last executing test programs: 10m15.427224764s ago: executing program 2 (id=1893): r0 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) socket$phonet_pipe(0x23, 0x5, 0x2) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000540), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r2, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r2, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000340)="b9cd14c222ee3c0cb001829a8681ed391da1a71d8d", 0x63}], 0x1}}], 0x1, 0x20008000) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0xc, &(0x7f0000000840)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @cgroup_sock_addr=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='&\x00\x00\x00\a'], 0x50) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r3, &(0x7f0000000000), 0xd) close(r0) r4 = open(&(0x7f0000000000)='./file0\x00', 0x502, 0x98) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newchain={0x6c, 0x64, 0x1, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0xd}, {0xf, 0xd}, {0x4, 0xd}}, [@filter_kind_options=@f_flow={{0x9}, {0x24, 0x2, [@TCA_FLOW_ADDEND={0x8, 0x5, 0x5}, @TCA_FLOW_RSHIFT={0x8, 0x4, 0x8001}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1d04e}, @TCA_FLOW_ADDEND={0x8, 0x5, 0x7}]}}, @filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x5317}]}}]}, 0x6c}}, 0x48010) sendmsg$netlink(r5, 0x0, 0x0) fcntl$setlease(r4, 0x400, 0x1) execve(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000000)='.\x00', 0x20400, 0x74) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000100)={'vxcan1\x00'}) ioctl$F2FS_IOC_MOVE_RANGE(r4, 0x541b, &(0x7f0000000040)={0xffffffffffffffff}) close_range(r6, 0xffffffffffffffff, 0x0) 10m12.615728861s ago: executing program 2 (id=1901): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10) pidfd_getfd(0xffffffffffffffff, r2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x10000, 0x3, 0x1, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0xfffffffffffffff7}, {0x0, 0x8, 0xfffffffffffffffc, 0x8}, 0x0, 0x0, 0x1, 0x0, 0x1}, {{@in6=@empty, 0x2, 0x6c}, 0xa, @in=@empty, 0x0, 0x5, 0x0, 0xb7}}, 0xe8) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0xdf, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="200025bd7000fedbdf256c00000008000300", @ANYRES32=0x0, @ANYBLOB="0100000012cc62"], 0x24}, 0x1, 0x0, 0x0, 0x810}, 0x4000000) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x99fe681834aac99b, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4400ae8f, &(0x7f0000000140)=@x86={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff}) ioctl$KVM_RUN(r5, 0xae80, 0x0) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) unshare(0x6a040000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x80, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r6, 0x0, 0xfffffffffffffffd}, 0x18) open_tree(0xffffffffffffffff, 0x0, 0x800) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) 10m10.46929345s ago: executing program 2 (id=1906): syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="04080400c90046dfa98f"], 0x7) r0 = fsopen(&(0x7f0000000000)='jfs\x00', 0x1) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f0000000240)='resize', 0x0, r0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) r4 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0x5ba8, 0xfffffffffffffffd) keyctl$read(0xb, r4, &(0x7f0000000240)=""/112, 0x349b7f55) socket$nl_route(0x10, 0x3, 0x0) r5 = gettid() bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, 0x0}, 0x28) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) syz_emit_ethernet(0x36, &(0x7f0000000500)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr=0x64010102, @local}, {{0x4001, 0x880b, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) syz_open_dev$evdev(&(0x7f0000000040), 0x3e, 0x208604) r6 = syz_usb_connect$cdc_ecm(0x0, 0x5e, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001020000402505a1a440000102030d0902"], 0x0) syz_usb_disconnect(r6) 10m7.537197291s ago: executing program 2 (id=1913): landlock_create_ruleset(&(0x7f0000000500)={0x21c1, 0x3, 0x3}, 0x18, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9801}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6, 0x1, 0x3}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x8000) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x20000000, 0x4041}}, 0x50) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0x24, 0x0, 0x0) syz_fuse_handle_req(r1, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000000), 0x4, 0x2080) ioctl$LOOP_SET_FD(r5, 0x4c00, r4) ioctl$LOOP_SET_FD(r5, 0x4c00, r5) dup2(r4, r1) r6 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x33, &(0x7f0000000000)={0x0, 0x0}, 0x8) r7 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x28241, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x1, 0x40, 0x40}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) write$dsp(r7, &(0x7f00000001c0)="5cba91", 0x3) ioctl$SNDCTL_DSP_SUBDIVIDE(r7, 0xc0045009, &(0x7f0000000100)=0xfffffff7) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@getspdinfo={0x14, 0x25, 0x1, 0x70bd26, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) r8 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r8, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8) write$rfkill(r8, &(0x7f0000000340)={0x6, 0x0, 0x3, 0x0, 0x1}, 0x8) timer_create(0x1, &(0x7f00000004c0)={0x0, 0x30, 0x1}, &(0x7f0000000500)) 10m6.74526136s ago: executing program 2 (id=1917): openat$ndctl0(0xffffff9c, &(0x7f0000000000), 0x141280, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) syz_emit_ethernet(0x3b6, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x809c, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$alg(0x26, 0x5, 0x0) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) setns(r5, 0x24020000) r6 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, 0x0) setsockopt$CAN_RAW_FILTER(r6, 0x65, 0x1, 0x0, 0x0) r7 = fsopen(&(0x7f00000003c0)='nfsd\x00', 0x1) fsconfig$FSCONFIG_SET_FLAG(r7, 0x6, 0x0, 0x0, 0x0) fsmount(r7, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r7, 0x7, 0x0, 0x0, 0x0) bind$can_raw(r6, 0x0, 0x0) bind$can_raw(r6, &(0x7f0000000080), 0x10) 10m6.221693679s ago: executing program 2 (id=1921): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$kcm(0x29, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000000)={'wg1\x00'}) r1 = syz_open_procfs(0x0, 0x0) pwritev(r1, 0x0, 0x0, 0x0, 0x0) mkdir(0x0, 0x0) mkdir(0x0, 0xe2) r2 = socket$inet6(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0x1, &(0x7f00000000c0)=0x9, 0x3f) bind$inet6(r2, &(0x7f0000000380)={0xa, 0x14e24}, 0x1c) connect$inet6(r2, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) sendmmsg$inet6(r2, 0x0, 0x0, 0xc8040) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @raw_data="dea233684c996156af0d4bd8e3300217e750b8c97b7123d48003e7e1d3be5f710c41a1db6719881876e9bcc6e2f73c67cc6b675eb43188b5b7f9f898868de9a9c5d536d418ba283121a73a5aba55a87d2a2525295f4492bbde02ad8bc8e88779f2de06f38e99172df4d45b6f13c813dee4230c204a93172922b778fef7a1f89ce876bb89d44cd705bbb28db4869dfac20d928950507acd92c02d17f51b0a627539f6e0a0bdb92004bc6252cd35e8cd100962db9a83ad63a4e7e1ca17c1b6aac63fefa9bebdbe429d"}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) close(r5) unshare(0x2040400) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) statx(r6, 0x0, 0x1000, 0xf0cb2f4a0c2cfc5d, &(0x7f0000000540)) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) 10m6.025632899s ago: executing program 32 (id=1921): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$kcm(0x29, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000000)={'wg1\x00'}) r1 = syz_open_procfs(0x0, 0x0) pwritev(r1, 0x0, 0x0, 0x0, 0x0) mkdir(0x0, 0x0) mkdir(0x0, 0xe2) r2 = socket$inet6(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0x1, &(0x7f00000000c0)=0x9, 0x3f) bind$inet6(r2, &(0x7f0000000380)={0xa, 0x14e24}, 0x1c) connect$inet6(r2, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) sendmmsg$inet6(r2, 0x0, 0x0, 0xc8040) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @raw_data="dea233684c996156af0d4bd8e3300217e750b8c97b7123d48003e7e1d3be5f710c41a1db6719881876e9bcc6e2f73c67cc6b675eb43188b5b7f9f898868de9a9c5d536d418ba283121a73a5aba55a87d2a2525295f4492bbde02ad8bc8e88779f2de06f38e99172df4d45b6f13c813dee4230c204a93172922b778fef7a1f89ce876bb89d44cd705bbb28db4869dfac20d928950507acd92c02d17f51b0a627539f6e0a0bdb92004bc6252cd35e8cd100962db9a83ad63a4e7e1ca17c1b6aac63fefa9bebdbe429d"}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) close(r5) unshare(0x2040400) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) statx(r6, 0x0, 0x1000, 0xf0cb2f4a0c2cfc5d, &(0x7f0000000540)) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) 7.74966754s ago: executing program 4 (id=3874): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r2, 0x89f1, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000140)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$usbmon(&(0x7f0000000000), 0x9, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r7, 0x0, 0x2, 0x0) splice(r6, 0x0, r5, 0x0, 0x1c, 0xe) ioctl$sock_qrtr_TIOCINQ(r7, 0x541b, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040025}, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_ro(r8, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) rmdir(&(0x7f00000001c0)='./cgroup/../file0\x00') write$cgroup_int(r9, 0x0, 0x0) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000015c0)=ANY=[@ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="05"], 0x10) 6.682208484s ago: executing program 4 (id=3876): socket$nl_route(0x10, 0x3, 0x0) getpeername$tipc(0xffffffffffffffff, &(0x7f0000000040)=@name, &(0x7f0000000200)=0x10) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x101) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x12, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f00000002c0)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x37}, 0x94) r1 = open(&(0x7f0000000100)='./bus\x00', 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="20000000100001040000", @ANYRES32=r3, @ANYBLOB="0050198c4f05050000000c"], 0x20}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) close(r6) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) ioctl$SIOCSIFHWADDR(r6, 0x8b06, &(0x7f0000000000)={'wlan1\x00', @random="060000000010"}) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001000010000003a194618d96d6d2e8553", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0xaf}, [@ldst={0x6, 0x0, 0x3}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd96, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r8 = socket$unix(0x1, 0x2, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x44, r9, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) truncate(0x0, 0x8) lsetxattr$security_ima(&(0x7f0000000480)='./bus\x00', &(0x7f00000000c0), &(0x7f0000000440)=@sha1={0x1, "588198eb60c3f5c2cfd8a6058536d9b8c8b460c9"}, 0x15, 0x0) dup3(r1, r0, 0x0) r11 = syz_open_dev$usbmon(&(0x7f0000000240), 0x8, 0x0) mmap(&(0x7f00006c2000/0x1000)=nil, 0x1000, 0x5, 0x13, r11, 0x1e67e000) syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$MON_IOCT_RING_SIZE(r11, 0x9204, 0xc397e) 6.635966025s ago: executing program 4 (id=3877): socket$nl_route(0x10, 0x3, 0x0) getpeername$tipc(0xffffffffffffffff, &(0x7f0000000040)=@name, &(0x7f0000000200)=0x10) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x101) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x12, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f00000002c0)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x37}, 0x94) r1 = open(&(0x7f0000000100)='./bus\x00', 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="20000000100001040000", @ANYRES32=r3, @ANYBLOB="0050198c4f05050000000c"], 0x20}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) close(r6) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) ioctl$SIOCSIFHWADDR(r6, 0x8b06, &(0x7f0000000000)={'wlan1\x00', @random="060000000010"}) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001000010000003a194618d96d6d2e8553", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0xaf}, [@ldst={0x6, 0x0, 0x3}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd96, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r8 = socket$unix(0x1, 0x2, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x44, r9, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) truncate(0x0, 0x8) lsetxattr$security_ima(&(0x7f0000000480)='./bus\x00', &(0x7f00000000c0), &(0x7f0000000440)=@sha1={0x1, "588198eb60c3f5c2cfd8a6058536d9b8c8b460c9"}, 0x15, 0x0) dup3(r1, r0, 0x0) r11 = syz_open_dev$usbmon(&(0x7f0000000240), 0x8, 0x0) mmap(&(0x7f00006c2000/0x1000)=nil, 0x1000, 0x5, 0x13, r11, 0x1e67e000) syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$MON_IOCT_RING_SIZE(r11, 0x9204, 0xc397e) 6.559812906s ago: executing program 4 (id=3878): sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4000000) socketpair$unix(0x1, 0x3, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @pix={0x434c, 0x8, 0x584e4f53, 0x4, 0x2, 0x7, 0x0, 0x5, 0x1, 0x4, 0x2, 0x7}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) removexattr(&(0x7f0000000200)='./cgroup\x00', &(0x7f0000000240)=@known='user.incfs.metadata\x00') sched_setaffinity(0x0, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) set_mempolicy(0x2, &(0x7f0000000080)=0x51e1, 0x3ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x401c2, 0x0) ftruncate(r1, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r3, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000b80)=""/4096, 0x20001b80}, {&(0x7f0000001b80)=""/112, 0x70}], 0x2, 0x0, 0xa0028cb4}}], 0x40000000000013c, 0x700, 0x0) sendfile(r2, r1, 0x0, 0x578410eb) r4 = socket$kcm(0x10, 0x2, 0x0) process_vm_readv(0x0, &(0x7f0000008400)=[{&(0x7f0000006180)=""/152, 0x98}], 0x1, &(0x7f0000008640)=[{0x0}], 0x1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r5 = socket$kcm(0x29, 0x5, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r6, 0x0, 0xf3e, 0x0) timer_create(0x0, 0x0, &(0x7f0000000100)) fsetxattr$trusted_overlay_opaque(r4, &(0x7f00000000c0), &(0x7f0000000280), 0x2, 0x3) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000400000000000000080003851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x1e}, 0x94) r7 = syz_open_dev$hiddev(&(0x7f0000000040), 0x7, 0x20000) ioctl$HIDIOCGCOLLECTIONINDEX(r7, 0x40184810, &(0x7f0000000140)={0x2, 0x100, 0x1, 0x1, 0x3}) 5.653051425s ago: executing program 1 (id=3882): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x8200, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x0, 0x34324152, 0x0, 0xb, [{}, {}, {0x3}, {}, {}, {}, {}, {0x0, 0xfffffffe}]}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYRES64], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x0) read$msr(r1, &(0x7f0000019540)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x4040) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xe160, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) writev(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) syz_open_dev$usbfs(&(0x7f0000000480), 0xd, 0x141341) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r6 = socket(0x10, 0x80002, 0x0) connect$inet6(r6, 0x0, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r5, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$binfmt_aout(r7, &(0x7f0000000340)=ANY=[], 0xff2e) ioctl$TCXONC(r7, 0x540a, 0x2) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000100)) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x9}}}, 0x24}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0x114, 0x2e, 0x1, 0x0, 0x0, "", [@nested={0x104, 0x3dff, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64=0x8}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@loopback={0x100000000000000}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f8cd1"]}]}, 0x114}], 0x1, 0x0, 0x0, 0xfffffffd}, 0x0) 5.300881687s ago: executing program 0 (id=3884): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000000f00), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = fsopen(&(0x7f0000000180)='virtiofs\x00', 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1f, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xb8, &(0x7f000000cf3d)=""/184, 0x0, 0x41, '\x00', 0x0, @fallback=0x1c, r2, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000280)='sched_switch\x00', r4, 0x0, 0x20000000000}, 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000440)={'team_slave_1\x00', &(0x7f0000000340)=@ethtool_eeprom={0x18, 0x2, 0x80000001}}) sendto$packet(0xffffffffffffffff, &(0x7f00000003c0)="0b036800e0ff64000200475400f6a13bb10000000800884848", 0x19, 0x0, &(0x7f0000000140), 0x14) r6 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_inet_SIOCSARP(r6, 0x8955, &(0x7f0000000340)={{0x2, 0x0, @broadcast}, {0x0, @link_local}, 0xa, {0x2, 0x800, @multicast2}, 'wg0\x00'}) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000a80)={{0x2, 0x4e2a, @broadcast}, {0x0, @random="10414c9854c6"}, 0x4a, {}, 'veth1_to_bridge\x00'}) gettid() fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$key(0xf, 0x3, 0x2) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@allocspi={0x100, 0x16, 0x1, 0x70bd2b, 0x25dfdbfe, {{{@in=@private=0xa010101, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4e23, 0x0, 0x4e24, 0x0, 0xa, 0x80, 0x20, 0x1d}, {@in6=@local, 0x4d5, 0x33}, @in=@dev={0xac, 0x14, 0x14, 0x10}, {0x8, 0x7b5, 0x0, 0x6, 0x9, 0xfffffffffffffffa, 0xffffffff, 0x3}, {0x2, 0x3, 0x1, 0xfffffffffffffffa}, {0x0, 0x10001, 0xfffffff9}, 0x70bd2a, 0x0, 0x0, 0x2, 0x6, 0x1}, 0x8, 0x74f}, [@XFRMA_IF_ID={0x8, 0x1f, 0x4}]}, 0x100}, 0x1, 0x0, 0x0, 0x10}, 0x400c8c0) preadv(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}], 0x1, 0x5b, 0x0) sendmsg$key(r7, &(0x7f0000000440)={0x900, 0x0, &(0x7f0000000400)={&(0x7f0000000040)={0x2, 0xa, 0xfc, 0x0, 0x2, 0x0, 0x70bd28, 0x25dfdbfe}, 0x10}}, 0x40408c0) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, 0x0, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f00000003c0)={0x0, 0x7, 0x0, [0x0, 0x8, 0x9, 0x8, 0x9b0], [0x7fffffffffffffff, 0x0, 0x1f5, 0x3, 0x9, 0x7, 0x4, 0x8, 0x3, 0x7, 0x1, 0x0, 0x6, 0x5, 0x0, 0x4, 0x6, 0x9, 0x9, 0x9, 0x5, 0xffffffff7fffffff, 0xf, 0x8, 0x9, 0x76f, 0x1fffffffe0, 0x7, 0xa, 0xf, 0x6, 0x1, 0x80000001, 0x0, 0x88, 0x9, 0xdb, 0xfffffffffffffff4, 0xc25c, 0x7, 0x8, 0x8, 0x0, 0x4, 0x1, 0x9, 0x1, 0x9, 0x1, 0x117, 0x5, 0x8000000000000001, 0x100, 0x4, 0x0, 0x3, 0x4, 0xb, 0xf, 0x0, 0x0, 0x8, 0x4, 0x5, 0x4, 0x2, 0xc66c, 0x9, 0x3, 0x10000, 0x8, 0x7, 0xc, 0x2, 0x8, 0x5, 0xa1, 0x6, 0x9, 0x6, 0x5, 0x2, 0x1, 0xffffffffbfd3f0e9, 0xffffffffd5f54280, 0x2, 0x1000000000005, 0x0, 0x0, 0xb7c, 0xffffffffffffff00, 0x96f0, 0x7ff, 0xe91, 0xb, 0x1, 0x8, 0x4, 0x5, 0x7fffffff, 0x1dee, 0x0, 0x8, 0x1, 0x4f48, 0xd, 0x80000000, 0x1, 0x100, 0x2, 0x3, 0xffff, 0x2, 0x8000000000000001, 0x7ff, 0x7, 0x0, 0x7, 0x1ac5cf3d, 0x7fffffffffffffff, 0xffffffff]}) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000003e0007010000000100000000017c00000400fc800c000180060006006558000008000280040011"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) r10 = openat$comedi(0xffffff9c, &(0x7f0000000440)='/dev/comedi0\x00', 0x101001, 0x0) ioctl$COMEDI_DEVCONFIG(r10, 0x40946400, &(0x7f0000000080)={'comedi_bond\x00', [0x3, 0x7, 0x3, 0x2, 0x2f, 0x7, 0x0, 0x5, 0xffe, 0x1, 0x7, 0x1, 0x1006, 0x4, 0xffff, 0xffff, 0xffffffa8, 0x7ffffffd, 0x1ff, 0x3, 0x3ff, 0x10000, 0x8, 0xe2df, 0x2, 0x8, 0x5, 0x3, 0x7, 0x4, 0x8049]}) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) 4.949114421s ago: executing program 0 (id=3885): socket$nl_route(0x10, 0x3, 0x0) getpeername$tipc(0xffffffffffffffff, &(0x7f0000000040)=@name, &(0x7f0000000200)=0x10) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x101) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x12, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f00000002c0)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x37}, 0x94) r1 = open(&(0x7f0000000100)='./bus\x00', 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="20000000100001040000", @ANYRES32=r3, @ANYBLOB="0050198c4f05050000000c"], 0x20}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) close(r6) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) ioctl$SIOCSIFHWADDR(r6, 