: p6 start 8192 is beyond EOD, truncated [ 290.471116][T12266] lo speed is unknown, defaulting to 1000 [ 290.541152][ T5352] loop4: [POWERTEC] p1 p2 p3 p4 p5 p6 [ 290.544557][ T5352] loop4: p1 size 2037579776 extends beyond EOD, truncated [ 290.548689][ T5352] loop4: p2 start 4294901760 is beyond EOD, truncated [ 290.551592][ T5352] loop4: p3 start 4294836224 is beyond EOD, truncated [ 290.557770][ T5352] loop4: p4 size 327680 extends beyond EOD, truncated [ 290.562584][ T5352] loop4: p5 size 8323072 extends beyond EOD, truncated [ 290.565881][ T5352] loop4: p6 start 8192 is beyond EOD, truncated [ 290.590305][T12274] bond1: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 290.596518][T12274] bond1 (unregistering): Released all slaves [ 290.615869][T12276] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1720'. [ 290.618721][T12276] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1720'. [ 290.622336][ T34] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 290.653960][T12278] lo speed is unknown, defaulting to 1000 [ 290.696261][ T5352] loop4: [POWERTEC] p1 p2 p3 p4 p5 p6 [ 290.698768][ T5352] loop4: p1 size 2037579776 extends beyond EOD, truncated [ 290.703624][ T5352] loop4: p2 start 4294901760 is beyond EOD, truncated [ 290.706524][ T5352] loop4: p3 start 4294836224 is beyond EOD, truncated [ 290.708868][ T5352] loop4: p4 size 327680 extends beyond EOD, truncated [ 290.712539][ T5352] loop4: p5 size 8323072 extends beyond EOD, truncated [ 290.715443][ T5352] loop4: p6 start 8192 is beyond EOD, truncated [ 290.716412][T12280] netlink: 'syz.4.1721': attribute type 4 has an invalid length. [ 290.725721][T12280] netlink: 'syz.4.1721': attribute type 4 has an invalid length. [ 290.787310][ T34] usb 8-1: New USB device found, idVendor=0830, idProduct=0064, bcdDevice=13.2b [ 290.791006][ T34] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 290.793663][ T34] usb 8-1: Product: syz [ 290.795013][ T34] usb 8-1: Manufacturer: syz [ 290.796498][ T34] usb 8-1: SerialNumber: syz [ 290.948089][T12280] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 290.954375][T12280] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 290.980881][T12280] tipc: Resetting bearer [ 291.034816][T12280] erspan0: left allmulticast mode [ 291.043697][ T227] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.051196][ T227] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.054343][ T227] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.057307][ T227] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.653043][T12313] fuse: Bad value for 'rootmode' [ 291.796566][ T5352] loop4: [POWERTEC] p1 p2 p3 p4 p5 p6 [ 291.799586][ T5352] loop4: p1 size 2037579776 extends beyond EOD, truncated [ 291.807757][ T5352] loop4: p2 start 4294901760 is beyond EOD, truncated [ 291.809974][ T5352] loop4: p3 start 4294836224 is beyond EOD, truncated [ 291.813034][ T5352] loop4: p4 size 327680 extends beyond EOD, truncated [ 291.818065][ T5352] loop4: p5 size 8323072 extends beyond EOD, truncated [ 291.823890][ T5352] loop4: p6 start 8192 is beyond EOD, truncated [ 292.304608][T12330] comedi comedi0: Minor 47 could not be opened [ 292.310737][T12330] netlink: 'syz.2.1737': attribute type 1 has an invalid length. [ 292.381070][T12330] bond2: entered promiscuous mode [ 292.383345][T12330] 8021q: adding VLAN 0 to HW filter on device bond2 [ 293.170351][ T5352] loop4: [POWERTEC] p1 p2 p3 p4 p5 p6 [ 293.172307][ T5352] loop4: p1 size 2037579776 extends beyond EOD, truncated [ 293.175305][ T5352] loop4: p2 start 4294901760 is beyond EOD, truncated [ 293.177612][ T5352] loop4: p3 start 4294836224 is beyond EOD, truncated [ 293.179786][ T5352] loop4: p4 size 327680 extends beyond EOD, truncated [ 293.182809][ T5352] loop4: p5 size 8323072 extends beyond EOD, truncated [ 293.186324][ T5352] loop4: p6 start 8192 is beyond EOD, truncated [ 293.205012][ T5352] loop4: [POWERTEC] p1 p2 p3 p4 p5 p6 [ 293.206865][ T5352] loop4: p1 size 2037579776 extends beyond EOD, truncated [ 293.209828][ T5352] loop4: p2 start 4294901760 is beyond EOD, truncated [ 293.212177][ T5352] loop4: p3 start 4294836224 is beyond EOD, truncated [ 293.214394][ T5352] loop4: p4 size 327680 extends beyond EOD, truncated [ 293.217314][ T5352] loop4: p5 size 8323072 extends beyond EOD, truncated [ 293.220378][ T5352] loop4: p6 start 8192 is beyond EOD, truncated [ 293.236164][ T5352] loop4: [POWERTEC] p1 p2 p3 p4 p5 p6 [ 293.238129][ T5352] loop4: p1 size 2037579776 extends beyond EOD, truncated [ 293.238231][T12341] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1742'. [ 293.243986][T12341] openvswitch: netlink: Key type 4358 is out of range max 32 [ 293.244114][ T5352] loop4: p2 start 4294901760 is beyond EOD, truncated [ 293.249771][ T5352] loop4: p3 start 4294836224 is beyond EOD, truncated [ 293.277071][ T34] usb 8-1: USB disconnect, device number 4 [ 293.286619][ T5352] loop4: p4 size 327680 extends beyond EOD, truncated [ 293.289695][ T5352] loop4: p5 size 8323072 extends beyond EOD, truncated [ 293.292626][ T5352] loop4: p6 start 8192 is beyond EOD, truncated [ 293.308240][ T5352] loop4: [POWERTEC] p1 p2 p3 p4 p5 p6 [ 293.310150][ T5352] loop4: p1 size 2037579776 extends beyond EOD, truncated [ 293.313213][ T5352] loop4: p2 start 4294901760 is beyond EOD, truncated [ 293.315443][ T5352] loop4: p3 start 4294836224 is beyond EOD, truncated [ 293.317611][ T5352] loop4: p4 size 327680 extends beyond EOD, truncated [ 293.320356][ T5352] loop4: p5 size 8323072 extends beyond EOD, truncated [ 293.324933][ T5352] loop4: p6 start 8192 is beyond EOD, truncated [ 293.847734][T12363] netlink: 272 bytes leftover after parsing attributes in process `syz.0.1750'. [ 293.971661][T12369] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1752'. [ 293.975135][T12369] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1752'. [ 294.332960][T12377] lo speed is unknown, defaulting to 1000 [ 294.333670][T12379] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1755'. [ 294.388117][T12381] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1756'. [ 294.398918][T12381] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 294.453976][T12381] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 294.459811][T12381] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 294.678466][ T40] audit: type=1326 audit(1766000397.632:506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12370 comm="syz.2.1753" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7ff6579 code=0x0 [ 295.101621][T12386] loop2: detected capacity change from 0 to 7 [ 295.131310][T12386] Dev loop2: unable to read RDB block 7 [ 295.135820][ T5352] loop4: [POWERTEC] p1 p2 p3 p4 p5 p6 [ 295.138190][T12386] loop2: unable to read partition table [ 295.140217][T12386] loop2: partition table beyond EOD, truncated [ 295.142325][ T5352] loop4: p1 size 2037579776 extends beyond EOD, truncated [ 295.143455][ T5352] loop4: p2 start 4294901760 is beyond EOD, truncated [ 295.145000][T12386] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 295.151223][ T5352] loop4: p3 start 4294836224 is beyond EOD, truncated [ 295.154581][ T5352] loop4: p4 size 327680 extends beyond EOD, truncated [ 295.158605][ T5352] loop4: p5 size 8323072 extends beyond EOD, truncated [ 295.163904][ T5352] loop4: p6 start 8192 is beyond EOD, truncated [ 295.212342][T12380] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 295.563296][T12392] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1759'. [ 295.590900][T12395] netlink: 'syz.3.1761': attribute type 2 has an invalid length. [ 295.601237][T12389] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8) [ 