last executing test programs: 14m5.250750544s ago: executing program 0 (id=1742): pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80880) write$P9_RFSYNC(r0, &(0x7f0000000180)={0x7, 0x33, 0x2}, 0x7) r1 = socket(0xa, 0x3, 0x3a) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_SIGNAL_MASK(r4, 0x4004ae8b, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) r9 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) r10 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc2}, &(0x7f0000000080)={0x0, "0f57e611c8da8af32ed98a22d3e0ac8492df23752344507178c06d80db05e73f89c0fcfd02d5c82d25ecd9199a85cb38bbf4295c1f16c4d6fcec69267741c40c", 0x13}, 0x48, r9) keyctl$KEYCTL_WATCH_KEY(0x20, r9, 0xffffffffffffffff, 0x55) keyctl$unlink(0x9, r10, r9) ioctl$KVM_PRE_FAULT_MEMORY(r8, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000000)={0x4, 0x1, 0x4}, 0xc) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f00000000c0)={0x0, 0x0, 0x3, r11, 0x230d}, 0xc) setsockopt$MRT6_FLUSH(r1, 0x29, 0xd4, &(0x7f0000000080)=0xa, 0x4) 14m4.643449807s ago: executing program 0 (id=1748): pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80880) write$P9_RFSYNC(r0, &(0x7f0000000180)={0x7, 0x33, 0x2}, 0x7) r1 = socket(0xa, 0x3, 0x3a) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x28100, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_SIGNAL_MASK(r4, 0x4004ae8b, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) r9 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc2}, &(0x7f0000000080)={0x0, "0f57e611c8da8af32ed98a22d3e0ac8492df23752344507178c06d80db05e73f89c0fcfd02d5c82d25ecd9199a85cb38bbf4295c1f16c4d6fcec69267741c40c", 0x13}, 0x48, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x55) keyctl$unlink(0x9, r9, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r8, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000000)={0x4, 0x1, 0x4}, 0xc) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f00000000c0)={0x0, 0x0, 0x3, r10, 0x230d}, 0xc) setsockopt$MRT6_FLUSH(r1, 0x29, 0xd4, &(0x7f0000000080)=0xa, 0x4) 14m3.422931632s ago: executing program 0 (id=1750): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, &(0x7f00000000c0)="66b9800000c00f326635000100000f30660f130d66b9890b000066b8a7aa1a8d66bab99a475b0f306766c7442400310000006766c7442402f55f00006766c744240600000000670f0114240f019f00000fc7699666b8010000000f01c166b82d586d140f23c00f21f8663501000d000f23f866b9bf0900000f320fc76f5f", 0x7e}], 0x1, 0xdf, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0xfe8fe805c66b7c31, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x36}, 0x94) ioctl$KVM_RUN(r2, 0xae80, 0x0) 14m2.72127258s ago: executing program 0 (id=1751): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f00000002c0)='./file0/file0/file0\x00', 0x0, 0x1000, 0x0) mount$bind(&(0x7f0000000180)='./file0/file0\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1105858, 0x0) umount2(&(0x7f00000001c0)='./file0/file0\x00', 0x0) 14m2.704656791s ago: executing program 0 (id=1752): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r5, 0x0, 0xf3a, 0x0) write(r1, &(0x7f0000000240)="94", 0x1) vmsplice(r4, &(0x7f0000000380)=[{&(0x7f0000013580)='\r', 0x1}], 0x1, 0x0) tee(r0, r5, 0x8f5, 0x0) write(r2, 0x0, 0x0) 14m2.432190124s ago: executing program 0 (id=1754): prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000000)="d2", 0x1, 0x4040000, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x11) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) connect$inet(r0, &(0x7f0000000440)={0x2, 0x4e22, @remote}, 0x10) 14m2.364161063s ago: executing program 32 (id=1754): prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000000)="d2", 0x1, 0x4040000, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x11) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) connect$inet(r0, &(0x7f0000000440)={0x2, 0x4e22, @remote}, 0x10) 5m47.255159832s ago: executing program 2 (id=3551): r0 = socket(0x10, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e22, 0xb7, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000040), 0x1e) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f00000000c0)=@ccm_128={{0x304}, "972b4dd0e4924f3a", "f9dee966a3e5050c58ef684fddafecb9", "2a44ea7b", "ef2baf416c0e734b"}, 0x28) syz_clone3(0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 5m47.185192227s ago: executing program 2 (id=3554): syz_emit_ethernet(0x6e, &(0x7f00000001c0)={@local, @empty, @void, {@ipv4={0x800, @dccp={{0x11, 0x4, 0x3, 0x8, 0x60, 0x67, 0x0, 0x7, 0x21, 0x0, @broadcast, @broadcast, {[@timestamp={0x44, 0xc, 0x87, 0x0, 0x3, [0xf79, 0x101]}, @timestamp_prespec={0x44, 0xc, 0xc4, 0x3, 0x5, [{@dev={0xac, 0x14, 0x14, 0x34}, 0x3}]}, @cipso={0x86, 0x18, 0x2, [{0x4, 0x9, "8fd70efa259f83"}, {0x0, 0x9, "2996a432128df1"}]}]}}, {{0x4e20, 0x4e20, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "6cddba", 0x5, "8a8080"}, "630433c779ad1e57e593840d"}}}}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x0, 0xff, 0x0, 0x0, 0x0, 0x14, 0x0, 0x2, 0x0, 0x0, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8d}) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000140)=@x86={0x3}) 5m46.93462938s ago: executing program 2 (id=3557): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x2210088, &(0x7f0000000580)=ANY=[@ANYBLOB="74f5026e733d76697274696f2c70726976706f72742c646972656374696f2c63616368653d6c6f6f73652c6d73697a653d307830303030303030303030303031303030"]) chdir(&(0x7f0000000100)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) ftruncate(r0, 0x4a8e) r1 = syz_io_uring_setup(0x7930, &(0x7f0000000200)={0x0, 0xcb14, 0x0, 0x3, 0x1eb, 0x0, r0}, &(0x7f0000000080), &(0x7f0000000000), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000580)=[{&(0x7f0000000380)=""/113, 0x71}], 0x1) 5m36.510534593s ago: executing program 2 (id=3558): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f00000001c0)="01", 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x1) r1 = dup(r0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x111, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000180)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x4}}, 0xffcc) 5m36.44000985s ago: executing program 2 (id=3562): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x50000, 0x0) 5m36.429942052s ago: executing program 2 (id=3563): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4400000010004b0401800000000000007a000000", @ANYRES32=0x0, @ANYBLOB="4800000000000000240012"], 0x44}}, 0x4) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f00000003c0)={0x3, 0x0, [{0x3, 0x1, 0x0, 0x0, @sint={0xa, 0x7}}, {0x3, 0x1, 0x0, 0x0, @msi={0x1, 0x2, 0x0, 0x7}}, {0x3, 0x1, 0x0, 0x0, @sint={0x40, 0x8}}]}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a14000000000a050000000000000000000a00fffe38000000090a010300000000000000000700000008000f40000000020900010073797a310000000008000a400000000008000f400000000114"], 0x74}, 0x1, 0x0, 0x0, 0x88000}, 0x20000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="8800000010000104000000000000000022fffe35", @ANYRES32=0x0, @ANYBLOB="2b03000004000000600012800b00010067656e65766500005000028005000800000000000400380205000900010000000500"], 0x88}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) 5m20.979016833s ago: executing program 33 (id=3563): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4400000010004b0401800000000000007a000000", @ANYRES32=0x0, @ANYBLOB="4800000000000000240012"], 0x44}}, 0x4) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f00000003c0)={0x3, 0x0, [{0x3, 0x1, 0x0, 0x0, @sint={0xa, 0x7}}, {0x3, 0x1, 0x0, 0x0, @msi={0x1, 0x2, 0x0, 0x7}}, {0x3, 0x1, 0x0, 0x0, @sint={0x40, 0x8}}]}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a14000000000a050000000000000000000a00fffe38000000090a010300000000000000000700000008000f40000000020900010073797a310000000008000a400000000008000f400000000114"], 0x74}, 0x1, 0x0, 0x0, 0x88000}, 0x20000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="8800000010000104000000000000000022fffe35", @ANYRES32=0x0, @ANYBLOB="2b03000004000000600012800b00010067656e65766500005000028005000800000000000400380205000900010000000500"], 0x88}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) 9.431691852s ago: executing program 1 (id=4655): openat$fb1(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x4, 0x6}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$tun(0xffffffffffffff9c, 0x0, 0x404c03, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014"], 0x7c}, 0x1, 0x0, 0x0, 0x810}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r2) sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000000980)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000800)={&(0x7f0000000700)={0x64, r4, 0x1, 0x70bd29, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x245}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0xf}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5, 0xe4, 0x1}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0xbd3e}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x8, 0x13, [{0x1}, {0xb}, {0x1b}, {0x3, 0x1}]}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x5}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x1}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x1f1}]}, 0x64}, 0x1, 0x0, 0x0, 0x4}, 0xc092e2d74a41f199) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002680)=ANY=[@ANYBLOB="2824000041000701fefffffffeffffff017c0000040042800c00018006000600800a0000042402"], 0x2428}, 0x1, 0x0, 0x0, 0x4048011}, 0x4000000) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="230900000000000000000100000005000700000000000800090000000000060002000100000008000a000000000008001700", @ANYRES32], 0x3c}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f00000007c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000780)={&(0x7f0000000900)={0x58, r7, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @mcast1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x4}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r2}, @L2TP_ATTR_MRU={0x6, 0x1d, 0xa400}]}, 0x58}, 0x1, 0x0, 0x0, 0x30040880}, 0x4000000) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f62726964676500140001007767"], 0xa8}}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="6000000002060108000000000000000005000003050005000a000000050001000700000005000400000000000900020073797a310000000014000300686173683a69702c706f72742c69700014000780080006400000020008000840"], 0x60}, 0x1, 0x0, 0x0, 0x90}, 0x40c0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0205710, &(0x7f0000000100)={0x1, 0x1, 0x0, 0x0, 0x2}) munlockall() ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000000880)={0x0, @ethernet={0x6, @remote}, @l2tp={0x2, 0x0, @multicast1}, @rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7}, 0x3, 0x0, 0x0, 0x0, 0x7f, &(0x7f0000000280)='veth0_to_batadv\x00', 0x2, 0x1, 0x4}) statx(0xffffffffffffffff, 0x0, 0x400, 0xc244efabf448d323, 0x0) 8.380267445s ago: executing program 1 (id=4657): unshare(0x60000000) socket$netlink(0x10, 0x3, 0x10) syz_emit_ethernet(0x3b, &(0x7f0000000080)={@multicast, @local, @val={@void, {0x8100, 0x1, 0x0, 0x1}}, {@arp={0x806, @generic={0x10f, 0x18, 0x6, 0x10, 0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, "d9fc8df4fbdd96230df08d45525ca05a", @broadcast, "3d711ad34e"}}}}, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$tipc(0x1e, 0x0, 0x0) ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, 0x0) socket(0xa, 0x3, 0x3a) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) syz_emit_ethernet(0x4e, &(0x7f0000000000)={@random="00008000", @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x18, 0x3a, 0x0, @loopback, @loopback, {[], @mld={0x82, 0x0, 0x0, 0x9, 0xc036, @remote}}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xb68, 0xfffffffffffffd2e, &(0x7f0000000000)='e', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x48) socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="5000000002060108000034e4000000000000000805000400000000000900020073797a3100000000050005000200000016000300686173683a6e65742c706f72742c6e65740000000500010007"], 0x50}, 0x1, 0x0, 0x0, 0x20044000}, 0x8042) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001880)=ANY=[@ANYBLOB="60000000090603000000000000000000050000000900020073797a3100000000050001000700000038000780060004404e21000005000700ff0000000c000180080001400a0101010c00028008000140e00000020c00148008000140"], 0x60}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) 6.812634454s ago: executing program 5 (id=4663): r0 = socket$nl_audit(0x10, 0x3, 0x9) bind$netlink(r0, &(0x7f0000000640)={0x10, 0x0, 0x25dfdbfe, 0x100000}, 0xc) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000280)='syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@cgroup=r1, 0x1d, 0x0, 0x20000000, &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x0, &(0x7f0000000100), 0x0, 0x0}, 0x40) memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x4, 0x6}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$KVM_VCPU(&(0x7f0000ffb000/0x4000)=nil, 0x930, 0x300000f, 0x12, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@remote, 0x4000, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x32}, 0xa, @in6=@private1, 0x0, 0x4}]}]}, 0xfc}}, 0x0) connect$inet(r3, &(0x7f0000000280)={0x2, 0x4, @broadcast}, 0x10) sendmmsg$inet(r3, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf1c) 6.411620583s ago: executing program 4 (id=4665): r0 = syz_open_dev$sndctrl(&(0x7f00000013c0), 0xc0, 0x40001) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r0, 0xc008551b, &(0x7f0000000080)=ANY=[@ANYBLOB="80"]) 5.593793141s ago: executing program 1 (id=4667): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000070601080000000000000000000000000500010006"], 0x1c}}, 0x4044054) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$video4linux(0x0, 0x7fff, 0x48b03) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r3, 0x80085665, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000dc0)={0x38, 0x5, 0x8, 0x9, 0x0, 0x9, 0x0, 0xaa, 0xfa11, 0xffffffff}, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) close(r4) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x2) ioctl$SNDRV_TIMER_IOCTL_INFO(r5, 0x80e85411, 0x0) r6 = getpid() r7 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r7) syz_usb_connect(0x6, 0x24, &(0x7f0000000400)=ANY=[], 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000000)={0x2, 0x4e23, @private=0xa010100}, 0x10, 0x0}, 0x40) ioctl$EVIOCRMFF(r7, 0xc0085504, &(0x7f0000000000)=0x10) socket$inet6_sctp(0xa, 0x5, 0x84) sched_setattr(r6, &(0x7f0000000340)={0x38, 0x0, 0x1000002d, 0x12000, 0x299c0, 0x7, 0x395400000000000, 0xfc5, 0x3, 0x5507}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007801800018014000240"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) sendmsg$IPSET_CMD_DESTROY(r8, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c0000000306010400000000000000000200e704050001000700000030692b5aebac0cd17186e7779be9ab9e218cc6ca0af0bd83226a6865a9f66727"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000080) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x80000, 0x0) ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) 5.591242595s ago: executing program 5 (id=4668): r0 = syz_open_dev$sndctrl(&(0x7f00000013c0), 0xc0, 0x40001) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r0, 0xc008551b, &(0x7f0000000080)=ANY=[@ANYBLOB="80"]) 5.344055384s ago: executing program 4 (id=4669): r0 = socket$nl_audit(0x10, 0x3, 0x9) bind$netlink(r0, &(0x7f0000000640)={0x10, 0x0, 0x25dfdbfe, 0x100000}, 0xc) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@cgroup, 0x1d, 0x0, 0x20000000, &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x0, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x40) memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x4, 0x6}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$KVM_VCPU(&(0x7f0000ffb000/0x4000)=nil, 0x930, 0x300000f, 0x12, 0xffffffffffffffff, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@remote, 0x4000, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x32}, 0xa, @in6=@private1, 0x0, 0x4}]}]}, 0xfc}}, 0x0) connect$inet(r2, &(0x7f0000000280)={0x2, 0x4, @broadcast}, 0x10) sendmmsg$inet(r2, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf1c) 4.731080417s ago: executing program 3 (id=4670): syz_open_dev$sndctrl(&(0x7f00000013c0), 0xc0, 0x40001) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) 4.199180493s ago: executing program 4 (id=4671): syz_open_dev$sndctrl(&(0x7f00000013c0), 0xc0, 0x40001) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) 4.18376053s ago: executing program 5 (id=4672): syz_open_dev$sndctrl(&(0x7f00000013c0), 0xc0, 0x40001) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) 3.19081543s ago: executing program 3 (id=4673): unshare(0x60000000) socket$netlink(0x10, 0x3, 0x10) syz_emit_ethernet(0x3a, &(0x7f0000000080)={@multicast, @local, @val={@void, {0x8100, 0x1, 0x0, 0x1}}, {@arp={0x806, @generic={0x10f, 0x18, 0x6, 0x10, 0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, "d9fc8df4fbdd96230df08d45525ca05a", @broadcast, "3d711ad3"}}}}, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$tipc(0x1e, 0x2, 0x0) socket$tipc(0x1e, 0x0, 0x0) ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, 0x0) socket(0xa, 0x3, 0x3a) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) syz_emit_ethernet(0x4e, &(0x7f0000000000)={@random="00008000", @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x18, 0x3a, 0x0, @loopback, @loopback, {[], @mld={0x82, 0x0, 0x0, 0x9, 0xc036, @remote}}}}}}, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0xfffffffffffffd2e, &(0x7f0000000000)='e', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x48) socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="5000000002060108000034e4000000000000000805000400000000000900020073797a3100000000050005000200000016000300686173683a6e65742c706f72742c6e65740000000500010007"], 0x50}, 0x1, 0x0, 0x0, 0x20044000}, 0x8042) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001880)=ANY=[@ANYBLOB="60000000090603000000000000000000050000000900020073797a3100000000050001000700000038000780060004404e21000005000700ff0000000c000180080001400a0101010c00028008000140e00000020c00148008000140"], 0x60}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) 3.073560385s ago: executing program 5 (id=4674): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@local}) openat$sequencer(0xffffffffffffff9c, 0x0, 0x101000, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141102) inotify_init1(0x80000) inotify_add_watch(0xffffffffffffffff, &(0x7f00000003c0)='.