0x8b06, &(0x7f0000000000)={'wlan1\x00', @random="060000000010"}) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001000010000003a194618d96d6d2e8553", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0xaf}, [@ldst={0x6, 0x0, 0x3}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd96, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r8 = socket$unix(0x1, 0x2, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x44, r9, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) truncate(0x0, 0x8) lsetxattr$security_ima(&(0x7f0000000480)='./bus\x00', &(0x7f00000000c0), &(0x7f0000000440)=@sha1={0x1, "588198eb60c3f5c2cfd8a6058536d9b8c8b460c9"}, 0x15, 0x0) dup3(r1, r0, 0x0) r11 = syz_open_dev$usbmon(&(0x7f0000000240), 0x8, 0x0) mmap(&(0x7f00006c2000/0x1000)=nil, 0x1000, 0x5, 0x13, r11, 0x1e67e000) syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$MON_IOCT_RING_SIZE(r11, 0x9204, 0xc397e) 4.835415638s ago: executing program 0 (id=3886): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r2, 0x89f1, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000140)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$usbmon(&(0x7f0000000000), 0x9, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r7, 0x0, 0x2, 0x0) splice(r6, 0x0, r5, 0x0, 0x1c, 0xe) ioctl$sock_qrtr_TIOCINQ(r7, 0x541b, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040025}, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_ro(r8, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) rmdir(&(0x7f00000001c0)='./cgroup/../file0\x00') write$cgroup_int(r9, 0x0, 0x0) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000015c0)=ANY=[@ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="05"], 0x10) 3.849870842s ago: executing program 1 (id=3887): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="240000001a000100000000000000000002002000", @ANYRES32=0x0], 0x24}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000100)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0xc) mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r4 = fspick(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f00000000c0)='lowerdir', &(0x7f0000000100)='{\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r5 = syz_open_dev$ptys(0xc, 0x3, 0x1) syz_open_pts(r5, 0xa0000) rename(&(0x7f0000000400)='./bus\x00', &(0x7f0000000f00)='./file0\x00') 3.836733717s ago: executing program 0 (id=3888): sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4000000) socketpair$unix(0x1, 0x3, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @pix={0x434c, 0x8, 0x584e4f53, 0x4, 0x2, 0x7, 0x0, 0x5, 0x1, 0x4, 0x2, 0x7}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) removexattr(&(0x7f0000000200)='./cgroup\x00', &(0x7f0000000240)=@known='user.incfs.metadata\x00') sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) set_mempolicy(0x2, &(0x7f0000000080)=0x51e1, 0x3ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x401c2, 0x0) ftruncate(r1, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r3, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000b80)=""/4096, 0x20001b80}, {&(0x7f0000001b80)=""/112, 0x70}], 0x2, 0x0, 0xa0028cb4}}], 0x40000000000013c, 0x700, 0x0) sendfile(r2, r1, 0x0, 0x578410eb) r4 = socket$kcm(0x10, 0x2, 0x0) process_vm_readv(0x0, &(0x7f0000008400)=[{&(0x7f0000006180)=""/152, 0x98}], 0x1, &(0x7f0000008640)=[{0x0}], 0x1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r5 = socket$kcm(0x29, 0x5, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r6, 0x0, 0xf3e, 0x0) timer_create(0x0, 0x0, &(0x7f0000000100)) fsetxattr$trusted_overlay_opaque(r4, &(0x7f00000000c0), &(0x7f0000000280), 0x2, 0x3) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000400000000000000080003851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x1e}, 0x94) r7 = syz_open_dev$hiddev(&(0x7f0000000040), 0x7, 0x20000) ioctl$HIDIOCGCOLLECTIONINDEX(r7, 0x40184810, &(0x7f0000000140)={0x2, 0x100, 0x1, 0x1, 0x3}) 3.191964595s ago: executing program 4 (id=3889): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) setresuid(0x0, 0x0, 0xee01) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb0100ccd5529178c50002000100000000002007000000000000a22b3a5c2288a26427034cea629c927c1cee39c98895029e68c4209a7b7af003d7ce3b897aff2804fabee82627ef5358219f6da29c1b6e674aa40d00d0b0cfefbc122a73d3cb6ab7abc0950c84918a4f4ad01f91b5522734fb3232fdc359df321b81c3b7842e653500"/142], 0x0, 0x26, 0x0, 0x1}, 0x28) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, &(0x7f0000000000)={0x4, 0x0, 0x16, 0x1, 0x100, &(0x7f0000000040)="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"}) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000480)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, &(0x7f00000001c0)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r3, 0xc02064b9, &(0x7f00000002c0)={0x0, &(0x7f0000000040), 0x0, r5}) ioctl$DRM_IOCTL_MODE_ATOMIC(r3, 0xc03864bc, &(0x7f0000000580)={0x200, 0x1, &(0x7f0000000180)=[r5], &(0x7f0000000400), &(0x7f0000000640)=[0x0], &(0x7f0000000340), 0x0, 0xffffffffffffffff}) syz_usbip_server_init(0x1) r6 = socket$netlink(0x10, 0x3, 0x15) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xb, &(0x7f0000000840)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f00000000c0)=@ethtool_gfeatures={0x33}}) clock_gettime(0x0, 0x0) recvmmsg(r7, &(0x7f0000000c80)=[{{&(0x7f0000000680)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000700)=""/73, 0x49}, {&(0x7f0000000780)=""/170, 0xaa}], 0x2, &(0x7f00000008c0)=""/178, 0xb2}, 0x7}, {{&(0x7f0000000980)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x80, &(0x7f0000000bc0)=[{&(0x7f0000000a00)=""/173, 0xad}, {&(0x7f0000000ac0)=""/254, 0xfe}], 0x2, &(0x7f0000000c00)=""/95, 0x5f}, 0x6}], 0x2, 0x123, &(0x7f0000000d40)) fcntl$setownex(r6, 0xf, &(0x7f00000001c0)={0x2, r0}) 3.038394316s ago: executing program 3 (id=3891): syz_open_dev$usbfs(&(0x7f0000000080), 0x70, 0x20002) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f0000000300)=ANY=[], &(0x7f0000000280)='GPL\x00', 0xa, 0xb9, &(0x7f0000000140)=""/185, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000014c0)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3, 0x0, 0xfffffffffffffffc}, 0x18) r4 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x484b1e3341a13be1, 0x0) fchdir(r4) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00') mount(&(0x7f0000000000), &(0x7f0000000040)='./cgroup\x00', 0x0, 0x9001, 0x0) flock(r4, 0x0) r5 = socket(0x2b, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup2(r5, r6) ioctl$TIOCVHANGUP(r7, 0x8905, 0x1000000000000) setsockopt$MRT_INIT(r7, 0x0, 0xc8, &(0x7f0000000040), 0x4) openat$dsp1(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) r8 = socket$alg(0x26, 0x5, 0x0) ioctl$KDADDIO(r7, 0x4b34, 0x6) bind$alg(r8, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160-generic\x00'}, 0x58) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f00000000c0)={0x32, @dev={0xac, 0x14, 0x14, 0x43}, 0x4e21, 0x7, 'nq\x00', 0x2, 0x5, 0x52}, 0x2c) 2.817516324s ago: executing program 1 (id=3892): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket$nl_audit(0x10, 0x3, 0x9) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000240)=0x39be, 0x0, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYRESDEC=r0, @ANYBLOB="eeeaffff616d250b50c83b2a6a34000000000000", @ANYRES32=0x0], 0x50) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) syz_open_dev$vim2m(0x0, 0x0, 0x2) socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x10b121) mlock(&(0x7f0000ffa000/0x3000)=nil, 0x3000) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x11) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000700)="1a589880094221163118c20ba67edecc8e404446a08a220bc228fdded14097f1bccd9ad61925bf16c950493dcbfa6ab0c9b15be904473944ae117dc771d96adb8d73784dfe7e94e74e3174a167769327", 0x50}], 0x1) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x3b5b, &(0x7f0000000300)={0x0, 0x37ad, 0x7dc0071a664f01a8, 0xfffffffe, 0x122}, &(0x7f00000001c0), &(0x7f00000003c0)) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x24008041}, 0x0) r5 = socket(0x10, 0x3, 0x4) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/profiling', 0x82802, 0xf) io_setup(0x1, &(0x7f00000016c0)=0x0) io_submit(r7, 0x1, &(0x7f00000002c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x8, r6, &(0x7f0000000440)='3', 0x1, 0x5}]) ioctl$HIDIOCGSTRING(r6, 0x81044804, &(0x7f0000000480)={0x70, "c74daf291184dcc3c46d055a980c4f982c6ff2433fe9654ffc15b66122fbd612f81c8326380d8686cac41e96d81a94f7f21776d0173f62a40a1ac9883bedcb54c27d970fe3c0179dc7afe8a89d215c7d460e14d4f02e8578997fb0b6f1896b38b115dc3ebae7569c03b1481c905bd7d2"}) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@newqdisc={0x68, 0x14, 0xf0b, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, {0xd, 0x3}, {0xc, 0xe}, {0x8, 0xa}}, [@TCA_STAB={0x44, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0xfc, 0x210, 0x400000a, 0x1, 0x0, 0xb}}, {0x4}}, {{0x1c, 0x1, {0x1, 0x5, 0x1c, 0x3, 0x0, 0x9, 0xb}}, {0x4}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0xc0}, 0x0) sendmsg$NFT_MSG_GETOBJ(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="34000000150a03f50000000000000000020000000900020073797a31000000"], 0x34}, 0x1, 0x0, 0x0, 0x66df5cfbe53006d1}, 0x0) connect$llc(r3, &(0x7f00000002c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @remote}, 0x10) sendmmsg(r3, &(0x7f0000001380), 0x3fffffffffffeed, 0xf000000) 2.13850326s ago: executing program 1 (id=3893): r0 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000400)=0x7) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x15, &(0x7f0000000680)={0x3, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$int_in(r2, 0x40000000af01, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$sock_linger(r4, 0x1, 0xd, &(0x7f0000000340)={0x1, 0x6}, 0x8) r6 = fsopen(&(0x7f0000000280)='btrfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x26) rename(&(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='./file0\x00') openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000180)={{0x1, 0x1, 0x18, r1, {0xb75}}, './file0/file0\x00'}) sendmsg$802154_raw(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)="739be4d07f7ecc0544", 0x9}, 0x1, 0x0, 0x0, 0x4000}, 0x844) mount(&(0x7f0000000000)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./cgroup\x00', &(0x7f00000000c0)='hfsplus\x00', 0x410, &(0x7f0000000100)='barrier') 1.85293451s ago: executing program 3 (id=3894): socket$nl_route(0x10, 0x3, 0x0) getpeername$tipc(0xffffffffffffffff, &(0x7f0000000040)=@name, &(0x7f0000000200)=0x10) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x101) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x12, &(0x7f0000000680)=ANY=[@ANYBLOB="18080000feffff3f00000000fcffffff8510000006000000851000000300000082593000ffffffff1800000000000000000000000000000095000000000000009500000000000000950000000000000050bca4ca855dbb5ad97e7df027b113e9002347bfb6f9e5a82ea87431312537b0d0dd79bbaa2d98ccfddeec8c77ce1d5133753a268d9b69522a2274c0d884c0da559de528d53c8c0908f302418417aa00702e1c3245e9a07d2435457d31ce2b6f35559c76b5222d38e108af47160c2f10f9c8fd54e46ef35e049e5cd69b50589a669b0d1b5e1516ec49b685d7eba86d9784725c1224f4d8eac97e8e9d2e84196e44275ed617e5841e44a2c3f2dc1e86b34a1de71de1e5424f992f0190ba4e762c6750cd48175712ada53b9e"], &(0x7f00000002c0)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x37}, 0x94) r1 = open(&(0x7f0000000100)='./bus\x00', 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="20000000100001040000", @ANYRES32=r3, @ANYBLOB="0050198c4f05050000000c"], 0x20}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) close(r6) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) ioctl$SIOCSIFHWADDR(r6, 0x8b06, &(0x7f0000000000)={'wlan1\x00', @random="060000000010"}) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001000010000003a194618d96d6d2e8553", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0xaf}, [@ldst={0x6, 0x0, 0x3}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd96, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r8 = socket$unix(0x1, 0x2, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x44, r9, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) truncate(0x0, 0x8) lsetxattr$security_ima(&(0x7f0000000480)='./bus\x00', &(0x7f00000000c0), &(0x7f0000000440)=@sha1={0x1, "588198eb60c3f5c2cfd8a6058536d9b8c8b460c9"}, 0x15, 0x0) dup3(r1, r0, 0x0) r11 = syz_open_dev$usbmon(&(0x7f0000000240), 0x8, 0x0) mmap(&(0x7f00006c2000/0x1000)=nil, 0x1000, 0x5, 0x13, r11, 0x1e67e000) syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$MON_IOCT_RING_SIZE(r11, 0x9204, 0xc397e) 1.72028586s ago: executing program 3 (id=3895): r0 = socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) mlockall(0x2) r2 = shmget$private(0x0, 0x400000, 0x8, &(0x7f000000e000/0x400000)=nil) shmctl$SHM_LOCK(r2, 0xb) shmat(r2, &(0x7f0000ffd000/0x1000)=nil, 0x7000) shmctl$SHM_UNLOCK(r2, 0xc) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x11c0, 0x80000) openat2$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file4\x00', &(0x7f0000000380)={0x40440, 0x15c, 0x12}, 0x18) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f00000029c0)={0x10}, 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e20, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, 0x0, &(0x7f0000000240)) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r4, 0x84, 0x1b, &(0x7f0000000380), &(0x7f0000000140)=0x8) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x20) r6 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r6, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x36}}, 0x2, 0x0, 0x0, 0xfffffffc}}, 0x2e) writev(r6, &(0x7f00000000c0)=[{&(0x7f0000000180)="9f", 0x1}], 0x1) 1.472605009s ago: executing program 3 (id=3896): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x8200, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x0, 0x34324152, 0x0, 0xb, [{}, {}, {0x3}, {}, {}, {}, {}, {0x0, 0xfffffffe}]}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYRES64], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x0) read$msr(r1, &(0x7f0000019540)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x4040) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xe160, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) writev(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) syz_open_dev$usbfs(&(0x7f0000000480), 0xd, 0x141341) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r6 = socket(0x10, 0x80002, 0x0) connect$inet6(r6, 0x0, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r5, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$binfmt_aout(r7, &(0x7f0000000340)=ANY=[], 0xff2e) ioctl$TCXONC(r7, 0x540a, 0x2) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000100)) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x9}}}, 0x24}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0x114, 0x2e, 0x1, 0x0, 0x0, "", [@nested={0x104, 0x3dff, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64=0x8}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@loopback={0x100000000000000}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f8cd1"]}]}, 0x114}], 0x1, 0x0, 0x0, 0xfffffffd}, 0x0) 1.329851003s ago: executing program 4 (id=3897): sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4000000) socketpair$unix(0x1, 0x3, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @pix={0x434c, 0x8, 0x584e4f53, 0x4, 0x2, 0x7, 0x0, 0x5, 0x1, 0x4, 0x2, 0x7}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) removexattr(&(0x7f0000000200)='./cgroup\x00', &(0x7f0000000240)=@known='user.incfs.metadata\x00') sched_setaffinity(0x0, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) set_mempolicy(0x2, &(0x7f0000000080)=0x51e1, 0x3ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x401c2, 0x0) ftruncate(r1, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r3, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000b80)=""/4096, 0x20001b80}, {&(0x7f0000001b80)=""/112, 0x70}], 0x2, 0x0, 0xa0028cb4}}], 0x40000000000013c, 0x700, 0x0) sendfile(r2, r1, 0x0, 0x578410eb) r4 = socket$kcm(0x10, 0x2, 0x0) process_vm_readv(0x0, &(0x7f0000008400)=[{&(0x7f0000006180)=""/152, 0x98}], 0x1, &(0x7f0000008640)=[{0x0}], 0x1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r5 = socket$kcm(0x29, 0x5, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r6, 0x0, 0xf3e, 0x0) timer_create(0x0, 0x0, &(0x7f0000000100)) fsetxattr$trusted_overlay_opaque(r4, &(0x7f00000000c0), &(0x7f0000000280), 0x2, 0x3) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000400000000000000080003851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x1e}, 0x94) r7 = syz_open_dev$hiddev(&(0x7f0000000040), 0x7, 0x20000) ioctl$HIDIOCGCOLLECTIONINDEX(r7, 0x40184810, &(0x7f0000000140)={0x2, 0x100, 0x1, 0x1, 0x3}) 1.020022724s ago: executing program 1 (id=3898): socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) mlockall(0x2) r1 = shmget$private(0x0, 0x400000, 0x8, &(0x7f000000e000/0x400000)=nil) shmctl$SHM_LOCK(r1, 0xb) shmat(r1, &(0x7f0000ffd000/0x1000)=nil, 0x7000) shmctl$SHM_UNLOCK(r1, 0xc) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x11c0, 0x80000) openat2$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file4\x00', &(0x7f0000000380)={0x40440, 0x15c, 0x12}, 0x18) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f00000029c0)={0x10}, 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e20, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, 0x0, &(0x7f0000000240)) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r3, 0x84, 0x1b, &(0x7f0000000380), &(0x7f0000000140)=0x8) connect$pppl2tp(r2, 0x0, 0x0) r4 = syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x14, r4, 0x100, 0x70bd26, 0x4, {0x5}}, 0x14}}, 0x20) r6 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r6, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x36}}, 0x2, 0x0, 0x0, 0xfffffffc}}, 0x2e) writev(r6, &(0x7f00000000c0)=[{&(0x7f0000000180)="9f", 0x1}], 0x1) 936.259419ms ago: executing program 3 (id=3899): socket$nl_route(0x10, 0x3, 0x0) getpeername$tipc(0xffffffffffffffff, &(0x7f0000000040)=@name, &(0x7f0000000200)=0x10) creat(&(0x7f0000000080)='./bus\x00', 0x101) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x12, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f00000002c0)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x37}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="20000000100001040000", @ANYRES32, @ANYBLOB="0050198c4f05050000000c"], 0x20}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x26e1, 0x0) close(r1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) ioctl$SIOCSIFHWADDR(r1, 0x8b06, &(0x7f0000000000)={'wlan1\x00', @random="060000000010"}) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f0000000280000012", 0x2d}], 0x1}, 0x0) 864.830913ms ago: executing program 0 (id=3900): socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) mlockall(0x2) r1 = shmget$private(0x0, 0x400000, 0x8, &(0x7f000000e000/0x400000)=nil) shmctl$SHM_LOCK(r1, 0xb) shmat(r1, &(0x7f0000ffd000/0x1000)=nil, 0x7000) shmctl$SHM_UNLOCK(r1, 0xc) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x11c0, 0x80000) openat2$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file4\x00', &(0x7f0000000380)={0x40440, 0x15c, 0x12}, 0x18) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f00000029c0)={0x10}, 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e20, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, 0x0, &(0x7f0000000240)) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r3, 0x84, 0x1b, &(0x7f0000000380), &(0x7f0000000140)=0x8) connect$pppl2tp(r2, 0x0, 0x0) r4 = syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x14, r4, 0x100, 0x70bd26, 0x4, {0x5}}, 0x14}}, 0x20) r6 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r6, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x36}}, 0x2, 0x0, 0x0, 0xfffffffc}}, 0x2e) writev(r6, &(0x7f00000000c0)=[{&(0x7f0000000180)="9f", 0x1}], 0x1) 786.094875ms ago: executing program 3 (id=3901): r0 = socket$tipc(0x1e, 0x2, 0x0) fcntl$setlease(r0, 0x400, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') pread64(r3, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x2042, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000019100)) r4 = timerfd_create(0x0, 