295.603368][T12389] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 295.617831][T12389] vhci_hcd vhci_hcd.0: Device attached [ 295.642549][T12401] bond2: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 295.650262][T12401] bond2 (unregistering): Released all slaves [ 295.759759][T12411] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1764'. [ 295.892346][ T6027] usb 46-1: SetAddress Request (6) to port 0 [ 295.895179][ T6027] usb 46-1: new SuperSpeed USB device number 6 using vhci_hcd [ 295.986658][T12415] random: crng reseeded on system resumption [ 296.052155][T12397] vhci_hcd: connection reset by peer [ 296.055306][ T1231] vhci_hcd vhci_hcd.4: stop threads [ 296.057503][ T1231] vhci_hcd vhci_hcd.4: release socket [ 296.059916][ T1231] vhci_hcd vhci_hcd.4: disconnect device [ 296.668152][T12417] bond3: peer notification delay (512) is not a multiple of miimon (5), value rounded to 510 ms [ 296.675137][T12421] xt_hashlimit: invalid rate [ 296.696980][T12417] bond3 (unregistering): Released all slaves [ 296.711234][ T5352] loop4: [POWERTEC] p1 p2 p3 p4 p5 p6 [ 296.715143][ T5352] loop4: p1 size 2037579776 extends beyond EOD, truncated [ 296.720319][ T5352] loop4: p2 start 4294901760 is beyond EOD, truncated [ 296.726334][ T5352] loop4: p3 start 4294836224 is beyond EOD, truncated [ 296.729073][ T5352] loop4: p4 size 327680 extends beyond EOD, truncated [ 296.732144][ T5352] loop4: p5 size 8323072 extends beyond EOD, truncated [ 296.736016][ T5352] loop4: p6 start 8192 is beyond EOD, truncated [ 296.773012][ T5352] loop4: [POWERTEC] p1 p2 p3 p4 p5 p6 [ 296.775312][ T5352] loop4: p1 size 2037579776 extends beyond EOD, truncated [ 296.982868][ T5352] loop4: p2 start 4294901760 is beyond EOD, truncated [ 296.985424][ T5352] loop4: p3 start 4294836224 is beyond EOD, truncated [ 296.988379][ T5352] loop4: p4 size 327680 extends beyond EOD, truncated [ 296.992587][ T5352] loop4: p5 size 8323072 extends beyond EOD, truncated [ 297.007319][ T5352] loop4: p6 start 8192 is beyond EOD, truncated [ 297.883391][ T5352] loop4: [POWERTEC] p1 p2 p3 p4 p5 p6 [ 297.885244][ T5352] loop4: p1 size 2037579776 extends beyond EOD, truncated [ 297.892461][ T5352] loop4: p2 start 4294901760 is beyond EOD, truncated [ 297.894615][ T5352] loop4: p3 start 4294836224 is beyond EOD, truncated [ 297.896731][ T5352] loop4: p4 size 327680 extends beyond EOD, truncated [ 297.912243][ T5352] loop4: p5 size 8323072 extends beyond EOD, truncated [ 297.915023][ T5352] loop4: p6 start 8192 is beyond EOD, truncated [ 298.360953][ T5352] loop4: [POWERTEC] p1 p2 p3 p4 p5 p6 [ 298.362902][ T5352] loop4: p1 size 2037579776 extends beyond EOD, truncated [ 298.366092][ T5352] loop4: p2 start 4294901760 is beyond EOD, truncated [ 298.368255][ T5352] loop4: p3 start 4294836224 is beyond EOD, truncated [ 298.370368][ T5352] loop4: p4 size 327680 extends beyond EOD, truncated [ 298.373706][ T5352] loop4: p5 size 8323072 extends beyond EOD, truncated [ 298.376724][ T5352] loop4: p6 start 8192 is beyond EOD, truncated [ 299.421984][ T5352] loop4: [POWERTEC] p1 p2 p3 p4 p5 p6 [ 299.423944][ T5352] loop4: p1 size 2037579776 extends beyond EOD, truncated [ 299.427813][ T5352] loop4: p2 start 4294901760 is beyond EOD, truncated [ 299.430591][ T5352] loop4: p3 start 4294836224 is beyond EOD, truncated [ 299.434356][ T5352] loop4: p4 size 327680 extends beyond EOD, truncated [ 299.438813][ T5352] loop4: p5 size 8323072 extends beyond EOD, truncated [ 299.443878][ T5352] loop4: p6 start 8192 is beyond EOD, truncated [ 299.484505][T12472] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1784'. [ 299.487365][T12472] 0ªX¹¦À: renamed from caif0 [ 299.509973][T12472] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 299.537810][ T5352] loop4: [POWERTEC] p1 p2 p3 p4 p5 p6 [ 299.539620][ T5352] loop4: p1 size 2037579776 extends beyond EOD, truncated [ 299.545975][ T5352] loop4: p2 start 4294901760 is beyond EOD, truncated [ 299.548759][ T5352] loop4: p3 start 4294836224 is beyond EOD, truncated [ 299.551463][ T5352] loop4: p4 size 327680 extends beyond EOD, truncated [ 299.558500][ T5352] loop4: p5 size 8323072 extends beyond EOD, truncated [ 299.562637][ T5352] loop4: p6 start 8192 is beyond EOD, truncated [ 299.568817][T12477] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1787'. [ 299.572168][T12477] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1787'. [ 300.509053][ T5352] loop4: [POWERTEC] p1 p2 p3 p4 p5 p6 [ 300.510912][ T5352] loop4: p1 size 2037579776 extends beyond EOD, truncated [ 300.514490][ T5352] loop4: p2 start 4294901760 is beyond EOD, truncated [ 300.516693][ T5352] loop4: p3 start 4294836224 is beyond EOD, truncated [ 300.518822][ T5352] loop4: p4 size 327680 extends beyond EOD, truncated [ 300.521579][ T5352] loop4: p5 size 8323072 extends beyond EOD, truncated [ 300.524494][ T5352] loop4: p6 start 8192 is beyond EOD, truncated [ 300.673667][T12517] syzkaller0: entered promiscuous mode [ 300.673683][T12517] syzkaller0: entered allmulticast mode [ 300.762164][ T6029] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 300.912132][ T6029] usb 9-1: Using ep0 maxpacket: 8 [ 300.913536][ T6029] usb 9-1: config 0 interface 0 has no altsetting 0 [ 300.913555][ T6029] usb 9-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 300.913566][ T6029] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 300.914790][ T6029] usb 9-1: config 0 descriptor?? [ 301.055951][ T6027] usb 46-1: device descriptor read/8, error -110 [ 301.138018][T12510] netlink: 'syz.4.1797': attribute type 1 has an invalid length. [ 301.397228][ T6029] mcp2221 0003:04D8:00DD.0007: unknown main item tag 0x0 [ 301.399488][ T6029] mcp2221 0003:04D8:00DD.0007: unknown main item tag 0x0 [ 301.401717][ T6029] mcp2221 0003:04D8:00DD.0007: unknown main item tag 0x0 [ 301.406658][ T6029] mcp2221 0003:04D8:00DD.0007: unknown main item tag 0x0 [ 301.408949][ T6029] mcp2221 0003:04D8:00DD.0007: unknown main item tag 0x0 [ 301.411428][ T6029] mcp2221 0003:04D8:00DD.0007: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 301.473966][ T6027] usb usb46-port1: attempt power cycle [ 301.873931][ T10] usb 9-1: USB disconnect, device number 12 [ 301.967783][ T5352] loop4: [POWERTEC] p1 p2 p3 p4 p5 p6 [ 301.970217][ T5352] loop4: p1 size 2037579776 extends beyond EOD, truncated [ 301.982846][ T5352] loop4: p2 start 4294901760 is beyond EOD, truncated [ 301.985597][ T5352] loop4: p3 start 4294836224 is beyond EOD, truncated [ 301.987704][ T5352] loop4: p4 size 327680 extends beyond EOD, truncated [ 301.990419][ T5352] loop4: p5 size 8323072 extends beyond EOD, truncated [ 301.995613][ T5352] loop4: p6 start 8192 is beyond EOD, truncated [ 302.083049][ T6027] usb usb46-port1: unable to enumerate USB device [ 302.099202][T12551] bond1: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 302.108945][T12551] bond1 (unregistering): Released all slaves [ 302.250620][T12562] netlink: 'syz.3.1814': attribute type 1 has an invalid length. [ 302.259797][T12562] netlink: 'syz.3.1814': attribute type 2 has an invalid length. [ 302.355360][T12574] syzkaller1: entered allmulticast mode [ 302.371572][T12565] netlink: 'syz.0.1815': attribute type 3 has an invalid length. [ 302.379094][ T5352] loop4: [POWERTEC] p1 p2 p3 p4 p5 p6 [ 302.381534][ T5352] loop4: p1 size 2037579776 extends beyond EOD, truncated [ 302.397486][ T5352] loop4: p2 start 4294901760 is beyond EOD, truncated [ 302.400283][ T5352] loop4: p3 start 4294836224 is beyond EOD, truncated [ 302.412258][ T5352] loop4: p4 size 327680 extends beyond EOD, truncated [ 302.416237][ T5352] loop4: p5 size 8323072 extends beyond EOD, truncated [ 302.432588][ T5352] loop4: p6 start 8192 is beyond EOD, truncated [ 302.479568][ T5352] loop4: [POWERTEC] p1 p2 p3 p4 p5 p6 [ 302.481387][ T5352] loop4: p1 size 2037579776 extends beyond EOD, truncated [ 302.484393][ T5352] loop4: p2 start 4294901760 is beyond EOD, truncated [ 302.486542][ T5352] loop4: p3 start 4294836224 is beyond EOD, truncated [ 302.488615][ T5352] loop4: p4 size 327680 extends beyond EOD, truncated [ 302.491601][ T5352] loop4: p5 size 8323072 extends beyond EOD, truncated [ 302.496215][ T5352] loop4: p6 start 8192 is beyond EOD, truncated [ 302.772325][ T6029] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 302.932717][ T6029] usb 9-1: Using ep0 maxpacket: 8 [ 302.936444][ T6029] usb 9-1: config 0 interface 0 has no altsetting 0 [ 302.943180][ T6029] usb 9-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 302.947040][ T6029] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 302.953725][ T6029] usb 9-1: config 0 descriptor?? [ 303.245173][T12578] netlink: 'syz.4.1817': attribute type 1 has an invalid length. [ 303.433660][ T5952] Bluetooth: hci4: command 0x0405 tx timeout [ 303.447870][T12592] tmpfs: Bad value for 'mpol' [ 303.479552][ T6029] mcp2221 0003:04D8:00DD.0008: unknown main item tag 0x0 [ 303.485228][ T6029] mcp2221 0003:04D8:00DD.0008: unknown main item tag 0x0 [ 303.488027][ T6029] mcp2221 0003:04D8:00DD.0008: unknown main item tag 0x0 [ 303.490831][ T6029] mcp2221 0003:04D8:00DD.0008: unknown main item tag 0x0 [ 303.495479][ T6029] mcp2221 0003:04D8:00DD.0008: unknown main item tag 0x0 [ 303.498382][ T6029] mcp2221 0003:04D8:00DD.0008: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 303.690001][ T6029] usb 9-1: USB disconnect, device number 13 [ 303.782589][ T5352] loop4: [POWERTEC] p1 p2 p3 p4 p5 p6 [ 303.784516][ T5352] loop4: p1 size 2037579776 extends beyond EOD, truncated [ 303.787522][ T5352] loop4: p2 start 4294901760 is beyond EOD, truncated [ 303.789627][ T5352] loop4: p3 start 4294836224 is beyond EOD, truncated [ 303.791730][ T5352] loop4: p4 size 327680 extends beyond EOD, truncated [ 303.794684][ T5352] loop4: p5 size 8323072 extends beyond EOD, truncated [ 303.797523][ T5352] loop4: p6 start 8192 is beyond EOD, truncated [ 303.812244][ T6526] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 304.337302][T12605] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(13) [ 304.339430][T12605] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 304.341878][T12605] vhci_hcd vhci_hcd.0: Device attached [ 304.351907][T12605] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(15) [ 304.354285][T12605] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 304.356829][T12605] vhci_hcd vhci_hcd.0: Device attached [ 304.360315][T12605] vhci_hcd vhci_hcd.0: pdev(2) rhport(2) sockfd(17) [ 304.362414][T12605] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 304.365362][T12605] vhci_hcd vhci_hcd.0: Device attached [ 304.368380][T12605] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 304.384163][T12605] vhci_hcd vhci_hcd.0: pdev(2) rhport(4) sockfd(21) [ 304.386862][T12605] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 304.389942][T12605] vhci_hcd vhci_hcd.0: Device attached [ 304.394080][T12605] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(23) [ 304.396369][T12605] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 304.399200][T12605] vhci_hcd vhci_hcd.0: Device attached [ 304.402954][T12605] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 304.407244][T12605] vhci_hcd vhci_hcd.0: pdev(2) rhport(6) sockfd(27) [ 304.409400][T12605] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 304.411867][T12605] vhci_hcd vhci_hcd.0: Device attached [ 304.415291][T12605] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 304.429260][T12618] vhci_hcd: connection closed [ 304.429576][ T6526] vhci_hcd vhci_hcd.2: stop threads [ 304.429593][T12616] vhci_hcd: connection closed [ 304.429938][T12609] vhci_hcd: connection closed [ 304.429976][T12607] vhci_hcd: connection closed [ 304.431588][T12614] vhci_hcd: connection closed [ 304.431742][ T6526] vhci_hcd vhci_hcd.2: release socket [ 304.433788][T12611] vhci_hcd: connection closed [ 304.442720][ T6526] vhci_hcd vhci_hcd.2: disconnect device [ 304.446127][ T6526] vhci_hcd vhci_hcd.2: stop threads [ 304.447704][ T6526] vhci_hcd vhci_hcd.2: release socket [ 304.449485][ T6526] vhci_hcd vhci_hcd.2: disconnect device [ 304.451497][ T6526] vhci_hcd vhci_hcd.2: stop threads [ 304.453787][ T6526] vhci_hcd vhci_hcd.2: release socket [ 304.455549][ T6526] vhci_hcd vhci_hcd.2: disconnect device [ 304.457459][ T6526] vhci_hcd vhci_hcd.2: stop threads [ 304.459153][ T6526] vhci_hcd vhci_hcd.2: release socket [ 304.460960][ T6526] vhci_hcd vhci_hcd.2: disconnect device [ 304.464483][ T6526] vhci_hcd vhci_hcd.2: stop threads [ 304.466186][ T6526] vhci_hcd vhci_hcd.2: release socket [ 304.472375][ T6526] vhci_hcd vhci_hcd.2: disconnect device [ 304.474265][ T6526] vhci_hcd vhci_hcd.2: stop threads [ 304.475975][ T6526] vhci_hcd vhci_hcd.2: release socket [ 304.477704][ T6526] vhci_hcd vhci_hcd.2: disconnect device [ 304.706476][ T5352] loop4: [POWERTEC] p1 p2 p3 p4 p5 p6 [ 304.709246][ T5352] loop4: p1 size 2037579776 extends beyond EOD, truncated [ 304.717619][ T5352] loop4: p2 start 4294901760 is beyond EOD, truncated [ 304.720549][ T5352] loop4: p3 start 4294836224 is beyond EOD, truncated [ 304.723317][ T5352] loop4: p4 size 327680 extends beyond EOD, truncated [ 304.729440][ T5352] loop4: p5 size 8323072 extends beyond EOD, truncated [ 304.734010][ T5352] loop4: p6 start 8192 is beyond EOD, truncated [ 304.734597][T12625] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(13) [ 304.738394][T12625] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 304.740956][T12625] vhci_hcd vhci_hcd.0: Device attached [ 304.745503][T12625] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(15) [ 304.747633][T12625] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 304.750195][T12625] vhci_hcd vhci_hcd.0: Device attached [ 304.753260][T12625] vhci_hcd vhci_hcd.0: pdev(4) rhport(2) sockfd(17) [ 304.755403][T12625] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 304.757784][T12625] vhci_hcd vhci_hcd.0: Device attached [ 304.760196][T12625] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 304.764830][T12625] vhci_hcd vhci_hcd.0: pdev(4) rhport(4) sockfd(21) [ 304.766871][T12625] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 304.769244][T12625] vhci_hcd vhci_hcd.0: Device attached [ 304.773207][T12625] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(24) [ 304.775300][T12625] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 304.777714][T12625] vhci_hcd vhci_hcd.0: Device attached [ 304.779964][T12625] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 304.785989][T12625] vhci_hcd vhci_hcd.0: pdev(4) rhport(6) sockfd(28) [ 304.788253][T12625] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 304.809740][T12625] vhci_hcd vhci_hcd.0: Device attached [ 304.820622][T12625] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 304.837552][T12636] vhci_hcd: connection closed [ 304.837757][ T1142] vhci_hcd vhci_hcd.4: stop threads [ 304.838488][T12632] vhci_hcd: connection closed [ 304.838749][T12630] vhci_hcd: connection closed [ 304.839038][T12626] vhci_hcd: connection closed [ 304.839395][T12634] vhci_hcd: connection closed [ 304.839494][T12628] vhci_hcd: connection closed [ 304.847237][ T1142] vhci_hcd vhci_hcd.4: release socket [ 304.850405][ T1142] vhci_hcd vhci_hcd.4: disconnect device [ 304.852600][ T1142] vhci_hcd vhci_hcd.4: stop threads [ 304.854277][ T1142] vhci_hcd vhci_hcd.4: release socket [ 304.855952][ T1142] vhci_hcd vhci_hcd.4: disconnect device [ 304.857917][ T1142] vhci_hcd vhci_hcd.4: stop threads [ 304.859693][ T1142] vhci_hcd vhci_hcd.4: release socket [ 304.861383][ T1142] vhci_hcd vhci_hcd.4: disconnect device [ 304.863955][ T1142] vhci_hcd vhci_hcd.4: stop threads [ 304.865651][ T1142] vhci_hcd vhci_hcd.4: release socket [ 304.867301][ T1142] vhci_hcd vhci_hcd.4: disconnect device [ 304.869207][ T1142] vhci_hcd vhci_hcd.4: stop threads [ 304.870822][ T1142] vhci_hcd vhci_hcd.4: release socket [ 304.872689][ T1142] vhci_hcd vhci_hcd.4: disconnect device [ 304.874680][ T1142] vhci_hcd vhci_hcd.4: stop threads [ 304.876283][ T1142] vhci_hcd vhci_hcd.4: release socket [ 304.877994][ T1142] vhci_hcd vhci_hcd.4: disconnect device [ 305.050235][T12641] netlink: 'syz.2.1831': attribute type 16 has an invalid length. [ 305.053325][T12641] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1831'. [ 305.418422][ T5352] loop4: [POWERTEC] p1 p2 p3 p4 p5 p6 [ 305.420611][ T5352] loop4: p1 size 2037579776 extends beyond EOD, truncated [ 305.432566][ T5352] loop4: p2 start 4294901760 is beyond EOD, truncated [ 305.434832][ T5352] loop4: p3 start 4294836224 is beyond EOD, truncated [ 305.437358][ T5352] loop4: p4 size 327680 extends beyond EOD, truncated [ 305.441669][ T5352] loop4: p5 size 8323072 extends beyond EOD, truncated [ 305.446706][ T5352] loop4: p6 start 8192 is beyond EOD, truncated [ 305.682241][ T6029] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 305.844978][T12651] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 305.848496][T12651] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 305.892926][ T6029] usb 9-1: Using ep0 maxpacket: 8 [ 305.906396][ T6029] usb 9-1: config 0 interface 0 has no altsetting 0 [ 305.910056][ T6029] usb 9-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 305.914127][ T6029] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 305.958224][ T6029] usb 9-1: config 0 descriptor?? [ 306.184856][T12648] netlink: 'syz.4.1833': attribute type 1 has an invalid length. [ 306.404584][ T6029] mcp2221 0003:04D8:00DD.0009: unknown main item tag 0x0 [ 306.406736][ T6029] mcp2221 0003:04D8:00DD.0009: unknown main item tag 0x0 [ 306.408936][ T6029] mcp2221 0003:04D8:00DD.0009: unknown main item tag 0x0 [ 306.411056][ T6029] mcp2221 0003:04D8:00DD.0009: unknown main item tag 0x0 [ 306.413836][ T6029] mcp2221 0003:04D8:00DD.0009: unknown main item tag 0x0 [ 306.416344][ T6029] mcp2221 0003:04D8:00DD.0009: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 306.633705][ T6048] usb 9-1: USB disconnect, device number 14 [ 306.670781][ T5352] loop4: [POWERTEC] p1 p2 p3 p4 p5 p6 [ 306.672800][ T5352] loop4: p1 size 2037579776 extends beyond EOD, truncated [ 306.675749][ T5352] loop4: p2 start 4294901760 is beyond EOD, truncated [ 306.677954][ T5352] loop4: p3 start 4294836224 is beyond EOD, truncated [ 306.680062][ T5352] loop4: p4 size 327680 extends beyond EOD, truncated [ 306.683050][ T5352] loop4: p5 size 8323072 extends beyond EOD, truncated [ 306.685859][ T5352] loop4: p6 start 8192 is beyond EOD, truncated [ 306.992282][ T6048] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 307.142312][ T6048] usb 9-1: Using ep0 maxpacket: 32 [ 307.145325][ T6048] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 307.148672][ T6048] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 307.151800][ T6048] usb 9-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 307.154927][ T6048] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.158661][ T6048] usb 9-1: config 0 descriptor?? [ 307.507635][T12681] comedi comedi1: c6xdigio: I/O port conflict (0x2,3) [ 307.570605][ T6048] savu 0003:1E7D:2D5A.000A: hiddev0,hidraw1: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.4-1/input0 [ 307.571103][T12683] netlink: 'syz.0.1848': attribute type 1 has an invalid length. [ 307.624352][T12689] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1849'. [ 307.691881][T12694] syzkaller0: entered promiscuous mode [ 307.694297][T12694] syzkaller0: entered allmulticast mode [ 308.000282][T12696] netlink: 752 bytes leftover after parsing attributes in process `syz.2.1853'. [ 308.133150][T12705] syzkaller0: entered promiscuous mode [ 308.134936][T12705] syzkaller0: entered allmulticast mode [ 308.361328][T12708] ceph: No mds server is up or the cluster is laggy [ 308.409701][ T6048] usb 9-1: USB disconnect, device number 15 [ 308.439015][ T5352] loop4: [POWERTEC] p1 p2 p3 p4 p5 p6 [ 308.441407][ T5352] loop4: p1 size 2037579776 extends beyond EOD, truncated [ 308.445475][ T5352] loop4: p2 start 4294901760 is beyond EOD, truncated [ 308.447715][ T5352] loop4: p3 start 4294836224 is beyond EOD, truncated [ 308.449820][ T5352] loop4: p4 size 327680 extends beyond EOD, truncated [ 308.453173][ T5352] loop4: p5 size 8323072 extends beyond EOD, truncated [ 308.455981][ T5352] loop4: p6 start 8192 is beyond EOD, truncated [ 308.571778][ T5352] loop4: [POWERTEC] p1 p2 p3 p4 p5 p6 [ 308.574424][ T5352] loop4: p1 size 2037579776 extends beyond EOD, truncated [ 308.582049][ T5352] loop4: p2 start 4294901760 is beyond EOD, truncated [ 308.585930][ T5352] loop4: p3 start 4294836224 is beyond EOD, truncated [ 308.588762][ T5352] loop4: p4 size 327680 extends beyond EOD, truncated [ 308.601179][ T5352] loop4: p5 size 8323072 extends beyond EOD, truncated [ 308.606183][ T5352] loop4: p6 start 8192 is beyond EOD, truncated [ 308.649196][T12726] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 308.653296][T12726] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 308.655028][ T5352] loop4: [POWERTEC] p1 p2 p3 p4 p5 p6 [ 308.657891][ T5352] loop4: p1 size 2037579776 extends beyond EOD, truncated [ 308.660117][T12726] netlink: 'syz.2.1862': attribute type 1 has an invalid length. [ 308.664908][ T5352] loop4: p2 start 4294901760 is beyond EOD, truncated [ 308.667212][ T5352] loop4: p3 start 4294836224 is beyond EOD, truncated [ 308.669434][ T5352] loop4: p4 size 327680 extends beyond EOD, truncated [ 308.673771][ T5352] loop4: p5 size 8323072 extends beyond EOD, truncated [ 308.676475][T12728] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1863'. [ 308.677253][ T5352] loop4: p6 start 8192 is beyond EOD, truncated [ 308.681636][T12722] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1859'. [ 308.716266][ T5352] loop4: [POWERTEC] p1 p2 p3 p4 p5 p6 [ 308.718067][ T5352] loop4: p1 size 2037579776 extends beyond EOD, truncated [ 308.721260][ T5352] loop4: p2 start 4294901760 is beyond EOD, truncated [ 308.724366][ T5352] loop4: p3 start 4294836224 is beyond EOD, truncated [ 308.726641][ T5352] loop4: p4 size 327680 extends beyond EOD, truncated [ 308.732368][ T5352] loop4: p5 size 8323072 extends beyond EOD, truncated [ 308.735489][ T5352] loop4: p6 start 8192 is beyond EOD, truncated [ 309.215285][T12748] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1870'. [ 309.218951][T12748] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1870'. [ 309.291952][T12756] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1873'. [ 309.296164][T12756] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1873'. [ 309.332362][T12758] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 309.336491][T12758] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 309.341368][T12758] netlink: 'syz.2.1874': attribute type 1 has an invalid length. [ 309.407641][T12762] vivid-007: disconnect [ 309.623959][ T5352] loop4: [POWERTEC] p1 p2 p3 p4 p5 p6 [ 309.626497][ T5352] loop4: p1 