last executing test programs: 23m33.668876368s ago: executing program 32 (id=681): r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000004200)={0x50, 0x0, r2}, 0x50) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) syz_fuse_handle_req(r1, &(0x7f00000042c0), 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lseek(r3, 0x7f, 0x2) getdents64(r3, 0x0, 0x0) syz_fuse_handle_req(r1, &(0x7f00000067c0), 0x2000, &(0x7f00000087c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000008880)={0x10}, 0x0, 0x0, 0x0, 0x0}) ioctl$TCXONC(r0, 0x5608, 0x2) 16m44.730554551s ago: executing program 33 (id=2914): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) write$bt_hci(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="0e00010002"], 0x8) 16m5.934836414s ago: executing program 34 (id=3352): io_uring_setup(0x766a, &(0x7f0000000880)={0x0, 0xd274, 0x0, 0x1, 0x2000128}) r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x3, &(0x7f0000000440)={{0x0, 0x3938700}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) syz_open_dev$sndctrl(&(0x7f0000000e00), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[], 0x0, 0x37}, 0x20) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000004440)=@base={0x9, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r2, 0x2, 0x1, 0x0, 0x0, @void, @value=0x2000000}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000004440)=@base={0xd, 0x4, 0x4, 0x7, 0x0, r3, 0x0, '\x00', 0x0, r2, 0x0, 0x1}, 0x48) 15m8.612667134s ago: executing program 35 (id=3816): madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000680), 0x40000, 0x19) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0xa43, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) 15m1.123450769s ago: executing program 36 (id=3902): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r0) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r0) recvmmsg(r0, &(0x7f00000086c0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000540)=""/157, 0x9d}, {&(0x7f0000001c40)=""/4096, 0x1000}], 0x2}, 0x5}], 0x1, 0x40000000, 0x0) 14m56.85085293s ago: executing program 37 (id=3929): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000005c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r0, &(0x7f0000001600)='./file1\x00', 0x2000, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') creat(0x0, 0x57) linkat(r0, &(0x7f0000000000)='./file1\x00', r0, &(0x7f0000000240)='./file0\x00', 0x0) unlink(&(0x7f0000000080)='./file0\x00') symlink(&(0x7f0000000000)='./file1\x00', &(0x7f0000004540)='./file0\x00') 14m56.113054077s ago: executing program 38 (id=3937): ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x15) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x2a14048, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x15) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000001580), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="74010000", @ANYRES16=r2, @ANYBLOB="11060000000000000000010000000800050001000000200108803c0000801400040002000000ac1e00010000000000000000240001000000000000000000000000000000000000000000000000000000000000000000e0000080a400098028000080060001000a0000001400020020010000000000000000000000000001050003000100000028000080060001000a00000014000200ff010000000000000000000000000001050003002aea091428000080060001000a00000014000200ff010000000000000000000000000001050003000300000028020080060001000a00000014000200ff0100000000000000000000000000010500030000000000240001000000000000000000000000000000000000000000000000000000000000000000140004000200000000000000000000000000000024000300000000000000000000000000000000000000000000000000000000000000000014000200776731"], 0x174}, 0x1, 0x0, 0x0, 0x60}, 0x0) capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)={0x200000, 0x200000, 0x7}) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r3, 0x4b71, 0x0) ioctl$TIOCGSID(r3, 0x5429, &(0x7f0000000000)=0x0) capget(&(0x7f0000000100)={0x19980330, r4}, &(0x7f0000000140)={0xe, 0x3, 0x8, 0x1, 0x5, 0x6}) r5 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) ioctl$NBD_DISCONNECT(r5, 0xab08) ioctl$NBD_CLEAR_SOCK(r5, 0x125f) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) writev(r6, &(0x7f0000000300)=[{&(0x7f00000002c0)="38889170a4e43d9d8dc27bd4", 0xc}], 0x1) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='hfs\x00', 0x2208080, 0x0) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/keys\x00', 0x0, 0x0) preadv(r7, &(0x7f0000001680)=[{&(0x7f00000000c0)=""/114, 0x72}, {&(0x7f0000000140)=""/102, 0x66}, {&(0x7f00000001c0)=""/174, 0xae}, {&(0x7f0000000280)=""/198, 0xc6}, {0x0}], 0x5, 0x402, 0xffffffff) 14m31.606443782s ago: executing program 8 (id=4144): r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000000)='.\x00', 0x400017e) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) fchown(r1, 0x0, 0xee01) openat$cgroup_ro(r1, &(0x7f0000000900)='net_prio.prioidx\x00', 0x275a, 0xb) read$FUSE(r0, &(0x7f0000001fc0)={0x2020}, 0x2020) 14m30.734800835s ago: executing program 8 (id=4154): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e0000000400000008"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) readv(r2, 0x0, 0x0) ioctl$TIOCPKT(r2, 0x5420, &(0x7f0000000100)=0xcf5) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000dc0)={0x0, 0x6, 0x4, 0x1c000000, 0x2, "0062ba7d820740ff00"}) r3 = syz_open_pts(r2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000840), 0xffffffffffffffff) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r5}, 0x10) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x9, 0xf, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70200001400000bb7030000000000008500000083000000bf09000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000280)=ANY=[@ANYBLOB="44000000010101010000000000000000020000002400018014000180080001007f007ea770aa11756dd600000c00028005000100010000000c001980080001"], 0x44}, 0x1, 0x0, 0x0, 0x8001}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'wlan1\x00', @random="2b0100004ec6"}) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000280)=0x13) ioctl$TCXONC(r3, 0x540a, 0x2) prlimit64(r1, 0x6, 0x0, &(0x7f0000000080)) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000001e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r7}, 0x10) mlockall(0x7) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/slabinfo\x00', 0x0, 0x0) 14m30.246035307s ago: executing program 1 (id=4166): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000001e40)={0x0, 0x0, &(0x7f0000001e00)={&(0x7f0000000100)=ANY=[@ANYBLOB="020403081d00000026bd7000fddbdf25050005006c0000000a004e210000000ffc0100000000000000000000000000010200000000000000050006009d6000000a004e210000000100000000000000000000ffffac1414aa090000000000000002000100000004d207042d03000000400f00180005026e00"], 0xe8}}, 0x8040) 14m30.188021624s ago: executing program 1 (id=4167): creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000c3c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x22805200, 0x0, 0x401, 0x1, 0x8000004, 0x0, 0x0, 0x8}}, 0x50) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) 14m30.177958728s ago: executing program 8 (id=4168): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000380)) 14m29.565387897s ago: executing program 9 (id=4172): sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000740)=ANY=[@ANYBLOB="780400", @ANYRES16], 0x78}}, 0x4000010) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 14m29.564089571s ago: executing program 9 (id=4174): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) 14m29.483630013s ago: executing program 9 (id=4175): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0xffffffffffffffff, &(0x7f00000000c0)={0xffffffffffffffff}, 0x111, 0x3}}, 0x42) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f00000006c0)={0x15, 0x110, 0xfa00, {r2, 0x7, 0x30, 0x30, 0x0, @in6={0x1b, 0x0, 0x0, @loopback, 0x3ff}, @ib={0x1b, 0xffff, 0x0, {"0000000002000000001393000000dd00"}, 0x8074, 0x0, 0x7fff}}}, 0x118) 14m29.32486968s ago: executing program 1 (id=4178): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000201b4510fc0428155d6d01020301090212000100000000090401"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 14m29.323822518s ago: executing program 9 (id=4179): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='debugfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f0000000100)='./file0\x00', 0x0) 14m29.245780423s ago: executing program 9 (id=4180): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000180)={[{0x6701, 0x5, 0x2, 0x1, 0x7, 0x8, 0xb, 0x11, 0x8, 0x7, 0x4, 0x5, 0xa}, {0x9, 0x6f, 0x5, 0x5, 0x81, 0x8, 0x7, 0x0, 0x5, 0x7f, 0xff, 0x2, 0x401}, {0x5, 0x1, 0x6, 0xb9, 0x0, 0x9a, 0x0, 0x4, 0x6a, 0x2, 0x6, 0x6, 0x5}], 0x3}) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0xff7f24f7, 0x0, 0x0, 0x0, 0xfe, 0xff, 0x0, 0x8, 0xa, 0x3, 0x7, 0xe, 0x6}, {0x2, 0x0, 0x2, 0x1, 0x0, 0x8, 0x0, 0xfd, 0x0, 0x0, 0xfe}, {0x7, 0x4, 0x0, 0xff, 0x3, 0xff, 0x0, 0xfc, 0x0, 0x0, 0xfc}], 0x7f}) 14m29.016422073s ago: executing program 9 (id=4182): r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000000)='.\x00', 0x400017e) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fchown(r1, 0x0, 0xee01) openat$cgroup_ro(r1, 0x0, 0x275a, 0xb) read$FUSE(r0, &(0x7f0000001fc0)={0x2020}, 0x2020) 14m28.967323357s ago: executing program 39 (id=4182): r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000000)='.\x00', 0x400017e) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fchown(r1, 0x0, 0xee01) openat$cgroup_ro(r1, 0x0, 0x275a, 0xb) read$FUSE(r0, &(0x7f0000001fc0)={0x2020}, 0x2020) 14m28.035617383s ago: executing program 8 (id=4188): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='debugfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f0000000100)='./file0\x00', 0x0) 14m27.978086985s ago: executing program 8 (id=4189): openat$ptmx(0xffffffffffffff9c, 0x0, 0x41, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) getrlimit(0x6, 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB='huge=always']) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.current\x00', 0x275a, 0x0) write$P9_RREADDIR(r0, &(0x7f0000000180)={0xb, 0x29, 0x2, {0x202}}, 0xb) fallocate(r0, 0x0, 0xfea000, 0x2000402) 14m27.656318525s ago: executing program 8 (id=4190): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000180)={[{0x6701, 0x5, 0x2, 0x1, 0x7, 0x8, 0xb, 0x11, 0x8, 0x7, 0x4, 0x5, 0xa}, {0x9, 0x6f, 0x5, 0x5, 0x81, 0x8, 0x7, 0x0, 0x5, 0x7f, 0xff, 0x2, 0x401}, {0x5, 0x1, 0x6, 0xb9, 0x0, 0x9a, 0x0, 0x4, 0x6a, 0x2, 0x6, 0x6, 0x5}], 0x3}) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0xff7f24f7, 0x0, 0x0, 0x0, 0xfe, 0xff, 0x0, 0x8, 0xa, 0x3, 0x7, 0xe, 0x6}, {0x2, 0x0, 0x2, 0x1, 0x0, 0x8, 0x0, 0xfd, 0x0, 0x0, 0xfe}, {0x7, 0x4, 0x0, 0xff, 0x3, 0xff, 0x0, 0xfc, 0x0, 0x0, 0xfc}], 0x7f}) 14m27.576213543s ago: executing program 40 (id=4190): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000180)={[{0x6701, 0x5, 0x2, 0x1, 0x7, 0x8, 0xb, 0x11, 0x8, 0x7, 0x4, 0x5, 0xa}, {0x9, 0x6f, 0x5, 0x5, 0x81, 0x8, 0x7, 0x0, 0x5, 0x7f, 0xff, 0x2, 0x401}, {0x5, 0x1, 0x6, 0xb9, 0x0, 0x9a, 0x0, 0x4, 0x6a, 0x2, 0x6, 0x6, 0x5}], 0x3}) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0xff7f24f7, 0x0, 0x0, 0x0, 0xfe, 0xff, 0x0, 0x8, 0xa, 0x3, 0x7, 0xe, 0x6}, {0x2, 0x0, 0x2, 0x1, 0x0, 0x8, 0x0, 0xfd, 0x0, 0x0, 0xfe}, {0x7, 0x4, 0x0, 0xff, 0x3, 0xff, 0x0, 0xfc, 0x0, 0x0, 0xfc}], 0x7f}) 14m26.725788166s ago: executing program 1 (id=4196): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000240)='debugfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f0000000100)='./file0\x00', 0x0) 14m26.712913368s ago: executing program 1 (id=4197): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x4) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x275a, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000380)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 14m24.644283447s ago: executing program 1 (id=4205): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000001000)={'syztnl2\x00', 0x0, 0x0, 0xa000, 0x200004, 0x0, {{0x5, 0x4, 0x0, 0x0, 0xfffffffffffffd82, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote, @multicast2}}}}) 14m24.590220196s ago: executing program 41 (id=4205): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000001000)={'syztnl2\x00', 0x0, 0x0, 0xa000, 0x200004, 0x0, {{0x5, 0x4, 0x0, 0x0, 0xfffffffffffffd82, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote, @multicast2}}}}) 14m13.765636706s ago: executing program 0 (id=4285): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x8804}, 0x0) 14m13.715514328s ago: executing program 0 (id=4286): r0 = creat(&(0x7f0000000540)='./file0\x00', 0x0) close(r0) pipe(&(0x7f0000000200)) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000850000000800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000640), 0x4, &(0x7f0000000a40)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 14m13.714861826s ago: executing program 0 (id=4287): socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x4, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r0}, 0x10) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) r3 = dup3(r2, r1, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0x4}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000580)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000440)={@flat=@weak_binder={0x77622a85, 0x1000, 0x2}, @flat=@binder={0x73622a85, 0xa, 0x1}, @flat=@binder={0x73622a85, 0x1000}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}, 0x1000}], 0x0, 0x0, 0x0}) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$FUSE(r5, &(0x7f00000034c0)={0x2020}, 0xcac) 14m13.679490785s ago: executing program 0 (id=4288): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='debugfs\x00', 0x0, 0x0) mkdir(0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f0000000100)='./file0\x00', 0x0) 14m13.607090035s ago: executing program 0 (id=4289): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214050, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0) mkdir(0x0, 0x10) chroot(&(0x7f0000000000)='./bus\x00') r1 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205648, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bic\x00', 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f0000000340)='\x00', 0x1, 0x0, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x12, 0x0, 0x12) setsockopt$inet_tcp_buf(r0, 0x6, 0x1a, &(0x7f0000000380), 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 14m13.365327486s ago: executing program 0 (id=4298): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='debugfs\x00', 0x0, 0x0) mkdir(0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f0000000100)='./file0\x00', 0x0) 14m13.288961456s ago: executing program 42 (id=4298): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='debugfs\x00', 0x0, 0x0) mkdir(0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f0000000100)='./file0\x00', 0x0) 51.658160556s ago: executing program 5 (id=9494): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000700)=@raw={'raw\x00', 0x3c1, 0x3, 0x4cc, 0x0, 0x940c, 0x3002, 0x0, 0x2c0, 0x404, 0x3d8, 0x3d8, 0x404, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x28c, 0x2d4, 0x0, {}, [@common=@inet=@recent0={{0xf4}, {0x0, 0x2, 0x1, 0x0, 'syz0\x00'}}, @common=@inet=@recent0={{0xf4}, {0x0, 0x0, 0x2, 0x0, 'syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'virt_wifi0\x00'}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0, [0x0, 0x0, 0xff000000, 0xff], [0xffffff00, 0xffffff00, 0xff000000, 0xffffffff], 'team_slave_1\x00', 'veth1_virt_wifi\x00', {0xff}, {}, 0x886215f4d37bb4bb, 0x90, 0x1, 0x69}, 0x0, 0xc8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x24}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x528) pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r6, @ANYBLOB=',cache=fscach']) setsockopt$packet_add_memb(r6, 0x107, 0x1, &(0x7f0000000300)={0x0, 0x1, 0x6, @local}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) socket(0x11, 0x80a, 0x1) syz_clone(0x10022000, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000180), &(0x7f0000000500)="d1bc900d8a00c336af2a52816b757b56260c0944c4f341e9c85c040cff9c5cb201188344ec2fc3fffae0c36426d9228eba2b3c8b42a11f14833b25ea6bd3247a6b565adec5c3a506f5018d06d35efdbb76355936726d1060e638d7e8038ab2e6a23d5c4e1d00d5e8e0b94a252398a320916396ce6999aa2c04557443ff35fd4f7b6a2a2c4717dd2840936d0c43556b3e98f3cb949293cae52be2488aad3b51be28d5751ffa75c3e2fd85e7044b798fe8cb4c4d14f11f4465acc5507d1e3176218958d23fff776ff00f0afb37cd50d13dbf57db8b0d743b59779a6f8008c1e0d354d666417953545575356d5618b956117d1314e5") recvmmsg(r7, &(0x7f0000004e00)=[{{&(0x7f0000000440)=@nfc, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000600)=""/233, 0xe9}, {&(0x7f0000000c40)=""/158, 0x9e}, {&(0x7f0000000d00)=""/239, 0xef}, {&(0x7f0000000e00)=""/194, 0xc2}, {&(0x7f0000000200)=""/58, 0x3a}, {&(0x7f0000000280)=""/63, 0x3f}, {&(0x7f0000000300)}], 0x7, &(0x7f0000000f00)=""/242, 0xf2}, 0x23b}, {{&(0x7f0000001000)=@sco={0x1f, @none}, 0x80, &(0x7f0000002380)=[{&(0x7f0000001080)=""/13, 0xd}, {&(0x7f00000010c0)=""/119, 0x77}, {&(0x7f0000001140)=""/219, 0xdb}, {&(0x7f0000001240)=""/188, 0xbc}, {&(0x7f0000001300)=""/4096, 0x1000}, {&(0x7f0000002300)=""/84, 0x54}], 0x6, &(0x7f00000023c0)=""/74, 0x4a}, 0x5}, {{&(0x7f0000002440)=@l2tp6={0xa, 0x0, 0x0, @initdev}, 0x80, &(0x7f00000036c0)=[{&(0x7f00000024c0)=""/79, 0x4f}, {&(0x7f0000002540)=""/40, 0x28}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000003580)=""/88, 0x58}, {&(0x7f0000003600)=""/160, 0xa0}], 0x5}, 0x5}, {{&(0x7f0000003700)=@qipcrtr, 0x80, &(0x7f0000004bc0)=[{&(0x7f0000003880)=""/219, 0xdb}, {0x0}, {&(0x7f0000003780)=""/235, 0xeb}, {&(0x7f0000004b00)=""/149, 0x95}], 0x4, &(0x7f0000004c00)=""/65, 0x41}, 0xfffffff7}, {{&(0x7f0000004c80)=@qipcrtr, 0x80, &(0x7f0000004d80)=[{&(0x7f0000004d00)=""/29, 0x1d}, {&(0x7f0000004d40)=""/26, 0x1a}], 0x2, &(0x7f0000004dc0)}, 0x5}], 0x5, 0x1, 0x0) 50.566584186s ago: executing program 5 (id=9499): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x8031, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000c"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000002580)=ANY=[@ANYRESOCT=r0], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1d, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002640)={0x1e, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="187da309232a6900020000000000000000000000000071fd0d00f0ffffff95000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x2b19bd1378568926, 0x10, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5d}, 0x94) mkdirat(0xffffffffffffff9c, 0x0, 0x18c) r2 = userfaultfd(0x80001) fstat(r2, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$tmpfs(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000200), 0x230028, &(0x7f00000003c0)=ANY=[@ANYBLOB="736d61631199736465663d6d657461636f70793d6f6e2c7569643e", @ANYRESDEC=r3, @ANYBLOB=',fsuuid=59d3e754-925d-f$d8-b3c4-1f482276,appraise,\x00']) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x19}) r4 = openat(0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00', 0x8000, 0x32) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000002540)={0x1, &(0x7f0000000080)=[{0xffff, 0x7f, 0x1, 0x3}]}) read$FUSE(0xffffffffffffffff, &(0x7f0000000500)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f00000025c0)={0x50, 0x0, r5, {0x7, 0x2b, 0x8, 0x2080021, 0x9, 0x0, 0x6, 0x3, 0x0, 0x0, 0x10, 0x40008000}}, 0x50) bind$alg(0xffffffffffffffff, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r6, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000440), 0x80, &(0x7f0000000140)={[{@redirect_dir_nofollow}, {@verity_require}, {@metacopy_off}, {@metacopy_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@redirect_dir_follow}, {@index_on}], [{@obj_type={'obj_type', 0x3d, '/dev/snd/midiC#D#\x00'}}]}) madvise(&(0x7f00002d7000/0x3000)=nil, 0x3000, 0x11) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000480)={{&(0x7f0000010000/0x1000)=nil, 0x1000}, 0x7}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 50.34248139s ago: executing program 5 (id=9500): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x5, 0x5, 0x2, 0x4}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b703000000000000850000000e00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000300)='tlb_flush\x00', r1, 0x0, 0x700}, 0x10) 50.314038864s ago: executing program 5 (id=9501): socket$nl_crypto(0x10, 0x3, 0x15) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000003c0)=0xd) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000540)={0x3, 0x1, 0x8000000, 0x1000, &(0x7f0000ffd000/0x1000)=nil}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x2, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) r4 = socket(0x40000000015, 0x5, 0x0) getsockopt(r4, 0x200000000114, 0x2718, 0x0, &(0x7f0000000000)) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00"/14], 0x48) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r5, 0x400455c8, 0x4) syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, 0x0) openat$yama_ptrace_scope(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) syz_io_uring_setup(0x468d, &(0x7f0000000680)={0x0, 0x9b92, 0x8, 0xfffffffe, 0x226, 0x0, r3}, &(0x7f0000000300), &(0x7f0000000380)) write$binfmt_script(r3, &(0x7f0000000100), 0xfffffd9d) r6 = socket(0x1e, 0x4, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000580)={&(0x7f00000001c0), 0xc, &(0x7f00000005c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="d80000000314000026a57000fbdbdf250900020073797a320000000008004100727865001400330070696d367265673000000000000000000900020073797a32000000000800410072786500140033007465616d5f736c6176655f31000000000900020073797a30000000000800410072786500140033006e657464657673696d300000000000000900020073797a3100000000080041007278650014003300776732000000000000000000000000000900020073797a3100000000080041007278650014003b0076657468305f746f5f7465616d000000"], 0xd8}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000004) connect$tipc(r6, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x1, 0x4}}, 0x10) sendfile(r6, r3, 0x0, 0x8010002b) 47.078564354s ago: executing program 5 (id=9513): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000100)=@framed, &(0x7f0000000200)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r1, 0xc0cc5640, &(0x7f00000004c0)={0x0, @raw_data="4e6f14fce2442c3dcdbf9fe2ef7ec4ddc8e17df9cddeaed076f0e0a54049cba2553cfe795b0c42854c2d6d5983a1ed738f44cdfa2fc721a21cacf97486c9635c3d5ab07adeb4f6473edf01c1a58bc5f65b8cbdb264af5aa8391e469bede1082424fd9713d9027ce68b5ee3b361d535f87cfbfb93ec9634c9535a8767b0967b67c9116afa2f571a8a9b6afb33b29e8f25ff8226c3700d28b003efe9a32f99f778bf4dcce55e331167ddfdf7fa9bccd2927f31207bda19727897a4f62162a2d3a2d083d64d12ee3afd"}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c00000044000701fcffffff00000000017c00003800048031", @ANYRESDEC=0x0], 0x4c}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='mounts\x00') ioctl$sock_inet_tcp_SIOCINQ(r3, 0x541b, &(0x7f0000000600)) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f00000002c0)=0x20) syz_open_procfs$pagemap(0x0, &(0x7f0000000140)) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x40, 0x7ffc1ffb}]}) mlock2(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x0) socket$inet6(0xa, 0x2, 0x3a) r6 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r6, &(0x7f0000000440), 0x10) recvmmsg(0xffffffffffffffff, &(0x7f0000001d00)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x2, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r7, &(0x7f00000007c0)=[{{&(0x7f00000002c0)={0x2, 0x4e22, @local}, 0x10, 0x0}}], 0x400005c, 0x2400c8a0) openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) r8 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x602, 0x0) writev(r8, &(0x7f0000000440)=[{&(0x7f0000000040)="93d90400000300", 0x7}], 0x1) 45.947862938s ago: executing program 5 (id=9515): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x0}, 0x94) openat$kvm(0xffffffffffffff9c, &(0x7f00000007c0), 0x60b03, 0x0) (async) fsopen(&(0x7f0000000000)='sysfs\x00', 0x0) (async) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async, rerun: 64) r0 = getpid() (rerun: 64) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async, rerun: 32) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async, rerun: 64) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) (async, rerun: 64) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) (async, rerun: 64) socket(0x10, 0x3, 0x0) (rerun: 64) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='tmpfs\x00', 0x3210c0a, &(0x7f00000001c0)='grpquota') (async, rerun: 64) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000900)=""/72, 0x48}], 0x1, &(0x7f0000000200)=[@cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @rights={{0xc}}, @cred={{0x18}}], 0x84}}, {{0x0, 0x0, &(0x7f0000001d80)}}], 0x2, 0x0, 0x0) (async, rerun: 64) bpf$MAP_CREATE(0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000000)={0x3, &(0x7f0000000080)=[{0x6, 0x4, 0x4, 0x56}, {0xfffd, 0x2, 0x4, 0x18d}, {0x101, 0x7, 0xfa, 0x8}]}) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000)) r3 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f0000000120003"], 0xf0}}, 0x0) mprotect(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x1) (async) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f0000000080)=0xb0000) (async) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000100)={@host}) (async) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r4, 0x7a8, &(0x7f0000000040)={{@local, 0x200001}, @local, 0x8, 0x6, 0x347, 0x80000004, 0x7, 0x10001, 0x9}) 45.347505551s ago: executing program 3 (id=9517): r0 = socket$xdp(0x2c, 0x3, 0x0) (async) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x29, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(r1, 0x641f) (async) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000880)=[{0x6, 0x3, 0x37, 0x7fffffff}]}) close_range(r2, 0xffffffffffffffff, 0x0) (async) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000280)=0x400, 0x4) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r3, 0xc0285629, &(0x7f0000000080)={0x3, @win={{0x0, 0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0}}) (async) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4064, 0x4) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x800}, 0x20) (async) setsockopt$XDP_TX_RING(r4, 0x11b, 0x3, &(0x7f00000003c0)=0x800, 0x4) (async) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f000000cdc0)=0x10, 0x4) (async) openat$sequencer(0xffffff9c, &(0x7f0000000040), 0x240400, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'pim6reg0\x00'}) (async) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) (async) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x67, &(0x7f0000000400)=ANY=[@ANYBLOB="0180c200000300000000000086dd608a27f2001c2c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa000002080000000000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="50004d6beea254a00aca73e3ed000090780000", @ANYRESDEC=0x0, @ANYRES8=r5, @ANYRES64=r1], 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6060626000102c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa11000001"], 0x0) (async) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r6, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) (async) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r6, 0x6, 0x16, &(0x7f0000000000), 0x20000328) (async) openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x5885, 0x100}, &(0x7f0000000340), &(0x7f00000001c0)) 45.208912437s ago: executing program 3 (id=9518): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000000400000008000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r0, 0x4040ae79, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r2}, 0x10) ioctl$KVM_IOEVENTFD(r0, 0x4040ae79, &(0x7f0000000340)={0x10000000000003, 0x4, 0x4, r1, 0x6}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x4c) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x14, 0x4, 0x4, 0x20002, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, &(0x7f0000000080)=@attr_other={0x0, 0x1, 0x2, 0xfffffffffffffffe}) ioctl$KVM_GET_IRQCHIP(r4, 0xc208ae62, &(0x7f0000000600)) 45.099274651s ago: executing program 3 (id=9519): r0 = socket(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x238, &(0x7f0000000740)={0x0, 0x198b, 0x10100, 0x0, 0x3aa, 0x0, r2}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) setsockopt(0xffffffffffffffff, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x402, @loopback}], 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) openat$rdma_cm(0xffffff9c, 0x0, 0x2, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) bind$tipc(r2, &(0x7f0000000080)=@name={0x1e, 0x2, 0x2, {{0x2, 0x3}, 0x2}}, 0x10) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x3, &(0x7f0000000200)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r6}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r7, 0x8946, 0x0) io_uring_enter(r3, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r8 = msgget$private(0x0, 0x100) socket$vsock_stream(0x28, 0x1, 0x0) syz_open_dev$MSR(&(0x7f0000000340), 0x2, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @random="e1ffffff00"}) msgsnd(r8, &(0x7f00000007c0)=ANY=[@ANYBLOB="030000002c5b92fe53d0a8d45c8df77b3a5b24f5b5f47fb21e984f7cd98be58672f21c05d89a28dd30d16695fd88872467e730c5c5b07c0baad7f374dbe55481983863b91989f7f9e702207af9ed03c1ce4f6eb9b24a840cf9e71f78cba191462144280a2866a9e564cdf705a0dcf7833ebd4d2f23d396cbe8ffa41ecb67a470e3bb3037a146b21a2af740178582259f87014c3647901b3c888b71cb87bcb145a83f4429394c059164566ac0c8821c5827f7c81d9a289c18b0808e9046145a3890f5273bab59211376b73224dc2cfc9a99c36c8266430e1877aa8fb26ccbdee4c77a0de31deb8729c07d000f3714455c7db1999b623eee354be50ae48db0bc57b0d663aeabe13198305efa3c242b6b1745acf3aaf07f57727548163f83393600bc81201c2792b82cc5cdaa5ba4ae7ecdb2db7defa75da39bfbcdc1c139ac6f945758e6f536796ee758ebc486b289244942a2db4721deede70ef5b975e2ef6f72e7530e2a48d4cbb74ce7a376939ddd77cdc6aab076c17bba11ad81fb16f55aec0a603d71da0c53bb4b"], 0x2000, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00'}) 44.151544632s ago: executing program 3 (id=9521): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x42280, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000003c0)={0x10001, 0x2, 0x0, 0x2000, &(0x7f000037d000/0x2000)=nil}) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) ioctl$UFFDIO_COPY(r3, 0xc028aa05, &(0x7f00000000c0)={&(0x7f000037c000/0x2000)=nil, &(0x7f0000000000/0x3000)=nil, 0x2000, 0x2}) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r5 = syz_open_dev$media(&(0x7f0000000300), 0x55, 0x2c01) ioctl$MEDIA_IOC_REQUEST_ALLOC(r5, 0x80047c05, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r7, 0x0, 0x33, &(0x7f0000000000)=0x80020000, 0x4) listen(r7, 0x2) close_range(r6, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PAUSE_SET(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000280)=ANY=[], 0x20}}, 0x0) 43.156149957s ago: executing program 3 (id=9524): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000100)=@framed, &(0x7f0000000200)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r1, 0xc0cc5640, &(0x7f00000004c0)={0x0, @raw_data="4e6f14fce2442c3dcdbf9fe2ef7ec4ddc8e17df9cddeaed076f0e0a54049cba2553cfe795b0c42854c2d6d5983a1ed738f44cdfa2fc721a21cacf97486c9635c3d5ab07adeb4f6473edf01c1a58bc5f65b8cbdb264af5aa8391e469bede1082424fd9713d9027ce68b5ee3b361d535f87cfbfb93ec9634c9535a8767b0967b67c9116afa2f571a8a9b6afb33b29e8f25ff8226c3700d28b003efe9a32f99f778bf4dcce55e331167ddfdf7fa9bccd2927f31207bda19727897a4f62162a2d3a2d083d64d12ee3afd"}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c00000044000701fcffffff00000000017c00003800048031", @ANYRESDEC=0x0], 0x4c}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='mounts\x00') ioctl$sock_inet_tcp_SIOCINQ(r3, 0x541b, &(0x7f0000000600)) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f00000002c0)=0x20) syz_open_procfs$pagemap(0x0, &(0x7f0000000140)) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x40, 0x7ffc1ffb}]}) mlock2(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x0) socket$inet6(0xa, 0x2, 0x3a) r6 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r6, &(0x7f0000000440), 0x10) recvmmsg(0xffffffffffffffff, &(0x7f0000001d00)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x2, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r7, &(0x7f00000007c0)=[{{&(0x7f00000002c0)={0x2, 0x4e22, @local}, 0x10, 0x0}}], 0x400005c, 0x2400c8a0) openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) r8 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x602, 0x0) writev(r8, &(0x7f0000000440)=[{&(0x7f0000000040)="93d90400000300", 0x7}], 0x1) 42.094537463s ago: executing program 3 (id=9528): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000700)=@raw={'raw\x00', 0x3c1, 0x3, 0x4cc, 0x0, 0x940c, 0x3002, 0x0, 0x2c0, 0x404, 0x3d8, 0x3d8, 0x404, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x28c, 0x2d4, 0x0, {}, [@common=@inet=@recent0={{0xf4}, {0x0, 0x2, 0x1, 0x0, 'syz0\x00'}}, @common=@inet=@recent0={{0xf4}, {0x0, 0x0, 0x2, 0x0, 'syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'virt_wifi0\x00'}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0, [0x0, 0x0, 0xff000000, 0xff], [0xffffff00, 0xffffff00, 0xff000000, 0xffffffff], 'team_slave_1\x00', 'veth1_virt_wifi\x00', {0xff}, {}, 0x886215f4d37bb4bb, 0x90, 0x1, 0x69}, 0x0, 0xc8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x24}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x528) pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r6, @ANYBLOB=',cache=fscach']) setsockopt$packet_add_memb(r6, 0x107, 0x1, &(0x7f0000000300)={0x0, 0x1, 0x6, @local}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) socket(0x11, 0x80a, 0x1) syz_clone(0x10022000, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000180), &(0x7f0000000500)="d1bc900d8a00c336af2a52816b757b56260c0944c4f341e9c85c040cff9c5cb201188344ec2fc3fffae0c36426d9228eba2b3c8b42a11f14833b25ea6bd3247a6b565adec5c3a506f5018d06d35efdbb76355936726d1060e638d7e8038ab2e6a23d5c4e1d00d5e8e0b94a252398a320916396ce6999aa2c04557443ff35fd4f7b6a2a2c4717dd2840936d0c43556b3e98f3cb949293cae52be2488aad3b51be28d5751ffa75c3e2fd85e7044b798fe8cb4c4d14f11f4465acc5507d1e3176218958d23fff776ff00f0afb37cd50d13dbf57db8b0d743b59779a6f8008c1e0d354d666417953545575356d5618b956117d1314e5") recvmmsg(r7, &(0x7f0000004e00)=[{{&(0x7f0000000440)=@nfc, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000600)=""/233, 0xe9}, {&(0x7f0000000c40)=""/158, 0x9e}, {&(0x7f0000000d00)=""/239, 0xef}, {&(0x7f0000000e00)=""/194, 0xc2}, {&(0x7f0000000200)=""/58, 0x3a}, {&(0x7f0000000280)=""/63, 0x3f}, {&(0x7f0000000300)}], 0x7, &(0x7f0000000f00)=""/242, 0xf2}, 0x23b}, {{&(0x7f0000001000)=@sco={0x1f, @none}, 0x80, &(0x7f0000002380)=[{&(0x7f0000001080)=""/13, 0xd}, {&(0x7f00000010c0)=""/119, 0x77}, {&(0x7f0000001140)=""/219, 0xdb}, {&(0x7f0000001240)=""/188, 0xbc}, {&(0x7f0000001300)=""/4096, 0x1000}, {&(0x7f0000002300)=""/84, 0x54}], 0x6, &(0x7f00000023c0)=""/74, 0x4a}, 0x5}, {{&(0x7f0000002440)=@l2tp6={0xa, 0x0, 0x0, @initdev}, 0x80, &(0x7f00000036c0)=[{&(0x7f00000024c0)=""/79, 0x4f}, {&(0x7f0000002540)=""/40, 0x28}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000003580)=""/88, 0x58}, {&(0x7f0000003600)=""/160, 0xa0}], 0x5}, 0x5}, {{&(0x7f0000003700)=@qipcrtr, 0x80, &(0x7f0000004bc0)=[{&(0x7f0000003880)=""/219, 0xdb}, {0x0}, {&(0x7f0000003780)=""/235, 0xeb}, {&(0x7f0000004b00)=""/149, 0x95}], 0x4, &(0x7f0000004c00)=""/65, 0x41}, 0xfffffff7}, {{&(0x7f0000004c80)=@qipcrtr, 0x80, &(0x7f0000004d80)=[{&(0x7f0000004d00)=""/29, 0x1d}, {&(0x7f0000004d40)=""/26, 0x1a}], 0x2, &(0x7f0000004dc0)}, 0x5}], 0x5, 0x1, 0x0) 30.805936422s ago: executing program 43 (id=9515): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x0}, 0x94) openat$kvm(0xffffffffffffff9c, &(0x7f00000007c0), 0x60b03, 0x0) (async) fsopen(&(0x7f0000000000)='sysfs\x00', 0x0) (async) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async, rerun: 64) r0 = getpid() (rerun: 64) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async, rerun: 32) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async, rerun: 64) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) (async, rerun: 64) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) (async, rerun: 64) socket(0x10, 0x3, 0x0) (rerun: 64) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='tmpfs\x00', 0x3210c0a, &(0x7f00000001c0)='grpquota') (async, rerun: 64) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000900)=""/72, 0x48}], 0x1, &(0x7f0000000200)=[@cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @rights={{0xc}}, @cred={{0x18}}], 0x84}}, {{0x0, 0x0, &(0x7f0000001d80)}}], 0x2, 0x0, 0x0) (async, rerun: 64) bpf$MAP_CREATE(0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000000)={0x3, &(0x7f0000000080)=[{0x6, 0x4, 0x4, 0x56}, {0xfffd, 0x2, 0x4, 0x18d}, {0x101, 0x7, 0xfa, 0x8}]}) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000)) r3 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f0000000120003"], 0xf0}}, 0x0) mprotect(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x1) (async) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f0000000080)=0xb0000) (async) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000100)={@host}) (async) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r4, 0x7a8, &(0x7f0000000040)={{@local, 0x200001}, @local, 0x8, 0x6, 0x347, 0x80000004, 0x7, 0x10001, 0x9}) 27.016740623s ago: executing program 44 (id=9528): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000700)=@raw={'raw\x00', 0x3c1, 0x3, 0x4cc, 0x0, 0x940c, 0x3002, 0x0, 0x2c0, 0x404, 0x3d8, 0x3d8, 0x404, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x28c, 0x2d4, 0x0, {}, [@common=@inet=@recent0={{0xf4}, {0x0, 0x2, 0x1, 0x0, 'syz0\x00'}}, @common=@inet=@recent0={{0xf4}, {0x0, 0x0, 0x2, 0x0, 'syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'virt_wifi0\x00'}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0, [0x0, 0x0, 0xff000000, 0xff], [0xffffff00, 0xffffff00, 0xff000000, 0xffffffff], 'team_slave_1\x00', 'veth1_virt_wifi\x00', {0xff}, {}, 0x886215f4d37bb4bb, 0x90, 0x1, 0x69}, 0x0, 0xc8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x24}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x528) pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r6, @ANYBLOB=',cache=fscach']) setsockopt$packet_add_memb(r6, 0x107, 0x1, &(0x7f0000000300)={0x0, 0x1, 0x6, @local}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) socket(0x11, 0x80a, 0x1) syz_clone(0x10022000, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000180), &(0x7f0000000500)="d1bc900d8a00c336af2a52816b757b56260c0944c4f341e9c85c040cff9c5cb201188344ec2fc3fffae0c36426d9228eba2b3c8b42a11f14833b25ea6bd3247a6b565adec5c3a506f5018d06d35efdbb76355936726d1060e638d7e8038ab2e6a23d5c4e1d00d5e8e0b94a252398a320916396ce6999aa2c04557443ff35fd4f7b6a2a2c4717dd2840936d0c43556b3e98f3cb949293cae52be2488aad3b51be28d5751ffa75c3e2fd85e7044b798fe8cb4c4d14f11f4465acc5507d1e3176218958d23fff776ff00f0afb37cd50d13dbf57db8b0d743b59779a6f8008c1e0d354d666417953545575356d5618b956117d1314e5") recvmmsg(r7, &(0x7f0000004e00)=[{{&(0x7f0000000440)=@nfc, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000600)=""/233, 0xe9}, {&(0x7f0000000c40)=""/158, 0x9e}, {&(0x7f0000000d00)=""/239, 0xef}, {&(0x7f0000000e00)=""/194, 0xc2}, {&(0x7f0000000200)=""/58, 0x3a}, {&(0x7f0000000280)=""/63, 0x3f}, {&(0x7f0000000300)}], 0x7, &(0x7f0000000f00)=""/242, 0xf2}, 0x23b}, {{&(0x7f0000001000)=@sco={0x1f, @none}, 0x80, &(0x7f0000002380)=[{&(0x7f0000001080)=""/13, 0xd}, {&(0x7f00000010c0)=""/119, 0x77}, {&(0x7f0000001140)=""/219, 0xdb}, {&(0x7f0000001240)=""/188, 0xbc}, {&(0x7f0000001300)=""/4096, 0x1000}, {&(0x7f0000002300)=""/84, 0x54}], 0x6, &(0x7f00000023c0)=""/74, 0x4a}, 0x5}, {{&(0x7f0000002440)=@l2tp6={0xa, 0x0, 0x0, @initdev}, 0x80, &(0x7f00000036c0)=[{&(0x7f00000024c0)=""/79, 0x4f}, {&(0x7f0000002540)=""/40, 0x28}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000003580)=""/88, 0x58}, {&(0x7f0000003600)=""/160, 0xa0}], 0x5}, 0x5}, {{&(0x7f0000003700)=@qipcrtr, 0x80, &(0x7f0000004bc0)=[{&(0x7f0000003880)=""/219, 0xdb}, {0x0}, {&(0x7f0000003780)=""/235, 0xeb}, {&(0x7f0000004b00)=""/149, 0x95}], 0x4, &(0x7f0000004c00)=""/65, 0x41}, 0xfffffff7}, {{&(0x7f0000004c80)=@qipcrtr, 0x80, &(0x7f0000004d80)=[{&(0x7f0000004d00)=""/29, 0x1d}, {&(0x7f0000004d40)=""/26, 0x1a}], 0x2, &(0x7f0000004dc0)}, 0x5}], 0x5, 0x1, 0x0) 8.689811069s ago: executing program 2 (id=9616): syz_open_dev$tty20(0xc, 0x4, 0x0) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f0000000080)) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008000}, 0x0) bind$inet(r2, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r2, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r2, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x700, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) 8.318004056s ago: executing program 2 (id=9618): socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'vcan0\x00'}) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="180300000005000000000000000000001801000011af000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020000838500000070000000180100002020752500000000806020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000040)='sys_exit\x00', r0}, 0x10) geteuid() sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0x3}, {0x4}, {0xc}}}, 0x24}}, 0x40004) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000080), 0x400, &(0x7f0000000a40)=ANY=[@ANYRESDEC=r2, @ANYRES16]) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x8c) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0xffffffffffffff88, 0x1, [@m_ct={0x44, 0x4, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x20a}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fanotify_init(0x4c, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) ioctl$SOUND_OLD_MIXER_INFO(0xffffffffffffffff, 0x80304d65, &(0x7f0000000280)) 6.957676908s ago: executing program 2 (id=9622): socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) openat$kvm(0xffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000047c0)={0x60, r6, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r7}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect$cdc_ncm(0x1, 0x0, 0x0, 0x0) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480f0000005e140602000000000e000a001000000002800000121f", 0x2e}], 0x1}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r7, {}, {}, {0x8, 0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x8881}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r9, &(0x7f0000000080)={0x0, 0x3f00, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r10, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f00000000c0)=[{0x2b, 0xff, 0x2, 0x17d}]}) 5.150783092s ago: executing program 7 (id=9633): r0 = openat$yama_ptrace_scope(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$F2FS_IOC_RESIZE_FS(r0, 0x4008f510, &(0x7f0000000080)=0x6) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=@newtaction={0x1b0, 0x30, 0x1, 0x0, 0x0, {}, [{0x19c, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_tunnel_key={0x154, 0x1f, 0x0, 0x0, {{0xf}, {0x64, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e21}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x3ff}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e20}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e24}, @TCA_TUNNEL_KEY_NO_CSUM={0x5}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x9, 0x8, 0xffffffffffffffff, 0x80, 0xd}, 0x2}}, @TCA_TUNNEL_KEY_NO_CSUM={0x5, 0xa, 0x1}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}}]}, {0xc2, 0x6, "5e8745a985d0c0a7126b56fee3132e21ba54e527c6b0baa5da4c66643f59e70e65e834b53841ca3e2674495cf8df5b81238790bfddcbb7f8cd8ad9263e7f703d11421c576ca2ed9fc3a080ed63ad41b4ba67cd36f70adf171b76678530c1f9070b53dd11d536a4d0f0d8d032d777488979a62b7dffd6be5d19c647b572be79374f7613a1e2e05c972bd26e674dd03411898cb2d829941498957adeca58e005db2d74c6f2bb255389ca718404dd52a74f72ba701c50cb0505bb55036f9b86"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x1b0}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() r2 = socket$can_raw(0x1d, 0x3, 0x1) bind(r2, &(0x7f0000000100)=@isdn={0x22, 0x49, 0x4, 0x94, 0xb}, 0x80) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6e65772064656661756c7420757365721a73797a2030303030303030303030cebeafbe3030343039335c"], 0x2a, 0x0) connect$unix(r4, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e20}, 0x6e) r5 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0x5ba8, 0xfffffffffffffffd) keyctl$read(0xb, r5, &(0x7f0000000240)=""/112, 0x349b7f55) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$netlink(r6, 0x10e, 0x5, &(0x7f0000000040)=""/162, &(0x7f0000000100)=0xa2) r7 = gettid() bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb0100180000000000000028000000280000000600000004000000fd00000e03000000000000000100000000000012000005000000000000002e0000610000000000000000"], 0x0, 0x46}, 0x28) timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) syz_emit_ethernet(0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb08004500002800000000002f907864010102ac1414aa4001880b", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c0000009078ef00"], 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) 4.248467747s ago: executing program 2 (id=9636): r0 = openat$mixer(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) pwrite64(r1, &(0x7f0000000080)="7c20fc4593ce36c91cb772f20d6f2a5b53f0c066c3", 0x15, 0xd084) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000202300800000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4}, 0x94) r3 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) connect$inet(r3, &(0x7f0000000580)={0x2, 0x4e21, @empty}, 0x10) timer_create(0x2, &(0x7f0000000000)={0x0, 0x0, 0x1}, &(0x7f0000000040)) r4 = mq_open(&(0x7f0000001140)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\xe0\x9d\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xdf\x15\f]\x15\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb', 0x42, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043e0c04"], 0xf) lseek(r4, 0x50, 0x4) timer_settime(0x0, 0x236bd4336e4642df, &(0x7f0000000300)={{}, {0x0, 0xe4c}}, 0x0) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x3938700}}, &(0x7f0000000340)) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0x0) write$qrtrtun(r3, &(0x7f00000005c0)="9d8dfa5e53b6183d874f9e93a18dd009a09582ff682bd07dc3d28385a8f3f9e18418950d4dfe49f13a19e24320444a7d6c121741ba3dc510dba4f980bbd9a315424fa0a162233e8e31f286039bfb27e0a5512da79faba7978890", 0x5a) write$UHID_INPUT(r3, &(0x7f0000001300)={0x8, {"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", 0x1000}}, 0x1006) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) getsockopt$XDP_STATISTICS(0xffffffffffffffff, 0x11b, 0x7, 0x0, &(0x7f00000000c0)) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r7, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703410000004000000000000000040014000d000a00100000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}, {&(0x7f0000000340)="eb97cd462abcffff0d8e5c9ad6f29acb3435b7aa35b964c6386059cc86d2f73b8df2fc8265856b29ce80b25fa626c00b81b263e7772e6ee8196932ca55da73868b14ce8dee55fc090605d83a481b71c146c0f098f0849d22a121290f3262cbaff2b9b91514a13abc8130df7815", 0x6d}, {&(0x7f00000003c0)="c0e0196b3dee1971c680768068bbce1f", 0x10}, {&(0x7f0000000400)="61ca537c8dd0b7de17283706247acf46727a7088e83ad1bcbf53185b930b656687e15b8d57ffdc4b74e3f32b180682dd724ecdc87e85e56df7e638fb0fc556279ade67f1c11ad08a1c95db84baeeaae9213d6bec165722277356ca50fc44e1464ae13445057b086f91e557d33305e39696909a597356a909badc547ebad9c1aaea3c1567d429a71bb1b369781ca9a6ad03f2ac6ef421f59c662631b95a2db5a06f2becf02e714169ae0349adb34ae2ea26b3619197c9d5f654d71ba2def4c9f2372f5ba9b653248e6a778cdd4ad3443bb92a0febe0f9ad666a6d7c6dd12f49f5415849e37ad06a9874a214b129e56f4a7fb37f7d0f7c5d41", 0xf8}], 0x4, 0x0, 0x0, 0x1f000801}, 0x0) ioctl$SOUND_MIXER_READ_RECSRC(r0, 0x80044dff, &(0x7f0000000040)) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x1000, 0x0, 0xffffffffffffffff, 0x4000000}, 0x50) mmap(&(0x7f00005e8000/0x1000)=nil, 0x1000, 0x2000003, 0x28011, r9, 0xffff8000) 4.194518529s ago: executing program 7 (id=9637): bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0xfffffffd, {}, [{0x90, 0x1, [@m_ct={0x44, 0x5, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x0, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$nvram(0xffffffffffffff9c, 0x0, 0x8002, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000880)=ANY=[@ANYRESDEC=r1], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) connect$unix(r2, &(0x7f00000003c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e) r4 = syz_open_procfs(0x0, 0x0) preadv(r4, 0x0, 0x0, 0x0, 0x6) fsopen(&(0x7f0000000280)='cifs\x00', 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0}, 0x50) syz_emit_ethernet(0x1e, &(0x7f0000000380)={@broadcast, @local, @void, {@can={0xc, {{0x3, 0x0, 0x0, 0x1}, 0x1, 0x0, 0x0, 0x0, "2f4f5fcab68ab52b"}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f0000000100)=@ringbuf={{0x18, 0x0, 0x0, 0x60}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x85, 0x0, 0x0, 0x8}, {0x4, 0x1, 0xb, 0x9, 0x0, 0x8}}, {{0x6, 0x0, 0xb, 0xa}, {0xf}}, [@printk={@lu, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0x2, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x15}}], {{0x7, 0x1, 0x3, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000080)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000300)='source', &(0x7f00000000c0)='%(,:', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 3.177296569s ago: executing program 7 (id=9643): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) (async) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000380)={0x4000, 0x0, 0x1}) (async) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="180300000005000000000000000000001801000011af000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000200008385"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x10, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000000000000000fe9d72abade220358a903e16a584000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000006b775a9040000f0ffffff00"/106, @ANYRES32=r6, @ANYBLOB="0000000002000000b705000008000000850000006900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x31eb}, 0x94) (async, rerun: 32) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xd, 0x10, &(0x7f0000000440)=ANY=[@ANYRESDEC=r4, @ANYRESOCT=r1], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 32) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000040)='percpu_alloc_percpu\x00', r7}, 0x10) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="09003a0004000000e27f114b0100000000000000", @ANYRES32, @ANYBLOB='\b\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x4c}}, 0x0) (async) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r11, 0x29, 0x48, &(0x7f0000000000)=0x6, 0x4) sendto$inet6(r11, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x983a}, 0x1c) sendmsg$IPSET_CMD_ADD(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000000906010200000000800000000200ffff"], 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) (async) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r12, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYRESOCT=r8], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40800c0) (async) syz_usb_connect(0x0, 0x36, 0x0, 0x0) (async) r13 = socket$netlink(0x10, 0x3, 0x4) write(r13, &(0x7f00000000c0)="29000000140005b7ff000051915f95eb01010003a606a40e07fff024bb000000000000000040000000", 0x29) (async) r14 = syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$SEG6_CMD_SET_TUNSRC(r13, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r14, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x4041) (async) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000100)={0x0, 0xbad, 0x18}, 0xc) (async, rerun: 32) ioctl$KVM_RUN(r3, 0xae80, 0x0) (rerun: 32) 3.087485636s ago: executing program 7 (id=9644): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000140)='syzkaller\x00'}, 0x94) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000140)={0x1000200, 0x0, 0x80000000, 0xdfff, 0x4, "4ae23ae17df2e98c69ba36c4095c911abad88f"}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000040)={@loopback, r2}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000002c0)={@private1={0xfc, 0x1, '\x00', 0x1}, 0x47, r2}) setreuid(0x0, 0xee01) r3 = semget$private(0x0, 0x6, 0x0) semctl$SEM_STAT(r3, 0x0, 0x12, 0x0) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000140), 0x30) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x14, r6, 0x1, 0x70bd28, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="ff00"/16], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r9 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r9) ptrace$ARCH_SHSTK_ENABLE(0x1e, r9, 0x1, 0x5001) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) readlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=""/223, 0xcf) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r11 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r11, 0x29, 0x40, &(0x7f0000000700)=@nat={'nat\x00', 0x1b, 0x5, 0x430, 0x508, 0x118, 0xffffffff, 0x508, 0x118, 0x774, 0x774, 0xffffffff, 0x774, 0x774, 0x5, 0x0, {[{{@ipv6={@loopback, @private0, [0x0, 0xffffffff, 0x0, 0xffffff00], [0xff000000, 0xff, 0xff, 0xff], 'team_slave_1\x00', 'wg1\x00', {}, {}, 0x2c, 0x0, 0xb, 0x53}, 0x0, 0xa4, 0xc8}, @common=@unspec=@NFQUEUE0={0x24, 'NFQUEUE\x00', 0x0, {0xff}}}, {{@uncond, 0x0, 0xa4, 0xc8}, @common=@unspec=@NFQUEUE1={0x24, 'NFQUEUE\x00', 0x1, {0x1, 0xf24d}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0xc, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast2}, @ipv6=@mcast2, @port=0x4e24, @gre_key=0xc16}}}, {{@ipv6={@private0={0xfc, 0x0, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0xe}, [0xffffff00, 0x0, 0xff, 0xffffff00], [0xffffffff, 0xff0000ff, 0xff0000ff, 0xff000000], 'bridge0\x00', 'ipvlan0\x00', {}, {0xff}, 0xb2, 0x0, 0x4, 0x9}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x10, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, @icmp_id=0x64, @icmp_id=0x64}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x48c) r12 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), r5) sendmsg$ETHTOOL_MSG_EEE_SET(r4, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000f40)=ANY=[@ANYBLOB="58030000", @ANYRES16=r12, @ANYBLOB="000228bd7000fcdbdf25180000003400018014000200766e0000000000001400020077673200000000000000000000000000080001000000000000000000", @ANYRES32=r10, @ANYBLOB="050005000800000005000600000000000800070094000000c0020280b50004009d5c08b4e14858bcdfe9cb5c3dd574ab005aa58a2259001f2f0bda01015abe9c50489b7b9f0d03ad40303c866d8205f2cf02358573ee5ee610f7666dedabe9f1da7eee0c9ed3731f035c82a97fad6f9d0c3cbe0730369e2d24f1273c60803d121cd9b0bc4ff7ba304412e1e79fc1a80f23a97668289866c8fff2dbdeb9f1bea64a6e6764b30c006aa2e67f6e6d8d95944ffbeb530cdb409ed5dbdbc7272a70c70effe907e31f76454465dbef3454a738df000000100103802400018004000300080001000900000008000100010000000b0002005c2d3a27511000004c000180040003000e00020073797a6b616c6c65720000000800020077673100080001000080000006000200250000000b0002004e45544d41500000080001000000000808000100010000001000018004000300080001000700000048000180040003000800010091e6000004000300080001000300000008000100050000000400030005000200000000000800020077673100080001000300000005000200000000001c000180040003000800010003000000040003000800010003000000280001800800010002000000080001000700000004000300080001000a000000080001000100000008000200090000000800020004000000ad000400b8acc1b4ec97885009cbec5890189b374df4b0b84db7fc5a2b51effc9be692f18fcafd30112b5f6111bd4df55029f9de3536468cc01658a8ffcaf53e61f83a781a59433aa9854add755df7fcb9678ba14587c7537664d5054ea106856bbf63c05ee79e422423a028eeda40d99c8052fd2ac5d0c152926b97a326c274ee6c7ff67f123feaca54cc260542bded7a4f29853a0801aac4fbefe79117c8dae87a66cde64d1c966a4c1209a80000002b0004003a0a395d277f3f747971c3a720cc3b449686597e5ddf4f1510ddbb78c6265f94fa93948c96bc0500080002000500000038000180080003000200000008000100", @ANYRES32=r10, @ANYBLOB="0800010053d7054709476c58739bbcebf22a50f21b77980042bb5d8dc29e183ba6acd265ab9f2940eb0b74202b86cc0a139a4dd1d2e31bdb3a3737b6409ddfd3b3c8607cfd69537017253e8d54e0ea1bb72f52b6a7b471bfd5c49c5605507029d1a16d2ccda6d4d7520e0f552cdf015878d61d0c291d", @ANYRES32=r10, @ANYBLOB="1400020065727370616e300000000000000000000800030000000000"], 0x358}, 0x1, 0x0, 0x0, 0x4880}, 0x41) r13 = syz_open_dev$video(&(0x7f0000000000), 0x2, 0x20000) ioctl$VIDIOC_S_SELECTION(r13, 0xc040565f, &(0x7f0000000100)={0x1, 0x100, 0x3, {0x0, 0x2, 0x4, 0xf33}}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r7, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={0x24, r8, 0x331, 0x70bd2a, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r10}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}}, 0x0) 2.999871388s ago: executing program 7 (id=9645): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$video4linux(&(0x7f0000000180), 0x7, 0x20842) ioctl$VIDIOC_SUBDEV_S_FMT(r2, 0xc0585605, &(0x7f00000000c0)={0x1, 0x0, {0x1, 0x0, 0x101c, 0x4, 0x0, 0x0, 0x5, 0x4}}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4048aecb, &(0x7f0000000400)={0x6, 0x0, [{0xc0000000, 0xffffffff, 0x0, 0x7, 0x6, 0x6, 0x2}, {0xc0000001, 0x4, 0x0, 0x10, 0x27, 0x7, 0x5}, {0xb, 0x8, 0x0, 0xffff, 0x7fffffff, 0x5, 0x2}, {0xb, 0x10, 0x1, 0x7, 0xdf4, 0x6, 0x80000001}, {0xd, 0x2bb, 0x0, 0xa, 0x3, 0x2, 0x400}, {0x80000000, 0x100, 0x0, 0x6, 0x3, 0x1, 0x3}]}) 2.828258757s ago: executing program 7 (id=9646): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x18, 0x30, 0x100, 0x70bd2a, 0x20000000, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x240408c0}, 0x20000840) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000070000000850000005000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='tlb_flush\x00', r0, 