last executing test programs: 9m16.965346197s ago: executing program 0 (id=1107): sendmmsg$unix(0xffffffffffffffff, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000003c0)="da0c9af54a7b98b9f8b7e708022b92de7c", 0x11}], 0x1, 0x0, 0x0, 0x40044}}], 0x1, 0x4) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @broadcast}) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000003c0)={0x0, {0x2, 0x4e20, @rand_addr=0x64010100}, {0x2, 0x4a24, @remote}, {0x2, 0x4e25, @multicast2}, 0x204, 0x0, 0x0, 0x0, 0x2008, 0x0, 0x200003, 0x2, 0x2}) write$tun(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="080000fa"], 0xdc) 9m16.690635773s ago: executing program 0 (id=1112): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='bridge0\x00', 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @broadcast}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000140), 0x4) 9m16.630738333s ago: executing program 0 (id=1114): mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', 0x2d) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x118d7, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000000)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0x8, 0x9, 0x8, 0x2, 0x6}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x22) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x1, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x50) kexec_load(0x0, 0x1, &(0x7f0000000000)=[{0x0, 0x0, 0x7ffdd000}], 0xa0000) unshare(0x62040200) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r3, 0x4018f50b, &(0x7f0000000100)={0xfffffffb, 0x0, 0x40}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r5, 0x0, 0x80, &(0x7f00000001c0)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x40000000, 0x0, 0x0, 0x0, 0x0, 0x80000100], 0x0, 0x0, &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffc}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}]}, 0xe0) sendmsg$nl_route(r4, 0x0, 0x4000000) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1}) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r6, 0x84, 0x81, &(0x7f0000000280)="20f6c734e3d81107", 0x8) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB], 0x60}}, 0x0) sendmsg$IPSET_CMD_FLUSH(r7, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000280)={0x0}}, 0x40) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB="5c000000090601080000000000000000070000000900020073797a31000000000500010007000000340007801800018014000240fe8000000000000000000000000000bb060004400e1f00cd050007008800000006000540"], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r9, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 9m15.571245944s ago: executing program 0 (id=1131): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount$bind(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x84000, 0x0) 9m15.481876103s ago: executing program 0 (id=1134): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000440)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000040)=0x2fff) 9m15.139660763s ago: executing program 0 (id=1139): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x200a4800) recvmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4135, 0x1027}], 0x1}, 0x42) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a1d010000000000000000020000000900010073797a3000000000080002400000000098"], 0xfc}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0x8000, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000001, 0xfffffffffffffffb}, {0x3, 0x0, 0x200000000000000}, 0x800}}, 0xb8}}, 0x2c000010) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffffffffffffba, &(0x7f0000000080)=[{&(0x7f0000000500)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00b17d10cc40a886ddb96648e582003a9644fb02faf23884372d474d8235b094550aff7f", 0x33fe0}], 0x1}, 0x8000) 9m15.039424447s ago: executing program 32 (id=1139): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x200a4800) recvmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4135, 0x1027}], 0x1}, 0x42) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a1d010000000000000000020000000900010073797a3000000000080002400000000098"], 0xfc}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0x8000, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000001, 0xfffffffffffffffb}, {0x3, 0x0, 0x200000000000000}, 0x800}}, 0xb8}}, 0x2c000010) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffffffffffffba, &(0x7f0000000080)=[{&(0x7f0000000500)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00b17d10cc40a886ddb96648e582003a9644fb02faf23884372d474d8235b094550aff7f", 0x33fe0}], 0x1}, 0x8000) 8m29.572532796s ago: executing program 1 (id=1422): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000100)={0x30, 0x5, 0x0, {0x0, 0x1}}, 0x30) read$FUSE(r0, &(0x7f0000004200)={0x2020, 0x0, 0x0}, 0x2020) umount2(&(0x7f0000000000)='./file0\x00', 0x0) write$FUSE_NOTIFY_INVAL_INODE(r0, &(0x7f00000000c0)={0x28, 0x2, 0x0, {0x5, 0x100, 0xfffffffffffffffd}}, 0x28) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0x440, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x20, 0x80}}, 0x50) 8m29.366187751s ago: executing program 1 (id=1426): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x20000004, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000280)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x2}, {0xa, 0x4e23, 0x7, @remote, 0x3}, r1, 0x7}}, 0x48) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000540)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000100)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r2, &(0x7f0000000140)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0x8, @loopback, 0x2}, r3}}, 0x30) 8m29.282623579s ago: executing program 1 (id=1427): setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0b0000001f0000000200000022bf000001000000", @ANYRES32, @ANYBLOB="08000000dd0000000000000000c8d05300000000", @ANYRES32, @ANYBLOB='\x00'/28], 0x50) socket$kcm(0x21, 0x2, 0xa) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000400), 0x401, r3, 0x0, 0xa002a0}, 0x38) openat$sequencer(0xffffff9c, &(0x7f0000001bc0), 0x88302, 0x0) openat$binfmt(0xffffff9c, 0x0, 0x41, 0x1ff) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000300)='&\x00', 0x0, 0xffffffffffffffff) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1, 0x8}}}]}, 0x38}}, 0x0) 8m26.082676872s ago: executing program 1 (id=1437): unshare(0x2040400) r0 = getpgid(0x0) r1 = syz_pidfd_open(r0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) pidfd_send_signal(r1, 0x11, 0x0, 0x4) 8m26.070315846s ago: executing program 1 (id=1438): syz_emit_ethernet(0xa1, &(0x7f00000002c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa5086dd60000000006b3afffe8000000000000000000000000000bbfe8000000000000000000000000000aa86"], 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f00000000c0)={0xcf45, 0x1, 0xffff, 0x9dff, 0x7, "8003e3ffff072000"}) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x3, 0x7fff, 0x16, "b0bf2ebb48c849ac0000000003000018bfff40"}) r1 = syz_open_pts(r0, 0x200) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0xff) 8m25.891485426s ago: executing program 3 (id=1440): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000001180)=@newqdisc={0x5c, 0x24, 0x4ee4e6a52ff56541, 0x70b924, 0x25dfdc01, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xb}, {0xb, 0xd}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x8, 0x2, 0xffffffff}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xf, 0x5, 0x4, 0x101, 0x2, 0x1000, 0x350b80}}, {0x4}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4000) 8m25.781224288s ago: executing program 3 (id=1443): setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0b0000001f0000000200000022bf000001000000", @ANYRES32, @ANYBLOB="08000000dd0000000000000000c8d05300000000", @ANYRES32, @ANYBLOB='\x00'/28], 0x50) socket$kcm(0x21, 0x2, 0xa) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000400), 0x401, r3, 0x0, 0xa002a0}, 0x38) openat$sequencer(0xffffff9c, &(0x7f0000001bc0), 0x88302, 0x0) openat$binfmt(0xffffff9c, 0x0, 0x41, 0x1ff) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x2c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14080, 0x10000}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000300)='&\x00', 0x0, 0xffffffffffffffff) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1, 0x8}}}]}, 0x38}}, 0x0) 8m25.412465026s ago: executing program 1 (id=1445): ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r0 = openat$kvm(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000780)={[0xd45, 0x1000009, 0xfffffffffffffffb, 0x10000000, 0x10000, 0x3, 0x4003004c2, 0xe, 0x9, 0xfffffffffffffffe, 0x1, 0x0, 0x3, 0x0, 0x9, 0x8d], 0x100000, 0x4880}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 8m24.390955691s ago: executing program 33 (id=1445): ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r0 = openat$kvm(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000780)={[0xd45, 0x1000009, 0xfffffffffffffffb, 0x10000000, 0x10000, 0x3, 0x4003004c2, 0xe, 0x9, 0xfffffffffffffffe, 0x1, 0x0, 0x3, 0x0, 0x9, 0x8d], 0x100000, 0x4880}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 8m24.160415953s ago: executing program 3 (id=1448): setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0b0000001f0000000200000022bf000001000000", @ANYRES32, @ANYBLOB="08000000dd0000000000000000c8d05300000000", @ANYRES32, @ANYBLOB='\x00'/28], 0x50) socket$kcm(0x21, 0x2, 0xa) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000400), 0x401, r3, 0x0, 0xa002a0}, 0x38) openat$sequencer(0xffffff9c, &(0x7f0000001bc0), 0x88302, 0x0) openat$binfmt(0xffffff9c, 0x0, 0x41, 0x1ff) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x2c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14080, 0x10000}, [@IFLA_XDP={0x4}, @IFLA_GROUP={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) r5 = fsopen(&(0x7f00000001c0)='omfs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r5, 0x5, &(0x7f0000000300)='&\x00', 0x0, 0xffffffffffffffff) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1, 0x8}}}]}, 0x38}}, 0x0) 8m23.111327501s ago: executing program 3 (id=1461): r0 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00') r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0xa0003009}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x22) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000600)='./file0\x00', &(0x7f00000001c0)='./file0/../file0\x00') 8m22.990805195s ago: executing program 3 (id=1462): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') rmdir(&(0x7f0000000380)='./file0/../file0\x00') symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') 8m22.652061027s ago: executing program 3 (id=1464): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x2, @empty, 0xcac2d78a}}, 0x0, 0x0, 0x43, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da55a02ddbe2665dca1029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x38) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) r3 = openat$ocfs2_control(0xffffff9c, &(0x7f0000000280), 0x2, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000600)={@ifindex, 0x13, 0x1, 0xf, &(0x7f0000000440)=[0x0], 0x1, 0x0, &(0x7f0000000480)=[0x0], &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x22004804}, 0x40080c0) ioctl$XFS_IOC_PATH_TO_HANDLE(r2, 0xc01c5869, &(0x7f0000000780)={r2, &(0x7f0000000680)='tls', 0x201, &(0x7f00000006c0)={@align, {0x100, 0x2, 0x8, 0xffffffffffffff00}}, 0x7, &(0x7f0000000700), &(0x7f0000000740)=0x2f7}) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000640)={@ifindex=r5, r3, 0xfe12bcd38ec9e455, 0x4, 0x0, @void, @value=r6, @void, @void, r4}, 0x20) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r7, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r2, 0xc06864ce, &(0x7f00000004c0)={r8, 0x0, 0x4, 0x0, 0x2, [0x0], [0x0, 0x0, 0x0, 0x10000], [0x0, 0x0, 0xfffffffc], [0x1]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0xb5}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000080)={r9, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r10}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000100)={r9, 0x80000}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r10}) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) ioctl$int_in(r0, 0x5421, &(0x7f0000000140)=0x1) writev(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) ioctl$XFS_IOC_RTGROUP_GEOMETRY(r0, 0xc0805841, &(0x7f0000000200)={0x8, 0x10000, 0x7, 0x2, 0x4}) r11 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$setlease(r11, 0x403, 0x0) r12 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r12, 0xffffffffffffffff, 0x0) 8m22.592382553s ago: executing program 34 (id=1464): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x2, @empty, 0xcac2d78a}}, 0x0, 0x0, 0x43, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da55a02ddbe2665dca1029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x38) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) r3 = openat$ocfs2_control(0xffffff9c, &(0x7f0000000280), 0x2, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000600)={@ifindex, 0x13, 0x1, 0xf, &(0x7f0000000440)=[0x0], 0x1, 0x0, &(0x7f0000000480)=[0x0], &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x22004804}, 0x40080c0) ioctl$XFS_IOC_PATH_TO_HANDLE(r2, 0xc01c5869, &(0x7f0000000780)={r2, &(0x7f0000000680)='tls', 0x201, &(0x7f00000006c0)={@align, {0x100, 0x2, 0x8, 0xffffffffffffff00}}, 0x7, &(0x7f0000000700), &(0x7f0000000740)=0x2f7}) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000640)={@ifindex=r5, r3, 0xfe12bcd38ec9e455, 0x4, 0x0, @void, @value=r6, @void, @void, r4}, 0x20) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r7, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r2, 0xc06864ce, &(0x7f00000004c0)={r8, 0x0, 0x4, 0x0, 0x2, [0x0], [0x0, 0x0, 0x0, 0x10000], [0x0, 0x0, 0xfffffffc], [0x1]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0xb5}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000080)={r9, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r10}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000100)={r9, 0x80000}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r10}) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) ioctl$int_in(r0, 0x5421, &(0x7f0000000140)=0x1) writev(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) ioctl$XFS_IOC_RTGROUP_GEOMETRY(r0, 0xc0805841, &(0x7f0000000200)={0x8, 0x10000, 0x7, 0x2, 0x4}) r11 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$setlease(r11, 0x403, 0x0) r12 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r12, 0xffffffffffffffff, 0x0) 16.202619103s ago: executing program 6 (id=3048): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2040, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="01000000120000007f00000001", @ANYRESDEC=r0, @ANYRES8=r0, @ANYRES8=r0], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x6, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x8}, 0x4040800) r5 = socket$inet_icmp(0x2, 0x2, 0x1) r6 = syz_open_dev$media(&(0x7f00000000c0), 0x1, 0x20081) ioctl$MEDIA_IOC_REQUEST_ALLOC(r6, 0x80047c05, &(0x7f0000000080)=0xffffffffffffffff) ioctl$MEDIA_REQUEST_IOC_QUEUE(r7, 0x7c80, 0x0) sendmmsg$inet(r5, &(0x7f0000000c40)=[{{&(0x7f0000000200)={0x2, 0x4e22, @multicast1}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000080)="2a0000f128000000", 0x8}], 0x1}}], 0x1, 0x20000054) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) fanotify_init(0x200, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000000)=ANY=[]) 13.820007733s ago: executing program 2 (id=3051): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x40}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) socket$netlink(0x10, 0x3, 0x15) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, 0x0, 0x481, 0x0) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi0\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, &(0x7f0000000580)={'pcl724\x00', [0x8001, 0x102, 0x1, 0x4, 0x0, 0x1, 0xc, 0x7, 0x100, 0x4, 0x5e, 0x1, 0x8, 0x7ff, 0x8, 0x89, 0x4, 0x5, 0x43, 0xa, 0x89, 0x0, 0xf27, 0x4, 0xc, 0x8, 0x5, 0xfffffff9, 0x8, 0x10000, 0xfffffff4]}) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc2c45512, &(0x7f0000000340)={{0x7, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0xffffffff, 0xffbf, 0x8, 0xfffffffd, 0x80000001, 0x0, 0xfffffffe, 0xfffffffd, 0xfffffffc, 0x0, 0x400006, 0x0, 0x0, 0x0, 0x9, 0x0, 0xfffffffd, 0x9, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x7fffffff, 0x0, 0x0, 0x0, 0x6, 0x0, 0x8000, 0x0, 0x0, 0x0, 0xffffffc7, 0x0, 0x4, 0x0, 0x2, 0x3, 0x0, 0x0, 0x4, 0x0, 0x68, 0x0, 0x20000000, 0x3, 0x7fff, 0x0, 0x800, 0x402, 0x0, 0x8, 0x4, 0x8, 0x0, 0x0, 0x0, 0x7, 0x0, 0x408, 0x0, 0x0, 0x9, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x4, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc]}) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x2, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x2, 0x0, 0x4, 0xe5ce}, 0x1}}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8100}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x24008041}, 0x10000800) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000001480)={{0x1, 0x1, 0x18, r0, {0xee01, 0xee01}}, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}) read$msr(r6, &(0x7f00000023c0)=""/160, 0xa0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newtaction={0x14, 0x30, 0xffff, 0x70bd2d, 0x20000000}, 0x14}}, 0x0) 13.819329537s ago: executing program 6 (id=3052): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2040, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="01000000120000007f00000001", @ANYRESDEC=r0, @ANYRES8=r0, @ANYRES8=r0], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x6, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x8}, 0x4040800) r5 = socket$inet_icmp(0x2, 0x2, 0x1) r6 = syz_open_dev$media(&(0x7f00000000c0), 0x1, 0x20081) ioctl$MEDIA_IOC_REQUEST_ALLOC(r6, 0x80047c05, &(0x7f0000000080)=0xffffffffffffffff) ioctl$MEDIA_REQUEST_IOC_QUEUE(r7, 0x7c80, 0x0) sendmmsg$inet(r5, &(0x7f0000000c40)=[{{&(0x7f0000000200)={0x2, 0x4e22, @multicast1}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000080)="2a0000f128000000", 0x8}], 0x1}}], 0x1, 0x20000054) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) fanotify_init(0x200, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) r8 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r8, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r8, &(0x7f000000b0c0)={0x2020}, 0x2020) 11.486369056s ago: executing program 6 (id=3053): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee7, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r4 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_newnexthop={0x1c, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004880}, 0x0) r6 = openat$binfmt(0xffffffffffffff9c, r4, 0x42, 0x1ff) close(r6) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000d40)=ANY=[@ANYBLOB="030000000a004e230000000cff010000000000000000000000000001f8ffffff0000000000000000000000000000000000000000000000000000000000000000a42970d0a2ee3d8700"/103], 0x210) execveat$binfmt(0xffffffffffffff9c, r4, 0x0, 0x0, 0x0) mount$9p_virtio(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8c, 0x0) r7 = syz_open_dev$sndpcmp(&(0x7f0000001480), 0x0, 0x101000) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r7, 0xc0804124, &(0x7f00000014c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='syzkaller\x00', 0x5}, 0x94) 9.909345039s ago: executing program 2 (id=3056): bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="210000000400000008000000da00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000001100000000000000000000200000000000000000002050000881561ff7d25c65a1120dffdacc219e58674515ad00500000000000000df96bda97aa68a074b5991731f2a4773"], 0x50) r0 = timerfd_create(0x8, 0x80000) timerfd_settime(r0, 0x3, &(0x7f0000000140), 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x10000000}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x24c4436d5a174b6d, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x4004000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$igmp(0x2, 0x3, 0x2) getsockopt$EBT_SO_GET_INFO(r4, 0x0, 0x80, &(0x7f00000003c0)={'broute\x00', 0x0, 0x0, 0x0, [0x61, 0x10000, 0x9c9, 0xf, 0x4, 0x3]}, &(0x7f00000001c0)=0x50) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB], 0x20}}, 0xc010) r5 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000200)) setsockopt$ARPT_SO_SET_REPLACE(r4, 0x0, 0x60, &(0x7f00000008c0)={'filter\x00', 0x7, 0x4, 0x404, 0x0, 0x218, 0x10c, 0x324, 0x324, 0x324, 0x4, &(0x7f0000000280), {[{{@arp={@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, 0xff000330, 0xffffffff, 0x4, 0x0, {@mac, {[0xff, 0x0, 0x0, 0x0, 0xff]}}, {@mac=@local, {[0xff, 0x0, 0xff, 0xff, 0xff, 0xff]}}, 0xfff2, 0x101, 0x79, 0x1, 0x7ff, 0x8, '\x00', 'vcan0\x00', {0xff}, {0xff}, 0x0, 0x4}, 0xbc, 0x10c}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@link_local, @mac=@local, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x8, 0x1}}}, {{@uncond, 0xbc, 0x10c}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@random="07aebe92cc85", @empty, @loopback, @broadcast, 0x8}}}, {{@uncond, 0xbc, 0x10c}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x1, 0x1}}}], {{'\x00', 0xbc, 0xe0}, {0x24}}}}, 0x450) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) set_mempolicy(0x3, &(0x7f0000000040)=0x401, 0x8) read$FUSE(0xffffffffffffffff, 0x0, 0x0) clock_adjtime(0x0, &(0x7f0000000000)={0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdff2, 0x80000000000000, 0x0, 0x0, 0x3b9ac9ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}) timerfd_settime(r0, 0x3, &(0x7f0000000000)={{0x77359400}, {0x77359400}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000300000005"], 0x48) 9.907921362s ago: executing program 6 (id=3057): socket(0x15, 0x5, 0x0) r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x20) socket$inet_sctp(0x2, 0x5, 0x84) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0xc831, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r5 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r6 = openat$binfmt(0xffffffffffffff9c, r5, 0x42, 0x1ff) close(r6) execveat$binfmt(0xffffffffffffff9c, r5, 0x0, 0x0, 0x0) close(0xffffffffffffffff) execveat$binfmt(0xffffffffffffff9c, r5, 0x0, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) r7 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="ae", 0x1, 0xffffffffffffffff) keyctl$read(0x2, r7, &(0x7f00000000c0)=""/4096, 0x1000) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) 9.874391326s ago: executing program 5 (id=3059): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000001400)='(:2\x00}R\xc5\xc7\xb1\xdd\xcd\x84K\xb5\x9c{\t?CB?8u\xd6\xbd\xce|\xe0$4\"\x17\xcb\x1be\xbe\xa2\xe1|\x14\xdd\xc2G\xbd\x12\xdc\xcdQS\xc1\xbb\x9a\x86fF\xae\ar;9\xd6\xe6\x94\'\xce\xef\xd3\x8c\x8b*\x95\x06\xdb\x8e\x94Sm\xb3\xf5\x83J*\xafw\x86Sy\n\x96\xb7U2\x95\x1e\x7f8\xd6\x99\xfd\x0fGJ`\x18\xcb*\xff\t\x88\x01\xa5\xa6#\xfc\xe5\x12\xb4o\xa1\xda\xacy\xb3\xc8\xd0l!