0x0) timerfd_settime(r4, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) readv(r4, &(0x7f0000000000)=[{0x0}], 0x1) r5 = getpid() r6 = syz_pidfd_open(r5, 0x0) setns(r6, 0x24020000) r7 = syz_clone(0x12800100, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r7, 0x39) r8 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r8, 0x890b, &(0x7f00000005c0)={@dev={0xfe, 0x80, '\x00', 0x40}, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3, 0xecc5, 0x5, 0x100, 0xb7, 0xc20022, r9}) syz_emit_ethernet(0xd2, &(0x7f0000019140)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x80}, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x98, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, '\x00', 0x0, 0x0, 0x0, @remote, @private2, [@srh={0x73, 0xc, 0x4, 0x6, 0x8, 0x74, 0xfff8, [@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private0, @ipv4={'\x00', '\xff\xff', @local}, @private1, @loopback, @remote]}]}}}}}}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040801}, 0x0) bind$tipc(r0, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) socket$tipc(0x1e, 0x2, 0x0) 37.252108ms ago: executing program 0 (id=3902): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x3, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x4040001) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) writev(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000080)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb0100", 0x25}, {&(0x7f0000000040)="aa1d484ea0a00000f7fc08fcd111fbdf23ea32db0e8f21d5bc27bd49eb067a0689fff2a41cfb", 0x26}], 0x2) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000)={0x1}) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000840), 0x2, 0x0) ioctl$UI_DEV_SETUP(r4, 0x405c5503, &(0x7f0000000280)={{0x5}, 'syz1\x00', 0x10}) r5 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r6, {0x9, 0x3}, {}, {0x5, 0x1}}}, 0x24}}, 0x40004) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00f7ffffff1e00ff130012800b00010062617461647600000400028008000a00", @ANYRES32], 0x3c}}, 0x0) ioctl$UI_DEV_CREATE(r4, 0x5501) ioctl$UI_DEV_DESTROY(r4, 0x5502) r8 = syz_open_dev$usbfs(0x0, 0x1, 0x351000) ioctl$USBDEVFS_GET_SPEED(r8, 0x551f) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYRES8=r1, @ANYRESOCT], 0x6c}}, 0x800) 0s ago: executing program 1 (id=3903): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000080)={{0x3, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_STOP(r1, 0x54a1) r2 = dup(r0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x12, 0xffffffffffffffff, 0x0) r3 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_REGISTER(r3, &(0x7f00000020c0)={0x0, 0x2}, 0x2) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r4, 0xc06864b8, 0x0) syz_io_uring_setup(0x8005e2, &(0x7f0000000340)={0x0, 0xaf0a, 0x1000, 0xa, 0x200000, 0x0, r2}, &(0x7f0000000440)=0x0, &(0x7f0000000140)) socket$inet_sctp(0x2, 0x5, 0x84) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0xc0601, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000003c0)=0x14) r7 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) r8 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000002c0)={'syz', 0x0}, 0x0, 0x0, r7) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x8001af84, 0x0) pipe2$watch_queue(&(0x7f00000003c0)={0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r7, r9, 0x1e) r10 = add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000280)={'fscrypt:', @auto=[0x36, 0x30, 0x0, 0x0, 0x61, 0x0, 0x0, 0x38, 0x65, 0x0, 0x64, 0x35, 0x0, 0xd, 0x65]}, &(0x7f0000000180)={0x0, "de8d0d27ca969fa15f8b3b7bae39c1b3327d4332f8c149d2d65a347d67f6db7eb90dfdad3cdebaaf421412f812305c9da91699b5a02c1295596f0fd9ec78f2fd", 0x2d}, 0x48, r7) keyctl$KEYCTL_MOVE(0x1e, r10, r7, r8, 0x0) capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000180)={0x0, 0x0, 0x1000000, 0x9, 0x0, 0x5}) syz_io_uring_submit(r5, 0x0, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) io_uring_enter(0xffffffffffffffff, 0xa3d, 0x0, 0x0, 0x0, 0x0) r11 = mq_open(&(0x7f000084dff0)='!sali\x1cqxte&\xac\xe87x\x00', 0x6e93ebbbcc0884f2, 0x12e, &(0x7f0000000300)={0xfffffffe, 0x1, 0x7, 0x200000}) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x14) mq_timedsend(r11, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): 00 [ 1262.420351][T21898] netlink: 'syz.0.3293': attribute type 10 has an invalid length. [ 1262.503889][T20956] syz_tun: tun_net_xmit 90 [ 1262.505494][T20956] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1262.516554][T21898] bond0: (slave wlan1): Opening slave failed [ 1262.704352][T21901] netlink: 'syz.1.3294': attribute type 10 has an invalid length. [ 1262.735486][T21901] bond0: (slave wlan1): Opening slave failed [ 1262.865433][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1262.981898][T20956] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1263.104343][T20956] syz_tun: tun_net_xmit 90 [ 1263.865651][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1263.902036][T21913] lo speed is unknown, defaulting to 1000 [ 1264.025496][T21913] wlan0 speed is unknown, defaulting to 1000 [ 1264.028292][T21913] lo speed is unknown, defaulting to 1000 [ 1264.086482][T21924] wireguard0: entered promiscuous mode [ 1264.088245][T21924] wireguard0: entered allmulticast mode [ 1264.448911][T21931] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3299'. [ 1264.602847][T21935] netlink: 'syz.4.3300': attribute type 10 has an invalid length. [ 1264.608740][T21935] bond0: (slave wlan1): Opening slave failed [ 1264.846973][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1265.017621][T21940] lo speed is unknown, defaulting to 1000 [ 1265.177431][T21940] wlan0 speed is unknown, defaulting to 1000 [ 1265.180385][T21940] lo speed is unknown, defaulting to 1000 [ 1265.846795][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1266.284948][ T8039] vhci_hcd: vhci_device speed not set [ 1266.331919][T21961] netlink: 'syz.0.3306': attribute type 10 has an invalid length. [ 1266.336476][T21961] bond0: (slave wlan1): Opening slave failed [ 1266.352295][T10278] syz_tun: tun_net_xmit 90 [ 1266.354615][T10278] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1266.631248][T21970] virtio-fs: tag not found [ 1266.638025][T21970] netlink: 88 bytes leftover after parsing attributes in process `syz.4.3309'. [ 1266.648198][T21970] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3309'. [ 1266.751733][T10278] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1266.827680][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1267.132803][T10278] syz_tun: tun_net_xmit 90 [ 1267.705081][T21982] ubi: mtd0 is already attached to ubi31 [ 1267.780367][T21980] lo speed is unknown, defaulting to 1000 [ 1267.818147][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1268.818467][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1268.914465][T21992] netlink: 'syz.0.3314': attribute type 10 has an invalid length. [ 1268.918331][T21992] bond0: (slave wlan1): Opening slave failed [ 1268.942778][ T60] syz_tun: tun_net_xmit 90 [ 1268.944932][ T60] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1268.980765][ T60] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1269.799506][ T60] syz_tun: tun_net_xmit 90 [ 1269.799870][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1270.008534][T22007] binder_alloc: 22003: binder_alloc_buf, no vma [ 1270.152515][T22001] lo speed is unknown, defaulting to 1000 [ 1270.224041][T22001] wlan0 speed is unknown, defaulting to 1000 [ 1270.226626][T22001] lo speed is unknown, defaulting to 1000 [ 1270.256746][T21980] wlan0 speed is unknown, defaulting to 1000 [ 1270.260111][T21980] lo speed is unknown, defaulting to 1000 [ 1270.790748][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1271.609310][T22030] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 1271.611301][T22030] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1271.614232][T22030] vhci_hcd vhci_hcd.0: Device attached [ 1271.790604][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1271.866795][T20956] usb 38-1: SetAddress Request (18) to port 0 [ 1272.028414][T20956] usb 38-1: new SuperSpeed USB device number 18 using vhci_hcd [ 1272.782104][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1272.973679][T22031] vhci_hcd: connection reset by peer [ 1272.975698][T19792] vhci_hcd: stop threads [ 1272.977423][T19792] vhci_hcd: release socket [ 1272.979305][T19792] vhci_hcd: disconnect device [ 1273.762456][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1274.141441][T22062] Bluetooth: hci4: Frame reassembly failed (-84) [ 1274.172035][ T7318] Bluetooth: hci4: Frame reassembly failed (-84) [ 1274.204636][T22061] 9pnet_virtio: no channels available for device syz [ 1274.275909][T22061] overlayfs: failed to resolve './file1': -2 [ 1274.404053][T22021] Set syz1 is full, maxelem 65536 reached [ 1274.762720][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1274.827161][T22072] lo speed is unknown, defaulting to 1000 [ 1275.036578][T22072] wlan0 speed is unknown, defaulting to 1000 [ 1275.040341][T22072] lo speed is unknown, defaulting to 1000 [ 1275.752878][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1276.048225][ T5981] Bluetooth: hci4: command 0x1003 tx timeout [ 1276.049905][T11891] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1276.451487][T22093] netlink: 'syz.0.3335': attribute type 10 has an invalid length. [ 1276.456987][T22093] bond0: (slave wlan1): Opening slave failed [ 1276.474343][ T842] syz_tun: tun_net_xmit 90 [ 1276.476999][ T842] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1276.734317][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1276.896046][T20956] usb 38-1: device descriptor read/8, error -110 [ 1276.924323][ T842] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1277.000510][ T842] syz_tun: tun_net_xmit 90 [ 1277.277243][T20956] usb usb38-port1: attempt power cycle [ 1277.724491][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1277.839980][T20956] usb usb38-port1: unable to enumerate USB device [ 1278.248355][T22115] wireguard0: entered promiscuous mode [ 1278.251715][T22115] wireguard0: entered allmulticast mode [ 1278.724733][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1279.706114][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1280.379913][T22145] netlink: 'syz.0.3347': attribute type 10 has an invalid length. [ 1280.384253][T22145] bond0: (slave wlan1): Opening slave failed [ 1280.412669][T10278] syz_tun: tun_net_xmit 90 [ 1280.414304][T10278] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1280.696909][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1280.905735][T10278] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1281.001073][T10278] syz_tun: tun_net_xmit 90 [ 1281.687282][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1281.851063][T22156] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3350'. [ 1281.864705][T22156] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1281.870164][T22156] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1282.512761][T22163] wireguard0: entered promiscuous mode [ 1282.514697][T22163] wireguard0: entered allmulticast mode [ 1282.677929][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1283.668539][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1284.289263][T22189] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3357'. [ 1284.659127][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1284.747103][T22193] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3364'. [ 1284.754979][T22193] netlink: 'syz.0.3364': attribute type 13 has an invalid length. [ 1285.155549][T20474] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1285.262389][T22206] netlink: 'syz.4.3359': attribute type 10 has an invalid length. [ 1285.649705][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1285.754132][T20474] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1285.888124][T22193] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1285.895692][T22193] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1285.900779][T10278] lo speed is unknown, defaulting to 1000 [ 1285.902700][T10278] sz1: Port: 1 Link ACTIVE [ 1285.904853][T10278] lo speed is unknown, defaulting to 1000 [ 1285.905423][T22206] bond0: (slave wlan1): Opening slave failed [ 1285.916746][ T842] syz_tun: tun_net_xmit 90 [ 1285.939559][ T40] kauditd_printk_skb: 28 callbacks suppressed [ 1285.939570][ T40] audit: type=1326 audit(1756155202.283:5411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22209 comm="syz.4.3360" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f22579 code=0x7ffc0000 [ 1285.949412][ T40] audit: type=1326 audit(1756155202.304:5412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22209 comm="syz.4.3360" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f22579 code=0x7ffc0000 [ 1285.957659][ T40] audit: type=1326 audit(1756155202.304:5413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22209 comm="syz.4.3360" exe="/syz-executor" sig=0 arch=40000003 syscall=164 compat=1 ip=0xf7f22579 code=0x7ffc0000 [ 1285.973553][ T40] audit: type=1326 audit(1756155202.304:5414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22209 comm="syz.4.3360" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f22579 code=0x7ffc0000 [ 1285.980658][ T40] audit: type=1326 audit(1756155202.304:5415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22209 comm="syz.4.3360" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f22579 code=0x7ffc0000 [ 1285.992494][ T40] audit: type=1326 audit(1756155202.304:5416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22209 comm="syz.4.3360" exe="/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf7f22579 code=0x7ffc0000 [ 1285.992717][ T842] syz_tun: tun_net_xmit 90 [ 1286.011763][ T40] audit: type=1326 audit(1756155202.304:5417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22209 comm="syz.4.3360" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f22579 code=0x7ffc0000 [ 1286.018610][ T40] audit: type=1326 audit(1756155202.304:5418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22209 comm="syz.4.3360" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f22579 code=0x7ffc0000 [ 1286.025705][ T40] audit: type=1326 audit(1756155202.314:5419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22209 comm="syz.4.3360" exe="/syz-executor" sig=0 arch=40000003 syscall=156 compat=1 ip=0xf7f22579 code=0x7ffc0000 [ 1286.035546][ T40] audit: type=1326 audit(1756155202.314:5420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22209 comm="syz.4.3360" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f22579 code=0x7ffc0000 [ 1286.169730][T22213] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3361'. [ 1286.328157][T22215] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 1286.331255][T22215] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1286.337078][T22215] vhci_hcd vhci_hcd.0: Device attached [ 1286.639951][T20956] usb 45-1: new low-speed USB device number 7 using vhci_hcd [ 1286.640342][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1286.813149][T22216] vhci_hcd: connection reset by peer [ 1286.815897][T12955] vhci_hcd: stop threads [ 1286.817827][T12955] vhci_hcd: release socket [ 1286.819767][T12955] vhci_hcd: disconnect device [ 1287.118385][T22225] netlink: 'syz.3.3362': attribute type 10 has an invalid length. [ 1287.128309][T22225] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1287.131396][T22225] bond0: (slave wlan1): Opening slave failed [ 1287.623490][T22235] lo speed is unknown, defaulting to 1000 [ 1287.640441][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1287.822029][T22235] wlan0 speed is unknown, defaulting to 1000 [ 1287.824541][T22235] lo speed is unknown, defaulting to 1000 [ 1288.436687][T22254] netlink: 'syz.3.3369': attribute type 10 has an invalid length. [ 1288.581014][T22247] wireguard0: entered promiscuous mode [ 1288.603829][T22247] wireguard0: entered allmulticast mode [ 1288.621591][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1289.612156][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1289.825365][T22269] netlink: 'syz.3.3372': attribute type 10 has an invalid length. [ 1289.989796][T22273] netlink: 'syz.3.3373': attribute type 10 has an invalid length. [ 1290.612408][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1291.221798][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1291.516910][T20956] vhci_hcd: vhci_device speed not set [ 1291.602955][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1291.830447][T22301] netlink: 830 bytes leftover after parsing attributes in process `syz.1.3380'. [ 1292.508061][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1292.583698][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1292.973461][ T40] kauditd_printk_skb: 18 callbacks suppressed [ 1292.973478][ T40] audit: type=1326 audit(1756155209.663:5439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22310 comm="syz.1.3382" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f63579 code=0x7ffc0000 [ 1292.984810][ T40] audit: type=1326 audit(1756155209.684:5440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22310 comm="syz.1.3382" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f63579 code=0x7ffc0000 [ 1292.993181][ T40] audit: type=1326 audit(1756155209.684:5441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22310 comm="syz.1.3382" exe="/syz-executor" sig=0 arch=40000003 syscall=164 compat=1 ip=0xf7f63579 code=0x7ffc0000 [ 1293.003069][ T40] audit: type=1326 audit(1756155209.684:5442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22310 comm="syz.1.3382" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f63579 code=0x7ffc0000 [ 1293.021497][ T40] audit: type=1326 audit(1756155209.695:5443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22310 comm="syz.1.3382" exe="/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf7f63579 code=0x7ffc0000 [ 1293.029235][ T40] audit: type=1326 audit(1756155209.695:5444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22310 comm="syz.1.3382" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f63579 code=0x7ffc0000 [ 1293.036769][ T40] audit: type=1326 audit(1756155209.695:5445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22310 comm="syz.1.3382" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f63579 code=0x7ffc0000 [ 1293.046007][ T40] audit: type=1326 audit(1756155209.716:5446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22310 comm="syz.1.3382" exe="/syz-executor" sig=0 arch=40000003 syscall=156 compat=1 ip=0xf7f63579 code=0x7ffc0000 [ 1293.054960][ T40] audit: type=1326 audit(1756155209.716:5447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22310 comm="syz.1.3382" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f63579 code=0x7ffc0000 [ 1293.064146][ T40] audit: type=1326 audit(1756155209.716:5448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22310 comm="syz.1.3382" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f63579 code=0x7ffc0000 [ 1293.574716][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1294.279682][T22321] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 1294.281936][T22321] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1294.289653][T22321] vhci_hcd vhci_hcd.0: Device attached [ 1294.331875][T22329] netlink: 'syz.3.3385': attribute type 4 has an invalid length. [ 1294.341733][T22330] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3386'. [ 1294.418830][T22324] vhci_hcd: connection closed [ 1294.428350][ T46] vhci_hcd: stop threads [ 1294.461764][ T46] vhci_hcd: release socket [ 1294.473128][ T46] vhci_hcd: disconnect device [ 1294.527125][T20956] usb 39-1: new low-speed USB device number 8 using vhci_hcd [ 1294.530344][T20956] usb 39-1: enqueue for inactive port 0 [ 1294.574782][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1294.594611][T20956] vhci_hcd: vhci_device speed not set [ 1295.555822][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1295.916307][T22344] netlink: 'syz.4.3390': attribute type 10 has an invalid length. [ 1295.920679][T22344] bond0: (slave wlan1): Opening slave failed [ 1296.374150][T22351] Bluetooth: hci4: Frame reassembly failed (-84) [ 1296.381061][ T1148] Bluetooth: hci4: Frame reassembly failed (-84) [ 1296.546493][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1297.537150][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1297.865774][T22366] Bluetooth: hci5: Frame reassembly failed (-84) [ 1297.890797][ T46] Bluetooth: hci5: Frame reassembly failed (-84) [ 1297.892903][ T1148] Bluetooth: hci5: Frame reassembly failed (-84) [ 1298.298880][T11891] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1298.527704][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1299.518336][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1299.754891][T22387] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3398'. [ 1299.823408][T19943] Bluetooth: hci5: command 0x1003 tx timeout [ 1299.832463][ T5981] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1299.993202][T22389] netlink: 'syz.1.3400': attribute type 10 has an invalid length. [ 1299.998902][T22389] bond0: (slave wlan1): Opening slave failed [ 1300.062619][T22392] netlink: 'syz.1.3401': attribute type 10 has an invalid length. [ 1300.066296][T22392] bond0: (slave wlan1): Opening slave failed [ 1300.518501][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1300.753638][T22411] netlink: 'syz.3.3406': attribute type 10 has an invalid length. [ 1301.449252][T22425] netlink: 'syz.4.3410': attribute type 10 has an invalid length. [ 1301.453654][T22425] bond0: (slave wlan1): Opening slave failed [ 1301.499567][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1301.903945][T22439] macvlan0: entered promiscuous mode [ 1301.905792][T22439] bridge0: entered promiscuous mode [ 1301.929278][T22439] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1302.500106][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1303.480828][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1303.897019][T22456] netlink: 'syz.0.3416': attribute type 10 has an invalid length. [ 1303.902569][T22456] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1303.905112][T22456] bond0: (slave wlan1): Opening slave failed [ 1303.971526][T22459] ubi: mtd0 is already attached to ubi31 [ 1304.471378][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1305.471174][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1306.462115][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1306.904152][T22498] netlink: 'syz.4.3424': attribute type 10 has an invalid length. [ 1306.954087][T22488] wireguard0: entered promiscuous mode [ 1306.956544][T22488] wireguard0: entered allmulticast mode [ 1307.030536][T22498] bond0: (slave wlan1): Opening slave failed [ 1307.142532][T22504] netlink: 'syz.4.3426': attribute type 1 has an invalid length. [ 1307.145212][T22504] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3426'. [ 1307.150499][T22504] netlink: 'syz.4.3426': attribute type 10 has an invalid length. [ 1307.155765][T22504] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1307.160669][T22504] bond0: entered promiscuous mode [ 1307.163588][T22504] team0: Port device bond0 added [ 1307.170195][T22504] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3426'. [ 1307.332894][T22504] bond0: left promiscuous mode [ 1307.349937][T22504] team0 (unregistering): Port device bond0 removed [ 1307.394939][T22507] netlink: 'syz.1.3427': attribute type 10 has an invalid length. [ 1307.398097][T22507] bond0: (slave wlan1): Opening slave failed [ 1307.452724][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1307.812484][T22519] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3430'. [ 1308.218033][T22526] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3432'. [ 1308.431032][T22531] netlink: 'syz.1.3434': attribute type 10 has an invalid length. [ 1308.433977][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1308.437745][T22531] bond0: (slave wlan1): Opening slave failed [ 1308.526392][T22534] netlink: 'syz.1.3435': attribute type 10 has an invalid length. [ 1308.529894][T22534] bond0: (slave wlan1): Opening slave failed [ 1308.922510][T22541] netlink: 'syz.0.3437': attribute type 10 has an invalid length. [ 1308.925481][T22541] bond0: (slave wlan1): Opening slave failed [ 1308.939220][ T8039] syz_tun: tun_net_xmit 90 [ 1308.941318][ T8039] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1309.424583][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1309.516877][T22557] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3440'. [ 1309.845830][ T8039] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1309.969184][ T8039] syz_tun: tun_net_xmit 90 [ 1310.414997][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1311.415226][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1312.140956][T22593] netlink: 'syz.3.3448': attribute type 10 has an invalid length. [ 1312.405431][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1313.152306][ T40] kauditd_printk_skb: 16 callbacks suppressed [ 1313.152318][ T40] audit: type=1326 audit(1756155230.860:5465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22606 comm="syz.3.3452" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff8579 code=0x7ffc0000 [ 1313.166347][ T40] audit: type=1326 audit(1756155230.860:5466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22606 comm="syz.3.3452" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff8579 code=0x7ffc0000 [ 1313.173616][ T40] audit: type=1326 audit(1756155230.860:5467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22606 comm="syz.3.3452" exe="/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf7ff8579 code=0x7ffc0000 [ 1313.183643][ T40] audit: type=1326 audit(1756155230.860:5468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22606 comm="syz.3.3452" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff8579 code=0x7ffc0000 [ 1313.190638][ T40] audit: type=1326 audit(1756155230.860:5469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22606 comm="syz.3.3452" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff8579 code=0x7ffc0000 [ 1313.201600][ T40] audit: type=1326 audit(1756155230.860:5470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22606 comm="syz.3.3452" exe="/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf7ff8579 code=0x7ffc0000 [ 1313.210165][ T40] audit: type=1326 audit(1756155230.860:5471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22606 comm="syz.3.3452" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff8579 code=0x7ffc0000 [ 1313.218889][ T40] audit: type=1326 audit(1756155230.860:5472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22606 comm="syz.3.3452" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff8579 code=0x7ffc0000 [ 1313.227502][ T40] audit: type=1326 audit(1756155230.860:5473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22606 comm="syz.3.3452" exe="/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf7ff8579 code=0x7ffc0000 [ 1313.237464][ T40] audit: type=1326 audit(1756155230.860:5474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22606 comm="syz.3.3452" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff8579 code=0x7ffc0000 [ 1313.386861][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1313.910664][T22618] netlink: 'syz.3.3454': attribute type 10 has an invalid length. [ 1314.285597][T22628] netlink: 'syz.3.3457': attribute type 10 has an invalid length. [ 1314.383980][T22631] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3458'. [ 1314.386803][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1314.989184][T22634] x_tables: ip_tables: HMARK.0 target: invalid size 64 (kernel) != (user) 72 [ 1315.148634][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1315.214814][T22651] netlink: 'syz.1.3462': attribute type 10 has an invalid length. [ 1315.218368][T22651] bond0: (slave wlan1): Opening slave failed [ 1315.313609][T22655] netlink: 'syz.0.3464': attribute type 10 has an invalid length. [ 1315.317062][T22655] bond0: (slave wlan1): Opening slave failed [ 1315.339659][ T60] syz_tun: tun_net_xmit 90 [ 1315.341609][ T60] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1315.368021][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1315.862884][ T60] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1316.109549][T22668] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3467'. [ 1316.131388][T22668] tmpfs: Bad value for 'mpol' [ 1316.139744][T22668] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3467'. [ 1316.285616][ T842] syz_tun: tun_net_xmit 90 [ 1316.368032][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1316.404665][T22671] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3469'. [ 1317.167510][T20956] libceph: connect (1)[c::]:6789 error -101 [ 1317.177730][T20956] libceph: mon0 (1)[c::]:6789 connect error [ 1317.193976][T22679] ceph: No mds server is up or the cluster is laggy [ 1317.358771][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1317.378278][T22685] netlink: 'syz.4.3472': attribute type 10 has an invalid length. [ 1317.381692][T22685] bond0: (slave wlan1): Opening slave failed [ 1317.740112][T20474] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 1317.753428][T22691] netlink: 'syz.0.3474': attribute type 10 has an invalid length. [ 1317.756389][T22691] bond0: (slave wlan1): Opening slave failed [ 1317.777900][T20474] syz_tun: tun_net_xmit 90 [ 1317.779474][T20474] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1317.867633][T22697] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3475'. [ 1317.949649][T20474] syz_tun: tun_net_xmit 90 [ 1318.082981][T20474] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1318.142746][ T40] kauditd_printk_skb: 48 callbacks suppressed [ 1318.142759][ T40] audit: type=1326 audit(1756155236.098:5523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22705 comm="syz.4.3477" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f22579 code=0x7ffc0000 [ 1318.151778][ T40] audit: type=1326 audit(1756155236.098:5524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22705 comm="syz.4.3477" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f22579 code=0x7ffc0000 [ 1318.160135][ T40] audit: type=1326 audit(1756155236.098:5525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22705 comm="syz.4.3477" exe="/syz-executor" sig=0 arch=40000003 syscall=164 compat=1 ip=0xf7f22579 code=0x7ffc0000 [ 1318.167681][ T40] audit: type=1326 audit(1756155236.098:5526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22705 comm="syz.4.3477" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f22579 code=0x7ffc0000 [ 1318.174875][ T40] audit: type=1326 audit(1756155236.098:5527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22705 comm="syz.4.3477" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f22579 code=0x7ffc0000 [ 1318.182112][ T40] audit: type=1326 audit(1756155236.098:5528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22705 comm="syz.4.3477" exe="/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf7f22579 code=0x7ffc0000 [ 1318.189177][ T40] audit: type=1326 audit(1756155236.098:5529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22705 comm="syz.4.3477" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f22579 code=0x7ffc0000 [ 1318.196013][ T40] audit: type=1326 audit(1756155236.098:5530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22705 comm="syz.4.3477" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f22579 code=0x7ffc0000 [ 1318.202932][ T40] audit: type=1326 audit(1756155236.098:5531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22705 comm="syz.4.3477" exe="/syz-executor" sig=0 arch=40000003 syscall=156 compat=1 ip=0xf7f22579 code=0x7ffc0000 [ 1318.209947][ T40] audit: type=1326 audit(1756155236.098:5532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22705 comm="syz.4.3477" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f22579 code=0x7ffc0000 [ 1318.275826][T22710] max out of range [ 1318.295575][T22710] sp0: Synchronizing with TNC [ 1318.349518][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1318.378309][T22713] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 1318.381195][T22713] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1318.384430][T22713] vhci_hcd vhci_hcd.0: Device attached [ 1318.625191][T20956] usb 45-1: new low-speed USB device number 8 using vhci_hcd [ 1318.939255][T22714] vhci_hcd: connection reset by peer [ 1318.941674][ T46] vhci_hcd: stop threads [ 1318.943057][ T46] vhci_hcd: release socket [ 1318.955199][ T46] vhci_hcd: disconnect device [ 1319.068111][T22727] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3479'. [ 1319.106317][T22727] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1319.330511][ C0] net_ratelimit: 1 callbacks suppressed [ 1319.330524][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1320.320781][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1320.720383][T22764] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3486'. [ 1321.060879][T22772] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3487'. [ 1321.064415][T22772] netlink: 'syz.0.3487': attribute type 5 has an invalid length. [ 1321.067153][T22772] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3487'. [ 1321.091679][T22772] geneve3: entered promiscuous mode [ 1321.093552][T22772] geneve3: entered allmulticast mode [ 1321.100436][ T1148] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 1321.103602][ T1148] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 1321.106934][ T1148] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 1321.110553][ T1148] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 1321.311771][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1322.312133][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1322.699511][T22793] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3493'. [ 1322.836643][T22795] netlink: 'syz.0.3494': attribute type 10 has an invalid length. [ 1322.840273][T22795] bond0: (slave wlan1): Opening slave failed [ 1322.854956][ T842] syz_tun: tun_net_xmit 90 [ 1322.856586][ T842] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1322.895386][T22797] netlink: 'syz.0.3495': attribute type 10 has an invalid length. [ 1322.898651][T22797] bond0: (slave wlan1): Opening slave failed [ 1322.912046][ T842] syz_tun: tun_net_xmit 90 [ 1322.913856][ T842] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1323.083863][T22801] netlink: 'syz.0.3496': attribute type 13 has an invalid length. [ 1323.130598][ T842] syz_tun: tun_net_xmit 90 [ 1323.292955][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1323.355486][T20474] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1323.466688][T20474] syz_tun: tun_net_xmit 90 [ 1323.479242][T22805] netlink: 'syz.4.3498': attribute type 10 has an invalid length. [ 1323.483745][T22805] bond0: (slave wlan1): Opening slave failed [ 1323.512015][T20956] vhci_hcd: vhci_device speed not set [ 1323.722813][T22811] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3500'. [ 1323.959736][T20474] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1324.159785][T20474] syz_tun: tun_net_xmit 90 [ 1324.292909][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1325.046475][T22820] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 1325.103569][ T842] syz_tun: tun_net_xmit 90 [ 1325.106084][ T842] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1325.109176][T22822] netlink: 'syz.0.3504': attribute type 10 has an invalid length. [ 1325.118257][T22822] bond0: (slave wlan1): Opening slave failed [ 1325.226736][ T40] kauditd_printk_skb: 43 callbacks suppressed [ 1325.226747][ T40] audit: type=1326 audit(1756155243.542:5576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22826 comm="syz.0.3506" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f24579 code=0x7ffc0000 [ 1325.267617][ T40] audit: type=1326 audit(1756155243.573:5577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22826 comm="syz.0.3506" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f24579 code=0x7ffc0000 [ 1325.283717][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1325.284083][ T40] audit: type=1326 audit(1756155243.584:5578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22826 comm="syz.0.3506" exe="/syz-executor" sig=0 arch=40000003 syscall=164 compat=1 ip=0xf7f24579 code=0x7ffc0000 [ 1325.304415][ T40] audit: type=1326 audit(1756155243.605:5579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22826 comm="syz.0.3506" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f24579 code=0x7ffc0000 [ 1325.322274][ T40] audit: type=1326 audit(1756155243.615:5580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22826 comm="syz.0.3506" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f24579 code=0x7ffc0000 [ 1325.332407][ T40] audit: type=1326 audit(1756155243.615:5581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22826 comm="syz.0.3506" exe="/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf7f24579 code=0x7ffc0000 [ 1325.347409][ T40] audit: type=1326 audit(1756155243.615:5582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22826 comm="syz.0.3506" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f24579 code=0x7ffc0000 [ 1325.357231][ T40] audit: type=1326 audit(1756155243.615:5583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22826 comm="syz.0.3506" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f24579 code=0x7ffc0000 [ 1325.373434][ T40] audit: type=1326 audit(1756155243.626:5584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22826 comm="syz.0.3506" exe="/syz-executor" sig=0 arch=40000003 syscall=156 compat=1 ip=0xf7f24579 code=0x7ffc0000 [ 1325.380732][ T40] audit: type=1326 audit(1756155243.626:5585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22826 comm="syz.0.3506" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f24579 code=0x7ffc0000 [ 1325.438589][T22829] infiniband syz1: set down [ 1325.440201][T22829] infiniband syz1: added syz_tun [ 1325.459765][T22829] RDS/IB: syz1: added [ 1325.461231][T22829] smc: adding ib device syz1 with port count 1 [ 1325.463308][T22829] smc: ib device syz1 port 1 has pnetid [ 1325.795791][T22840] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 1325.797909][T22840] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1325.800745][T22840] vhci_hcd vhci_hcd.0: Device attached [ 1325.809048][ T842] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1326.040942][ T842] syz_tun: tun_net_xmit 90 [ 1326.045684][T17807] usb 37-1: new low-speed USB device number 6 using vhci_hcd [ 1326.254014][T22845] vhci_hcd: connection reset by peer [ 1326.256321][T12165] vhci_hcd: stop threads [ 1326.257687][T12165] vhci_hcd: release socket [ 1326.259135][T12165] vhci_hcd: disconnect device [ 1326.264804][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1326.808146][T22863] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3512'. [ 1326.961315][T22867] wireguard0: entered promiscuous mode [ 1326.963527][T22867] wireguard0: entered allmulticast mode [ 1327.223076][T22874] netlink: 'syz.4.3514': attribute type 10 has an invalid length. [ 1327.225901][T22874] bond0: (slave wlan1): Opening slave failed [ 1327.255651][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1327.266484][T22876] netlink: 'syz.4.3515': attribute type 10 has an invalid length. [ 1327.270224][T22876] bond0: (slave wlan1): Opening slave failed [ 1327.539978][T22879] lo speed is unknown, defaulting to 1000 [ 1328.246767][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1328.293107][T22879] wlan0 speed is unknown, defaulting to 1000 [ 1328.301237][T22879] lo speed is unknown, defaulting to 1000 [ 1329.236721][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1330.206965][ T40] kauditd_printk_skb: 127 callbacks suppressed [ 1330.206981][ T40] audit: type=1326 audit(1756155248.760:5713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22901 comm="syz.3.3521" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff8579 code=0x7ffc0000 [ 1330.217017][ T40] audit: type=1326 audit(1756155248.760:5714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22901 comm="syz.3.3521" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff8579 code=0x7ffc0000 [ 1330.229814][ T40] audit: type=1326 