\x00', 0x5db) symlinkat(0x0, 0xffffffffffffff9c, 0x0) inotify_init1(0x80800) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xfffdffffffffffff, 0x9, 0x3, 0xf, 0x80000006}, 0x0, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e, 0x8}) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r1, 0x7af, &(0x7f0000000080)={@hyper, 0x2}) socket$inet6_udp(0xa, 0x2, 0x0) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000240)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r2, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e}) close_range(r0, 0xffffffffffffffff, 0x0) 2.872182936s ago: executing program 4 (id=4675): unshare(0x60000000) socket$netlink(0x10, 0x3, 0x10) syz_emit_ethernet(0x3b, &(0x7f0000000080)={@multicast, @local, @val={@void, {0x8100, 0x1, 0x0, 0x1}}, {@arp={0x806, @generic={0x10f, 0x18, 0x6, 0x10, 0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, "d9fc8df4fbdd96230df08d45525ca05a", @broadcast, "3d711ad34e"}}}}, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$tipc(0x1e, 0x2, 0x0) socket$tipc(0x1e, 0x0, 0x0) ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, 0x0) socket(0xa, 0x3, 0x3a) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000000)={@random="00008000", @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x18, 0x3a, 0x0, @loopback, @loopback, {[], @mld={0x82, 0x0, 0x0, 0x9, 0xc036, @remote}}}}}}, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0xfffffffffffffd2e, &(0x7f0000000000)='e', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x48) socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="5000000002060108000034e4000000000000000805000400000000000900020073797a3100000000050005000200000016000300686173683a6e65742c706f72742c6e65740000000500010007"], 0x50}, 0x1, 0x0, 0x0, 0x20044000}, 0x8042) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001880)=ANY=[@ANYBLOB="60000000090603000000000000000000050000000900020073797a3100000000050001000700000038000780060004404e21000005000700ff0000000c000180080001400a0101010c00028008000140e00000020c00148008000140"], 0x60}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) 2.855069674s ago: executing program 5 (id=4676): r0 = syz_open_dev$sndctrl(&(0x7f00000013c0), 0xc0, 0x40001) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r0, 0xc008551b, &(0x7f0000000080)=ANY=[@ANYBLOB="80"]) 2.569634661s ago: executing program 3 (id=4677): openat$fb1(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x4, 0x6}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$tun(0xffffffffffffff9c, 0x0, 0x404c03, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000000000090003007379"], 0x7c}, 0x1, 0x0, 0x0, 0x810}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r2) sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000000980)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000800)={&(0x7f0000000700)={0x64, r4, 0x1, 0x70bd29, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x245}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0xf}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5, 0xe4, 0x1}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0xbd3e}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x8, 0x13, [{0x1}, {0xb}, {0x1b}, {0x3, 0x1}]}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x5}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x1}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x1f1}]}, 0x64}, 0x1, 0x0, 0x0, 0x4}, 0xc092e2d74a41f199) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002680)=ANY=[@ANYBLOB="2824000041000701fefffffffeffffff017c0000040042800c00018006000600800a0000042402"], 0x2428}, 0x1, 0x0, 0x0, 0x4048011}, 0x4000000) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="230900000000000000000100000005000700000000000800090000000000060002000100000008000a000000000008001700", @ANYRES32], 0x3c}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f00000007c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000780)={&(0x7f0000000900)={0x58, r7, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @mcast1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x4}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r2}, @L2TP_ATTR_MRU={0x6, 0x1d, 0xa400}]}, 0x58}, 0x1, 0x0, 0x0, 0x30040880}, 0x4000000) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f62726964676500140001007767"], 0xa8}}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="6000000002060108000000000000000005000003050005000a000000050001000700000005000400000000000900020073797a310000000014000300686173683a69702c706f72742c69700014000780080006400000020008000840"], 0x60}, 0x1, 0x0, 0x0, 0x90}, 0x40c0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0205710, &(0x7f0000000100)={0x1, 0x1, 0x0, 0x0, 0x2}) munlockall() ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000000880)={0x0, @ethernet={0x6, @remote}, @l2tp={0x2, 0x0, @multicast1}, @rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7}, 0x3, 0x0, 0x0, 0x0, 0x7f, &(0x7f0000000280)='veth0_to_batadv\x00', 0x2, 0x1, 0x4}) statx(0xffffffffffffffff, 0x0, 0x400, 0xc244efabf448d323, 0x0) 2.073541235s ago: executing program 1 (id=4678): r0 = socket$nl_audit(0x10, 0x3, 0x9) bind$netlink(r0, &(0x7f0000000640)={0x10, 0x0, 0x25dfdbfe, 0x100000}, 0xc) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000280)='syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@cgroup=r1, 0x1d, 0x0, 0x20000000, &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x0, &(0x7f0000000100), 0x0, 0x0}, 0x40) memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x4, 0x6}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$KVM_VCPU(&(0x7f0000ffb000/0x4000)=nil, 0x930, 0x300000f, 0x12, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@remote, 0x4000, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x32}, 0xa, @in6=@private1, 0x0, 0x4}]}]}, 0xfc}}, 0x0) connect$inet(r3, &(0x7f0000000280)={0x2, 0x4, @broadcast}, 0x10) sendmmsg$inet(r3, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf1c) 1.437322598s ago: executing program 3 (id=4679): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@local}) openat$sequencer(0xffffffffffffff9c, 0x0, 0x101000, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141102) inotify_init1(0x80000) inotify_add_watch(0xffffffffffffffff, &(0x7f00000003c0)='.\x00', 0x5db) symlinkat(0x0, 0xffffffffffffff9c, 0x0) inotify_init1(0x80800) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xfffdffffffffffff, 0x9, 0x3, 0xf, 0x80000006}, 0x0, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e, 0x8}) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r1, 0x7af, &(0x7f0000000080)={@hyper, 0x2}) set_mempolicy(0x6005, 0x0, 0x7) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000240)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r2, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e}) close_range(r0, 0xffffffffffffffff, 0x0) 1.408229466s ago: executing program 4 (id=4680): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000000c0), 0x10) connect$can_bcm(r0, &(0x7f0000000000), 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f00000001c0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0xfffc, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f00000000c0)={0xfd, 0x0, 0xfe, 0x22, 0x0, 0x7, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3}, 0xe) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') preadv(r2, &(0x7f0000000340)=[{&(0x7f0000000180)=""/112, 0x70}], 0x1, 0x0, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r2, 0xc010643a, &(0x7f0000000200)={0x0, 0x3, 0x401}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r4, 0x421, 0x70bd2a, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0xc35d4f6d52288271}, 0x200048c4) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_PMK(r2, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x40, r4, 0x409, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x8, 0x6}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x40}, 0x1, 0x0, 0x0, 0x20008014}, 0x2000050) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000040)=0x10001, 0x4) shutdown(r1, 0x1) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000a00)=ANY=[@ANYBLOB="14030000300001000001000004000000040300800c0001"], 0x314}], 0x1}, 0x800) 1.351961377s ago: executing program 3 (id=4681): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000000c0), 0x10) connect$can_bcm(r0, &(0x7f0000000000), 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f00000001c0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0xfffc, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f00000000c0)={0xfd, 0x0, 0xfe, 0x22, 0x0, 0x7, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3}, 0xe) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') preadv(r2, &(0x7f0000000340)=[{&(0x7f0000000180)=""/112, 0x70}], 0x1, 0x0, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r2, 0xc010643a, &(0x7f0000000200)={0x0, 0x3, 0x401}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r4, 0x421, 0x70bd2a, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0xc35d4f6d52288271}, 0x200048c4) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_PMK(r2, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x40, r4, 0x409, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x8, 0x6}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x40}, 0x1, 0x0, 0x0, 0x20008014}, 0x2000050) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, 0x0, 0x0) shutdown(r1, 0x1) recvmmsg(r1, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x414, 0x0, 0x0) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000a00)=ANY=[@ANYBLOB="14030000300001000001000004000000040300800c0001"], 0x314}], 0x1}, 0x800) 1.255713801s ago: executing program 5 (id=4682): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000280)={0x9}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000100)={[{0x5, 0xc000, 0x4, 0x5, 0xff, 0x9, 0x3, 0x8, 0xb9, 0x3, 0x8e, 0x5, 0xc50}, {0x804, 0x1, 0x1, 0x45, 0xff, 0x6, 0x2, 0xff, 0x0, 0x4, 0x6, 0x7f, 0x20c}, {0xf1c2, 0x3, 0x38, 0xf, 0x84, 0x7, 0x3, 0x50, 0x0, 0x5, 0x4, 0x5, 0x3a}], 0xffffffff}) openat$vimc2(0xffffffffffffff9c, &(0x7f0000003240), 0x2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000000, 0xd4, 0x0, 0x61, 0x200002000001, 0x0, 0x2004c8, 0x0, 0x0, 0x36ae, 0x5, 0x7fff, 0x3, 0x400000000], 0x80a0000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000080)={0x50, 0x0, r3, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000063c0)="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", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYRES32=r4, @ANYRES32=r4, @ANYBLOB], 0x0, 0x0, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x80) mbind(&(0x7f00005f7000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) 1.065344776s ago: executing program 1 (id=4683): socket$nl_audit(0x10, 0x3, 0x9) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x4, 0x6}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@remote, 0x4000, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x32}, 0xa, @in6=@private1, 0x0, 0x4}]}]}, 0xfc}}, 0x0) connect$inet(r1, &(0x7f0000000280)={0x2, 0x4, @broadcast}, 0x10) sendmmsg$inet(r1, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf1c) 980.059825ms ago: executing program 4 (id=4684): unshare(0x60000000) socket$netlink(0x10, 0x3, 0x10) syz_emit_ethernet(0x2b, &(0x7f0000000080)={@multicast, @local, @val={@void, {0x8100, 0x1, 0x0, 0x1}}, {@arp={0x806, @generic={0x10f, 0x18, 0x6, 0x0, 0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, "", @broadcast, "3d711ad34e"}}}}, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$tipc(0x1e, 0x2, 0x0) socket$tipc(0x1e, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) syz_emit_ethernet(0x4e, &(0x7f0000000000)={@random="00008000", @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x18, 0x3a, 0x0, @loopback, @loopback, {[], @mld={0x82, 0x0, 0x0, 0x9, 0xc036, @remote}}}}}}, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0xfffffffffffffd2e, &(0x7f0000000000)='e', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x48) 920.288872ms ago: executing program 3 (id=4685): r0 = socket$nl_audit(0x10, 0x3, 0x9) bind$netlink(r0, &(0x7f0000000640)={0x10, 0x0, 0x25dfdbfe, 0x100000}, 0xc) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000280)='syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@cgroup=r1, 0x1d, 0x0, 0x20000000, &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x0, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x40) memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$KVM_VCPU(&(0x7f0000ffb000/0x4000)=nil, 0x930, 0x300000f, 0x12, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@remote, 0x4000, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x32}, 0xa, @in6=@private1, 0x0, 0x4}]}]}, 0xfc}}, 0x0) connect$inet(r3, &(0x7f0000000280)={0x2, 0x4, @broadcast}, 0x10) sendmmsg$inet(r3, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf1c) 0s ago: executing program 1 (id=4686): openat$fb1(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x4, 0x6}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$tun(0xffffffffffffff9c, 0x0, 0x404c03, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014"], 0x7c}, 0x1, 0x0, 0x0, 0x810}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r2) sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000000980)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000800)={&(0x7f0000000700)={0x64, r4, 0x1, 0x70bd29, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x245}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0xf}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5, 0xe4, 0x1}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0xbd3e}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x8, 0x13, [{0x1}, {0xb}, {0x1b}, {0x3, 0x1}]}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x5}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x1}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x1f1}]}, 0x64}, 0x1, 0x0, 0x0, 0x4}, 0xc092e2d74a41f199) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002680)=ANY=[@ANYBLOB="2824000041000701fefffffffeffffff017c0000040042800c00018006000600800a0000042402"], 0x2428}, 0x1, 0x0, 0x0, 0x4048011}, 0x4000000) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="230900000000000000000100000005000700000000000800090000000000060002000100000008000a000000000008001700", @ANYRES32], 0x3c}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f00000007c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000780)={&(0x7f0000000900)={0x58, r7, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @mcast1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x4}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r2}, @L2TP_ATTR_MRU={0x6, 0x1d, 0xa400}]}, 0x58}, 0x1, 0x0, 0x0, 0x30040880}, 0x4000000) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f62726964676500140001007767"], 0xa8}}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="6000000002060108000000000000000005000003050005000a000000050001000700000005000400000000000900020073797a310000000014000300686173683a69702c706f72742c69700014000780080006400000020008000840"], 0x60}, 0x1, 0x0, 0x0, 0x90}, 0x40c0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0205710, &(0x7f0000000100)={0x1, 0x1, 0x0, 0x0, 0x2}) munlockall() ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000000880)={0x0, @ethernet={0x6, @remote}, @l2tp={0x2, 0x0, @multicast1}, @rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7}, 0x3, 0x0, 0x0, 0x0, 0x7f, &(0x7f0000000280)='veth0_to_batadv\x00', 0x2, 0x1, 0x4}) statx(0xffffffffffffffff, 0x0, 0x400, 0xc244efabf448d323, 0x0) 0s ago: executing program 3 (id=4687): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@local}) openat$sequencer(0xffffffffffffff9c, 0x0, 0x101000, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141102) inotify_init1(0x80000) inotify_add_watch(0xffffffffffffffff, &(0x7f00000003c0)='.\x00', 0x5db) symlinkat(0x0, 0xffffffffffffff9c, 0x0) inotify_init1(0x80800) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xfffdffffffffffff, 0x9, 0x3, 0xf, 0x80000006}, 0x0, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e, 0x8}) set_mempolicy(0x6005, 0x0, 0x7) socket$inet6_udp(0xa, 0x2, 0x0) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000240)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r2, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e}) close_range(r0, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): 130058][T19681] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 1145.281199][T19686] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 1145.299745][T19681] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 1145.366573][T19681] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 1145.585847][ T6402] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 1145.641556][ T5817] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 1145.680207][ T5817] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 1145.805776][ T6404] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 1146.131430][T19693] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3460'. [ 1146.253592][T19700] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 1146.651641][T19707] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 1146.693417][T19707] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1148.751736][T19725] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1148.934613][T19741] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1149.615567][T19752] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 1150.569536][T19725] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1150.671415][T19725] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1150.846277][T19725] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1150.848828][T14513] hid_parser_main: 20 callbacks suppressed [ 1150.848862][T14513] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 1150.850881][T19764] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3484'. [ 1150.855066][T14513] hid-generic 0000:0000:0000.0011: hidraw1: HID v0.00 Device [syz1] on syz0 [ 1151.099792][T19768] fido_id[19768]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1151.168463][T19770] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 1151.171209][T19770] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1151.180649][T19770] vhci_hcd vhci_hcd.0: Device attached [ 1151.263405][T18243] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1151.338118][ T6404] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1151.375210][ T6404] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1151.395711][T18243] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1151.448550][T17045] usb 42-1: SetAddress Request (42) to port 0 [ 1151.460448][T17045] usb 42-1: new SuperSpeed USB device number 42 using vhci_hcd [ 1151.904094][T19771] vhci_hcd: connection reset by peer [ 1151.909411][T14455] vhci_hcd vhci_hcd.2: stop threads [ 1151.911220][T14455] vhci_hcd vhci_hcd.2: release socket [ 1151.913221][T14455] vhci_hcd vhci_hcd.2: disconnect device [ 1152.319795][T19787] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1153.100772][T19797] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 1153.172407][T19799] lo speed is unknown, defaulting to 1000 [ 1153.398619][ T50] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 1153.590387][ T50] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1153.595217][ T50] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1153.600098][ T50] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1153.604439][ T50] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1153.609834][ T50] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1153.618502][ T50] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1153.632532][ T50] usb 9-1: config 0 descriptor?? [ 1154.056052][ T50] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 1154.061269][ T50] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 1154.079327][ T50] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 1154.082322][ T50] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 1154.085160][ T50] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 1154.087990][ T50] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 1154.094553][ T50] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 1154.097492][ T50] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 1154.100118][ T50] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 1154.124951][ T50] plantronics 0003:047F:FFFF.0012: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 1154.319025][T14513] usb 9-1: USB disconnect, device number 15 [ 1154.694684][T19823] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1155.248235][T19827] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1155.621494][T19831] netlink: 'syz.4.3505': attribute type 1 has an invalid length. [ 1155.624874][T19831] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3505'. [ 1155.905790][T19843] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1156.513413][T19854] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1156.540447][T17045] usb 42-1: device descriptor read/8, error -110 [ 1156.950346][T17045] usb usb42-port1: attempt power cycle [ 1157.074753][T19854] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1157.168422][T19854] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1157.270450][T19854] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1157.359644][T19861] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 1157.361701][T19861] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1157.365287][T19861] vhci_hcd vhci_hcd.0: Device attached [ 1157.376974][T19862] vhci_hcd: connection closed [ 1157.377184][T18243] vhci_hcd vhci_hcd.1: stop threads [ 1157.381173][T18243] vhci_hcd vhci_hcd.1: release socket [ 1157.382982][T18243] vhci_hcd vhci_hcd.1: disconnect device [ 1157.452543][T18243] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1157.469690][T18243] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1157.481868][T18243] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1157.508497][T18243] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1157.555551][T17045] usb usb42-port1: unable to enumerate USB device [ 1157.650659][T19874] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1157.719562][T19876] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1158.664863][T19891] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1160.129402][T19922] netlink: 'syz.1.3536': attribute type 4 has an invalid length. [ 1160.398484][T19932] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1161.413476][T19944] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3545'. [ 1161.426242][T19944] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3545'. [ 1161.446910][T19944] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3545'. [ 1161.697220][T19953] FAULT_FLAG_ALLOW_RETRY missing 801 [ 1161.705408][T19953] CPU: 0 UID: 0 PID: 19953 Comm: syz.4.3546 Tainted: G L syzkaller #0 PREEMPT(full) [ 1161.705430][T19953] Tainted: [L]=SOFTLOCKUP [ 1161.705435][T19953] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1161.705464][T19953] Call Trace: [ 1161.705490][T19953] [ 1161.705496][T19953] dump_stack_lvl+0x100/0x190 [ 1161.705558][T19953] handle_userfault.cold+0x54/0x65 [ 1161.705636][T19953] ? do_raw_spin_unlock+0x145/0x1e0 [ 1161.705651][T19953] ? _raw_spin_unlock+0x28/0x50 [ 1161.705821][T19953] ? __free_frozen_pages+0x751/0x1090 [ 1161.705902][T19953] ? __pfx_handle_userfault+0x10/0x10 [ 1161.705929][T19953] ? rcu_read_unlock+0x2d/0xb0 [ 1161.705942][T19953] ? rcu_read_unlock+0x2d/0xb0 [ 1161.705963][T19953] do_anonymous_page+0x1a56/0x2080 [ 1161.705995][T19953] __handle_mm_fault+0x1d2c/0x2a00 [ 1161.706026][T19953] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1161.706049][T19953] ? __pfx___handle_mm_fault+0x10/0x10 [ 1161.706080][T19953] ? pte_offset_map_lock+0x174/0x320 [ 1161.706104][T19953] ? find_held_lock+0x2b/0x80 [ 1161.706133][T19953] ? follow_page_pte+0x4d0/0x13f0 [ 1161.706155][T19953] handle_mm_fault+0x37b/0xa30 [ 1161.706174][T19953] __get_user_pages+0x1178/0x32a0 [ 1161.706194][T19953] ? __pfx___get_user_pages+0x10/0x10 [ 1161.706212][T19953] populate_vma_page_range+0x267/0x3f0 [ 1161.706228][T19953] ? __pfx_populate_vma_page_range+0x10/0x10 [ 1161.706245][T19953] ? vma_set_page_prot+0xb1/0x120 [ 1161.706260][T19953] mprotect_fixup+0x955/0xe30 [ 1161.706280][T19953] ? __pfx_mprotect_fixup+0x10/0x10 [ 1161.706306][T19953] ? __pfx_mas_prev+0x10/0x10 [ 1161.706321][T19953] do_mprotect_pkey+0xa4b/0xef0 [ 1161.706343][T19953] ? __pfx_do_mprotect_pkey+0x10/0x10 [ 1161.706365][T19953] ? find_held_lock+0x2b/0x80 [ 1161.706376][T19953] ? __fget_files+0x215/0x3d0 [ 1161.706402][T19953] __ia32_sys_mprotect+0x75/0xb0 [ 1161.706418][T19953] ? lockdep_hardirqs_on+0x78/0x100 [ 1161.706435][T19953] __do_fast_syscall_32+0xe7/0x970 [ 1161.706455][T19953] do_fast_syscall_32+0x32/0x70 [ 1161.706468][T19953] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1161.706486][T19953] RIP: 0023:0xf701efec [ 1161.706502][T19953] Code: Unable to access opcode bytes at 0xf701efc2. [ 1161.706525][T19953] RSP: 002b:00000000f540d50c EFLAGS: 00000292 ORIG_RAX: 000000000000007d [ 1161.706539][T19953] RAX: ffffffffffffffda RBX: 0000000080ffc000 RCX: 0000000000004000 [ 1161.706547][T19953] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 1161.706554][T19953] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1161.706562][T19953] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1161.706569][T19953] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1161.706585][T19953] [ 1161.888900][T19956] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 1161.891813][T19956] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1161.901693][T19956] vhci_hcd vhci_hcd.0: Device attached [ 1161.905937][T19959] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3547'. [ 1162.178584][T11157] usb 44-1: SetAddress Request (30) to port 0 [ 1162.195199][T11157] usb 44-1: new SuperSpeed USB device number 30 using vhci_hcd [ 1162.678755][ T9] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 1162.792218][T19957] vhci_hcd: connection reset by peer [ 1162.797554][ T6905] vhci_hcd vhci_hcd.3: stop threads [ 1162.799560][ T6905] vhci_hcd vhci_hcd.3: release socket [ 1162.801578][ T6905] vhci_hcd vhci_hcd.3: disconnect device [ 1162.828506][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 1162.833123][ T9] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1162.840344][ T9] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1162.844377][ T9] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1162.847550][ T9] usb 6-1: Product: syz [ 1162.849560][ T9] usb 6-1: Manufacturer: syz [ 1162.851501][ T9] usb 6-1: SerialNumber: syz [ 1162.855271][ T9] usb 6-1: config 0 descriptor?? [ 1162.857770][T19973] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1163.122546][ T7521] usb 6-1: USB disconnect, device number 32 [ 1163.399852][T20002] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1164.275239][T20014] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 1164.302892][T20014] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1164.859686][ T9] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX [ 1167.258581][T11157] usb 44-1: device descriptor read/8, error -110 [ 1167.660144][T11157] usb usb44-port1: attempt power cycle [ 1168.219039][T11157] usb usb44-port1: unable to enumerate USB device [ 1174.435363][T20062] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 1174.470614][T20062] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1176.114284][T20096] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3582'. [ 1176.128221][T20096] syzkaller1: entered promiscuous mode [ 1176.133156][T20096] syzkaller1: entered allmulticast mode [ 1176.409917][T20105] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1177.269642][T19050] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX [ 1182.219799][ T1439] ieee802154 phy1 wpan1: encryption failed: -22 [ 1188.697010][T20141] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1188.706234][T20141] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1188.709500][T20141] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1188.713815][T20141] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1188.716446][T20141] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1188.878213][T20151] netlink: 'syz.1.3593': attribute type 1 has an invalid length. [ 1188.895408][T20151] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1188.922990][T20151] bond3: (slave dummy0): Releasing active interface [ 1188.933628][T20151] bond5: (slave dummy0): making interface the new active one [ 1188.938080][T20151] bond5: (slave dummy0): Enslaving as an active interface with an up link [ 1189.007629][T20157] syzkaller0: entered promiscuous mode [ 1189.010480][T20157] syzkaller0: entered allmulticast mode [ 1189.062218][T20137] lo speed is unknown, defaulting to 1000 [ 1189.465087][T20137] bridge0: port 1(bridge_slave_0) entered blocking state [ 1189.467465][T20137] bridge0: port 1(bridge_slave_0) entered disabled state [ 1189.470957][T20137] bridge_slave_0: entered allmulticast mode [ 1189.473859][T20137] bridge_slave_0: entered promiscuous mode [ 1189.478228][T20137] bridge0: port 2(bridge_slave_1) entered blocking state [ 1189.481007][T20137] bridge0: port 2(bridge_slave_1) entered disabled state [ 1189.483952][T20137] bridge_slave_1: entered allmulticast mode [ 1189.486903][T20137] bridge_slave_1: entered promiscuous mode [ 1189.510194][T20137] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1189.515655][T20137] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1189.539076][T20137] team0: Port device team_slave_0 added [ 1189.543416][T20137] team0: Port device team_slave_1 added [ 1189.570438][T20137] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1189.573170][T20137] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1189.583056][T20137] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1189.589395][T20137] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1189.592127][T20137] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1189.602861][T20137] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1189.673213][T20137] hsr_slave_0: entered promiscuous mode [ 1189.680109][T20137] hsr_slave_1: entered promiscuous mode [ 1189.684875][T20137] debugfs: 'hsr0' already exists in 'hsr' [ 1189.688507][T20137] Cannot create hsr debugfs directory [ 1189.743379][T20175] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1189.886547][T20137] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1189.892373][T20137] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1189.895910][T20137] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1189.913387][T20137] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1189.921575][T20137] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1189.926467][T20137] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1189.929634][T20137] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1189.935569][T20137] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1190.015550][T20137] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1190.029873][T20137] 8021q: adding VLAN 0 to HW filter on device team0 [ 1190.042458][T16693] bridge0: port 1(bridge_slave_0) entered blocking state [ 1190.044813][T16693] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1190.056357][T16704] bridge0: port 2(bridge_slave_1) entered blocking state [ 1190.058947][T16704] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1190.087751][ T5754] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 1190.322496][T20137] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1190.348577][ T9] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 1190.472379][T20137] veth0_vlan: entered promiscuous mode [ 1190.484060][T20137] veth1_vlan: entered promiscuous mode [ 1190.500417][ T9] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1190.509664][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1190.513509][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1190.518160][T20137] veth0_macvtap: entered promiscuous mode [ 1190.522407][T20137] veth1_macvtap: entered promiscuous mode [ 1190.528511][ T9] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1190.533109][ T9] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1190.538434][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1190.541998][T20137] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1190.560083][ T9] usb 6-1: config 0 descriptor?? [ 1190.585362][T20137] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1190.595142][T14455] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1190.603038][ T6905] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1190.616118][ T6905] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1190.664429][ T6905] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1190.738725][T16655] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1190.741274][T16655] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1190.774802][T16655] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1190.777267][T16655] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1190.779827][ T5754] Bluetooth: hci1: command tx timeout [ 1190.922264][T20230] syzkaller0: entered promiscuous mode [ 1190.924554][T20230] syzkaller0: entered allmulticast mode [ 1190.989746][ T9] plantronics 0003:047F:FFFF.0013: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 1191.961449][ T7521] usb 6-1: USB disconnect, device number 33 [ 1192.417337][T20244] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1192.858526][ T5754] Bluetooth: hci1: command tx timeout [ 1192.954258][T20251] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 1193.625525][T20265] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1194.238465][T14513] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 1194.388416][T14513] usb 10-1: Using ep0 maxpacket: 32 [ 1194.392191][T14513] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1194.397443][T14513] usb 10-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1194.402848][T14513] usb 10-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1194.406002][T14513] usb 10-1: Product: syz [ 1194.407792][T14513] usb 10-1: Manufacturer: syz [ 1194.413144][T14513] usb 10-1: SerialNumber: syz [ 1194.422326][T14513] usb 10-1: config 0 descriptor?? [ 1194.429491][T20271] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1194.608637][T20284] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1194.639920][ T7521] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 1194.749245][T11157] usb 10-1: USB disconnect, device number 2 [ 1194.785147][T20289] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 1194.848593][ T7521] usb 9-1: Using ep0 maxpacket: 8 [ 1194.853322][ T7521] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 1194.857618][ T7521] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1194.862720][ T7521] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1194.867113][ T7521] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1194.871973][ T7521] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1194.881562][ T7521] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1194.886310][ T7521] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1194.949454][ T5754] Bluetooth: hci1: command tx timeout [ 1195.048449][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 1195.106068][ T7521] usb 9-1: GET_CAPABILITIES returned 0 [ 1195.108864][ T7521] usbtmc 9-1:16.0: can't read capabilities [ 1195.242114][T20302] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1195.370076][T20305] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1195.382905][ T9] usb 9-1: USB disconnect, device number 16 [ 1195.556023][T20313] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1196.560655][T20324] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 1196.629773][T20327] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1196.958837][T14513] usb 9-1: new full-speed USB device number 17 using dummy_hcd [ 1197.065789][ T5754] Bluetooth: hci1: command tx timeout [ 1197.153793][T14513] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1197.165752][T14513] usb 9-1: not running at top speed; connect to a high speed hub [ 1197.216278][T14513] usb 9-1: New USB device found, idVendor=0ccd, idProduct=0035, bcdDevice= 0.40 [ 1197.227319][T14513] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1197.242927][T14513] usb 9-1: Product: syz [ 1197.251868][T14513] usb 9-1: Manufacturer: syz [ 1197.262859][T14513] usb 9-1: SerialNumber: syz [ 1197.544539][T20337] syzkaller0: entered promiscuous mode [ 1197.546439][T20337] syzkaller0: entered allmulticast mode [ 1197.811405][T20333] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1197.935267][T20348] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1198.787703][T20340] netlink: 'syz.1.3645': attribute type 1 has an invalid length. [ 1198.791447][T20340] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1199.464054][T20358] tipc: Started in network mode [ 1199.466463][T20358] tipc: Node identity 1aa3d832519e, cluster identity 4711 [ 1199.469811][T20358] tipc: Enabled bearer , priority 0 [ 1199.475169][T20359] syzkaller0: entered promiscuous mode [ 1199.477634][T20359] syzkaller0: entered allmulticast mode [ 1199.493500][T20365] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3651'. [ 1199.497878][T20356] tipc: Resetting bearer [ 1199.506087][T20365] 0: reclassify loop, rule prio 0, protocol 700 [ 1199.514014][T20355] tipc: Resetting bearer [ 1199.544918][T14513] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 1199.549246][T20355] tipc: Disabling bearer [ 1199.593458][T20369] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 1199.602797][T14513] snd-usb-audio 9-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 1199.608380][T14513] usb 9-1: USB disconnect, device number 17 [ 1199.679175][T20290] udevd[20290]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1199.755277][T20372] mac80211_hwsim hwsim4 syzkaller0: left promiscuous mode [ 1199.763068][T20372] mac80211_hwsim hwsim4 syzkaller0: left allmulticast mode [ 1200.183674][T20375] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3654'. [ 1200.192265][T20375] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3654'. [ 1200.603478][T20381] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1201.112780][T20380] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1201.298848][T20391] tipc: Cannot configure node identity twice [ 1202.000720][ T50] Process accounting resumed [ 1202.039418][T20406] netlink: 'syz.5.3664': attribute type 2 has an invalid length. [ 1202.044371][T20406] netlink: 'syz.5.3664': attribute type 1 has an invalid length. [ 1202.768715][T20412] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 1203.003367][T20418] netlink: 'syz.5.3668': attribute type 1 has an invalid length. [ 1203.037367][T20418] bridge0: port 2(bridge_slave_1) entered disabled state [ 1203.039979][T20418] bridge0: port 1(bridge_slave_0) entered disabled state [ 1203.099649][T20418] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1203.109169][T20418] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1203.285730][ T6405] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1203.290603][ T6405] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1203.301488][ T6405] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1203.309401][ T6405] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1203.673561][T20430] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1204.667301][T20441] syzkaller0: entered promiscuous mode [ 1204.678493][T20441] syzkaller0: entered allmulticast mode [ 1204.817360][T20448] bond3: (slave dummy0): Releasing active interface [ 1204.820929][T20448] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1204.852562][T20448] team0: Mode changed to "activebackup" [ 1204.858529][T14513] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 1204.863007][T20448] vlan0: entered promiscuous mode [ 1204.874385][T20448] tipc: Enabling of bearer rejected, already enabled [ 1204.949336][T20452] mac80211_hwsim hwsim4 syzkaller0: entered promiscuous mode [ 1204.952581][T20452] mac80211_hwsim hwsim4 syzkaller0: entered allmulticast mode [ 1204.988608][T19050] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 1205.028723][T14513] usb 10-1: Using ep0 maxpacket: 16 [ 1205.033281][T14513] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1205.039786][T14513] usb 10-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1205.043657][T14513] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1205.047000][T14513] usb 10-1: Product: syz [ 1205.050042][T14513] usb 10-1: Manufacturer: syz [ 1205.054475][T14513] usb 10-1: SerialNumber: syz [ 1205.063001][T14513] usb 10-1: config 0 descriptor?? [ 1205.071417][T14513] em28xx 10-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1205.072933][T20454] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1205.075231][T14513] em28xx 10-1:0.0: DVB interface 0 found: bulk [ 1205.091053][T20454] kvm: pic: level sensitive irq not supported [ 1205.091648][T20454] kvm: pic: non byte read [ 1205.097024][T20454] kvm: pic: level sensitive irq not supported [ 1205.097398][T20454] kvm: pic: non byte read [ 1205.103068][T20454] kvm: pic: level sensitive irq not supported [ 1205.103996][T20454] kvm: pic: non byte read [ 1205.110486][T20454] kvm: pic: level sensitive irq not supported [ 1205.111233][T20454] kvm: pic: non byte read [ 1205.120066][T19050] usb 6-1: device descriptor read/64, error -71 [ 1205.128472][T17045] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 1205.298438][T17045] usb 9-1: Using ep0 maxpacket: 32 [ 1205.302579][T17045] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1205.310329][T17045] usb 9-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1205.314265][T17045] usb 9-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1205.317794][T17045] usb 9-1: Product: syz [ 1205.320192][T17045] usb 9-1: Manufacturer: syz [ 1205.322255][T17045] usb 9-1: SerialNumber: syz [ 1205.326677][T17045] usb 9-1: config 0 descriptor?? [ 1205.329970][T20450] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 1205.358545][T19050] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 1205.488838][T19050] usb 6-1: device descriptor read/64, error -71 [ 1205.608745][T19050] usb usb6-port1: attempt power cycle [ 1205.624014][T17045] usb 9-1: USB disconnect, device number 18 [ 1205.699116][T14513] em28xx 10-1:0.0: chip ID is em2765 [ 1205.948487][T19050] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 1205.969421][T19050] usb 6-1: device descriptor read/8, error -71 [ 1206.208601][T19050] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 1206.239135][T19050] usb 6-1: device descriptor read/8, error -71 [ 1206.349761][T19050] usb usb6-port1: unable to enumerate USB device [ 1206.395052][T20465] tipc: Enabled bearer , priority 0 [ 1206.399062][T20465] syzkaller0: entered promiscuous mode [ 1206.400834][T20465] syzkaller0: entered allmulticast mode [ 1206.437156][T14513] em28xx 10-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1206.448858][T14513] em28xx 10-1:0.0: board has no eeprom [ 1206.487785][T20465] tipc: Resetting bearer [ 1206.490347][T20465] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1206.496205][T20465] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1206.511275][T20464] tipc: Resetting bearer [ 1206.518530][T14513] em28xx 10-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1206.522147][T14513] em28xx 10-1:0.0: dvb set to bulk mode. [ 1206.527126][T20464] tipc: Disabling bearer [ 1206.531374][T14515] em28xx 10-1:0.0: Binding DVB extension [ 1206.536003][T14513] usb 10-1: USB disconnect, device number 3 [ 1206.575379][T14513] em28xx 10-1:0.0: Disconnecting em28xx [ 1206.580118][T14515] em28xx 10-1:0.0: Registering input extension [ 1206.585885][T14513] em28xx 10-1:0.0: Closing input extension [ 1206.641598][T14513] em28xx 10-1:0.0: Freeing device [ 1206.772774][T20472] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1206.854795][ T42] audit: type=1326 audit(1783519472.672:1133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20473 comm="syz.4.3685" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf701efec code=0x0 [ 1208.111113][T20491] TC_ACT_REPEAT abuse ? [ 1208.323999][T20498] syzkaller0: entered promiscuous mode [ 1208.326332][T20498] syzkaller0: entered allmulticast mode [ 1208.348187][T20495] netlink: 'syz.4.3693': attribute type 1 has an invalid length. [ 1208.350811][T20495] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1208.783728][T20514] syzkaller0: entered promiscuous mode [ 1208.786097][T20514] syzkaller0: entered allmulticast mode [ 1209.969031][T20532] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3706'. [ 1210.022786][T20532] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3706'. [ 1210.247629][T14513] Process accounting resumed [ 1210.290959][T20542] netlink: 'syz.1.3707': attribute type 2 has an invalid length. [ 1210.293680][T20542] netlink: 'syz.1.3707': attribute type 1 has an invalid length. [ 1211.566709][T20552] fuse: Bad value for 'fd' [ 1211.574424][T20552] batadv_slave_1: entered promiscuous mode [ 1213.005934][T20571] netlink: 2028 bytes leftover after parsing attributes in process `syz.5.3716'. [ 1213.008992][T20571] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3716'. [ 1213.264058][T20574] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1214.077883][T20576] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1214.095293][T20579] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3719'. [ 1214.098160][T20579] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3719'. [ 1214.104539][T20579] team0: entered promiscuous mode [ 1214.104549][T20576] kvm: pic: non byte read [ 1214.106169][T20579] team_slave_0: entered promiscuous mode [ 1214.106330][T20579] team_slave_1: entered promiscuous mode [ 1214.116342][T20576] kvm: pic: level sensitive irq not supported [ 1214.116682][T20579] bond0: entered promiscuous mode [ 1214.116715][T20576] kvm: pic: non byte read [ 1214.118741][T20579] bond_slave_0: entered promiscuous mode [ 1214.118851][T20579] bond_slave_1: entered promiscuous mode [ 1214.120284][T20579] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 1214.130499][T20576] kvm: pic: level sensitive irq not supported [ 1214.131171][T20576] kvm: pic: non byte read [ 1214.151733][T20576] kvm: pic: level sensitive irq not supported [ 1214.152109][T20576] kvm: pic: non byte read [ 1214.159529][T20576] kvm: pic: level sensitive irq not supported [ 1214.159818][T20576] kvm: pic: non byte read [ 1214.164956][T20576] kvm: pic: level sensitive irq not supported [ 1214.165321][T20576] kvm: pic: non byte read [ 1214.313509][T17045] Process accounting resumed [ 1214.323241][T20585] netlink: 'syz.4.3720': attribute type 2 has an invalid length. [ 1214.325908][T20585] netlink: 'syz.4.3720': attribute type 1 has an invalid length. [ 1214.754909][T20588] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 1214.922624][T20591] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1215.407386][T20597] fuse: Bad value for 'fd' [ 1215.504986][T20598] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1215.508966][T20598] batadv_slave_1: entered promiscuous mode [ 1215.571245][T20600] tipc: Enabled bearer , priority 0 [ 1215.576665][T20600] syzkaller0: entered promiscuous mode [ 1215.581812][T20600] syzkaller0: entered allmulticast mode [ 1215.600002][T20600] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 1215.664599][T20600] tipc: Resetting bearer [ 1215.691922][T20599] tipc: Resetting bearer [ 1215.727689][T20599] tipc: Disabling bearer [ 1215.735506][T20604] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1216.299954][T20611] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1216.449385][T20618] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1217.596940][ T7906] IPVS: ip_vs_send_async error -101 [ 1217.600279][T20631] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1218.615399][T20641] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 1219.165082][T20644] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 1220.330830][T20665] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1221.610459][T20676] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 1221.616296][T20677] syzkaller0: entered promiscuous mode [ 1221.621535][T20677] syzkaller0: entered allmulticast mode [ 1221.691260][T20681] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 1221.695274][T20677] tipc: Enabled bearer , priority 0 [ 1221.771790][T20674] tipc: Resetting bearer [ 1222.213063][T20674] tipc: Disabling bearer [ 1223.108757][T20691] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 1226.431690][ T42] audit: type=1800 audit(1783519492.252:1134): pid=20712 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.3758" name="bus" dev="ramfs" ino=142031 res=0 errno=0 [ 1226.681377][T20729] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 1228.168492][T17045] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 1228.337446][T20745] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1228.398431][T17045] usb 9-1: device descriptor read/64, error -71 [ 1228.578551][ T24] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 1228.648595][T17045] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 1228.780494][ T24] usb 10-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1228.787083][ T24] usb 10-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1228.790690][T17045] usb 9-1: device descriptor read/64, error -71 [ 1228.794148][ T24] usb 10-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1228.797331][ T24] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1228.867152][T20740] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1228.910529][T17045] usb usb9-port1: attempt power cycle [ 1228.971686][ T24] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 1230.562211][T20757] 9p: Bad value for 'source' [ 1231.287130][T14513] usb 10-1: USB disconnect, device number 4 [ 1231.541533][T20773] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 1231.630991][T20775] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 1233.238207][T20787] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1234.208650][T20799] openvswitch: netlink: Key type 30 is not supported [ 1235.261911][T20813] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 1237.439361][T20833] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1238.673355][T20846] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 1239.618509][ T24] usb 9-1: new high-speed USB device number 22 using dummy_hcd [ 1239.780896][ T24] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1239.786928][ T24] usb 9-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1239.791411][ T24] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1239.795180][ T24] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1239.802576][T20850] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1239.814225][ T24] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 1242.203597][T20868] fuse: Unknown parameter 'user_id00000000000000000000' [ 1242.384783][T14513] usb 9-1: USB disconnect, device number 22 [ 1242.783522][T20878] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1243.322425][T20884] serio: Serial port ttynull [ 1243.599697][T20827] Set syz1 is full, maxelem 65536 reached [ 1243.661283][ T1439] ieee802154 phy1 wpan1: encryption failed: -22 [ 1245.061063][ T42] audit: type=1326 audit(1783519510.882:1135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20903 comm="syz.5.3806" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcefec code=0x7ffc0000 [ 1245.072736][ T42] audit: type=1326 audit(1783519510.892:1136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20903 comm="syz.5.3806" exe="/syz-executor" sig=0 arch=40000003 syscall=331 compat=1 ip=0xf6fcefec code=0x7ffc0000 [ 1245.088741][ T42] audit: type=1326 audit(1783519510.892:1137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20903 comm="syz.5.3806" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcefec code=0x7ffc0000 [ 1245.108671][ T42] audit: type=1326 audit(1783519510.902:1138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20903 comm="syz.5.3806" exe="/syz-executor" sig=0 arch=40000003 syscall=436 compat=1 ip=0xf6fcefec code=0x7ffc0000 [ 1245.127785][ T42] audit: type=1326 audit(1783519510.902:1139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20903 comm="syz.5.3806" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcefec code=0x7ffc0000 [ 1245.149317][ T42] audit: type=1326 audit(1783519510.902:1140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20903 comm="syz.5.3806" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf6fcefec code=0x7ffc0000 [ 1245.166835][ T42] audit: type=1326 audit(1783519510.902:1141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20903 comm="syz.5.3806" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcefec code=0x7ffc0000 [ 1245.178736][ T42] audit: type=1326 audit(1783519510.922:1142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20903 comm="syz.5.3806" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcefec code=0x7ffc0000 [ 1245.185430][ T42] audit: type=1326 audit(1783519510.922:1143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20903 comm="syz.5.3806" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf6fcefec code=0x7ffc0000 [ 1245.196123][ T42] audit: type=1326 audit(1783519510.922:1144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20903 comm="syz.5.3806" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fcefec code=0x7ffc0000 [ 1245.488505][T17045] usb 6-1: new full-speed USB device number 38 using dummy_hcd [ 1245.640606][T17045] usb 6-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 1245.645149][T17045] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1245.656266][T17045] usb 6-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 1245.663524][T17045] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1245.672731][T17045] usb 6-1: Product: syz [ 1245.679932][T17045] usb 6-1: Manufacturer: syz [ 1245.691252][T17045] usb 6-1: SerialNumber: syz [ 1245.705363][T17045] usb 6-1: config 0 descriptor?? [ 1247.181739][ T9] usb 6-1: USB disconnect, device number 38 [ 1247.880334][T20927] 9p: Bad value for 'source' [ 1248.106626][T20932] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 1248.978532][T20942] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1249.027503][T20944] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 1251.391084][T20971] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1251.457822][T20976] lo speed is unknown, defaulting to 1000 [ 1253.697126][T21000] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1253.985883][ T42] kauditd_printk_skb: 33 callbacks suppressed [ 1253.985895][ T42] audit: type=1800 audit(1783519519.802:1178): pid=21005 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3830" name="file1" dev="tmpfs" ino=5210 res=0 errno=0 [ 1254.033106][T21005] fuse: Unknown parameter 'fp0x0000000000000005' [ 1254.055292][T21005] IPVS: ip_vs_edit_dest(): server weight less than zero [ 1254.378598][ T24] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 1254.538657][ T24] usb 6-1: Using ep0 maxpacket: 8 [ 1254.542634][ T24] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1254.547488][ T24] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1254.551632][ T24] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1254.555676][ T24] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1254.568440][ T24] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1254.574334][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1254.792324][ T24] usb 6-1: GET_CAPABILITIES returned 0 [ 1254.794170][ T24] usbtmc 6-1:16.0: can't read capabilities [ 1254.833717][T21017] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1255.026060][T21009] befs: Unknown parameter 'aN%ÖvP\°ï•Uclß%' [ 1256.580963][ T24] usb 6-1: USB disconnect, device number 39 [ 1256.776534][T21035] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1257.592507][T21037] veth0_to_bridge: Caught tx_queue_len zero misconfig [ 1258.388782][T21047] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1259.255243][T21058] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3845'. [ 1259.270174][T21058] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3845'. [ 1260.039194][T21065] lo speed is unknown, defaulting to 1000 [ 1260.987206][ T42] audit: type=1326 audit(1783519526.802:1179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21072 comm="syz.4.3850" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701efec code=0x7ffc0000 [ 1261.004401][ T42] audit: type=1326 audit(1783519526.822:1180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21072 comm="syz.4.3850" exe="/syz-executor" sig=0 arch=40000003 syscall=331 compat=1 ip=0xf701efec code=0x7ffc0000 [ 1261.013266][ T42] audit: type=1326 audit(1783519526.822:1181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21072 comm="syz.4.3850" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701efec code=0x7ffc0000 [ 1261.039592][ T42] audit: type=1326 audit(1783519526.822:1182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21072 comm="syz.4.3850" exe="/syz-executor" sig=0 arch=40000003 syscall=436 compat=1 ip=0xf701efec code=0x7ffc0000 [ 1261.048739][ T42] audit: type=1326 audit(1783519526.822:1183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21072 comm="syz.4.3850" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701efec code=0x7ffc0000 [ 1261.057577][ T42] audit: type=1326 audit(1783519526.822:1184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21072 comm="syz.4.3850" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701efec code=0x7ffc0000 [ 1261.067566][ T42] audit: type=1326 audit(1783519526.822:1185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21072 comm="syz.4.3850" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf701efec code=0x7ffc0000 [ 1261.082686][ T42] audit: type=1326 audit(1783519526.822:1186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21072 comm="syz.4.3850" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701efec code=0x7ffc0000 [ 1261.115746][T21077] random: crng reseeded on system resumption [ 1261.180812][T21077] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3848'. [ 1261.204201][ T42] audit: type=1326 audit(1783519526.832:1187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21072 comm="syz.4.3850" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701efec code=0x7ffc0000 [ 1261.220208][ T42] audit: type=1326 audit(1783519526.842:1188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21072 comm="syz.4.3850" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf701efec code=0x7ffc0000 [ 1262.287462][T21086] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1262.710831][T21095] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1264.328720][T21122] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1264.923176][T21129] serio: Serial port ttynull [ 1265.105409][T21141] netlink: 'syz.5.3865': attribute type 2 has an invalid length. [ 1265.110376][T21141] netlink: 'syz.5.3865': attribute type 11 has an invalid length. [ 1265.383025][T21146] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gretap0, syncid = 4, id = 0 [ 1265.386085][T21145] IPVS: stopping backup sync thread 21146 ... [ 1265.466944][T21148] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 1265.647511][T21152] lo speed is unknown, defaulting to 1000 [ 1265.753443][T21145] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3866'. [ 1265.756431][T21145] netlink: 'syz.5.3866': attribute type 3 has an invalid length. [ 1265.759090][T21145] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3866'. [ 1265.788181][T21145] geneve2: entered promiscuous mode [ 1265.790096][T21145] geneve2: entered allmulticast mode [ 1265.796190][T14455] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1265.938703][ C3] sr 2:0:0:0: [sr0] tag#21 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 1265.942425][ C3] sr 2:0:0:0: [sr0] tag#21 CDB: Test Unit Ready [ 1265.954781][ T6903] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1265.974957][ T6903] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1266.020958][ T6903] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1266.363227][T21157] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 1266.808587][T21159] Invalid ELF header type: 3 != 1 [ 1267.958482][T17045] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 1267.968544][ T24] usb 10-1: new full-speed USB device number 5 using dummy_hcd [ 1268.122351][ T24] usb 10-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 1268.124013][T17045] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1268.129167][T17045] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1268.130028][ T24] usb 10-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1268.132464][T17045] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1268.139411][T17045] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1268.195722][ T24] usb 10-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 1268.203910][ T24] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1268.209403][ T24] usb 10-1: Product: syz [ 1268.210974][ T24] usb 10-1: Manufacturer: syz [ 1268.212902][ T24] usb 10-1: SerialNumber: syz [ 1268.235574][ T24] usb 10-1: config 0 descriptor?? [ 