0x0, 0x9}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff5000/0x3000)=nil) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) msync(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) poll(0x0, 0x0, 0x6) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, 0x0, 0xc000) syz_clone(0x8020a800, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, 0x0) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0x80045505, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) link(0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f000000a280)="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", 0x2000, 0x0) setsockopt$inet_tcp_TLS_TX(0xffffffffffffffff, 0x11e, 0x1, &(0x7f0000000540)=@gcm_128={{0x303}, "e85c7fe3263c820d", "b592f2403565485c0403e559f2d2d966", "51306fda", "7a749084e6e48900"}, 0x28) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f0000000180), 0x0, 0x2, 0x0) 2.1825807s ago: executing program 6 (id=9650): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000000)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000100)={@local}) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r0, 0x7b2, &(0x7f0000000140)={&(0x7f0000000300)=[0x4, 0x6, 0x700, 0x9, 0x5, 0x401, 0x2, 0x4, 0x0, 0xcb0d, 0x770f, 0xff, 0x4, 0x81, 0x2, 0x5, 0x1d, 0x0, 0x78, 0xb, 0x5, 0x6, 0x8, 0x0, 0x69, 0x5, 0xfffffff4, 0x7fff, 0x8, 0xe00, 0x0, 0x3, 0x10000, 0x7f, 0x2, 0xfffffff4, 0x15a0, 0xffffff7f, 0x8, 0x5d, 0x800, 0xf94, 0xff, 0x1ff, 0x2, 0xfffffff9, 0xe, 0xffffbb46, 0x7, 0x4, 0x1, 0x3, 0x5, 0x1000, 0x6, 0x3, 0x1, 0x8, 0x80, 0xc, 0x7, 0x8, 0x2, 0x1, 0x3, 0x1800000, 0x3, 0x5, 0x400, 0x5, 0x9, 0x1, 0xd0d, 0x2, 0x1000, 0xb98, 0x3, 0x6d, 0x0, 0x1ff, 0xffffffc0, 0x0, 0x5, 0x8, 0x8, 0x2, 0xf0, 0x5, 0x7, 0x6, 0x4469, 0xb, 0xfffffb4c, 0x542, 0xe5f9, 0x0, 0x4, 0xd4, 0xffffffff, 0x0, 0x9, 0x2, 0x4, 0x5, 0x2, 0x3, 0x8f, 0x7, 0x6, 0x5, 0x4, 0x6d03, 0x8001, 0x9, 0x3, 0x0, 0x8e7a, 0x2, 0x8, 0xfffffff1, 0x5, 0x1000000, 0xfff3, 0x4, 0x1, 0x80000000, 0x3ff, 0x81, 0x100, 0x8, 0xfffffffd, 0x8, 0xffffffff, 0x1, 0x7, 0x3, 0x3e, 0x43, 0xffff6a70, 0xc, 0xa092, 0x8, 0x877, 0x1, 0x3, 0x800, 0x5, 0xffffffff, 0x8001, 0x48c, 0x7, 0x2, 0x13, 0x3, 0x3, 0x9, 0x0, 0x70000000, 0x2, 0x8, 0x2, 0x1b1c, 0x8, 0xb5, 0x8, 0x401, 0xfff, 0x5, 0x1, 0xa008, 0x9, 0x8, 0xe4, 0x898, 0x7, 0x81, 0x0, 0x1ff, 0x5, 0x80000000, 0x1, 0x8, 0x1, 0x5, 0x4251, 0x6, 0x4, 0x6, 0x4008, 0x200, 0x5, 0x73f7, 0x6, 0x8001, 0x80, 0xd5, 0x6, 0x800000, 0x40, 0xfffffe00, 0x2, 0x80000001, 0x7f, 0xfffffffa, 0xff, 0x4, 0x4b031fca, 0x7, 0xf3, 0x40, 0xffffffff, 0x1, 0x0, 0x3, 0x6, 0x0, 0x5, 0x6, 0x3, 0x9, 0xfd, 0xd, 0x1000, 0x94, 0xd52, 0x3, 0xfffffeff, 0xba7, 0x400, 0x4, 0x0, 0x80000001, 0x7, 0xfffe, 0xfff, 0x9, 0x2, 0x9, 0x1, 0xfffffff9, 0x6, 0x62, 0x2, 0xffff, 0x0, 0x7, 0x6, 0x0, 0x4d, 0x2, 0x5f4, 0x400, 0xfffffffe, 0x4, 0x6, 0x9, 0x0, 0x5, 0x4, 0x4, 0x3, 0x1ff, 0xc3f6, 0x7, 0xd8b8, 0xfffffffe, 0xff, 0x8000, 0x7, 0x100, 0x43, 0x2, 0xc7b, 0xe2a0, 0x5, 0x6, 0x81, 0x6, 0x4, 0x3, 0x75c, 0x1, 0x10000, 0x3f, 0x24f7, 0x5, 0x9, 0xd8c, 0x80000001, 0xe, 0xfffff6d2, 0x0, 0x0, 0x3, 0x9, 0x800, 0x5, 0x9, 0x80000000, 0x1, 0x9dcb, 0x8, 0x7, 0x8001, 0x9, 0x7, 0x6, 0x7, 0x81, 0x7ff, 0x0, 0x7, 0x1c00000, 0x5, 0x10, 0x2, 0x1, 0x4, 0xac, 0x8001, 0xb2, 0x4, 0x84f4, 0xf, 0x0, 0x6, 0x6, 0x3ef, 0x7, 0x101, 0x9, 0x4, 0x6, 0x7f, 0x5, 0x2, 0x7ff, 0xffff094f, 0x9, 0x80, 0x6, 0xfffffffd, 0x63, 0x3, 0x7, 0x9, 0x200, 0x9, 0x7, 0x8, 0xa, 0x10001, 0x8, 0xa21, 0x2, 0x9, 0x7, 0xe207, 0xa4, 0x4, 0x5, 0x7, 0x9, 0x0, 0x0, 0x9, 0x1, 0xd, 0x1, 0xf, 0x1, 0x26d1, 0x9, 0x8b000, 0x6, 0x6, 0x1, 0x80000000, 0xfffffffb, 0x8, 0x7, 0xfffffff9, 0x7, 0x4, 0x2, 0x0, 0x80, 0xffff6c99, 0x5, 0x6bed988b, 0x7f, 0x6, 0xffffff7f, 0x7, 0x7, 0x8, 0x4, 0x10000, 0x6, 0x9, 0x40, 0x0, 0x5, 0x0, 0x2, 0x3, 0x10000, 0x8, 0x9, 0x53fa, 0x0, 0x53, 0x9465, 0x9, 0x3, 0x4, 0x36c9, 0x3ff, 0x3, 0x4, 0x8, 0x68, 0x2, 0x81, 0x8, 0xcd94, 0x75e, 0x1000, 0x9, 0x6, 0x0, 0xfffffff7, 0xe, 0x6, 0x3, 0x7, 0x0, 0x6, 0x80000001, 0x731, 0x6, 0x4, 0x8, 0x3, 0x9, 0x80000001, 0x1, 0xfff, 0x76, 0x6, 0x4, 0x6, 0x2, 0x9, 0x6f9, 0x3, 0x8, 0x475e0e15, 0x80000000, 0x5, 0x4, 0xf3e, 0x9, 0x5, 0x0, 0x3, 0xad64, 0xfffffff9, 0x2, 0x3, 0x10000, 0x4, 0xff, 0x400, 0x7f, 0x7f, 0x7, 0x800, 0x40, 0x7, 0x6, 0x8, 0x1a, 0x0, 0x1000, 0xff, 0x10001, 0x8, 0x2, 0xffff, 0x8, 0x100, 0x100, 0x9, 0x9, 0x37, 0x28, 0xfffffff9, 0x7fffffff, 0x4, 0x3, 0xb, 0x2, 0x85f2, 0xd7f, 0x7, 0x3ff, 0x1000000, 0x2387c5a4, 0x3, 0x8, 0xbc4e, 0xffff, 0x1, 0x2, 0x408, 0xc, 0x0, 0x9, 0x6, 0x2, 0x6, 0x0, 0x51, 0x5, 0x3, 0x2, 0xfaf0, 0x4a46, 0x4, 0x10001, 0x9, 0x4921bb4d, 0x5c, 0x6, 0x3, 0x7, 0x7fff, 0x80, 0x3, 0x29dc2fdf, 0x1, 0x1, 0x9, 0xd2c, 0x8, 0x3, 0x3, 0x66f, 0x5, 0x4bb6, 0x258d, 0x101, 0x10000, 0x662f, 0x401, 0x5, 0x4, 0x4, 0xd3f6, 0x4, 0x3, 0x4, 0x1, 0xc, 0xbf2, 0xff, 0x7, 0x7fff, 0x9, 0x3ff, 0x80000000, 0x9, 0x9, 0x9, 0xf01a, 0x2, 0x1, 0x9, 0x100, 0x0, 0xffffffff, 0x80000001, 0x3, 0x3, 0x6, 0x240000, 0x0, 0x1, 0xfffffffa, 0x45, 0x0, 0x0, 0x8, 0x5, 0x0, 0x3, 0x8a8, 0xa, 0x9, 0x0, 0x7, 0x9, 0x583, 0x8, 0x8, 0x1, 0x10001, 0x9, 0xffffff81, 0xa, 0x7, 0x627, 0x6, 0x8, 0xc442, 0x0, 0x3, 0x3ff, 0x5, 0x82a, 0x4, 0x72d2, 0x7, 0x5, 0x2, 0x4, 0x8, 0x8, 0xea1, 0x0, 0x566, 0x0, 0xfffffffe, 0x7, 0x737, 0x4, 0x6, 0x2, 0x1000, 0x4, 0x8, 0xff, 0x9, 0x7, 0x4, 0x3, 0x9, 0xbcea, 0x7, 0x8000, 0x0, 0x1, 0x1, 0x3, 0x3, 0x8, 0x3, 0x2, 0x9, 0x101, 0x1, 0x8, 0xfff, 0x6, 0x6, 0x9, 0x7f800, 0x9, 0xd8a8, 0x3, 0x9, 0xfffffffb, 0x8, 0xd0f, 0x7, 0x5, 0x4, 0x1, 0x7, 0x7, 0x8e, 0x5, 0x9, 0x7, 0xfffffffe, 0x81, 0xad3, 0x4, 0x80000000, 0x7, 0x8, 0x80, 0x8, 0x3, 0x6, 0xce1, 0x8, 0x80000001, 0xe, 0x1, 0x2, 0x8000, 0x4, 0x3, 0xb, 0x2, 0x2, 0x6, 0x1, 0xe30, 0x3ff, 0xa7a, 0x8, 0x8, 0x9, 0x2, 0x401, 0x9, 0x9659, 0x400, 0xa83, 0x6, 0xfffffffe, 0x5082, 0x5, 0x6e82, 0xffff, 0x9, 0x7ff, 0x200800, 0xfffffffb, 0xfffffffb, 0x2, 0xd, 0x401, 0xffffff48, 0x7, 0x8000, 0x5d, 0x70d, 0x7fff, 0x3, 0x4, 0x6, 0x7, 0x4153, 0x7, 0x9, 0x1, 0xe8b0c95b, 0x9, 0x3, 0x8a2, 0x4, 0x6, 0x2, 0x3, 0x0, 0x7, 0x3, 0x4, 0x4, 0x5, 0xfffffff9, 0xfffeffff, 0x10, 0xfffffff7, 0x1ff, 0x8, 0x7fff, 0x9, 0x3, 0xfffffff8, 0x6, 0x434, 0x8, 0x3ab, 0x8, 0x6, 0x0, 0x7, 0x4389, 0x7, 0x800, 0x2, 0x4, 0x0, 0x3, 0x5, 0xc94, 0x9, 0x4, 0x0, 0x4, 0x2, 0x401, 0x6, 0x401, 0x8, 0x1, 0xb, 0xe664, 0x0, 0xd, 0x96, 0x7, 0x101, 0xd, 0x2, 0x6, 0xdc, 0xf, 0xffd, 0x8, 0x7, 0x8, 0x0, 0x10001, 0x9, 0x7, 0x0, 0xfff, 0xfb, 0xc8, 0x400, 0x1, 0x400, 0x9, 0x0, 0x8, 0x8, 0x7, 0x5, 0xfffffffb, 0x6b59b47c, 0x2, 0x1009, 0xd64, 0x8, 0xc, 0x7, 0x7, 0x0, 0x9, 0x4, 0x80, 0x3, 0x6, 0x1, 0xc, 0x7, 0x8, 0x8, 0x8000, 0x6, 0x2, 0x385, 0xa0, 0x5, 0x8, 0x3d72e35e, 0xfffffff7, 0x9, 0x80000001, 0x8, 0x1a4, 0x7, 0x8, 0x0, 0x3, 0xe83, 0x3, 0x1, 0x3, 0x0, 0x2, 0x9973, 0x3, 0x4, 0x40, 0x40, 0x4, 0x5, 0x412, 0x4, 0x2, 0x5, 0xb4, 0x1ff, 0xc77c0000, 0xee18, 0x9, 0x8000, 0x47, 0x9, 0xffffff97, 0xffff, 0x3, 0xffffffc0, 0x10001, 0x2, 0xfffffe01, 0x7fff, 0x78, 0x8, 0x0, 0xf, 0x40, 0x8, 0xed, 0x3, 0x9, 0x8, 0x0, 0x1, 0x1, 0x7, 0x800, 0xb, 0x5, 0x5, 0x9, 0x2, 0xd, 0x2, 0x6, 0x101, 0x4, 0x6, 0xa6d2, 0xd, 0x8000, 0x2, 0x9, 0x2, 0x0, 0x0, 0x3ff, 0x7, 0xffffff00, 0x5, 0x7, 0x40, 0x3, 0x101, 0x20000000, 0xdc000000, 0x2, 0xfffffffb, 0x401, 0x6, 0x1, 0x9, 0x4, 0xffffffa2, 0x5, 0x5, 0x9015, 0x6, 0x5, 0x5, 0x14b, 0x0, 0x336, 0xcf, 0xd, 0x5, 0xbbe7, 0xa8eb, 0xd0, 0xb, 0x800, 0x2b18, 0x3ec3, 0x3, 0x9, 0x5, 0x1, 0x8, 0x200, 0x2, 0x0, 0x5, 0xff, 0xc, 0x8, 0x2, 0x2, 0x7, 0x8, 0x10, 0xb46, 0x8, 0x1, 0x5dc60e00, 0x4, 0x9, 0x8, 0xd2, 0x9, 0xffff4a7a, 0x88f, 0xbd, 0x4, 0x6, 0x5, 0x4, 0x9, 0xffffffff, 0xda, 0xd, 0x8001000, 0x7b, 0x2, 0x10001, 0x6, 0x136, 0x6, 0x3a12, 0x9, 0x7, 0x4, 0x8], 0x1, 0x400, 0x3ff}) 2.118251251s ago: executing program 6 (id=9651): accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000100), 0x80800) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32, 0x0, 0x3}, 0x9c) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r3 = epoll_create1(0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x6, 0xb}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, 0x0, &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0xd, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r0, 0x1) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, &(0x7f0000000a40)={0x0, 0x0, "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", "c28bbfd54ef481e730a718206ab368854cc7681b185f6ba20a923f048a8d368583003fc1b3d5f9677dcd5a4f5e3dce7c44dd0ee28fc7f2df4b7d0c9c646b1b05365b365a5405e8dd2dd495d04342425c18d91b4d36bf9e26f3c118d3a0c530e1b93557e8bd7be74d8527466b3e18160ece516873c84a8d3cdc6a72699e118e4806c2c23c9166b94087bacc841bb64ae72d8443e2d330ce31ca7daae65398eae63c11df59e1b010fb1e311099f861c412d42f0b0770da83ad602af2abec27a04988c7e35c7b19823e343de5017caef83a0bd65e5eeb3c4f16279758c19bfe19767fbb5c808cad10ed59f913e87ddf209a80ab66c9e6dd0aedcecf23cebad759d68a4ba0915fe6ab0558402459e2ef2a09a1ff1edf2bc968c2704e07dbd9dddaf1ebdfc1440fc0603b960f266da332c3c39841ba3786e7839af699de898ab0aa368912eeee72704ee4a8f0f4ab74bb60511161a2ca417f02c1c9886e4ebf81d253e5316bac9984203f85361f876a3c5dcb267e21cb94585aad967f09ab919efb5f0c18a4c3d066417754a838c30f9c84b8080b99cdcd6eeffe0f125d5fc5ccb10024ee18cbeafeecbee41283a3c86298195c25f36103fdb16e5118fee8f4e99b293577d6c770a6d8c390f9e838710bea897333b7ccfde612d55a4189943cd4259109462d7ae2cf8ab6d2e6668fd48792d3bb1e3be364c7c81614b95585d591c7e2094fb1b6ee2ee32eaf2369eb2dd7ce2bce6563ac3ca9a2e94943dae22647d285835dada1f06adb7a8772472b6c9e73207e7b420fbc78575e7c98559ac486129f64376a088791cd20b5c39ed17b11651222a8db5bc9dd134b0428e482e3af0422ddd037f1bfc3663269e2a8d90227061e1b4d4d840b05272ad2c53aaa14a0c2e1cb6640d5a08ebfd77af1ce68e8601b403c1bfb338ac3468cf460459c2e2ba1ba143e65edd3b64c1dd3a4e3a1a20829cad9403b4e8a8824e080fce52368f944514eb30db1ddea4a379697833d010af76a7a9deb9f11fde3b52e03638749ff53f04b36704932b6279a9027c5a44b87bb52154c2800abb10154337dcdba27be6dcee59b781c9374c3e64825534ee69aa39c121557219071db4358a1cf5513cd2157f3b1c2dfc6bee8d6262e4456901e81de5be2bc98de40800212df33e2298515f3dcdafccebccd66b0578f80d379e420934acb0151e5927f9cefd89159a9d5e8f05dc3393b4174e26c8b2881c6720eb8a622fbb063ba2786d68170bd81b7dc18f2fedc925d446c40bd3af832dddcd8645a22869ec7bc2428b571597a58189396a4532b0a6ea4d9a7ef7ce90cb9588e7db21cb609a66dd67715a542f3a222745c0efb44ecd5d2abc8aa169f835060c6c46ad0707ea2093898e0b6a04215dcfc6a04821f60bb065275375d66c77223ceb85bfce5043db722b436aded868b71fc87e0402e1812ff986fe567b621951cc0d8caf3d9fd7c1a44e314ff460d483782c4d813e8dcc7c769356c3d40d94060fd57948aaa7ebfc5d8944317afc3812bb5af8a24895c9e6869f652e9786e0769bc59d01117bd619685e37a6aad14566440c72ae3fb81ef80c9c02ec058c3bf317801b655c16f75e5e45e2caf650ba70d44933c04cf9da0cd95a20d48c89c29202afc966d40ec4fd69bcbbc569092f763ef77c8928d8e25588944dd79102bf66a7ea5b84c2e86d34bb724ab17616bef685db15a8353a7c86ad309e0f74d1bf5ca2992775c49c9f7daf9d69a6f504998f022a88fd110451f30c91012d184082b75f73ca61f7e53eb7e4cdf6a98a303f59ec588cc9a61d2d7f3043f88db918e28949ac661207c7ca29b2378efe24cda8a8f6012277e018ada67647c79ac83840e522fec3e76fe88edc5ab1e6370a0c72340b4eea2cbfaf3b075ec73246add540e08e608c5d74c8a084f69be29d0b63296c6d78b3f6c8a3451d6596c2b9fbdfcfbf008dcd93f3a1d11615c0d18d08faed78c52d0f46817a03534cdba845bf4bc9bc68f22ef1ec0687ce14d98b5ec7caac5af351ed8716a0ea91c3c4c234bd7630bdc8482c29394df73b7d82534b60b69d5cb526e037b866ac8482e24afd49828defe2103d45633b662f0f0aa8a51b5cfd3d1e21b9054efa60e641ab71192a22e2670557dcb156fd70243587e816c4cdd21bf0b9c8fd12aecf7c5263b5c54a45c5b841b78a483a30840ad6b19e4cacf34b19df1a8c2a60c514e4e63cd8f8f659d3a5053cbe298fda39413ff453219ef98600abd346f5ed7ba8e403be27cc93712ebf1f80fea88cf38abd22a232012f168c50b90c749f3ef5f89a0bf4f25e0f14c4f569ea27f1869064f96b96d6b72ac05347eb4e1f0c21b01e47b96c84a59aad00fd4e3e75a9fe6d6660ec911d2341f75e751751946787b5fd0e5d7a0812e5a83148208062ff02fcba42f00b6b7d1602dc84ca3ae65be15835f3d7706e68c7aca9a4ecc09c4c5ebfc4faca65bd315df403622915d07a3f3d483f892fdf353eddfeffdce7989d1413f7caa2fd70da124999215e81d0f58a495308b8736f891984247a065c3e9be58fd37afead252bdbf94c4b83676fbf82b6c7214b64c1132e6c5fedb3068050b6f042c4824fd3ce0d9fd8d5df9e39cf2dd1dd45d231116b7221b0d57476354edb1c339da20a57b1fcd2db1b07ac5a94c5aa62cb012b2ffb1a11afd60d2f1e7c67092fbac19af3172ba7bdbaf68c62181a2446db3123319eef6bb58646af358ef4b09c79099f939ea20cd10c3c386b25593974c5282ee7cb0892e7dce5a3bf1930283af39a301703861f049ec0d4772b92580a1fe9b2c5575cd5b1ed1287dee9fdb27e5bb4a90d6753b5157ed1ec171db6621311d672bb6c8d17b06c545817bc80c6fb5d19047e96ffeb38e251ba6ebf3dfea5bb8f75223e4052f761798aab1a438184c08b1bbec04fb6d0d9a0f693f6f28204566d39aa6ebe69d92e6bc0acc2fae8d5c62be419dc702b996e1f6c0bdf5b17e6846ff368fdf0e006ee3dac4f90ccadf602cdca47e629444db18f4d7357ed9a9895f167cf9207b29b1cc281e484d559b5498c9f67dcee552b8ee099497f417bfe15e79a83e960ff5cc2f7a4b5e1e2437576cf9454d098757c61598da5230a9d949027315c371fd0bbe09d3ad0e818e3f6a7676a2006d194f390e95a42ee1f38c246e88c9e26284b047e88e8d5fdbbf74165b6b079e027b01dad2b2193f09a1c0a27b8494e980464a253bd4796058b2cc30fa2e3960d63db8cd7cdf8cf9f627dc558d71117544f31236972b4b971abe84195c6eae238312cd7c19c6fd69c6279855c40f974867ce96bbdaa3d32e2a6c78ccecc1a7af862b1cc02443c4aebf043285ee60b1948ba6f1b7655b8092fe342e28971e0dd7b479a1165600ea1c9da1fa6be863d43616a4dce540dcdd968e7c11587331683ab9b440e1e742231673b9c8af0ae4db286493e42de8570ea007f84307065bb68818949d52c512173e3c3bf9947a7e0ffc702494af0d79edc803f4e3b469a7ee35919eaebb38ce7cfa6927bbef7c287554a18816af0bff7c6a9f74ee383e1dba3b9cdd605fb0aeaf0e021f2d28288e85f695bdd36645c60b088a1268503b75be7e0a4e570ee8c286cef4f0fe1fb2e8aae9e904bb8627b7d020fc7ad616f98fe24ad7353dff44de9e05bc9b6082b588c423f1df309fa496b49d45ed0c549f54e60d84b82683d99b15af944c9d953317786f800232e106a5be8cba2fba0315364921923e3517d30b467371e990e61fea41f2dde4efb8ae01b28e55b6ed031da350d93184b276f4aa1b4dbfaec2772c0dd853205747269ef20e53c501152b6d4c81a32a1d2ac524a914045285608a073ceb96971802802c890c23081c9c25701efc7291b4ffada3e5af6ca1ad7d42cae6a10eb0ba507be45716c94f047b53b873a6443af44004b8a09770825e554db2e75c514b92aa8fdafb0cce33397799216ddc8e7ded83e9fe1f183cb2645c6ac351392f7c160c60e196d0085d335a749554e91702393dc91bcce6b213889f449fc27144ce877c258dd13e79c530b1bceebd27c69ef2b90252bed6bd3e069088d9343e6753cedd615752fc6d61617c98c36d774eac38cfaec0929fb5b39684477427ac8e14a574cc431fa36132f602ec55ce0ec504ab60097eab6a79b6ee0cb212b5ecb7a8c7408d19c7d846b9377bae38d3bd5f7f3c186c6962a0ce57f786048b1fe00d491cd58f20a43b133880aef8a914149f0f392e588117a6aac403878489455513176e9a4089807b3de8b306f17433205bc3f19c38bd076e8a8317b38637949b0ad71e22285bc7419e69c6655ba8686f74e5e8e470a1f139490a2ccef117316a4cb3129c9163ece71c309519c612b286cacd2ad2452e5e903a301822d69d0ba98ba019e949c99836852602c1dd6259fe0d222ee72cd43ddf4199f258da4b74b3bd847259fec95dc661d0a757cbfd97b348b5aaddc623de21f05d60802e806d57615268bff76691b29b3089ad7ed6567183c351a4b8abe1245ffc9379b87519f1ffa5344a04a03249b066c342ab07f9c2706fce4b1a292e776d9256ccafc5b0433d61b11e1e1228ee5bfd11fa9c3ad540734b7f34a99b6718adfcc967cde3eb06f183fff1dc5a33a5fc60b206a528d91e8798cae48eeaa5cd3aebaa2b32ff4d8741b20b173a2acc5a338b984221d2b937c62802e346d170cc9324ca516c9894fe078ce86811f9ad144165a6523f1014a4fc01b2bf4076125889c9aed8e4adb3c037841da5b69c4527df3fac6cdb494450e37fe01da2e96008b9e37c4f73c4bfaa49a0ccbdc128e10c137b108c7a47270331aa075b571ee19979c52d111b1d36c62f5ec20bbe5df4e67f24b8d5168369855a9a9031dac34d43c624cfce4c41479b400a4077328ae95be990ad4f68759de08ff25f379cc376f088b6f64b1be04560163f4d30a26d259cd9cf0fee8f1d3dfff0763060dfb0b1dea1f282586fc4e7635519c04c77c83ec94ba4ffb5bc9bf1b00b9ce3087088c4ac5bea6c64195a1491c74ed857fe56c3ec877167586306bcac067dcb77819ccb9ab22b119cce41b3c681e3fd9104eb0d830514d2c3fa81ac330e40bb40e928a057d944ed2adb856528bb6a9bf249c1f24f413ccf9f4d17ce0f8429205663be0bcfabf7f332a46fe54e2701a109796a2aff727f49d8f8db34339031843c5fb2612a163f4902a3abb274b6434799be4405fdc90fdff424cda40194593007391ced2f1797468f73222cf4267384d9fa72f9d26ac8e5ad31a53f55bd6ff16d4c706a2bf5dce9879adc295a64014b5e00f989d7c12f0dc248b2938e15c11c1453818e16fa39503d6ffd749e51583527c770624d0f2b9f012fc5366a26a7be79f758ed9ec5de1db72bd58df15640e6e8a8a3d17513"}) ioctl$BTRFS_IOC_TREE_SEARCH(r3, 0xd0009411, &(0x7f0000001a40)={{r6, 0xb37a, 0x9, 0x4, 0x600000000000000, 0x0, 0x5, 0x9, 0x8, 0xd7, 0x5, 0x6, 0x1, 0x3ff, 0x5}}) sendmmsg$inet6(r0, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)}], 0x1}}], 0x1, 0x0) 1.586771754s ago: executing program 4 (id=9652): syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="1f24f5e2e5b1ce3e26b4"], 0xa) 1.582286357s ago: executing program 4 (id=9653): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={0x24, r1, 0x331, 0x70bd2a, 0xf000, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}}, 0x0) 1.528004922s ago: executing program 4 (id=9654): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x2}, [@NFT_MSG_NEWSET={0x118, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2c}, @NFTA_SET_DESC={0xd4, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_DESC_CONCAT={0xc8, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xa}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x764f15e2}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0xfffffffffffffdeb}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x28}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xcb}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}]}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa4}]}], {0x14, 0x10}}, 0x140}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x2) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$kcm(0x2, 0x5, 0x84) ioctl$SIOCSIFHWADDR(r3, 0x8931, &(0x7f0000000000)={'team0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x42}}) sendmsg$nl_xfrm(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000780)=@newsa={0x1b4, 0x10, 0x1, 0x0, 0x0, {{@in=@empty, @in=@multicast2, 0x0, 0x0, 0x820, 0x4, 0x0, 0x20, 0x80, 0xc}, {@in=@multicast1, 0x0, 0x33}, @in=@multicast2, {0x3ff, 0x0, 0x8, 0x0, 0xffffffff, 0x2, 0x0, 0x8000000}, {0xfffffffffffffffd, 0x0, 0x0, 0x4}, {0x0, 0x1, 0xfffffffc}, 0x0, 0x0, 0xa, 0x4, 0x0, 0x40}, [@algo_auth={0xc1, 0x1, {{'sha256\x00'}, 0x3c8, "3ba7455bf6ba995a773e1ff16737dda38b18b4d6f6ce41090000008bdc51055eaac0ef49cd6d29f30289cb48997dd726aa0f0a9649e86c679a829e5d6e7dd49b20018000000000000000c43271fcb9f7cb888bff11c2ad1d6a690478f2241a27c1f6a3a627bc014b8b3b24e48f2657d774cd30dc9a334444f7"}}]}, 0x1b4}, 0x1, 0x0, 0x0, 0x24040021}, 0x0) r4 = dup(r1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'macsec0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="6800000010000104fcffffff8000000000000000", @ANYRES32=0x0, @ANYBLOB="0315000000000000400012800c0001006d6163766c616e00300002801c0005800a000400aaaaaaaaaaaa00000a000400aaaaaaaaaaaa00000800030003000000080001001000000008000500", @ANYRES32=r5, @ANYBLOB="858abe8b3bf57b741127b23face4780ed4941954298b"], 0x68}, 0x1, 0x0, 0x0, 0x4001}, 0x880) 1.445885723s ago: executing program 4 (id=9655): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000440)={{0xfffe, 0x5, 0x2, 0x5}, 'syz0\x00', 0x1c}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x12) ioctl$UI_SET_SNDBIT(r0, 0x4004556a, 0x2) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0x114, 0x2e, 0x1, 0x0, 0x0, "", [@nested={0x104, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64=0x8}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@loopback={0x100000000000000}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f8cd1"]}]}, 0x114}], 0x1, 0x0, 0x0, 0xfffffffd}, 0x0) (fail_nth: 7) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) read(r0, 0x0, 0x0) ioctl$KDMKTONE(r2, 0x4b30, 0x8000000000000001) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={{0x14}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x28}}, 0x0) 1.367476484s ago: executing program 4 (id=9656): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) openat(0xffffffffffffff9c, 0x0, 0x0, 0x1) acct(&(0x7f0000000000)='./file0/file0\x00') close_range(r0, 0xffffffffffffffff, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14, 0xff80}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}}], {0x14, 0x10}}, 0x3c}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x74, 0x0, 0x1, 0x70bd25, 0x25dfdbfe, {0x6, 0x0, 0x900}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast2}, @NLBL_UNLABEL_A_SECCTX={0x28, 0x7, 'system_u:object_r:clock_device_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @loopback}]}, 0x74}, 0x2, 0x34005, 0x0, 0x400c800}, 0x0) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000340)={0x14, r4, 0x8d61ddcfedb48df}, 0x14}}, 0x0) syz_usb_connect$hid(0x4, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0xff, 0x1b96, 0x13, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0xc, 0x40, 0x3, [{{0x9, 0x4, 0x0, 0x2, 0x1, 0x3, 0x1, 0x2, 0x2, {0x9, 0x21, 0x3, 0x2, 0x1, {0x22, 0x601}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x1, 0xe, 0x5}}, [{{0x9, 0x5, 0x2, 0x3, 0x8, 0x6, 0x7, 0xf}}]}}}]}}]}}, &(0x7f0000000440)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x250, 0x9c, 0xd, 0xe2, 0xff, 0x8}, 0x30, &(0x7f0000000080)={0x5, 0xf, 0x30, 0x3, [@ssp_cap={0x10, 0x10, 0xa, 0x9, 0x1, 0x70a1, 0xf, 0xa, [0xc0c0]}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0x2, 0xa, 0x1}, @ss_container_id={0x14, 0x10, 0x4, 0x1a, "ca7b6b3aef974737eea804498256779d"}]}, 0x5, [{0xa0, &(0x7f00000000c0)=ANY=[@ANYBLOB="a0038b7d0505088a08e83172533b7e76743d59fd59af6c36630c1bd3c65ab3c27e3c8f59a9f2d349b62729a31a5b5639064f95a55d3069fbc2832afb73e4499cf3492f0a1c54274b31bc708d26b818b8043ff9010000000000000001945df4d6e3acbfaebd8c925aeaf28d728348993fec7633cb361eef880908a1143bbfdca33195da04156cc9b717f9db70a20691b4a69d1e7232a94269fce7e4240e3c3175"]}, {0xd3, &(0x7f00000001c0)=@string={0xd3, 0x3, "0ee51fd0cd27bd34baa07c25a062990e34b4e6dfff0e0798cd4a1a05bd3bd0f295dc4702156cf6fb8e7c81ddce25f032f4b2024fe26e957e27e1110198f48ffd13e55535b4a17c07ddcfc1888cfb902d16fb623dbc52b7fd1e4d6fc77138df0c55f1525ac6270d6a3568340d47478534bf4737021083b11f7b0be558f2fce67b4496318eebcd38c33cd6fc5bc242513517a02d126c9e105d41c482dcfc8b05cb6456b58bf475c586cc428bb5da01b33c9812d4c24d6d162f23f4f35a04cd752cfdbf8ac5e4fa319cb732e048091985ec72"}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x814}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x2c2f}}, {0xda, &(0x7f0000000340)=@string={0xda, 0x3, "d1969bdc312a4c3a6973b6dfc22a437155430555adf13071a83c6490e9fe3d794c49e2e8ba553d44b9dedebef7720b13cbc718cc2eeb1bceeb38b480c355d76e6bcecb851892558e0871b6faefebaf77472af7e78e37a36cd6f9aad6b1e4f5fb061e8bdc3304a8e14a69b5bdb18cea5c9e3a709e122b343714dfb51432c346d1555d75269f031f08d9aaa0f934be38721c80a90651f14feca6586040b32295cbbc99dd514cc0698bc87bb31a233479add0aed90b039260c3d0287f62405807b945221abcf3bfc152ae996930b301262499342397e0b8c08c"}}]}) syz_usb_connect(0x5, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000062a10b40450c1010fce60102030109021b00096fac12e94a2b1d15010000000009043200019740a400"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x89901) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r5, 0x0, 0x0) 1.232339042s ago: executing program 6 (id=9657): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@delchain={0x24, 0x5f, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0x5, 0x2}, {0x1, 0xe}}}, 0x24}}, 0x0) (fail_nth: 4) 1.067891971s ago: executing program 6 (id=9658): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xd) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x0, 0x3c00, 0x3, 0x0, 0x0, 0x0}, &(0x7f0000000100), &(0x7f0000000140)) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) readv(r4, &(0x7f0000000200)=[{&(0x7f0000003140)=""/4096, 0x8}], 0xe) ppoll(&(0x7f00000000c0)=[{r3, 0x8000}], 0x1, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="440000001000090425bd70000000000000000000", @ANYRES32=r5, @ANYBLOB="000000000000000024001280110001006272696467655f736c617665000000000c000580050001001000"], 0x44}}, 0x0) sendmsg$IPSET_CMD_RENAME(0xffffffffffffffff, &(0x7f0000002ac0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000002a80)={&(0x7f0000002a00)={0x74, 0x5, 0x6, 0x622829784f8e4b1e, 0x0, 0x0, {0x0, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}]}, 0x74}}, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) syz_open_dev$video4linux(&(0x7f0000000080), 0x10000, 0x0) 968.399317ms ago: executing program 6 (id=9659): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x6, 0x0, 0x7fff0006}]}) mkdir(0x0, 0x8) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=@newtaction={0xac, 0x30, 0x1, 0x70bd2b, 0x0, {}, [{0x98, 0x1, [@m_ct={0x4c, 0x2, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7b, 0x8, 0x0, 0xf}}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @remote}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x5, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) (async) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f00000010c0)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}}, 0x0, 0x0, 0x1b, 0x0, "61a1ed8439cde8054f2ada6fcd5fe76b933e8bb0ac60081e33dffa150835f7519d5f73b4f5d80eb4881a5b98cb9fb96d225d602392f816d0bdcc09b5063087117502d8c24f1fe97f61fd27a06d6a38a7"}, 0xd8) fcntl$getownex(r2, 0x10, &(0x7f0000000180)) (async) sendto$inet6(r3, 0x0, 0x0, 0x20000841, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @empty}, 0x1c) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x84, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000500)={0x0, @in6={{0xa, 0x4e20, 0x8, @private2={0xfc, 0x2, '\x00', 0x1}, 0x9}}, 0xa, 0xb130, 0x9f, 0xc, 0x0, 0x200, 0xc}, 0x9c) (async) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c00000002060104db406e3e0004000200000000100003006269746d61703a706f72740005000400000000000900020073797a32000000000500050000006c00050001000600000024000780080008400000137906000440fffff0000600054000000000080006"], 0x6c}}, 0x0) (async) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) mount(&(0x7f00000000c0)=@sr0, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040)='btrfs\x00', 0x208000, 0x0) (async) add_key$fscrypt_v1(&(0x7f0000000040), 0x0, &(0x7f00000000c0)={0xfffffe00, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x48, 0xffffffffffffffff) (async) add_key$fscrypt_v1(&(0x7f0000000400), &(0x7f0000000440)={'fscrypt:', @desc3}, &(0x7f0000000480)={0x0, "6035ae1e0fe721441705322225930e6c1e3e2a51a92fd796bc34d7cf6e0236805b4377f7ab1a9b01c103a4c6a7ef54e6763fd7264c39ea00c508ba6062696138"}, 0x48, 0xfffffffffffffffe) (async) write$cgroup_int(r5, 0x0, 0x0) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0105500, 0x0) (async) rmdir(&(0x7f00000001c0)='./cgroup/../file0\x00') 778.019992ms ago: executing program 6 (id=9660): setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$rxrpc(0x21, 0x2, 0xa) syz_emit_vhci(&(0x7f0000000000)=ANY=[], 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r5 = fanotify_init(0xf00, 0x0) fanotify_mark(r5, 0x105, 0x5000003a, r4, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x0) open$dir(0x0, 0x700, 0x0) 268.510388ms ago: executing program 2 (id=9661): r0 = socket(0x2b, 0x80801, 0x1) syz_open_dev$evdev(&(0x7f0000000040), 0x7, 0x4000) connect$inet6(r0, &(0x7f0000000180)={0xa, 0xfffe, 0x5, @empty, 0x3}, 0x1c) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) 266.764694ms ago: executing program 2 (id=9662): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x20000840) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x14) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={0xffffffffffffffff, 0x58, &(0x7f0000000400)}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000001980)={0x2, 0x1, @loopback}, 0x10) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[], &(0x7f00000000c0)='GPL\x00'}, 0x94) fstatat64(0xffffff9c, 0x0, 0x0, 0x1000) ioctl$UI_SET_ABSBIT(r3, 0x40045567, 0x0) ioctl$UI_ABS_SETUP(r3, 0x401c5504, &(0x7f00000002c0)={0x3f}) ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x3) write$uinput_user_dev(r3, &(0x7f0000001740)={'syz1\x00', {}, 0x3f00, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7fffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffffffff, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfaea], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x45c) ioctl$UI_DEV_CREATE(r3, 0x5501) sendmsg$key(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x110}}, 0x5) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) 0s ago: executing program 4 (id=9663): mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) (async) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="f800000016008502000000000000000020010000000000000000000000000002a600000200"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb0000000032"], 0xf8}}, 0x0) (async, rerun: 32) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[], 0x134}}, 0x0) (rerun: 32) syz_emit_ethernet(0xd2, &(0x7f0000000140)={@local, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "2a1c99", 0x9c, 0x88, 0x0, @empty, @mcast2, {[], {0x0, 0x0, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "b0575c7b4df2bddabab59df4a56afe54ba6a5d5d0d170fca692c777338468608", "29accf2af44c0e1aaaaf532417a91cadd9e65f82310f80cf64f46c761191fda0a250498ce1b5c603debf9e05d8de03dc", "3d73abde0da6c68c8d2dab5346224f905b3b904310b3bd00975f0a9f", {"6cde9c5018586db672628c1415233979", "ba3df3d8a8490bce9cafc2ab6acde477"}}}}}}}}, 