size 2037579776 extends beyond EOD, truncated [ 309.636524][ T5352] loop4: p2 start 4294901760 is beyond EOD, truncated [ 309.639411][ T5352] loop4: p3 start 4294836224 is beyond EOD, truncated [ 309.642044][ T5352] loop4: p4 size 327680 extends beyond EOD, truncated [ 309.648115][ T5352] loop4: p5 size 8323072 extends beyond EOD, truncated [ 309.651164][ T5352] loop4: p6 start 8192 is beyond EOD, truncated [ 309.655612][T12776] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1880'. [ 309.693389][T12778] netlink: 'syz.4.1881': attribute type 10 has an invalid length. [ 309.698960][T12778] dummy0: entered promiscuous mode [ 309.701728][T12778] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 309.963734][T12785] lo speed is unknown, defaulting to 1000 [ 310.090338][T12790] netlink: 'syz.0.1885': attribute type 1 has an invalid length. [ 310.417826][T12798] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1888'. [ 310.639134][T12803] tipc: Enabled bearer , priority 0 [ 310.673797][T12803] syzkaller0: entered promiscuous mode [ 310.679706][T12803] syzkaller0: entered allmulticast mode [ 310.681851][T12803] tipc: Resetting bearer [ 310.700313][T12802] tipc: Resetting bearer [ 311.426462][ T5352] loop4: [POWERTEC] p1 p2 p3 p4 p5 p6 [ 311.429115][ T5352] loop4: p1 size 2037579776 extends beyond EOD, truncated [ 311.438312][ T5352] loop4: p2 start 4294901760 is beyond EOD, truncated [ 311.441265][ T5352] loop4: p3 start 4294836224 is beyond EOD, truncated [ 311.444557][ T5352] loop4: p4 size 327680 extends beyond EOD, truncated [ 311.448596][ T5352] loop4: p5 size 8323072 extends beyond EOD, truncated [ 311.457858][ T5352] loop4: p6 start 8192 is beyond EOD, truncated [ 311.992737][ T40] audit: type=1326 audit(1766000414.952:507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12841 comm="syz.2.1899" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff6579 code=0x7ffc0000 [ 312.000761][ T40] audit: type=1326 audit(1766000414.952:508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12841 comm="syz.2.1899" exe="/syz-executor" sig=0 arch=40000003 syscall=310 compat=1 ip=0xf7ff6579 code=0x7ffc0000 [ 312.194825][T12802] tipc: Disabling bearer [ 312.199580][T12842] @: renamed from vlan0 [ 312.216183][T12844] lo speed is unknown, defaulting to 1000 [ 312.247351][ T40] audit: type=1326 audit(1766000415.202:509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12841 comm="syz.2.1899" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff6579 code=0x7ffc0000 [ 312.268061][ T40] audit: type=1326 audit(1766000415.202:510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12841 comm="syz.2.1899" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff6579 code=0x7ffc0000 [ 312.298465][T12851] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1902'. [ 312.390561][T12856] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1900'. [ 312.394113][T12856] hsr_slave_1: entered allmulticast mode [ 312.424906][ T5352] loop4: [POWERTEC] p1 p2 p3 p4 p5 p6 [ 312.427669][ T5352] loop4: p1 size 2037579776 extends beyond EOD, truncated [ 312.430802][ T5352] loop4: p2 start 4294901760 is beyond EOD, truncated [ 312.433057][ T5352] loop4: p3 start 4294836224 is beyond EOD, truncated [ 312.435254][ T5352] loop4: p4 size 327680 extends beyond EOD, truncated [ 312.439413][ T5352] loop4: p5 size 8323072 extends beyond EOD, truncated [ 312.443584][ T5352] loop4: p6 start 8192 is beyond EOD, truncated [ 312.503304][T12857] lo speed is unknown, defaulting to 1000 [ 312.505760][T12857] lo speed is unknown, defaulting to 1000 [ 312.524423][T12857] lo speed is unknown, defaulting to 1000 [ 312.535833][T12857] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 312.993891][T12857] lo speed is unknown, defaulting to 1000 [ 312.997744][T12857] lo speed is unknown, defaulting to 1000 [ 313.001549][T12857] lo speed is unknown, defaulting to 1000 [ 313.005530][T12857] lo speed is unknown, defaulting to 1000 [ 313.009324][T12857] lo speed is unknown, defaulting to 1000 [ 313.152280][ T5352] loop4: [POWERTEC] p1 p2 p3 p4 p5 p6 [ 313.154190][ T5352] loop4: p1 size 2037579776 extends beyond EOD, truncated [ 313.168426][ T5352] loop4: p2 start 4294901760 is beyond EOD, truncated [ 313.170616][ T5352] loop4: p3 start 4294836224 is beyond EOD, truncated [ 313.173085][ T5352] loop4: p4 size 327680 extends beyond EOD, truncated [ 313.188303][ T5352] loop4: p5 size 8323072 extends beyond EOD, truncated [ 313.193574][ T5352] loop4: p6 start 8192 is beyond EOD, truncated [ 313.377330][ T5352] loop4: [POWERTEC] p1 p2 p3 p4 p5 p6 [ 313.380442][ T5352] loop4: p1 size 2037579776 extends beyond EOD, truncated [ 313.388980][ T5352] loop4: p2 start 4294901760 is beyond EOD, truncated [ 313.391790][ T5352] loop4: p3 start 4294836224 is beyond EOD, truncated [ 313.395608][ T5352] loop4: p4 size 327680 extends beyond EOD, truncated [ 313.400269][ T5352] loop4: p5 size 8323072 extends beyond EOD, truncated [ 313.404613][ T5352] loop4: p6 start 8192 is beyond EOD, truncated [ 314.256560][T12882] netlink: 'syz.2.1910': attribute type 1 has an invalid length. [ 314.269985][T12882] 8021q: adding VLAN 0 to HW filter on device bond3 [ 314.347866][ T5352] loop4: [POWERTEC] p1 p2 p3 p4 p5 p6 [ 314.349772][ T5352] loop4: p1 size 2037579776 extends beyond EOD, truncated [ 314.358099][ T5352] loop4: p2 start 4294901760 is beyond EOD, truncated [ 314.361088][ T5352] loop4: p3 start 4294836224 is beyond EOD, truncated [ 314.364894][ T5352] loop4: p4 size 327680 extends beyond EOD, truncated [ 314.368677][ T5352] loop4: p5 size 8323072 extends beyond EOD, truncated [ 314.371816][ T5352] loop4: p6 start 8192 is beyond EOD, truncated [ 314.538896][T12892] netlink: 'syz.3.1913': attribute type 11 has an invalid length. [ 314.612554][T12894] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 314.614664][T12894] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 314.617119][T12894] vhci_hcd vhci_hcd.0: Device attached [ 314.852618][ T6029] usb 45-1: new low-speed USB device number 7 using vhci_hcd [ 315.523457][T12895] vhci_hcd: connection reset by peer [ 315.526032][ T1164] vhci_hcd vhci_hcd.4: stop threads [ 315.528225][ T1164] vhci_hcd vhci_hcd.4: release socket [ 315.530608][ T1164] vhci_hcd vhci_hcd.4: disconnect device [ 315.576027][T12906] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1916'. [ 315.580875][T12906] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1916'. [ 316.089667][ T5352] loop4: [POWERTEC] p1 p2 p3 p4 p5 p6 [ 316.093212][ T5352] loop4: p1 size 2037579776 extends beyond EOD, truncated [ 316.099031][ T5352] loop4: p2 start 4294901760 is beyond EOD, truncated [ 316.103238][ T5352] loop4: p3 start 4294836224 is beyond EOD, truncated [ 316.109142][ T5352] loop4: p4 size 327680 extends beyond EOD, truncated [ 316.114284][ T5352] loop4: p5 size 8323072 extends beyond EOD, truncated [ 316.120599][ T5352] loop4: p6 start 8192 is beyond EOD, truncated [ 316.427788][T12929] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 316.433779][T12929] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 316.442841][T12929] netlink: 'syz.2.1924': attribute type 1 has an invalid length. [ 317.074516][T12934] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 317.078708][T12934] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 317.086653][T12934] netlink: 'syz.2.1925': attribute type 1 has an invalid length. [ 317.093603][T12936] wg1: entered promiscuous mode [ 317.095282][T12936] wg1: entered allmulticast mode [ 317.180660][ T5352] loop4: [POWERTEC] p1 p2 p3 p4 p5 p6 [ 317.182560][ T5352] loop4: p1 size 2037579776 extends beyond