1268.239620][T21174] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1268.293331][T21167] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1268.444438][T17045] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 1269.857584][ T9488] usb 10-1: USB disconnect, device number 5 [ 1269.930168][T21183] netlink: 'syz.3.3875': attribute type 2 has an invalid length. [ 1269.933673][T21183] netlink: 'syz.3.3875': attribute type 11 has an invalid length. [ 1269.936538][T21192] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 1270.829258][ T24] usb 6-1: USB disconnect, device number 40 [ 1270.898011][T21197] openvswitch: : Dropping previously announced user features [ 1270.907154][T21197] openvswitch: : Dropping previously announced user features [ 1270.987170][T21199] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1271.297867][T21211] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gretap0, syncid = 4, id = 0 [ 1271.301570][T21210] IPVS: stopping backup sync thread 21211 ... [ 1271.335007][T21210] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3882'. [ 1271.338047][T21210] netlink: 'syz.4.3882': attribute type 3 has an invalid length. [ 1271.344500][T21210] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3882'. [ 1271.363375][T21210] geneve3: entered promiscuous mode [ 1271.365120][T21210] geneve3: entered allmulticast mode [ 1272.059739][T21218] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1273.104484][T21231] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3887'. [ 1273.161962][T21231] lo speed is unknown, defaulting to 1000 [ 1273.977997][T21244] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 1274.208478][ T24] usb 9-1: new full-speed USB device number 23 using dummy_hcd [ 1274.372198][ T24] usb 9-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 1274.380715][ T24] usb 9-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1274.404536][ T24] usb 9-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 1274.408389][ T24] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1274.411381][ T24] usb 9-1: Product: syz [ 1274.413079][ T24] usb 9-1: Manufacturer: syz [ 1274.416354][ T24] usb 9-1: SerialNumber: syz [ 1274.423764][ T24] usb 9-1: config 0 descriptor?? [ 1274.687500][T21242] loop3: detected capacity change from 0 to 7 [ 1274.701580][T21242] Dev loop3: unable to read RDB block 7 [ 1274.703511][T21242] loop3: unable to read partition table [ 1274.705692][T21242] loop3: partition table beyond EOD, truncated [ 1274.918571][T21242] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1275.646143][ T9488] usb 9-1: USB disconnect, device number 23 [ 1276.031654][T21256] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1276.430948][T21262] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3897'. [ 1276.868036][T21270] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 1276.870880][T21270] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1276.890750][T21270] vhci_hcd vhci_hcd.0: Device attached [ 1277.228583][T14513] usb 40-1: SetAddress Request (51) to port 0 [ 1277.231489][T14513] usb 40-1: new SuperSpeed USB device number 51 using vhci_hcd [ 1277.684265][T21271] vhci_hcd: connection reset by peer [ 1277.690435][ T13] vhci_hcd vhci_hcd.1: stop threads [ 1277.692245][ T13] vhci_hcd vhci_hcd.1: release socket [ 1277.694143][ T13] vhci_hcd vhci_hcd.1: disconnect device [ 1278.301323][T21290] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 1278.303429][T21290] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1278.306347][T21290] vhci_hcd vhci_hcd.0: Device attached [ 1278.401932][T21293] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 1278.404029][T21293] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1278.407330][T21293] vhci_hcd vhci_hcd.0: Device attached [ 1278.548919][ T7521] usb 43-1: new low-speed USB device number 2 using vhci_hcd [ 1278.570813][T21301] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3903'. [ 1278.575581][T21301] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3903'. [ 1278.649025][T17045] usb 45-1: new low-speed USB device number 2 using vhci_hcd [ 1278.672478][T21299] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1279.068882][ T42] kauditd_printk_skb: 25 callbacks suppressed [ 1279.068921][ T42] audit: type=1804 audit(1783519544.872:1214): pid=21310 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.3908" name="/newroot/1004/file0" dev="tmpfs" ino=5320 res=1 errno=0 [ 1279.230758][T21291] vhci_hcd: connection reset by peer [ 1279.233565][ T6903] vhci_hcd vhci_hcd.3: stop threads [ 1279.235260][ T6903] vhci_hcd vhci_hcd.3: release socket [ 1279.237168][ T6903] vhci_hcd vhci_hcd.3: disconnect device [ 1279.254248][T21294] vhci_hcd: connection reset by peer [ 1279.279657][ T6903] vhci_hcd vhci_hcd.4: stop threads [ 1279.281336][ T6903] vhci_hcd vhci_hcd.4: release socket [ 1279.283158][ T6903] vhci_hcd vhci_hcd.4: disconnect device [ 1280.313238][T21323] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 1280.315961][T21323] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1280.342298][T21323] vhci_hcd vhci_hcd.0: Device attached [ 1280.598797][T11157] usb 47-1: new low-speed USB device number 2 using vhci_hcd [ 1280.704715][T21337] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1280.757195][T21326] vhci_hcd: connection reset by peer [ 1280.767579][ T6405] vhci_hcd vhci_hcd.5: stop threads [ 1280.769982][ T6405] vhci_hcd vhci_hcd.5: release socket [ 1280.772410][ T6405] vhci_hcd vhci_hcd.5: disconnect device [ 1280.982090][T21340] netlink: 'syz.3.3915': attribute type 13 has an invalid length. [ 1281.051920][T21335] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1281.054744][T21335] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 1281.096932][T21335] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1281.101054][T21335] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 1281.681465][T21349] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1282.298528][T14513] usb 40-1: device descriptor read/8, error -110 [ 1282.718681][T14513] usb usb40-port1: attempt power cycle [ 1283.241837][T21360] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 1283.352043][T14513] usb usb40-port1: unable to enumerate USB device [ 1283.848526][T17045] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 1283.851361][ T7521] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 1285.845287][T11157] vhci_hcd vhci_hcd.5: vhci_device speed not set [ 1285.962285][T21379] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 1285.965078][T21379] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1285.975674][T21379] vhci_hcd vhci_hcd.0: Device attached [ 1286.464529][T21388] random: crng reseeded on system resumption [ 1286.480516][T21388] Restarting kernel threads ... [ 1286.485027][T21388] Done restarting kernel threads. [ 1286.643203][T21380] vhci_hcd: connection closed [ 1286.644161][ T6402] vhci_hcd vhci_hcd.5: stop threads [ 1286.648237][ T6402] vhci_hcd vhci_hcd.5: release socket [ 1286.650466][ T6402] vhci_hcd vhci_hcd.5: disconnect device [ 1286.744461][T11157] vhci_hcd vhci_hcd.5: vhci_device speed not set [ 1286.798621][T21392] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1287.693182][T21404] lo speed is unknown, defaulting to 1000 [ 1288.086074][T21409] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 1288.089013][T21409] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1288.134584][T21409] vhci_hcd vhci_hcd.0: Device attached [ 1288.803532][T21411] vhci_hcd: connection closed [ 1288.805090][ T6903] vhci_hcd vhci_hcd.1: stop threads [ 1288.850946][ T6903] vhci_hcd vhci_hcd.1: release socket [ 1288.865454][ T6903] vhci_hcd vhci_hcd.1: disconnect device [ 1289.173073][T21415] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 1290.217649][T21422] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 1290.220138][T21422] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1290.231355][T21422] vhci_hcd vhci_hcd.0: Device attached [ 1290.468682][T17045] usb 39-1: new low-speed USB device number 2 using vhci_hcd [ 1290.552447][T21428] tmpfs: Bad value for 'mpol' [ 1290.886920][T21430] ceph: No mds server is up or the cluster is laggy [ 1290.922049][T11157] libceph: connect (1)[c::]:6789 error -101 [ 1290.932098][T11157] libceph: mon0 (1)[c::]:6789 connect error [ 1291.104964][T21434] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1292.229985][T21423] vhci_hcd: connection reset by peer [ 1292.234860][ T5817] vhci_hcd vhci_hcd.1: stop threads [ 1292.237174][ T5817] vhci_hcd vhci_hcd.1: release socket [ 1292.242338][ T5817] vhci_hcd vhci_hcd.1: disconnect device [ 1292.244214][T21449] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 1292.246220][T21449] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1292.256834][T21449] vhci_hcd vhci_hcd.0: Device attached [ 1292.444112][T21455] lo speed is unknown, defaulting to 1000 [ 1292.507282][ C2] sr 2:0:0:0: [sr0] tag#16 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 1292.508538][T11157] usb 47-1: new low-speed USB device number 3 using vhci_hcd [ 1292.511591][ C2] sr 2:0:0:0: [sr0] tag#16 CDB: ATA command pass through(16) [ 1292.516912][ C2] sr 2:0:0:0: [sr0] tag#16 CDB[00]: 85 36 b6 0b fa d6 6e 0d 02 27 75 e7 13 6f 4f 8e [ 1292.520844][ C2] sr 2:0:0:0: [sr0] tag#16 CDB[10]: 31 ca 19 8f da 87 37 30 27 3a c9 36 ac 05 55 17 [ 1292.932172][T21451] vhci_hcd: connection reset by peer [ 1292.948550][ T6903] vhci_hcd vhci_hcd.5: stop threads [ 1292.950751][ T6903] vhci_hcd vhci_hcd.5: release socket [ 1292.953159][ T6903] vhci_hcd vhci_hcd.5: disconnect device [ 1293.428503][T21463] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 1293.430590][T21463] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1293.447255][T21463] vhci_hcd vhci_hcd.0: Device attached [ 1293.952038][T21467] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 1293.954263][T21467] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1293.956810][T21467] vhci_hcd vhci_hcd.0: Device attached [ 1293.966267][T21474] vhci_hcd: connection closed [ 1293.966534][T18242] vhci_hcd vhci_hcd.3: stop threads [ 1293.970085][T18242] vhci_hcd vhci_hcd.3: release socket [ 1293.971996][T18242] vhci_hcd vhci_hcd.3: disconnect device [ 1294.068496][T21464] vhci_hcd: connection closed [ 1294.069208][T18242] vhci_hcd vhci_hcd.1: stop threads [ 1294.075450][T18242] vhci_hcd vhci_hcd.1: release socket [ 1294.078446][T18242] vhci_hcd vhci_hcd.1: disconnect device [ 1295.230970][T21489] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1295.568514][T17045] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 1295.852868][T21457] Set syz1 is full, maxelem 65536 reached [ 1296.052505][T21500] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1296.413950][T21509] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 1296.507633][T21511] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 1296.510425][T21511] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1296.514606][T21511] vhci_hcd vhci_hcd.0: Device attached [ 1297.124854][T21512] vhci_hcd: connection closed [ 1297.125174][ T13] vhci_hcd vhci_hcd.5: stop threads [ 1297.132949][ T13] vhci_hcd vhci_hcd.5: release socket [ 1297.136128][ T13] vhci_hcd vhci_hcd.5: disconnect device [ 1297.452133][T21520] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 1297.454713][T21520] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1297.496465][T21520] vhci_hcd vhci_hcd.0: Device attached [ 1297.668696][T11157] vhci_hcd vhci_hcd.5: vhci_device speed not set [ 1297.738658][T17045] usb 39-1: new low-speed USB device number 3 using vhci_hcd [ 1298.424688][T21535] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 1298.557859][T21521] vhci_hcd: connection reset by peer [ 1298.562657][ T6405] vhci_hcd vhci_hcd.1: stop threads [ 1298.564897][ T6405] vhci_hcd vhci_hcd.1: release socket [ 1298.572828][ T6405] vhci_hcd vhci_hcd.1: disconnect device [ 1298.697324][T21533] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 1298.700186][T21533] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1298.705532][T21533] vhci_hcd vhci_hcd.0: Device attached [ 1299.028501][T11157] usb 47-1: new low-speed USB device number 4 using vhci_hcd [ 1299.042965][T21537] vhci_hcd: connection reset by peer [ 1299.048030][T18242] vhci_hcd vhci_hcd.5: stop threads [ 1299.053247][T18242] vhci_hcd vhci_hcd.5: release socket [ 1299.056760][T18242] vhci_hcd vhci_hcd.5: disconnect device [ 1299.343117][T21544] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 1299.345219][T21544] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1299.350820][T21544] vhci_hcd vhci_hcd.0: Device attached [ 1299.598427][ T9] usb 43-1: new low-speed USB device number 3 using vhci_hcd [ 1299.890210][T21545] vhci_hcd: connection reset by peer [ 1299.893193][ T5817] vhci_hcd vhci_hcd.3: stop threads [ 1299.896510][ T5817] vhci_hcd vhci_hcd.3: release socket [ 1299.898833][ T5817] vhci_hcd vhci_hcd.3: disconnect device [ 1299.955042][T21558] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 1300.155415][T21563] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 1300.157407][T21563] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1300.174760][T21563] vhci_hcd vhci_hcd.0: Device attached [ 1300.418471][ T7521] usb 45-1: new low-speed USB device number 3 using vhci_hcd [ 1300.797699][T21564] vhci_hcd: connection closed [ 1300.801088][ T5817] vhci_hcd vhci_hcd.4: stop threads [ 1300.809046][ T5817] vhci_hcd vhci_hcd.4: release socket [ 1300.815585][ T5817] vhci_hcd vhci_hcd.4: disconnect device [ 1301.153429][ T7521] usb 45-1: enqueue for inactive port 0 [ 1301.228547][ T7521] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 1301.820943][T21576] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 1301.823665][T21576] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1301.826916][T21576] vhci_hcd vhci_hcd.0: Device attached [ 1302.246303][T21586] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1302.324522][T21577] vhci_hcd: connection closed [ 1302.325408][ T6405] vhci_hcd vhci_hcd.5: stop threads [ 1302.336152][ T6405] vhci_hcd vhci_hcd.5: release socket [ 1302.343006][ T6405] vhci_hcd vhci_hcd.5: disconnect device [ 1302.868597][T17045] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 1303.462808][T21606] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 1304.138503][T11157] vhci_hcd vhci_hcd.5: vhci_device speed not set [ 1304.649842][T21624] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1304.665793][T21620] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1304.688654][ T9] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 1305.100883][ T1439] ieee802154 phy1 wpan1: encryption failed: -22 [ 1305.588234][T21637] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 1305.590299][T21637] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1305.620239][T21637] vhci_hcd vhci_hcd.0: Device attached [ 1305.889739][T11157] usb 47-1: new low-speed USB device number 5 using vhci_hcd [ 1306.117605][T21638] vhci_hcd: connection reset by peer [ 1306.129491][ T5817] vhci_hcd vhci_hcd.5: stop threads [ 1306.132003][ T5817] vhci_hcd vhci_hcd.5: release socket [ 1306.135519][ T5817] vhci_hcd vhci_hcd.5: disconnect device [ 1307.242274][T21658] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 1307.244433][T21658] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1307.253292][T21658] vhci_hcd vhci_hcd.0: Device attached [ 1307.275109][T21652] netlink: 'syz.5.3990': attribute type 1 has an invalid length. [ 1307.278499][T21652] netlink: 756 bytes leftover after parsing attributes in process `syz.5.3990'. [ 1307.282831][T21653] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 1307.285087][T21653] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1307.293340][T21653] vhci_hcd vhci_hcd.0: Device attached [ 1307.588639][ T7521] usb 45-1: new low-speed USB device number 4 using vhci_hcd [ 1307.591693][T17045] usb 39-1: new low-speed USB device number 4 using vhci_hcd [ 1307.964553][T21666] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1307.983150][T21661] vhci_hcd: connection reset by peer [ 1307.990801][ T13] vhci_hcd vhci_hcd.4: stop threads [ 1307.993219][ T13] vhci_hcd vhci_hcd.4: release socket [ 1307.995499][ T13] vhci_hcd vhci_hcd.4: disconnect device [ 1308.232908][T21675] netlink: 'syz.3.3994': attribute type 1 has an invalid length. [ 1308.236667][T21675] netlink: 756 bytes leftover after parsing attributes in process `syz.3.3994'. [ 1308.378653][T21659] vhci_hcd: connection reset by peer [ 1308.388152][ T5817] vhci_hcd vhci_hcd.1: stop threads [ 1308.390035][ T5817] vhci_hcd vhci_hcd.1: release socket [ 1308.392281][ T5817] vhci_hcd vhci_hcd.1: disconnect device [ 1308.420951][T21678] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1309.962113][T21697] netlink: 'syz.5.4000': attribute type 1 has an invalid length. [ 1309.964955][T21697] netlink: 756 bytes leftover after parsing attributes in process `syz.5.4000'. [ 1310.968947][T21706] lo speed is unknown, defaulting to 1000 [ 1311.008360][T21703] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1311.046648][T11157] vhci_hcd vhci_hcd.5: vhci_device speed not set [ 1311.455053][T21715] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1312.748448][ T7521] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 1312.751362][T17045] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 1313.224397][T21743] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4012'. [ 1313.402205][T21745] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1314.245980][T21751] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 1315.315883][T21763] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1315.615125][T21770] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1316.054089][T21775] netlink: 'syz.1.4020': attribute type 1 has an invalid length. [ 1316.057049][T21775] netlink: 756 bytes leftover after parsing attributes in process `syz.1.4020'. [ 1316.104749][T21784] lo speed is unknown, defaulting to 1000 [ 1316.179020][T21786] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4022'. [ 1317.284732][T21795] netlink: 'syz.3.4025': attribute type 1 has an invalid length. [ 1317.287865][T21795] netlink: 756 bytes leftover after parsing attributes in process `syz.3.4025'. [ 1317.766183][T21805] netlink: 'syz.3.4027': attribute type 1 has an invalid length. [ 1317.768797][T21805] netlink: 756 bytes leftover after parsing attributes in process `syz.3.4027'. [ 1318.242651][T21810] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1319.123743][T21830] lo speed is unknown, defaulting to 1000 [ 1319.651360][T21838] netlink: 'syz.1.4036': attribute type 1 has an invalid length. [ 1319.653939][T21838] netlink: 756 bytes leftover after parsing attributes in process `syz.1.4036'. [ 1319.771520][T21843] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4037'. [ 1319.924911][T21846] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1320.692046][T21855] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1320.782770][T21860] netlink: 'syz.5.4042': attribute type 1 has an invalid length. [ 1320.786095][T21860] netlink: 756 bytes leftover after parsing attributes in process `syz.5.4042'. [ 1321.974127][T21875] netlink: 'syz.5.4046': attribute type 1 has an invalid length. [ 1321.976967][T21875] netlink: 756 bytes leftover after parsing attributes in process `syz.5.4046'. [ 1322.237538][T21882] lo speed is unknown, defaulting to 1000 [ 1322.259674][T21878] netlink: 'syz.5.4047': attribute type 1 has an invalid length. [ 1322.262303][T21878] netlink: 756 bytes leftover after parsing attributes in process `syz.5.4047'. [ 1322.313105][T21883] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1322.430584][T21891] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4050'. [ 1322.509968][T21889] netlink: 'syz.3.4051': attribute type 1 has an invalid length. [ 1322.515638][T21889] netlink: 756 bytes leftover after parsing attributes in process `syz.3.4051'. [ 1322.670373][T21894] lo speed is unknown, defaulting to 1000 [ 