0x0) r1 = syz_open_dev$admmidi(&(0x7f00000043c0), 0xc000, 0x800) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000080)=@e={0xff, 0xb}) ppoll(&(0x7f0000004400)=[{r1, 0x4}], 0x1, &(0x7f0000004440), 0x0, 0x0) 0s ago: executing program 4 (id=9664): r0 = syz_open_dev$loop(&(0x7f0000000100), 0x8, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x100006, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r4, 0x8901, &(0x7f0000000040)) sendmsg$inet(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)='h', 0x1}], 0x1}, 0x4815) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000140)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_SETCRTC(r2, 0xc06864a2, &(0x7f00000002c0)={0x0, 0x0, r5, 0x0, 0x80, 0x5, 0x9, 0x0, {0xa, 0xff, 0x1c, 0x7, 0x7, 0x401, 0x100, 0xa, 0x0, 0x53, 0x8001, 0x7e9, 0x401, 0x5, "cb630dab3a0338057401a192419598961f50dc45c87d55b42a28b8f01c0e0e7a"}}) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f0000000080)={0x0, 0x0, r5}) r6 = syz_genetlink_get_family_id$gtp(&(0x7f000000bf40), 0xffffffffffffffff) sendmsg$GTP_CMD_ECHOREQ(r1, &(0x7f000000c040)={0x0, 0x0, &(0x7f000000c000)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="010028bd70000700000003000000fd5f03cf4e5266ef3a39c3520771f659252bae4e962a62754684c49ba2bd5dff29b56ec7e272806f254c629f30a71d79621b1efb0b4114c367febd0043298e24291b744b35e65213836c944b84ddfdc8a8faf49e5e83f5522b1ffa2ee49c37e7440232e17c4b276f2544e245563738f09125cacd253ffeae89310214650af23a8da9b6807b270aed0b431d9e4c4325abce4863b313d91747c8cd20f76032ce7878be883a185f180df06fed10"], 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x8) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r7, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r7, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) r8 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r8, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) ioctl$int_in(r8, 0x5452, &(0x7f0000000340)=0x7) connect$inet(r8, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r7) kernel console output (not intermixed with test programs): 74][ T3506] ? kasan_save_track+0x14/0x30 [ 1454.128790][ T3506] ? kasan_save_free_info+0x3b/0x60 [ 1454.128804][ T3506] ? __kasan_slab_free+0x51/0x70 [ 1454.128821][ T3506] ? kfree+0x2b4/0x4d0 [ 1454.128835][ T3506] ? tomoyo_path_number_perm+0x470/0x580 [ 1454.128849][ T3506] ? security_file_ioctl_compat+0x9b/0x240 [ 1454.128864][ T3506] ? __ia32_compat_sys_ioctl+0xc3/0x370 [ 1454.128878][ T3506] ? __do_fast_syscall_32+0x7c/0x3a0 [ 1454.128895][ T3506] ? do_fast_syscall_32+0x32/0x80 [ 1454.128918][ T3506] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1454.128935][ T3506] ? __pfx_lo_ioctl+0x10/0x10 [ 1454.128964][ T3506] ? kasan_quarantine_put+0x10a/0x240 [ 1454.128982][ T3506] ? lockdep_hardirqs_on+0x7c/0x110 [ 1454.129001][ T3506] ? find_held_lock+0x2b/0x80 [ 1454.129013][ T3506] ? tomoyo_path_number_perm+0x295/0x580 [ 1454.129029][ T3506] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1454.129067][ T3506] lo_compat_ioctl+0xb9/0x170 [ 1454.129082][ T3506] ? __pfx_lo_compat_ioctl+0x10/0x10 [ 1454.129096][ T3506] compat_blkdev_ioctl+0x2eb/0x7a0 [ 1454.129113][ T3506] ? __pfx_compat_blkdev_ioctl+0x10/0x10 [ 1454.129126][ T3506] ? fput+0x70/0xf0 [ 1454.129139][ T3506] ? __pfx_compat_blkdev_ioctl+0x10/0x10 [ 1454.129154][ T3506] __ia32_compat_sys_ioctl+0x23f/0x370 [ 1454.129170][ T3506] __do_fast_syscall_32+0x7c/0x3a0 [ 1454.129190][ T3506] do_fast_syscall_32+0x32/0x80 [ 1454.129208][ T3506] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1454.129223][ T3506] RIP: 0023:0xf706e579 [ 1454.129233][ T3506] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1454.129245][ T3506] RSP: 002b:00000000f505e55c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 1454.129257][ T3506] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000004c0a [ 1454.129264][ T3506] RDX: 00000000800005c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1454.129271][ T3506] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1454.129290][ T3506] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1454.129298][ T3506] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1454.129314][ T3506] [ 1456.026042][ T3544] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9099'. [ 1456.112756][ T40] kauditd_printk_skb: 19 callbacks suppressed [ 1456.112838][ T40] audit: type=1326 audit(8252.034:1837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3545 comm="syz.5.9101" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e579 code=0x7ffc0000 [ 1456.649143][ T40] audit: type=1326 audit(8252.034:1838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3545 comm="syz.5.9101" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e579 code=0x7ffc0000 [ 1456.656966][ T40] audit: type=1326 audit(8252.034:1839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3545 comm="syz.5.9101" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf706e579 code=0x7ffc0000 [ 1456.665586][ T40] audit: type=1326 audit(8252.044:1840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3545 comm="syz.5.9101" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e579 code=0x7ffc0000 [ 1456.672746][ T40] audit: type=1326 audit(8252.044:1841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3545 comm="syz.5.9101" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e579 code=0x7ffc0000 [ 1456.679296][ T40] audit: type=1326 audit(8252.044:1842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3545 comm="syz.5.9101" exe="/syz-executor" sig=0 arch=40000003 syscall=361 compat=1 ip=0xf706e579 code=0x7ffc0000 [ 1456.685602][ T40] audit: type=1326 audit(8252.044:1843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3545 comm="syz.5.9101" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e579 code=0x7ffc0000 [ 1456.692951][ T40] audit: type=1326 audit(8252.044:1844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3545 comm="syz.5.9101" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e579 code=0x7ffc0000 [ 1456.700003][ T40] audit: type=1326 audit(8252.044:1845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3545 comm="syz.5.9101" exe="/syz-executor" sig=0 arch=40000003 syscall=337 compat=1 ip=0xf706e579 code=0x7ffc0000 [ 1456.707761][ T40] audit: type=1326 audit(8252.044:1846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3545 comm="syz.5.9101" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e579 code=0x7ffc0000 [ 1456.914704][ T3563] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9102'. [ 1456.940028][ T3563] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 1456.950531][ T3563] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1457.126677][ T3563] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 1457.136042][ T3563] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1457.236227][ T3563] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 1457.256286][ T3563] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1457.346208][ T3566] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9103'. [ 1457.355757][ T3566] netlink: 'syz.4.9103': attribute type 5 has an invalid length. [ 1457.364482][ T3566] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9103'. [ 1457.464200][ T3563] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 1457.468202][ T3563] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1457.577128][ T3563] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 1457.580190][ T3563] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 1457.599307][ T3563] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 1457.602222][ T3563] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 1457.645207][ T3563] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 1457.650632][ T3563] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 1457.672967][ T3563] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 1457.675914][ T3563] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 1459.202466][ T3592] macvlan0: entered promiscuous mode [ 1459.206282][ T3592] netlink: 'syz.5.9112': attribute type 1 has an invalid length. [ 1459.209833][ T3592] netlink: 'syz.5.9112': attribute type 2 has an invalid length. [ 1459.458006][T14446] usb 10-1: new high-speed USB device number 37 using dummy_hcd [ 1459.609652][T14446] usb 10-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1459.612540][T14446] usb 10-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1459.615736][T14446] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1459.619503][T14446] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 1459.624703][T14446] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 1459.629921][T14446] usb 10-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1459.633141][T14446] usb 10-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1459.635934][T14446] usb 10-1: Product: syz [ 1459.637500][T14446] usb 10-1: Manufacturer: syz [ 1459.645055][T14446] cdc_wdm 10-1:1.0: skipping garbage [ 1459.647007][T14446] cdc_wdm 10-1:1.0: skipping garbage [ 1459.649542][T14446] cdc_wdm 10-1:1.0: cdc-wdm0: USB WDM device [ 1459.651591][T14446] cdc_wdm 10-1:1.0: Unknown control protocol [ 1459.848789][T14446] usb 10-1: USB disconnect, device number 37 [ 1459.892882][ T3606] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9114'. [ 1459.919216][ T3601] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 1459.982641][ T3601] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 1460.034839][ T3601] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 1460.123593][ T3601] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 1460.255257][ T3601] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 1460.293100][ T3601] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 1460.386801][ T3601] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 1460.419890][ T3616] program syz.5.9117 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1460.424171][ T3601] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 1461.003999][ T3624] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9118'. [ 1461.168213][ T3626] program syz.2.9119 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1461.419304][ T3636] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9122'. [ 1461.432813][ T3636] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 1461.534445][ T3636] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 1461.629493][ T3636] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 1461.768892][ T3636] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 1461.885674][ T3636] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 1461.898981][ T3636] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 1461.911394][ T3636] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 1461.946430][ T3636] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 1462.583179][ T3655] netlink: 80 bytes leftover after parsing attributes in process `syz.3.9125'. [ 1462.586582][ T3655] netlink: 80 bytes leftover after parsing attributes in process `syz.3.9125'. [ 1464.564418][ T3685] program syz.2.9134 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1464.697845][ T3690] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9131'. [ 1464.703713][ T3690] netlink: 'syz.4.9131': attribute type 5 has an invalid length. [ 1464.711655][ T3690] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9131'. [ 1465.812598][ T40] kauditd_printk_skb: 629 callbacks suppressed [ 1465.812783][ T40] audit: type=1326 audit(8261.734:2476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3699 comm="syz.2.9136" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703e579 code=0x7ffc0000 [ 1465.835227][ T40] audit: type=1326 audit(8261.734:2477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3699 comm="syz.2.9136" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703e579 code=0x7ffc0000 [ 1465.847403][ T40] audit: type=1326 audit(8261.744:2478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3699 comm="syz.2.9136" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf703e579 code=0x7ffc0000 [ 1465.863701][ T40] audit: type=1326 audit(8261.744:2479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3699 comm="syz.2.9136" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703e579 code=0x7ffc0000 [ 1465.910600][ T40] audit: type=1326 audit(8261.744:2480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3699 comm="syz.2.9136" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703e579 code=0x7ffc0000 [ 1465.946441][ T40] audit: type=1326 audit(8261.754:2481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3699 comm="syz.2.9136" exe="/syz-executor" sig=0 arch=40000003 syscall=361 compat=1 ip=0xf703e579 code=0x7ffc0000 [ 1465.963811][ T40] audit: type=1326 audit(8261.754:2482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3699 comm="syz.2.9136" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703e579 code=0x7ffc0000 [ 1465.983270][ T40] audit: type=1326 audit(8261.754:2483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3699 comm="syz.2.9136" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703e579 code=0x7ffc0000 [ 1466.001196][ T40] audit: type=1326 audit(8261.754:2484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3699 comm="syz.2.9136" exe="/syz-executor" sig=0 arch=40000003 syscall=337 compat=1 ip=0xf703e579 code=0x7ffc0000 [ 1466.008606][ T40] audit: type=1326 audit(8261.754:2485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3699 comm="syz.2.9136" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703e579 code=0x7ffc0000 [ 1466.063098][ T3704] batman_adv: batadv0: Adding interface: ip6gretap1 [ 1466.065322][ T3704] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1466.073186][ T3704] batman_adv: batadv0: Not using interface ip6gretap1 (retrying later): interface not active [ 1466.570036][ T3711] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1466.589074][ T3711] 9p: Unknown Cache mode or invalid value fscach [ 1466.596980][ T3713] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9140'. [ 1467.540353][ T3724] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9142'. [ 1467.625488][ T3724] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 1467.636880][ T3724] netdevsim netdevsim4 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1467.781007][ T3724] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 1467.784588][ T3724] netdevsim netdevsim4 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1467.923855][ T3724] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 1467.929043][ T3724] netdevsim netdevsim4 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1468.004260][ T3724] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 1468.007965][ T3724] netdevsim netdevsim4 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1468.134351][ T3724] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 1468.137112][ T3724] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 1468.144771][ T3724] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 1468.147787][ T3724] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 1468.157197][ T3724] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 1468.163990][ T3724] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 1468.172952][ T3724] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 1468.175673][ T3724] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 1468.687297][ T3732] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9144'. [ 1468.690932][ T3732] netlink: 'syz.5.9144': attribute type 5 has an invalid length. [ 1468.693339][ T3732] netlink: 20 bytes leftover after parsing attributes in process `syz.5.9144'. [ 1469.412183][ T3741] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9145'. [ 1469.415050][ T3741] netlink: 'syz.2.9145': attribute type 5 has an invalid length. [ 1469.417737][ T3741] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9145'. [ 1469.440603][ T3741] geneve5: entered promiscuous mode [ 1469.442875][ T3741] geneve5: entered allmulticast mode [ 1470.165729][ T3749] program syz.2.9149 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1470.187611][ T3744] Bluetooth: MGMT ver 1.23 [ 1470.260168][ T3751] netlink: 80 bytes leftover after parsing attributes in process `syz.5.9151'. [ 1470.263469][ T3751] netlink: 80 bytes leftover after parsing attributes in process `syz.5.9151'. [ 1471.361790][ T3776] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9155'. [ 1471.367233][ T3776] openvswitch: netlink: Missing key (keys=40, expected=80) [ 1472.003407][ T3794] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9159'. [ 1472.043687][ T3795] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1472.047417][ T3795] 9p: Unknown Cache mode or invalid value fscach [ 1472.179817][ T3793] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9157'. [ 1472.182958][ T3793] netlink: 'syz.3.9157': attribute type 5 has an invalid length. [ 1472.185666][ T3793] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9157'. [ 1472.908438][ T3801] netlink: 80 bytes leftover after parsing attributes in process `syz.3.9162'. [ 1472.916588][ T3801] netlink: 80 bytes leftover after parsing attributes in process `syz.3.9162'. [ 1473.019448][ T3805] program syz.4.9163 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1473.056592][ T3806] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9161'. [ 1473.061110][ T3806] netlink: 'syz.5.9161': attribute type 5 has an invalid length. [ 1473.064809][ T3806] netlink: 28 bytes leftover after parsing attributes in process `syz.5.9161'. [ 1474.397837][ T3820] lo speed is unknown, defaulting to 1000 [ 1475.414782][ T3842] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9170'. [ 1475.424384][ T3842] netlink: 'syz.5.9170': attribute type 5 has an invalid length. [ 1475.427955][ T3842] netlink: 28 bytes leftover after parsing attributes in process `syz.5.9170'. [ 1475.628244][ T3847] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9172'. [ 1475.692919][ T3853] openvswitch: netlink: Missing key (keys=40, expected=80) [ 1475.746123][ T3847] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 1475.750336][ T3847] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1476.015137][ T3847] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 1476.025237][ T3847] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1476.028836][ T3859] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 1476.032000][ T3859] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1476.036908][ T3859] vhci_hcd vhci_hcd.0: Device attached [ 1476.044165][ T3861] vhci_hcd: connection closed [ 1476.044448][T27498] vhci_hcd: stop threads [ 1476.052129][T27498] vhci_hcd: release socket [ 1476.054462][T27498] vhci_hcd: disconnect device [ 1476.111277][ T3847] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 1476.116177][ T3847] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1476.215320][ T3847] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 1476.218902][ T3847] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1476.294032][ T3847] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 1476.296902][ T3847] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 1476.306026][ T3847] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 1476.309511][ T3847] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 1476.317094][ T3847] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 1476.320234][ T3847] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 1476.331070][ T3847] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 1476.334065][ T3847] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 1477.202350][ T3886] netlink: 'syz.5.9177': attribute type 10 has an invalid length. [ 1477.243618][ T3886] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 1477.253960][ T3886] netdevsim netdevsim5 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1477.332070][ T3886] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 1477.335487][ T3886] netdevsim netdevsim5 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1477.422845][ T3886] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 1477.426095][ T3886] netdevsim netdevsim5 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1477.546187][ T3886] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 1477.549807][ T3886] netdevsim netdevsim5 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1477.617768][ T3886] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 1477.623081][ T3886] netdevsim netdevsim5 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 1477.630775][ T3886] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 1477.633358][ T3886] netdevsim netdevsim5 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 1477.647629][ T3886] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 1477.650806][ T3886] netdevsim netdevsim5 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 1477.670154][ T3886] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 1477.672696][ T3886] netdevsim netdevsim5 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 1477.729932][ T3891] __nla_validate_parse: 1 callbacks suppressed [ 1477.729950][ T3891] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9180'. [ 1477.735631][ T3891] netlink: 'syz.4.9180': attribute type 5 has an invalid length. [ 1477.738375][ T3891] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9180'. [ 1478.039027][ T3899] cgroup: Unknown subsys name 'obj_type' [ 1478.042872][ T3899] 9pnet_fd: Insufficient options for proto=fd [ 1478.764168][ T3909] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 1478.766452][ T3909] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1478.769348][ T3909] vhci_hcd vhci_hcd.0: Device attached [ 1478.775688][ T3913] vhci_hcd: connection closed [ 1478.776071][T27498] vhci_hcd: stop threads [ 1478.782779][T27498] vhci_hcd: release socket [ 1478.786387][T27498] vhci_hcd: disconnect device [ 1478.787852][ T3912] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9182'. [ 1478.791762][ T3912] netlink: 'syz.3.9182': attribute type 5 has an invalid length. [ 1478.794675][ T3912] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9182'. [ 1479.330227][ T3929] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1479.332852][ T3929] 9p: Unknown Cache mode or invalid value fscach [ 1480.194966][ T3943] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9190'. [ 1480.198195][ T3943] netlink: 'syz.5.9190': attribute type 5 has an invalid length. [ 1480.200912][ T3943] netlink: 20 bytes leftover after parsing attributes in process `syz.5.9190'. [ 1480.552942][ T3946] trusted_key: encrypted_key: insufficient parameters specified [ 1480.643075][ T3949] lo speed is unknown, defaulting to 1000 [ 1480.717508][ T3956] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9193'. [ 1480.723178][ T3956] netlink: 'syz.2.9193': attribute type 5 has an invalid length. [ 1480.727005][ T3956] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9193'. [ 1481.231532][ T3967] binder: 3964:3967 ioctl c018620c 80000380 returned -22 [ 1481.695868][ T3972] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9196'. [ 1481.699830][ T3972] netlink: 'syz.5.9196': attribute type 5 has an invalid length. [ 1481.702471][ T3972] netlink: 20 bytes leftover after parsing attributes in process `syz.5.9196'. [ 1484.212108][ T4009] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9205'. [ 1484.228399][ T4009] netlink: 'syz.2.9205': attribute type 5 has an invalid length. [ 1484.231272][ T4009] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9205'. [ 1484.342978][ T4020] batman_adv: batadv0: Removing interface: ip6gretap1 [ 1484.401838][ T4018] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9207'. [ 1484.404676][ T4018] netlink: 'syz.4.9207': attribute type 5 has an invalid length. [ 1484.407167][ T4018] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9207'. [ 1484.426075][ T4023] netlink: 'syz.3.9209': attribute type 10 has an invalid length. [ 1484.462525][ T4020] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 1484.550287][ T4020] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 1484.623915][ T4020] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 1484.686362][ T4020] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 1484.756910][ T4020] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 1484.767768][ T4020] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 1484.775349][ T4020] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 1484.783059][ T4020] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 1485.220790][ T4039] netlink: 80 bytes leftover after parsing attributes in process `syz.4.9215'. [ 1485.224238][ T4039] netlink: 80 bytes leftover after parsing attributes in process `syz.4.9215'. [ 1485.303358][ T4042] trusted_key: encrypted_key: insufficient parameters specified [ 1485.336521][ T4042] lo speed is unknown, defaulting to 1000 [ 1485.581658][ T4051] program syz.5.9218 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1486.408220][ T4059] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 1486.410690][ T4059] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1486.413855][ T4059] vhci_hcd vhci_hcd.0: Device attached [ 1486.423605][ T4061] vhci_hcd: connection closed [ 1486.435638][T27497] vhci_hcd: stop threads [ 1486.439654][T27497] vhci_hcd: release socket [ 1486.441411][T27497] vhci_hcd: disconnect device [ 1486.632771][ T4065] netlink: 'syz.2.9221': attribute type 1 has an invalid length. [ 1486.636442][ T4065] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.9221'. [ 1486.649579][T14446] hid-generic 0005:0005:0000.002D: unknown main item tag 0x0 [ 1486.653536][T14446] hid-generic 0005:0005:0000.002D: unknown main item tag 0x0 [ 1486.657122][T14446] hid-generic 0005:0005:0000.002D: unknown main item tag 0x0 [ 1486.661239][T14446] hid-generic 0005:0005:0000.002D: unknown main item tag 0x0 [ 1486.664557][T14446] hid-generic 0005:0005:0000.002D: unknown main item tag 0x0 [ 1486.668624][T14446] hid-generic 0005:0005:0000.002D: unknown main item tag 0x0 [ 1486.672010][T14446] hid-generic 0005:0005:0000.002D: unknown main item tag 0x0 [ 1486.675356][T14446] hid-generic 0005:0005:0000.002D: unknown main item tag 0x0 [ 1486.689033][T14446] hid-generic 0005:0005:0000.002D: unknown main item tag 0x0 [ 1486.692478][T14446] hid-generic 0005:0005:0000.002D: unknown main item tag 0x0 [ 1486.695817][T14446] hid-generic 0005:0005:0000.002D: unknown main item tag 0x0 [ 1486.703980][T14446] hid-generic 0005:0005:0000.002D: unknown main item tag 0x0 [ 1486.707731][T14446] hid-generic 0005:0005:0000.002D: unknown main item tag 0x0 [ 1486.716482][T14446] hid-generic 0005:0005:0000.002D: unknown main item tag 0x0 [ 1486.719519][T14446] hid-generic 0005:0005:0000.002D: unknown main item tag 0x0 [ 1486.722273][T14446] hid-generic 0005:0005:0000.002D: unknown main item tag 0x0 [ 1486.725971][T14446] hid-generic 0005:0005:0000.002D: unknown main item tag 0x0 [ 1486.730268][T14446] hid-generic 0005:0005:0000.002D: unknown main item tag 0x0 [ 1486.734624][T14446] hid-generic 0005:0005:0000.002D: unknown main item tag 0x0 [ 1486.740406][T14446] hid-generic 0005:0005:0000.002D: unknown main item tag 0x0 [ 1486.744078][T14446] hid-generic 0005:0005:0000.002D: unknown main item tag 0x0 [ 1486.747761][T14446] hid-generic 0005:0005:0000.002D: unknown main item tag 0x0 [ 1486.752193][T14446] hid-generic 0005:0005:0000.002D: unknown main item tag 0x0 [ 1486.756695][T14446] hid-generic 0005:0005:0000.002D: unknown main item tag 0x0 [ 1486.760043][T14446] hid-generic 0005:0005:0000.002D: unknown main item tag 0x0 [ 1486.763400][T14446] hid-generic 0005:0005:0000.002D: unknown main item tag 0x0 [ 1486.767379][T14446] hid-generic 0005:0005:0000.002D: unknown main item tag 0x0 [ 1486.770679][T14446] hid-generic 0005:0005:0000.002D: unknown main item tag 0x0 [ 1486.773222][T14446] hid-generic 0005:0005:0000.002D: unknown main item tag 0x0 [ 1486.776191][T14446] hid-generic 0005:0005:0000.002D: unknown main item tag 0x0 [ 1486.779551][T14446] hid-generic 0005:0005:0000.002D: unknown main item tag 0x0 [ 1486.782079][T14446] hid-generic 0005:0005:0000.002D: unknown main item tag 0x0 [ 1486.784532][T14446] hid-generic 0005:0005:0000.002D: unknown main item tag 0x0 [ 1486.787158][T14446] hid-generic 0005:0005:0000.002D: unknown main item tag 0x0 [ 1486.789924][T14446] hid-generic 0005:0005:0000.002D: unknown main item tag 0x0 [ 1486.792436][T14446] hid-generic 0005:0005:0000.002D: unknown main item tag 0x0 [ 1486.795114][T14446] hid-generic 0005:0005:0000.002D: unknown main item tag 0x0 [ 1486.798514][T14446] hid-generic 0005:0005:0000.002D: unknown main item tag 0x0 [ 