EOD, truncated [ 317.185525][ T5352] loop4: p2 start 4294901760 is beyond EOD, truncated [ 317.187691][ T5352] loop4: p3 start 4294836224 is beyond EOD, truncated [ 317.189837][ T5352] loop4: p4 size 327680 extends beyond EOD, truncated [ 317.211726][ T5352] loop4: p5 size 8323072 extends beyond EOD, truncated [ 317.214969][ T5352] loop4: p6 start 8192 is beyond EOD, truncated [ 317.235210][ T5352] loop4: [POWERTEC] p1 p2 p3 p4 p5 p6 [ 317.237163][ T5352] loop4: p1 size 2037579776 extends beyond EOD, truncated [ 317.240295][ T5352] loop4: p2 start 4294901760 is beyond EOD, truncated [ 317.242858][ T5352] loop4: p3 start 4294836224 is beyond EOD, truncated [ 317.245003][ T5352] loop4: p4 size 327680 extends beyond EOD, truncated [ 317.250796][ T5352] loop4: p5 size 8323072 extends beyond EOD, truncated [ 317.253858][ T5352] loop4: p6 start 8192 is beyond EOD, truncated [ 317.277608][T12942] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1929'. [ 317.302439][T12948] netlink: 'syz.2.1931': attribute type 5 has an invalid length. [ 317.339834][T12951] netlink: 'syz.0.1933': attribute type 1 has an invalid length. [ 317.373976][T12952] bond2: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 317.379034][T12952] bond2 (unregistering): Released all slaves [ 317.393728][T12957] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1934'. [ 317.396001][ T5352] loop4: [POWERTEC] p1 p2 p3 p4 p5 p6 [ 317.396530][T12957] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1934'. [ 317.398372][ T5352] loop4: p1 size 2037579776 extends beyond EOD, truncated [ 317.404282][T12955] xt_CT: No such helper "pptp" [ 317.406870][ T5352] loop4: p2 start 4294901760 is beyond EOD, truncated [ 317.409241][ T5352] loop4: p3 start 4294836224 is beyond EOD, truncated [ 317.411401][ T5352] loop4: p4 size 327680 extends beyond EOD, truncated [ 317.424543][ T5352] loop4: p5 size 8323072 extends beyond EOD, truncated [ 317.427532][ T5352] loop4: p6 start 8192 is beyond EOD, truncated [ 317.447287][T12955] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1935'. [ 317.846062][T12972] binder: BINDER_SET_CONTEXT_MGR already set [ 317.848689][T12972] binder: 12971:12972 ioctl 4018620d 80000100 returned -16 [ 317.854206][T12972] binder: BINDER_SET_CONTEXT_MGR already set [ 317.856797][T12972] binder: 12971:12972 ioctl 4018620d 80004a80 returned -16 [ 318.399038][ T5352] loop4: [POWERTEC] p1 p2 p3 p4 p5 p6 [ 318.401560][ T5352] loop4: p1 size 2037579776 extends beyond EOD, truncated [ 318.409169][ T5352] loop4: p2 start 4294901760 is beyond EOD, truncated [ 318.411653][ T5352] loop4: p3 start 4294836224 is beyond EOD, truncated [ 318.415286][ T5352] loop4: p4 size 327680 extends beyond EOD, truncated [ 318.421726][ T5352] loop4: p5 size 8323072 extends beyond EOD, truncated [ 318.428248][ T5352] loop4: p6 start 8192 is beyond EOD, truncated [ 318.521860][ T5352] loop4: [POWERTEC] p1 p2 p3 p4 p5 p6 [ 318.524247][ T5352] loop4: p1 size 2037579776 extends beyond EOD, truncated [ 318.530810][ T5352] loop4: p2 start 4294901760 is beyond EOD, truncated [ 318.533844][ T5352] loop4: p3 start 4294836224 is beyond EOD, truncated [ 318.536304][ T5352] loop4: p4 size 327680 extends beyond EOD, truncated [ 318.541716][ T5352] loop4: p5 size 8323072 extends beyond EOD, truncated [ 318.546683][ T5352] loop4: p6 start 8192 is beyond EOD, truncated [ 318.883634][ T5352] loop4: [POWERTEC] p1 p2 p3 p4 p5 p6 [ 318.886108][ T5352] loop4: p1 size 2037579776 extends beyond EOD, truncated [ 318.889484][ T5352] loop4: p2 start 4294901760 is beyond EOD, truncated [ 318.891753][ T5352] loop4: p3 start 4294836224 is beyond EOD, truncated [ 318.894984][ T5352] loop4: p4 size 327680 extends beyond EOD, truncated [ 318.899384][ T5352] loop4: p5 size 8323072 extends beyond EOD, truncated [ 318.902945][ T5352] loop4: p6 start 8192 is beyond EOD, truncated [ 318.932609][T12993] pvfs2: Unknown parameter 'devpts' [ 318.935096][T12993] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1946'. [ 319.262365][ T34] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 319.442138][ T34] usb 9-1: Using ep0 maxpacket: 8 [ 319.445139][ T34] usb 9-1: config 0 interface 0 has no altsetting 0 [ 319.447387][ T34] usb 9-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 319.450420][ T34] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 319.454653][ T34] usb 9-1: config 0 descriptor?? [ 319.663090][T12998] netlink: 'syz.4.1950': attribute type 1 has an invalid length. [ 319.761173][T13002] tipc: Enabled bearer , priority 0 [ 319.787981][T13002] syzkaller0: entered promiscuous mode [ 319.789877][T13002] syzkaller0: entered allmulticast mode [ 319.792457][T13002] tipc: Resetting bearer [ 319.820300][T13001] tipc: Resetting bearer [ 319.891648][ T34] mcp2221 0003:04D8:00DD.000B: unknown main item tag 0x0 [ 319.896901][ T34] mcp2221 0003:04D8:00DD.000B: unknown main item tag 0x0 [ 319.899419][ T34] mcp2221 0003:04D8:00DD.000B: unknown main item tag 0x0 [ 319.901859][ T34] mcp2221 0003:04D8:00DD.000B: unknown main item tag 0x0 [ 319.904316][ T34] mcp2221 0003:04D8:00DD.000B: unknown main item tag 0x0 [ 319.907303][ T34] mcp2221 0003:04D8:00DD.000B: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 319.972496][ T6029] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 320.106315][ T5950] usb 9-1: USB disconnect, device number 16 [ 320.635475][ T5352] loop4: [POWERTEC] p1 p2 p3 p4 p5 p6 [ 320.637456][ T5352] loop4: p1 size 2037579776 extends beyond EOD, truncated [ 320.641058][ T5352] loop4: p2 start 4294901760 is beyond EOD, truncated [ 320.643670][ T5352] loop4: p3 start 4294836224 is beyond EOD, truncated [ 320.645919][ T5352] loop4: p4 size 327680 extends beyond EOD, truncated [ 320.648772][ T5352] loop4: p5 size 8323072 extends beyond EOD, truncated [ 320.664126][ T5352] loop4: p6 start 8192 is beyond EOD, truncated [ 320.857080][ T5352] loop4: [POWERTEC] p1 p2 p3 p4 p5 p6 [ 320.859040][ T5352] loop4: p1 size 2037579776 extends beyond EOD, truncated [ 320.862943][ T5352] loop4: p2 start 4294901760 is beyond EOD, truncated [ 320.865149][ T5352] loop4: p3 start 4294836224 is beyond EOD, truncated [ 320.867367][ T5352] loop4: p4 size 327680 extends beyond EOD, truncated [ 320.870254][ T5352] loop4: p5 size 8323072 extends beyond EOD, truncated [ 320.873698][ T5352] loop4: p6 start 8192 is beyond EOD, truncated [ 320.953810][T13001] tipc: Disabling bearer [ 320.998646][ T5352] loop4: [POWERTEC] p1 p2 p3 p4 p5 p6 [ 321.000523][ T5352] loop4: p1 size 2037579776 extends beyond EOD, truncated [ 321.013229][ T5352] loop4: p2 start 4294901760 is beyond EOD, truncated [ 321.015499][ T5352] loop4: p3 start 4294836224 is beyond EOD, truncated [ 321.018055][ T5352] loop4: p4 size 327680 extends beyond EOD, truncated [ 321.022455][ T5352] loop4: p5 size 8323072 extends beyond EOD, truncated [ 321.026426][ T5352] loop4: p6 start 8192 is beyond EOD, truncated [ 321.077061][ T5352] loop4: [POWERTEC] p1 p2 p3 p4 p5 p6 [ 321.078887][ T5352] loop4: p1 size 2037579776 extends beyond EOD, truncated [ 321.081702][ T5352] loop4: p2 start 4294901760 is beyond EOD, truncated [ 321.083836][ T5352] loop4: p3 start 4294836224 is beyond EOD, truncated [ 321.085959][ T5352] loop4: p4 size 327680 extends beyond EOD, truncated [ 321.088663][ T5352] loop4: p5 size 8323072 extends beyond EOD, truncated [ 321.091318][ T5352] loop4: p6 start 8192 is beyond EOD, truncated [ 321.107729][T13029] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1960'. [ 321.110450][T13029] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1960'. [ 321.286396][T13036] vhci_hcd vhci_hcd.0: port 0 already