\x81\x02\xf5wk\x82V\xa2\x12\xa8M\xb1\xc5\x1fZ\xba\xb5\x1f\x15\x9b\xc5\xef\xc3\xb0\x93n\x90f\xd6\x9d%\xb0k\xf7\x05\x8e\x91\xc1qJS\x03\x83\x80k\xf3\xd1\xd4\xe3\xddo\xc0(\xf5\xdfb\xf9\xcb\x90y\v&\xb4O\x8aCV4t\x19\xfc\x05', 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000300)='./file0\x00', &(0x7f0000000040), 0x8c, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000024c0)=@newtaction={0xb4, 0x30, 0x58f, 0x0, 0x0, {}, [{0xa0, 0x1, [@m_ctinfo={0x48, 0x2, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x80, 0x5, 0x5, 0x1, 0x2}}]}, {0x4}, {0xc}, {0xc}}}, @m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x0, 0x0, 0x0, 0xfffffffd}, @local, @remote}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x20008000}, 0x8000) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000020000000200000004"], 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000400000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x15, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000100850000000100000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008600000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000bc0)={r6, 0x0, 0x0}, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x1c, r8, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x1}]}, 0x1c}}, 0x0) sendmsg$FOU_CMD_DEL(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r8, 0x1, 0x70bd27, 0x25dfdbfd}, 0x14}}, 0x4) 7.250174235s ago: executing program 5 (id=3060): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$vimc0(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r2, 0x4068aea3, &(0x7f00000020c0)={0x79, 0x0, 0xc}) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_SET_GSI_ROUTING(r2, 0x4008ae6a, &(0x7f0000000440)={0x1, 0x0, [{0x0, 0x2, 0x1, 0x0, @sint={0xffffffff, 0xcf86}}]}) ioctl$KVM_IRQ_LINE_STATUS(r2, 0xc008ae67, &(0x7f0000000140)={0x0, 0x401}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c00000010000d0400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0080000280080005000200004000"], 0x3c}}, 0x0) ioctl$XFS_IOC_GETBMAPX(r4, 0xc0205838, &(0x7f0000000140)={0x5, 0x80001, 0x3, 0x1, 0x6a, 0x8, 0x6}) r6 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) r7 = epoll_create1(0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000880)={0x0, 0x1000, "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"}, &(0x7f00000018c0)=0x1008) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r6, 0x84, 0x75, &(0x7f0000001900)={r8, 0x6}, &(0x7f0000001940)=0x8) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, 0xffffffffffffffff, &(0x7f0000000000)={0x20000002}) 7.130385889s ago: executing program 5 (id=3061): socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0xffffffffffffffff, 0x6, 0x2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x5}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8002, 0x0) chdir(&(0x7f0000000300)='./file0\x00') rename(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0x108) gettid() timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) socket(0x10, 0x3, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x2b) sendmsg$rds(r3, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x40) mkdir(&(0x7f00000001c0)='./file1\x00', 0x8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="401000008909040014001280090001007866726d0000000004000280"], 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x80) creat(0x0, 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET(r4, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001580)={&(0x7f0000001680)=ANY=[@ANYBLOB="2800000001070102000000000000000100000005140007800800ff63b66530ca34ba0140000000"], 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x80) socket$kcm(0xa, 0x1, 0x106) 6.849033124s ago: executing program 2 (id=3062): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2040, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="01000000120000007f00000001", @ANYRESDEC=r0, @ANYRES8=r0, @ANYRES8=r0], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x6, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x8}, 0x4040800) r5 = socket$inet_icmp(0x2, 0x2, 0x1) r6 = syz_open_dev$media(&(0x7f00000000c0), 0x1, 0x20081) ioctl$MEDIA_IOC_REQUEST_ALLOC(r6, 0x80047c05, &(0x7f0000000080)=0xffffffffffffffff) ioctl$MEDIA_REQUEST_IOC_QUEUE(r7, 0x7c80, 0x0) sendmmsg$inet(r5, &(0x7f0000000c40)=[{{&(0x7f0000000200)={0x2, 0x4e22, @multicast1}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000080)="2a0000f128000000", 0x8}], 0x1}}], 0x1, 0x20000054) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) fanotify_init(0x200, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) r8 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r8, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r8, &(0x7f000000b0c0)={0x2020}, 0x2020) 6.833028525s ago: executing program 4 (id=3063): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x22, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xfffffffffffffea1, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x9}, 0x80}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r3, r3, 0x0, 0x200000) cachestat(r3, &(0x7f0000000000)={0x9}, &(0x7f0000000040), 0x0) socket$netlink(0x10, 0x3, 0x15) pipe(&(0x7f00000001c0)) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r4, &(0x7f0000000080)='D', 0x1, 0x4014, 0x0, 0x0) shutdown(r4, 0x1) preadv(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/98, 0x62}], 0x1, 0x0, 0x0) close(0xffffffffffffffff) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000002060102000000000500010006000000050005000a0000000500040e000000000900020073797a310000000016000300686173683a6e65742c706f72742c6e6574000000e44427af2e8225ae804ac218a9d236ef8548967468615fc050ff9ffb9cd0fa62163969e850762ad29081fd9994d40a330b6821f110a3794bcac49a015cc4b88a714b617cade50e495b1f7d"], 0x50}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xbbdccba4532b703b) 5.732387013s ago: executing program 6 (id=3064): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$peekuser(0x3, r0, 0x114) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x1e, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x7, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x10000000}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet(r1, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x57) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="18020000000080000000000000000000850000006100000085000000a000000095"], &(0x7f0000000000)='syzkaller\x00', 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r5, 0x0, 0xe, 0x0, &(0x7f0000000040)="7a7fa22c2a1a89df53ef2a2d86dd", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) sendmsg$xdp(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x7, &(0x7f0000000180)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x4}, @exit, @initr0, @exit, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @exit], &(0x7f00000000c0)='GPL\x00'}, 0x78) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r6, 0x0, 0x0}, 0x10) r7 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x0, 0x1}) r8 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000200)={'erspan0\x00'}) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCBRDELBR(r9, 0x89a2, &(0x7f0000000200)='bridge0\x00') 5.509961439s ago: executing program 5 (id=3065): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee7, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r4 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, 0x0, 0x0) r6 = openat$binfmt(0xffffffffffffff9c, r4, 0x42, 0x1ff) close(r6) r7 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r7, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x4f1}}}, 0x108) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000000)=0xe) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r8, 0x660c) setsockopt$inet6_MCAST_MSFILTER(r7, 0x29, 0x30, &(0x7f0000000d40)=ANY=[@ANYBLOB="030000000a004e230000000cff010000000000000000000000000001f8ffffff00"/56], 0x210) mount(&(0x7f0000000300)=@loop={'/dev/loop', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f00000002c0)='adfs\x00', 0x800a, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8804) mount$9p_virtio(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8c, 0x0) syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) r9 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r4 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_newnexthop={0x1c, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004880}, 0x0) r6 = openat$binfmt(0xffffffffffffff9c, r4, 0x42, 0x1ff) close(r6) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000d40)=ANY=[@ANYBLOB="030000000a004e230000000cff010000000000000000000000000001f8ffffff0000000000000000000000000000000000000000000000000000000000000000a42970d0a2ee3d8700"/103], 0x210) execveat$binfmt(0xffffffffffffff9c, r4, 0x0, 0x0, 0x0) mount$9p_virtio(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8c, 0x0) r7 = syz_open_dev$sndpcmp(&(0x7f0000001480), 0x0, 0x101000) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r7, 0xc0804124, &(0x7f00000014c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='syzkaller\x00', 0x5}, 0x94) 4.346146124s ago: executing program 4 (id=3067): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet_smc(0x2b, 0x1, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x13, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000ba20702500000000002003007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000010000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x0, 0x10, 0x10, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\b\x00\x00', &(0x7f0000000300)=""/8, 0x6c00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) semget$private(0x0, 0x4, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) setitimer(0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYRES64=r1], 0x14}, 0x1, 0x0, 0x0, 0x448d7}, 0x2400801c) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f00000083c0)={{0x2, 0x1, 0x0, 0x2}}) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000001400000018"], 0x44}}, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r5, 0x400452c8, &(0x7f0000000100)) ioctl$SNDRV_TIMER_IOCTL_INFO(r3, 0x80e05411, &(0x7f0000000300)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r3, 0x25, &(0x7f0000000000)={0x2}) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r6 = openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/kernel/profiling', 0x42242, 0x73) pwritev(r6, &(0x7f0000000400)=[{&(0x7f0000000040)='9', 0x1}], 0x1, 0xffffff01, 0xa) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x400000, 0x1, &(0x7f0000000440)) 4.037606497s ago: executing program 6 (id=3068): socketpair$unix(0x1, 0x1, 0x0, 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010040000000000002034400000008000300", @ANYRES32=r2, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140002"], 0x4c}, 0x1, 0x0, 0x0, 0x40010}, 0x4004090) r3 = syz_clone(0x5020100, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$peekuser(0x3, r3, 0xffff) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) setitimer(0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x3d, 0x301, 0x70bd25, 0xfffffffc, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x0) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000740)) write$UHID_INPUT(r4, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x74}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) shutdown(0xffffffffffffffff, 0x0) r7 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f00000001c0)={0x7f}, 0x0, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r7, &(0x7f0000000000)={0xa0000001}) 3.410266812s ago: executing program 5 (id=3069): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000040)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x2, 0xb3, &(0x7f0000000140)=""/179, 0x41100, 0x7b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x38}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x2000)=nil, 0x2000, &(0x7f0000000000)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) r3 = openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) r4 = dup(r3) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)}], 0x1}, 0x0) ioctl$XFS_IOC_FSGEOMETRY_V1(r5, 0x806c5864, &(0x7f0000000380)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r4, 0x2000) mkdirat(0xffffffffffffff9c, &(0x7f0000001400)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000240)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@metacopy_on}]}) r6 = syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') pread64(r6, &(0x7f0000002240)=""/237, 0xfdef, 0x4eb) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0) 3.409860495s ago: executing program 4 (id=3070): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f02feff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008004f0fffeffe809005300fff5dd000000100001000a0c10000000000000000000", 0x58}], 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000280)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f0000001280)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000380)=""/226}, {&(0x7f0000000300)=""/33, 0x1b}, {&(0x7f0000000480)=""/185}, {&(0x7f00000005c0)=""/83}], 0x0, &(0x7f0000000640)=""/79}, 0x7fb7}, {{&(0x7f0000000700)=@l2={0x1f, 0x0, @fixed}, 0x0, &(0x7f0000000800)=[{&(0x7f0000000780)=""/87}, {&(0x7f0000000900)=""/194}, {&(0x7f0000000a00)=""/76}, {&(0x7f0000000b00)=""/245}, {&(0x7f0000000c00)=""/67}, {&(0x7f0000000c80)=""/87}], 0x0, &(0x7f0000000d00)=""/152}, 0x3}, {{&(0x7f0000000dc0)=@in={0x2, 0x0, @private}, 0x0, &(0x7f0000001180)=[{&(0x7f0000000e40)=""/135}, {&(0x7f0000000a80)=""/60}, {&(0x7f0000000f80)=""/221}, {&(0x7f0000000f00)=""/34}, {&(0x7f0000001080)=""/236}]}, 0xeaff}, {{&(0x7f00000011c0)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x0, &(0x7f0000001240)}, 0xfd32}], 0x80000f7, 0x122, 0x0) r5 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r5, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) connect$l2tp6(r5, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) sendmmsg$inet6(r5, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1b, 0x0, 0x0, 0x0, 0x0, 0xc0fe}}], 0x17fd147c801ae9af, 0xff14) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="02c9000c000800050007850400050000d5b8c8708689127800"], 0x11) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000001300)=ANY=[@ANYBLOB="550a000000000000611118000000000018000000000000008200000040000000950000000000000043ed9756bc874345e2b39f02ddf0c4e18111f1df579af2576a1861fb6d74f84d87013ae4d6e44b4d73375b090019b6011533c862ac8ad068caaf0f3c81dc3ab7eba7bab7ca40c1d30221ec245ebe6db81d92fce9a23b0306fcba9aa0dc4d41959a2c78e7a74a33205d938266e9efdccd4bd757a297ab44c3df88880e7ec1dcf100"/182], &(0x7f0000000000)='GPL\x00'}, 0x80) syz_emit_ethernet(0x4a, &(0x7f00000003c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd600a843500082f00fe8000000000000000000000000000bbfe8000000000000000000000000000aa0000883e"], 0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_BT_FLUSHABLE(r6, 0x112, 0x8, &(0x7f0000000580)=0xbc2, 0x4) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0x5, 0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x5, 0xa}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56543, 0x70b926, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0x0, 0xf}, {0x1, 0xb}, {0xe, 0xb}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x2800}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8021}, 0x4048800) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x87, &(0x7f0000000100)=0x71, 0x4) 3.31961247s ago: executing program 2 (id=3071): bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="210000000400000008000000da00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000001100000000000000000000200000000000000000002050000881561ff7d25c65a1120dffdacc219e58674515ad00500000000000000df96bda97aa68a074b5991731f2a4773"], 0x50) r0 = timerfd_create(0x8, 0x80000) timerfd_settime(r0, 0x3, &(0x7f0000000140), 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x10000000}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x24c4436d5a174b6d, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x4004000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$igmp(0x2, 0x3, 0x2) getsockopt$EBT_SO_GET_INFO(r4, 0x0, 0x80, &(0x7f00000003c0)={'broute\x00', 0x0, 0x0, 0x0, [0x61, 0x10000, 0x9c9, 0xf, 0x4, 0x3]}, &(0x7f00000001c0)=0x50) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB], 0x20}}, 0xc010) r5 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000200)) setsockopt$ARPT_SO_SET_REPLACE(r4, 0x0, 0x60, &(0x7f00000008c0)={'filter\x00', 0x7, 0x4, 0x404, 0x0, 0x218, 0x10c, 0x324, 0x324, 0x324, 0x4, &(0x7f0000000280), {[{{@arp={@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, 0xff000330, 0xffffffff, 0x4, 0x0, {@mac, {[0xff, 0x0, 0x0, 0x0, 0xff]}}, {@mac=@local, {[0xff, 0x0, 0xff, 0xff, 0xff, 0xff]}}, 0xfff2, 0x101, 0x79, 0x1, 0x7ff, 0x8, '\x00', 'vcan0\x00', {0xff}, {0xff}, 0x0, 0x4}, 0xbc, 0x10c}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@link_local, @mac=@local, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x8, 0x1}}}, {{@uncond, 0xbc, 0x10c}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@random="07aebe92cc85", @empty, @loopback, @broadcast, 0x8}}}, {{@uncond, 0xbc, 0x10c}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x1, 0x1}}}], {{'\x00', 0xbc, 0xe0}, {0x24}}}}, 0x450) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) set_mempolicy(0x3, &(0x7f0000000040)=0x401, 0x8) read$FUSE(0xffffffffffffffff, 0x0, 0x0) clock_adjtime(0x0, &(0x7f0000000000)={0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdff2, 0x80000000000000, 0x0, 0x0, 0x3b9ac9ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}) timerfd_settime(r0, 0x3, &(0x7f0000000000)={{0x77359400}, {0x77359400}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000300000005"], 0x48) 2.429816174s ago: executing program 5 (id=3072): setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_emit_ethernet(0x4a, &(0x7f00000010c0)={@local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x3, 0x3c, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x5, 0x0, 0x0, @multicast2, {0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @loopback, @local, {[@timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{@rand_addr, 