1486.801171][T14446] hid-generic 0005:0005:0000.002D: unknown main item tag 0x0 [ 1486.803758][T14446] hid-generic 0005:0005:0000.002D: unknown main item tag 0x0 [ 1486.806337][T14446] hid-generic 0005:0005:0000.002D: unknown main item tag 0x0 [ 1486.811672][T14446] hid-generic 0005:0005:0000.002D: unknown main item tag 0x0 [ 1486.814377][T14446] hid-generic 0005:0005:0000.002D: unknown main item tag 0x0 [ 1486.816745][T14446] hid-generic 0005:0005:0000.002D: unknown main item tag 0x0 [ 1486.819334][T14446] hid-generic 0005:0005:0000.002D: unknown main item tag 0x0 [ 1486.822553][T14446] hid-generic 0005:0005:0000.002D: unknown main item tag 0x0 [ 1486.825368][T14446] hid-generic 0005:0005:0000.002D: unknown main item tag 0x0 [ 1486.827952][T14446] hid-generic 0005:0005:0000.002D: unknown main item tag 0x0 [ 1486.830853][T14446] hid-generic 0005:0005:0000.002D: unknown main item tag 0x0 [ 1486.834230][T14446] hid-generic 0005:0005:0000.002D: unknown main item tag 0x0 [ 1486.837618][T14446] hid-generic 0005:0005:0000.002D: unknown main item tag 0x0 [ 1486.840649][T14446] hid-generic 0005:0005:0000.002D: unknown main item tag 0x0 [ 1486.843229][T14446] hid-generic 0005:0005:0000.002D: unknown main item tag 0x0 [ 1486.846624][T14446] hid-generic 0005:0005:0000.002D: unknown main item tag 0x0 [ 1486.849875][T14446] hid-generic 0005:0005:0000.002D: unknown main item tag 0x0 [ 1486.861463][T14446] hid-generic 0005:0005:0000.002D: unknown main item tag 0x0 [ 1486.864361][T14446] hid-generic 0005:0005:0000.002D: unknown main item tag 0x0 [ 1486.867514][T14446] hid-generic 0005:0005:0000.002D: unknown main item tag 0x0 [ 1486.871173][T14446] hid-generic 0005:0005:0000.002D: unknown main item tag 0x0 [ 1486.878281][T14446] hid-generic 0005:0005:0000.002D: unknown main item tag 0x0 [ 1486.881833][T14446] hid-generic 0005:0005:0000.002D: unknown main item tag 0x0 [ 1486.885737][T14446] hid-generic 0005:0005:0000.002D: unknown main item tag 0x0 [ 1486.892013][T14446] hid-generic 0005:0005:0000.002D: unknown main item tag 0x0 [ 1486.895204][T14446] hid-generic 0005:0005:0000.002D: unknown main item tag 0x0 [ 1486.901155][T14446] hid-generic 0005:0005:0000.002D: unknown main item tag 0x0 [ 1486.904742][T14446] hid-generic 0005:0005:0000.002D: unknown main item tag 0x0 [ 1486.914071][T14446] hid-generic 0005:0005:0000.002D: unknown main item tag 0x0 [ 1486.917634][T14446] hid-generic 0005:0005:0000.002D: unknown main item tag 0x0 [ 1486.920914][T14446] hid-generic 0005:0005:0000.002D: unknown main item tag 0x0 [ 1486.923923][T14446] hid-generic 0005:0005:0000.002D: unknown main item tag 0x0 [ 1486.927539][T14446] hid-generic 0005:0005:0000.002D: unknown main item tag 0x0 [ 1486.931968][T14446] hid-generic 0005:0005:0000.002D: unknown main item tag 0x0 [ 1486.935269][T14446] hid-generic 0005:0005:0000.002D: unknown main item tag 0x0 [ 1486.938851][T14446] hid-generic 0005:0005:0000.002D: unknown main item tag 0x0 [ 1486.942311][T14446] hid-generic 0005:0005:0000.002D: unknown main item tag 0x0 [ 1486.945745][T14446] hid-generic 0005:0005:0000.002D: unknown main item tag 0x0 [ 1486.949115][T14446] hid-generic 0005:0005:0000.002D: unknown main item tag 0x0 [ 1486.952041][T14446] hid-generic 0005:0005:0000.002D: unknown main item tag 0x0 [ 1486.965628][T14446] hid-generic 0005:0005:0000.002D: unknown main item tag 0x0 [ 1486.969005][T14446] hid-generic 0005:0005:0000.002D: unknown main item tag 0x0 [ 1486.975795][T14446] hid-generic 0005:0005:0000.002D: unknown main item tag 0x0 [ 1486.986122][T14446] hid-generic 0005:0005:0000.002D: unknown main item tag 0x0 [ 1486.989694][T14446] hid-generic 0005:0005:0000.002D: unknown main item tag 0x0 [ 1486.996335][T14446] hid-generic 0005:0005:0000.002D: unknown main item tag 0x0 [ 1487.011809][T14446] hid-generic 0005:0005:0000.002D: unknown main item tag 0x0 [ 1487.015522][T14446] hid-generic 0005:0005:0000.002D: unknown main item tag 0x0 [ 1487.028201][T14446] hid-generic 0005:0005:0000.002D: unknown main item tag 0x0 [ 1487.037956][T14446] hid-generic 0005:0005:0000.002D: unknown main item tag 0x0 [ 1487.040302][T14446] hid-generic 0005:0005:0000.002D: unknown main item tag 0x0 [ 1487.043431][T14446] hid-generic 0005:0005:0000.002D: unknown main item tag 0x0 [ 1487.046024][T14446] hid-generic 0005:0005:0000.002D: unknown main item tag 0x0 [ 1487.051725][T14446] hid-generic 0005:0005:0000.002D: unknown main item tag 0x0 [ 1487.061303][T14446] hid-generic 0005:0005:0000.002D: unknown main item tag 0x0 [ 1487.069019][T14446] hid-generic 0005:0005:0000.002D: unknown main item tag 0x0 [ 1487.075143][T14446] hid-generic 0005:0005:0000.002D: unknown main item tag 0x0 [ 1487.077759][T14446] hid-generic 0005:0005:0000.002D: unknown main item tag 0x0 [ 1487.085395][T14446] hid-generic 0005:0005:0000.002D: unknown main item tag 0x0 [ 1487.090307][T14446] hid-generic 0005:0005:0000.002D: unknown main item tag 0x0 [ 1487.105376][T14446] hid-generic 0005:0005:0000.002D: unknown main item tag 0x0 [ 1487.113248][T14446] hid-generic 0005:0005:0000.002D: unknown main item tag 0x0 [ 1487.116466][T14446] hid-generic 0005:0005:0000.002D: unknown main item tag 0x0 [ 1487.119454][T14446] hid-generic 0005:0005:0000.002D: unknown main item tag 0x0 [ 1487.122445][T14446] hid-generic 0005:0005:0000.002D: unknown main item tag 0x0 [ 1487.125849][T14446] hid-generic 0005:0005:0000.002D: unknown main item tag 0x0 [ 1487.131376][T14446] hid-generic 0005:0005:0000.002D: unknown main item tag 0x0 [ 1487.133886][T14446] hid-generic 0005:0005:0000.002D: unknown main item tag 0x0 [ 1487.136543][T14446] hid-generic 0005:0005:0000.002D: unknown main item tag 0x0 [ 1487.139510][T14446] hid-generic 0005:0005:0000.002D: unknown main item tag 0x0 [ 1487.143220][T14446] hid-generic 0005:0005:0000.002D: unknown main item tag 0x0 [ 1487.146532][T14446] hid-generic 0005:0005:0000.002D: unknown main item tag 0x0 [ 1487.150486][T14446] hid-generic 0005:0005:0000.002D: unknown main item tag 0x0 [ 1487.153240][T14446] hid-generic 0005:0005:0000.002D: unknown main item tag 0x0 [ 1487.155584][T14446] hid-generic 0005:0005:0000.002D: unknown main item tag 0x0 [ 1487.158188][T14446] hid-generic 0005:0005:0000.002D: unknown main item tag 0x0 [ 1487.161962][T14446] hid-generic 0005:0005:0000.002D: unknown main item tag 0x0 [ 1487.165060][T14446] hid-generic 0005:0005:0000.002D: unknown main item tag 0x0 [ 1487.172891][T14446] hid-generic 0005:0005:0000.002D: unknown main item tag 0x0 [ 1487.176246][T14446] hid-generic 0005:0005:0000.002D: unknown main item tag 0x0 [ 1487.181700][T14446] hid-generic 0005:0005:0000.002D: unknown main item tag 0x0 [ 1487.185312][T14446] hid-generic 0005:0005:0000.002D: unknown main item tag 0x0 [ 1487.193326][T14446] hid-generic 0005:0005:0000.002D: unknown main item tag 0x0 [ 1487.196550][T14446] hid-generic 0005:0005:0000.002D: unknown main item tag 0x0 [ 1487.200217][T14446] hid-generic 0005:0005:0000.002D: unknown main item tag 0x0 [ 1487.204626][T14446] hid-generic 0005:0005:0000.002D: unknown main item tag 0x0 [ 1487.209469][T14446] hid-generic 0005:0005:0000.002D: unknown main item tag 0x0 [ 1487.214317][T14446] hid-generic 0005:0005:0000.002D: unknown main item tag 0x0 [ 1487.218352][T14446] hid-generic 0005:0005:0000.002D: unknown main item tag 0x0 [ 1487.221871][T14446] hid-generic 0005:0005:0000.002D: unknown main item tag 0x0 [ 1487.225037][T14446] hid-generic 0005:0005:0000.002D: unknown main item tag 0x0 [ 1487.227614][T14446] hid-generic 0005:0005:0000.002D: unknown main item tag 0x0 [ 1487.230463][T14446] hid-generic 0005:0005:0000.002D: unknown main item tag 0x0 [ 1487.233157][T14446] hid-generic 0005:0005:0000.002D: unknown main item tag 0x0 [ 1487.235759][T14446] hid-generic 0005:0005:0000.002D: unknown main item tag 0x0 [ 1487.238408][T14446] hid-generic 0005:0005:0000.002D: unknown main item tag 0x0 [ 1487.240878][T14446] hid-generic 0005:0005:0000.002D: unknown main item tag 0x0 [ 1487.244009][T14446] hid-generic 0005:0005:0000.002D: unknown main item tag 0x0 [ 1487.247687][T14446] hid-generic 0005:0005:0000.002D: unknown main item tag 0x0 [ 1487.252793][T14446] hid-generic 0005:0005:0000.002D: unknown main item tag 0x0 [ 1487.255607][T14446] hid-generic 0005:0005:0000.002D: unknown main item tag 0x0 [ 1487.258427][T14446] hid-generic 0005:0005:0000.002D: unknown main item tag 0x0 [ 1487.261614][T14446] hid-generic 0005:0005:0000.002D: unknown main item tag 0x0 [ 1487.264633][T14446] hid-generic 0005:0005:0000.002D: unknown main item tag 0x0 [ 1487.271996][T14446] hid-generic 0005:0005:0000.002D: unknown main item tag 0x0 [ 1487.277673][T14446] hid-generic 0005:0005:0000.002D: unknown main item tag 0x0 [ 1487.280956][T14446] hid-generic 0005:0005:0000.002D: unknown main item tag 0x0 [ 1487.284742][T14446] hid-generic 0005:0005:0000.002D: unknown main item tag 0x0 [ 1487.310567][T14446] hid-generic 0005:0005:0000.002D: unknown main item tag 0x0 [ 1487.323371][T14446] hid-generic 0005:0005:0000.002D: unknown main item tag 0x0 [ 1487.336776][T14446] hid-generic 0005:0005:0000.002D: unknown main item tag 0x0 [ 1487.342291][T14446] hid-generic 0005:0005:0000.002D: unknown main item tag 0x0 [ 1487.350954][T14446] hid-generic 0005:0005:0000.002D: unknown main item tag 0x0 [ 1487.356489][T14446] hid-generic 0005:0005:0000.002D: unknown main item tag 0x0 [ 1487.361851][T14446] hid-generic 0005:0005:0000.002D: unknown main item tag 0x0 [ 1487.368049][T14446] hid-generic 0005:0005:0000.002D: unknown main item tag 0x0 [ 1487.379054][T14446] hid-generic 0005:0005:0000.002D: unknown main item tag 0x0 [ 1487.382528][T14446] hid-generic 0005:0005:0000.002D: unknown main item tag 0x0 [ 1487.392391][T14446] hid-generic 0005:0005:0000.002D: unknown main item tag 0x0 [ 1487.394740][T14446] hid-generic 0005:0005:0000.002D: unknown main item tag 0x0 [ 1487.402847][T14446] hid-generic 0005:0005:0000.002D: unknown main item tag 0x0 [ 1487.406636][ T4081] netlink: 'syz.3.9225': attribute type 10 has an invalid length. [ 1487.409700][T14446] hid-generic 0005:0005:0000.002D: unknown main item tag 0x0 [ 1487.435178][ T4082] netlink: 'syz.5.9224': attribute type 10 has an invalid length. [ 1487.471544][T14446] hid-generic 0005:0005:0000.002D: hidraw0: BLUETOOTH HID v0.09 Device [syz1] on syz1 [ 1487.477465][ T4081] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 1487.499690][ T4082] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 1487.504589][ T4082] netdevsim netdevsim5 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1487.550872][ T4081] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 1487.625861][ T4082] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 1487.630211][ T4082] netdevsim netdevsim5 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1487.712291][ T4082] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 1487.715979][ T4082] netdevsim netdevsim5 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1487.742092][ T4081] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 1487.754707][ T4093] netlink: 80 bytes leftover after parsing attributes in process `syz.2.9228'. [ 1487.759902][ T4093] netlink: 80 bytes leftover after parsing attributes in process `syz.2.9228'. [ 1487.785909][ T4082] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 1487.789614][ T4082] netdevsim netdevsim5 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1487.877237][ T4081] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 1487.968087][ T4082] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 1487.972062][ T4082] netdevsim netdevsim5 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 1487.990503][ T4082] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 1487.995771][ T4082] netdevsim netdevsim5 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 1488.013956][ T4082] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 1488.016618][ T4082] netdevsim netdevsim5 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 1488.024581][ T4081] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 1488.034012][ T4082] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 1488.036819][ T4082] netdevsim netdevsim5 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 1488.059072][ T4081] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 1488.070047][ T4081] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 1488.081998][ T4081] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 1490.183121][ T4123] binder: 4118:4123 ioctl c018620c 80000380 returned -22 [ 1490.854735][ T4131] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9235'. [ 1490.858696][ T4131] netlink: 'syz.2.9235': attribute type 5 has an invalid length. [ 1490.862666][ T4131] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9235'. [ 1491.301780][ T4141] netlink: 80 bytes leftover after parsing attributes in process `syz.3.9239'. [ 1491.305859][ T4141] netlink: 80 bytes leftover after parsing attributes in process `syz.3.9239'. [ 1491.524303][ T4147] netlink: 'syz.2.9240': attribute type 10 has an invalid length. [ 1491.535743][ T4147] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 1491.544395][ T4147] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1491.614166][ T4147] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 1491.620086][ T4147] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1491.707373][ T4147] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 1491.712120][ T4147] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1491.783989][ T4147] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 1491.787404][ T4147] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1491.941331][ T4147] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 1491.944155][ T4147] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 1491.955734][ T4147] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 1491.961428][ T4147] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 1491.973294][ T4147] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 1491.976628][ T4147] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 1491.984379][ T4147] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 1491.986963][ T4147] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 1492.182433][ T24] IPVS: starting estimator thread 0... [ 1492.253829][ T4164] input: syz1 as /devices/virtual/input/input79 [ 1492.269352][ T4159] IPVS: using max 44 ests per chain, 105600 per kthread [ 1492.768573][ T4177] lo speed is unknown, defaulting to 1000 [ 1494.153080][ T4192] netlink: 80 bytes leftover after parsing attributes in process `syz.4.9253'. [ 1494.163604][ T4192] netlink: 80 bytes leftover after parsing attributes in process `syz.4.9253'. [ 1494.414089][ T4200] 9pnet_fd: Insufficient options for proto=fd [ 1494.630530][ T4210] netlink: 'syz.3.9257': attribute type 10 has an invalid length. [ 1494.665580][ T4210] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 1494.752749][ T4210] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 1494.861189][ T4210] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 1494.954007][ T4210] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 1495.116097][ T4210] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 1495.137274][ T4210] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 1495.160660][ T4210] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 1495.210388][ T4210] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 1496.298806][ T4241] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 1496.301296][ T4241] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1496.314479][ T4241] vhci_hcd vhci_hcd.0: Device attached [ 1496.416128][ T4246] IPVS: wrr: FWM 3 0x00000003 - no destination available [ 1496.422972][T29507] IPVS: starting estimator thread 0... [ 1496.508327][ T4247] IPVS: using max 44 ests per chain, 105600 per kthread [ 1496.597994][ T839] usb 42-1: SetAddress Request (14) to port 0 [ 1496.600726][ T839] usb 42-1: new SuperSpeed USB device number 14 using vhci_hcd [ 1496.677261][ T4252] netlink: 80 bytes leftover after parsing attributes in process `syz.5.9269'. [ 1496.681666][ T4252] netlink: 80 bytes leftover after parsing attributes in process `syz.5.9269'. [ 1496.693079][ T4242] vhci_hcd: connection reset by peer [ 1496.695628][ T225] vhci_hcd: stop threads [ 1496.697131][ T225] vhci_hcd: release socket [ 1496.699074][ T225] vhci_hcd: disconnect device [ 1498.193747][ T4281] netlink: 'syz.3.9274': attribute type 10 has an invalid length. [ 1498.243159][ T4281] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 1498.327336][ T4281] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 1498.601794][ T4281] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 1498.684036][ T4281] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 1498.761959][ T4281] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 1498.776059][ T4281] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 1498.786867][ T4281] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 1498.796122][ T4281] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 1499.267215][ T4305] netlink: 80 bytes leftover after parsing attributes in process `syz.2.9281'. [ 1499.271958][ T4305] netlink: 80 bytes leftover after parsing attributes in process `syz.2.9281'. [ 1499.682899][ T4315] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9283'. [ 1499.686085][ T4315] netlink: 'syz.3.9283': attribute type 5 has an invalid length. [ 1499.689613][ T4315] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9283'. [ 1500.355386][ T4340] lo speed is unknown, defaulting to 1000 [ 1500.885345][ T4348] netlink: 'syz.3.9291': attribute type 10 has an invalid length. [ 1500.913391][ T4348] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9291'. [ 1501.275581][ T4356] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1501.406441][ T4359] lo speed is unknown, defaulting to 1000 [ 1501.656774][ T4367] netlink: 80 bytes leftover after parsing attributes in process `syz.3.9297'. [ 1501.660400][ T4367] netlink: 80 bytes leftover after parsing attributes in process `syz.3.9297'. [ 1501.688097][ T839] usb 42-1: device descriptor read/8, error -110 [ 1502.078734][ T839] usb usb42-port1: attempt power cycle [ 1502.204532][ T4375] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9300'. [ 1502.452875][ T4383] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 1502.455087][ T4383] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1502.478395][ T4383] vhci_hcd vhci_hcd.0: Device attached [ 1502.705520][ T839] usb usb42-port1: unable to enumerate USB device [ 1502.777979][ T34] usb 48-1: SetAddress Request (2) to port 0 [ 1502.780106][ T34] usb 48-1: new SuperSpeed USB device number 2 using vhci_hcd [ 1503.007718][ T4384] vhci_hcd: connection reset by peer [ 1503.012234][T27497] vhci_hcd: stop threads [ 1503.014401][T27497] vhci_hcd: release socket [ 1503.016354][T27497] vhci_hcd: disconnect device [ 1503.719622][ T4411] netlink: 'syz.2.9305': attribute type 10 has an invalid length. [ 1503.723623][ T4411] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9305'. [ 1504.219699][ T4420] netlink: 84 bytes leftover after parsing attributes in process `syz.5.9308'. [ 1504.358495][ T4423] netlink: 80 bytes leftover after parsing attributes in process `syz.4.9311'. [ 1504.366226][ T4423] netlink: 80 bytes leftover after parsing attributes in process `syz.4.9311'. [ 1504.605567][ T4434] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1504.617372][ T4434] 9p: Unknown Cache mode or invalid value fscach [ 1505.461518][ T4445] program syz.2.9316 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1506.233833][ T4456] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 1506.236073][ T4456] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1506.258469][ T4456] vhci_hcd vhci_hcd.0: Device attached [ 1506.433791][ T4467] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9321'. [ 1506.514017][ T4472] netlink: 80 bytes leftover after parsing attributes in process `syz.3.9323'. [ 1506.518007][ T4472] netlink: 80 bytes leftover after parsing attributes in process `syz.3.9323'. [ 1506.785962][ T4457] vhci_hcd: connection closed [ 1506.787619][T27498] vhci_hcd: stop threads [ 1506.792775][T27498] vhci_hcd: release socket [ 1506.794844][T27498] vhci_hcd: disconnect device [ 1507.858753][ T34] usb 48-1: device descriptor read/8, error -110 [ 1508.016861][ T4510] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9327'. [ 1508.087464][ T4516] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1508.090996][ T4516] 9p: Unknown Cache mode or invalid value fscach [ 1508.220564][ T4519] netlink: 80 bytes leftover after parsing attributes in process `syz.3.9336'. [ 1508.224409][ T4519] netlink: 80 bytes leftover after parsing attributes in process `syz.3.9336'. [ 1508.269908][ T34] usb usb48-port1: attempt power cycle [ 1508.324716][ T4522] xt_TCPMSS: Only works on TCP SYN packets [ 1508.397436][ T40] kauditd_printk_skb: 807 callbacks suppressed [ 1508.397448][ T40] audit: type=1326 audit(8304.314:3293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4523 comm="syz.3.9338" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f88579 code=0x7ffc0000 [ 1508.432114][ T40] audit: type=1326 audit(8304.314:3294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4523 comm="syz.3.9338" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f88579 code=0x7ffc0000 [ 1508.442170][ T40] audit: type=1326 audit(8304.314:3295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4523 comm="syz.3.9338" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f88579 code=0x7ffc0000 [ 1508.454206][ T40] audit: type=1326 audit(8304.314:3296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4523 comm="syz.3.9338" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f88579 code=0x7ffc0000 [ 1508.463976][ T40] audit: type=1326 audit(8304.314:3297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4523 comm="syz.3.9338" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f88579 code=0x7ffc0000 [ 1508.476104][ T40] audit: type=1326 audit(8304.314:3298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4523 comm="syz.3.9338" exe="/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf7f88579 code=0x7ffc0000 [ 1508.485568][ T40] audit: type=1326 audit(8304.314:3299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4523 comm="syz.3.9338" exe="/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf7f88579 code=0x7ffc0000 [ 1508.486435][ T4524] overlayfs: failed to clone upperpath [ 1508.528185][ T40] audit: type=1326 audit(8304.314:3300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4523 comm="syz.3.9338" exe="/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf7f88579 code=0x7ffc0000 [ 1508.537205][ T40] audit: type=1326 audit(8304.314:3301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4523 comm="syz.3.9338" exe="/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf7f88579 code=0x7ffc0000 [ 1508.546861][ T40] audit: type=1326 audit(8304.314:3302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4523 comm="syz.3.9338" exe="/syz-executor" sig=0 arch=40000003 syscall=6 compat=1 ip=0xf7f88579 code=0x7ffc0000 [ 1508.660617][ T4532] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9335'. [ 1508.664772][ T4532] netlink: 'syz.4.9335': attribute type 5 has an invalid length. [ 1508.668865][ T4532] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9335'. [ 1508.831321][ T34] usb usb48-port1: unable to enumerate USB device [ 1508.843298][ T4531] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.9341'. [ 1509.477149][ T4554] netlink: 80 bytes leftover after parsing attributes in process `syz.3.9346'. [ 1509.484932][ T4554] netlink: 80 bytes leftover after parsing attributes in process `syz.3.9346'. [ 1510.735756][ T4581] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1510.742254][ T4581] 9p: Unknown Cache mode or invalid value fscach [ 1512.555940][ T4602] fuse: Bad value for 'fd' [ 1512.679722][ T4607] netlink: 'syz.5.9357': attribute type 10 has an invalid length. [ 1512.683677][ T4607] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9357'. [ 1512.985087][ T4617] netlink: 84 bytes leftover after parsing attributes in process `syz.3.9356'. [ 1513.784862][ T4627] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1513.790286][ T4627] 9p: Unknown Cache mode or invalid value fscach [ 1514.231756][ T4641] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9367'. [ 1514.613140][ T4651] syzkaller1: entered promiscuous mode [ 1514.615418][ T4651] syzkaller1: entered allmulticast mode [ 1514.869700][ T4657] netlink: 'syz.2.9373': attribute type 10 has an invalid length. [ 1514.875340][ T4657] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9373'. [ 1514.958195][ T4664] netlink: 84 bytes leftover after parsing attributes in process `syz.3.9372'. [ 1515.656055][ T4670] 9pnet_fd: Insufficient options for proto=fd [ 1516.663653][ T4698] netlink: 84 bytes leftover after parsing attributes in process `syz.4.9384'. [ 1517.405962][T14093] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1517.414382][T14093] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1517.424003][T14093] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1517.437603][T14093] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1517.445613][T14093] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1517.556025][ T4715] lo speed is unknown, defaulting to 1000 [ 1517.563853][ T4717] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9387'. [ 1517.566921][ T4717] netlink: 'syz.3.9387': attribute type 5 has an invalid length. [ 1517.569827][ T4717] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9387'. [ 1517.698198][ T4715] chnl_net:caif_netlink_parms(): no params data found [ 1518.046370][ T4715] bridge0: port 1(bridge_slave_0) entered blocking state [ 1518.049642][ T4729] netlink: 'syz.5.9389': attribute type 10 has an invalid length. [ 1518.059230][ T4715] bridge0: port 1(bridge_slave_0) entered disabled state [ 1518.068222][ T4715] bridge_slave_0: entered allmulticast mode [ 1518.092140][ T4715] bridge_slave_0: entered promiscuous mode [ 1518.096195][ T4715] bridge0: port 2(bridge_slave_1) entered blocking state [ 1518.108586][ T4715] bridge0: port 2(bridge_slave_1) entered disabled state [ 1518.111303][ T4715] bridge_slave_1: entered allmulticast mode [ 1518.117552][ T4715] bridge_slave_1: entered promiscuous mode [ 1518.119594][ T4726] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9389'. [ 1518.238641][ T4715] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1518.247390][ T4715] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1518.318686][ T4715] team0: Port device team_slave_0 added [ 1518.328815][ T4715] team0: Port device team_slave_1 added [ 1518.384610][ T4715] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1518.389368][ T4715] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1518.400193][ T4715] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1518.406047][ T4715] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1518.409420][ T4715] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1518.432088][ T4715] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1518.521514][ T4715] hsr_slave_0: entered promiscuous mode [ 1518.525905][ T4715] hsr_slave_1: entered promiscuous mode [ 1518.720150][ T4715] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 1518.727522][ T4715] netdevsim netdevsim4 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1518.811079][ T4715] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 1518.815507][ T4715] netdevsim netdevsim4 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1518.907543][ T4715] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 1518.911068][ T4715] netdevsim netdevsim4 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1518.967237][ T4715] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 1518.971231][ T4715] netdevsim netdevsim4 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1519.120213][ T4715] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1519.127340][ T4715] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1519.134499][ T4715] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1519.141900][ T4715] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1519.282552][ T4715] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1519.298969][ T4715] 8021q: adding VLAN 0 to HW filter on device team0 [ 1519.329143][T27504] bridge0: port 1(bridge_slave_0) entered blocking state [ 1519.331490][T27504] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1519.335681][T27504] bridge0: port 2(bridge_slave_1) entered blocking state [ 1519.338354][T27504] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1519.528429][ T5946] Bluetooth: hci1: command tx timeout [ 1519.538274][ T4715] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1520.001088][ T4768] fuse: Bad value for 'fd' [ 1520.124210][ T4715] veth0_vlan: entered promiscuous mode [ 1520.131832][ T4715] veth1_vlan: entered promiscuous mode [ 1520.179538][ T4715] veth0_macvtap: entered promiscuous mode [ 1520.192151][ T4715] veth1_macvtap: entered promiscuous mode [ 1520.229875][ T4715] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1520.240031][ T4715] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1520.247177][ T4715] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1520.250459][ T4715] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1520.253745][ T4715] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1520.257015][ T4715] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1520.387119][T27499] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1520.394061][T27499] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1520.405937][ T4778] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1520.414292][ T4778] 9p: Unknown Cache mode or invalid value fscach [ 1520.414437][T27502] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1520.424122][T27502] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1521.262818][ T4797] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9402'. [ 1521.330262][ T4797] netlink: 28 bytes leftover after parsing attributes in process `syz.5.9402'. [ 1521.545622][ T4807] netlink: 'syz.3.9405': attribute type 10 has an invalid length. [ 1521.571268][ T4807] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9405'. [ 1521.608231][ T5946] Bluetooth: hci1: command tx timeout [ 1522.928579][ T5946] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 1522.956105][ T4830] program syz.5.9412 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1523.688061][ T5946] Bluetooth: hci1: command tx timeout [ 1523.852504][T14093] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1523.859571][T14093] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1523.865940][T14093] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1523.883116][T14093] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1523.911419][T14093] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1524.019489][ T4846] lo speed is unknown, defaulting to 1000 [ 1524.061975][ T225] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 1524.207429][ T225] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 1524.311496][ T225] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 1524.347353][ T4846] chnl_net:caif_netlink_parms(): no params data found [ 1524.377288][ T4856] input: syz1 as /devices/virtual/input/input80 [ 1524.434298][ T225] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 1524.527564][ T4846] bridge0: port 1(bridge_slave_0) entered blocking state [ 1524.535922][ T4846] bridge0: port 1(bridge_slave_0) entered disabled state [ 1524.540374][ T4846] bridge_slave_0: entered allmulticast mode [ 1524.545680][ T4846] bridge_slave_0: entered promiscuous mode [ 1524.557844][ T4846] bridge0: port 2(bridge_slave_1) entered blocking state [ 1524.563540][ T4846] bridge0: port 2(bridge_slave_1) entered disabled state [ 1524.579176][ T4857] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 1524.579316][ T4846] bridge_slave_1: entered allmulticast mode [ 1524.581288][ T4857] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1524.584592][ T4846] bridge_slave_1: entered promiscuous mode [ 1524.594879][ T4857] vhci_hcd vhci_hcd.0: Device attached [ 1524.654674][ T4846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1524.663124][ T4846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1524.711100][ T4846] team0: Port device team_slave_0 added [ 1524.732777][ T4866] vhci_hcd: connection closed [ 1524.749485][T27423] vhci_hcd: stop threads [ 1524.753219][T27423] vhci_hcd: release socket [ 1524.755231][T27423] vhci_hcd: disconnect device [ 1524.757826][ T4846] team0: Port device team_slave_1 added [ 1524.805102][ T4869] bridge0: port 2(bridge_slave_1) entered disabled state [ 1524.807688][ T4869] bridge0: port 1(bridge_slave_0) entered disabled state [ 1524.879553][ T4869] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1524.889627][ T4869] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1524.950546][ T4869] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1524.953740][ T4869] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1524.956951][ T4869] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1524.961656][ T4869] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1524.978575][ T5946] Bluetooth: hci0: command 0x0406 tx timeout [ 1525.100413][ T4846] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1525.103089][ T4846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1525.112579][ T4846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1525.117462][ T4846] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1525.119918][ T4846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1525.128823][ T4846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1525.760187][ T4884] trusted_key: encrypted_key: insufficient parameters specified [ 1525.886024][ T5946] Bluetooth: hci1: command tx timeout [ 1525.959681][ T225] bond0 (unregistering): Released all slaves [ 1525.974295][ T4846] hsr_slave_0: entered promiscuous mode [ 1525.977000][ T4846] hsr_slave_1: entered promiscuous mode [ 1525.979314][ T4846] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1525.981706][ T4846] Cannot create hsr debugfs directory [ 1526.008159][ T5946] Bluetooth: hci4: command tx timeout [ 1526.047600][ T225] tipc: Left network mode [ 1526.425213][ T225] hsr_slave_0: left promiscuous mode [ 1526.428262][ T225] hsr_slave_1: left promiscuous mode [ 1526.765349][ T4900] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9425'. [ 1526.768317][ T4900] netlink: 'syz.2.9425': attribute type 5 has an invalid length. [ 1526.770929][ T4900] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9425'. [ 1527.034991][ T4904] fuse: Bad value for 'rootmode' [ 1527.369402][ T839] usb 10-1: new high-speed USB device number 39 using dummy_hcd [ 1527.534231][ T839] usb 10-1: config 111 has an invalid descriptor of length 74, skipping remainder of the config [ 1527.537782][ T839] usb 10-1: config 111 has 0 interfaces, different from the descriptor's value: 9 [ 1527.543014][ T839] usb 10-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 1527.546139][ T839] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1527.553735][ T839] usb 10-1: Product: syz [ 1527.555157][ T839] usb 10-1: Manufacturer: syz [ 1527.556795][ T839] usb 10-1: SerialNumber: syz [ 1527.817334][ T839] usb 10-1: USB disconnect, device number 39 [ 1527.975123][ T4917] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1528.054053][ T4917] 9p: Unknown Cache mode or invalid value fscach [ 1528.101097][ T5946] Bluetooth: hci4: command tx timeout [ 1528.575046][ T4926] fuse: blksize only supported for fuseblk [ 1529.489430][ T4934] program syz.4.9433 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1529.998759][ T4846] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1530.012765][ T4846] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1530.031584][ T4846] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1530.038860][ T4846] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1530.063938][ T225] IPVS: stop unused estimator thread 0... [ 1530.112931][ T4846] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1530.161108][ T4846] 8021q: adding VLAN 0 to HW filter on device team0 [ 1530.169404][ T5946] Bluetooth: hci4: command tx timeout [ 1530.170315][T27499] bridge0: port 1(bridge_slave_0) entered blocking state [ 1530.175065][T27499] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1530.182169][T27499] bridge0: port 2(bridge_slave_1) entered blocking state [ 1530.184456][T27499] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1530.248388][ T4954] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1530.296528][ T4954] 9p: Unknown Cache mode or invalid value fscach [ 1530.437938][ T4846] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1530.471860][ T4846] veth0_vlan: entered promiscuous mode [ 1530.497022][ T4846] veth1_vlan: entered promiscuous mode [ 1530.520909][ T4846] veth0_macvtap: entered promiscuous mode [ 1530.525580][ T4846] veth1_macvtap: entered promiscuous mode [ 1530.542472][ T4846] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1530.548579][ T4846] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1530.555373][ T4846] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1530.560178][ T4846] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1530.564220][ T4846] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1530.568383][ T4846] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1530.649700][T27504] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1530.652306][T27504] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1530.665727][T27423] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1530.669597][T27423] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1530.743635][ T4963] program syz.3.9415 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1532.229164][ T4984] fuse: Unknown parameter 'use00000000000000000000' [ 1532.251724][ T5946] Bluetooth: hci4: command tx timeout [ 1533.206456][ T4998] netlink: 80 bytes leftover after parsing attributes in process `syz.4.9445'. [ 1533.210886][ T4998] netlink: 80 bytes leftover after parsing attributes in process `syz.4.9445'. [ 1533.372264][ T4995] trusted_key: encrypted_key: insufficient parameters specified [ 1534.266004][ T5015] fuse: Unknown parameter 'use00000000000000000000' [ 1534.446483][ T5021] input: syz1 as /devices/virtual/input/input81 [ 1535.458284][ T5032] netdevsim netdevsim5 eth0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 1535.463581][ T5032] netdevsim netdevsim5 eth1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 1535.470864][ T5032] netdevsim netdevsim5 eth2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 1535.475029][ T5032] netdevsim netdevsim5 eth3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 1535.545386][ T5032] netdevsim netdevsim5 eth0: unset [1, 0] type 2 family 0 port 256 - 0 [ 1535.549383][ T5032] netdevsim netdevsim5 eth1: unset [1, 0] type 2 family 0 port 256 - 0 [ 1535.553472][ T5032] netdevsim netdevsim5 eth2: unset [1, 0] type 2 family 0 port 256 - 0 [ 1535.556679][ T5032] netdevsim netdevsim5 eth3: unset [1, 0] type 2 family 0 port 256 - 0 [ 1536.184727][ T5055] fuse: Unknown parameter 'use00000000000000000000' [ 1536.223429][ T5057] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 1536.226610][ T5057] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1536.230384][ T5057] vhci_hcd vhci_hcd.0: Device attached [ 1536.498131][ T24] usb 44-1: SetAddress Request (6) to port 0 [ 1536.501373][ T24] usb 44-1: new SuperSpeed USB device number 6 using vhci_hcd [ 1536.506840][T29518] usb 10-1: new high-speed USB device number 40 using dummy_hcd [ 1536.685712][T29518] usb 10-1: config 111 has an invalid descriptor of length 74, skipping remainder of the config [ 1536.689836][T29518] usb 10-1: config 111 has 0 interfaces, different from the descriptor's value: 9 [ 1536.701608][T29518] usb 10-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 1536.704528][T29518] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1536.707031][T29518] usb 10-1: Product: syz [ 1536.708762][T29518] usb 10-1: Manufacturer: syz [ 1536.710305][T29518] usb 10-1: SerialNumber: syz [ 1536.849755][ T5058] vhci_hcd: connection reset by peer [ 1536.852480][T27499] vhci_hcd: stop threads [ 1536.854112][T27499] vhci_hcd: release socket [ 1536.856073][T27499] vhci_hcd: disconnect device [ 1536.896566][ T5065] netlink: 84 bytes leftover after parsing attributes in process `syz.4.9456'. [ 1536.939987][T29518] usb 10-1: USB disconnect, device number 40 [ 1537.554020][ T5077] netlink: 84 bytes leftover after parsing attributes in process `syz.4.9462'. [ 1538.235133][ T5088] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1538.259279][ T5088] 9p: Unknown Cache mode or invalid value fscach [ 1538.559911][ T5091] binder: 5090:5091 unknown command 0 [ 1538.562350][ T5091] binder: 5090:5091 ioctl c0306201 80000180 returned -22 [ 1538.767574][ T5095] ./bus: Can't lookup blockdev [ 1538.998005][ T34] usb 9-1: new full-speed USB device number 50 using dummy_hcd [ 1539.064889][ T5107] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 1539.067622][ T5107] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1539.071461][ T5107] vhci_hcd vhci_hcd.0: Device attached [ 1539.160065][ T34] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1539.164473][ T34] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1539.169885][ T34] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1539.172870][ T34] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1539.348305][ T2909] usb 48-1: SetAddress Request (6) to port 0 [ 1539.351425][ T2909] usb 48-1: new SuperSpeed USB device number 6 using vhci_hcd [ 1539.385628][ T34] usb 9-1: usb_control_msg returned -32 [ 1539.388244][ T34] usbtmc 9-1:16.0: can't read capabilities [ 1539.652056][ T5111] netlink: 'syz.2.9473': attribute type 4 has an invalid length. [ 1539.686984][ T5108] vhci_hcd: connection reset by peer [ 1539.689702][T27504] vhci_hcd: stop threads [ 1539.691490][T27504] vhci_hcd: release socket [ 1539.696379][T27504] vhci_hcd: disconnect device [ 1540.218673][ T5124] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1540.221583][ T5124] 9p: Unknown Cache mode or invalid value fscach [ 1541.202386][ T5137] netlink: 'syz.2.9482': attribute type 4 has an invalid length. [ 1541.355737][ T5142] 9pnet_fd: Insufficient options for proto=fd [ 1541.372306][ T5135] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9481'. [ 1541.375573][ T5135] netlink: 'syz.3.9481': attribute type 5 has an invalid length. [ 1541.378814][ T5135] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9481'. [ 1541.387642][ T5135] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 1541.391257][ T5135] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 1541.394371][ T5135] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 1541.397987][ T5135] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 1541.405112][ T5135] geneve2: entered promiscuous mode [ 1541.406832][ T5135] geneve2: entered allmulticast mode [ 1541.598139][ T5153] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9488'. [ 1541.609615][ T24] usb 44-1: device descriptor read/8, error -110 [ 1541.684354][ T53] usb 9-1: USB disconnect, device number 50 [ 1541.998937][ T24] usb usb44-port1: attempt power cycle [ 1542.578988][ T24] usb usb44-port1: unable to enumerate USB device [ 1542.620248][ T5177] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1542.623847][ T5177] 9p: Unknown Cache mode or invalid value fscach [ 1542.693423][ T5179] program syz.3.9495 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1544.418333][ T2909] usb 48-1: device descriptor read/8, error -110 [ 1544.429502][T27499] Bluetooth: hci3: Frame reassembly failed (-84) [ 1544.842228][ T2909] usb usb48-port1: attempt power cycle [ 1544.916506][ T5206] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1544.923111][ T5206] 9p: Unknown Cache mode or invalid value fscach [ 1545.190190][ T5217] cgroup: Unknown subsys name 'euid' [ 1545.276264][ T5221] fuse: Unknown parameter 'user_i00000000000000000000' [ 1545.429127][ T2909] usb usb48-port1: unable to enumerate USB device [ 1546.408251][ T5946] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 1546.735422][ T5238] netlink: 32 bytes leftover after parsing attributes in process `syz.3.9511'. [ 1546.773114][ T5238] Cannot find del_set index 3 as target [ 1547.158335][ T40] kauditd_printk_skb: 60 callbacks suppressed [ 1547.158410][ T40] audit: type=1326 audit(8343.054:3363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5243 comm="syz.5.9513" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e579 code=0x7ffc0000 [ 1547.188088][ T40] audit: type=1326 audit(8343.064:3364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5243 comm="syz.5.9513" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e579 code=0x7ffc0000 [ 1547.208338][ T40] audit: type=1326 audit(8343.064:3365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5243 comm="syz.5.9513" exe="/syz-executor" sig=0 arch=40000003 syscall=376 compat=1 ip=0xf706e579 code=0x7ffc0000 [ 1547.248168][ T40] audit: type=1326 audit(8343.064:3366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5243 comm="syz.5.9513" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e579 code=0x7ffc0000 [ 1547.278039][ T40] audit: type=1326 audit(8343.064:3367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5243 comm="syz.5.9513" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e579 code=0x7ffc0000 [ 1547.298148][ T40] audit: type=1326 audit(8343.094:3368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5243 comm="syz.5.9513" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf706e579 code=0x7ffc0000 [ 1547.318165][ T40] audit: type=1326 audit(8343.094:3369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5243 comm="syz.5.9513" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e579 code=0x7ffc0000 [ 1547.328649][ T40] audit: type=1326 audit(8343.094:3370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5243 comm="syz.5.9513" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e579 code=0x7ffc0000 [ 1547.348057][ T40] audit: type=1326 audit(8343.094:3371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5243 comm="syz.5.9513" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf706e579 code=0x7ffc0000 [ 1547.361794][ T40] audit: type=1326 audit(8343.094:3372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5243 comm="syz.5.9513" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e579 code=0x7ffc0000 [ 1548.578175][ T5253] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1548.580346][ T5253] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1548.583404][ T5253] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1548.585812][ T5253] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1548.591369][ T5253] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1548.593523][ T5253] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1548.597191][ T5253] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1548.606335][ T5253] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1548.610063][ T5253] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1548.613956][ T5253] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1550.579962][T14093] Bluetooth: hci0: command 0x0406 tx timeout [ 1550.672479][T14093] Bluetooth: hci4: command 0x0405 tx timeout [ 1550.679419][ T5946] Bluetooth: hci1: command 0x0c1a tx timeout [ 1550.681317][ T2581] Bluetooth: hci2: command 0x0406 tx timeout [ 1550.911629][ T5282] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9523'. [ 1550.915400][ T5282] netlink: 'syz.4.9523': attribute type 5 has an invalid length. [ 1550.925113][ T5282] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9523'. [ 1550.935056][ T5282] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 256 - 0 [ 1550.938703][ T5282] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 256 - 0 [ 1550.942287][ T5282] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 256 - 0 [ 1550.946149][ T5282] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 256 - 0 [ 1550.950161][ T5282] geneve2: entered promiscuous mode [ 1550.952275][ T5282] geneve2: entered allmulticast mode [ 1551.124076][ T5287] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9522'. [ 1551.127169][ T5287] netlink: 'syz.2.9522': attribute type 5 has an invalid length. [ 1551.133708][ T5287] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9522'. [ 1551.874104][ T5293] bridge_slave_0: left allmulticast mode [ 1551.877097][ T5293] bridge_slave_0: left promiscuous mode [ 1551.907837][ T5293] bridge0: port 1(bridge_slave_0) entered disabled state [ 1551.976008][ T5293] bridge_slave_1: left allmulticast mode [ 1551.979670][ T5293] bridge_slave_1: left promiscuous mode [ 1551.982432][ T5293] bridge0: port 2(bridge_slave_1) entered disabled state [ 1551.991266][ T5301] netlink: 'syz.4.9525': attribute type 10 has an invalid length. [ 1551.991342][ T5293] bond0: (slave bond_slave_0): Releasing backup interface [ 1552.035169][ T5293] bond0: (slave bond_slave_1): Releasing backup interface [ 1552.054374][ T5293] team0: Port device team_slave_0 removed [ 1552.063512][ T5293] team0: Port device team_slave_1 removed [ 1552.068594][ T5293] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1552.078235][ T5303] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9525'. [ 1552.082842][ T5293] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1552.122396][ T5295] team0: Mode changed to "loadbalance" [ 1552.135059][ T5301] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1552.143080][ T5301] team0: Port device bond0 added [ 1552.556868][ T5303] team0 (unregistering): Port device bond0 removed [ 1552.648115][ T5281] Bluetooth: hci0: command 0x0406 tx timeout [ 1552.729304][ T5281] Bluetooth: hci1: command 0x0c1a tx timeout [ 1552.730035][ T2581] Bluetooth: hci4: command 0x0405 tx timeout [ 1552.731669][ T5946] Bluetooth: hci2: command 0x0406 tx timeout [ 1554.808372][ T5281] Bluetooth: hci4: command 0x0405 tx timeout [ 1554.813783][ T5281] Bluetooth: hci1: command 0x0c1a tx timeout [ 1554.872807][ T5329] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9533'. [ 1554.876613][ T5329] netlink: 'syz.2.9533': attribute type 5 has an invalid length. [ 1554.880901][ T5329] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9533'. [ 1555.525235][ T5341] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9535'. [ 1555.529039][ T5341] netlink: 'syz.4.9535': attribute type 5 has an invalid length. [ 1555.532099][ T5341] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9535'. [ 1556.556152][ T5353] netlink: 'syz.2.9540': attribute type 10 has an invalid length. [ 1556.563573][ T5353] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9540'. [ 1556.589586][ T5353] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 1556.593897][ T5353] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1556.623709][ T5358] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9537'. [ 1556.629015][ T5358] netlink: 'syz.4.9537': attribute type 5 has an invalid length. [ 1556.633063][ T5358] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9537'. [ 1556.727310][ T5353] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 1556.730874][ T5353] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1556.838288][ T5353] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 1556.843960][ T5353] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1556.976064][ T5353] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 1556.980619][ T5353] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1557.157085][ T5353] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 1557.161203][ T5353] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 1557.194690][ T5353] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 1557.200369][ T5353] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 1557.233065][ T5361] fuse: Bad value for 'fd' [ 1557.264098][ T5353] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 1557.266832][ T5353] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 1557.276515][ T5353] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 1557.280607][ T5353] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 1557.538060][ T839] usb 9-1: new high-speed USB device number 51 using dummy_hcd [ 1557.708599][ T839] usb 9-1: config 111 has an invalid descriptor of length 74, skipping remainder of the config [ 1557.713275][ T839] usb 9-1: config 111 has 0 interfaces, different from the descriptor's value: 9 [ 1557.724741][ T839] usb 9-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 1557.728828][ T839] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1557.732300][ T839] usb 9-1: Product: syz [ 1557.734065][ T839] usb 9-1: Manufacturer: syz [ 1557.735984][ T839] usb 9-1: SerialNumber: syz [ 1557.950665][ T839] usb 9-1: USB disconnect, device number 51 [ 1557.957654][ T5365] netlink: 36 bytes leftover after parsing attributes in process `syz.2.9542'. [ 1558.383254][ T5370] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1558.389694][ T5370] 9p: Unknown Cache mode or invalid value fscach [ 1558.644548][ T5374] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9544'. [ 1560.337137][ T5387] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9546'. [ 1560.341530][ T5387] netlink: 'syz.4.9546': attribute type 5 has an invalid length. [ 1560.344301][ T5387] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9546'. [ 1561.312977][ T5399] netlink: 36 bytes leftover after parsing attributes in process `syz.2.9551'. [ 1561.630617][ T5403] fuse: Bad value for 'fd' [ 1561.928383][ T24] usb 7-1: new high-speed USB device number 78 using dummy_hcd [ 1562.094675][ T24] usb 7-1: config 111 has an invalid descriptor of length 74, skipping remainder of the config [ 1562.098786][ T24] usb 7-1: config 111 has 0 interfaces, different from the descriptor's value: 9 [ 1562.103909][ T24] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 1562.106956][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1562.112573][ T24] usb 7-1: Product: syz [ 1562.114226][ T24] usb 7-1: Manufacturer: syz [ 1562.116446][ T24] usb 7-1: SerialNumber: syz [ 1562.330785][ T24] usb 7-1: USB disconnect, device number 78 [ 1563.535206][ T5946] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1563.550605][ T5946] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1563.563521][ T5946] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1563.589656][ T5946] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1563.613213][ T5946] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1563.694640][ T5418] lo speed is unknown, defaulting to 1000 [ 1563.971271][ T5422] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9558'. [ 1564.007186][ T5418] chnl_net:caif_netlink_parms(): no params data found [ 1564.224006][ T5418] bridge0: port 1(bridge_slave_0) entered blocking state [ 1564.226597][ T5418] bridge0: port 1(bridge_slave_0) entered disabled state [ 1564.229556][ T5418] bridge_slave_0: entered allmulticast mode [ 1564.232550][ T5418] bridge_slave_0: entered promiscuous mode [ 1564.255211][ T5418] bridge0: port 2(bridge_slave_1) entered blocking state [ 1564.257542][ T5418] bridge0: port 2(bridge_slave_1) entered disabled state [ 1564.262382][ T5418] bridge_slave_1: entered allmulticast mode [ 1564.267267][ T5418] bridge_slave_1: entered promiscuous mode [ 1564.342095][ T5418] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1564.359528][ T5418] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1564.503372][ T5418] team0: Port device team_slave_0 added [ 1564.525283][ T5418] team0: Port device team_slave_1 added [ 1564.648326][ T5418] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1564.650512][ T5418] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1564.688198][ T5418] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1564.704344][ T5418] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1564.708059][ T5418] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1564.721445][ T5418] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1565.077395][ T5418] hsr_slave_0: entered promiscuous mode [ 1565.098391][ T5418] hsr_slave_1: entered promiscuous mode [ 1565.101704][ T5418] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1565.108053][ T5418] Cannot create hsr debugfs directory [ 1565.720046][ T5281] Bluetooth: hci3: command tx timeout [ 1565.814377][ T1145] bond0 (unregistering): Released all slaves [ 1566.190698][ T1145] hsr_slave_0: left promiscuous mode [ 1566.193010][ T1145] hsr_slave_1: left promiscuous mode [ 1566.785090][ T5445] netlink: 'syz.2.9561': attribute type 10 has an invalid length. [ 1566.848481][ T5449] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9561'. [ 1567.305018][ T5946] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1567.313111][ T5946] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1567.317702][ T5946] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1567.323014][ T5946] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1567.329159][ T5946] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1567.775153][ T5946] Bluetooth: hci3: command tx timeout [ 1569.369055][ T5946] Bluetooth: hci2: command tx timeout [ 1569.440661][ T5457] lo speed is unknown, defaulting to 1000 [ 1569.615402][ T5457] chnl_net:caif_netlink_parms(): no