audit(1756155248.791:5715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22901 comm="syz.3.3521" exe="/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf7ff8579 code=0x7ffc0000 [ 1330.236503][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1330.237751][ T40] audit: type=1326 audit(1756155248.791:5716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22901 comm="syz.3.3521" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff8579 code=0x7ffc0000 [ 1330.246469][ T40] audit: type=1326 audit(1756155248.791:5717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22901 comm="syz.3.3521" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff8579 code=0x7ffc0000 [ 1330.253973][ T40] audit: type=1326 audit(1756155248.802:5718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22901 comm="syz.3.3521" exe="/syz-executor" sig=0 arch=40000003 syscall=362 compat=1 ip=0xf7ff8579 code=0x7ffc0000 [ 1330.261126][ T40] audit: type=1326 audit(1756155248.802:5719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22901 comm="syz.3.3521" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff8579 code=0x7ffc0000 [ 1330.268019][ T40] audit: type=1326 audit(1756155248.802:5720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22901 comm="syz.3.3521" exe="/syz-executor" sig=0 arch=40000003 syscall=345 compat=1 ip=0xf7ff8579 code=0x7ffc0000 [ 1330.346463][T22905] input: syz1 as /devices/virtual/input/input31 [ 1330.427738][T22908] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3522'. [ 1330.979546][T17807] vhci_hcd: vhci_device speed not set [ 1331.218025][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1331.334616][T22922] netlink: 'syz.1.3526': attribute type 10 has an invalid length. [ 1331.337841][T22922] bond0: (slave wlan1): Opening slave failed [ 1332.209005][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1332.430678][T22946] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3531'. [ 1332.535018][T22952] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3532'. [ 1333.209241][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1333.633071][ T40] audit: type=1326 audit(1756155252.340:5721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22968 comm="syz.3.3535" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff8579 code=0x7ffc0000 [ 1333.644133][ T40] audit: type=1326 audit(1756155252.340:5722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22968 comm="syz.3.3535" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff8579 code=0x7ffc0000 [ 1334.189807][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1334.580280][T22985] nbd4: detected capacity change from 0 to 4 [ 1334.592911][T22987] block nbd4: shutting down sockets [ 1334.628838][ C0] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1334.632594][ C0] Buffer I/O error on dev nbd4, logical block 0, async page read [ 1334.640902][T22834] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1334.644294][T22834] Buffer I/O error on dev nbd4, logical block 0, async page read [ 1334.648660][T22834] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1334.653351][T22834] Buffer I/O error on dev nbd4, logical block 0, async page read [ 1334.656047][T22834] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1334.659231][T22834] Buffer I/O error on dev nbd4, logical block 0, async page read [ 1334.661819][T22834] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1334.664824][T22834] Buffer I/O error on dev nbd4, logical block 0, async page read [ 1334.667271][T22834] ldm_validate_partition_table(): Disk read failed. [ 1334.669506][T22834] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1334.672363][T22834] Buffer I/O error on dev nbd4, logical block 0, async page read [ 1334.675057][T22834] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1334.678206][T22834] Buffer I/O error on dev nbd4, logical block 0, async page read [ 1334.680948][T22834] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1334.683914][T22834] Buffer I/O error on dev nbd4, logical block 0, async page read [ 1334.686612][T22834] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1334.689648][T22834] Buffer I/O error on dev nbd4, logical block 0, async page read [ 1334.692325][T22834] Dev nbd4: unable to read RDB block 0 [ 1334.694373][T22834] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1334.697222][T22834] Buffer I/O error on dev nbd4, logical block 0, async page read [ 1334.699855][T22834] nbd4: unable to read partition table [ 1334.701793][T22834] nbd4: partition table beyond EOD, truncated [ 1334.829265][T22834] ldm_validate_partition_table(): Disk read failed. [ 1334.831732][T22834] Dev nbd4: unable to read RDB block 0 [ 1334.833695][T22834] nbd4: unable to read partition table [ 1334.835879][T22834] nbd4: partition table beyond EOD, truncated [ 1335.180409][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1335.322449][T22995] netlink: 'syz.4.3541': attribute type 10 has an invalid length. [ 1335.326874][T22995] bond0: (slave wlan1): Opening slave failed [ 1335.433075][T22999] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3542'. [ 1336.170521][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1336.248088][T23010] netlink: 'syz.1.3544': attribute type 10 has an invalid length. [ 1336.256056][T23010] bond0: (slave wlan1): Opening slave failed [ 1336.422221][T23016] netlink: 'syz.3.3547': attribute type 10 has an invalid length. [ 1336.439107][T23016] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1336.562015][ T40] kauditd_printk_skb: 23 callbacks suppressed [ 1336.562027][ T40] audit: type=1326 audit(1756155255.426:5746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23022 comm="syz.0.3549" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f24579 code=0x7ffc0000 [ 1336.599441][ T40] audit: type=1326 audit(1756155255.426:5747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23022 comm="syz.0.3549" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f24579 code=0x7ffc0000 [ 1336.618074][ T40] audit: type=1326 audit(1756155255.479:5748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23022 comm="syz.0.3549" exe="/syz-executor" sig=0 arch=40000003 syscall=164 compat=1 ip=0xf7f24579 code=0x7ffc0000 [ 1336.631186][ T40] audit: type=1326 audit(1756155255.479:5749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23022 comm="syz.0.3549" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f24579 code=0x7ffc0000 [ 1336.647276][ T40] audit: type=1326 audit(1756155255.479:5750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23022 comm="syz.0.3549" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f24579 code=0x7ffc0000 [ 1336.656646][ T40] audit: type=1326 audit(1756155255.479:5751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23022 comm="syz.0.3549" exe="/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf7f24579 code=0x7ffc0000 [ 1336.666166][ T40] audit: type=1326 audit(1756155255.479:5752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23022 comm="syz.0.3549" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f24579 code=0x7ffc0000 [ 1336.675695][ T40] audit: type=1326 audit(1756155255.479:5753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23022 comm="syz.0.3549" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f24579 code=0x7ffc0000 [ 1336.684627][ T40] audit: type=1326 audit(1756155255.479:5754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23022 comm="syz.0.3549" exe="/syz-executor" sig=0 arch=40000003 syscall=156 compat=1 ip=0xf7f24579 code=0x7ffc0000 [ 1336.692665][ T40] audit: type=1326 audit(1756155255.479:5755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23022 comm="syz.0.3549" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f24579 code=0x7ffc0000 [ 1336.849929][T23029] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 1336.853144][T23029] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1336.858607][T23029] vhci_hcd vhci_hcd.0: Device attached [ 1337.161223][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1337.436224][ T8039] usb 37-1: new low-speed USB device number 7 using vhci_hcd [ 1337.809372][T23030] vhci_hcd: connection reset by peer [ 1337.821397][ T46] vhci_hcd: stop threads [ 1337.823484][ T46] vhci_hcd: release socket [ 1337.827696][ T46] vhci_hcd: disconnect device [ 1338.162794][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1338.861845][T23061] netlink: 'syz.1.3556': attribute type 10 has an invalid length. [ 1338.868446][T23061] bond0: (slave wlan1): Opening slave failed [ 1339.142745][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1339.247410][T23064] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3557'. [ 1340.005885][T23083] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3558'. [ 1340.143060][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1340.777483][T23091] netlink: 'syz.0.3570': attribute type 10 has an invalid length. [ 1340.784010][T23091] bond0: (slave wlan1): Opening slave failed [ 1340.801093][T20474] syz_tun: tun_net_xmit 90 [ 1340.803572][T20474] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1341.124063][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1341.237897][T20474] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1341.590347][T20474] syz_tun: tun_net_xmit 90 [ 1342.114116][ T40] kauditd_printk_skb: 43 callbacks suppressed [ 1342.114129][ T40] audit: type=1326 audit(1756155261.253:5799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23112 comm="syz.1.3567" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f63579 code=0x7ffc0000 [ 1342.124131][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1342.126333][ T40] audit: type=1326 audit(1756155261.274:5800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23111 comm="syz.4.3568" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f22579 code=0x7ffc0000 [ 1342.135529][ T40] audit: type=1326 audit(1756155261.274:5801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23111 comm="syz.4.3568" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f22579 code=0x7ffc0000 [ 1342.146799][ T40] audit: type=1326 audit(1756155261.274:5802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23112 comm="syz.1.3567" exe="/syz-executor" sig=0 arch=40000003 syscall=164 compat=1 ip=0xf7f63579 code=0x7ffc0000 [ 1342.154351][ T40] audit: type=1326 audit(1756155261.274:5803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23112 comm="syz.1.3567" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f63579 code=0x7ffc0000 [ 1342.171779][ T40] audit: type=1326 audit(1756155261.274:5804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23112 comm="syz.1.3567" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f63579 code=0x7ffc0000 [ 1342.181413][ T40] audit: type=1326 audit(1756155261.274:5805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23112 comm="syz.1.3567" exe="/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf7f63579 code=0x7ffc0000 [ 1342.189255][ T40] audit: type=1326 audit(1756155261.274:5806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23112 comm="syz.1.3567" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f63579 code=0x7ffc0000 [ 1342.200355][ T40] audit: type=1326 audit(1756155261.274:5807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23112 comm="syz.1.3567" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f63579 code=0x7ffc0000 [ 1342.208102][ T40] audit: type=1326 audit(1756155261.274:5808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23112 comm="syz.1.3567" exe="/syz-executor" sig=0 arch=40000003 syscall=156 compat=1 ip=0xf7f63579 code=0x7ffc0000 [ 1342.470914][T23122] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 1342.473058][T23122] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1342.476127][T23122] vhci_hcd vhci_hcd.0: Device attached [ 1342.594709][T23125] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 1342.596870][T23125] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1342.602053][T23125] vhci_hcd vhci_hcd.0: Device attached [ 1342.657276][ T8039] vhci_hcd: vhci_device speed not set [ 1342.705216][T20956] usb 45-1: new low-speed USB device number 9 using vhci_hcd [ 1342.828613][ T6085] usb 39-1: new low-speed USB device number 9 using vhci_hcd [ 1342.935831][T23123] vhci_hcd: connection reset by peer [ 1342.937930][ T13] vhci_hcd: stop threads [ 1342.939779][ T13] vhci_hcd: release socket [ 1342.942120][ T13] vhci_hcd: disconnect device [ 1342.955666][T23126] vhci_hcd: connection reset by peer [ 1342.958246][ T1148] vhci_hcd: stop threads [ 1342.960434][ T1148] vhci_hcd: release socket [ 1342.963239][ T1148] vhci_hcd: disconnect device [ 1343.105340][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1344.096145][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1344.396745][T23153] ceph: No mds server is up or the cluster is laggy [ 1344.397355][ T8039] libceph: connect (1)[c::]:6789 error -101 [ 1344.397706][ T8039] libceph: mon0 (1)[c::]:6789 connect error [ 1344.658087][T23148] x_tables: ip_tables: HMARK.0 target: invalid size 64 (kernel) != (user) 72 [ 1344.711331][T23165] netlink: 'syz.0.3578': attribute type 10 has an invalid length. [ 1344.715416][T23165] bond0: (slave wlan1): Opening slave failed [ 1345.086558][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1346.077229][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1346.134720][T23185] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3582'. [ 1346.570943][T23198] netlink: 'syz.0.3586': attribute type 10 has an invalid length. [ 1346.576061][T23198] bond0: (slave wlan1): Opening slave failed [ 1346.601611][ T842] syz_tun: tun_net_xmit 90 [ 1346.603604][ T842] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1346.847620][T23201] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 1346.849745][T23201] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1346.883062][T23201] vhci_hcd vhci_hcd.0: Device attached [ 1346.897565][T23206] vhci_hcd: connection closed [ 1346.899393][ T13] vhci_hcd: stop threads [ 1346.903387][ T13] vhci_hcd: release socket [ 1346.906135][ T13] vhci_hcd: disconnect device [ 1346.908242][ T40] kauditd_printk_skb: 91 callbacks suppressed [ 1346.908257][ T40] audit: type=1326 audit(1756155266.282:5900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23190 comm="syz.1.3583" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f63579 code=0x7ffc0000 [ 1346.922158][ T40] audit: type=1326 audit(1756155266.282:5901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23190 comm="syz.1.3583" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f63579 code=0x7ffc0000 [ 1346.931511][ T40] audit: type=1326 audit(1756155266.282:5902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23190 comm="syz.1.3583" exe="/syz-executor" sig=0 arch=40000003 syscall=337 compat=1 ip=0xf7f63579 code=0x7ffc0000 [ 1346.933369][T23210] netlink: 'syz.0.3589': attribute type 10 has an invalid length. [ 1346.940986][ T40] audit: type=1326 audit(1756155266.282:5903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23190 comm="syz.1.3583" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f63579 code=0x7ffc0000 [ 1346.947160][T23210] bond0: (slave wlan1): Opening slave failed [ 1346.954798][ T40] audit: type=1326 audit(1756155266.282:5904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23190 comm="syz.1.3583" exe="/syz-executor" sig=0 arch=40000003 syscall=55 compat=1 ip=0xf7f63579 code=0x7ffc0000 [ 1346.958402][ T842] syz_tun: tun_net_xmit 90 [ 1346.966489][ T40] audit: type=1326 audit(1756155266.282:5905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23190 comm="syz.1.3583" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f63579 code=0x7ffc0000 [ 1346.970983][ T842] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1346.976931][ T40] audit: type=1326 audit(1756155266.282:5906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23190 comm="syz.1.3583" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f63579 code=0x7ffc0000 [ 1347.067722][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1347.101239][ T40] audit: type=1326 audit(1756155266.492:5907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23195 comm="syz.3.3585" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff8579 code=0x7ffc0000 [ 1347.111128][ T40] audit: type=1326 audit(1756155266.492:5908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23195 comm="syz.3.3585" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff8579 code=0x7ffc0000 [ 1347.119812][ T40] audit: type=1326 audit(1756155266.492:5909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23195 comm="syz.3.3585" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff8579 code=0x7ffc0000 [ 1347.160932][T23213] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1347.239596][T23215] netlink: 'syz.0.3590': attribute type 1 has an invalid length. [ 1347.242813][T23215] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3590'. [ 1347.254120][T23213] netlink: 'syz.0.3590': attribute type 10 has an invalid length. [ 1347.270113][T23213] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3590'. [ 1347.591536][ T842] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1347.677361][T20956] vhci_hcd: vhci_device speed not set [ 1347.679795][ T6085] vhci_hcd: vhci_device speed not set [ 1347.915442][ T842] syz_tun: tun_net_xmit 90 [ 1348.058495][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1348.062581][T23230] Bluetooth: hci4: Frame reassembly failed (-84) [ 1348.077659][T12165] Bluetooth: hci4: Frame reassembly failed (-84) [ 1348.086756][T12165] Bluetooth: hci4: Frame reassembly failed (-84) [ 1349.049092][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1349.082773][T20956] libceph: connect (1)[c::]:6789 error -101 [ 1349.090823][T20956] libceph: mon0 (1)[c::]:6789 connect error [ 1349.103523][T23240] ceph: No mds server is up or the cluster is laggy [ 1350.039641][T19943] Bluetooth: hci4: command 0x1003 tx timeout [ 1350.040511][ T5981] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1350.048732][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1350.146032][ T46] Bluetooth: hci4: Frame reassembly failed (-84) [ 1350.148455][ T1148] Bluetooth: hci4: Frame reassembly failed (-84) [ 1350.158586][T23252] Bluetooth: hci4: Frame reassembly failed (-84) [ 1350.306304][T23254] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3596'. [ 1351.030320][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1352.020962][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1352.106044][ T5981] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1352.390559][T23286] macvlan2: entered promiscuous mode [ 1352.392436][T23286] bridge0: entered promiscuous mode [ 1352.433895][T23286] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1352.589954][T23287] fuse: Bad value for 'fd' [ 1353.011265][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1353.419164][T23299] netlink: 'syz.4.3606': attribute type 10 has an invalid length. [ 1353.423115][T23299] bond0: (slave wlan1): Opening slave failed [ 1353.641153][T23301] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3607'. [ 1354.002882][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1354.333242][T23313] wireguard0: entered promiscuous mode [ 1354.335385][T23313] wireguard0: entered allmulticast mode [ 1355.002073][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1355.317167][T23328] netlink: 'syz.4.3613': attribute type 10 has an invalid length. [ 1355.320568][T23328] bond0: (slave wlan1): Opening slave failed [ 1355.983308][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1356.604023][T23347] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8) [ 1356.606892][T23347] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1356.615234][T23347] vhci_hcd vhci_hcd.0: Device attached [ 1356.730277][T23352] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3619'. [ 1356.878157][T20956] usb 45-1: new high-speed USB device number 10 using vhci_hcd [ 1356.973449][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1357.080952][T23349] vhci_hcd: connection reset by peer [ 1357.083926][ T13] vhci_hcd: stop threads [ 1357.085809][ T13] vhci_hcd: release socket [ 