0x4e210000}]}]}}}}}}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000001f0000000200000022bf000001000000", @ANYRES32, @ANYRES32, @ANYRES64=r2], 0x50) r4 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r4, &(0x7f0000000080)={&(0x7f0000000100)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e20, @local}}, 0x80, 0x0, 0x0, &(0x7f0000001240)=[{0x10, 0x110, 0x1, "dc"}], 0x10}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x401, r3, 0x0, 0xa002a0}, 0x38) r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000000b00)={0x0, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", 0xffffffffffffffff}) ioctl$SYNC_IOC_FILE_INFO(r6, 0xc0383e04, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000020000000000000000000822"], 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x21}, 0x94) socket$nl_route(0x10, 0x3, 0x0) 1.757892622s ago: executing program 4 (id=3073): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000180)=0x20000) r1 = io_uring_setup(0x3442, &(0x7f00000001c0)={0x0, 0xddae, 0x8, 0x2, 0x31a}) close_range(r1, 0xffffffffffffffff, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000100)) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r4 = dup3(r3, r2, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x0) openat$cgroup_ro(r4, &(0x7f0000000380)='pids.current\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x0, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000880)={0x4c, 0x0, &(0x7f00000006c0)=[@reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x71, 0x0, &(0x7f00000007c0)="6b8e0e307567b3dd5911e2396ced1c403284490fb328389824929522e40fa378fb329b13ee5cea56a721183ba5b0e2a7a5a0dbe6c6cb322d518f4e83051f819febbe60ea044d3ce9a7d468d12e6cf2620c10033cb1bf57d9322dab15cd9dc896b914fe5cf64d282d84b2b0f4b98fcc033d"}) ioctl$KVM_PRE_FAULT_MEMORY(r4, 0xc040aed5, &(0x7f0000000280)={0x0, 0x10000}) pipe2(&(0x7f0000001040), 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r7, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000000016000000", @ANYRES32=r8, @ANYBLOB="0000000200000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r10) getsockname$packet(r10, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000f00)=@delchain={0x38, 0x2c, 0xf31, 0x0, 0x2000, {0x0, 0x0, 0x0, r8, {0xfff3}, {0xfff2, 0xffff}, {0xffff, 0x1}}, [@filter_kind_options=@f_bpf={{0x8}, {0xc, 0x2, [@TCA_BPF_FD={0x8}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008844}, 0x4010) 1.650131275s ago: executing program 4 (id=3074): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x6, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, r5, 0x9c3fa077fa966179, 0x12, 0x0, {{0x7e}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x8}, 0x4040800) r6 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$FITHAW(r0, 0xc0045878) sendmmsg$inet(r6, &(0x7f0000000c40)=[{{&(0x7f0000000200)={0x2, 0x4e22, @multicast1}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000080)="2a0000f128000000", 0x8}], 0x1}}], 0x1, 0x20000054) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) fanotify_init(0x200, 0x0) r8 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) readv(r8, &(0x7f0000000100)=[{&(0x7f0000000280)=""/12, 0xc}], 0x1) splice(0xffffffffffffffff, 0x0, r7, 0x0, 0x7ffff000, 0x1) r9 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r9, 0x0) r10 = syz_open_procfs(0x0, &(0x7f0000002040)='net/tcp\x00') read$FUSE(r10, &(0x7f0000002080)={0x2020}, 0x206d) close(r9) read$FUSE(r10, &(0x7f0000004440)={0x2020}, 0x2020) 307.239784ms ago: executing program 2 (id=3075): r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r1 = syz_io_uring_setup(0x45, &(0x7f0000000300)={0x0, 0xf20f, 0x40, 0x2, 0x1b}, &(0x7f0000000100), &(0x7f00000000c0), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x22, &(0x7f0000000380)={&(0x7f0000006000)={[{0x0, 0x0, 0x103}]}, 0x1}, 0x1) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011) sendmsg$kcm(r3, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0xfffe, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x2}, 0x80, 0x0}, 0xe07e872420dfefca) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003580)=ANY=[@ANYBLOB="20000000240000012ebd7000fbdbdf25027c00000cb9fd72c32d9e5e"], 0x20}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) socket$inet_icmp(0x2, 0x2, 0x1) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x8040044}, 0x810) sendmsg$RDMA_NLDEV_CMD_DELLINK(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000015c0)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08786eb807e0000000000000000000009fe70ba83a7a66e67a0bae5cfaccbbb81e28d7b568da", @ANYRESHEX, @ANYRESOCT], 0x18}, 0x1, 0x0, 0x0, 0x1000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4848}, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000100)={0x0, 0x642, 0x0, 0x0}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x800002) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x2000000, 0x0, 0x2004cc, 0x0, 0xa1b, 0x8, 0x5, 0x0, 0x3, 0x2], 0x10000, 0x202}) ioctl$KVM_SET_SREGS(r7, 0x4138ae84, &(0x7f0000000100)={{0x100000, 0xeeee8000, 0x0, 0x2, 0x81, 0x10, 0x3, 0x7, 0x0, 0x8, 0x9}, {0x8080000, 0x10000, 0xc, 0x0, 0x2, 0x0, 0xfd, 0x0, 0x7, 0xbf}, {0xb000, 0x8080000, 0xc, 0x0, 0x27, 0xc4, 0x0, 0x0, 0x8, 0x3, 0x40, 0x3}, {0xeeef0000, 0x33331000, 0x18592cbc7c573fc6, 0x9, 0x1, 0x9, 0x9, 0xd, 0x8, 0xf, 0x4}, {0x80a0000, 0xeeee8000, 0xb, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x3f, 0x6}, {0xb000, 0x0, 0x9, 0x76, 0x2, 0x1, 0x2, 0x80, 0x0, 0xff, 0x6}, {0xeeee8000, 0xeeee0000, 0x3, 0x4, 0x3, 0x0, 0xa1, 0x20, 0x0, 0x0, 0x4}, {0x2, 0x50000, 0xc, 0x3, 0x0, 0x7, 0x9, 0x40, 0x26, 0x0, 0x0, 0x2}, {0x80a0000, 0x8cc}, {0x40000}, 0xddf8ffd3, 0x0, 0x0, 0x110, 0xe, 0xf001, 0xd000, [0x80000004, 0x0, 0x10000, 0xfffffffffffdffff]}) ioctl$KVM_RUN(r7, 0xae80, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) 0s ago: executing program 4 (id=3076): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet_smc(0x2b, 0x1, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r3, 0x65, 0x7, &(0x7f00000001c0)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) sendmsg$can_raw(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x1d, r4}, 0x10, &(0x7f00000005c0)={&(0x7f0000000100)=@can={{}, 0x80, 0x3, 0x4, 0x2, "07000000008000"}, 0x210}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) setitimer(0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x0) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000740)) write$UHID_INPUT(r0, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) shutdown(0xffffffffffffffff, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, &(0x7f00000003c0)={0x1, {{0xa, 0x4e23, 0x8caa, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1}}}, 0x84) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, 0x0, &(0x7f0000000140)) open$dir(&(0x7f0000000300)='./file0\x00', 0x20800, 0xf8) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000000000)={0x1, &(0x7f0000001ac0)=[{0x0, 0x1000}]}) openat$adsp1(0xffffffffffffff9c, 0x0, 0x2002, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000008000000000000000000910095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r6 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r5, r5, 0x2f, 0x0, @void}, 0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000140)=r6, 0x4) kernel console output (not intermixed with test programs): T6026] usb 10-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 386.869904][ T6026] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 386.874419][ T6026] usb 10-1: config 0 descriptor?? [ 387.088750][ T6026] usblp 10-1:0.0: usblp0: USB Bidirectional printer dev 3 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 387.100985][ T6026] usb 10-1: USB disconnect, device number 3 [ 387.105388][ T6026] usblp0: removed [ 387.532744][ T6026] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 387.596431][T12305] fuse: Bad value for 'fd' [ 387.696652][ T6026] usb 10-1: Using ep0 maxpacket: 32 [ 387.699912][ T6026] usb 10-1: config index 0 descriptor too short (expected 29220, got 36) [ 387.702755][ T6026] usb 10-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 387.705657][ T6026] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 387.708754][ T6026] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 387.712883][ T6026] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 387.716686][ T6026] usb 10-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 387.722241][ T6026] usb 10-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 387.726556][ T6026] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 387.739440][ T6026] usb 10-1: config 0 descriptor?? [ 388.004221][ T6026] usblp 10-1:0.0: usblp0: USB Bidirectional printer dev 4 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 388.093374][T12325] tipc: Enabling of bearer rejected, failed to enable media [ 388.317834][ C2] usblp0: nonzero read bulk status received: -71 [ 388.318214][ T34] usb 10-1: USB disconnect, device number 4 [ 388.333017][T12290] usblp0: error -71 reading from printer [ 388.337917][T12330] usblp0: error -19 reading from printer [ 388.531106][T12289] usblp0: removed [ 389.156926][T12349] netlink: 'syz.4.2068': attribute type 1 has an invalid length. [ 389.169003][T12349] 8021q: adding VLAN 0 to HW filter on device bond1 [ 389.199574][T12349] netlink: 'syz.4.2068': attribute type 1 has an invalid length. [ 389.206545][T12349] vxlan0: entered promiscuous mode [ 389.214632][T12349] bond1: (slave vxlan0): making interface the new active one [ 389.218081][T12349] bond1: (slave vxlan0): Enslaving as an active interface with an up link [ 389.220953][ T1168] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 389.231462][ T1168] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 389.237217][ T1168] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 389.239828][ T1168] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 389.258943][T12355] net_ratelimit: 10 callbacks suppressed [ 389.258959][T12355] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 389.323209][ T6008] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 389.472788][ T6008] usb 10-1: Using ep0 maxpacket: 16 [ 389.476018][ T6008] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 389.479840][ T6008] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 389.483928][ T6008] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 389.488852][ T6008] usb 10-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 389.492356][ T6008] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 389.496850][ T6008] usb 10-1: config 0 descriptor?? [ 389.572590][T12362] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2073'. [ 389.578166][T12362] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2073'. [ 389.583529][T12362] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2073'. [ 389.588146][T12362] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2073'. [ 389.923338][ T6008] shield 0003:0955:7214.000A: unknown main item tag 0x0 [ 389.926044][ T6008] shield 0003:0955:7214.000A: unknown main item tag 0x0 [ 389.928911][ T6008] shield 0003:0955:7214.000A: unknown main item tag 0x0 [ 389.932179][ T6008] shield 0003:0955:7214.000A: unknown main item tag 0x0 [ 389.938472][ T6008] shield 0003:0955:7214.000A: unknown main item tag 0x0 [ 389.956860][ T6008] input: HID 0955:7214 Haptics as /devices/virtual/input/input35 [ 390.016347][ T6008] shield 0003:0955:7214.000A: Registered Thunderstrike controller [ 390.018810][ T6008] shield 0003:0955:7214.000A: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.5-1/input0 [ 390.117440][T12344] random: crng reseeded on system resumption [ 390.139846][ T6026] usb 10-1: USB disconnect, device number 5 [ 390.144688][ T6092] shield 0003:0955:7214.000A: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 390.150190][ T6092] shield 0003:0955:7214.000A: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 390.154550][ T6092] shield 0003:0955:7214.000A: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 390.162128][ T6092] shield 0003:0955:7214.000A: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 390.390885][T12374] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2078'. [ 390.404867][T12374] vlan3: entered promiscuous mode [ 390.407438][T12374] bridge0: entered promiscuous mode [ 392.096775][T12391] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.170264][T12391] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.237880][T12391] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.309575][T12391] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.398178][ T62] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.406074][ T62] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.416818][ T62] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.427077][ T62] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.771921][T12409] tipc: Enabling of bearer rejected, failed to enable media [ 392.992745][T12422] syzkaller0: entered promiscuous mode [ 392.995192][T12422] syzkaller0: entered allmulticast mode [ 393.309883][T12446] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.399131][T12446] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.489807][T12463] No buffer was provided with the request [ 393.549253][T12446] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.567040][T12468] syzkaller0: entered promiscuous mode [ 393.570163][T12468] syzkaller0: entered allmulticast mode [ 393.612566][T12446] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 Õ/DEV/VBI#Cßß߀  /DEV/FUSEFD=0X0000000000000005,ROOTMODE=00000000000000000040000,USER_ID=00000000000000000000,GROUP_ID=00000000000000000000P)HL@Ñßß߀ßßß./FILE0/FILE0./FILE0FUSE.¼FILE0¿ÞƒÙM˜#„ÈÖ‰!œ¹F›ÛªYŸ‚ÊÉ&JACAŽÔÙAC¤ÀÒ|DÜÏ9  ³€^ÔÇ€˜ØHœÇYØFHÒ8FC2”‡†L%ܘS«ÙÍ`¹Ÿ¦®-½$«M¼ËÛRFZÎ|Å£²†HÜÚ7M[ >Q×,EÄÝÃÉΚGßÄXº÷»IQ5¨J¡Ð¨?¢«ÍV9ÚßG–4A”SÕ3Ò%ƒ¦À¤Ü ÉÞFHM^6Â)Q7Ï:LÐ]>]BHYV€¢ÑR8`)ÂÒ¤€—Ü ¡5ͬÕݺŦ.‹±=ÑW&W¨!¨S’—÷.)#Ý¿>0Ëɯ1AÒ'^Ä®…ØNȈޚGQÒR~•¸¾°UÂVC•¯Î“ÍDÑÉ/PÅ÷%E:¶B‘Û±&• ÛÕÉZÌQ`ÖC†J½JÑÌM×Ù37š`X¨L!XÛ€VǶ`6OÊ{FÐ,ŽG¦IKÛL,GPÇE“‰[^++Ç€“„ ‚ªB§À¡Q×=ÄŒ¸Ã+Æ?Ý0?ZN¦Ð—ÍV?¿6Ä0‚EFÞY’#H5LÂ…¯ —¿¢UÍNK"…ÞQÎYBFQDÚ®ÖIQ KÀÞXC®½K¾•]Ê¢[ 394.863386][T12508] syz_tun: entered allmulticast mode ”Û Y1–8_MQAÉÖÄ°Ú"²ÂÏ· R¬£UÇZWLËŒ[ 394.871990][T12507] syz_tun: left allmulticast mode Ë[DTŠ©Í»¨±®¼G¾VÇÁ—B-˜€BŸL¥\[;ƺΑ‘ÅÅ¿QÕ”ËÝM°ÉÖ’?Xß”D¦R ]O Æ"ÃÎ?] :Ô±Nž¯6ÃSQ\ÓR`V ¿ÐU]QÎ\@»Û|•Î®­­¸)TÞP°†3H8DÕÊH.G‚† JO9JÒš|³:5YÂX5–6ÓÀÔÏ6…•š ÞÚ”ÓX$OºƒÙGX?Q=Wƒ2H¿µÏ*X¨“ XBAUÁBߪRX¤;™21Á¸Ë ÚƱ­#[‘ÙËV#±U~÷¸V£ÃV'ª1ÊÞÑAÌ T‘ÄÖ!¦KMƒZMXQœFQ “ÏEÜÉÚ¾[ÖÔ™ÌËCSŽÎ<ÑSU #›ÙXÀŒ‡Ÿ™THZN> [͸K@|Í…Ä¿Ä×ZÑY’Ÿ É'ĩÊÄÜÉÞ¹ÌU^ÐB0…S”ÕÌÜŽÒD ØØ;ÅÞ»P) 5GÐ~MÄ(ÑÀYŽLÎÂU‹ OØÁUŸ&žÂ&3+™¬ÑÉ ˆÁÙÎ1˜ÀÕ›ÛUÄĦ—FÍC¢œƒU-ÃÎMΖÚQ¶Â0Q¤ÉD"Ñ^._GÚ|¦Êƾ×T>¿ÚËŠ6Y#!¥ÈR÷BÃÇ6HÐσªÔ˜Ö¢K®IŒ÷$ÂÛÌÓ™¡Æ¸ÐHN’Ÿ.€ƒV^²ÆW“¡­»‰ÓKX¿±—ÍÅÓÈ”¬ˆN; 6Ú½#< Þ«€™÷*TÙº\^M9Y ÙÄ[QU‡·É7ÇFÅÅÜÆ!¥:ŸÐ; NÆØÑ«¾.ÕA‚ WÑ*ÊÐUU@«MÑ`K|0¨E)•«€¸^‘Þ”8¤C~°)$ÍKT^X,ߘQ °;Çœ*5¿'E„×\Ý–¹É~SËQ :·ÃÁœ,«D—)Ë0RµÔP=ÇÓ1‹ÆØHT{OM¸,®Á€X¾(P6ªM‘ÒÁÓ–4>S¥Þ‹µÌУ~Ñ÷ZÍ¡¤¤ÌÜ«]YÐ÷ˆ¶ÕÉØ"Š‹ÍÀINKÕÍß¼×ÉPœ‡ÛÁ÷&¹;ØÆØÓT(V>%`ÄLž‰OS…ÂZ¼O6‘ËÍQÀÔ‘]—¢8šÍ˲ËG\{E_Š¨Q“µÀÔ;CLÞA M&FÍN67ÓI¤4§WÁÅÖ˜E-™&XܥŒÌÓÊÜ­„ÄÉKJÜR[½HCBˆƒ:N¤ 8È¿µAßR€'J4ÔÏŸ-ºÁGÊ ®„QÄ•À´Q”­‘ÄQO!˱ &Ý]SL×R]Õ³ÛÉ)UÔ©»;›:ÎßYÖÍ]¹-ÏÐ`¢ÃÌŒBÁXO–Å RI°?Ç’VCF‰J52 ™Ð¾ÙÝ J$L6£Wƹ…܃£Z›‹šÖCÞ©H`ËÇC»SÌ„"¶M3"BÈ•@UÛQ¦G–86«Í´A˜U²JÑ`DF³SE£¿ZÂÖ®"IÑǨFBXºÁH`"¼ÇÃSÈÙ Ï°ÁÏ ÚŽ÷¥ÀRÙšGÌÇ^ND(€7Q“ÛI»‚º4†ÊG>Õ¶>@HÛMÄUÇK?Ý.X˜Ê?L:Ô5ÍÆÊDPU:}Ï "BW¯ÅXYÕYTÇÕŒT†±À*ÁL·™·V2ÆK·ŽNRÁÁSD$ÚMC?´ÈÒ? *ÕÚî$3ˆ›IJÙ{ÙÖ …—ÑE* RÜÔ=»ÚE…ÀM!ÛßÅÞ{U÷›Ÿ4 +Ð\¦<|Ë»ÒO±‘°LF]EMÒ‹…Ø!Î~A1‰–X^¨Ú¼H™± &Q}ZXÍ6;K9Ð/ŒÅÃPÛУH­ÌÑÙÂÊT›ØO^´Ž›FÐPÞÖB” YF÷ØŠš Fƒ­„ÖN9S¼MÌ3K—E5)ÖH*‡¥ÚÈ MFÖÇ/Â.X¾{†³7.ÒB!«ÄHQQ²W¬ßÅ]Ç…^ž‡­—ZG’²1Zž´FŒHD›`ÀÚ·JÁ­CÍ€¶Ì¨Üˆ±Ä&:ÌI’UÁKHZ ØX_œ‰-ÈLAFÅ¥G|J,²KÞ^‰… J±ÄÈT’ÇK~O[ 396.422784][ T62] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.454064][ T62] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.457418][ T62] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.460494][ T62] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.793927][T12553] No buffer was provided with the request [ 398.508105][T12636] tipc: Enabling of bearer rejected, failed to enable media [ 398.593532][T12645] fuse: Bad value for 'fd' [ 398.599265][ T40] audit: type=1804 audit(2000000540.185:1932): pid=12645 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.2165" name="file0" dev="tmpfs" ino=883 res=1 errno=0 [ 398.617948][ T40] audit: type=1804 audit(2000000540.205:1933): pid=12645 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.2165" name="file0" dev="tmpfs" ino=883 res=1 errno=0 [ 398.863470][T12657] fuse: Bad value for 'fd' [ 399.585184][T12686] fuse: Bad value for 'fd' [ 400.408341][T12706] tipc: Enabling of bearer rejected, failed to enable media [ 400.728272][T12715] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2184'. [ 401.124894][T12720] netlink: 'syz.2.2186': attribute type 1 has an invalid length. [ 401.155946][T12720] smc: adding net device bond0 with user defined pnetid SYZ2 [ 401.161374][T12720] 8021q: adding VLAN 0 to HW filter on device bond0 [ 401.186900][T12720] bond0: (slave dummy0): making interface the new active one [ 401.191954][T12720] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 401.816601][T12770] netlink: 'syz.6.2197': attribute type 1 has an invalid length. [ 401.884093][T12770] bond2: (slave geneve2): making interface the new active one [ 401.888502][T12770] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 401.893198][ T130] netdevsim netdevsim6 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 401.897377][ T130] netdevsim netdevsim6 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 401.902161][T12783] netlink: 'syz.5.2202': attribute type 1 has an invalid length. [ 401.903264][ T130] netdevsim netdevsim6 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 401.904428][T12770] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2197'. [ 401.915759][T12770] 8021q: adding VLAN 0 to HW filter on device bond2 [ 401.944427][ T1242] netdevsim netdevsim6 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 401.964078][T12783] bond4: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 401.969056][T12783] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2202'. [ 401.996771][T12783] bond4 (unregistering): (slave ip6gretap1): Releasing backup interface [ 402.004552][T12783] bond4 (unregistering): Released all slaves [ 402.085941][T12791] tipc: Enabled bearer , priority 0 [ 402.090671][T12791] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2204'. [ 402.095839][T12791] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2204'. [ 402.103701][T12790] tipc: Disabling bearer [ 402.570697][T12798] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 402.585643][T12799] syzkaller0: entered promiscuous mode [ 402.593994][T12799] 0: reclassify loop, rule prio 0, protocol 800 [ 402.626678][T12798] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 402.856903][T12801] syzkaller0: entered promiscuous mode [ 402.859407][T12801] syzkaller0: entered allmulticast mode [ 403.127083][T12814] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2212'. [ 403.130202][T12814] netlink: 'syz.6.2212': attribute type 7 has an invalid length. [ 403.132737][T12814] netlink: 'syz.6.2212': attribute type 8 has an invalid length. [ 403.135458][T12814] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2212'. [ 403.144149][T12814] team0: entered promiscuous mode [ 403.146551][T12814] team_slave_0: entered promiscuous mode [ 403.149064][T12814] team_slave_1: entered promiscuous mode [ 403.152412][T12814] bond0: entered promiscuous mode [ 403.154294][T12814] bond_slave_0: entered promiscuous mode [ 403.156330][T12814] bond_slave_1: entered promiscuous mode [ 403.161629][T12814] erspan0: entered promiscuous mode [ 403.173123][T12814] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 403.470899][T12827] fuse: Bad value for 'fd' [ 403.827848][T12837] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2218'. [ 404.025517][T12847] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2222'. [ 404.427988][T12872] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2226'. [ 404.441971][T12872] 8021q: adding VLAN 0 to HW filter on device bond4 [ 404.480040][T12872] bond4: (slave ip6gretap2): Enslaving as an active interface with an up link [ 404.853003][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 404.943709][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 404.952722][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 405.295128][T12893] fuse: Bad value for 'fd' [ 405.739058][T12903] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2233'. [ 