used [ 321.309877][T13041] netlink: 'syz.0.1964': attribute type 1 has an invalid length. [ 321.734299][ T1418] ieee802154 phy0 wpan0: encryption failed: -22 [ 321.770106][ T1418] ieee802154 phy1 wpan1: encryption failed: -22 [ 321.808697][T13045] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1965'. [ 321.959940][T13050] batadv_slave_0: entered promiscuous mode [ 322.723424][T13055] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1969'. [ 322.727694][T13055] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1969'. [ 322.731952][T13054] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1969'. [ 322.736847][T13057] netlink: 'syz.2.1969': attribute type 1 has an invalid length. [ 322.736897][T13054] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1969'. [ 322.743721][T13055] netlink: 'syz.2.1969': attribute type 1 has an invalid length. [ 322.804481][T13060] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1970'. [ 335.822254][ T8908] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 337.027492][ T1418] ================================================================== [ 337.027753][ T5944] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 337.030050][ T1418] BUG: KASAN: slab-use-after-free in handle_tx+0x5dc/0x630 [ 337.034113][ T5944] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 337.034778][ T1418] Read of size 1 at addr ffff88806fc55490 by task aoe_tx0/1418 [ 337.039459][ T5944] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 337.041205][ T1418] [ 337.041214][ T1418] CPU: 2 UID: 0 PID: 1418 Comm: aoe_tx0 Not tainted syzkaller #0 PREEMPT(full) [ 337.041226][ T1418] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 337.041233][ T1418] Call Trace: [ 337.041237][ T1418] [ 337.041241][ T1418] dump_stack_lvl+0x116/0x1f0 [ 337.041286][ T1418] print_report+0xcd/0x630 [ 337.041301][ T1418] ? __virt_addr_valid+0x81/0x610 [ 337.041317][ T1418] ? __phys_addr+0xe8/0x180 [ 337.041332][ T1418] ? handle_tx+0x5dc/0x630 [ 337.041342][ T1418] kasan_report+0xe0/0x110 [ 337.041357][ T1418] ? handle_tx+0x5dc/0x630 [ 337.041367][ T1418] handle_tx+0x5dc/0x630 [ 337.041379][ T1418] dev_hard_start_xmit+0x97/0x6e0 [ 337.041392][ T1418] __dev_queue_xmit+0x6d7/0x4650 [ 337.041404][ T1418] ? rcu_is_watching+0x12/0xc0 [ 337.041417][ T1418] ? finish_task_switch.isra.0+0x207/0xbd0 [ 337.041432][ T1418] ? __pfx___dev_queue_xmit+0x10/0x10 [ 337.041444][ T1418] ? __lock_acquire+0x436/0x2890 [ 337.041454][ T1418] ? ref_tracker_free+0x37c/0x830 [ 337.041467][ T1418] ? do_raw_spin_lock+0x12c/0x2b0 [ 337.041481][ T1418] ? rcu_is_watching+0x12/0xc0 [ 337.041495][ T1418] tx+0xcc/0x190 [ 337.041504][ T1418] ? __pfx_tx+0x10/0x10 [ 337.041518][ T1418] kthread+0x1e4/0x3e0 [ 337.041531][ T1418] ? find_held_lock+0x2b/0x80 [ 337.041544][ T1418] ? __pfx_kthread+0x10/0x10 [ 337.041557][ T1418] ? __pfx_default_wake_function+0x10/0x10 [ 337.041570][ T1418] ? lockdep_hardirqs_on+0x7c/0x110 [ 337.041585][ T1418] ? __kthread_parkme+0x19e/0x250 [ 337.041600][ T1418] ? __pfx_kthread+0x10/0x10 [ 337.041613][ T1418] kthread+0x3c5/0x780 [ 337.041622][ T1418] ? __pfx_kthread+0x10/0x10 [ 337.041632][ T1418] ? rcu_is_watching+0x12/0xc0 [ 337.041646][ T1418] ? __pfx_kthread+0x10/0x10 [ 337.041655][ T1418] ret_from_fork+0x983/0xb10 [ 337.041665][ T1418] ? __pfx_ret_from_fork+0x10/0x10 [ 337.041676][ T1418] ? __switch_to+0x7af/0x10d0 [ 337.041688][ T1418] ? __pfx_kthread+0x10/0x10 [ 337.041698][ T1418] ret_from_fork_asm+0x1a/0x30 [ 337.041716][ T1418] [ 337.041719][ T1418] [ 337.044135][ T5944] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 337.044351][ T1418] Allocated by task 10171: [ 337.044358][ T1418] kasan_save_stack+0x33/0x60 [ 337.047574][ T5944] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 337.050643][ T1418] kasan_save_track+0x14/0x30 [ 337.053029][ T5944] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 337.054169][ T1418] __kasan_kmalloc+0xaa/0xb0 [ 337.063379][ T64] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 337.064467][ T1418] alloc_tty_struct+0x96/0x8c0 [ 337.067127][ T64] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 337.067657][ T1418] tty_init_dev.part.0+0x1e/0x500 [ 337.069624][ T64] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 337.071042][ T1418] tty_open+0xa4f/0xf90 [ 337.073611][ T64] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 337.074508][ T1418] chrdev_open+0x234/0x6a0 [ 337.134294][ T1418] do_dentry_open+0x748/0x1590 [ 337.135814][ T1418] vfs_open+0x82/0x3f0 [ 337.137116][ T1418] path_openat+0x2078/0x3140 [ 337.138572][ T1418] do_filp_open+0x20b/0x470 [ 337.140011][ T1418] do_sys_openat2+0x121/0x290 [ 337.141516][ T1418] __ia32_compat_sys_openat+0x16d/0x210 [ 337.143252][ T1418] __do_fast_syscall_32+0xe8/0x680 [ 337.144881][ T1418] do_fast_syscall_32+0x32/0x80 [ 337.146426][ T1418] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 337.148422][ T1418] [ 337.149193][ T1418] Freed by task 6027: [ 337.150459][ T1418] kasan_save_stack+0x33/0x60 [ 337.151952][ T1418] kasan_save_track+0x14/0x30 [ 337.153454][ T1418] kasan_save_free_info+0x3b/0x60 [ 337.155055][ T1418] __kasan_slab_free+0x5f/0x80 [ 337.156576][ T1418] kfree+0x2f8/0x6e0 [ 337.157821][ T1418] process_one_work+0x9ba/0x1b20 [ 337.159388][ T1418] worker_thread+0x6c8/0xf10 [ 337.160855][ T1418] kthread+0x3c5/0x780 [ 337.162159][ T1418] ret_from_fork+0x983/0xb10 [ 337.163653][ T1418] ret_from_fork_asm+0x1a/0x30 [ 337.165217][ T1418] [ 337.165989][ T1418] Last potentially related work creation: [ 337.167888][ T1418] kasan_save_stack+0x33/0x60 [ 337.169492][ T1418] kasan_record_aux_stack+0xa7/0xc0 [ 337.171154][ T1418] insert_work+0x36/0x230 [ 337.172562][ T1418] __queue_work+0x94f/0x10e0 [ 337.174026][ T1418] queue_work_on+0x1a4/0x1f0 [ 337.175518][ T1418] release_tty+0x4de/0x5d0 [ 337.176969][ T1418] tty_release_struct+0xb7/0xe0 [ 337.178509][ T1418] tty_release+0xe2d/0x1470 [ 337.179950][ T1418] __fput+0x402/0xb70 [ 337.181221][ T1418] task_work_run+0x150/0x240 [ 337.182724][ T1418] do_exit+0x87f/0x2bd0 [ 337.184052][ T1418] do_group_exit+0xd3/0x2a0 [ 337.185492][ T1418] get_signal+0x2671/0x26d0 [ 337.186929][ T1418] arch_do_signal_or_restart+0x8f/0x7a0 [ 337.188730][ T1418] exit_to_user_mode_loop+0x8c/0x540 [ 337.190384][ T1418] __do_fast_syscall_32+0x4a4/0x680 [ 337.192023][ T1418] do_fast_syscall_32+0x32/0x80 [ 337.193575][ T1418] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 337.195580][ T1418] [ 337.196358][ T1418] The buggy address belongs to the object at ffff88806fc55000 [ 337.196358][ T1418] which belongs to the cache kmalloc-cg-2k of size 2048 [ 337.200742][ T1418] The buggy address is located 1168 bytes inside of [ 337.200742][ T1418] freed 2048-byte region [ffff88806fc55000, ffff88806fc55800) [ 337.205030][ T1418] [ 337.205800][ T1418] The buggy address belongs to the physical page: [ 337.207807][ T1418] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x6fc50 [ 337.210533][ T1418] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 337.213153][ T1418] memcg:ffff88804cd7a881 [ 337.214550][ T1418] anon flags: 0x4fff00000000040(head|node=1|zone=1|lastcpupid=0x7ff) [ 337.217046][ T1418] page_type: f5(slab) [ 337.218315][ T1418] raw: 04fff00000000040 ffff88801b44c140 0000000000000000 dead000000000001 [ 337.220952][ T1418] raw: 0000000000000000 0000000000080008 00000000f5000000 ffff88804cd7a881 [ 337.223612][ T1418] head: 04fff00000000040 ffff88801b44c140 0000000000000000 dead000000000001 [ 337.226323][ T1418] head: 0000000000000000 0000000000080008 00000000f5000000 ffff88804cd7a881 [ 337.229019][ T1418] head: 04fff00000000003 ffffea0001bf1401 00000000ffffffff 