1357.087840][ T13] vhci_hcd: disconnect device [ 1357.474176][T23370] wireguard0: entered promiscuous mode [ 1357.476424][T23370] wireguard0: entered allmulticast mode [ 1357.974066][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1358.047580][T23381] netlink: 'syz.1.3627': attribute type 10 has an invalid length. [ 1358.054720][T23381] bond0: (slave wlan1): Opening slave failed [ 1358.188988][ T40] kauditd_printk_skb: 7 callbacks suppressed [ 1358.188999][ T40] audit: type=1326 audit(1756155278.135:5917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23383 comm="syz.1.3628" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f63579 code=0x7ffc0000 [ 1358.207674][ T40] audit: type=1326 audit(1756155278.156:5918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23383 comm="syz.1.3628" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f63579 code=0x7ffc0000 [ 1358.224751][ T40] audit: type=1326 audit(1756155278.156:5919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23383 comm="syz.1.3628" exe="/syz-executor" sig=0 arch=40000003 syscall=164 compat=1 ip=0xf7f63579 code=0x7ffc0000 [ 1358.235406][ T40] audit: type=1326 audit(1756155278.156:5920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23383 comm="syz.1.3628" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f63579 code=0x7ffc0000 [ 1358.243453][ T40] audit: type=1326 audit(1756155278.156:5921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23383 comm="syz.1.3628" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f63579 code=0x7ffc0000 [ 1358.252014][ T40] audit: type=1326 audit(1756155278.177:5922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23383 comm="syz.1.3628" exe="/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf7f63579 code=0x7ffc0000 [ 1358.258932][ T40] audit: type=1326 audit(1756155278.177:5923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23383 comm="syz.1.3628" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f63579 code=0x7ffc0000 [ 1358.280231][ T40] audit: type=1326 audit(1756155278.177:5924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23383 comm="syz.1.3628" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f63579 code=0x7ffc0000 [ 1358.286948][ T40] audit: type=1326 audit(1756155278.177:5925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23383 comm="syz.1.3628" exe="/syz-executor" sig=0 arch=40000003 syscall=156 compat=1 ip=0xf7f63579 code=0x7ffc0000 [ 1358.314193][ T40] audit: type=1326 audit(1756155278.177:5926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23383 comm="syz.1.3628" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f63579 code=0x7ffc0000 [ 1358.364576][T23386] netlink: 'syz.4.3629': attribute type 10 has an invalid length. [ 1358.367439][T23386] bond0: (slave wlan1): Opening slave failed [ 1358.511750][T23389] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3630'. [ 1358.762579][T23391] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 1358.764784][T23391] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1358.771067][T23391] vhci_hcd vhci_hcd.0: Device attached [ 1358.964534][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1359.011923][ T6022] usb 39-1: new low-speed USB device number 10 using vhci_hcd [ 1359.020819][T23392] vhci_hcd: connection reset by peer [ 1359.023336][ T46] vhci_hcd: stop threads [ 1359.025173][ T46] vhci_hcd: release socket [ 1359.029492][ T46] vhci_hcd: disconnect device [ 1359.955366][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1360.540956][T23410] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3634'. [ 1360.686698][T23418] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 1360.688803][T23418] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1360.691922][T23418] vhci_hcd vhci_hcd.0: Device attached [ 1360.945631][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1361.143556][T23419] vhci_hcd: connection closed [ 1361.144127][ T1148] vhci_hcd: stop threads [ 1361.148186][ T1148] vhci_hcd: release socket [ 1361.149935][ T1148] vhci_hcd: disconnect device [ 1361.744291][T23426] netlink: 'syz.0.3638': attribute type 10 has an invalid length. [ 1361.748385][T23426] bond0: (slave wlan1): Opening slave failed [ 1361.767075][ T842] syz_tun: tun_net_xmit 90 [ 1361.769313][ T842] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1361.826581][T20956] vhci_hcd: vhci_device speed not set [ 1361.935946][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1362.126966][ T842] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1362.317057][ T842] syz_tun: tun_net_xmit 90 [ 1362.599559][T23437] macvlan0: entered promiscuous mode [ 1362.601286][T23437] bridge0: entered promiscuous mode [ 1362.618729][T23437] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1362.917334][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1362.994468][ T40] kauditd_printk_skb: 17 callbacks suppressed [ 1362.994483][ T40] audit: type=1326 audit(1756155283.185:5944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23445 comm="syz.0.3643" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f24579 code=0x7ffc0000 [ 1363.013918][ T40] audit: type=1326 audit(1756155283.185:5945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23445 comm="syz.0.3643" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f24579 code=0x7ffc0000 [ 1363.021556][ T40] audit: type=1326 audit(1756155283.195:5946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23445 comm="syz.0.3643" exe="/syz-executor" sig=0 arch=40000003 syscall=164 compat=1 ip=0xf7f24579 code=0x7ffc0000 [ 1363.030992][ T40] audit: type=1326 audit(1756155283.195:5947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23445 comm="syz.0.3643" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f24579 code=0x7ffc0000 [ 1363.037971][ T40] audit: type=1326 audit(1756155283.195:5948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23445 comm="syz.0.3643" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f24579 code=0x7ffc0000 [ 1363.045260][ T40] audit: type=1326 audit(1756155283.195:5949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23445 comm="syz.0.3643" exe="/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf7f24579 code=0x7ffc0000 [ 1363.052097][ T40] audit: type=1326 audit(1756155283.195:5950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23445 comm="syz.0.3643" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f24579 code=0x7ffc0000 [ 1363.060243][ T40] audit: type=1326 audit(1756155283.195:5951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23445 comm="syz.0.3643" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f24579 code=0x7ffc0000 [ 1363.075300][ T40] audit: type=1326 audit(1756155283.195:5952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23445 comm="syz.0.3643" exe="/syz-executor" sig=0 arch=40000003 syscall=156 compat=1 ip=0xf7f24579 code=0x7ffc0000 [ 1363.085326][ T40] audit: type=1326 audit(1756155283.195:5953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23445 comm="syz.0.3643" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f24579 code=0x7ffc0000 [ 1363.502780][T23449] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 1363.504809][T23449] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1363.519805][T23449] vhci_hcd vhci_hcd.0: Device attached [ 1363.795507][T17807] usb 37-1: new low-speed USB device number 8 using vhci_hcd [ 1363.826697][T23450] vhci_hcd: connection closed [ 1363.827515][T12165] vhci_hcd: stop threads [ 1363.830487][T12165] vhci_hcd: release socket [ 1363.832411][T12165] vhci_hcd: disconnect device [ 1363.885236][T23458] netlink: 'syz.3.3645': attribute type 13 has an invalid length. [ 1363.899095][ T6022] vhci_hcd: vhci_device speed not set [ 1363.917446][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1364.907976][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1365.437125][T23480] netlink: 'syz.4.3651': attribute type 10 has an invalid length. [ 1365.440802][T23480] bond0: (slave wlan1): Opening slave failed [ 1365.889459][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1366.541026][T23499] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3655'. [ 1366.848802][T23507] netlink: 'syz.4.3658': attribute type 10 has an invalid length. [ 1366.855156][T23507] bond0: (slave wlan1): Opening slave failed [ 1366.879506][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1366.894099][T23509] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 1366.896273][T23509] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1366.900648][T23509] vhci_hcd vhci_hcd.0: Device attached [ 1366.978514][T23513] netlink: 'syz.4.3659': attribute type 10 has an invalid length. [ 1366.985901][T23513] bond0: (slave wlan1): Opening slave failed [ 1367.283869][T23523] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 1367.286037][T23523] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1367.298943][T23523] vhci_hcd vhci_hcd.0: Device attached [ 1367.385095][T23510] vhci_hcd: connection reset by peer [ 1367.394614][T12165] vhci_hcd: stop threads [ 1367.397153][T12165] vhci_hcd: release socket [ 1367.399442][T12165] vhci_hcd: disconnect device [ 1367.517698][T20474] usb 45-1: new low-speed USB device number 11 using vhci_hcd [ 1367.641555][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1367.795476][ T40] kauditd_printk_skb: 115 callbacks suppressed [ 1367.795495][ T40] audit: type=1326 audit(1756155288.224:6069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23530 comm="syz.1.3663" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f63579 code=0x7ffc0000 [ 1367.808912][ T40] audit: type=1326 audit(1756155288.234:6070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23530 comm="syz.1.3663" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f63579 code=0x7ffc0000 [ 1367.845086][T23525] vhci_hcd: connection reset by peer [ 1367.847583][ T1148] vhci_hcd: stop threads [ 1367.849425][ T40] audit: type=1326 audit(1756155288.276:6071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23518 comm="syz.4.3662" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f22579 code=0x7ffc0000 [ 1367.849462][ T1148] vhci_hcd: release socket [ 1367.857952][ T40] audit: type=1326 audit(1756155288.276:6072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23518 comm="syz.4.3662" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f22579 code=0x7ffc0000 [ 1367.860483][ T1148] vhci_hcd: disconnect device [ 1367.868296][ T40] audit: type=1326 audit(1756155288.287:6073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23530 comm="syz.1.3663" exe="/syz-executor" sig=0 arch=40000003 syscall=257 compat=1 ip=0xf7f63579 code=0x7ffc0000 [ 1367.879701][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1367.882394][ T40] audit: type=1326 audit(1756155288.287:6074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23530 comm="syz.1.3663" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f63579 code=0x7ffc0000 [ 1367.892095][ T40] audit: type=1326 audit(1756155288.287:6075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23530 comm="syz.1.3663" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f63579 code=0x7ffc0000 [ 1367.902031][ T40] audit: type=1326 audit(1756155288.287:6076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23530 comm="syz.1.3663" exe="/syz-executor" sig=0 arch=40000003 syscall=219 compat=1 ip=0xf7f63579 code=0x7ffc0000 [ 1367.911661][ T40] audit: type=1326 audit(1756155288.287:6077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23530 comm="syz.1.3663" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f63579 code=0x7ffc0000 [ 1367.918664][ T40] audit: type=1326 audit(1756155288.287:6078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23530 comm="syz.1.3663" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f63579 code=0x7ffc0000 [ 1368.120836][T23536] lo speed is unknown, defaulting to 1000 [ 1368.523716][T23548] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3666'. [ 1368.593216][T23536] wlan0 speed is unknown, defaulting to 1000 [ 1368.597458][T23536] lo speed is unknown, defaulting to 1000 [ 1368.709266][T17807] vhci_hcd: vhci_device speed not set [ 1368.860810][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1369.086137][T23555] netlink: 'syz.1.3668': attribute type 10 has an invalid length. [ 1369.094593][T23555] bond0: (slave wlan1): Opening slave failed [ 1369.236888][T23560] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3667'. [ 1369.279943][T23560] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1369.290166][T23560] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1369.813731][T20956] syz_tun: tun_net_xmit 90 [ 1369.815330][T20956] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1369.845178][T23563] netlink: 'syz.0.3670': attribute type 10 has an invalid length. [ 1369.851477][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1369.874686][T23563] bond0: (slave wlan1): Opening slave failed [ 1370.537846][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1370.537979][T20956] syz_tun: tun_net_xmit 90 [ 1370.665043][T23578] ceph: No mds server is up or the cluster is laggy [ 1370.806792][T20956] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1370.813850][T20956] libceph: connect (1)[c::]:6789 error -101 [ 1370.817648][T20956] libceph: mon0 (1)[c::]:6789 connect error [ 1370.823836][T23583] 9pnet_virtio: no channels available for device syz [ 1370.851616][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1371.842949][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1371.894288][T23592] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3675'. [ 1372.266873][T23600] netlink: 'syz.1.3678': attribute type 10 has an invalid length. [ 1372.269793][T23600] bond0: (slave wlan1): Opening slave failed [ 1372.306538][T23602] netlink: 'syz.3.3680': attribute type 10 has an invalid length. [ 1372.366096][T20474] vhci_hcd: vhci_device speed not set [ 1372.603762][T23610] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3683'. [ 1372.733691][ T40] kauditd_printk_skb: 31 callbacks suppressed [ 1372.733703][ T40] audit: type=1326 audit(1756155293.410:6110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23618 comm="syz.3.3685" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff8579 code=0x7ffc0000 [ 1372.746234][ T40] audit: type=1326 audit(1756155293.410:6111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23618 comm="syz.3.3685" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff8579 code=0x7ffc0000 [ 1372.753291][ T40] audit: type=1326 audit(1756155293.421:6112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23618 comm="syz.3.3685" exe="/syz-executor" sig=0 arch=40000003 syscall=164 compat=1 ip=0xf7ff8579 code=0x7ffc0000 [ 1372.765144][ T40] audit: type=1326 audit(1756155293.431:6113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23618 comm="syz.3.3685" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff8579 code=0x7ffc0000 [ 1372.772789][ T40] audit: type=1326 audit(1756155293.431:6114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23618 comm="syz.3.3685" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff8579 code=0x7ffc0000 [ 1372.781492][ T40] audit: type=1326 audit(1756155293.442:6115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23618 comm="syz.3.3685" exe="/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf7ff8579 code=0x7ffc0000 [ 1372.788729][ T40] audit: type=1326 audit(1756155293.442:6116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23618 comm="syz.3.3685" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff8579 code=0x7ffc0000 [ 1372.805729][ T40] audit: type=1326 audit(1756155293.442:6117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23618 comm="syz.3.3685" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff8579 code=0x7ffc0000 [ 1372.814737][ T40] audit: type=1326 audit(1756155293.442:6118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23618 comm="syz.3.3685" exe="/syz-executor" sig=0 arch=40000003 syscall=156 compat=1 ip=0xf7ff8579 code=0x7ffc0000 [ 1372.823933][ T40] audit: type=1326 audit(1756155293.442:6119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23618 comm="syz.3.3685" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff8579 code=0x7ffc0000 [ 1372.832770][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1373.813883][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1373.854975][T23634] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3689'. [ 1373.938374][T23636] netlink: 'syz.0.3690': attribute type 10 has an invalid length. [ 1373.941283][T23636] bond0: (slave wlan1): Opening slave failed [ 1373.957526][ T841] syz_tun: tun_net_xmit 90 [ 1373.959121][ T841] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1374.044197][T23638] netlink: 'syz.0.3691': attribute type 10 has an invalid length. [ 1374.048157][T23638] bond0: (slave wlan1): Opening slave failed [ 1374.064192][ T842] syz_tun: tun_net_xmit 90 [ 1374.066388][ T842] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1374.371151][ T842] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1374.543817][T23656] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3695'. [ 1374.628374][T23658] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3697'. [ 1374.804387][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1374.929954][T23667] netlink: 'syz.0.3700': attribute type 10 has an invalid length. [ 1374.933044][T23667] bond0: (slave wlan1): Opening slave failed [ 1374.948233][ T842] syz_tun: tun_net_xmit 90 [ 1374.949897][ T842] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1375.128047][T23669] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3699'. [ 1375.290348][ T842] syz_tun: tun_net_xmit 90 [ 1375.475043][ T842] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1375.795669][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1376.644389][T23693] netlink: 'syz.3.3706': attribute type 10 has an invalid length. [ 1376.731777][T23695] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3707'. [ 1376.795557][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1376.852936][T23696] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 1376.856097][T23696] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1376.866614][T23696] vhci_hcd vhci_hcd.0: Device attached [ 1377.010321][T23702] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3716'. [ 1377.123656][T20956] usb 37-1: new low-speed USB device number 9 using vhci_hcd [ 1377.325879][T23707] lo speed is unknown, defaulting to 1000 [ 1377.435612][T23697] vhci_hcd: connection reset by peer [ 1377.443437][ T1148] vhci_hcd: stop threads [ 1377.444847][ T1148] vhci_hcd: release socket [ 1377.446357][ T1148] vhci_hcd: disconnect device [ 1377.559614][T23707] wlan0 speed is unknown, defaulting to 1000 [ 1377.562532][T23707] lo speed is unknown, defaulting to 1000 [ 1377.785842][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1377.966709][T23716] fuse: Bad value for 'rootmode' [ 1378.044536][T23718] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3711'. [ 1378.359624][T23726] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3712'. [ 1378.767345][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1378.904865][T23732] IPVS: Error connecting to the multicast addr [ 1379.476731][T23745] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3719'. [ 1379.767003][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1380.175625][T23756] 9pnet_virtio: no channels available for device syz [ 1380.201450][T23757] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1380.480026][T23759] netlink: 'syz.0.3723': attribute type 10 has an invalid length. [ 1380.483483][T23759] bond0: (slave wlan1): Opening slave failed [ 1380.510440][ T6085] syz_tun: tun_net_xmit 90 [ 1380.512176][ T6085] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1380.748576][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1380.787315][ T6085] syz_tun: tun_net_xmit 90 [ 1380.793040][T23772] netlink: 'syz.4.3727': attribute type 10 has an invalid length. [ 1380.800412][T23772] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1380.803975][T23772] bond0: (slave wlan1): Opening slave failed [ 