407.422994][T12961] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2246'. [ 407.471791][T12959] fuse: Bad value for 'fd' [ 408.758248][T12987] tipc: Enabled bearer , priority 0 [ 408.771960][T12987] syzkaller0: entered promiscuous mode [ 408.774211][T12987] syzkaller0: entered allmulticast mode [ 408.790596][T12987] tipc: Resetting bearer [ 408.796190][T12986] tipc: Resetting bearer [ 408.807509][T12986] tipc: Disabling bearer [ 408.939372][T12992] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2255'. [ 408.945299][T12992] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2255'. [ 409.630453][T13020] No buffer was provided with the request [ 411.691278][T13038] bond0: (slave team0): Releasing backup interface [ 411.701478][T13038] batman_adv: batadv0: Interface deactivated: dummy0 [ 411.704303][T13038] batman_adv: batadv0: Removing interface: dummy0 [ 411.711347][T13038] bridge_slave_0: left allmulticast mode [ 411.715588][T13038] bridge_slave_0: left promiscuous mode [ 411.717553][T13038] bridge0: port 1(bridge_slave_0) entered disabled state [ 411.727050][T13038] bridge_slave_1: left allmulticast mode [ 411.728995][T13038] bridge_slave_1: left promiscuous mode [ 411.730899][T13038] bridge0: port 2(bridge_slave_1) entered disabled state [ 411.742019][T13038] bond0: (slave bond_slave_0): Releasing backup interface [ 411.750831][T13038] bond0: (slave bond_slave_1): Releasing backup interface [ 411.761114][T13038] team0: Port device team_slave_0 removed [ 411.767935][T13038] team0: Port device team_slave_1 removed [ 411.770701][T13038] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 411.774010][T13038] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 411.777760][T13038] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 411.780222][T13038] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 411.785174][T13038] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 411.796140][T13040] team0: Mode changed to "broadcast" [ 411.866255][T13045] syz_tun: entered allmulticast mode [ 411.927810][T13044] syz_tun: left allmulticast mode [ 412.268909][T13057] tipc: Enabling of bearer rejected, failed to enable media [ 412.378810][T13062] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2273'. [ 412.801379][T13075] infiniband syz2: set active [ 412.806597][T13075] infiniband syz2: added batadv_slave_1 [ 412.870040][T13075] RDS/IB: syz2: added [ 412.871870][T13075] smc: adding ib device syz2 with port count 1 [ 412.874927][T13075] smc: ib device syz2 port 1 has no pnetid [ 412.981477][T13087] input: syz1 as /devices/virtual/input/input36 [ 413.644904][T13096] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2284'. [ 413.845941][ T64] Bluetooth: hci2: unexpected event for opcode 0x0c03 [ 413.851390][ T64] Bluetooth: hci2: unexpected event for opcode 0x1003 [ 415.482587][T13136] gfs2: gfs2 mount does not exist [ 416.324495][T13140] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2295'. [ 416.382871][T13113] Bluetooth: hci3: command 0x0406 tx timeout [ 416.387421][T13113] Bluetooth: hci0: command 0x0406 tx timeout [ 417.852903][T13185] netlink: 'syz.2.2306': attribute type 13 has an invalid length. [ 417.894903][T13185] gretap0: refused to change device tx_queue_len [ 417.897417][T13185] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 417.904252][ T64] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 417.907700][ T64] Bluetooth: hci2: Injecting HCI hardware error event [ 417.913933][ T64] Bluetooth: hci2: hardware error 0x00 [ 417.942780][ T40] audit: type=1326 audit(2000000559.525:1934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13186 comm="syz.6.2307" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf702ef6c code=0x0 [ 419.834050][T13234] fuse: Bad value for 'fd' [ 419.993816][ T64] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 420.469752][T13246] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2324'. [ 420.523185][T13246] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2324'. [ 420.624455][ T64] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 420.628183][ T64] Bluetooth: hci0: Injecting HCI hardware error event [ 420.632582][ T64] Bluetooth: hci0: hardware error 0x00 [ 421.588142][T13278] syzkaller0: entered promiscuous mode [ 421.590403][T13278] syzkaller0: entered allmulticast mode [ 422.562800][ T6008] usb 11-1: new high-speed USB device number 6 using dummy_hcd [ 422.702898][ T64] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 422.773883][ T6008] usb 11-1: Using ep0 maxpacket: 32 [ 422.795978][ T6008] usb 11-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 422.800593][ T6008] usb 11-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 422.811025][ T6008] usb 11-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 422.816192][ T6008] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 422.819612][ T6008] usb 11-1: Product: syz [ 422.821541][ T6008] usb 11-1: Manufacturer: syz [ 422.824949][ T6008] usb 11-1: SerialNumber: syz [ 422.832048][ T6008] usb 11-1: config 0 descriptor?? [ 423.048500][ T6171] usb 11-1: USB disconnect, device number 6 [ 424.784006][T13362] bridge0: port 3(geneve1) entered blocking state [ 424.787075][T13362] bridge0: port 3(geneve1) entered disabled state [ 424.795758][T13362] geneve1: entered allmulticast mode [ 424.804410][T13362] geneve1: entered promiscuous mode [ 424.814029][T13362] bridge0: port 3(geneve1) entered blocking state [ 424.817330][T13362] bridge0: port 3(geneve1) entered forwarding state [ 424.833377][T13363] netlink: 'syz.6.2351': attribute type 10 has an invalid length. [ 424.842027][T13363] bridge0: port 3(geneve1) entered disabled state [ 424.845122][T13363] bridge0: port 2(bridge_slave_1) entered disabled state [ 424.848870][T13363] bridge0: port 1(bridge_slave_0) entered disabled state [ 424.891201][T13363] bridge0: port 3(geneve1) entered blocking state [ 424.894840][T13363] bridge0: port 3(geneve1) entered forwarding state [ 424.898769][T13363] bridge0: port 2(bridge_slave_1) entered blocking state [ 424.902822][T13363] bridge0: port 2(bridge_slave_1) entered forwarding state [ 424.906464][T13363] bridge0: port 1(bridge_slave_0) entered blocking state [ 424.909505][T13363] bridge0: port 1(bridge_slave_0) entered forwarding state [ 424.963689][T13363] bridge0: entered promiscuous mode [ 424.967104][T13363] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 426.853753][T13394] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2358'. [ 428.376341][T13424] fuse: Bad value for 'fd' [ 432.719841][T13493] fuse: Bad value for 'fd' [ 432.968376][T13517] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 432.971344][T13517] IPv6: NLM_F_CREATE should be set when creating new route [ 433.007361][T13517] bridge0: port 2(bridge_slave_1) entered disabled state [ 433.010951][T13517] bridge0: port 1(bridge_slave_0) entered disabled state [ 433.115321][T13517] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 433.121179][T13517] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 433.178553][T13517] veth1_macvtap: left allmulticast mode [ 433.232546][ T101] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.245107][ T101] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.272999][ T101] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.273067][ T1462] syz2: Port: 1 Link DOWN [ 433.277391][ T101] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.473637][T13531] netlink: 'syz.6.2386': attribute type 21 has an invalid length. [ 433.477187][T13531] netlink: 'syz.6.2386': attribute type 6 has an invalid length. [ 433.480566][T13531] netlink: 132 bytes leftover after parsing attributes in process `syz.6.2386'. [ 434.008178][T13545] fuse: Bad value for 'fd' [ 434.240979][T13549] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2390'. [ 434.623206][T13560] fuse: Bad value for 'fd' [ 437.722943][ T3244] usb 11-1: new high-speed USB device number 7 using dummy_hcd [ 437.885076][ T3244] usb 11-1: Using ep0 maxpacket: 32 [ 437.900914][ T3244] usb 11-1: config 0 has no interfaces? [ 437.904277][ T3244] usb 11-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 437.909055][ T3244] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 437.915824][ T3244] usb 11-1: config 0 descriptor?? [ 438.158606][ T59] usb 11-1: USB disconnect, device number 7 [ 439.199049][ T40] audit: type=1326 audit(2000000580.785:1935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13614 comm="syz.4.2405" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bef6c code=0x7ffc0000 [ 439.214893][ T40] audit: type=1326 audit(2000000580.785:1936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13614 comm="syz.4.2405" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bef6c code=0x7ffc0000 [ 439.225480][ T40] audit: type=1326 audit(2000000580.795:1937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13614 comm="syz.4.2405" exe="/syz-executor" sig=0 arch=40000003 syscall=219 compat=1 ip=0xf70bef6c code=0x7ffc0000 [ 439.235657][ T40] audit: type=1326 audit(2000000580.795:1938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13614 comm="syz.4.2405" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bef6c code=0x7ffc0000 [ 439.258760][ T40] audit: type=1326 audit(2000000580.795:1939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13614 comm="syz.4.2405" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bef6c code=0x7ffc0000 [ 439.290367][ T40] audit: type=1326 audit(2000000580.795:1940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13614 comm="syz.4.2405" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf71f5cab code=0x7ffc0000 [ 439.313127][T13616] No buffer was provided with the request [ 439.330557][ T40] audit: type=1326 audit(2000000580.795:1941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13614 comm="syz.4.2405" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf71f5cab code=0x7ffc0000 [ 439.340503][ T40] audit: type=1326 audit(2000000580.805:1942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13614 comm="syz.4.2405" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bef6c code=0x7ffc0000 [ 439.412537][T13615] syz_tun: entered allmulticast mode [ 439.420776][ T40] audit: type=1326 audit(2000000580.805:1943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13614 comm="syz.4.2405" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bef6c code=0x7ffc0000 [ 439.460460][T13615] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2405'. [ 439.466190][ T40] audit: type=1326 audit(2000000580.805:1944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13614 comm="syz.4.2405" exe="/syz-executor" sig=0 arch=40000003 syscall=224 compat=1 ip=0xf70bef6c code=0x7ffc0000 [ 439.731986][T13615] syz_tun (unregistering): left allmulticast mode [ 441.694600][T13634] fuse: Bad value for 'fd' [ 442.530127][T13644] gre0: entered promiscuous mode [ 442.531979][T13644] gre0: entered allmulticast mode [ 442.695043][T13652] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2414'. [ 443.780013][T13676] xt_recent: Unsupported userspace flags (000000fe) [ 445.263357][ T1415] ieee802154 phy0 wpan0: encryption failed: -22 [ 445.265775][ T1415] ieee802154 phy1 wpan1: encryption failed: -22 [ 445.278970][T13697] fuse: Bad value for 'fd' [ 445.676374][T13706] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 445.680153][T13706] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.716409][T13707] fuse: Bad value for 'fd' [ 445.797549][T13706] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 445.800885][T13706] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.854003][T13706] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 445.857225][T13706] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.919240][T13706] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 445.922654][T13706] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 446.032298][ T46] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 446.036154][ T46] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 446.045452][ T46] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 446.049373][ T46] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 446.064991][ T46] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 446.067829][ T46] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 446.070677][ T46] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 446.074719][ T46] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 447.539160][T13731] No buffer was provided with the request [ 447.620439][T13733] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2435'. [ 447.624090][T13733] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2435'. [ 449.224300][T13757] fuse: Bad value for 'fd' [ 452.638374][T13798] No buffer was provided with the request [ 453.251822][T13804] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2455'. [ 455.285889][ T40] kauditd_printk_skb: 47 callbacks suppressed [ 455.285906][ T40] audit: type=1326 audit(2000000595.870:1992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13820 comm="syz.6.2459" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702ef6c code=0x7ffc0000 [ 455.300971][ T40] audit: type=1326 audit(2000000595.880:1993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13820 comm="syz.6.2459" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702ef6c code=0x7ffc0000 [ 455.317108][T13821] kvm: kvm [13820]: vcpu0, guest rIP: 0x1a3 Unhandled WRMSR(0x187) = 0x8000 [ 455.319977][ T40] audit: type=1326 audit(2000000595.880:1994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13820 comm="syz.6.2459" exe="/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf702ef6c code=0x7ffc0000 [ 455.345784][ T40] audit: type=1326 audit(2000000595.880:1995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13820 comm="syz.6.2459" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702ef6c code=0x7ffc0000 [ 455.356604][ T40] audit: type=1326 audit(2000000595.880:1996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13820 comm="syz.6.2459" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf702ef6c code=0x7ffc0000 [ 455.386049][T13821] kvm: kvm [13820]: vcpu0, guest rIP: 0x1a3 Unhandled WRMSR(0x187) = 0x8000 [ 455.416676][ T40] audit: type=1326 audit(2000000596.000:1997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13820 comm="syz.6.2459" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702ef6c code=0x7ffc0000 [ 455.436936][ T40] audit: type=1326 audit(2000000596.000:1998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13820 comm="syz.6.2459" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702ef6c code=0x7ffc0000 [ 455.604939][T13836] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2462'. [ 455.618870][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 455.624810][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 455.784587][T13843] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2464'. [ 456.292634][T13849] No buffer was provided with the request [ 457.683440][T13869] gre0: entered promiscuous mode [ 457.692804][T13869] gre0: entered allmulticast mode [ 459.535201][T13892] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(7) [ 459.538147][T13892] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 459.542186][T13892] vhci_hcd vhci_hcd.0: Device attached [ 459.755930][T13893] vhci_hcd: connection closed [ 459.756296][ T62] vhci_hcd vhci_hcd.6: stop threads [ 459.764009][ T62] vhci_hcd vhci_hcd.6: release socket [ 459.765854][ T62] vhci_hcd vhci_hcd.6: disconnect device [ 461.364581][T13908] syzkaller0: entered promiscuous mode [ 461.366674][T13908] syzkaller0: entered allmulticast mode [ 461.626369][T13911] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2477'. [ 462.555668][ T101] Bluetooth: hci4: Frame reassembly failed (-84) [ 462.558440][ T101] Bluetooth: hci4: Frame reassembly failed (-84) [ 463.276888][ T5296] Bluetooth: hci1: unexpected event for opcode 0x0c12 [ 464.262763][ T40] audit: type=1326 audit(2000000604.830:1999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13938 comm="syz.2.2489" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb8f6c code=0x7ffc0000 [ 464.273049][ T40] audit: type=1326 audit(2000000604.830:2000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13938 comm="syz.2.2489" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb8f6c code=0x7ffc0000 [ 464.283350][ T40] audit: type=1326 audit(2000000604.830:2001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13938 comm="syz.2.2489" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7fb8f6c code=0x7ffc0000 [ 464.291390][ T40] audit: type=1326 audit(2000000604.830:2002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13938 comm="syz.2.2489" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb8f6c code=0x7ffc0000 [ 464.299969][ T40] audit: type=1326 audit(2000000604.830:2003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13938 comm="syz.2.2489" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb8f6c code=0x7ffc0000 [ 464.307610][ T40] audit: type=1326 audit(2000000604.830:2004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13938 comm="syz.2.2489" exe="/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf7fb8f6c code=0x7ffc0000 [ 464.480851][ T40] audit: type=1326 audit(2000000605.060:2005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13938 comm="syz.2.2489" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb8f6c code=0x7ffc0000 [ 464.543001][ T64] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 464.545420][ T5296] Bluetooth: hci4: command 0x1003 tx timeout [ 464.581078][ T40] audit: type=1326 audit(2000000605.060:2006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13938 comm="syz.2.2489" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb8f6c code=0x7ffc0000 [ 465.858640][T13962] lo: entered allmulticast mode [ 467.291975][T13982] fuse: Unknown parameter '0x000000000000000a00000000000000000000' [ 467.342835][ T64] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 467.347475][ T64] Bluetooth: hci1: Injecting HCI hardware error event [ 467.354272][ T64] Bluetooth: hci1: hardware error 0x00 [ 469.422766][ T64] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 471.128182][T14015] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(5) [ 471.131137][T14015] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 471.140429][T14015] vhci_hcd vhci_hcd.0: Device attached [ 471.412871][ T6007] usb 50-1: SetAddress Request (2) to port 0 [ 471.416109][ T6007] usb 50-1: new SuperSpeed USB device number 2 using vhci_hcd [ 471.674576][T14034] netlink: 'syz.5.2509': attribute type 25 has an invalid length. [ 474.070589][T14060] fuse: Bad value for 'fd' [ 474.166729][T14016] vhci_hcd: connection reset by peer [ 474.170615][ T1168] vhci_hcd vhci_hcd.6: stop threads [ 474.173096][ T1168] vhci_hcd vhci_hcd.6: release socket [ 474.175372][ T1168] vhci_hcd vhci_hcd.6: disconnect device [ 474.489436][T14067] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(6) [ 474.491659][T14067] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 474.496915][T14067] vhci_hcd vhci_hcd.0: Device attached [ 475.221148][ T40] audit: type=1326 audit(2000000615.800:2007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14076 comm="syz.2.2519" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fb8f6c code=0x0 [ 475.402387][T14068] vhci_hcd: connection closed [ 475.419561][ T13] vhci_hcd vhci_hcd.6: stop threads [ 475.427122][ T13] vhci_hcd vhci_hcd.6: release socket [ 475.429083][ T13] vhci_hcd vhci_hcd.6: disconnect device [ 476.139483][T14105] fuse: Bad value for 'group_id' [ 476.153134][T14105] fuse: Bad value for 'group_id' [ 476.464021][ T6007] usb 50-1: device descriptor read/8, error -110 [ 476.922908][ T53] vhci_hcd vhci_hcd.6: vhci_device speed not set [ 477.228968][T14114] No buffer was provided with the request [ 478.013419][ T6007] usb usb50-port1: attempt power cycle [ 478.813156][ T6007] usb usb50-port1: unable to enumerate USB device [ 479.984912][T14139] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2534'. [ 479.995203][T14139] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2534'. [ 482.758453][T14144] syz.5.2535 (14144) used greatest stack depth: 19088 bytes left [ 485.222721][T14146] kthread_run failed with err -4 [ 486.351068][T14188] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 489.037067][T14214] ip6erspan0: entered allmulticast mode [ 490.199032][ T40] audit: type=1326 audit(2000000630.780:2008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14227 