00000000ffffffff [ 337.231700][ T1418] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 337.234390][ T1418] page dumped because: kasan: bad access detected [ 337.236391][ T1418] page_owner tracks the page as allocated [ 337.238171][ T1418] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5947, tgid 5947 (syz-executor), ts 201168156780, free_ts 201159831430 [ 337.244749][ T1418] post_alloc_hook+0x1af/0x220 [ 337.246266][ T1418] get_page_from_freelist+0xd0b/0x31a0 [ 337.248056][ T1418] __alloc_frozen_pages_noprof+0x25f/0x2430 [ 337.250037][ T1418] alloc_pages_mpol+0x1fb/0x550 [ 337.251585][ T1418] new_slab+0x2c3/0x430 [ 337.252923][ T1418] ___slab_alloc+0xe18/0x1c90 [ 337.254441][ T1418] __slab_alloc.constprop.0+0x63/0x110 [ 337.256191][ T1418] __kvmalloc_node_noprof+0x592/0xa40 [ 337.257864][ T1418] xt_alloc_table_info+0x43/0xa0 [ 337.259429][ T1418] compat_do_replace+0x1ea/0x520 [ 337.261001][ T1418] do_ip6t_set_ctl+0x5ed/0xbc0 [ 337.262529][ T1418] nf_setsockopt+0x8d/0xf0 [ 337.263967][ T1418] ipv6_setsockopt+0x135/0x170 [ 337.265581][ T1418] tcp_setsockopt+0xa7/0x100 [ 337.267057][ T1418] do_sock_setsockopt+0xf3/0x1d0 [ 337.268647][ T1418] __sys_setsockopt+0x120/0x1a0 [ 337.270198][ T1418] page last free pid 5921 tgid 5921 stack trace: [ 337.272199][ T1418] __free_frozen_pages+0x7df/0x1170 [ 337.273842][ T1418] __folio_put+0x329/0x450 [ 337.275270][ T1418] skb_release_data+0x81a/0x9e0 [ 337.276830][ T1418] skb_attempt_defer_free+0x52f/0x710 [ 337.278506][ T1418] tcp_recvmsg_locked+0x11e3/0x2910 [ 337.280147][ T1418] tcp_recvmsg+0x12f/0x680 [ 337.281567][ T1418] inet_recvmsg+0x129/0x6a0 [ 337.283010][ T1418] sock_recvmsg+0x1b2/0x250 [ 337.284475][ T1418] sock_read_iter+0x2b9/0x3b0 [ 337.285970][ T1418] vfs_read+0xa98/0xcf0 [ 337.287293][ T1418] ksys_read+0x1f8/0x250 [ 337.288647][ T1418] do_syscall_64+0xcd/0xf80 [ 337.290099][ T1418] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 337.291957][ T1418] [ 337.292739][ T1418] Memory state around the buggy address: [ 337.294498][ T1418] ffff88806fc55380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 337.296990][ T1418] ffff88806fc55400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 337.299532][ T1418] >ffff88806fc55480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 337.302035][ T1418] ^ [ 337.303483][ T1418] ffff88806fc55500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 337.306024][ T1418] ffff88806fc55580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 337.308524][ T1418] ================================================================== [ 337.311071][ T1418] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 337.313335][ T1418] CPU: 2 UID: 0 PID: 1418 Comm: aoe_tx0 Not tainted syzkaller #0 PREEMPT(full) [ 337.316353][ T1418] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 337.319667][ T1418] Call Trace: [ 337.320727][ T1418] [ 337.321674][ T1418] dump_stack_lvl+0x3d/0x1f0 [ 337.323148][ T1418] vpanic+0x640/0x6f0 [ 337.324440][ T1418] panic+0xca/0xd0 [ 337.325640][ T1418] ? __pfx_panic+0x10/0x10 [ 337.327060][ T1418] ? check_panic_on_warn+0x1f/0xb0 [ 337.328678][ T1418] check_panic_on_warn+0xab/0xb0 [ 337.330246][ T1418] end_report+0x107/0x160 [ 337.331623][ T1418] kasan_report+0xee/0x110 [ 337.333077][ T1418] ? handle_tx+0x5dc/0x630 [ 337.334494][ T1418] handle_tx+0x5dc/0x630 [ 337.335838][ T1418] dev_hard_start_xmit+0x97/0x6e0 [ 337.337439][ T1418] __dev_queue_xmit+0x6d7/0x4650 [ 337.339003][ T1418] ? rcu_is_watching+0x12/0xc0 [ 337.340539][ T1418] ? finish_task_switch.isra.0+0x207/0xbd0 [ 337.342377][ T1418] ? __pfx___dev_queue_xmit+0x10/0x10 [ 337.344087][ T1418] ? __lock_acquire+0x436/0x2890 [ 337.345664][ T1418] ? ref_tracker_free+0x37c/0x830 [ 337.347258][ T1418] ? do_raw_spin_lock+0x12c/0x2b0 [ 337.348858][ T1418] ? rcu_is_watching+0x12/0xc0 [ 337.350367][ T1418] tx+0xcc/0x190 [ 337.351510][ T1418] ? __pfx_tx+0x10/0x10 [ 337.352844][ T1418] kthread+0x1e4/0x3e0 [ 337.354149][ T1418] ? find_held_lock+0x2b/0x80 [ 337.355675][ T1418] ? __pfx_kthread+0x10/0x10 [ 337.357159][ T1418] ? __pfx_default_wake_function+0x10/0x10 [ 337.358919][ T1418] ? lockdep_hardirqs_on+0x7c/0x110 [ 337.360577][ T1418] ? __kthread_parkme+0x19e/0x250 [ 337.362191][ T1418] ? __pfx_kthread+0x10/0x10 [ 337.363615][ T1418] kthread+0x3c5/0x780 [ 337.364900][ T1418] ? __pfx_kthread+0x10/0x10 [ 337.366343][ T1418] ? rcu_is_watching+0x12/0xc0 [ 337.367854][ T1418] ? __pfx_kthread+0x10/0x10 [ 337.369333][ T1418] ret_from_fork+0x983/0xb10 [ 337.370795][ T1418] ? __pfx_ret_from_fork+0x10/0x10 [ 337.372416][ T1418] ? __switch_to+0x7af/0x10d0 [ 337.373900][ T1418] ? __pfx_kthread+0x10/0x10 [ 337.375374][ T1418] ret_from_fork_asm+0x1a/0x30 [ 337.376898][ T1418] [ 337.378631][ T1418] Kernel Offset: disabled [ 337.380000][ T1418] Rebooting in 86400 seconds.. VM DIAGNOSIS: 19:40:40 Registers: info registers vcpu 0 CPU#0 RAX=00000000006689cb RBX=0000000000000000 RCX=ffffffff8b7566d9 RDX=0000000000000000 RSI=ffffffff8daca1ff RDI=ffffffff8bf2b500 RBP=fffffbfff1c12f68 RSP=ffffffff8e007df8 R8 =0000000000000001 R9 =ffffed100564673d R10=ffff88802b2339eb R11=ffffffff8e098670 R12=0000000000000000 R13=ffffffff8e097b40 R14=ffffffff9088e2d0 R15=0000000000000000 RIP=ffffffff8b754dcf RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880976fd000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f705ebf0 CR3=000000006a45e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ffffffff0f0e0d0c ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4e4f4954504f5f4e 4153410063657865 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000000 RBX=0000000000000003 RCX=0000000000000002 RDX=ffff888020108000 RSI=ffffffff816b9c71 RDI=ffffffff8bf2b500 RBP=ffff88804b1f9540 RSP=ffffc900007cf628 R8 =0000000000000001 R9 =0000000000000001 R10=ffffffff9088e2d7 R11=ffff888020108b30 R12=0000000000000003 R13=0000000000000003 R14=ffff88802b33bd00 R15=ffffed100963f2a8 RIP=ffffffff8b754dcf RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880977fd000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f0844ff0 CR3=000000000e184000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000000ff00 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f2f2f2f2f2f2f2f 2f2f2f2f2f2f2f2f ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000ff ffffffffffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff 0f0e0d0c0b0a0908 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=000000000000003c RCX=ffffffff819c9781 RDX=ffff8880283a0000 RSI=ffffffff819c976f RDI=0000000000000001 RBP=0000000000000001 RSP=ffffc90007f0f710 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=53414b203a475542 R12=1ffff92000fe1ee4 R13=0000000000000000 R14=ffff888027c44980 R15=ffffc90007f0f7d8 RIP=ffffffff819c9778 RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880978fd000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000080008000 CR3=00000000490f9000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=000000000000003e RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85300f25 RDI=ffffffff9aed82a0 RBP=ffffffff9aed8260 RSP=ffffc9000434f460 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=ffff888027c454b0 R12=0000000000000000 R13=000000000000003e R14=ffffffff9aed8260 R15=ffffffff85300ec0 RIP=ffffffff85300f4f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880979fd000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000ff905a64 CR3=000000006a45e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ffffffff0f0e0d0c ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4e4f4954504f5f4e 4153410063657865 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000