1323.570624][T21903] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1323.961783][T21908] netlink: 'syz.4.4055': attribute type 1 has an invalid length. [ 1323.965125][T21908] netlink: 756 bytes leftover after parsing attributes in process `syz.4.4055'. [ 1324.705273][T21920] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4059'. [ 1324.707319][T21921] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 1324.711609][T21921] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1324.792293][T21921] vhci_hcd vhci_hcd.0: Device attached [ 1325.254836][T21887] Set syz1 is full, maxelem 65536 reached [ 1325.727516][T21929] netlink: 'syz.1.4061': attribute type 1 has an invalid length. [ 1325.731083][T21929] netlink: 756 bytes leftover after parsing attributes in process `syz.1.4061'. [ 1326.175514][T21936] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4063'. [ 1326.183221][T17045] usb 45-1: new low-speed USB device number 5 using vhci_hcd [ 1326.761615][T21939] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 1326.893795][T21922] vhci_hcd: connection reset by peer [ 1326.895932][T14455] vhci_hcd vhci_hcd.4: stop threads [ 1326.897982][T14455] vhci_hcd vhci_hcd.4: release socket [ 1326.903096][T14455] vhci_hcd vhci_hcd.4: disconnect device [ 1327.567083][T21949] netlink: 'syz.3.4068': attribute type 1 has an invalid length. [ 1327.575439][T21949] netlink: 756 bytes leftover after parsing attributes in process `syz.3.4068'. [ 1328.455846][T21962] netlink: 'syz.5.4071': attribute type 1 has an invalid length. [ 1328.459381][T21962] netlink: 756 bytes leftover after parsing attributes in process `syz.5.4071'. [ 1328.481041][T21968] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4072'. [ 1328.770195][T21971] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4074'. [ 1329.490927][T21973] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 1329.493695][T21973] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1329.497352][T21973] vhci_hcd vhci_hcd.0: Device attached [ 1329.700078][T21974] vhci_hcd: connection closed [ 1329.700311][ T13] vhci_hcd vhci_hcd.4: stop threads [ 1329.705061][ T13] vhci_hcd vhci_hcd.4: release socket [ 1329.707419][ T13] vhci_hcd vhci_hcd.4: disconnect device [ 1329.838006][T21983] lo speed is unknown, defaulting to 1000 [ 1329.841802][T21985] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 1330.043673][T21981] lo speed is unknown, defaulting to 1000 [ 1331.333721][T17045] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 1332.157601][T22010] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4084'. [ 1332.520940][T22013] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4085'. [ 1333.404719][T22022] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4088'. [ 1333.959453][T22026] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1334.007179][T22028] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 1334.422675][T22035] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4092'. [ 1335.483914][T22047] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4096'. [ 1335.916306][T22049] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1336.622711][T22057] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4098'. [ 1336.700540][T22053] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 1336.703273][T22053] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1336.723284][T22053] vhci_hcd vhci_hcd.0: Device attached [ 1336.822566][T22054] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 1336.825296][T22054] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1336.899953][T22054] vhci_hcd vhci_hcd.0: Device attached [ 1337.305130][T22058] vhci_hcd: connection closed [ 1337.310432][ T13] vhci_hcd vhci_hcd.3: stop threads [ 1337.317642][ T13] vhci_hcd vhci_hcd.3: release socket [ 1337.324995][T22062] vhci_hcd: connection closed [ 1337.327273][ T13] vhci_hcd vhci_hcd.3: disconnect device [ 1337.341010][ T13] vhci_hcd vhci_hcd.4: stop threads [ 1337.342817][ T13] vhci_hcd vhci_hcd.4: release socket [ 1337.346757][ T13] vhci_hcd vhci_hcd.4: disconnect device [ 1337.657909][ T9488] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 1337.661053][ T9] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 1338.241802][T22073] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4102'. [ 1339.377782][T22075] netlink: 'syz.1.4103': attribute type 1 has an invalid length. [ 1339.380935][T22075] netlink: 756 bytes leftover after parsing attributes in process `syz.1.4103'. [ 1339.456312][T22081] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1339.545057][T22084] netlink: 'syz.3.4106': attribute type 1 has an invalid length. [ 1339.548300][T22084] netlink: 756 bytes leftover after parsing attributes in process `syz.3.4106'. [ 1339.796161][T22087] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1340.376816][T22095] lo speed is unknown, defaulting to 1000 [ 1340.400999][T22098] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4109'. [ 1341.170529][T22101] Set syz1 is full, maxelem 65536 reached [ 1341.838628][T22115] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 1341.841397][T22115] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1341.864011][T22115] vhci_hcd vhci_hcd.0: Device attached [ 1341.880867][T22118] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4114'. [ 1342.138515][T17045] usb 45-1: new low-speed USB device number 7 using vhci_hcd [ 1342.280156][T22116] vhci_hcd: connection reset by peer [ 1342.282953][ T6400] vhci_hcd vhci_hcd.4: stop threads [ 1342.284623][ T6400] vhci_hcd vhci_hcd.4: release socket [ 1342.287652][ T6400] vhci_hcd vhci_hcd.4: disconnect device [ 1343.963502][T22132] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1344.042307][T22137] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4120'. [ 1344.856021][T22141] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 1345.012297][T22144] netlink: 'syz.3.4122': attribute type 1 has an invalid length. [ 1345.020984][T22144] netlink: 756 bytes leftover after parsing attributes in process `syz.3.4122'. [ 1345.099374][T22143] netlink: 'syz.5.4123': attribute type 1 has an invalid length. [ 1345.102495][T22143] netlink: 756 bytes leftover after parsing attributes in process `syz.5.4123'. [ 1346.151319][T22158] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4128'. [ 1346.613878][T22161] lo speed is unknown, defaulting to 1000 [ 1346.720388][T22162] netlink: 'syz.1.4129': attribute type 1 has an invalid length. [ 1346.725231][T22162] netlink: 756 bytes leftover after parsing attributes in process `syz.1.4129'. [ 1347.184607][T22170] lo speed is unknown, defaulting to 1000 [ 1347.254759][T22173] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4131'. [ 1347.268498][T17045] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 1348.308523][ T7906] IPVS: ip_vs_send_async error -101 [ 1348.783681][T22181] lo speed is unknown, defaulting to 1000 [ 1349.199572][T22187] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1349.391619][T22190] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4136'. [ 1349.991370][T22193] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 1350.454511][T22199] lo speed is unknown, defaulting to 1000 [ 1350.521933][T22201] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4138'. [ 1351.424782][T22206] lo speed is unknown, defaulting to 1000 [ 1351.971578][T22183] Set syz1 is full, maxelem 65536 reached [ 1352.108798][T22215] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4142'. [ 1352.222623][T22165] Set syz1 is full, maxelem 65536 reached [ 1352.416436][T22209] Set syz1 is full, maxelem 65536 reached [ 1352.475146][T22218] netlink: 'syz.3.4143': attribute type 1 has an invalid length. [ 1352.478262][T22218] netlink: 756 bytes leftover after parsing attributes in process `syz.3.4143'. [ 1353.293521][T22225] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4146'. [ 1353.532680][T22229] netlink: 'syz.5.4149': attribute type 1 has an invalid length. [ 1353.536000][T22229] netlink: 756 bytes leftover after parsing attributes in process `syz.5.4149'. [ 1353.700871][T22234] lo speed is unknown, defaulting to 1000 [ 1353.792947][T22232] netlink: 'syz.5.4150': attribute type 1 has an invalid length. [ 1353.799273][T22232] netlink: 756 bytes leftover after parsing attributes in process `syz.5.4150'. [ 1353.958541][T22240] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 1354.279021][T22239] Set syz1 is full, maxelem 65536 reached [ 1354.567661][T22250] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4153'. [ 1354.701645][T22255] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 1354.852041][T22253] netlink: 'syz.3.4154': attribute type 1 has an invalid length. [ 1354.855319][T22253] netlink: 756 bytes leftover after parsing attributes in process `syz.3.4154'. [ 1355.156131][T22265] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4159'. [ 1355.237917][T22267] lo speed is unknown, defaulting to 1000 [ 1355.457778][T22272] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4160'. [ 1356.310095][T22269] Set syz1 is full, maxelem 65536 reached [ 1357.177779][T22292] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4166'. [ 1358.198085][T22306] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4171'. [ 1359.115353][T22311] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 1359.118178][T22311] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1359.130007][T22311] vhci_hcd vhci_hcd.0: Device attached [ 1359.209963][T22317] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 1359.212057][T22317] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1359.222379][T22317] vhci_hcd vhci_hcd.0: Device attached [ 1359.438471][ T7521] usb 39-1: new low-speed USB device number 5 using vhci_hcd [ 1359.502165][T22312] vhci_hcd: connection reset by peer [ 1359.504144][ T6903] vhci_hcd vhci_hcd.1: stop threads [ 1359.505807][ T6903] vhci_hcd vhci_hcd.1: release socket [ 1359.509017][ T6903] vhci_hcd vhci_hcd.1: disconnect device [ 1359.518460][T17045] usb 47-1: new low-speed USB device number 6 using vhci_hcd [ 1359.617796][T22318] vhci_hcd: connection reset by peer [ 1359.620065][ T6903] vhci_hcd vhci_hcd.5: stop threads [ 1359.621820][ T6903] vhci_hcd vhci_hcd.5: release socket [ 1359.624213][ T6903] vhci_hcd vhci_hcd.5: disconnect device [ 1360.627855][T22328] lo speed is unknown, defaulting to 1000 [ 1360.708197][T22332] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4176'. [ 1361.524777][T22343] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1361.795336][T22346] netlink: 'syz.4.4181': attribute type 1 has an invalid length. [ 1361.800134][T22346] netlink: 756 bytes leftover after parsing attributes in process `syz.4.4181'. [ 1362.439661][T22361] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4183'. [ 1362.708473][T22364] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4186'. [ 1363.919258][T22372] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4188'. [ 1363.924210][T22374] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 1364.648458][T17045] vhci_hcd vhci_hcd.5: vhci_device speed not set [ 1364.805274][T22371] netlink: 'syz.4.4189': attribute type 1 has an invalid length. [ 1364.816945][T22371] netlink: 756 bytes leftover after parsing attributes in process `syz.4.4189'. [ 1364.849243][ T7521] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 1365.406951][T22391] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4194'. [ 1365.450662][T22392] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4195'. [ 1366.541540][ T1439] ieee802154 phy1 wpan1: encryption failed: -22 [ 1366.916675][T22403] lo speed is unknown, defaulting to 1000 [ 1367.394501][T22406] Set syz1 is full, maxelem 65536 reached [ 1367.395405][T22408] netlink: 'syz.4.4200': attribute type 1 has an invalid length. [ 1367.403281][T22408] netlink: 756 bytes leftover after parsing attributes in process `syz.4.4200'. [ 1367.632166][T22412] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4201'. [ 1367.789910][T22417] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4202'. [ 1368.901248][T22424] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4205'. [ 1368.979175][T22426] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4204'. [ 1369.216049][T22427] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1371.001902][T22445] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4210'. [ 1371.091195][T22447] netlink: 'syz.3.4212': attribute type 1 has an invalid length. [ 1371.094705][T22447] netlink: 756 bytes leftover after parsing attributes in process `syz.3.4212'. [ 1372.159313][T22452] lo speed is unknown, defaulting to 1000 [ 1372.225405][T22457] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4216'. [ 1372.309169][T22459] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1372.650535][T22462] Set syz1 is full, maxelem 65536 reached [ 1372.932044][T22468] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1373.349021][T22476] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4220'. [ 1373.394924][T22477] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 1373.397539][T22477] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1373.411334][T22477] vhci_hcd vhci_hcd.0: Device attached [ 1373.648519][T11157] usb 47-1: new low-speed USB device number 7 using vhci_hcd [ 1374.175800][T22479] vhci_hcd: connection reset by peer [ 1374.184210][ T6402] vhci_hcd vhci_hcd.5: stop threads [ 1374.186470][ T6402] vhci_hcd vhci_hcd.5: release socket [ 1374.189310][ T6402] vhci_hcd vhci_hcd.5: disconnect device [ 1374.761048][T22490] lo speed is unknown, defaulting to 1000 [ 1375.029723][T22491] Set syz1 is full, maxelem 65536 reached [ 1375.099850][T22495] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4224'. [ 1376.007386][T22497] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 1376.009470][T22497] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1376.018571][T22497] vhci_hcd vhci_hcd.0: Device attached [ 1376.044291][T22503] netlink: 'syz.3.4226': attribute type 1 has an invalid length. [ 1376.047407][T22503] netlink: 756 bytes leftover after parsing attributes in process `syz.3.4226'. [ 1376.095645][T22507] lo speed is unknown, defaulting to 1000 [ 1376.160612][T22504] vhci_hcd: connection closed [ 1376.166905][ T6402] vhci_hcd vhci_hcd.4: stop threads [ 1376.173621][ T6402] vhci_hcd vhci_hcd.4: release socket [ 1376.178397][ T6402] vhci_hcd vhci_hcd.4: disconnect device [ 1376.201950][ T7521] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 1376.295811][T22514] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1376.593154][T22519] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4230'. [ 1377.361770][T22522] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4231'. [ 1377.535214][T22526] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4232'. [ 1378.471974][T22512] Set syz1 is full, maxelem 65536 reached [ 1378.560252][T22530] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1378.683414][T22536] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4236'. [ 1378.868460][T11157] vhci_hcd vhci_hcd.5: vhci_device speed not set [ 1379.063618][T22547] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 1379.065680][T22547] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1379.070337][T22547] vhci_hcd vhci_hcd.0: Device attached [ 1379.141168][T22539] Set syz1 is full, maxelem 65536 reached [ 1379.191785][T22532] lo speed is unknown, defaulting to 1000 [ 1379.242026][T22538] lo speed is unknown, defaulting to 1000 [ 1379.256547][T22552] lo speed is unknown, defaulting to 1000 [ 1379.303315][T22541] Set syz1 is full, maxelem 65536 reached [ 1379.308927][ T7521] usb 39-1: new low-speed USB device number 6 using vhci_hcd [ 1379.493285][T22548] vhci_hcd: connection reset by peer [ 1379.495410][ T13] vhci_hcd vhci_hcd.1: stop threads [ 1379.497178][ T13] vhci_hcd vhci_hcd.1: release socket [ 1379.503098][ T13] vhci_hcd vhci_hcd.1: disconnect device [ 1380.476775][T22561] lo speed is unknown, defaulting to 1000 [ 1380.645266][T22564] netlink: 'syz.3.4242': attribute type 1 has an invalid length. [ 1380.650047][T22564] netlink: 756 bytes leftover after parsing attributes in process `syz.3.4242'. [ 1380.845443][T22565] Set syz1 is full, maxelem 65536 reached [ 1381.135367][T22574] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4244'. [ 1381.804633][T22584] netlink: 'syz.4.4246': attribute type 1 has an invalid length. [ 1381.807179][T22584] netlink: 756 bytes leftover after parsing attributes in process `syz.4.4246'. [ 1381.821370][T22587] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4248'. [ 1381.822611][T22580] netlink: 'syz.5.4247': attribute type 1 has an invalid length. [ 1381.827612][T22580] netlink: 756 bytes leftover after parsing attributes in process `syz.5.4247'. [ 1381.906973][T22589] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 1382.020967][T22592] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 1382.023218][T22592] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1382.033262][T22591] lo speed is unknown, defaulting to 1000 [ 1382.065824][T22592] vhci_hcd vhci_hcd.0: Device attached [ 1382.285128][T22595] vhci_hcd: connection closed [ 1382.293193][ T5817] vhci_hcd vhci_hcd.1: stop threads [ 1382.305148][ T5817] vhci_hcd vhci_hcd.1: release socket [ 1382.309792][ T5817] vhci_hcd vhci_hcd.1: disconnect device [ 1383.793411][T22602] lo speed is unknown, defaulting to 1000 [ 1383.894016][T22597] Set syz1 is full, maxelem 65536 reached [ 1384.134731][T22612] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 1384.137533][T22612] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1384.143492][T22612] vhci_hcd vhci_hcd.0: Device attached [ 1384.177776][T22604] Set syz1 is full, maxelem 65536 reached [ 1384.281281][T22617] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4255'. [ 1384.388707][T11157] usb 43-1: new low-speed USB device number 5 using vhci_hcd [ 1384.458783][ T7521] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 1384.666220][T22614] vhci_hcd: connection reset by peer [ 1384.670263][ T5817] vhci_hcd vhci_hcd.3: stop threads [ 1384.673339][ T5817] vhci_hcd vhci_hcd.3: release socket [ 1384.676526][ T5817] vhci_hcd vhci_hcd.3: disconnect device [ 1384.993313][T22626] netlink: 'syz.1.4258': attribute type 1 has an invalid length. [ 1384.997123][T22626] netlink: 756 bytes leftover after parsing attributes in process `syz.1.4258'. [ 1385.348516][T22630] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1386.159450][T22641] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4263'. [ 1386.308265][T22642] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 1386.310392][T22642] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1386.324766][T22642] vhci_hcd vhci_hcd.0: Device attached [ 1386.589451][ T7521] usb 39-1: new low-speed USB device number 7 using vhci_hcd [ 1386.795050][T22643] vhci_hcd: connection reset by peer [ 1386.799023][T14455] vhci_hcd vhci_hcd.1: stop threads [ 1386.819530][T14455] vhci_hcd vhci_hcd.1: release socket [ 1386.832830][T14455] vhci_hcd vhci_hcd.1: disconnect device [ 1386.916453][T22647] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1386.976939][T22653] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4265'. [ 1387.162254][T22656] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1387.337410][T22659] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1387.524448][T22665] lo speed is unknown, defaulting to 1000 [ 1387.837746][T22666] Set syz1 is full, maxelem 65536 reached [ 1388.260401][T22675] netlink: 'syz.4.4271': attribute type 1 has an invalid length. [ 1388.272614][T22675] netlink: 756 bytes leftover after parsing attributes in process `syz.4.4271'. [ 1388.376717][T22680] lo speed is unknown, defaulting to 1000 [ 1388.442959][T22684] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1389.065228][T22691] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4276'. [ 1389.333844][T22696] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4277'. [ 