comm="syz.4.2550" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bef6c code=0x7ffc0000 [ 490.362758][ T40] audit: type=1326 audit(2000000630.780:2009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14227 comm="syz.4.2550" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bef6c code=0x7ffc0000 [ 490.372501][ T40] audit: type=1326 audit(2000000630.790:2010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14227 comm="syz.4.2550" exe="/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf70bef6c code=0x7ffc0000 [ 490.403989][ T40] audit: type=1326 audit(2000000630.790:2011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14227 comm="syz.4.2550" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bef6c code=0x7ffc0000 [ 490.421560][ T40] audit: type=1326 audit(2000000630.790:2012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14227 comm="syz.4.2550" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bef6c code=0x7ffc0000 [ 490.441575][ T40] audit: type=1326 audit(2000000630.790:2013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14227 comm="syz.4.2550" exe="/syz-executor" sig=0 arch=40000003 syscall=265 compat=1 ip=0xf70bef6c code=0x7ffc0000 [ 490.451802][ T40] audit: type=1326 audit(2000000630.790:2014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14227 comm="syz.4.2550" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bef6c code=0x7ffc0000 [ 490.491281][ T40] audit: type=1326 audit(2000000630.790:2015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14227 comm="syz.4.2550" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bef6c code=0x7ffc0000 [ 490.509659][ T40] audit: type=1326 audit(2000000630.800:2016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14227 comm="syz.4.2550" exe="/syz-executor" sig=0 arch=40000003 syscall=83 compat=1 ip=0xf70bef6c code=0x7ffc0000 [ 490.519642][ T40] audit: type=1326 audit(2000000630.800:2017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14227 comm="syz.4.2550" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bef6c code=0x7ffc0000 [ 491.681096][T14248] Cannot find add_set index 2 as target [ 495.870539][T14270] overlayfs: failed to resolve './file0': -2 [ 495.900755][T14271] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2558'. [ 498.423260][ T6011] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 500.265065][T14292] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2565'. [ 506.704018][ T1415] ieee802154 phy0 wpan0: encryption failed: -22 [ 506.707162][ T1415] ieee802154 phy1 wpan1: encryption failed: -22 [ 507.328278][T14335] netlink: 'syz.4.2574': attribute type 24 has an invalid length. [ 512.646686][T14373] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 515.607856][T14391] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2589'. [ 522.832089][ T40] kauditd_printk_skb: 16 callbacks suppressed [ 522.832112][ T40] audit: type=1804 audit(2000000663.400:2034): pid=14419 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.2597" name="file0" dev="tmpfs" ino=2323 res=1 errno=0 [ 524.057881][T14428] random: crng reseeded on system resumption [ 524.154369][T14430] could not allocate digest TFM handle sha224-generic [ 524.706691][ T24] IPVS: starting estimator thread 0... [ 524.792819][T14444] IPVS: using max 38 ests per chain, 91200 per kthread [ 526.582862][T14453] fuse: Unknown parameter '0x000000000000000a00000000000000000000' [ 526.631456][T14460] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(6) [ 526.633572][T14460] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 527.220866][T14460] vhci_hcd vhci_hcd.0: Device attached [ 527.702791][ T6007] usb 50-1: SetAddress Request (6) to port 0 [ 527.704888][ T6007] usb 50-1: new SuperSpeed USB device number 6 using vhci_hcd [ 527.917859][T14464] vhci_hcd: connection reset by peer [ 527.920726][ T61] vhci_hcd vhci_hcd.6: stop threads [ 527.922743][ T61] vhci_hcd vhci_hcd.6: release socket [ 527.924813][ T61] vhci_hcd vhci_hcd.6: disconnect device [ 529.888801][ T40] audit: type=1326 audit(2000000670.470:2035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14489 comm="syz.5.2612" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf702ef6c code=0x0 [ 530.473624][T14499] could not allocate digest TFM handle sha224-generic [ 531.848995][T14509] random: crng reseeded on system resumption [ 531.918011][T14507] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(6) [ 531.920308][T14507] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 531.930898][T14507] vhci_hcd vhci_hcd.0: Device attached [ 532.263582][T14510] vhci_hcd: connection closed [ 532.263908][ T62] vhci_hcd vhci_hcd.6: stop threads [ 532.269876][ T62] vhci_hcd vhci_hcd.6: release socket [ 532.285772][ T62] vhci_hcd vhci_hcd.6: disconnect device [ 532.373249][T14520] lo speed is unknown, defaulting to 1000 [ 532.378874][T14520] lo speed is unknown, defaulting to 1000 [ 532.382323][T14520] lo speed is unknown, defaulting to 1000 [ 532.690500][T14520] infiniband syU×: set down [ 532.690725][ T6026] lo speed is unknown, defaulting to 1000 [ 532.696909][T14520] infiniband syU×: added lo [ 532.761826][T14520] RDS/IB: syU×: added [ 532.763936][T14520] smc: adding ib device syU× with port count 1 [ 532.766700][T14520] smc: ib device syU× port 1 has no pnetid [ 532.770622][ T6026] lo speed is unknown, defaulting to 1000 [ 532.776597][T14520] lo speed is unknown, defaulting to 1000 [ 532.897941][T14520] lo speed is unknown, defaulting to 1000 [ 533.023602][T14520] lo speed is unknown, defaulting to 1000 [ 533.256157][T14520] lo speed is unknown, defaulting to 1000 [ 533.381940][T14520] lo speed is unknown, defaulting to 1000 [ 533.464457][ T6007] usb 50-1: device descriptor read/8, error -110 [ 535.934688][ T6007] usb usb50-port1: attempt power cycle [ 537.745719][T14544] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 537.819575][T14544] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 538.580983][T14550] tipc: Can't bind to reserved service type 1 [ 538.584137][T14550] netlink: 'syz.2.2625': attribute type 39 has an invalid length. [ 538.590875][ T6007] usb usb50-port1: unable to enumerate USB device [ 538.635820][T14553] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2625'. [ 538.639168][T14553] netlink: 43 bytes leftover after parsing attributes in process `syz.2.2625'. [ 538.643744][T14553] netlink: 'syz.2.2625': attribute type 5 has an invalid length. [ 538.646634][T14553] netlink: 43 bytes leftover after parsing attributes in process `syz.2.2625'. [ 539.371478][ T40] audit: type=1326 audit(2000000679.950:2036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14557 comm="syz.6.2628" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702ef6c code=0x7ffc0000 [ 539.379185][ T40] audit: type=1326 audit(2000000679.950:2037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14557 comm="syz.6.2628" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702ef6c code=0x7ffc0000 [ 539.386830][ T40] audit: type=1326 audit(2000000679.950:2038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14557 comm="syz.6.2628" exe="/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf702ef6c code=0x7ffc0000 [ 539.394835][ T40] audit: type=1326 audit(2000000679.950:2039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14557 comm="syz.6.2628" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702ef6c code=0x7ffc0000 [ 539.402686][ T40] audit: type=1326 audit(2000000679.950:2040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14557 comm="syz.6.2628" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702ef6c code=0x7ffc0000 [ 539.410576][ T40] audit: type=1326 audit(2000000679.960:2041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14557 comm="syz.6.2628" exe="/syz-executor" sig=0 arch=40000003 syscall=265 compat=1 ip=0xf702ef6c code=0x7ffc0000 [ 539.418630][ T40] audit: type=1326 audit(2000000679.960:2042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14557 comm="syz.6.2628" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702ef6c code=0x7ffc0000 [ 539.426628][ T40] audit: type=1326 audit(2000000679.960:2043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14557 comm="syz.6.2628" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702ef6c code=0x7ffc0000 [ 539.435607][ T40] audit: type=1326 audit(2000000679.980:2044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14557 comm="syz.6.2628" exe="/syz-executor" sig=0 arch=40000003 syscall=83 compat=1 ip=0xf702ef6c code=0x7ffc0000 [ 539.443049][ T40] audit: type=1326 audit(2000000679.980:2045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14557 comm="syz.6.2628" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702ef6c code=0x7ffc0000 [ 539.529010][T14567] overlayfs: missing 'lowerdir' [ 543.043485][T14603] tmpfs: Bad value for 'mpol' [ 543.864429][T14596] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 543.867594][T14596] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 544.108797][T14612] kvm: kvm [14607]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010058) = 0xcd [ 544.268054][T14596] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 544.278137][T14596] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 544.358664][T14596] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 544.362922][T14596] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 544.416292][T14596] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 544.419772][T14596] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 544.458484][T14606] netlink: 136 bytes leftover after parsing attributes in process `syz.5.2639'. [ 544.509382][ T130] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 544.513257][ T130] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 544.521042][ T130] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 544.524190][ T130] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 544.531854][ T130] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 544.536239][ T130] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 544.548156][ T130] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 544.551694][ T130] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 547.857343][T14626] netlink: 124 bytes leftover after parsing attributes in process `syz.4.2642'. [ 548.141230][T14629] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2643'. [ 548.163380][T14629] bond5: Unable to set down delay as MII monitoring is disabled [ 548.256881][T14629] bond5 (unregistering): Released all slaves [ 548.269167][T14626] lo speed is unknown, defaulting to 1000 [ 548.413649][T14637] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2645'. [ 551.199819][T14660] fuse: Unknown parameter 'fd0x000000000000000a00000000000000000000' [ 551.790699][ T40] kauditd_printk_skb: 16 callbacks suppressed [ 551.790713][ T40] audit: type=1326 audit(2000000692.370:2062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14663 comm="syz.4.2650" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf70bef6c code=0x0 [ 551.853789][T14658] lo speed is unknown, defaulting to 1000 [ 551.988935][T14661] siw: device registration error -23 [ 552.555288][T14678] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2651'. [ 553.131529][ T6171] IPVS: starting estimator thread 0... [ 553.234377][T14680] IPVS: using max 32 ests per chain, 76800 per kthread [ 554.338133][T14688] overlayfs: failed to clone upperpath [ 555.114985][T14697] x_tables: duplicate underflow at hook 1 [ 556.617786][T14708] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2660'. [ 556.923925][T14716] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2659'. [ 556.927007][T14716] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2659'. [ 557.155158][T14722] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 557.421684][T14727] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(5) [ 557.424097][T14727] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 557.428720][T14727] vhci_hcd vhci_hcd.0: Device attached [ 557.685253][ T1168] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 557.743077][T14728] vhci_hcd: connection closed [ 557.752492][ T62] vhci_hcd vhci_hcd.6: stop threads [ 557.756445][ T62] vhci_hcd vhci_hcd.6: release socket [ 557.758357][ T62] vhci_hcd vhci_hcd.6: disconnect device [ 557.761415][ T1168] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 557.813071][ T53] usb 50-1: enqueue for inactive port 0 [ 557.857590][ T1168] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 558.010390][ T1168] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 558.242833][ T1168] bridge_slave_1: left allmulticast mode [ 558.244936][ T1168] bridge_slave_1: left promiscuous mode [ 558.247358][ T1168] bridge0: port 2(bridge_slave_1) entered disabled state [ 558.271264][ T1168] bridge_slave_0: left allmulticast mode [ 558.278992][ T1168] bridge_slave_0: left promiscuous mode [ 558.281062][ T1168] bridge0: port 1(bridge_slave_0) entered disabled state [ 558.374297][ T53] usb usb50-port1: attempt power cycle [ 558.495371][ T6102] libceph: connect (1)[c::]:6789 error -101 [ 558.505619][ T6102] libceph: mon0 (1)[c::]:6789 connect error [ 558.645599][ T1168] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 558.658433][ T1168] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 558.665174][ T1168] bond0 (unregistering): Released all slaves [ 558.732223][T14734] ceph: No mds server is up or the cluster is laggy [ 558.800237][T14750] overlayfs: missing 'lowerdir' [ 559.136068][T14762] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2669'. [ 559.167183][ T53] usb usb50-port1: unable to enumerate USB device [ 559.512671][T14763] fuse: Bad value for 'fd' [ 560.005016][ T24] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 560.731433][ T1168] hsr_slave_0: left promiscuous mode [ 560.739553][ T1168] hsr_slave_1: left promiscuous mode [ 560.745685][ T1168] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 560.749433][ T1168] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 560.757393][ T1168] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 560.761141][ T1168] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 560.785750][ T1168] veth1_macvtap: left promiscuous mode [ 560.788134][ T1168] veth0_macvtap: left promiscuous mode [ 560.793327][ T1168] veth1_vlan: left promiscuous mode [ 560.796899][ T1168] veth0_vlan: left promiscuous mode [ 561.166902][ T1168] team0 (unregistering): Port device team_slave_1 removed [ 561.179127][ T1168] team0 (unregistering): Port device team_slave_0 removed [ 561.198583][ T40] audit: type=1326 audit(2000000701.780:2063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14780 comm="syz.4.2673" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bef6c code=0x7ffc0000 [ 561.228349][ T40] audit: type=1326 audit(2000000701.780:2064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14780 comm="syz.4.2673" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bef6c code=0x7ffc0000 [ 561.262929][ T40] audit: type=1326 audit(2000000701.780:2065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14780 comm="syz.4.2673" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bef6c code=0x7ffc0000 [ 561.271279][ T40] audit: type=1326 audit(2000000701.780:2066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14780 comm="syz.4.2673" exe="/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf70bef6c code=0x7ffc0000 [ 561.278900][ T40] audit: type=1326 audit(2000000701.790:2067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14780 comm="syz.4.2673" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bef6c code=0x7ffc0000 [ 561.288620][ T40] audit: type=1326 audit(2000000701.790:2068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14780 comm="syz.4.2673" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bef6c code=0x7ffc0000 [ 561.297209][ T40] audit: type=1326 audit(2000000701.790:2069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14780 comm="syz.4.2673" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bef6c code=0x7ffc0000 [ 561.306004][ T40] audit: type=1326 audit(2000000701.790:2070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14780 comm="syz.4.2673" exe="/syz-executor" sig=0 arch=40000003 syscall=394 compat=1 ip=0xf70bef6c code=0x7ffc0000 [ 561.316446][ T40] audit: type=1326 audit(2000000701.790:2071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14780 comm="syz.4.2673" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bef6c code=0x7ffc0000 [ 561.326950][ T40] audit: type=1326 audit(2000000701.790:2072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14780 comm="syz.4.2673" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bef6c code=0x7ffc0000 [ 562.891755][ T1168] IPVS: stop unused estimator thread 0... [ 564.899775][T14836] Bluetooth: MGMT ver 1.23 [ 564.992208][T14839] overlayfs: failed to resolve 'fsuuid=4e3': -2 [ 566.888861][T14840] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 566.892353][T14840] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 566.897561][T14840] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 567.919024][ T1415] ieee802154 phy0 wpan0: encryption failed: -22 [ 567.921357][ T1415] ieee802154 phy1 wpan1: encryption failed: -22 [ 568.078168][T14866] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 568.818538][T14893] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2689'. [ 569.473248][T14898] lo speed is unknown, defaulting to 1000 [ 571.430150][T14913] netlink: 72 bytes leftover after parsing attributes in process `syz.6.2694'. [ 572.620657][T14919] Bluetooth: hci0: unsupported parameter 27922 [ 572.624190][T14919] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 572.734125][T14927] overlayfs: missing 'lowerdir' [ 573.181917][T14933] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(6) [ 573.184991][T14933] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 573.190096][T14933] vhci_hcd vhci_hcd.0: Device attached [ 573.420397][T14933] rdma_rxe: rxe_newlink: failed to add wg2 [ 573.503206][ T6007] usb 50-1: SetAddress Request (14) to port 0 [ 573.506883][ T6007] usb 50-1: new SuperSpeed USB device number 14 using vhci_hcd [ 573.859535][T14943] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2701'. [ 574.090131][T14934] vhci_hcd: connection reset by peer [ 574.093285][ T1242] vhci_hcd vhci_hcd.6: stop threads [ 574.095264][ T1242] vhci_hcd vhci_hcd.6: release socket [ 574.097683][ T1242] vhci_hcd vhci_hcd.6: disconnect device [ 575.483761][ T40] kauditd_printk_skb: 214 callbacks suppressed [ 575.483781][ T40] audit: type=1326 audit(2000000716.070:2287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14973 comm="syz.5.2703" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf702ef6c code=0x0 [ 579.209613][T15006] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2711'. [ 579.675357][ T6007] usb 50-1: device descriptor read/8, error -110 [ 579.818253][T15008] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(6) [ 579.821158][T15008] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 579.840983][T15008] vhci_hcd vhci_hcd.0: Device attached [ 580.004999][ T6007] usb 50-1: SetAddress Request (15) to port 0 [ 580.007064][ T6007] usb 50-1: new SuperSpeed USB device number 15 using vhci_hcd [ 581.702609][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 582.033232][T15009] vhci_hcd: connection reset by peer [ 582.041123][ T101] vhci_hcd vhci_hcd.6: stop threads [ 582.052752][ T101] vhci_hcd vhci_hcd.6: release socket [ 582.055472][ T101] vhci_hcd vhci_hcd.6: disconnect device [ 583.674573][T15030] kAFS: unable to lookup cell '(,c¾ûL' [ 584.027976][T15032] lo speed is unknown, defaulting to 1000 [ 585.102796][ T6007] usb 50-1: device descriptor read/8, error -110 [ 585.355944][ T6007] usb usb50-port1: attempt power cycle [ 585.366784][T15044] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2717'. [ 585.370874][T15044] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2717'. [ 585.375149][T15044] netlink: 'syz.6.2717': attribute type 13 has an invalid length. [ 585.379313][T15044] netlink: 'syz.6.2717': attribute type 14 has an invalid length. [ 585.838523][T15047] netlink: 'syz.5.2718': attribute type 12 has an invalid length. [ 586.466122][T15054] input: syz0 as /devices/virtual/input/input37 [ 587.850886][ T6007] usb usb50-port1: unable to enumerate USB device [ 591.148063][T15070] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2721'. [ 591.231495][ T40] audit: type=1326 audit(2000000731.810:2288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15068 