params data found [ 1569.757576][ T5418] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1569.762897][ T5418] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1569.807698][ T5418] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1569.833498][ T5457] bridge0: port 1(bridge_slave_0) entered blocking state [ 1569.836264][ T5457] bridge0: port 1(bridge_slave_0) entered disabled state [ 1569.839575][ T5457] bridge_slave_0: entered allmulticast mode [ 1569.842335][ T5457] bridge_slave_0: entered promiscuous mode [ 1569.846184][ T5418] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1569.852259][ T5457] bridge0: port 2(bridge_slave_1) entered blocking state [ 1569.855205][ T5457] bridge0: port 2(bridge_slave_1) entered disabled state [ 1569.857572][ T5457] bridge_slave_1: entered allmulticast mode [ 1569.858138][ T5946] Bluetooth: hci3: command tx timeout [ 1569.863815][ T5457] bridge_slave_1: entered promiscuous mode [ 1569.917108][ T5457] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1569.982065][ T5457] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1569.989700][ T1145] IPVS: stop unused estimator thread 0... [ 1570.062027][ T5457] team0: Port device team_slave_0 added [ 1570.066789][ T5457] team0: Port device team_slave_1 added [ 1570.109575][ T5457] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1570.112028][ T5457] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1570.125199][ T5457] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1570.130890][ T5457] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1570.133527][ T5457] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1570.145730][ T5457] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1570.215086][ T1145] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1570.220164][ T1145] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 1570.280801][ T5457] hsr_slave_0: entered promiscuous mode [ 1570.283178][ T5457] hsr_slave_1: entered promiscuous mode [ 1570.285482][ T5457] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1570.288086][ T5457] Cannot create hsr debugfs directory [ 1570.311369][ T1145] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1570.314366][ T1145] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 1570.419667][ T1145] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1570.423048][ T1145] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 1570.611557][ T5491] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9567'. [ 1570.633695][ T1145] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1570.637965][ T1145] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 1570.775871][ T5418] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1570.799079][ T5418] 8021q: adding VLAN 0 to HW filter on device team0 [ 1570.834615][T27504] bridge0: port 1(bridge_slave_0) entered blocking state [ 1570.837669][T27504] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1570.841218][T27504] bridge0: port 2(bridge_slave_1) entered blocking state [ 1570.843463][T27504] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1570.895991][ T1145] bridge_slave_1: left allmulticast mode [ 1570.898436][ T1145] bridge_slave_1: left promiscuous mode [ 1570.900599][ T1145] bridge0: port 2(bridge_slave_1) entered disabled state [ 1570.908468][ T1145] bridge_slave_0: left allmulticast mode [ 1570.910279][ T1145] bridge_slave_0: left promiscuous mode [ 1570.912164][ T1145] bridge0: port 1(bridge_slave_0) entered disabled state [ 1571.451229][ T5946] Bluetooth: hci2: command tx timeout [ 1571.479087][ T1145] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1571.486465][ T1145] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1571.496004][ T1145] bond0 (unregistering): Released all slaves [ 1571.928099][ T5946] Bluetooth: hci3: command tx timeout [ 1572.061332][ T5457] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1572.087481][ T1145] hsr_slave_0: left promiscuous mode [ 1572.094876][ T1145] hsr_slave_1: left promiscuous mode [ 1572.099146][ T1145] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1572.102695][ T1145] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1572.106671][ T1145] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1572.110750][ T1145] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1572.201785][ T1145] veth1_macvtap: left promiscuous mode [ 1572.204015][ T1145] veth0_macvtap: left promiscuous mode [ 1572.204116][ T5516] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9570'. [ 1572.206468][ T1145] veth1_vlan: left promiscuous mode [ 1572.210437][ T5516] netlink: 'syz.4.9570': attribute type 5 has an invalid length. [ 1572.212792][ T1145] veth0_vlan: left promiscuous mode [ 1572.216379][ T5516] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9570'. [ 1572.457845][ T5525] netlink: 'syz.2.9572': attribute type 10 has an invalid length. [ 1572.512605][ T5526] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9572'. [ 1573.533418][ T5946] Bluetooth: hci2: command tx timeout [ 1573.808582][ T1145] team0 (unregistering): Port device team_slave_1 removed [ 1573.995702][ T1145] team0 (unregistering): Port device team_slave_0 removed [ 1575.485973][ T5457] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1575.505339][ T5457] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1575.521277][ T5457] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1575.618084][ T5946] Bluetooth: hci2: command tx timeout [ 1575.633565][ T5418] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1575.812863][ T5457] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1575.857259][ T5457] 8021q: adding VLAN 0 to HW filter on device team0 [ 1575.867198][T27497] bridge0: port 1(bridge_slave_0) entered blocking state [ 1575.870369][T27497] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1575.888490][T27497] bridge0: port 2(bridge_slave_1) entered blocking state [ 1575.891196][T27497] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1575.993600][ T5418] veth0_vlan: entered promiscuous mode [ 1576.019689][ T5418] veth1_vlan: entered promiscuous mode [ 1576.066329][ T5418] veth0_macvtap: entered promiscuous mode [ 1576.127451][ T5418] veth1_macvtap: entered promiscuous mode [ 1576.167094][ T5418] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1576.181664][ T5418] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1576.196093][ T5418] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1576.207390][ T5418] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1576.218085][ T5418] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1576.221165][ T5418] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1576.304304][T27497] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1576.309747][T27497] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1576.366090][T16946] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1576.370258][T16946] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1576.419688][ T5457] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1576.834429][ T5577] fuse: Bad value for 'fd' [ 1576.874182][ T5457] veth0_vlan: entered promiscuous mode [ 1576.884696][ T5457] veth1_vlan: entered promiscuous mode [ 1576.963975][ T5457] veth0_macvtap: entered promiscuous mode [ 1576.977631][ T5457] veth1_macvtap: entered promiscuous mode [ 1577.004845][ T5457] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1577.020088][ T5457] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1577.032978][ T5457] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1577.036223][ T5457] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1577.040215][ T5457] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1577.043932][ T5457] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1577.125922][T27423] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1577.132068][T27423] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1577.162584][T27504] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1577.165512][T27504] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1578.318916][ T5612] netlink: 'syz.2.9581': attribute type 10 has an invalid length. [ 1578.418803][ T5613] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9581'. [ 1578.447455][ T5612] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 1578.451195][ T5612] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1578.562265][ T5612] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 1578.569909][ T5612] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1578.646405][ T5612] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 1578.651782][ T5612] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1579.103250][ T5612] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 1579.107463][ T5612] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1579.225634][ T5612] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 1579.229248][ T5612] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 1579.249434][ T5612] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 1579.252538][ T5612] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 1579.271784][ T5612] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 1579.275400][ T5612] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 1579.309470][ T5612] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 1579.313230][ T5612] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 1579.681272][ T5636] FAULT_INJECTION: forcing a failure. [ 1579.681272][ T5636] name failslab, interval 1, probability 0, space 0, times 0 [ 1579.687360][ T5636] CPU: 1 UID: 0 PID: 5636 Comm: syz.4.9586 Not tainted 6.16.0-rc3-syzkaller-00044-g7595b66ae9de #0 PREEMPT(full) [ 1579.687399][ T5636] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1579.687410][ T5636] Call Trace: [ 1579.687417][ T5636] [ 1579.687422][ T5636] dump_stack_lvl+0x16c/0x1f0 [ 1579.687446][ T5636] should_fail_ex+0x512/0x640 [ 1579.687464][ T5636] ? __kvmalloc_node_noprof+0x124/0x620 [ 1579.687483][ T5636] should_failslab+0xc2/0x120 [ 1579.687495][ T5636] __kvmalloc_node_noprof+0x137/0x620 [ 1579.687517][ T5636] ? __pfx___mutex_lock+0x10/0x10 [ 1579.687536][ T5636] ? traverse.part.0.constprop.0+0x392/0x640 [ 1579.687555][ T5636] ? traverse.part.0.constprop.0+0x392/0x640 [ 1579.687571][ T5636] traverse.part.0.constprop.0+0x392/0x640 [ 1579.687602][ T5636] seq_read_iter+0x932/0x12c0 [ 1579.687635][ T5636] proc_reg_read_iter+0x21d/0x310 [ 1579.687665][ T5636] vfs_read+0x8bc/0xc60 [ 1579.687694][ T5636] ? __pfx_vfs_read+0x10/0x10 [ 1579.687717][ T5636] ? find_held_lock+0x2b/0x80 [ 1579.687753][ T5636] ksys_pread64+0x161/0x1a0 [ 1579.687779][ T5636] ? __pfx_ksys_pread64+0x10/0x10 [ 1579.687805][ T5636] ? rcu_is_watching+0x12/0xc0 [ 1579.687828][ T5636] __do_fast_syscall_32+0x7c/0x3a0 [ 1579.687872][ T5636] do_fast_syscall_32+0x32/0x80 [ 1579.687898][ T5636] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1579.687922][ T5636] RIP: 0023:0xf7f35579 [ 1579.687937][ T5636] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1579.687952][ T5636] RSP: 002b:00000000f501455c EFLAGS: 00000296 ORIG_RAX: 00000000000000b4 [ 1579.687971][ T5636] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000080000180 [ 1579.687983][ T5636] RDX: 0000000000000049 RSI: 000000000000ac8c RDI: 0000000000000000 [ 1579.687994][ T5636] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1579.688004][ T5636] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1579.688014][ T5636] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1579.688039][ T5636] [ 1580.645272][ T5656] IPv6: sit1: Disabled Multicast RS [ 1581.605336][ T5683] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9596'. [ 1581.608507][ T5683] netlink: 'syz.6.9596': attribute type 5 has an invalid length. [ 1581.611171][ T5683] netlink: 20 bytes leftover after parsing attributes in process `syz.6.9596'. [ 1581.618930][ T5683] netdevsim netdevsim6 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 1581.622073][ T5683] netdevsim netdevsim6 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 1581.624795][ T5683] netdevsim netdevsim6 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 1581.627560][ T5683] netdevsim netdevsim6 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 1581.630625][ T5683] geneve2: entered promiscuous mode [ 1581.632404][ T5683] geneve2: entered allmulticast mode [ 1581.696858][ T5687] netlink: 'syz.2.9598': attribute type 10 has an invalid length. [ 1581.705688][ T5682] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9598'. [ 1581.714683][ T5682] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 1581.720702][ T5682] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1581.832846][ T5682] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 1581.837626][ T5682] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1581.913473][ T5682] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 1581.917831][ T5682] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1582.132077][ T5682] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 1582.135998][ T5682] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1582.603392][ T5700] FAULT_INJECTION: forcing a failure. [ 1582.603392][ T5700] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1582.607618][ T5700] CPU: 1 UID: 0 PID: 5700 Comm: syz.6.9600 Not tainted 6.16.0-rc3-syzkaller-00044-g7595b66ae9de #0 PREEMPT(full) [ 1582.607650][ T5700] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1582.607659][ T5700] Call Trace: [ 1582.607665][ T5700] [ 1582.607671][ T5700] dump_stack_lvl+0x16c/0x1f0 [ 1582.607696][ T5700] should_fail_ex+0x512/0x640 [ 1582.607717][ T5700] _copy_from_iter+0x29f/0x16f0 [ 1582.607737][ T5700] ? __alloc_skb+0x200/0x380 [ 1582.607756][ T5700] ? __pfx__copy_from_iter+0x10/0x10 [ 1582.607774][ T5700] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 1582.607792][ T5700] netlink_sendmsg+0x829/0xdd0 [ 1582.607807][ T5700] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1582.607820][ T5700] ? __import_iovec+0x1dd/0x650 [ 1582.607841][ T5700] ____sys_sendmsg+0xa98/0xc70 [ 1582.607868][ T5700] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1582.607881][ T5700] ? get_compat_msghdr+0x11a/0x170 [ 1582.607908][ T5700] ___sys_sendmsg+0x134/0x1d0 [ 1582.607926][ T5700] ? __pfx____sys_sendmsg+0x10/0x10 [ 1582.607951][ T5700] ? find_held_lock+0x2b/0x80 [ 1582.607973][ T5700] __sys_sendmsg+0x16d/0x220 [ 1582.607991][ T5700] ? __pfx___sys_sendmsg+0x10/0x10 [ 1582.608014][ T5700] ? rcu_is_watching+0x12/0xc0 [ 1582.608029][ T5700] __do_fast_syscall_32+0x7c/0x3a0 [ 1582.608049][ T5700] do_fast_syscall_32+0x32/0x80 [ 1582.608066][ T5700] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1582.608081][ T5700] RIP: 0023:0xf7f16579 [ 1582.608091][ T5700] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1582.608102][ T5700] RSP: 002b:00000000f4ff455c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 1582.608114][ T5700] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000080000000 [ 1582.608121][ T5700] RDX: 0000000000000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 1582.608128][ T5700] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1582.608134][ T5700] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1582.608141][ T5700] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1582.608155][ T5700] [ 1582.765314][ T5701] netlink: 'syz.7.9601': attribute type 10 has an invalid length. [ 1582.781105][ T5701] veth0_vlan: left promiscuous mode [ 1582.795881][ T5701] veth0_vlan: entered promiscuous mode [ 1582.807285][ T5701] team0: Device veth0_vlan failed to register rx_handler [ 1582.835591][ T5706] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9603'. [ 1584.220727][ T5682] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 1584.224093][ T5682] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 1584.233544][ T5682] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 1584.237223][ T5682] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 1584.252148][ T5682] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 1584.255467][ T5682] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 1584.266105][ T5682] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 1584.269706][ T5682] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 1584.720539][ T5734] netlink: 100 bytes leftover after parsing attributes in process `syz.4.9612'. [ 1584.746398][ T5734] delete_channel: no stack [ 1585.024110][ T5747] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9609'. [ 1585.028779][ T5747] netlink: 'syz.6.9609': attribute type 5 has an invalid length. [ 1585.032303][ T5747] netlink: 20 bytes leftover after parsing attributes in process `syz.6.9609'. [ 1587.333061][ T5782] netlink: 'syz.2.9622': attribute type 10 has an invalid length. [ 1587.339135][ T5782] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9622'. [ 1587.368868][ T5782] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 1587.409312][ T5782] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1587.483237][ T5782] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 1587.489384][ T5782] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1587.605527][ T5782] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 1587.610644][ T5782] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1587.623332][ T5786] bridge0: port 2(bridge_slave_1) entered disabled state [ 1587.626994][ T5786] bridge0: port 2(bridge_slave_1) entered blocking state [ 1587.630123][ T5786] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1587.785348][ T5782] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 1587.789267][ T5782] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1587.870987][ T5793] netlink: 'syz.6.9626': attribute type 10 has an invalid length. [ 1587.894242][ T5801] netlink: 'syz.4.9628': attribute type 21 has an invalid length. [ 1587.895093][ T5793] veth0_vlan: left promiscuous mode [ 1587.907838][ T5793] veth0_vlan: entered promiscuous mode [ 1587.914881][ T5793] team0: Device veth0_vlan failed to register rx_handler [ 1587.931207][ T5801] netlink: 156 bytes leftover after parsing attributes in process `syz.4.9628'. [ 1588.038094][ T5806] netlink: 4 bytes leftover after parsing attributes in process `syz.7.9625'. [ 1588.041183][ T5806] netlink: 4 bytes leftover after parsing attributes in process `syz.7.9625'. [ 1588.044236][ T5806] netlink: 4 bytes leftover after parsing attributes in process `syz.7.9625'. [ 1588.047173][ T5806] netlink: 4 bytes leftover after parsing attributes in process `syz.7.9625'. [ 1588.050295][ T5806] netlink: 4 bytes leftover after parsing attributes in process `syz.7.9625'. [ 1588.425529][ T5810] netlink: 'syz.4.9629': attribute type 5 has an invalid length. [ 1588.792336][ T5818] FAULT_INJECTION: forcing a failure. [ 1588.792336][ T5818] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1588.797281][ T5818] CPU: 0 UID: 0 PID: 5818 Comm: syz.7.9632 Not tainted 6.16.0-rc3-syzkaller-00044-g7595b66ae9de #0 PREEMPT(full) [ 1588.797299][ T5818] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1588.797308][ T5818] Call Trace: [ 1588.797313][ T5818] [ 1588.797320][ T5818] dump_stack_lvl+0x16c/0x1f0 [ 1588.797344][ T5818] should_fail_ex+0x512/0x640 [ 1588.797370][ T5818] _copy_to_user+0x32/0xd0 [ 1588.797392][ T5818] simple_read_from_buffer+0xcb/0x170 [ 1588.797411][ T5818] proc_fail_nth_read+0x197/0x270 [ 1588.797427][ T5818] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1588.797443][ T5818] ? rw_verify_area+0xcf/0x680 [ 1588.797459][ T5818] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1588.797473][ T5818] vfs_read+0x1e4/0xc60 [ 1588.797491][ T5818] ? fdget_pos+0x2a2/0x370 [ 1588.797511][ T5818] ? __pfx_vfs_read+0x10/0x10 [ 1588.797527][ T5818] ? find_held_lock+0x2b/0x80 [ 1588.797544][ T5818] ? __fget_files+0x20e/0x3c0 [ 1588.797566][ T5818] ksys_read+0x12a/0x250 [ 1588.797584][ T5818] ? __pfx_ksys_read+0x10/0x10 [ 1588.797603][ T5818] ? rcu_is_watching+0x12/0xc0 [ 1588.797619][ T5818] __do_fast_syscall_32+0x7c/0x3a0 [ 1588.797641][ T5818] do_fast_syscall_32+0x32/0x80 [ 1588.797660][ T5818] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1588.797677][ T5818] RIP: 0023:0xf70fe579 [ 1588.797688][ T5818] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1588.797700][ T5818] RSP: 002b:00000000f50ee590 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 1588.797712][ T5818] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f50ee620 [ 1588.797720][ T5818] RDX: 000000000000000f RSI: 00000000f7463ff4 RDI: 0000000000000000 [ 1588.797727][ T5818] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 1588.797734][ T5818] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 1588.797741][ T5818] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1588.797757][ T5818] [ 1589.080225][ T5782] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 1589.082922][ T5782] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 1589.119469][ T5782] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 1589.128099][ T5782] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 1589.149779][ T5782] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 1589.152345][ T5782] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 1589.160009][ T5782] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 1589.163624][ T5782] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 1589.408712][ T5829] trusted_key: encrypted_key: master key parameter 'usersyz' is invalid [ 1589.809164][ T5835] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 1589.814159][ T5835] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1589.851944][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state [ 1589.855066][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state [ 1589.858173][ T5833] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1589.858878][ T5838] netlink: 'syz.2.9636': attribute type 10 has an invalid length. [ 1589.863653][ T5838] __nla_validate_parse: 47 callbacks suppressed [ 1589.863662][ T5838] netlink: 40 bytes leftover after parsing attributes in process `syz.2.9636'. [ 1589.874050][ T5838] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 1589.883737][ T5835] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 1589.887076][ T5835] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1589.995561][ T5835] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 1590.005618][ T5835] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1590.059702][ T5847] FAULT_INJECTION: forcing a failure. [ 1590.059702][ T5847] name failslab, interval 1, probability 0, space 0, times 0 [ 1590.064371][ T5847] CPU: 2 UID: 0 PID: 5847 Comm: syz.4.9639 Not tainted 6.16.0-rc3-syzkaller-00044-g7595b66ae9de #0 PREEMPT(full) [ 1590.064389][ T5847] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1590.064397][ T5847] Call Trace: [ 1590.064402][ T5847] [ 1590.064407][ T5847] dump_stack_lvl+0x16c/0x1f0 [ 1590.064428][ T5847] should_fail_ex+0x512/0x640 [ 1590.064444][ T5847] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 1590.064462][ T5847] should_failslab+0xc2/0x120 [ 1590.064473][ T5847] __kmalloc_cache_noprof+0x6a/0x3e0 [ 1590.064488][ T5847] ? net_generic+0xf4/0x2a0 [ 1590.064499][ T5847] ? nf_tables_newtable+0xd67/0x1b40 [ 1590.064516][ T5847] nf_tables_newtable+0xd67/0x1b40 [ 1590.064532][ T5847] ? __pfx___nla_validate_parse+0x10/0x10 [ 1590.064545][ T5847] ? __pfx_nf_tables_newtable+0x10/0x10 [ 1590.064581][ T5847] ? __nla_parse+0x40/0x60 [ 1590.064595][ T5847] nfnetlink_rcv_batch+0x18ed/0x2330 [ 1590.064618][ T5847] ? __pfx_nfnetlink_rcv_batch+0x10/0x10 [ 1590.064636][ T5847] ? kmem_cache_alloc_node_noprof+0x1d5/0x3b0 [ 1590.064652][ T5847] ? kmalloc_reserve+0x18b/0x2c0 [ 1590.064667][ T5847] ? __alloc_skb+0x166/0x380 [ 1590.064682][ T5847] ? netlink_alloc_large_skb+0x69/0x130 [ 1590.064694][ T5847] ? netlink_sendmsg+0x6a1/0xdd0 [ 1590.064728][ T5847] ? __nla_parse+0x40/0x60 [ 1590.064741][ T5847] nfnetlink_rcv+0x3c1/0x430 [ 1590.064755][ T5847] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 1590.064770][ T5847] ? is_vmalloc_addr+0x86/0xa0 [ 1590.064789][ T5847] netlink_unicast+0x53a/0x7f0 [ 1590.064803][ T5847] ? __pfx_netlink_unicast+0x10/0x10 [ 1590.064819][ T5847] netlink_sendmsg+0x8d1/0xdd0 [ 1590.064834][ T5847] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1590.064847][ T5847] ? __import_iovec+0x1dd/0x650 [ 1590.064869][ T5847] ____sys_sendmsg+0xa98/0xc70 [ 1590.064885][ T5847] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1590.064897][ T5847] ? get_compat_msghdr+0x11a/0x170 [ 1590.064922][ T5847] ___sys_sendmsg+0x134/0x1d0 [ 1590.064940][ T5847] ? __pfx____sys_sendmsg+0x10/0x10 [ 1590.064965][ T5847] ? find_held_lock+0x2b/0x80 [ 1590.064987][ T5847] __sys_sendmsg+0x16d/0x220 [ 1590.065005][ T5847] ? __pfx___sys_sendmsg+0x10/0x10 [ 1590.065029][ T5847] ? rcu_is_watching+0x12/0xc0 [ 1590.065043][ T5847] __do_fast_syscall_32+0x7c/0x3a0 [ 1590.065062][ T5847] do_fast_syscall_32+0x32/0x80 [ 1590.065079][ T5847] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1590.065094][ T5847] RIP: 0023:0xf7f35579 [ 1590.065104][ T5847] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1590.065115][ T5847] RSP: 002b:00000000f505655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 1590.065126][ T5847] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800000c0 [ 1590.065133][ T5847] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1590.065140][ T5847] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1590.065146][ T5847] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1590.065153][ T5847] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1590.065168][ T5847] [ 1590.215647][ T5835] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 1590.220778][ T5835] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1590.251927][ T5853] dummy0: entered allmulticast mode [ 1590.302227][ T5852] dummy0: left allmulticast mode [ 1590.408451][ T839] usb 11-1: new high-speed USB device number 8 using dummy_hcd [ 1590.574891][ T839] usb 11-1: config 111 has an invalid descriptor of length 74, skipping remainder of the config [ 1590.579815][ T839] usb 11-1: config 111 has 0 interfaces, different from the descriptor's value: 9 [ 1590.588639][ T839] usb 11-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 1590.592165][ T839] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1590.594907][ T839] usb 11-1: Product: syz [ 1590.596448][ T839] usb 11-1: Manufacturer: syz [ 1590.598364][ T839] usb 11-1: SerialNumber: syz [ 1590.811871][ T839] usb 11-1: USB disconnect, device number 8 [ 1591.771373][ T5885] input: syz1 as /devices/virtual/input/input82 [ 1592.486700][ T5900] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9654'. [ 1592.490015][ T5900] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9654'. [ 1592.541523][ T5900] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9654'. [ 1592.549882][ T5900] macvlan0: entered promiscuous mode [ 1592.552045][ T5900] macsec0: entered promiscuous mode [ 1592.596623][ T5905] input: syz0 as /devices/virtual/input/input83 [ 1592.602431][ T5905] netlink: 'syz.4.9655': attribute type 1 has an invalid length. [ 1592.605036][ T5905] netlink: 224 bytes leftover after parsing attributes in process `syz.4.9655'. [ 1592.802068][ T5912] FAULT_INJECTION: forcing a failure. [ 1592.802068][ T5912] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1592.811459][ T5912] CPU: 3 UID: 0 PID: 5912 Comm: syz.6.9657 Not tainted 6.16.0-rc3-syzkaller-00044-g7595b66ae9de #0 PREEMPT(full) [ 1592.811486][ T5912] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1592.811497][ T5912] Call Trace: [ 1592.811504][ T5912] [ 1592.811512][ T5912] dump_stack_lvl+0x16c/0x1f0 [ 1592.811543][ T5912] should_fail_ex+0x512/0x640 [ 1592.811571][ T5912] _copy_from_iter+0x29f/0x16f0 [ 1592.811602][ T5912] ? __alloc_skb+0x200/0x380 [ 1592.811628][ T5912] ? __pfx__copy_from_iter+0x10/0x10 [ 1592.811663][ T5912] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 1592.811691][ T5912] netlink_sendmsg+0x829/0xdd0 [ 1592.811714][ T5912] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1592.811734][ T5912] ? __import_iovec+0x1dd/0x650 [ 1592.811765][ T5912] ____sys_sendmsg+0xa98/0xc70 [ 1592.811788][ T5912] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1592.811807][ T5912] ? get_compat_msghdr+0x11a/0x170 [ 1592.811846][ T5912] ___sys_sendmsg+0x134/0x1d0 [ 1592.811875][ T5912] ? __pfx____sys_sendmsg+0x10/0x10 [ 1592.811914][ T5912] ? find_held_lock+0x2b/0x80 [ 1592.811949][ T5912] __sys_sendmsg+0x16d/0x220 [ 1592.811975][ T5912] ? __pfx___sys_sendmsg+0x10/0x10 [ 1592.812012][ T5912] ? rcu_is_watching+0x12/0xc0 [ 1592.812035][ T5912] __do_fast_syscall_32+0x7c/0x3a0 [ 1592.812064][ T5912] do_fast_syscall_32+0x32/0x80 [ 1592.812091][ T5912] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1592.812140][ T5912] RIP: 0023:0xf7f16579 [ 1592.812155][ T5912] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1592.812171][ T5912] RSP: 002b:00000000f503655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 1592.812189][ T5912] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000280 [ 1592.812201][ T5912] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1592.812211][ T5912] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1592.812221][ T5912] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1592.812232][ T5912] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1592.812256][ T5912] [ 1592.896444][ C3] vkms_vblank_simulate: vblank timer overrun [ 1593.038456][ T2909] usb 9-1: new high-speed USB device number 52 using dummy_hcd [ 1593.190223][ T2909] usb 9-1: config 111 has an invalid descriptor of length 74, skipping remainder of the config [ 1593.195109][ T2909] usb 9-1: config 111 has 0 interfaces, different from the descriptor's value: 9 [ 1593.201540][ T2909] usb 9-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 1593.205535][ T2909] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1593.216375][ T2909] usb 9-1: Product: syz [ 1593.219008][ T2909] usb 9-1: Manufacturer: syz [ 1593.221019][ T2909] usb 9-1: SerialNumber: syz [ 1593.432053][ T2909] usb 9-1: USB disconnect, device number 52 [ 1593.671938][ T5835] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 1593.674591][ T5835] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 1593.683181][ T5835] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 1593.686047][ T5835] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 1593.692742][ T5835] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 1593.695362][ T5835] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 1593.702294][ T5835] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 1593.705476][ T5835] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 1593.999800][ T5932] input input84: cannot allocate more than FF_MAX_EFFECTS effects [ 1594.105139][ T5935] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9663'. [ 1594.108544][ T5934] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9663'. [ 1594.113645][ T5934] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9663'. [ 1594.143208][ T5935] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9663'. [ 1594.146360][ T5935] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9663'. [ 1594.254201][ T5938] [ 1594.255129][ T5938] ===================================================== [ 1594.257706][ T5938] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected [ 1594.261341][ T5938] 6.16.0-rc3-syzkaller-00044-g7595b66ae9de #0 Not tainted [ 1594.264218][ T5938] ----------------------------------------------------- [ 1594.266530][ T5938] syz.4.9664/5938 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 1594.271308][ T5938] ffffffff8e20c098 (tasklist_lock){.