1389.508817][T11157] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 1389.718871][T22701] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4278'. [ 1389.884461][T22706] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1390.786415][T22708] netlink: 'syz.5.4281': attribute type 1 has an invalid length. [ 1390.789924][T22708] netlink: 756 bytes leftover after parsing attributes in process `syz.5.4281'. [ 1390.976570][T22713] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1391.088314][T22718] lo speed is unknown, defaulting to 1000 [ 1391.219606][T22721] lo speed is unknown, defaulting to 1000 [ 1391.295422][T22727] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4284'. [ 1391.728531][ T7521] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 1391.738781][T22729] lo speed is unknown, defaulting to 1000 [ 1392.099366][T22735] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4287'. [ 1392.685818][T22722] Set syz1 is full, maxelem 65536 reached [ 1392.790187][T22742] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4289'. [ 1392.803904][T22726] Set syz1 is full, maxelem 65536 reached [ 1392.875022][T22732] Set syz1 is full, maxelem 65536 reached [ 1393.290815][T22749] lo speed is unknown, defaulting to 1000 [ 1393.355214][T22757] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 1393.482393][T22759] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4294'. [ 1394.347043][T22764] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 1394.349826][T22764] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1394.359940][T22765] vhci_hcd: connection closed [ 1394.361747][T22764] vhci_hcd vhci_hcd.0: Device attached [ 1394.366382][ T6402] vhci_hcd vhci_hcd.3: stop threads [ 1394.368676][ T6402] vhci_hcd vhci_hcd.3: release socket [ 1394.370963][ T6402] vhci_hcd vhci_hcd.3: disconnect device [ 1395.094684][T22768] lo speed is unknown, defaulting to 1000 [ 1395.226869][T22773] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1396.187297][T22783] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4300'. [ 1396.681882][T22770] Set syz1 is full, maxelem 65536 reached [ 1397.841882][T22798] netlink: 'syz.5.4304': attribute type 1 has an invalid length. [ 1397.845262][T22798] netlink: 756 bytes leftover after parsing attributes in process `syz.5.4304'. [ 1397.934158][T22800] netlink: 'syz.5.4305': attribute type 1 has an invalid length. [ 1397.936707][T22800] netlink: 756 bytes leftover after parsing attributes in process `syz.5.4305'. [ 1398.001893][T22802] lo speed is unknown, defaulting to 1000 [ 1398.041399][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 1398.257570][T22810] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 1399.095831][T22817] lo speed is unknown, defaulting to 1000 [ 1399.621422][T22819] Set syz1 is full, maxelem 65536 reached [ 1399.878115][T22829] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4314'. [ 1400.783799][T22838] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 1400.786610][T22838] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1401.042000][T22838] vhci_hcd vhci_hcd.0: Device attached [ 1401.078531][ T7521] usb 39-1: new low-speed USB device number 8 using vhci_hcd [ 1401.356197][T22839] vhci_hcd: connection reset by peer [ 1401.356767][T22844] netlink: 'syz.5.4318': attribute type 1 has an invalid length. [ 1401.363513][T22844] netlink: 756 bytes leftover after parsing attributes in process `syz.5.4318'. [ 1401.368444][ T6903] vhci_hcd vhci_hcd.1: stop threads [ 1401.370151][ T6903] vhci_hcd vhci_hcd.1: release socket [ 1401.377120][ T6903] vhci_hcd vhci_hcd.1: disconnect device [ 1402.416428][T22858] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1402.739693][T22862] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1404.355336][T22875] netlink: 'syz.1.4327': attribute type 1 has an invalid length. [ 1404.358763][T22875] netlink: 756 bytes leftover after parsing attributes in process `syz.1.4327'. [ 1404.416339][T22878] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4323'. [ 1404.540136][T22881] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1404.807366][T22877] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4326'. [ 1405.680798][T22890] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4330'. [ 1405.734602][T22891] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4331'. [ 1405.981453][T22893] lo speed is unknown, defaulting to 1000 [ 1405.997395][T22895] lo speed is unknown, defaulting to 1000 [ 1406.218559][ T7521] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 1406.517746][T22901] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1406.730206][T22904] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4335'. [ 1406.862168][T22898] Set syz1 is full, maxelem 65536 reached [ 1407.237609][T22908] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4336'. [ 1408.214421][T22914] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4338'. [ 1409.329174][T22929] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1409.486358][T22933] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4343'. [ 1409.678258][T22937] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4342'. [ 1410.458488][ T7906] IPVS: ip_vs_send_async error -101 [ 1410.972819][T22944] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1411.119037][T22947] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4346'. [ 1411.907359][T22949] netlink: 'syz.3.4347': attribute type 1 has an invalid length. [ 1411.910425][T22949] netlink: 756 bytes leftover after parsing attributes in process `syz.3.4347'. [ 1412.137662][T22956] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1412.184589][T22958] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4348'. [ 1412.936994][T22964] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 1413.201452][T22969] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1413.557648][T22973] netlink: 'syz.3.4353': attribute type 1 has an invalid length. [ 1413.562506][T22973] netlink: 756 bytes leftover after parsing attributes in process `syz.3.4353'. [ 1413.880859][T22978] netlink: 'syz.1.4355': attribute type 1 has an invalid length. [ 1413.886126][T22978] netlink: 756 bytes leftover after parsing attributes in process `syz.1.4355'. [ 1414.057021][T22983] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1414.087722][T22986] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4356'. [ 1414.875487][T22988] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 1415.469387][T22995] netlink: 'syz.5.4360': attribute type 1 has an invalid length. [ 1415.473892][T22995] netlink: 756 bytes leftover after parsing attributes in process `syz.5.4360'. [ 1415.518916][T22998] netlink: 'syz.3.4361': attribute type 1 has an invalid length. [ 1415.524172][T22998] netlink: 756 bytes leftover after parsing attributes in process `syz.3.4361'. [ 1415.689251][T23004] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4363'. [ 1416.838887][T23014] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4364'. [ 1416.851219][T23013] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1416.880579][T23008] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 1417.885088][T23018] netlink: 'syz.4.4367': attribute type 1 has an invalid length. [ 1417.894612][T23018] netlink: 756 bytes leftover after parsing attributes in process `syz.4.4367'. [ 1418.042577][T23024] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4368'. [ 1418.102429][T23028] lo speed is unknown, defaulting to 1000 [ 1418.232385][T23026] netlink: 'syz.1.4371': attribute type 1 has an invalid length. [ 1418.238054][T23026] netlink: 756 bytes leftover after parsing attributes in process `syz.1.4371'. [ 1418.419263][T23035] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4370'. [ 1419.394079][T23037] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 1419.566257][T23044] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1419.633543][T23031] Set syz1 is full, maxelem 65536 reached [ 1419.811376][T23051] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4377'. [ 1420.007429][T23054] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4376'. [ 1420.387222][T23056] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 1420.998299][T23064] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 1421.324542][T23070] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4381'. [ 1421.931181][T23076] lo speed is unknown, defaulting to 1000 [ 1422.477502][T23089] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1422.533887][T23087] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(4) [ 1422.536302][T23087] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1422.539250][T23087] vhci_hcd vhci_hcd.0: Device attached [ 1422.545442][T23091] vhci_hcd: connection closed [ 1422.546069][ T5817] vhci_hcd vhci_hcd.5: stop threads [ 1422.548564][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 1422.558499][ T5817] vhci_hcd vhci_hcd.5: release socket [ 1422.565558][ T5817] vhci_hcd vhci_hcd.5: disconnect device [ 1422.673841][T23095] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4388'. [ 1423.433437][T23099] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 1423.667357][T23105] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4391'. [ 1424.612681][T23109] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4392'. [ 1424.716371][T23116] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4394'. [ 1424.771652][T23117] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4393'. [ 1425.811537][T23125] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4398'. [ 1425.890224][T23126] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4397'. [ 1426.197190][T23129] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4399'. [ 1427.007427][T23133] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1427.980056][ T1439] ieee802154 phy1 wpan1: encryption failed: -22 [ 1428.180847][T23154] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4406'. [ 1428.770305][T23158] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4407'. [ 1429.090249][T23161] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4408'. [ 1429.757801][T23164] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4409'. [ 1430.642600][T23171] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4410'. [ 1431.138687][T23174] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1431.576539][T23181] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1431.667210][T23184] netlink: 'syz.3.4416': attribute type 1 has an invalid length. [ 1431.674430][T23184] netlink: 756 bytes leftover after parsing attributes in process `syz.3.4416'. [ 1431.685094][T23183] netlink: 'syz.4.4415': attribute type 1 has an invalid length. [ 1431.688070][T23183] netlink: 756 bytes leftover after parsing attributes in process `syz.4.4415'. [ 1431.854214][T23192] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4417'. [ 1432.126746][T23196] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4419'. [ 1432.926821][T23208] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4424'. [ 1434.242848][T23224] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1434.309998][T23225] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1435.320445][T23232] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4430'. [ 1435.731027][T23237] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4432'. [ 1436.433185][T23243] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4434'. [ 1436.679984][T23229] Set syz1 is full, maxelem 65536 reached [ 1436.914891][T23248] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1437.940919][T23251] netlink: 'syz.4.4435': attribute type 1 has an invalid length. [ 1437.944421][T23251] netlink: 756 bytes leftover after parsing attributes in process `syz.4.4435'. [ 1438.035677][T23263] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1438.130356][T23266] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4439'. [ 1438.484033][T23258] netlink: 'syz.1.4437': attribute type 1 has an invalid length. [ 1438.486974][T23258] netlink: 756 bytes leftover after parsing attributes in process `syz.1.4437'. [ 1438.982440][T23277] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4443'. [ 1440.028863][T23291] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4446'. [ 1440.348861][T23295] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4447'. [ 1440.479743][T23298] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4448'. [ 1441.008963][T23301] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 1441.786386][T23305] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1442.686771][T23309] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4451'. [ 1442.795495][T23315] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4453'. [ 1443.653179][T23311] netlink: 'syz.1.4452': attribute type 1 has an invalid length. [ 1443.655768][T23311] netlink: 756 bytes leftover after parsing attributes in process `syz.1.4452'. [ 1443.891388][T23321] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4454'. [ 1444.502207][T23332] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4458'. [ 1444.882065][T23327] netlink: 'syz.1.4457': attribute type 1 has an invalid length. [ 1444.885217][T23327] netlink: 756 bytes leftover after parsing attributes in process `syz.1.4457'. [ 1445.061065][T23337] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4460'. [ 1446.640789][T23366] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4468'. [ 1447.709441][T23381] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1448.373670][ T6404] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1448.505793][ T6404] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1448.643789][ T6404] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1448.707263][T23393] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 1448.842196][T23394] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4474'. [ 1448.885979][ T6404] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1449.008570][T23398] netlink: 'syz.3.4473': attribute type 1 has an invalid length. [ 1449.035959][T23398] netlink: 756 bytes leftover after parsing attributes in process `syz.3.4473'. [ 1450.346577][T23405] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1450.912866][T23413] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4477'. [ 1451.253913][T23421] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4480'. [ 1451.563469][T23424] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1452.093644][T23431] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4482'. [ 1452.418023][T23434] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 1452.642974][ T6404] bond0 (unregistering): Released all slaves [ 1452.657391][ T6404] bond1 (unregistering): Released all slaves [ 1452.834852][ T5449] 8021q: adding VLAN 0 to HW filter on device eth6 [ 1452.958402][ T6404] tipc: Disabling bearer [ 1452.973918][ T6404] tipc: Left network mode [ 1453.088560][ T6404] IPVS: stopping master sync thread 14480 ... [ 1453.232636][T23447] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4485'. [ 1453.916112][ T5449] 8021q: adding VLAN 0 to HW filter on device eth8 [ 1454.337686][T23466] lo speed is unknown, defaulting to 1000 [ 1454.491404][ T5449] 8021q: adding VLAN 0 to HW filter on device eth7 [ 1454.598965][T23475] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4490'. [ 1454.688425][T23478] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4491'. [ 1455.519217][ T5449] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1455.623211][T23487] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4492'. [ 1456.016437][T23494] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4493'. [ 1457.003764][ T6404] hsr_slave_0: left promiscuous mode [ 1457.017534][ T6404] hsr_slave_1: left promiscuous mode [ 1457.233741][T23507] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4496'. [ 1457.719035][T23511] Set syz1 is full, maxelem 65536 reached [ 1458.272863][T23509] lo speed is unknown, defaulting to 1000 [ 1458.554941][T23520] netlink: 'syz.3.4499': attribute type 1 has an invalid length. [ 1458.558844][T23520] netlink: 756 bytes leftover after parsing attributes in process `syz.3.4499'. [ 1458.682103][T23524] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4500'. [ 1459.046628][T23528] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4501'. [ 1459.872169][T23530] lo speed is unknown, defaulting to 1000 [ 1459.878944][ T6404] IPVS: stop unused estimator thread 0... [ 1459.953332][T23537] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4504'. [ 1460.546449][T23532] Set syz1 is full, maxelem 65536 reached [ 1460.752674][T23544] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4506'. [ 1460.869736][T23545] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 1461.283620][T23552] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4508'. [ 1461.943048][T23556] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4509'. [ 1462.322864][T23563] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4512'. [ 1462.519104][T23568] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4513'. [ 1463.185647][T23562] netlink: 'syz.5.4510': attribute type 1 has an invalid length. [ 1463.190923][T23562] netlink: 756 bytes leftover after parsing attributes in process `syz.5.4510'. [ 1463.244880][T23572] lo speed is unknown, defaulting to 1000 [ 1463.383086][T23579] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4516'. [ 1463.594662][T23582] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4517'. [ 1464.415074][T23590] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4519'. [ 1464.605840][T23584] netlink: 'syz.5.4518': attribute type 1 has an invalid length. [ 1464.623705][T23584] netlink: 756 bytes leftover after parsing attributes in process `syz.5.4518'. [ 1465.318948][T23599] lo speed is unknown, defaulting to 1000 [ 1465.485135][T23593] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 1465.487247][T23593] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1465.490024][T23593] vhci_hcd vhci_hcd.0: Device attached [ 1465.532528][T23573] Set syz1 is full, maxelem 65536 reached [ 1465.632388][T23601] Set syz1 is full, maxelem 65536 reached [ 1465.738414][T14513] usb 45-1: new low-speed USB device number 9 using vhci_hcd [ 1465.919214][T23603] vhci_hcd: connection reset by peer [ 1465.927971][ T6404] vhci_hcd vhci_hcd.4: stop threads [ 1465.936069][ T6404] vhci_hcd vhci_hcd.4: release socket [ 1465.943762][ T6404] vhci_hcd vhci_hcd.4: disconnect device [ 1466.056035][T23613] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4525'. [ 1466.343789][T23616] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4526'. [ 1467.739384][T23628] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4529'. [ 1468.536450][T23629] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4528'. [ 1468.957634][T23636] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4530'. [ 1469.358413][T23640] netlink: 'syz.1.4532': attribute type 1 has an invalid length. [ 1469.363046][T23640] netlink: 756 bytes leftover after parsing attributes in process `syz.1.4532'. [ 1469.512099][T23646] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4533'. [ 1469.837082][T23649] lo speed is unknown, defaulting to 1000 [ 1470.095297][T23652] Set syz1 is full, maxelem 65536 reached [ 1470.416237][T23663] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 1470.865570][T14513] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 1471.452617][T23672] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4539'. [ 1471.672436][ T7906] IPVS: ip_vs_send_async error -101 [ 1471.714123][T23679] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4538'. [ 1471.823913][T23679] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1472.780390][T23692] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4543'. [ 1473.012003][T23695] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4542'. [ 1473.121061][T23698] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 1473.123233][T23698] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1473.170342][T23698] vhci_hcd