comm="syz.2.2722" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fb8f6c code=0x0 [ 591.290212][T15073] Bluetooth: hci0: unsupported parameter 255 [ 591.296202][T15073] Bluetooth: hci0: unsupported parameter 255 [ 593.979921][ T40] audit: type=1326 audit(2000000734.560:2289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15095 comm="syz.4.2730" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bef6c code=0x7ffc0000 [ 593.991276][ T40] audit: type=1326 audit(2000000734.570:2290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15095 comm="syz.4.2730" exe="/syz-executor" sig=0 arch=40000003 syscall=437 compat=1 ip=0xf70bef6c code=0x7ffc0000 [ 594.002921][ T40] audit: type=1326 audit(2000000734.590:2291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15095 comm="syz.4.2730" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bef6c code=0x7ffc0000 [ 594.015587][ T40] audit: type=1326 audit(2000000734.600:2292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15095 comm="syz.4.2730" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf71f5cab code=0x7ffc0000 [ 594.043618][ T40] audit: type=1326 audit(2000000734.620:2293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15095 comm="syz.4.2730" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bef6c code=0x7ffc0000 [ 594.066621][ T40] audit: type=1326 audit(2000000734.640:2294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15095 comm="syz.4.2730" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf70bef6c code=0x7ffc0000 [ 594.078099][ T40] audit: type=1326 audit(2000000734.660:2295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15095 comm="syz.4.2730" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bef6c code=0x7ffc0000 [ 594.087074][ T40] audit: type=1326 audit(2000000734.670:2296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15095 comm="syz.4.2730" exe="/syz-executor" sig=0 arch=40000003 syscall=14 compat=1 ip=0xf70bef6c code=0x7ffc0000 [ 594.095963][ T40] audit: type=1326 audit(2000000734.680:2297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15095 comm="syz.4.2730" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bef6c code=0x7ffc0000 [ 594.100994][T15101] cgroup: fork rejected by pids controller in /syz6 [ 594.115670][T15098] 9p: Bad value for 'rfdno' [ 594.129388][T15098] pim6reg: entered allmulticast mode [ 594.853433][ T5296] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 594.858574][ T5296] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 594.861968][ T5296] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 594.867946][ T5296] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 594.871360][ T5296] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 595.002787][T15115] lo speed is unknown, defaulting to 1000 [ 595.297280][T15115] chnl_net:caif_netlink_parms(): no params data found [ 595.348690][T15115] bridge0: port 1(bridge_slave_0) entered blocking state [ 595.351032][T15115] bridge0: port 1(bridge_slave_0) entered disabled state [ 595.353927][T15115] bridge_slave_0: entered allmulticast mode [ 595.356989][T15115] bridge_slave_0: entered promiscuous mode [ 595.360543][T15115] bridge0: port 2(bridge_slave_1) entered blocking state [ 595.373027][T15115] bridge0: port 2(bridge_slave_1) entered disabled state [ 595.375909][T15115] bridge_slave_1: entered allmulticast mode [ 595.379032][T15115] bridge_slave_1: entered promiscuous mode [ 595.410244][T15115] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 595.424339][T15115] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 595.466419][T15115] team0: Port device team_slave_0 added [ 595.470063][T15115] team0: Port device team_slave_1 added [ 595.485065][T15115] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 595.487389][T15115] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 595.496528][T15115] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 595.501258][T15115] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 595.512605][T15115] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 595.531715][T15115] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 595.581381][T15115] hsr_slave_0: entered promiscuous mode [ 595.593309][T15115] hsr_slave_1: entered promiscuous mode [ 595.770895][T15115] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 595.775331][T15115] netdevsim netdevsim6 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 596.435154][T15115] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 596.438916][T15115] netdevsim netdevsim6 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 596.537131][T15115] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 596.540249][T15115] netdevsim netdevsim6 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 596.698350][T15115] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 596.701461][T15115] netdevsim netdevsim6 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 596.905807][T15115] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 596.911536][T15115] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 596.917299][T15115] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 596.935531][T15115] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 596.943189][ T5296] Bluetooth: hci3: command tx timeout [ 596.991337][T15115] 8021q: adding VLAN 0 to HW filter on device bond0 [ 596.994740][T15125] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2738'. [ 597.010960][T15115] 8021q: adding VLAN 0 to HW filter on device team0 [ 597.025189][ T101] bridge0: port 1(bridge_slave_0) entered blocking state [ 597.028775][ T101] bridge0: port 1(bridge_slave_0) entered forwarding state [ 597.049483][ T101] bridge0: port 2(bridge_slave_1) entered blocking state [ 597.052975][ T101] bridge0: port 2(bridge_slave_1) entered forwarding state [ 597.227621][T15115] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 597.430651][T15115] veth0_vlan: entered promiscuous mode [ 597.446249][T15115] veth1_vlan: entered promiscuous mode [ 597.468427][T15115] veth0_macvtap: entered promiscuous mode [ 597.476443][T15115] veth1_macvtap: entered promiscuous mode [ 597.489807][T15115] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 597.498275][T15115] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 597.506662][ T1168] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 597.509662][ T1168] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 597.527549][ T61] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 597.531035][ T61] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 597.657870][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 597.661031][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 597.750273][ T101] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 597.755260][ T101] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 598.000518][T15158] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 598.013082][T15158] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 598.027130][T15158] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 598.055993][T15007] IPVS: starting estimator thread 0... [ 598.143414][T15166] IPVS: using max 26 ests per chain, 62400 per kthread [ 599.982814][ T5296] Bluetooth: hci3: command 0x040f tx timeout [ 601.253294][T15180] lo speed is unknown, defaulting to 1000 [ 602.062900][ T5296] Bluetooth: hci3: command 0x040f tx timeout [ 602.598652][ T40] kauditd_printk_skb: 24 callbacks suppressed [ 602.598666][ T40] audit: type=1326 audit(2000000743.180:2322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15185 comm="syz.2.2745" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb8f6c code=0x7ffc0000 [ 602.615892][ T40] audit: type=1326 audit(2000000743.190:2323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15185 comm="syz.2.2745" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb8f6c code=0x7ffc0000 [ 602.646379][ T40] audit: type=1326 audit(2000000743.190:2324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15185 comm="syz.2.2745" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb8f6c code=0x7ffc0000 [ 602.670818][ T40] audit: type=1326 audit(2000000743.190:2325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15185 comm="syz.2.2745" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb8f6c code=0x7ffc0000 [ 602.712936][ T40] audit: type=1326 audit(2000000743.190:2326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15185 comm="syz.2.2745" exe="/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf7fb8f6c code=0x7ffc0000 [ 602.731733][ T40] audit: type=1326 audit(2000000743.190:2327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15185 comm="syz.2.2745" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb8f6c code=0x7ffc0000 [ 602.750503][ T40] audit: type=1326 audit(2000000743.190:2328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15185 comm="syz.2.2745" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb8f6c code=0x7ffc0000 [ 602.768997][ T40] audit: type=1326 audit(2000000743.190:2329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15185 comm="syz.2.2745" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb8f6c code=0x7ffc0000 [ 602.780492][ T40] audit: type=1326 audit(2000000743.190:2330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15185 comm="syz.2.2745" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb8f6c code=0x7ffc0000 [ 602.810567][ T40] audit: type=1326 audit(2000000743.190:2331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15185 comm="syz.2.2745" exe="/syz-executor" sig=0 arch=40000003 syscall=394 compat=1 ip=0xf7fb8f6c code=0x7ffc0000 [ 604.142817][ T5296] Bluetooth: hci3: command 0x040f tx timeout [ 605.120898][T15207] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2750'. [ 605.372906][T15218] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2749'. [ 605.378833][T15218] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2749'. [ 605.386763][T15218] nfs: Unknown parameter '¸' [ 606.263839][ T5296] Bluetooth: hci3: command 0x040f tx timeout [ 608.247949][T15220] overlayfs: failed to resolve './file1': -2 [ 608.482826][ T5296] Bluetooth: hci3: command 0x040f tx timeout [ 608.653300][T15238] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2758'. [ 608.657555][T15238] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2758'. [ 608.740780][T15239] netlink: 'syz.6.2756': attribute type 4 has an invalid length. [ 609.609782][ T40] kauditd_printk_skb: 149 callbacks suppressed [ 609.609802][ T40] audit: type=1326 audit(2000000750.190:2481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15243 comm="syz.2.2759" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb8f6c code=0x7ffc0000 [ 609.620892][ T40] audit: type=1326 audit(2000000750.200:2482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15243 comm="syz.2.2759" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb8f6c code=0x7ffc0000 [ 609.632725][ T40] audit: type=1326 audit(2000000750.210:2483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15243 comm="syz.2.2759" exe="/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf7fb8f6c code=0x7ffc0000 [ 609.647023][ T40] audit: type=1326 audit(2000000750.210:2484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15243 comm="syz.2.2759" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb8f6c code=0x7ffc0000 [ 609.654858][ T40] audit: type=1326 audit(2000000750.210:2485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15243 comm="syz.2.2759" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb8f6c code=0x7ffc0000 [ 609.663627][ T40] audit: type=1326 audit(2000000750.210:2486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15243 comm="syz.2.2759" exe="/syz-executor" sig=0 arch=40000003 syscall=297 compat=1 ip=0xf7fb8f6c code=0x7ffc0000 [ 609.670877][ T40] audit: type=1326 audit(2000000750.210:2487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15243 comm="syz.2.2759" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb8f6c code=0x7ffc0000 [ 609.680377][ T40] audit: type=1326 audit(2000000750.210:2488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15243 comm="syz.2.2759" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb8f6c code=0x7ffc0000 [ 609.688799][ T40] audit: type=1326 audit(2000000750.210:2489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15243 comm="syz.2.2759" exe="/syz-executor" sig=0 arch=40000003 syscall=358 compat=1 ip=0xf7fb8f6c code=0x7ffc0000 [ 609.696166][ T40] audit: type=1326 audit(2000000750.220:2490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15243 comm="syz.2.2759" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb8f6c code=0x7ffc0000 [ 610.155048][T15257] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2761'. [ 612.194936][T15272] misc userio: Invalid payload size [ 612.197644][T15272] misc userio: No port type given on /dev/userio [ 612.386769][T15280] fuse: Unknown parameter '0x000000000000000a00000000000000000000' [ 612.859651][T15279] lo speed is unknown, defaulting to 1000 [ 613.081249][T15291] overlayfs: failed to clone lowerpath [ 613.098721][T15291] overlayfs: failed to clone upperpath [ 614.443903][T15304] overlayfs: failed to clone lowerpath [ 614.593617][T15307] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2773'. [ 617.645750][T15333] fuse: Unknown parameter 'fd0x000000000000000a00000000000000000000' [ 617.835478][T15331] lo speed is unknown, defaulting to 1000 [ 618.158767][T15335] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2779'. [ 620.971092][T15360] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2784'. [ 620.993604][ T40] kauditd_printk_skb: 5 callbacks suppressed [ 620.993617][ T40] audit: type=1326 audit(2000000761.580:2496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15348 comm="syz.6.2781" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701ef6c code=0x7ffc0000 [ 621.030555][ T40] audit: type=1326 audit(2000000761.600:2497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15348 comm="syz.6.2781" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701ef6c code=0x7ffc0000 [ 621.091630][T15352] 9p: Bad value for 'rfdno' [ 621.156621][ T40] audit: type=1326 audit(2000000761.740:2498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15348 comm="syz.6.2781" exe="/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf701ef6c code=0x7ffc0000 [ 621.165762][T15352] pim6reg: entered allmulticast mode [ 621.202141][ T40] audit: type=1326 audit(2000000761.760:2499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15348 comm="syz.6.2781" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701ef6c code=0x7ffc0000 [ 621.277542][ T40] audit: type=1326 audit(2000000761.760:2500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15348 comm="syz.6.2781" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701ef6c code=0x7ffc0000 [ 621.988566][T15362] 8021q: adding VLAN 0 to HW filter on device bond0 [ 622.112974][T15362] 8021q: adding VLAN 0 to HW filter on device team0 [ 622.265151][T15362] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 622.377663][T15368] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 622.541048][T15377] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2786'. [ 622.544746][T15377] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2786'. [ 623.214314][T15373] can0: slcan on ptm0. [ 623.235357][T15368] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 623.317209][T15368] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 623.419598][T15368] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 623.606297][T15372] can0 (unregistered): slcan off ptm0. [ 623.784668][ T1168] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 623.788433][ T1168] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 623.791430][ T1168] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 623.815303][ T1168] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 625.013458][T15407] fuse: Unknown parameter 'fd0x000000000000000b00000000000000000000' [ 625.486875][T15405] lo speed is unknown, defaulting to 1000 [ 627.336314][T15424] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2795'. [ 628.418001][T15435] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2797'. [ 629.290274][T15462] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2801'. [ 629.296328][T15462] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2801'. [ 629.374628][ T1415] ieee802154 phy0 wpan0: encryption failed: -22 [ 629.377692][ T1415] ieee802154 phy1 wpan1: encryption failed: -22 [ 631.541838][ T40] audit: type=1326 audit(2000000772.120:2501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15474 comm="syz.2.2805" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb8f6c code=0x7ffc0000 [ 631.550440][ T40] audit: type=1326 audit(2000000772.130:2502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15474 comm="syz.2.2805" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb8f6c code=0x7ffc0000 [ 631.558117][ T40] audit: type=1326 audit(2000000772.140:2503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15474 comm="syz.2.2805" exe="/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf7fb8f6c code=0x7ffc0000 [ 631.565705][ T40] audit: type=1326 audit(2000000772.150:2504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15474 comm="syz.2.2805" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb8f6c code=0x7ffc0000 [ 631.578639][ T40] audit: type=1326 audit(2000000772.160:2505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15474 comm="syz.2.2805" exe="/syz-executor" sig=0 arch=40000003 syscall=297 compat=1 ip=0xf7fb8f6c code=0x7ffc0000 [ 631.594928][ T40] audit: type=1326 audit(2000000772.170:2506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15474 comm="syz.2.2805" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb8f6c code=0x7ffc0000 [ 631.604097][ T40] audit: type=1326 audit(2000000772.170:2507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15474 comm="syz.2.2805" exe="/syz-executor" sig=0 arch=40000003 syscall=358 compat=1 ip=0xf7fb8f6c code=0x7ffc0000 [ 631.611563][ T40] audit: type=1326 audit(2000000772.170:2508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15474 comm="syz.2.2805" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb8f6c code=0x7ffc0000 [ 631.619094][ T40] audit: type=1326 audit(2000000772.180:2509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15474 comm="syz.2.2805" exe="/syz-executor" sig=0 arch=40000003 syscall=425 compat=1 ip=0xf7fb8f6c code=0x7ffc0000 [ 631.631296][ T40] audit: type=1326 audit(2000000772.210:2510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15474 comm="syz.2.2805" exe="/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf7fb8f6c code=0x7ffc0000 [ 632.526729][T15492] fuse: Unknown parameter 'fd0x000000000000000a00000000000000000000' [ 634.149490][T15489] lo speed is unknown, defaulting to 1000 [ 635.576676][T15496] rdma_rxe: rxe_newlink: failed to add wg2 [ 635.833140][ T53] libceph: connect (1)[c::]:6789 error -101 [ 635.835792][ T53] libceph: mon0 (1)[c::]:6789 connect error [ 635.861451][T15529] ceph: No mds server is up or the cluster is laggy [ 635.889476][T15534] gre0: left promiscuous mode [ 635.891120][T15534] gre0: left allmulticast mode [ 636.191816][T15534] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 638.486576][T15554] netlink: 48 bytes leftover after parsing attributes in process `syz.6.2818'. [ 641.284279][T15572] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2822'. [ 641.289959][T15572] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2822'. [ 641.461152][T15576] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2823'. [ 642.865187][ T1168] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 642.870406][ T1168] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 646.078381][ T40] kauditd_printk_skb: 6 callbacks suppressed [ 646.078402][ T40] audit: type=1326 audit(2000000786.660:2517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15620 comm="syz.5.2833" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf702ef6c code=0x0 [ 648.925871][T15642] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 648.930173][T15642] overlayfs: failed to set xattr on upper [ 648.932496][T15642] overlayfs: ...falling back to redirect_dir=nofollow. [ 649.033188][T15642] overlayfs: ...falling back to index=off. [ 649.039175][T15642] overlayfs: ...falling back to uuid=null. [ 649.047180][T15642] overlayfs: maximum fs stacking depth exceeded [ 650.898475][T15663] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(8) [ 