1380.921894][T23773] sd 0:0:0:0: PR command failed: 1026 [ 1380.923754][T23773] sd 0:0:0:0: Sense Key : Illegal Request [current] [ 1380.926002][T23773] sd 0:0:0:0: Add. Sense: Invalid command operation code [ 1381.359099][ T6085] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1381.739134][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1382.082088][T20956] vhci_hcd: vhci_device speed not set [ 1382.410093][T23798] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3738'. [ 1382.739043][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1383.730243][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1384.122361][T23816] netlink: 'syz.1.3734': attribute type 10 has an invalid length. [ 1384.126591][T23816] bond0: (slave wlan1): Opening slave failed [ 1384.319793][T23823] netlink: 'syz.0.3737': attribute type 10 has an invalid length. [ 1384.325930][T23823] bond0: (slave wlan1): Opening slave failed [ 1384.341099][T20474] syz_tun: tun_net_xmit 90 [ 1384.343235][T20474] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1384.454133][ T40] kauditd_printk_skb: 89 callbacks suppressed [ 1384.454145][ T40] audit: type=1326 audit(1756155305.714:6209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23829 comm="syz.0.3740" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f24579 code=0x7ffc0000 [ 1384.469020][ T40] audit: type=1326 audit(1756155305.714:6210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23829 comm="syz.0.3740" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f24579 code=0x7ffc0000 [ 1384.478711][ T40] audit: type=1326 audit(1756155305.725:6211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23829 comm="syz.0.3740" exe="/syz-executor" sig=0 arch=40000003 syscall=164 compat=1 ip=0xf7f24579 code=0x7ffc0000 [ 1384.490935][ T40] audit: type=1326 audit(1756155305.725:6212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23829 comm="syz.0.3740" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f24579 code=0x7ffc0000 [ 1384.500293][ T40] audit: type=1326 audit(1756155305.725:6213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23829 comm="syz.0.3740" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f24579 code=0x7ffc0000 [ 1384.515711][ T40] audit: type=1326 audit(1756155305.746:6214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23829 comm="syz.0.3740" exe="/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf7f24579 code=0x7ffc0000 [ 1384.523144][T20474] syz_tun: tun_net_xmit 90 [ 1384.525269][ T40] audit: type=1326 audit(1756155305.746:6215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23829 comm="syz.0.3740" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f24579 code=0x7ffc0000 [ 1384.532520][ T40] audit: type=1326 audit(1756155305.746:6216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23829 comm="syz.0.3740" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f24579 code=0x7ffc0000 [ 1384.539902][ T40] audit: type=1326 audit(1756155305.746:6217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23829 comm="syz.0.3740" exe="/syz-executor" sig=0 arch=40000003 syscall=156 compat=1 ip=0xf7f24579 code=0x7ffc0000 [ 1384.546608][ T40] audit: type=1326 audit(1756155305.746:6218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23829 comm="syz.0.3740" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f24579 code=0x7ffc0000 [ 1384.710946][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1385.017337][T20474] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1385.701870][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1385.898581][T23849] 9pnet_virtio: no channels available for device syz [ 1386.511414][T23853] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 1386.513492][T23853] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1386.517499][T23853] vhci_hcd vhci_hcd.0: Device attached [ 1386.632030][T23854] vhci_hcd: connection closed [ 1386.632424][T12955] vhci_hcd: stop threads [ 1386.636662][T12955] vhci_hcd: release socket [ 1386.638667][T12955] vhci_hcd: disconnect device [ 1386.682607][T20956] vhci_hcd: vhci_device speed not set [ 1386.692176][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1387.004713][T23861] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3753'. [ 1387.142305][T23859] lo speed is unknown, defaulting to 1000 [ 1387.319494][T23865] netlink: 'syz.0.3746': attribute type 10 has an invalid length. [ 1387.324032][T23865] bond0: (slave wlan1): Opening slave failed [ 1387.351096][T17807] syz_tun: tun_net_xmit 90 [ 1387.353315][T17807] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1387.469780][T23859] wlan0 speed is unknown, defaulting to 1000 [ 1387.474720][T23859] lo speed is unknown, defaulting to 1000 [ 1387.691957][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1388.139786][T17807] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1388.292449][T17807] syz_tun: tun_net_xmit 90 [ 1388.673498][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1388.787620][T23884] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3750'. [ 1388.795115][T23884] netlink: 'syz.0.3750': attribute type 13 has an invalid length. [ 1388.911643][ T60] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1388.937892][T23884] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1388.943004][T23884] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1388.958961][T20956] syz_tun: tun_net_xmit 90 [ 1388.987321][T20956] syz_tun: tun_net_xmit 90 [ 1389.425898][ T60] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1389.664175][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1390.663812][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1391.444969][ T40] kauditd_printk_skb: 22 callbacks suppressed [ 1391.444982][ T40] audit: type=1326 audit(1756155313.042:6241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23894 comm="syz.3.3755" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff8579 code=0x7ffc0000 [ 1391.458845][ T40] audit: type=1326 audit(1756155313.053:6242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23894 comm="syz.3.3755" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff8579 code=0x7ffc0000 [ 1391.462700][T23890] [U]  [ 1391.468654][ T40] audit: type=1326 audit(1756155313.063:6243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23894 comm="syz.3.3755" exe="/syz-executor" sig=0 arch=40000003 syscall=164 compat=1 ip=0xf7ff8579 code=0x7ffc0000 [ 1391.469567][T23890] [U] K{ [ 1391.479792][T23890] [U] t 1ŠFfˊ`GJgo/mC [ 1391.483135][T23890] [U] tؖ/,~Ĝj}8'o1"7-JQKWq5c%"H12YX``+(!(z'tXlnIgjݭp~7!" (5Ob̓J [ 1391.491368][T23890] [U] k\&}66XHX .`a$40|϶9ި U4Vbz}wMTQΦr 4 [ 1391.497079][T23890] [U] ".h6"k[J4In[Z(C|T]z{3c=x4w)\TXJSH{q;칢t+gd.˂>ywUhfNhl]S2\g%O&z)'pul_< ذ`ұT;_"(u{7j2X /'cIHcճV=Ai%wEs RjgrhIa6-DV i"n Asc~48c*OO5/J~wvK+3Y)Mvyq潀DTrOtpem%fejA5T_-X~^aaۂq [ 1391.497111][ T40] audit: type=1326 audit(1756155313.063:6244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23894 comm="syz.3.3755" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff8579 code=0x7ffc0000 [ 1391.519220][T23890] [U] +wG?]'a: )' B>tf/<'U'hi.+]e.-ɿ%>2`^U8F.63+A«g3p6:^0tv'EtYCnrϩnPj ;Z8!\Aʖ2$­wi.#/Bai`4jdy@zgW5˿B ٜNy"vI2 [ 1391.532453][T23890] [U] T_K5tYJ9c$brLNul 9w|G"ʃ%C؝q 3qN^HP*$ .7yӱ2 [ 1391.537346][T23890] [U] ? h*37鍾^#Q"0~ (oX Lb,'v=CSGS0ւ`ه=1(p#2DO*Ƀ [ 1391.537720][ T40] audit: type=1326 audit(1756155313.063:6245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23894 comm="syz.3.3755" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff8579 code=0x7ffc0000 [ 1391.542222][T23890] [U] sgGud-{|&2Lc_!`oz֥B%>rwSsH"yA4O.Y䏄RTԶB[+/<>{q_՝LX8U{Z)7?rR;crhײڣ1>)Măt(aϝ}9ڥJ*Mќġ'Lq DW=|q ÆW;5Ž!dBx`/E`ƦMX"\ [ 1391.643152][T23890] [U] {; ٘_o2)o.2W2yx_ HPϱSD:]{ [ 1391.645192][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1391.647526][T23890] [U] I,> 51^1N4oǶ'0?֒i9w._.WaV`)Zc6GiӹaXL[F*OW)+'\n[K@2Ǭp"^` [ 1391.655617][T23899] IPVS: Unknown mcast interface: geneve0 [ 1391.658868][T23890] [U] 22Ʃx?0;3u [ 1391.660785][T23890] [U] ޜsObx8W4(~/KUԖoQe+G-ygY_>v3.hә]̈́2)D, D~d+w; A\FPȘ|$)KؐIɿkYT^R癵A=#ܜ aet1ݯ4K.e"RS|s:>p r"z#P!KY"}FN84hޱosߙ̫%Dlwm [ 1391.670810][T23890] [U] [['xn' ,mr/1D=!Dx91BwRlfKZ#` l؛˜b~m [ 1391.676138][T23890] [U] L>d+d"5h3<iR=F^fnvDOIO:U>Y [ 1391.680876][T23890] [U] 'B6v20瞥׌"t8{9FW]쩍 [ 1391.684295][T23890] [U] 72uC6τI]8ctۨQSkYI |V'TV/g$[ 9kh`"}[^=0]%̂TF_v4C [ 1391.689835][T23890] [U] ec [ 1391.691228][T23890] [U] |<:^3$7nK~-@?/mtl۾Iw@g~t{P+$jp| IRipm Y 8tV,l, [ 1391.697966][T23890] [U] K)0~ʪiP'fzr @B]5{ʼ'8ƥFUTqUdǩK;70c[yYCذmL8T͚5rxW xoQhVi'8L [ 1392.635869][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1393.626495][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1393.654758][T23911] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 1393.657882][T23911] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1393.661505][T23911] vhci_hcd vhci_hcd.0: Device attached [ 1394.150309][T20956] usb 37-1: new high-speed USB device number 11 using vhci_hcd [ 1394.225523][T23922] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3758'. [ 1394.375829][T23912] vhci_hcd: connection reset by peer [ 1394.382845][T19792] vhci_hcd: stop threads [ 1394.385613][T19792] vhci_hcd: release socket [ 1394.387871][T19792] vhci_hcd: disconnect device [ 1394.597738][T23925] Bluetooth: hci4: Frame reassembly failed (-84) [ 1394.617172][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1395.478135][T23934] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 1395.616909][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1396.522385][ T5981] Bluetooth: hci4: command 0x1003 tx timeout [ 1396.531488][T19943] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1396.598355][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1396.772552][T23952] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 1396.775426][T23952] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1396.779469][T23952] vhci_hcd vhci_hcd.0: Device attached [ 1396.844740][ T40] kauditd_printk_skb: 21 callbacks suppressed [ 1396.844757][ T40] audit: type=1326 audit(1756155318.722:6272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23948 comm="syz.1.3766" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f63579 code=0x7ffc0000 [ 1396.888565][ T40] audit: type=1326 audit(1756155318.733:6273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23948 comm="syz.1.3766" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f63579 code=0x7ffc0000 [ 1396.902360][ T40] audit: type=1326 audit(1756155318.764:6274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23948 comm="syz.1.3766" exe="/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf7f63579 code=0x7ffc0000 [ 1396.943950][ T40] audit: type=1326 audit(1756155318.785:6275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23948 comm="syz.1.3766" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f63579 code=0x7ffc0000 [ 1396.956868][ T40] audit: type=1326 audit(1756155318.838:6276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23948 comm="syz.1.3766" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f63579 code=0x7ffc0000 [ 1396.968102][ T40] audit: type=1326 audit(1756155318.848:6277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23948 comm="syz.1.3766" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f63579 code=0x7ffc0000 [ 1396.977073][ T40] audit: type=1326 audit(1756155318.848:6278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23948 comm="syz.1.3766" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f63579 code=0x7ffc0000 [ 1396.986043][ T40] audit: type=1326 audit(1756155318.859:6279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23948 comm="syz.1.3766" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f63579 code=0x7ffc0000 [ 1396.993183][T23957] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3766'. [ 1396.998380][ T40] audit: type=1326 audit(1756155318.880:6280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23948 comm="syz.1.3766" exe="/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf7f63579 code=0x7ffc0000 [ 1397.064680][ T8039] usb 46-1: SetAddress Request (2) to port 0 [ 1397.067290][ T8039] usb 46-1: new SuperSpeed USB device number 2 using vhci_hcd [ 1397.152265][ T40] audit: type=1326 audit(1756155319.048:6281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23948 comm="syz.1.3766" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f63579 code=0x7ffc0000 [ 1397.428305][T23953] vhci_hcd: connection reset by peer [ 1397.437968][ T7318] vhci_hcd: stop threads [ 1397.439833][ T7318] vhci_hcd: release socket [ 1397.446069][ T7318] vhci_hcd: disconnect device [ 1397.589200][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1397.731273][T23964] netlink: 'syz.0.3767': attribute type 10 has an invalid length. [ 1397.752819][T23964] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1397.755484][T23964] bond0: (slave wlan1): Opening slave failed [ 1397.760803][ T841] syz_tun: tun_net_xmit 90 [ 1397.762779][ T841] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1397.884487][T23967] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3768'. [ 1398.035425][ T841] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1398.379938][T23973] netlink: 'syz.4.3769': attribute type 6 has an invalid length. [ 1398.382485][T23973] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.3769'. [ 1398.503677][ T841] syz_tun: tun_net_xmit 90 [ 1398.579180][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1398.592675][T23972] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 1398.595574][T23972] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1398.601145][T23972] vhci_hcd vhci_hcd.0: Device attached [ 1398.632831][T23975] vhci_hcd: connection closed [ 1398.633826][ T1148] vhci_hcd: stop threads [ 1398.639780][ T1148] vhci_hcd: release socket [ 1398.644978][ T1148] vhci_hcd: disconnect device [ 1399.026858][T20956] vhci_hcd: vhci_device speed not set [ 1399.217944][T23985] 9pnet_virtio: no channels available for device syz [ 1399.243003][T23985] bridge5: entered promiscuous mode [ 1399.287026][T23980] "syz.0.3771" (23980) uses obsolete ecb(arc4) skcipher [ 1399.570266][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1399.914665][T24002] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3775'. [ 1399.989897][T24002] bridge6: entered promiscuous mode [ 1400.560712][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1401.551557][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1401.890773][ T8039] usb 46-1: device descriptor read/8, error -110 [ 1401.904515][T24018] netlink: 'syz.3.3778': attribute type 10 has an invalid length. [ 1402.160992][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1402.275770][ T8039] usb usb46-port1: attempt power cycle [ 1402.542134][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1402.779277][T24036] netlink: 'syz.1.3783': attribute type 10 has an invalid length. [ 1402.783394][T24036] bond0: (slave wlan1): Opening slave failed [ 1402.844105][T24040] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3784'. [ 1402.849648][T24040] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3784'. [ 1402.895698][T24043] netlink: 'syz.1.3786': attribute type 10 has an invalid length. [ 1402.898739][T24043] bond0: (slave wlan1): Opening slave failed [ 1402.951705][ T8039] usb usb46-port1: unable to enumerate USB device [ 1402.955363][T24045] netlink: 'syz.1.3787': attribute type 10 has an invalid length. [ 1402.961620][T24045] bond0: (slave wlan1): Opening slave failed [ 1403.420913][T24058] netlink: 'syz.1.3791': attribute type 10 has an invalid length. [ 1403.427843][T24058] bond0: (slave wlan1): Opening slave failed [ 1403.532675][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1404.396247][T24077] "syz.3.3794" (24077) uses obsolete ecb(arc4) skcipher [ 1404.465088][T24080] 9pnet_virtio: no channels available for device syz [ 1404.490382][T24080] bridge5: entered promiscuous mode [ 1404.523257][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1404.801261][T24083] netlink: 'syz.1.3796': attribute type 10 has an invalid length. [ 1404.804707][T24083] bond0: (slave wlan1): Opening slave failed [ 1405.514442][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1406.282244][T24103] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3801'. [ 1406.504507][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1407.482998][T24118] netlink: 'syz.3.3805': attribute type 10 has an invalid length. [ 1407.495053][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1408.485622][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1408.986925][T24137] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 1409.020175][T24136] 9pnet_virtio: no channels available for device syz [ 1409.203465][T24136] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3817'. [ 1409.212766][ T40] kauditd_printk_skb: 100 callbacks suppressed [ 1409.212837][ T40] audit: type=1326 audit(1756155331.709:6382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24138 comm="syz.3.3809" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff8579 code=0x7ffc0000 [ 1409.224846][ T40] audit: type=1326 audit(1756155331.719:6383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24138 comm="syz.3.3809" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff8579 code=0x7ffc0000 [ 1409.232866][ T40] audit: type=1326 audit(1756155331.719:6384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24138 comm="syz.3.3809" exe="/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf7ff8579 code=0x7ffc0000 [ 1409.242046][ T40] audit: type=1326 audit(1756155331.719:6385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24138 comm="syz.3.3809" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff8579 code=0x7ffc0000 [ 1409.252778][T24141] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3809'. [ 1409.256019][ T40] audit: type=1326 audit(1756155331.730:6386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24138 comm="syz.3.3809" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7ff8579 code=0x7ffc0000 [ 1409.287193][ T40] audit: type=1326 audit(1756155331.740:6387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24138 comm="syz.3.3809" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff8579 code=0x7ffc0000 [ 1409.297341][ T40] audit: type=1326 audit(1756155331.751:6388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24138 comm="syz.3.3809" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7ff8579 code=0x7ffc0000 [ 1409.315119][ T40] audit: type=1326 audit(1756155331.751:6389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24138 comm="syz.3.3809" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff8579 code=0x7ffc0000 [ 1409.323485][ T40] audit: type=1326 audit(1756155331.751:6390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24138 comm="syz.3.3809" exe="/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf7ff8579 code=0x7ffc0000 [ 1409.335151][ T40] audit: type=1326 audit(1756155331.814:6391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24138 comm="syz.3.3809" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff8579 code=0x7ffc0000 [ 1409.476295][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1410.214423][T24155] siw: device registration error -23 [ 1410.466525][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1411.358752][T24174] netlink: 'syz.3.3818': attribute type 10 has an invalid length. [ 1411.457657][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1411.533699][T17807] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 1411.543404][T24179] netlink: 'syz.3.3819': attribute type 10 has an invalid length. [ 1411.819479][T17807] usb 6-1: too many configurations: 9, using maximum allowed: 8 [ 