vhci_hcd.0: Device attached [ 1473.458569][T11157] usb 47-1: new low-speed USB device number 8 using vhci_hcd [ 1473.756483][T23699] vhci_hcd: connection reset by peer [ 1473.775200][ T6400] vhci_hcd vhci_hcd.5: stop threads [ 1473.777258][ T6400] vhci_hcd vhci_hcd.5: release socket [ 1473.785054][T23709] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4546'. [ 1473.804567][ T6400] vhci_hcd vhci_hcd.5: disconnect device [ 1474.476805][T23705] netlink: 'syz.1.4545': attribute type 1 has an invalid length. [ 1474.480603][T23705] netlink: 756 bytes leftover after parsing attributes in process `syz.1.4545'. [ 1474.621933][T23717] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 1474.624701][T23717] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1474.716590][T23717] vhci_hcd vhci_hcd.0: Device attached [ 1474.728751][T23727] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4548'. [ 1474.864029][T23725] lo speed is unknown, defaulting to 1000 [ 1474.911797][ T7521] usb 43-1: new low-speed USB device number 6 using vhci_hcd [ 1475.612095][T23718] vhci_hcd: connection reset by peer [ 1475.634264][ T6400] vhci_hcd vhci_hcd.3: stop threads [ 1475.644188][ T6400] vhci_hcd vhci_hcd.3: release socket [ 1475.655742][ T6400] vhci_hcd vhci_hcd.3: disconnect device [ 1475.842905][T23733] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4551'. [ 1476.388397][T23735] netlink: 'syz.1.4552': attribute type 1 has an invalid length. [ 1476.395147][T23735] netlink: 756 bytes leftover after parsing attributes in process `syz.1.4552'. [ 1476.421124][T23739] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4553'. [ 1476.834852][T23748] lo speed is unknown, defaulting to 1000 [ 1476.882089][T23754] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4558'. [ 1477.710529][T23755] Set syz1 is full, maxelem 65536 reached [ 1477.777268][T23762] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4559'. [ 1477.879527][T23767] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4562'. [ 1478.331866][T23771] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1478.918506][T11157] vhci_hcd vhci_hcd.5: vhci_device speed not set [ 1478.998471][T23770] Failed to enqueue queue_pair DETACH event datagram for context (ID=0x0) [ 1479.018241][T23782] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4565'. [ 1479.103568][T23786] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4567'. [ 1480.079510][ T7521] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 1480.278190][T23789] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4568'. [ 1480.465708][T23791] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4569'. [ 1480.616539][T23796] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4570'. [ 1480.863520][T23804] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4573'. [ 1481.477348][T23809] lo speed is unknown, defaulting to 1000 [ 1481.790169][T23815] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4576'. [ 1481.969373][T23817] netlink: 'syz.1.4577': attribute type 1 has an invalid length. [ 1481.974010][T23817] netlink: 756 bytes leftover after parsing attributes in process `syz.1.4577'. [ 1482.154916][T23824] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1482.781140][T23830] lo speed is unknown, defaulting to 1000 [ 1482.979623][T23837] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4582'. [ 1483.000682][T23832] Set syz1 is full, maxelem 65536 reached [ 1484.102882][T23851] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4587'. [ 1484.914935][T23858] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4589'. [ 1485.384777][T23861] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1485.867598][T23868] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4593'. [ 1486.129773][T23870] lo speed is unknown, defaulting to 1000 [ 1486.191291][T23872] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1486.495667][T23879] lo speed is unknown, defaulting to 1000 [ 1487.079729][T23885] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4597'. [ 1487.090726][T23881] Set syz1 is full, maxelem 65536 reached [ 1487.520836][T23893] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4600'. [ 1487.727871][T23898] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1487.901793][T23894] netlink: 'syz.5.4599': attribute type 1 has an invalid length. [ 1487.975851][T23894] netlink: 756 bytes leftover after parsing attributes in process `syz.5.4599'. [ 1488.587791][T23906] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4603'. [ 1488.596064][T23906] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1488.732626][T23908] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4605'. [ 1489.259952][T23915] lo speed is unknown, defaulting to 1000 [ 1489.422752][ T1439] ieee802154 phy1 wpan1: encryption failed: -22 [ 1489.427902][T23918] netlink: 'syz.4.4608': attribute type 1 has an invalid length. [ 1489.434421][T23918] netlink: 756 bytes leftover after parsing attributes in process `syz.4.4608'. [ 1489.575703][T23921] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1489.760926][T23929] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4611'. [ 1490.195091][T23932] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1490.865501][T23936] lo speed is unknown, defaulting to 1000 [ 1491.585859][T23945] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4616'. [ 1491.899020][T23948] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4617'. [ 1491.974839][T23949] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1492.722109][T23952] netlink: 'syz.4.4619': attribute type 1 has an invalid length. [ 1492.728584][T23952] netlink: 756 bytes leftover after parsing attributes in process `syz.4.4619'. [ 1492.855457][T23955] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4618'. [ 1492.995019][T23964] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4621'. [ 1493.090423][T23966] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1493.177560][T23957] netlink: 'syz.1.4620': attribute type 1 has an invalid length. [ 1493.195139][T23957] netlink: 756 bytes leftover after parsing attributes in process `syz.1.4620'. [ 1493.605366][T23972] netlink: 'syz.1.4624': attribute type 1 has an invalid length. [ 1493.609492][T23972] __nla_validate_parse: 1 callbacks suppressed [ 1493.609508][T23972] netlink: 756 bytes leftover after parsing attributes in process `syz.1.4624'. [ 1494.008880][T23980] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4627'. [ 1494.290892][T23987] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4629'. [ 1494.322066][T23987] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1495.300430][T23993] lo speed is unknown, defaulting to 1000 [ 1495.336159][T23991] lo speed is unknown, defaulting to 1000 [ 1496.054440][T24007] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1496.082784][T24003] netlink: 'syz.1.4633': attribute type 1 has an invalid length. [ 1496.085499][T24003] netlink: 756 bytes leftover after parsing attributes in process `syz.1.4633'. [ 1496.789352][T24015] lo speed is unknown, defaulting to 1000 [ 1497.146438][T24022] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4638'. [ 1497.536372][T24026] netlink: 'syz.1.4640': attribute type 1 has an invalid length. [ 1497.539737][T24026] netlink: 756 bytes leftover after parsing attributes in process `syz.1.4640'. [ 1497.586378][T24029] lo speed is unknown, defaulting to 1000 [ 1498.232802][T24042] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4645'. [ 1498.683916][T24037] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1498.720863][T24046] lo speed is unknown, defaulting to 1000 [ 1499.411812][T24057] netlink: 'syz.1.4649': attribute type 1 has an invalid length. [ 1499.418438][T24057] netlink: 756 bytes leftover after parsing attributes in process `syz.1.4649'. [ 1499.530716][T24065] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1499.857716][T24070] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4652'. [ 1500.100305][T24073] Failed to enqueue queue_pair DETACH event datagram for context (ID=0x1) [ 1500.346321][T24079] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1501.145543][T24083] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4656'. [ 1501.479244][T24086] Set syz1 is full, maxelem 65536 reached [ 1501.488305][T24085] lo speed is unknown, defaulting to 1000 [ 1502.417826][T24093] lo speed is unknown, defaulting to 1000 [ 1502.525820][T24098] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4660'. [ 1502.639701][T24102] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4662'. [ 1502.653276][T24096] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1502.727453][T24094] Set syz1 is full, maxelem 65536 reached [ 1502.885673][T24106] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4663'. [ 1502.975583][T24108] lo speed is unknown, defaulting to 1000 [ 1503.331406][T24111] Set syz1 is full, maxelem 65536 reached [ 1504.422215][T24134] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4669'. [ 1506.438252][T24148] lo speed is unknown, defaulting to 1000 [ 1506.766059][T24156] lo speed is unknown, defaulting to 1000 [ 1506.879999][T24153] Set syz1 is full, maxelem 65536 reached [ 1507.352484][T24160] Set syz1 is full, maxelem 65536 reached [ 1507.512666][T24166] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1507.683701][T24173] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4678'. [ 1508.194259][T24176] Failed to enqueue queue_pair DETACH event datagram for context (ID=0x0) [ 1508.421352][T24184] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1508.430724][T24178] netlink: 'syz.4.4680': attribute type 1 has an invalid length. [ 1508.438872][T24178] netlink: 756 bytes leftover after parsing attributes in process `syz.4.4680'. [ 1508.458105][T24180] netlink: 'syz.3.4681': attribute type 1 has an invalid length. [ 1508.462156][T24180] netlink: 756 bytes leftover after parsing attributes in process `syz.3.4681'. [ 1508.653617][T24191] lo speed is unknown, defaulting to 1000 [ 1508.871653][T24196] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4685'. [ 1509.650935][T24202] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1509.881816][T24208] [ 1509.882936][T24208] ============================================ [ 1509.885584][T24208] WARNING: possible recursive locking detected [ 1509.888146][T24208] syzkaller #0 Tainted: G L [ 1509.890778][T24208] -------------------------------------------- [ 1509.893311][T24208] syz.3.4687/24208 is trying to acquire lock: [ 1509.895545][T24208] ffffffff8fc508d0 (qp_broker_list.mutex){+.+.}-{4:4}, at: vmci_qp_broker_detach+0x14c/0x11e0 [ 1509.899246][T24208] [ 1509.899246][T24208] but task is already holding lock: [ 1509.902084][T24208] ffffffff8fc508d0 (qp_broker_list.mutex){+.+.}-{4:4}, at: vmci_qp_broker_detach+0x14c/0x11e0 [ 1509.906287][T24208] [ 1509.906287][T24208] other info that might help us debug this: [ 1509.910353][T24208] Possible unsafe locking scenario: [ 1509.910353][T24208] [ 1509.913126][T24208] CPU0 [ 1509.914221][T24208] ---- [ 1509.915305][T24208] lock(qp_broker_list.mutex); [ 1509.916896][T24208] lock(qp_broker_list.mutex); [ 1509.918545][T24208] [ 1509.918545][T24208] *** DEADLOCK *** [ 1509.918545][T24208] [ 1509.921190][T24208] May be due to missing lock nesting notation [ 1509.921190][T24208] [ 1509.923843][T24208] 1 lock held by syz.3.4687/24208: [ 1509.925526][T24208] #0: ffffffff8fc508d0 (qp_broker_list.mutex){+.+.}-{4:4}, at: vmci_qp_broker_detach+0x14c/0x11e0 [ 1509.929078][T24208] [ 1509.929078][T24208] stack backtrace: [ 1509.931026][T24208] CPU: 1 UID: 0 PID: 24208 Comm: syz.3.4687 Tainted: G L syzkaller #0 PREEMPT(full) [ 1509.931046][T24208] Tainted: [L]=SOFTLOCKUP [ 1509.931053][T24208] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1509.931076][T24208] Call Trace: [ 1509.931101][T24208] [ 1509.931107][T24208] dump_stack_lvl+0x100/0x190 [ 1509.931178][T24208] print_deadlock_bug.cold+0xbd/0xca [ 1509.931241][T24208] __lock_acquire+0x1256/0x1a40 [ 1509.931264][T24208] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1509.931559][T24208] lock_acquire+0x1b9/0x370 [ 1509.931577][T24208] ? vmci_qp_broker_detach+0x14c/0x11e0 [ 1509.931593][T24208] ? __pfx___might_resched+0x10/0x10 [ 1509.931612][T24208] ? kasan_save_stack+0x3f/0x50 [ 1509.931661][T24208] ? kasan_save_stack+0x30/0x50 [ 1509.931675][T24208] __mutex_lock+0x1a4/0x1bd0 [ 1509.931695][T24208] ? vmci_qp_broker_detach+0x14c/0x11e0 [ 1509.931709][T24208] ? vmci_qp_broker_detach+0x14c/0x11e0 [ 1509.931723][T24208] ? __fput+0x3ff/0xb50 [ 1509.931737][T24208] ? task_work_run+0x150/0x240 [ 1509.931754][T24208] ? exit_to_user_mode_loop+0x1d8/0x6f0 [ 1509.931772][T24208] ? __do_fast_syscall_32+0x701/0x970 [ 1509.931782][T24208] ? do_fast_syscall_32+0x32/0x70 [ 1509.931792][T24208] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1509.931806][T24208] ? __pfx___mutex_lock+0x10/0x10 [ 1509.931826][T24208] ? vmci_qp_broker_detach+0x14c/0x11e0 [ 1509.931837][T24208] vmci_qp_broker_detach+0x14c/0x11e0 [ 1509.931850][T24208] ? kasan_quarantine_put+0x104/0x240 [ 1509.931861][T24208] ? lockdep_hardirqs_on+0x78/0x100 [ 1509.931877][T24208] ? __pfx_vmci_qp_broker_detach+0x10/0x10 [ 1509.931889][T24208] ? ctx_free_ctx+0x4b0/0xda0 [ 1509.931902][T24208] ? ctx_free_ctx+0x4bd/0xda0 [ 1509.931914][T24208] ? kfree+0x22b/0x6c0 [ 1509.931931][T24208] ctx_free_ctx+0x517/0xda0 [ 1509.931944][T24208] ? __pfx___schedule+0x10/0x10 [ 1509.931959][T24208] ? __pfx_ctx_free_ctx+0x10/0x10 [ 1509.931972][T24208] ? preempt_schedule_thunk+0x16/0x40 [ 1509.931989][T24208] ? preempt_schedule_common+0x42/0xc0 [ 1509.932004][T24208] ? preempt_schedule_thunk+0x16/0x40 [ 1509.932021][T24208] vmci_ctx_enqueue_datagram+0x4be/0x5f0 [ 1509.932037][T24208] vmci_datagram_dispatch+0x3db/0xc60 [ 1509.932054][T24208] ? __pfx_vmci_datagram_dispatch+0x10/0x10 [ 1509.932069][T24208] ? vmci_qp_broker_detach+0xe0f/0x11e0 [ 1509.932081][T24208] ? find_held_lock+0x2b/0x80 [ 1509.932092][T24208] ? vmci_qp_broker_detach+0xef9/0x11e0 [ 1509.932105][T24208] qp_notify_peer+0x1a6/0x230 [ 1509.932115][T24208] ? __pfx_qp_notify_peer+0x10/0x10 [ 1509.932127][T24208] ? __pfx_vmci_ctx_qp_exists+0x10/0x10 [ 1509.932142][T24208] vmci_qp_broker_detach+0xa20/0x11e0 [ 1509.932155][T24208] ? __pfx_vmci_qp_broker_detach+0x10/0x10 [ 1509.932167][T24208] ? ctx_free_ctx+0x4b0/0xda0 [ 1509.932180][T24208] ? ctx_free_ctx+0x4bd/0xda0 [ 1509.932192][T24208] ? kfree+0x22b/0x6c0 [ 1509.932208][T24208] ctx_free_ctx+0x517/0xda0 [ 1509.932221][T24208] ? synchronize_rcu_expedited+0x3c3/0x450 [ 1509.932237][T24208] ? __pfx_ctx_free_ctx+0x10/0x10 [ 1509.932251][T24208] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 1509.932268][T24208] vmci_ctx_destroy+0x150/0x1c0 [ 1509.932282][T24208] vmci_host_close+0x115/0x1a0 [ 1509.932299][T24208] ? __pfx_vmci_host_close+0x10/0x10 [ 1509.932315][T24208] __fput+0x3ff/0xb50 [ 1509.932328][T24208] task_work_run+0x150/0x240 [ 1509.932343][T24208] ? __pfx_task_work_run+0x10/0x10 [ 1509.932359][T24208] exit_to_user_mode_loop+0x1d8/0x6f0 [ 1509.932376][T24208] ? rcu_is_watching+0x12/0xc0 [ 1509.932388][T24208] __do_fast_syscall_32+0x701/0x970 [ 1509.932399][T24208] do_fast_syscall_32+0x32/0x70 [ 1509.932409][T24208] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1509.932423][T24208] RIP: 0023:0xf7fa4fec [ 1509.932440][T24208] Code: Unable to access opcode bytes at 0xf7fa4fc2. [ 1509.932449][T24208] RSP: 002b:00000000f544550c EFLAGS: 00000292 ORIG_RAX: 00000000000001b4 [ 1509.932467][T24208] RAX: 0000000000000000 RBX: 0000000000000006 RCX: 00000000ffffffff [ 1509.932479][T24208] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1509.932489][T24208] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1509.932499][T24208] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1509.932511][T24208] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1509.932526][T24208] [ 1510.175952][T24209] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1510.538019][T24214] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1510.989567][ T6404] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1511.095995][ T6404] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1511.219293][ T6404] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1511.364294][ T6404] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1511.494058][ T6404] bridge_slave_1: left allmulticast mode [ 1511.495878][ T6404] bridge_slave_1: left promiscuous mode [ 1511.497690][ T6404] bridge0: port 2(bridge_slave_1) entered disabled state [ 1511.503070][ T6404] bridge_slave_0: left allmulticast mode [ 1511.505108][ T6404] bridge_slave_0: left promiscuous mode [ 1511.507585][ T6404] bridge0: port 1(bridge_slave_0) entered disabled state [ 1511.592878][ T6404] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1511.596464][ T6404] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1511.600613][ T6404] bond0 (unregistering): Released all slaves [ 1511.672592][ T6404] tipc: Left network mode [ 1511.733651][ T5449] 8021q: adding VLAN 0 to HW filter on device eth10 [ 1511.853249][ T5449] 8021q: adding VLAN 0 to HW filter on device eth11 [ 1511.932654][ T6404] hsr_slave_0: left promiscuous mode [ 1511.935968][ T6404] hsr_slave_1: left promiscuous mode [ 1511.939112][ T6404] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1511.943835][ T6404] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1512.054323][ T6404] team0 (unregistering): Port device team_slave_1 removed [ 1512.062027][ T6404] team0 (unregistering): Port device team_slave_0 removed [ 1512.119079][ T5449] 8021q: adding VLAN 0 to HW filter on device eth12 [ 1512.268712][ T5449] 8021q: adding VLAN 0 to HW filter on device eth13 [ 1515.207765][ T6404] bridge_slave_1: left allmulticast mode [ 1515.209877][ T6404] bridge_slave_1: left promiscuous mode [ 1515.212110][ T6404] bridge0: port 2(bridge_slave_1) entered disabled state [ 1515.215621][ T6404] bridge_slave_0: left allmulticast mode [ 1515.217668][ T6404] bridge_slave_0: left promiscuous mode [ 1515.221375][ T6404] bridge0: port 1(bridge_slave_0) entered disabled state [ 1515.366708][ T6404] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1515.376871][ T6404] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1515.381685][ T6404] bond0 (unregistering): (slave team0): Releasing backup interface [ 1515.385371][ T6404] bond0 (unregistering): Released all slaves [ 1515.389277][ T6404] bond1 (unregistering): Released all slaves [ 1515.393894][ T6404] bond2 (unregistering): Released all slaves [ 1515.398752][ T6404] bond3 (unregistering): Released all slaves [ 1515.404022][ T6404] bond4 (unregistering): Released all slaves [ 1515.410804][ T6404] bond5 (unregistering): (slave dummy0): Releasing active interface [ 1515.419779][ T6404] bond5 (unregistering): Released all slaves [ 1515.508847][ T6404] : left promiscuous mode [ 1515.553822][ T5449] 8021q: adding VLAN 0 to HW filter on device eth14 [ 1515.560072][ T6404] : left promiscuous mode [ 1515.644211][ T6404] tipc: Left network mode [ 1515.680519][ T6404] IPVS: stopping master sync thread 7906 ... [ 1515.683194][ T6404] IPVS: stopping backup sync thread 16221 ... [ 1515.703486][ T5449] 8021q: adding VLAN 0 to HW filter on device eth15 [ 1515.833322][ T5449] 8021q: adding VLAN 0 to HW filter on device eth17 [ 1515.943031][ T6404] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1515.946266][ T6404] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1515.953380][ T6404] batman_adv: batadv0: Removing interface: macsec1 [ 1516.063800][ T6404] team0 (unregistering): Port device team_slave_1 removed [ 1516.070777][ T6404] team0 (unregistering): Port device team_slave_0 removed [ 1516.117169][ T34] lo speed is unknown, defaulting to 1000 [ 1516.117940][T16662] smbdirect: ib_dev[syz2] removed [ 1516.118008][ T5449] 8021q: adding VLAN 0 to HW filter on device eth16 [ 1516.119767][ T34] syz2: Port: 1 Link DOWN [ 1516.483671][ T6404] IPVS: stop unused estimator thread 0...