650.901122][T15663] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 650.912157][T15663] vhci_hcd vhci_hcd.0: Device attached [ 651.135750][T15669] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2843'. [ 651.141207][T15669] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2843'. [ 651.272659][ T53] usb 49-1: new high-speed USB device number 3 using vhci_hcd [ 652.736671][T15646] lo speed is unknown, defaulting to 1000 [ 652.924497][T15664] vhci_hcd: connection reset by peer [ 652.927420][ T161] vhci_hcd vhci_hcd.6: stop threads [ 652.929553][ T161] vhci_hcd vhci_hcd.6: release socket [ 652.931637][ T161] vhci_hcd vhci_hcd.6: disconnect device [ 657.338822][ T53] vhci_hcd vhci_hcd.6: vhci_device speed not set [ 659.357468][T15721] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2853'. [ 659.362935][T15721] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2853'. [ 661.231259][T15733] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2857'. [ 661.325092][T15733] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2857'. [ 661.793614][T15741] fuse: Unknown parameter 'user_id00000000000000000000' [ 662.489536][T15723] program syz.6.2854 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 662.552309][T15745] x_tables: duplicate underflow at hook 1 [ 662.564684][T15745] hub 8-0:1.0: USB hub found [ 662.570743][T15745] hub 8-0:1.0: 1 port detected [ 662.590296][T15746] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2858'. [ 663.493214][T15756] overlayfs: failed to clone lowerpath [ 663.496279][T15756] overlayfs: failed to clone lowerpath [ 663.500961][T15760] overlayfs: failed to clone upperpath [ 663.837644][T15763] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2861'. [ 663.902388][T15763] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2861'. [ 665.256165][T15772] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2864'. [ 665.261832][T15772] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2864'. [ 668.004083][T15791] netlink: 'syz.6.2868': attribute type 10 has an invalid length. [ 668.019087][T15791] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 668.056133][T15791] 8021q: adding VLAN 0 to HW filter on device bond1 [ 668.088040][T15791] bond_slave_0: entered promiscuous mode [ 668.090433][T15791] bond_slave_1: entered promiscuous mode [ 668.092689][T15791] syz_tun: entered promiscuous mode [ 668.097004][T15791] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 668.102848][T15791] bond1: (slave macvlan2): unknown ethtool speed (30000) for port 1 (set it to 0) [ 668.106610][T15791] bond1: (slave macvlan2): speed changed to 0 on port 1 [ 668.114884][T15791] bond1: (slave macvlan2): Enslaving as a backup interface with an up link [ 669.945138][T15793] Process accounting resumed [ 670.868549][ T40] audit: type=1326 audit(2000000811.450:2518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15812 comm="syz.6.2874" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701ef6c code=0x7ffc0000 [ 670.882839][ T40] audit: type=1326 audit(2000000811.450:2519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15812 comm="syz.6.2874" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701ef6c code=0x7ffc0000 [ 670.894792][ T40] audit: type=1326 audit(2000000811.460:2520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15812 comm="syz.6.2874" exe="/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf701ef6c code=0x7ffc0000 [ 670.963420][T15817] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2873'. [ 670.968245][T15817] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2873'. [ 671.869567][ T40] audit: type=1326 audit(2000000811.460:2521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15812 comm="syz.6.2874" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701ef6c code=0x7ffc0000 [ 671.955137][ T0] NOHZ tick-stop error: local softirq work is pending, handler #28a!!! [ 671.955505][ T40] audit: type=1326 audit(2000000811.460:2522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15812 comm="syz.6.2874" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701ef6c code=0x7ffc0000 [ 671.986109][ T40] audit: type=1326 audit(2000000811.460:2523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15812 comm="syz.6.2874" exe="/syz-executor" sig=0 arch=40000003 syscall=358 compat=1 ip=0xf701ef6c code=0x7ffc0000 [ 672.002859][ T40] audit: type=1326 audit(2000000811.460:2524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15812 comm="syz.6.2874" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701ef6c code=0x7ffc0000 [ 672.012927][ T40] audit: type=1326 audit(2000000811.460:2525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15812 comm="syz.6.2874" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701ef6c code=0x7ffc0000 [ 672.023699][ T40] audit: type=1326 audit(2000000811.460:2526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15812 comm="syz.6.2874" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf701ef6c code=0x7ffc0000 [ 672.035919][ T40] audit: type=1326 audit(2000000812.540:2527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15812 comm="syz.6.2874" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701ef6c code=0x7ffc0000 [ 675.958862][ T1242] geneve1: left allmulticast mode [ 675.961134][ T1242] geneve1: left promiscuous mode [ 675.972907][ T1242] bridge0: port 3(geneve1) entered disabled state [ 675.979318][ T1242] bridge_slave_1: left allmulticast mode [ 675.981783][ T1242] bridge_slave_1: left promiscuous mode [ 675.988717][ T1242] bridge0: port 2(bridge_slave_1) entered disabled state [ 676.011290][ T1242] bridge_slave_0: left allmulticast mode [ 676.014260][ T1242] bridge_slave_0: left promiscuous mode [ 676.016314][ T1242] bridge0: port 1(bridge_slave_0) entered disabled state [ 676.234832][ T1242] erspan0 (unregistering): left promiscuous mode [ 676.273358][ T1242] bond2 (unregistering): (slave geneve2): Releasing active interface [ 676.291656][ T1242] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 676.295528][ T1242] bridge0 (unregistering): left promiscuous mode [ 676.394325][ T1242] bond0 (unregistering): left promiscuous mode [ 676.397067][ T1242] bond_slave_0: left promiscuous mode [ 676.400057][ T1242] bond_slave_1: left promiscuous mode [ 676.403928][ T1242] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 676.409121][ T1242] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 676.413822][ T1242] bond0 (unregistering): Released all slaves [ 676.423822][ T1242] bond1 (unregistering): Released all slaves [ 676.431814][ T1242] bond2 (unregistering): Released all slaves [ 676.753143][ T1242] tipc: Left network mode [ 679.403991][ T1242] team0: left promiscuous mode [ 679.405781][ T1242] team_slave_0: left promiscuous mode [ 679.407879][ T1242] team_slave_1: left promiscuous mode [ 679.442844][ T1242] hsr_slave_0: left promiscuous mode [ 679.458826][ T1242] hsr_slave_1: left promiscuous mode [ 679.461205][ T1242] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 679.465127][ T1242] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 679.468818][ T1242] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 679.471342][ T1242] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 679.478558][ T1242] veth1_macvtap: left promiscuous mode [ 679.480403][ T1242] veth0_macvtap: left promiscuous mode [ 679.482196][ T1242] veth1_vlan: left promiscuous mode [ 679.485868][ T1242] veth0_vlan: left promiscuous mode [ 679.786702][ T1242] team0 (unregistering): Port device team_slave_1 removed [ 679.800794][ T1242] team0 (unregistering): Port device team_slave_0 removed [ 680.003984][ T40] kauditd_printk_skb: 79 callbacks suppressed [ 680.004000][ T40] audit: type=1326 audit(2000000820.590:2607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15879 comm="syz.5.2888" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702ef6c code=0x7ffc0000 [ 680.053879][ T40] audit: type=1326 audit(2000000820.600:2608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15879 comm="syz.5.2888" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702ef6c code=0x7ffc0000 [ 680.071912][ T40] audit: type=1326 audit(2000000820.630:2609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15879 comm="syz.5.2888" exe="/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf702ef6c code=0x7ffc0000 [ 680.083786][ T40] audit: type=1326 audit(2000000820.630:2610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15879 comm="syz.5.2888" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702ef6c code=0x7ffc0000 [ 680.188581][ T40] audit: type=1326 audit(2000000820.640:2611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15879 comm="syz.5.2888" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702ef6c code=0x7ffc0000 [ 680.453960][ T40] audit: type=1326 audit(2000000820.760:2612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15879 comm="syz.5.2888" exe="/syz-executor" sig=0 arch=40000003 syscall=297 compat=1 ip=0xf702ef6c code=0x7ffc0000 [ 680.752467][T15884] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 680.755739][T15884] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 680.759552][T15884] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 680.815316][ T40] audit: type=1326 audit(2000000821.400:2613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15879 comm="syz.5.2888" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702ef6c code=0x7ffc0000 [ 680.825019][ T40] audit: type=1326 audit(2000000821.410:2614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15879 comm="syz.5.2888" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702ef6c code=0x7ffc0000 [ 680.857959][ T40] audit: type=1326 audit(2000000821.440:2615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15879 comm="syz.5.2888" exe="/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf702ef6c code=0x7ffc0000 [ 680.870443][ T40] audit: type=1326 audit(2000000821.450:2616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15879 comm="syz.5.2888" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702ef6c code=0x7ffc0000 [ 680.882835][ T1242] IPVS: stop unused estimator thread 0... [ 682.991933][T15908] netlink: 72 bytes leftover after parsing attributes in process `syz.5.2893'. [ 685.090345][T15926] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(5) [ 685.092767][T15926] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 685.103396][T15926] vhci_hcd vhci_hcd.0: Device attached [ 685.449777][ T40] kauditd_printk_skb: 29 callbacks suppressed [ 685.449791][ T40] audit: type=1326 audit(2000000826.030:2646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15932 comm="syz.5.2898" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf702ef6c code=0x0 [ 685.455647][ T53] usb 50-1: SetAddress Request (18) to port 0 [ 685.467930][ T53] usb 50-1: new SuperSpeed USB device number 18 using vhci_hcd [ 685.584299][T15938] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2897'. [ 686.048434][T15929] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2896'. [ 686.367944][T15927] vhci_hcd: connection reset by peer [ 686.370884][ T61] vhci_hcd vhci_hcd.6: stop threads [ 686.373567][ T61] vhci_hcd vhci_hcd.6: release socket [ 686.375542][ T61] vhci_hcd vhci_hcd.6: disconnect device [ 686.475181][T15946] overlayfs: failed to clone lowerpath [ 686.541394][T15947] overlayfs: failed to clone lowerpath [ 687.139407][T15953] openvswitch: netlink: Unknown nsh attribute 0 [ 688.503866][T15964] usb usb8: usbfs: process 15964 (syz.6.2904) did not claim interface 0 before use [ 689.457956][T15958] overlayfs: failed to clone lowerpath [ 689.589497][T15958] overlayfs: failed to clone lowerpath [ 689.693326][T15967] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2904'. [ 689.824825][T15966] lo speed is unknown, defaulting to 1000 [ 690.854192][ T1415] ieee802154 phy0 wpan0: encryption failed: -22 [ 690.856725][ T1415] ieee802154 phy1 wpan1: encryption failed: -22 [ 690.970278][ T53] usb 50-1: device descriptor read/8, error -110 [ 691.749511][ T53] usb usb50-port1: attempt power cycle [ 692.384047][ T53] usb usb50-port1: unable to enumerate USB device [ 692.608611][T15985] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2909'. [ 693.259308][T15989] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 693.267350][T15989] Error validating options; rc = [-22] [ 693.339169][T15990] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2910'. [ 695.778586][T16007] No buffer was provided with the request [ 696.787737][T16010] veth1_to_hsr: entered allmulticast mode [ 697.455752][T16013] lo speed is unknown, defaulting to 1000 [ 697.506179][T16025] overlayfs: failed to clone lowerpath [ 697.513735][T16025] overlay: Unknown parameter 'dont_appraise' [ 699.959458][T16049] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 700.191990][T16049] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 700.201646][T16049] overlayfs: failed to look up (tracing) for ino (-66) [ 701.989834][T16061] comedi comedi2: pcm3724: I/O port conflict (0x8,16) [ 702.852676][ T40] audit: type=1400 audit(2000000843.320:2647): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=16066 comm="syz.5.2928" [ 702.984757][T16070] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2926'. [ 704.684541][T16081] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(7) [ 704.687338][T16081] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 704.694083][T16081] vhci_hcd vhci_hcd.0: Device attached [ 705.002644][ T53] usb 50-1: SetAddress Request (22) to port 0 [ 705.005006][ T53] usb 50-1: new SuperSpeed USB device number 22 using vhci_hcd [ 705.345544][T16082] vhci_hcd: connection reset by peer [ 705.348200][ T46] vhci_hcd vhci_hcd.6: stop threads [ 705.350554][ T46] vhci_hcd vhci_hcd.6: release socket [ 705.353903][ T46] vhci_hcd vhci_hcd.6: disconnect device [ 706.382965][T16109] No buffer was provided with the request [ 708.422601][T16124] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2940'. [ 708.439686][T16124] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2940'. [ 710.072702][ T53] usb 50-1: device descriptor read/8, error -110 [ 710.228262][T16127] veth3: entered promiscuous mode [ 710.237500][T16127] veth3: entered allmulticast mode [ 710.302188][T16133] fuse: Unknown parameter 'group_i00000000000000000000' [ 710.388184][T16111] lo speed is unknown, defaulting to 1000 [ 710.428548][ T40] audit: type=1326 audit(2000000851.010:2648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16135 comm="syz.4.2942" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf70bef6c code=0x0 [ 710.463766][ T53] usb usb50-port1: attempt power cycle [ 711.044478][ T53] usb usb50-port1: unable to enumerate USB device [ 711.360911][T16150] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2946'. [ 711.365691][T16150] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2946'. [ 711.872782][T16151] lo speed is unknown, defaulting to 1000 [ 711.883190][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 712.152238][T16157] x_tables: duplicate underflow at hook 1 [ 712.530812][T16164] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 714.845905][T16190] overlayfs: failed to clone upperpath [ 716.468233][T16203] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2957'. [ 716.476355][T16203] openvswitch: netlink: Flow actions attr not present in new flow. [ 716.898456][T16195] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 716.934862][T16206] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2956'. [ 717.178973][T16211] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2958'. [ 717.185137][T16211] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2958'. [ 719.047064][T16215] bridge0: port 3(erspan0) entered blocking state [ 719.049885][T16215] bridge0: port 3(erspan0) entered disabled state [ 719.052732][T16215] erspan0: entered allmulticast mode [ 719.055764][T16215] erspan0: entered promiscuous mode [ 719.514319][T16225] overlayfs: failed to clone lowerpath [ 719.662057][T16227] overlayfs: failed to clone lowerpath [ 724.657622][T16245] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2967'. [ 725.023941][T16257] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2969'. [ 725.034778][T16257] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2969'. [ 726.377424][T16260] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2968'. [ 726.382711][T16260] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2968'. [ 727.785290][T16268] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 727.803734][T16268] Error validating options; rc = [-22] [ 727.893478][T16270] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2970'. [ 728.810372][T16281] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(7) [ 728.813703][T16281] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 728.844305][T16281] vhci_hcd vhci_hcd.0: Device attached [ 728.886291][T16287] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2973'. [ 729.212703][T14054] usb 50-1: SetAddress Request (26) to port 0 [ 729.216085][T14054] usb 50-1: new SuperSpeed USB device number 26 using vhci_hcd [ 729.604330][T16284] vhci_hcd: connection reset by peer [ 729.608732][ T46] vhci_hcd vhci_hcd.6: stop threads [ 729.611009][ T46] vhci_hcd vhci_hcd.6: release socket [ 729.622980][ T46] vhci_hcd vhci_hcd.6: disconnect device [ 729.932255][T16298] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2975'. [ 729.939040][T16298] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2975'. [ 730.477847][T16304] fuse: Bad value for 'fd' [ 731.537773][T16314] netlink: 72 bytes leftover after parsing attributes in process `syz.6.2980'. [ 731.733993][ T5296] Bluetooth: hci3: Malformed Event: 0x13 [ 732.633291][T16320] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2981'. [ 732.640686][T16320] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2981'. [ 734.212840][T16328] No buffer was provided with the request [ 734.394391][T14054] usb 50-1: device descriptor read/8, error -110 [ 735.142143][T16335] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 735.697482][T16336] lo speed is unknown, defaulting to 1000 [ 736.149235][T14054] usb usb50-port1: attempt power cycle [ 737.084403][T14054] usb usb50-port1: unable to enumerate USB device [ 737.393693][ T6171] usb 11-1: new full-speed USB device number 8 using dummy_hcd [ 737.577610][ T6171] usb 11-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 737.582247][ T6171] usb 11-1: config 0 interface 0 altsetting 69 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 737.598602][ T6171] usb 11-1: config 0 interface 0 has no altsetting 0 [ 737.602328][ T6171] usb 11-1: New USB device found, idVendor=05ac, idProduct=0224, bcdDevice= 0.00 [ 737.610461][ T6171] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 737.652899][ T6171] usb 11-1: config 0 descriptor?? [ 737.684483][T16351] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2987'. [ 737.693513][T16351] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2987'. [ 737.716360][ T6171] usbhid 11-1:0.0: couldn't find an input interrupt endpoint [ 738.021593][T16357] fuse: Bad value for 'fd' [ 739.229664][ T6171] usb 11-1: USB disconnect, device number 8 [ 740.573942][T16370] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2991'. [ 740.578415][T16370] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2991'. [ 745.584117][T16396] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2997'. [ 746.696765][T16393] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2996'. [ 746.718385][T16393] netlink: 92 bytes leftover after parsing attributes in process `syz.2.2996'. [ 748.436181][ T40] audit: type=1326 audit(2000000890.029:2649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16411 comm="syz.6.3000" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701ef6c code=0x7ffc0000 [ 748.454122][ T40] audit: type=1326 audit(2000000890.039:2650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16411 comm="syz.6.3000" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701ef6c code=0x7ffc0000 [ 748.461443][ T40] audit: type=1326 audit(2000000890.039:2651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16411 comm="syz.6.3000" exe="/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf701ef6c code=0x7ffc0000 [ 748.470429][ T40] audit: type=1326 audit(2000000890.039:2652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16411 comm="syz.6.3000" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701ef6c code=0x7ffc0000 [ 748.480102][ T40] audit: type=1326 audit(2000000890.039:2653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16411 comm="syz.6.3000" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701ef6c code=0x7ffc0000 [ 748.487704][ T40] audit: type=1326 audit(2000000890.039:2654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16411 comm="syz.6.3000" exe="/syz-executor" sig=0 arch=40000003 syscall=297 compat=1 ip=0xf701ef6c code=0x7ffc0000 [ 748.496632][ T40] audit: type=1326 audit(2000000890.039:2655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16411 comm="syz.6.3000" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701ef6c code=0x7ffc0000 [ 748.505315][ T40] audit: type=1326 audit(2000000890.039:2656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16411 comm="syz.6.3000" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701ef6c code=0x7ffc0000 [ 748.516969][ T40] audit: type=1326 audit(2000000890.039:2657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16411 comm="syz.6.3000" exe="/syz-executor" sig=0 arch=40000003 syscall=358 compat=1 ip=0xf701ef6c code=0x7ffc0000 [ 748.532658][ T40] audit: type=1326 audit(2000000890.039:2658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16411 comm="syz.6.3000" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701ef6c code=0x7ffc0000 [ 749.334416][T16424] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3003'. [ 749.339171][T16424] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3003'. [ 751.773646][T16442] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3007'. [ 751.895961][T16445] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3014'. [ 751.905573][T16445] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3014'. [ 752.283063][ T1415] ieee802154 phy0 wpan0: encryption failed: -22 [ 752.285214][ T1415] ieee802154 phy1 wpan1: encryption failed: -22 [ 754.600920][T16456] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3008'. [ 755.218959][T16454] lo speed is unknown, defaulting to 1000 [ 755.730447][T16455] lo speed is unknown, defaulting to 1000 [ 756.793606][T16468] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3011'. [ 759.449394][T16490] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(5) [ 759.451762][T16490] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 759.527525][T16490] vhci_hcd vhci_hcd.0: Device attached [ 759.734041][T16495] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3017'. [ 759.804443][ T53] usb 50-1: SetAddress Request (30) to port 0 [ 759.848939][ T53] usb 50-1: new SuperSpeed USB device number 30 using vhci_hcd [ 760.512678][T16492] vhci_hcd: connection reset by peer [ 760.692730][ T1242] vhci_hcd vhci_hcd.6: stop threads [ 760.694781][ T1242] vhci_hcd vhci_hcd.6: release socket [ 760.697003][ T1242] vhci_hcd vhci_hcd.6: disconnect device [ 761.913685][T16499] x_tables: duplicate underflow at hook 1 [ 762.814458][T16520] netlink: 'syz.5.3022': attribute type 10 has an invalid length. [ 764.552424][T16515] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 764.566663][T16521] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 764.777217][T16515] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 764.888731][T16515] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 764.996487][ T53] usb 50-1: device descriptor read/8, error -110 [ 765.134012][T16530] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3023'. [ 765.162939][T16515] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 765.225782][T16530] netlink: 92 bytes leftover after parsing attributes in process `syz.4.3023'. [ 765.410232][ T46] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 765.419916][ T46] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 765.431865][ T1168] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 765.439794][ T13] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 765.685661][ T53] usb usb50-port1: attempt power cycle [ 766.203806][T16547] x_tables: duplicate underflow at hook 1 [ 766.214392][T16547] hub 8-0:1.0: USB hub found [ 766.216920][T16547] hub 8-0:1.0: 1 port detected [ 766.490048][ T53] usb usb50-port1: unable to enumerate USB device [ 769.516301][T16571] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 769.518750][T16571] overlayfs: failed to set xattr on upper [ 769.520693][T16571] overlayfs: ...falling back to redirect_dir=nofollow. [ 769.523272][T16571] overlayfs: ...falling back to index=off. [ 769.525174][T16571] overlayfs: ...falling back to uuid=null. [ 769.527451][T16571] overlayfs: maximum fs stacking depth exceeded [ 771.736952][T16563] Process accounting resumed [ 772.424221][T16591] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(8) [ 772.427387][T16591] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 772.467385][T16591] vhci_hcd vhci_hcd.0: Device attached [ 772.822607][T14054] usb 50-1: SetAddress Request (34) to port 0 [ 772.824941][T14054] usb 50-1: new SuperSpeed USB device number 34 using vhci_hcd [ 773.549799][T16592] vhci_hcd: connection reset by peer [ 773.551982][ T1242] vhci_hcd vhci_hcd.6: stop threads [ 773.553810][ T1242] vhci_hcd vhci_hcd.6: release socket [ 773.556887][ T1242] vhci_hcd vhci_hcd.6: disconnect device [ 774.377054][T16609] x_tables: duplicate underflow at hook 1 [ 775.842653][ T6102] usb 11-1: new high-speed USB device number 9 using dummy_hcd [ 776.092700][ T6102] usb 11-1: Using ep0 maxpacket: 8 [ 776.352358][ T6102] usb 11-1: config index 0 descriptor too short (expected 301, got 45) [ 776.358253][ T6102] usb 11-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 776.452653][ T6102] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 777.453324][ T6102] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 777.456764][ T6102] usb 11-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 777.460936][ T6102] usb 11-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 777.482628][ T6102] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 777.674515][T16623] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3045'. [ 777.733042][ T6102] usb 11-1: usb_control_msg returned -32 [ 777.737354][ T6102] usbtmc 11-1:16.0: can't read capabilities [ 777.902623][T14054] usb 50-1: device descriptor read/8, error -110 [ 780.082327][ T6007] usb 11-1: USB disconnect, device number 9 [ 780.103203][T14054] usb usb50-port1: attempt power cycle [ 780.892769][T16641] lo speed is unknown, defaulting to 1000 [ 781.862683][T16642] No buffer was provided with the request [ 782.463763][T14054] usb usb50-port1: unable to enumerate USB device [ 783.495871][T16650] bridge0: port 1(erspan0) entered blocking state [ 783.498503][T16650] bridge0: port 1(erspan0) entered disabled state [ 783.501296][T16650] erspan0: entered allmulticast mode [ 783.534734][T16650] erspan0: entered promiscuous mode [ 784.658075][T16655] No buffer was provided with the request [ 784.661654][T16655] fuse: Bad value for 'fd' [ 786.344358][T16673] x_tables: duplicate underflow at hook 1 [ 788.801861][T14054] usb 11-1: new high-speed USB device number 10 using dummy_hcd [ 788.962598][T14054] usb 11-1: Using ep0 maxpacket: 8 [ 788.965916][T14054] usb 11-1: config index 0 descriptor too short (expected 301, got 45) [ 788.972813][T14054] usb 11-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 788.975648][T14054] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 788.982971][T14054] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 788.985833][T14054] usb 11-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 789.078337][T16689] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3060'. [ 789.084095][T14054] usb 11-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 789.086970][T14054] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 789.623823][T16700] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3061'. [ 789.721218][T16701] fuse: Bad value for 'fd' [ 790.290307][T16702] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3063'. [ 790.552874][T14054] usb 11-1: usb_control_msg returned -71 [ 790.555507][T14054] usbtmc 11-1:16.0: can't read capabilities [ 790.592650][T14054] usb 11-1: USB disconnect, device number 10 [ 791.099129][T16713] bridge0: port 3(erspan0) entered blocking state [ 791.102242][T16713] bridge0: port 3(erspan0) entered disabled state [ 791.111282][T16713] erspan0: entered allmulticast mode [ 791.131817][T16713] erspan0: entered promiscuous mode [ 791.140034][T16713] bridge0: port 3(erspan0) entered blocking state [ 791.142381][T16713] bridge0: port 3(erspan0) entered forwarding state [ 792.188552][T16722] syz.4.3067 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 792.194474][ T40] kauditd_printk_skb: 51 callbacks suppressed [ 792.194486][ T40] audit: type=1326 audit(2000000936.778:2710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16719 comm="syz.4.3067" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bef6c code=0x7ffc0000 [ 792.209603][ T40] audit: type=1326 audit(2000000936.778:2711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16719 comm="syz.4.3067" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bef6c code=0x7ffc0000 [ 792.217200][ T40] audit: type=1326 audit(2000000936.778:2712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16719 comm="syz.4.3067" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bef6c code=0x7ffc0000 [ 792.226120][ T40] audit: type=1326 audit(2000000936.778:2713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16719 comm="syz.4.3067" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bef6c code=0x7ffc0000 [ 792.234683][ T40] audit: type=1326 audit(2000000936.778:2714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16719 comm="syz.4.3067" exe="/syz-executor" sig=0 arch=40000003 syscall=104 compat=1 ip=0xf70bef6c code=0x7ffc0000 [ 792.242692][ T40] audit: type=1326 audit(2000000936.788:2715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16719 comm="syz.4.3067" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bef6c code=0x7ffc0000 [ 792.251337][ T40] audit: type=1326 audit(2000000936.798:2716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16719 comm="syz.4.3067" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bef6c code=0x7ffc0000 [ 792.261689][ T40] audit: type=1326 audit(2000000936.828:2717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16719 comm="syz.4.3067" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bef6c code=0x7ffc0000 [ 792.270079][ T40] audit: type=1326 audit(2000000936.828:2718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16719 comm="syz.4.3067" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bef6c code=0x7ffc0000 [ 792.280942][ T40] audit: type=1326 audit(2000000936.828:2719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16719 comm="syz.4.3067" exe="/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf70bef6c code=0x7ffc0000 [ 793.228013][T16734] overlayfs: failed to resolve './file1': -2 [ 793.385060][T16739] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3070'. [ 794.225506][T16737] x_tables: duplicate underflow at hook 1 [ 794.563973][T16748] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3073'. [ 795.981932][T16754] siw: device registration error -23 [ 795.986886][T16754] smc: removing ib device syz2 [ 796.537154][T16754] ------------[ cut here ]------------ [ 796.542623][T16754] !xa_empty(&pool->xa) [ 796.542637][T16754] WARNING: drivers/infiniband/sw/rxe/rxe_pool.c:116 at rxe_pool_cleanup+0x46/0x60, CPU#1: syz.2.3075/16754 [ 796.549162][T16754] Modules linked in: [ 796.552663][T16754] CPU: 1 UID: 0 PID: 16754 Comm: syz.2.3075 Tainted: G L syzkaller #0 PREEMPT(full) [ 796.557641][T16754] Tainted: [L]=SOFTLOCKUP [ 796.562792][T16754] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 796.572152][T16754] RIP: 0010:rxe_pool_cleanup+0x46/0x60 [ 796.575201][T16754] Code: ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 29 48 83 bb 80 00 00 00 00 75 0b e8 46 a5 50 f9 5b c3 cc cc cc cc e8 3b a5 50 f9 90 <0f> 0b 90 e8 32 a5 50 f9 5b e9 8c 2d da 02 e8 67 41 bc f9 eb d0 0f [ 796.583493][T16754] RSP: 0018:ffffc90002e8f190 EFLAGS: 00010246 [ 796.585951][T16754] RAX: 0000000000080000 RBX: ffff888065ee13b8 RCX: ffffc90007ba1000 [ 796.589523][T16754] RDX: 0000000000080000 RSI: ffffffff88b79e45 RDI: ffff888065ee1438 [ 796.593813][T16754] RBP: ffffffff88b600d0 R08: 0000000000000005 R09: 0000000000000001 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 796.601191][T16754] R10: 0000000000000002 R11: 0000000000000000 R12: ffff888065ee06b0 [ 796.608539][T16754] R13: ffff888065edffe0 R14: ffff888065edffe0 R15: ffff888065ee1118 [ 796.612765][T16754] FS: 0000000000000000(0000) GS:ffff888097240000(0063) knlGS:00000000f5476b40 [ 796.616502][T16754] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 796.622615][T16754] CR2: 0000000030507ff8 CR3: 000000004edc2000 CR4: 0000000000352ef0 [ 796.627036][T16754] Call Trace: [ 796.628202][T16754] [ 796.629120][T16754] rxe_dealloc+0x25/0xc0 [ 796.630430][T16754] ib_dealloc_device+0x49/0x230 [ 796.632196][T16754] __ib_unregister_device+0x396/0x480 [ 796.634376][T16754] ib_unregister_device_and_put+0x5a/0x80 [ 796.636990][T16754] nldev_dellink+0x226/0x320 [ 796.639055][T16754] ? __pfx_nldev_dellink+0x10/0x10 [ 796.641713][T16754] ? rcu_is_watching+0x12/0xc0 [ 796.643986][T16754] ? apparmor_capable+0x1d7/0x4d0 [ 796.646347][T16754] ? bpf_lsm_capable+0x9/0x10 [ 796.648407][T16754] ? security_capable+0x80/0x260 [ 796.650157][T16754] ? ns_capable+0xd2/0xf0 [ 796.651700][T16754] ? __pfx_nldev_dellink+0x10/0x10 [ 796.653698][T16754] rdma_nl_rcv_msg+0x38a/0x6e0 [ 796.655220][T16754] ? __pfx_rdma_nl_rcv_msg+0x10/0x10 [ 796.656955][T16754] ? __lock_acquire+0x4a5/0x2630 [ 796.658930][T16754] rdma_nl_rcv_skb.constprop.0.isra.0+0x2cb/0x410 [ 796.661364][T16754] ? __pfx_rdma_nl_rcv_skb.constprop.0.isra.0+0x10/0x10 [ 796.663977][T16754] ? netlink_deliver_tap+0x1ae/0xcc0 [ 796.665683][T16754] netlink_unicast+0x5aa/0x870 [ 796.667572][T16754] ? __pfx_netlink_unicast+0x10/0x10 [ 796.669271][T16754] ? __pfx___might_resched+0x10/0x10 [ 796.671062][T16754] netlink_sendmsg+0x8b0/0xda0 [ 796.673204][T16754] ? __pfx_netlink_sendmsg+0x10/0x10 [ 796.675060][T16754] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 796.677485][T16754] ____sys_sendmsg+0x9e1/0xb70 [ 796.679312][T16754] ? __pfx_netlink_sendmsg+0x10/0x10 [ 796.681112][T16754] ? __pfx_____sys_sendmsg+0x10/0x10 [ 796.683349][T16754] ? __pfx_futex_wake_mark+0x10/0x10 [ 796.685467][T16754] ___sys_sendmsg+0x190/0x1e0 [ 796.687262][T16754] ? __pfx____sys_sendmsg+0x10/0x10 [ 796.689270][T16754] __sys_sendmsg+0x170/0x220 [ 796.691143][T16754] ? __pfx___sys_sendmsg+0x10/0x10 [ 796.693289][T16754] ? __ia32_sys_futex_time32+0x2f4/0x470 [ 796.695080][T16754] __do_fast_syscall_32+0xe3/0x8c0 [ 796.697023][T16754] do_fast_syscall_32+0x32/0x70 [ 796.699331][T16754] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 796.701680][T16754] RIP: 0023:0xf7fb8f6c [ 796.703464][T16754] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 796.710109][T16754] RSP: 002b:00000000f547650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 796.713353][T16754] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 00000000800002c0 [ 796.716072][T16754] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 796.718585][T16754] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 796.721215][T16754] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 796.724225][T16754] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 796.727376][T16754] [ 796.728725][T16754] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 796.731410][T16754] CPU: 1 UID: 0 PID: 16754 Comm: syz.2.3075 Tainted: G L syzkaller #0 PREEMPT(full) [ 796.734843][T16754] Tainted: [L]=SOFTLOCKUP [ 796.736239][T16754] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 796.739476][T16754] Call Trace: [ 796.740637][T16754] [ 796.741710][T16754] dump_stack_lvl+0x100/0x190 [ 796.743386][T16754] vpanic+0x552/0x970 [ 796.744719][T16754] ? __pfx_vpanic+0x10/0x10 [ 796.746200][T16754] panic+0xd1/0xe0 [ 796.747470][T16754] ? __pfx_panic+0x10/0x10 [ 796.748950][T16754] check_panic_on_warn.cold+0x19/0x34 [ 796.750699][T16754] ? rxe_pool_cleanup+0x46/0x60 [ 796.752504][T16754] __warn.cold+0x191/0x348 [ 796.754141][T16754] __report_bug+0x296/0x3d0 [ 796.755763][T16754] ? rxe_pool_cleanup+0x46/0x60 [ 796.757340][T16754] ? __pfx___report_bug+0x10/0x10 [ 796.759005][T16754] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 796.760877][T16754] ? flush_workqueue_prep_pwqs+0x2e9/0x510 [ 796.762752][T16754] ? __flush_workqueue+0x426/0x1200 [ 796.764425][T16754] ? __mutex_unlock_slowpath+0x15c/0x790 [ 796.766209][T16754] ? rxe_pool_cleanup+0x46/0x60 [ 796.767863][T16754] report_bug+0xb2/0x220 [ 796.769397][T16754] ? rxe_pool_cleanup+0x46/0x60 [ 796.771111][T16754] handle_bug+0x16a/0x2a0 [ 796.772643][T16754] exc_invalid_op+0x17/0x50 [ 796.774242][T16754] asm_exc_invalid_op+0x1a/0x20 [ 796.776179][T16754] RIP: 0010:rxe_pool_cleanup+0x46/0x60 [ 796.778084][T16754] Code: ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 29 48 83 bb 80 00 00 00 00 75 0b e8 46 a5 50 f9 5b c3 cc cc cc cc e8 3b a5 50 f9 90 <0f> 0b 90 e8 32 a5 50 f9 5b e9 8c 2d da 02 e8 67 41 bc f9 eb d0 0f [ 796.784679][T16754] RSP: 0018:ffffc90002e8f190 EFLAGS: 00010246 [ 796.786638][T16754] RAX: 0000000000080000 RBX: ffff888065ee13b8 RCX: ffffc90007ba1000 [ 796.789177][T16754] RDX: 0000000000080000 RSI: ffffffff88b79e45 RDI: ffff888065ee1438 [ 796.791743][T16754] RBP: ffffffff88b600d0 R08: 0000000000000005 R09: 0000000000000001 [ 796.794509][T16754] R10: 0000000000000002 R11: 0000000000000000 R12: ffff888065ee06b0 [ 796.797094][T16754] R13: ffff888065edffe0 R14: ffff888065edffe0 R15: ffff888065ee1118 [ 796.799589][T16754] ? __pfx_rxe_dealloc+0x10/0x10 [ 796.801169][T16754] ? rxe_pool_cleanup+0x45/0x60 [ 796.802754][T16754] rxe_dealloc+0x25/0xc0 [ 796.804177][T16754] ib_dealloc_device+0x49/0x230 [ 796.805899][T16754] __ib_unregister_device+0x396/0x480 [ 796.807879][T16754] ib_unregister_device_and_put+0x5a/0x80 [ 796.809825][T16754] nldev_dellink+0x226/0x320 [ 796.811344][T16754] ? __pfx_nldev_dellink+0x10/0x10 [ 796.813104][T16754] ? rcu_is_watching+0x12/0xc0 [ 796.815045][T16754] ? apparmor_capable+0x1d7/0x4d0 [ 796.817123][T16754] ? bpf_lsm_capable+0x9/0x10 [ 796.818734][T16754] ? security_capable+0x80/0x260 [ 796.820404][T16754] ? ns_capable+0xd2/0xf0 [ 796.821873][T16754] ? __pfx_nldev_dellink+0x10/0x10 [ 796.823720][T16754] rdma_nl_rcv_msg+0x38a/0x6e0 [ 796.825355][T16754] ? __pfx_rdma_nl_rcv_msg+0x10/0x10 [ 796.827292][T16754] ? __lock_acquire+0x4a5/0x2630 [ 796.828954][T16754] rdma_nl_rcv_skb.constprop.0.isra.0+0x2cb/0x410 [ 796.831062][T16754] ? __pfx_rdma_nl_rcv_skb.constprop.0.isra.0+0x10/0x10 [ 796.833417][T16754] ? netlink_deliver_tap+0x1ae/0xcc0 [ 796.835311][T16754] netlink_unicast+0x5aa/0x870 [ 796.837119][T16754] ? __pfx_netlink_unicast+0x10/0x10 [ 796.839118][T16754] ? __pfx___might_resched+0x10/0x10 [ 796.840935][T16754] netlink_sendmsg+0x8b0/0xda0 [ 796.842493][T16754] ? __pfx_netlink_sendmsg+0x10/0x10 [ 796.844258][T16754] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 796.846067][T16754] ____sys_sendmsg+0x9e1/0xb70 [ 796.847604][T16754] ? __pfx_netlink_sendmsg+0x10/0x10 [ 796.849232][T16754] ? __pfx_____sys_sendmsg+0x10/0x10 [ 796.850865][T16754] ? __pfx_futex_wake_mark+0x10/0x10 [ 796.852616][T16754] ___sys_sendmsg+0x190/0x1e0 [ 796.854124][T16754] ? __pfx____sys_sendmsg+0x10/0x10 [ 796.856048][T16754] __sys_sendmsg+0x170/0x220 [ 796.857915][T16754] ? __pfx___sys_sendmsg+0x10/0x10 [ 796.860279][T16754] ? __ia32_sys_futex_time32+0x2f4/0x470 [ 796.862522][T16754] __do_fast_syscall_32+0xe3/0x8c0 [ 796.864577][T16754] do_fast_syscall_32+0x32/0x70 [ 796.866532][T16754] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 796.869122][T16754] RIP: 0023:0xf7fb8f6c [ 796.870940][T16754] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 796.878742][T16754] RSP: 002b:00000000f547650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 796.881752][T16754] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 00000000800002c0 [ 796.884705][T16754] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 796.887579][T16754] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 796.890707][T16754] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 796.893869][T16754] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 796.897685][T16754] [ 796.899984][T16754] Kernel Offset: disabled [ 796.901430][T16754] Rebooting in 86400 seconds..