+.+}-{3:3}, at: send_sigurg+0xed/0xc80 [ 1594.274374][ T5938] [ 1594.274374][ T5938] and this task is already holding: [ 1594.277310][ T5938] ffff88802b2c7d20 (&f_owner->lock){....}-{3:3}, at: send_sigurg+0x5f/0xc80 [ 1594.280790][ T5938] which would create a new lock dependency: [ 1594.283395][ T5938] (&f_owner->lock){....}-{3:3} -> (tasklist_lock){.+.+}-{3:3} [ 1594.286897][ T5938] [ 1594.286897][ T5938] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 1594.291020][ T5938] (&client->buffer_lock){..-.}-{3:3} [ 1594.291052][ T5938] [ 1594.291052][ T5938] ... which became SOFTIRQ-irq-safe at: [ 1594.296239][ T5938] lock_acquire+0x179/0x350 [ 1594.298084][ T5938] _raw_spin_lock+0x2e/0x40 [ 1594.300027][ T5938] evdev_pass_values+0x10e/0x9b0 [ 1594.302167][ T5938] evdev_events+0x1bb/0x390 [ 1594.304064][ T5938] input_pass_values+0x6c4/0x890 [ 1594.306048][ T5938] input_handle_event+0xb29/0x14d0 [ 1594.307896][ T5938] input_event+0x83/0xb0 [ 1594.309324][ T5938] hidinput_hid_event+0xa10/0x2420 [ 1594.310987][ T5938] hid_process_event+0x4b7/0x5e0 [ 1594.312610][ T5938] hid_report_raw_event+0xa0a/0x1290 [ 1594.314353][ T5938] __hid_input_report.constprop.0+0x33f/0x450 [ 1594.316386][ T5938] hid_irq_in+0x35e/0x870 [ 1594.317850][ T5938] __usb_hcd_giveback_urb+0x38d/0x6e0 [ 1594.319943][ T5938] usb_hcd_giveback_urb+0x39b/0x450 [ 1594.322555][ T5938] dummy_timer+0x180e/0x3a20 [ 1594.324794][ T5938] __hrtimer_run_queues+0x202/0xad0 [ 1594.326920][ T5938] hrtimer_run_softirq+0x17d/0x350 [ 1594.329152][ T5938] handle_softirqs+0x216/0x8e0 [ 1594.331198][ T5938] __irq_exit_rcu+0x109/0x170 [ 1594.333119][ T5938] irq_exit_rcu+0x9/0x30 [ 1594.334844][ T5938] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 1594.337112][ T5938] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1594.339459][ T5938] pv_native_safe_halt+0xf/0x20 [ 1594.341164][ T5938] default_idle+0x13/0x20 [ 1594.342617][ T5938] default_idle_call+0x6d/0xb0 [ 1594.344536][ T5938] do_idle+0x391/0x510 [ 1594.346118][ T5938] cpu_startup_entry+0x4f/0x60 [ 1594.348010][ T5938] start_secondary+0x21d/0x2b0 [ 1594.349530][ T5938] common_startup_64+0x13e/0x148 [ 1594.351066][ T5938] [ 1594.351066][ T5938] to a SOFTIRQ-irq-unsafe lock: [ 1594.353278][ T5938] (tasklist_lock){.+.+}-{3:3} [ 1594.353302][ T5938] [ 1594.353302][ T5938] ... which became SOFTIRQ-irq-unsafe at: [ 1594.357311][ T5938] ... [ 1594.357316][ T5938] lock_acquire+0x179/0x350 [ 1594.359706][ T5938] _raw_read_lock+0x5f/0x70 [ 1594.361225][ T5938] __do_wait+0x105/0x890 [ 1594.362602][ T5938] do_wait+0x21e/0x5a0 [ 1594.364042][ T5938] kernel_wait+0x9f/0x160 [ 1594.365532][ T5938] call_usermodehelper_exec_work+0xf1/0x170 [ 1594.367454][ T5938] process_one_work+0x9cc/0x1b70 [ 1594.369136][ T5938] worker_thread+0x6c8/0xf10 [ 1594.370642][ T5938] kthread+0x3c5/0x780 [ 1594.371936][ T5938] ret_from_fork+0x5d4/0x6f0 [ 1594.373675][ T5938] ret_from_fork_asm+0x1a/0x30 [ 1594.375340][ T5938] [ 1594.375340][ T5938] other info that might help us debug this: [ 1594.375340][ T5938] [ 1594.378470][ T5938] Chain exists of: [ 1594.378470][ T5938] &client->buffer_lock --> &f_owner->lock --> tasklist_lock [ 1594.378470][ T5938] [ 1594.382943][ T5938] Possible interrupt unsafe locking scenario: [ 1594.382943][ T5938] [ 1594.385812][ T5938] CPU0 CPU1 [ 1594.387509][ T5938] ---- ---- [ 1594.389237][ T5938] lock(tasklist_lock); [ 1594.390705][ T5938] local_irq_disable(); [ 1594.392763][ T5938] lock(&client->buffer_lock); [ 1594.395086][ T5938] lock(&f_owner->lock); [ 1594.397310][ T5938] [ 1594.398464][ T5938] lock(&client->buffer_lock); [ 1594.400001][ T5938] [ 1594.400001][ T5938] *** DEADLOCK *** [ 1594.400001][ T5938] [ 1594.402472][ T5938] 2 locks held by syz.4.9664/5938: [ 1594.404059][ T5938] #0: ffff888023a9fa40 (&u->lock){+.+.}-{3:3}, at: unix_stream_sendmsg+0xc7b/0x11d0 [ 1594.407129][ T5938] #1: ffff88802b2c7d20 (&f_owner->lock){....}-{3:3}, at: send_sigurg+0x5f/0xc80 [ 1594.410666][ T5938] [ 1594.410666][ T5938] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 1594.414081][ T5938] -> (&client->buffer_lock){..-.}-{3:3} { [ 1594.415983][ T5938] IN-SOFTIRQ-W at: [ 1594.417301][ T5938] lock_acquire+0x179/0x350 [ 1594.419413][ T5938] _raw_spin_lock+0x2e/0x40 [ 1594.421619][ T5938] evdev_pass_values+0x10e/0x9b0 [ 1594.423932][ T5938] evdev_events+0x1bb/0x390 [ 1594.425884][ T5938] input_pass_values+0x6c4/0x890 [ 1594.427971][ T5938] input_handle_event+0xb29/0x14d0 [ 1594.430136][ T5938] input_event+0x83/0xb0 [ 1594.432121][ T5938] hidinput_hid_event+0xa10/0x2420 [ 1594.434531][ T5938] hid_process_event+0x4b7/0x5e0 [ 1594.436779][ T5938] hid_report_raw_event+0xa0a/0x1290 [ 1594.439030][ T5938] __hid_input_report.constprop.0+0x33f/0x450 [ 1594.441868][ T5938] hid_irq_in+0x35e/0x870 [ 1594.444143][ T5938] __usb_hcd_giveback_urb+0x38d/0x6e0 [ 1594.446569][ T5938] usb_hcd_giveback_urb+0x39b/0x450 [ 1594.448957][ T5938] dummy_timer+0x180e/0x3a20 [ 1594.451047][ T5938] __hrtimer_run_queues+0x202/0xad0 [ 1594.453393][ T5938] hrtimer_run_softirq+0x17d/0x350 [ 1594.455888][ T5938] handle_softirqs+0x216/0x8e0 [ 1594.458425][ T5938] __irq_exit_rcu+0x109/0x170 [ 1594.460650][ T5938] irq_exit_rcu+0x9/0x30 [ 1594.462556][ T5938] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 1594.464898][ T5938] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1594.467350][ T5938] pv_native_safe_halt+0xf/0x20 [ 1594.469515][ T5938] default_idle+0x13/0x20 [ 1594.471526][ T5938] default_idle_call+0x6d/0xb0 [ 1594.473877][ T5938] do_idle+0x391/0x510 [ 1594.475907][ T5938] cpu_startup_entry+0x4f/0x60 [ 1594.478262][ T5938] start_secondary+0x21d/0x2b0 [ 1594.480943][ T5938] common_startup_64+0x13e/0x148 [ 1594.483127][ T5938] INITIAL USE at: [ 1594.484391][ T5938] lock_acquire+0x179/0x350 [ 1594.486363][ T5938] _raw_spin_lock+0x2e/0x40 [ 1594.488444][ T5938] evdev_handle_get_val+0x66/0x600 [ 1594.490946][ T5938] evdev_do_ioctl+0x7ac/0x1b30 [ 1594.492704][T14903] IPVS: starting estimator thread 0... [ 1594.493341][ T5938] evdev_ioctl_compat+0x16f/0x1a0 [ 1594.497376][ T5938] __ia32_compat_sys_ioctl+0x23f/0x370 [ 1594.499685][ T5938] __do_fast_syscall_32+0x7c/0x3a0 [ 1594.501848][ T5938] do_fast_syscall_32+0x32/0x80 [ 1594.503927][ T5938] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1594.506421][ T5938] } [ 1594.507319][ T5938] ... key at: [] __key.1+0x0/0x40 [ 1594.509723][ T5938] -> (&new->fa_lock){....}-{3:3} { [ 1594.511465][ T5938] INITIAL USE at: [ 1594.512911][ T5938] lock_acquire+0x179/0x350 [ 1594.515168][ T5938] _raw_write_lock_irq+0x36/0x50 [ 1594.517577][ T5938] fasync_remove_entry+0xb2/0x1e0 [ 1594.519680][ T5938] fasync_helper+0xaf/0xd0 [ 1594.521594][ T5938] lease_modify+0x232/0x500 [ 1594.523533][ T5938] locks_remove_file+0x29e/0x5c0 [ 1594.525625][ T5938] __fput+0x351/0xb70 [ 1594.527415][ T5938] task_work_run+0x14d/0x240 [ 1594.529445][ T5938] exit_to_user_mode_loop+0xeb/0x110 [ 1594.531611][ T5938] __do_fast_syscall_32+0x2ac/0x3a0 [ 1594.533862][ T5938] do_fast_syscall_32+0x32/0x80 [ 1594.536145][ T5938] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1594.538927][ T5938] INITIAL READ USE at: [ 1594.540422][ T5938] lock_acquire+0x179/0x350 [ 1594.542488][ T5938] _raw_read_lock_irqsave+0x74/0x90 [ 1594.544813][ T5938] kill_fasync+0x138/0x510 [ 1594.546835][ T5938] lease_break_callback+0x23/0x30 [ 1594.549100][ T5938] __break_lease+0x674/0x1810 [ 1594.551185][ T5938] do_dentry_open+0x6e1/0x1c10 [ 1594.553489][ T5938] vfs_open+0x82/0x3f0 [ 1594.555596][ T5938] path_openat+0x1de4/0x2cb0 [ 1594.558004][ T5938] do_filp_open+0x20b/0x470 [ 1594.560176][ T5938] do_sys_openat2+0x11b/0x1d0 [ 1594.562285][ T5938] __ia32_sys_creat+0xcb/0x120 [ 1594.564404][ T5938] __do_fast_syscall_32+0x7c/0x3a0 [ 1594.566700][ T5938] do_fast_syscall_32+0x32/0x80 [ 1594.568963][ T5938] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1594.571637][ T5938] } [ 1594.572522][ T5938] ... key at: [] __key.0+0x0/0x40 [ 1594.575049][ T5938] ... acquired at: [ 1594.576509][ T5938] _raw_read_lock_irqsave+0x74/0x90 [ 1594.578490][ T5938] kill_fasync+0x138/0x510 [ 1594.580050][ T5938] evdev_pass_values+0x619/0x9b0 [ 1594.581784][ T5938] evdev_events+0x1bb/0x390 [ 1594.583243][ T5938] input_pass_values+0x6c4/0x890 [ 1594.584898][ T5938] input_handle_event+0xf00/0x14d0 [ 1594.586590][ T5938] input_inject_event+0x1cd/0x390 [ 1594.588271][ T5938] evdev_write+0x2e1/0x440 [ 1594.589703][ T5938] vfs_write+0x29d/0x1150 [ 1594.591085][ T5938] ksys_write+0x1f8/0x250 [ 1594.592469][ T5938] __do_fast_syscall_32+0x7c/0x3a0 [ 1594.594164][ T5938] do_fast_syscall_32+0x32/0x80 [ 1594.595929][ T5938] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1594.598198][ T5938] [ 1594.599237][ T5938] -> (&f_owner->lock){....}-{3:3} { [ 1594.601482][ T5938] INITIAL USE at: [ 1594.602963][ T5938] lock_acquire+0x179/0x350 [ 1594.605089][ T5938] _raw_write_lock_irq+0x36/0x50 [ 1594.607093][ T5938] __f_setown+0x61/0x3c0 [ 1594.608905][ T5938] fcntl_dirnotify+0x78f/0xb50 [ 1594.610856][ T5938] do_fcntl+0xe62/0x15a0 [ 1594.612701][ T5938] do_compat_fcntl64+0x367/0x710 [ 1594.614778][ T5938] __do_fast_syscall_32+0x7c/0x3a0 [ 1594.616848][ T5938] do_fast_syscall_32+0x32/0x80 [ 1594.618845][ T5938] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1594.621637][ T5938] INITIAL READ USE at: [ 1594.623211][ T5938] lock_acquire+0x179/0x350 [ 1594.625509][ T5938] _raw_read_lock_irqsave+0x74/0x90 [ 1594.628021][ T5941] IPVS: using max 55 ests per chain, 132000 per kthread [ 1594.628115][ T5938] send_sigio+0x31/0x3e0 [ 1594.628138][ T5938] kill_fasync+0x214/0x510 [ 1594.628150][ T5938] lease_break_callback+0x23/0x30 [ 1594.628170][ T5938] __break_lease+0x674/0x1810 [ 1594.639637][ T5938] do_dentry_open+0x6e1/0x1c10 [ 1594.641807][ T5938] vfs_open+0x82/0x3f0 [ 1594.643694][ T5938] path_openat+0x1de4/0x2cb0 [ 1594.646024][ T5938] do_filp_open+0x20b/0x470 [ 1594.648429][ T5938] do_sys_openat2+0x11b/0x1d0 [ 1594.650799][ T5938] __ia32_sys_creat+0xcb/0x120 [ 1594.652852][ T5938] __do_fast_syscall_32+0x7c/0x3a0 [ 1594.655035][ T5938] do_fast_syscall_32+0x32/0x80 [ 1594.657179][ T5938] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1594.659849][ T5938] } [ 1594.660730][ T5938] ... key at: [] __key.1+0x0/0x40 [ 1594.663000][ T5938] ... acquired at: [ 1594.664244][ T5938] _raw_read_lock_irqsave+0x74/0x90 [ 1594.666032][ T5938] send_sigio+0x31/0x3e0 [ 1594.667513][ T5938] kill_fasync+0x214/0x510 [ 1594.669165][ T5938] lease_break_callback+0x23/0x30 [ 1594.670766][ T5938] __break_lease+0x674/0x1810 [ 1594.672281][ T5938] do_dentry_open+0x6e1/0x1c10 [ 1594.673814][ T5938] vfs_open+0x82/0x3f0 [ 1594.675151][ T5938] path_openat+0x1de4/0x2cb0 [ 1594.676859][ T5938] do_filp_open+0x20b/0x470 [ 1594.678536][ T5938] do_sys_openat2+0x11b/0x1d0 [ 1594.680336][ T5938] __ia32_sys_creat+0xcb/0x120 [ 1594.682065][ T5938] __do_fast_syscall_32+0x7c/0x3a0 [ 1594.684066][ T5938] do_fast_syscall_32+0x32/0x80 [ 1594.685919][ T5938] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1594.688081][ T5938] [ 1594.688847][ T5938] [ 1594.688847][ T5938] the dependencies between the lock to be acquired [ 1594.688854][ T5938] and SOFTIRQ-irq-unsafe lock: [ 1594.693354][ T5938] -> (tasklist_lock){.+.+}-{3:3} { [ 1594.695142][ T5938] HARDIRQ-ON-R at: [ 1594.696570][ T5938] lock_acquire+0x179/0x350 [ 1594.698638][ T5938] _raw_read_lock+0x5f/0x70 [ 1594.700533][ T5938] __do_wait+0x105/0x890 [ 1594.702362][ T5938] do_wait+0x21e/0x5a0 [ 1594.704378][ T5938] kernel_wait+0x9f/0x160 [ 1594.706374][ T5938] call_usermodehelper_exec_work+0xf1/0x170 [ 1594.708885][ T5938] process_one_work+0x9cc/0x1b70 [ 1594.710937][ T5938] worker_thread+0x6c8/0xf10 [ 1594.713036][ T5938] kthread+0x3c5/0x780 [ 1594.715239][ T5938] ret_from_fork+0x5d4/0x6f0 [ 1594.717650][ T5938] ret_from_fork_asm+0x1a/0x30 [ 1594.720057][ T5938] SOFTIRQ-ON-R at: [ 1594.721388][ T5938] lock_acquire+0x179/0x350 [ 1594.723366][ T5938] _raw_read_lock+0x5f/0x70 [ 1594.725365][ T5938] __do_wait+0x105/0x890 [ 1594.727452][ T5938] do_wait+0x21e/0x5a0 [ 1594.729406][ T5938] kernel_wait+0x9f/0x160 [ 1594.731385][ T5938] call_usermodehelper_exec_work+0xf1/0x170 [ 1594.733854][ T5938] process_one_work+0x9cc/0x1b70 [ 1594.736114][ T5938] worker_thread+0x6c8/0xf10 [ 1594.738199][ T5938] kthread+0x3c5/0x780 [ 1594.740270][ T5938] ret_from_fork+0x5d4/0x6f0 [ 1594.742686][ T5938] ret_from_fork_asm+0x1a/0x30 [ 1594.745263][ T5938] INITIAL USE at: [ 1594.746691][ T5938] lock_acquire+0x179/0x350 [ 1594.748841][ T5938] _raw_write_lock_irq+0x36/0x50 [ 1594.750914][ T5938] copy_process+0x4caf/0x76a0 [ 1594.752945][ T5938] kernel_clone+0xfc/0x960 [ 1594.754869][ T5938] user_mode_thread+0xc7/0x110 [ 1594.757139][ T5938] rest_init+0x23/0x2b0 [ 1594.759013][ T5938] start_kernel+0x3ee/0x4d0 [ 1594.760988][ T5938] x86_64_start_reservations+0x18/0x30 [ 1594.763239][ T5938] x86_64_start_kernel+0x130/0x190 [ 1594.765568][ T5938] common_startup_64+0x13e/0x148 [ 1594.767726][ T5938] INITIAL READ USE at: [ 1594.769450][ T5938] lock_acquire+0x179/0x350 [ 1594.771857][ T5938] _raw_read_lock+0x5f/0x70 [ 1594.774244][ T5938] __do_wait+0x105/0x890 [ 1594.776270][ T5938] do_wait+0x21e/0x5a0 [ 1594.778156][ T5938] kernel_wait+0x9f/0x160 [ 1594.780076][ T5938] call_usermodehelper_exec_work+0xf1/0x170 [ 1594.782434][ T5938] process_one_work+0x9cc/0x1b70 [ 1594.784621][ T5938] worker_thread+0x6c8/0xf10 [ 1594.786671][ T5938] kthread+0x3c5/0x780 [ 1594.788622][ T5938] ret_from_fork+0x5d4/0x6f0 [ 1594.790990][ T5938] ret_from_fork_asm+0x1a/0x30 [ 1594.793584][ T5938] } [ 1594.794629][ T5938] ... key at: [] tasklist_lock+0x18/0x40 [ 1594.797173][ T5938] ... acquired at: [ 1594.798463][ T5938] lock_acquire+0x179/0x350 [ 1594.799924][ T5938] _raw_read_lock+0x5f/0x70 [ 1594.801426][ T5938] send_sigurg+0xed/0xc80 [ 1594.802954][ T5938] sk_send_sigurg+0x76/0x360 [ 1594.804507][ T5938] unix_stream_sendmsg+0xeb3/0x11d0 [ 1594.806222][ T5938] ____sys_sendmsg+0xa98/0xc70 [ 1594.807783][ T5938] ___sys_sendmsg+0x134/0x1d0 [ 1594.809395][ T5938] __sys_sendmsg+0x16d/0x220 [ 1594.811111][ T5938] __do_fast_syscall_32+0x7c/0x3a0 [ 1594.813011][ T5938] do_fast_syscall_32+0x32/0x80 [ 1594.814722][ T5938] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1594.817110][ T5938] [ 1594.818030][ T5938] [ 1594.818030][ T5938] stack backtrace: [ 1594.820051][ T5938] CPU: 3 UID: 0 PID: 5938 Comm: syz.4.9664 Not tainted 6.16.0-rc3-syzkaller-00044-g7595b66ae9de #0 PREEMPT(full) [ 1594.820067][ T5938] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1594.820074][ T5938] Call Trace: [ 1594.820080][ T5938] [ 1594.820101][ T5938] dump_stack_lvl+0x116/0x1f0 [ 1594.820120][ T5938] check_irq_usage+0x7dc/0x920 [ 1594.820139][ T5938] ? check_path.constprop.0+0x24/0x50 [ 1594.820154][ T5938] ? __lock_acquire+0x1285/0x1c90 [ 1594.820167][ T5938] __lock_acquire+0x1285/0x1c90 [ 1594.820184][ T5938] lock_acquire+0x179/0x350 [ 1594.820198][ T5938] ? send_sigurg+0xed/0xc80 [ 1594.820210][ T5938] ? finish_task_switch.isra.0+0x221/0xc10 [ 1594.820223][ T5938] _raw_read_lock+0x5f/0x70 [ 1594.820238][ T5938] ? send_sigurg+0xed/0xc80 [ 1594.820248][ T5938] send_sigurg+0xed/0xc80 [ 1594.820259][ T5938] ? find_held_lock+0x2b/0x80 [ 1594.820271][ T5938] sk_send_sigurg+0x76/0x360 [ 1594.820290][ T5938] unix_stream_sendmsg+0xeb3/0x11d0 [ 1594.820307][ T5938] ? aa_sk_perm+0x2f4/0xb10 [ 1594.820321][ T5938] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 1594.820336][ T5938] ? __pfx_aa_sk_perm+0x10/0x10 [ 1594.820349][ T5938] ? __import_iovec+0x1dd/0x650 [ 1594.820368][ T5938] ____sys_sendmsg+0xa98/0xc70 [ 1594.820381][ T5938] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1594.820393][ T5938] ? get_compat_msghdr+0x11a/0x170 [ 1594.820411][ T5938] ? __pfx_futex_wake_mark+0x10/0x10 [ 1594.820428][ T5938] ___sys_sendmsg+0x134/0x1d0 [ 1594.820445][ T5938] ? __pfx____sys_sendmsg+0x10/0x10 [ 1594.820464][ T5938] ? find_held_lock+0x2b/0x80 [ 1594.820479][ T5938] __sys_sendmsg+0x16d/0x220 [ 1594.820495][ T5938] ? __pfx___sys_sendmsg+0x10/0x10 [ 1594.820511][ T5938] ? __ia32_sys_futex_time32+0x1d9/0x460 [ 1594.820529][ T5938] ? rcu_is_watching+0x12/0xc0 [ 1594.820541][ T5938] __do_fast_syscall_32+0x7c/0x3a0 [ 1594.820559][ T5938] do_fast_syscall_32+0x32/0x80 [ 1594.820575][ T5938] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1594.820589][ T5938] RIP: 0023:0xf7f35579 [ 1594.820599][ T5938] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1594.820611][ T5938] RSP: 002b:00000000f505655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 1594.820622][ T5938] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000080000300 [ 1594.820629][ T5938] RDX: 0000000000004815 RSI: 0000000000000000 RDI: 0000000000000000 [ 1594.820635][ T5938] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1594.820642][ T5938] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 1594.820648][ T5938] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1594.820658][ T5938] [ 1594.906857][ C3] vkms_vblank_simulate: vblank timer overrun [ 1594.974043][ T5938] loop8: detected capacity change from 0 to 7 [ 1594.976818][ T5938] Dev loop8: unable to read RDB block 7 [ 1594.978982][ T5938] loop8: unable to read partition table [ 1594.980932][ T5938] loop8: partition table beyond EOD, truncated [ 1594.982891][ T5938] loop_reread_partitions: partition scan of loop8 (þ被xü—ŸÑà– ) failed (rc=-5) SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1595.423885][T27423] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1595.427064][T27423] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 1595.551243][T27423] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1595.554575][T27423] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 1595.611744][T27423] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1595.615121][T27423] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 1595.681838][T27423] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1595.685531][T27423] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 1595.796869][T27423] bridge_slave_1: left allmulticast mode [ 1595.799152][T27423] bridge_slave_1: left promiscuous mode [ 1595.801852][T27423] bridge0: port 2(bridge_slave_1) entered disabled state [ 1595.806423][T27423] bridge_slave_0: left allmulticast mode [ 1595.809129][T27423] bridge_slave_0: left promiscuous mode [ 1595.811646][T27423] bridge0: port 1(bridge_slave_0) entered disabled state [ 1595.982401][T27423] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1595.988501][T27423] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1595.993350][T27423] bond0 (unregistering): Released all slaves [ 1596.262186][T27423] hsr_slave_0: left promiscuous mode [ 1596.264748][T27423] hsr_slave_1: left promiscuous mode [ 1596.268060][T27423] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1596.272310][T27423] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1596.276152][T27423] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1596.279589][T27423] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1596.286051][T27423] veth1_macvtap: left promiscuous mode [ 1596.289450][T27423] veth0_macvtap: left promiscuous mode [ 1596.292191][T27423] veth1_vlan: left promiscuous mode [ 1596.807995][T27423] team0 (unregistering): Port device team_slave_1 removed [ 1596.901688][T27423] team0 (unregistering): Port device team_slave_0 removed [ 1597.825169][T27423] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 1597.915394][T27423] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 1597.993763][T27423] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 1598.093155][T27423] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 1598.201096][T27423] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1598.271070][T27423] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1598.311701][T27423] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1598.351375][T27423] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1598.413344][T27423] bridge_slave_1: left allmulticast mode [ 1598.415232][T27423] bridge_slave_1: left promiscuous mode [ 1598.417118][T27423] bridge0: port 2(bridge_slave_1) entered disabled state [ 1598.420423][T27423] bridge_slave_0: left allmulticast mode [ 1598.422307][T27423] bridge_slave_0: left promiscuous mode [ 1598.424199][T27423] bridge0: port 1(bridge_slave_0) entered disabled state [ 1598.823780][T27423] bond0 (unregistering): Released all slaves [ 1598.912640][T27423] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1598.916831][T27423] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1598.920918][T27423] bond0 (unregistering): Released all slaves [ 1599.396839][T27423] hsr_slave_0: left promiscuous mode [ 1599.399696][T27423] hsr_slave_1: left promiscuous mode [ 1599.403604][T27423] hsr_slave_0: left promiscuous mode [ 1599.405817][T27423] hsr_slave_1: left promiscuous mode [ 1599.407974][T27423] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1599.410859][T27423] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1599.413670][T27423] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1599.416199][T27423] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1599.421425][T27423] macsec0: left promiscuous mode [ 1599.423337][T27423] veth1_macvtap: left promiscuous mode [ 1599.425321][T27423] veth0_macvtap: left promiscuous mode [ 1599.427647][T27423] veth1_vlan: left promiscuous mode [ 1602.069759][T27423] team0 (unregistering): Port device team_slave_1 removed [ 1602.165458][T27423] team0 (unregistering): Port device team_slave_0 removed [ 1603.281119][T27423] IPVS: stop unused estimator thread 0... [ 1603.353941][T27423] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 1603.359366][T27423] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1603.401444][T27423] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 1603.405251][T27423] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1603.491578][T27423] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 1603.496174][T27423] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1603.581204][T27423] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 1603.585460][T27423] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1604.120510][T27423] bond0 (unregistering): Released all slaves VM DIAGNOSIS: 10:00:04 Registers: info registers vcpu 0 CPU#0 RAX=00000002000008fd RBX=ffff888027642440 RCX=0000000000000830 RDX=0000000000000002 RSI=00000000000000fd RDI=0000000000000002 RBP=0000000000000008 RSP=ffffc900061075a0 R8 =0000000000000000 R9 =fffffbfff21505aa R10=ffffffff90a82d57 R11=0000000000000000 R12=0000000000000003 R13=1ffff92000c20eb5 R14=0000000000000001 R15=ffffc900061075c8 RIP=ffffffff81692f08 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888097560000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000801145b8 CR3=00000000524e0000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 df43678975cfff00 710cce07a194be40 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 318db9d9a3d16f8a d558566b0d225f1d ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 c1aa63021012ddeb 284be63ed46353b4 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 9e0da3f8dfe5865c 6a5659d8f4433a76 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000050c0 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000040 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 deb500003bb6c5cd 03c6634b03c664bc ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 47d4000053cc0000 2d220000ce0c0000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 8ea6975ea44fa286 8ec1c36f000000cd ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 03c664ce03c66ea4 3be8000003c65790 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 af94f1cede805ea7 13ea47c71160c88b ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f76553b92a8dea06 117e5e9e4cf7b66b ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a54ff53a3c6ef372 bb67ae856a09e667 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5be0cd191f83d9ab 9b05688c510e527f ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=ffff88802b33a400 RBX=dffffc0000000000 RCX=dffffc0000000000 RDX=1ffffffff1be3bb4 RSI=0000000000000000 RDI=ffffffff8df1dda0 RBP=ffffc90003f67f00 RSP=ffffc90003f67d50 R8 =0000000000000000 R9 =fffffbfff21505aa R10=ffffffff90a82d57 R11=0000000000000001 R12=0000000000000000 R13=ffff888028c78000 R14=0000000000000001 R15=ffff88802b23a400 RIP=ffffffff8b7d9886 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888097660000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f73d2024 CR3=00000000524e0000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000001 RBX=ffff88802b541f20 RCX=ffffffff81af76fd RDX=ffff888040ea4880 RSI=0000000000000000 RDI=0000000000000005 RBP=0000000000000001 RSP=ffffc900006df228 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000002c00 R12=dffffc0000000000 R13=0000000000000003 R14=ffffed10056a83e5 R15=ffff88802b43b6c0 RIP=ffffffff81bb8391 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888097760000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f7194d9f CR3=00000000798e6000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2323232323232323 2323232323232323 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffff0000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=000000000000005b RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff855820d5 RDI=ffffffff9b06ca00 RBP=ffffffff9b06c9c0 RSP=ffffc90002daf1e8 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=36392e342e7a7973 R12=0000000000000000 R13=000000000000005b R14=ffffffff9b06c9c0 R15=ffffffff85582070 RIP=ffffffff855820ff RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888097860000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000032919ff8 CR3=00000000798e6000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2323232323232323 2323232323232323 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffff000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000