1411.869658][T17807] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1411.873094][T17807] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1411.879558][T17807] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1411.883455][T17807] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1411.888431][T17807] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1411.892395][T17807] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1411.895720][T17807] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1411.898749][T17807] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1411.903204][T17807] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1411.909529][T17807] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1411.913474][T17807] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1411.917754][T17807] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1411.921022][T17807] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1411.924964][T17807] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1411.930682][T17807] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1411.934418][T17807] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1411.937335][T17807] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1411.941246][T17807] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1411.968738][T17807] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1411.972681][T17807] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1411.977236][T17807] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1411.992548][T17807] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1411.996378][T17807] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1412.009783][T17807] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1412.015017][T17807] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 1412.018702][T17807] usb 6-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 1412.038977][T17807] usb 6-1: Product: syz [ 1412.043716][T17807] usb 6-1: Manufacturer: syz [ 1412.045617][T17807] usb 6-1: SerialNumber: syz [ 1412.062632][T17807] usb 6-1: config 0 descriptor?? [ 1412.093727][T17807] yurex 6-1:0.0: USB YUREX device now attached to Yurex #0 [ 1412.414455][T24191] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1412.423225][T24191] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1412.457285][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1412.718286][T24191] sd 0:0:0:0: PR command failed: 1026 [ 1412.720193][T24191] sd 0:0:0:0: Sense Key : Illegal Request [current] [ 1412.724109][T24191] sd 0:0:0:0: Add. Sense: Invalid command operation code [ 1413.447917][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1413.575731][T24215] netlink: 'syz.4.3826': attribute type 4 has an invalid length. [ 1413.596130][T24215] netlink: 'syz.4.3826': attribute type 4 has an invalid length. [ 1414.143980][ C0] usb 6-1: yurex_control_callback - control failed: -2 [ 1414.173864][T17807] usb 6-1: USB disconnect, device number 12 [ 1414.178662][T17807] yurex 6-1:0.0: USB YUREX #0 now disconnected [ 1414.301323][T24223] netlink: 'syz.1.3828': attribute type 10 has an invalid length. [ 1414.306168][T24223] bond0: (slave wlan1): Opening slave failed [ 1414.438726][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1415.420055][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1416.294435][T24249] netlink: 'syz.4.3832': attribute type 10 has an invalid length. [ 1416.298573][T24249] bond0: (slave wlan1): Opening slave failed [ 1416.410549][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1416.446919][T24252] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3833'. [ 1416.556954][T24255] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3834'. [ 1417.017140][T24259] 9pnet_virtio: no channels available for device syz [ 1417.377032][T24259] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3836'. [ 1417.410396][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1417.620895][ T60] syz_tun: tun_net_xmit 90 [ 1417.622566][ T60] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1417.667415][ T60] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1417.931027][T24275] netlink: 'syz.0.3843': attribute type 10 has an invalid length. [ 1417.936195][T24275] bond0: (slave wlan1): Opening slave failed [ 1417.964901][ T60] syz_tun: tun_net_xmit 90 [ 1417.967160][ T60] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1418.076536][ T40] kauditd_printk_skb: 18 callbacks suppressed [ 1418.076549][ T40] audit: type=1326 audit(1756155341.011:6410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24279 comm="syz.1.3844" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f63579 code=0x7ffc0000 [ 1418.087189][ T40] audit: type=1326 audit(1756155341.011:6411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24279 comm="syz.1.3844" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f63579 code=0x7ffc0000 [ 1418.094048][ T40] audit: type=1326 audit(1756155341.021:6412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24279 comm="syz.1.3844" exe="/syz-executor" sig=0 arch=40000003 syscall=164 compat=1 ip=0xf7f63579 code=0x7ffc0000 [ 1418.107968][ T40] audit: type=1326 audit(1756155341.021:6413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24279 comm="syz.1.3844" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f63579 code=0x7ffc0000 [ 1418.116173][ T40] audit: type=1326 audit(1756155341.021:6414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24279 comm="syz.1.3844" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f63579 code=0x7ffc0000 [ 1418.123869][ T40] audit: type=1326 audit(1756155341.021:6415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24279 comm="syz.1.3844" exe="/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf7f63579 code=0x7ffc0000 [ 1418.130699][ T40] audit: type=1326 audit(1756155341.021:6416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24279 comm="syz.1.3844" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f63579 code=0x7ffc0000 [ 1418.137369][ T40] audit: type=1326 audit(1756155341.021:6417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24279 comm="syz.1.3844" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f63579 code=0x7ffc0000 [ 1418.144552][ T40] audit: type=1326 audit(1756155341.032:6418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24279 comm="syz.1.3844" exe="/syz-executor" sig=0 arch=40000003 syscall=156 compat=1 ip=0xf7f63579 code=0x7ffc0000 [ 1418.151570][ T40] audit: type=1326 audit(1756155341.032:6419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24279 comm="syz.1.3844" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f63579 code=0x7ffc0000 [ 1418.223505][T24282] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 1418.226235][T24282] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1418.230569][T24282] vhci_hcd vhci_hcd.0: Device attached [ 1418.391847][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1418.453710][T24294] netlink: 'syz.3.3849': attribute type 10 has an invalid length. [ 1418.476956][ T29] usb 39-1: new low-speed USB device number 11 using vhci_hcd [ 1418.537374][T24296] netlink: 'syz.3.3850': attribute type 10 has an invalid length. [ 1418.593742][T24292] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 1418.596927][T24292] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1418.600570][T24292] vhci_hcd vhci_hcd.0: Device attached [ 1418.659569][T24298] vhci_hcd: connection closed [ 1418.661372][T19792] vhci_hcd: stop threads [ 1418.666006][T19792] vhci_hcd: release socket [ 1418.668194][T19792] vhci_hcd: disconnect device [ 1418.772863][ T60] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1418.869620][T24284] vhci_hcd: connection reset by peer [ 1418.872507][ T7318] vhci_hcd: stop threads [ 1418.874446][ T7318] vhci_hcd: release socket [ 1418.876504][ T7318] vhci_hcd: disconnect device [ 1419.001140][ T60] syz_tun: tun_net_xmit 90 [ 1419.382650][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1419.488257][T24312] 9pnet_fd: Insufficient options for proto=fd [ 1419.767427][T24315] netlink: 'syz.1.3854': attribute type 10 has an invalid length. [ 1419.771311][T24315] bond0: (slave wlan1): Opening slave failed [ 1420.372991][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1420.437116][T24326] tipc: Started in network mode [ 1420.444456][T24326] tipc: Node identity 4, cluster identity 4711 [ 1420.452721][T24326] tipc: Node number set to 4 [ 1420.955243][T20474] syz_tun: tun_net_xmit 90 [ 1420.958108][T20474] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1420.962526][T24332] netlink: 'syz.0.3859': attribute type 10 has an invalid length. [ 1420.968521][T24332] bond0: (slave wlan1): Opening slave failed [ 1421.168977][T24337] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1421.182867][T20474] syz_tun: tun_net_xmit 90 [ 1421.183285][T24337] ALSA: mixer_oss: invalid OSS volume 'PHOfiЧaEEAKER' [ 1421.187378][T24337] ALSA: mixer_oss: invalid OSS volume '' [ 1421.189212][T24337] ALSA: mixer_oss: invalid OSS volume '' [ 1421.364357][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1421.669007][T20474] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1422.214731][T24344] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 1422.217348][T24344] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1422.230428][T24344] vhci_hcd vhci_hcd.0: Device attached [ 1422.311931][T24350] vhci_hcd: connection closed [ 1422.312327][ T7318] vhci_hcd: stop threads [ 1422.315230][ T7318] vhci_hcd: release socket [ 1422.318662][ T7318] vhci_hcd: disconnect device [ 1422.354038][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1422.550067][T24359] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3865'. [ 1422.567317][T24359] bridge6: entered promiscuous mode [ 1423.011629][T24364] netlink: 'syz.0.3866': attribute type 10 has an invalid length. [ 1423.016590][T24364] bond0: (slave wlan1): Opening slave failed [ 1423.030921][T20956] syz_tun: tun_net_xmit 90 [ 1423.032799][T20956] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1423.335099][ T29] vhci_hcd: vhci_device speed not set [ 1423.353997][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1423.449280][T20956] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1423.957204][T20956] syz_tun: tun_net_xmit 90 [ 1423.990452][ T40] kauditd_printk_skb: 162 callbacks suppressed [ 1423.990467][ T40] audit: type=1326 audit(1756155347.215:6582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24374 comm="syz.4.3869" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f22579 code=0x7ffc0000 [ 1424.005482][ T40] audit: type=1326 audit(1756155347.236:6583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24374 comm="syz.4.3869" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f22579 code=0x7ffc0000 [ 1424.017949][ T40] audit: type=1326 audit(1756155347.247:6584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24374 comm="syz.4.3869" exe="/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf7f22579 code=0x7ffc0000 [ 1424.025013][T24380] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3869'. [ 1424.029729][ T40] audit: type=1326 audit(1756155347.247:6585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24374 comm="syz.4.3869" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f22579 code=0x7ffc0000 [ 1424.042755][ T40] audit: type=1326 audit(1756155347.247:6586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24374 comm="syz.4.3869" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f22579 code=0x7ffc0000 [ 1424.053303][ T40] audit: type=1326 audit(1756155347.247:6587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24374 comm="syz.4.3869" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f22579 code=0x7ffc0000 [ 1424.064977][ T40] audit: type=1326 audit(1756155347.257:6588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24374 comm="syz.4.3869" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f22579 code=0x7ffc0000 [ 1424.074313][ T40] audit: type=1326 audit(1756155347.257:6589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24374 comm="syz.4.3869" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f22579 code=0x7ffc0000 [ 1424.085224][ T40] audit: type=1326 audit(1756155347.257:6590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24374 comm="syz.4.3869" exe="/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf7f22579 code=0x7ffc0000 [ 1424.202765][ T40] audit: type=1326 audit(1756155347.446:6591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24374 comm="syz.4.3869" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f22579 code=0x7ffc0000 [ 1424.223027][T24385] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1424.278228][T24385] lo speed is unknown, defaulting to 1000 [ 1424.336580][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1425.085374][T24385] wlan0 speed is unknown, defaulting to 1000 [ 1425.088350][T24385] lo speed is unknown, defaulting to 1000 [ 1425.221362][ T842] syz_tun: tun_net_xmit 90 [ 1425.223314][ T842] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1425.326249][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1425.593052][ T60] syz_tun: tun_net_xmit 90 [ 1426.164247][ T60] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1426.199497][T24400] netlink: 'syz.1.3872': attribute type 4 has an invalid length. [ 1426.310461][T24405] bridge7: the hash_elasticity option has been deprecated and is always 16 [ 1426.313423][T24405] bridge7: entered allmulticast mode [ 1426.316259][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1426.420221][T24400] netlink: 'syz.1.3872': attribute type 4 has an invalid length. [ 1426.776016][T24410] netlink: 'syz.4.3876': attribute type 10 has an invalid length. [ 1426.780461][T24410] bond0: (slave wlan1): Opening slave failed [ 1426.842604][T24412] netlink: 'syz.4.3877': attribute type 10 has an invalid length. [ 1426.845894][T24412] bond0: (slave wlan1): Opening slave failed [ 1427.307297][T19943] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1427.307525][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1427.545797][T24420] netlink: 'syz.0.3879': attribute type 10 has an invalid length. [ 1427.551999][T24420] bond0: (slave wlan1): Opening slave failed [ 1427.556615][T20956] syz_tun: tun_net_xmit 90 [ 1427.559370][T20956] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1427.766944][T24428] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3883'. [ 1427.926038][T20956] syz_tun: tun_net_xmit 90 [ 1427.935599][T20956] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1428.283555][T24435] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3884'. [ 1428.291460][T24435] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3884'. [ 1428.295105][T24435] openvswitch: netlink: Unknown nsh attribute 0 [ 1428.297430][T24435] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1428.298049][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1428.308390][T24435] comedi comedi0: Minor 7 could not be opened [ 1428.560926][T24440] netlink: 'syz.0.3885': attribute type 10 has an invalid length. [ 1428.565476][T24440] bond0: (slave wlan1): Opening slave failed [ 1428.593977][ T60] syz_tun: tun_net_xmit 90 [ 1428.596504][ T60] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1428.722880][T24432] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3882'. [ 1428.906445][T24436] netlink: 'syz.1.3882': attribute type 1 has an invalid length. [ 1428.910012][T24436] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3882'. [ 1429.001977][T24432] bridge0 (unregistering): left promiscuous mode [ 1429.021352][ T60] syz_tun: tun_net_xmit 90 [ 1429.059537][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1429.288530][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1429.376445][ T60] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1429.606458][T24451] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3887'. [ 1429.904042][T24457] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1430.250892][ T40] kauditd_printk_skb: 35 callbacks suppressed [ 1430.250903][ T40] audit: type=1326 audit(1756155353.798:6627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24458 comm="syz.4.3889" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f22579 code=0x7ffc0000 [ 1430.265400][ T40] audit: type=1326 audit(1756155353.808:6628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24458 comm="syz.4.3889" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f22579 code=0x7ffc0000 [ 1430.288225][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1430.288811][ T40] audit: type=1326 audit(1756155353.840:6629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24458 comm="syz.4.3889" exe="/syz-executor" sig=0 arch=40000003 syscall=164 compat=1 ip=0xf7f22579 code=0x7ffc0000 [ 1430.303847][ T40] audit: type=1326 audit(1756155353.850:6630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24458 comm="syz.4.3889" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f22579 code=0x7ffc0000 [ 1430.313109][ T40] audit: type=1326 audit(1756155353.850:6631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24458 comm="syz.4.3889" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f22579 code=0x7ffc0000 [ 1430.320506][ T40] audit: type=1326 audit(1756155353.850:6632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24458 comm="syz.4.3889" exe="/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf7f22579 code=0x7ffc0000 [ 1430.327352][ T40] audit: type=1326 audit(1756155353.850:6633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24458 comm="syz.4.3889" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f22579 code=0x7ffc0000 [ 1430.336019][ T40] audit: type=1326 audit(1756155353.850:6634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24458 comm="syz.4.3889" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f22579 code=0x7ffc0000 [ 1430.345543][ T40] audit: type=1326 audit(1756155353.850:6635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24458 comm="syz.4.3889" exe="/syz-executor" sig=0 arch=40000003 syscall=156 compat=1 ip=0xf7f22579 code=0x7ffc0000 [ 1430.355168][ T40] audit: type=1326 audit(1756155353.850:6636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24458 comm="syz.4.3889" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f22579 code=0x7ffc0000 [ 1430.375662][T24461] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 1430.378433][T24461] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1430.386185][T24461] vhci_hcd vhci_hcd.0: Device attached [ 1430.687230][T24474] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3892'. [ 1430.723740][T24475] IPVS: set_ctl: invalid protocol: 50 172.20.20.67:20001 [ 1430.728117][ T29] usb 45-1: new low-speed USB device number 12 using vhci_hcd [ 1431.269773][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1431.580106][T24462] vhci_hcd: connection closed [ 1431.584107][T19792] vhci_hcd: stop threads [ 1431.590885][T19792] vhci_hcd: release socket [ 1431.594013][T19792] vhci_hcd: disconnect device [ 1431.653369][T24479] blk_print_req_error: 19 callbacks suppressed [ 1431.653381][T24479] I/O error, dev loop1, sector 2 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 1431.658510][T24479] hfsplus: unable to find HFS+ superblock [ 1431.699603][T24482] netlink: 'syz.3.3894': attribute type 10 has an invalid length. [ 1431.996273][T24487] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3896'. [ 1432.260581][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1433.250715][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1433.461875][T24514] misc userio: No port type given on /dev/userio [ 1433.852597][T24524] netlink: 3 bytes leftover after parsing attributes in process `syz.0.3902'. [ 1433.897425][T24524] batadv0: entered allmulticast mode [ 1434.232032][ T1418] ================================================================== [ 1434.235263][ T1418] BUG: KASAN: slab-use-after-free in handle_tx+0x5dc/0x630 [ 1434.238194][ T1418] Read of size 1 at addr ffff88806c022490 by task aoe_tx0/1418 [ 1434.240969][ T1418] [ 1434.243090][ T1418] CPU: 0 UID: 0 PID: 1418 Comm: aoe_tx0 Not tainted syzkaller #0 PREEMPT(full) [ 1434.243109][ T1418] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1434.243117][ T1418] Call Trace: [ 1434.243124][ T1418] [ 1434.243131][ T1418] dump_stack_lvl+0x116/0x1f0 [ 1434.243206][ T1418] print_report+0xcd/0x630 [ 1434.243229][ T1418] ? __virt_addr_valid+0x81/0x610 [ 1434.243243][ T1418] ? __phys_addr+0xe8/0x180 [ 1434.243256][ T1418] ? handle_tx+0x5dc/0x630 [ 1434.243267][ T1418] kasan_report+0xe0/0x110 [ 1434.243281][ T1418] ? handle_tx+0x5dc/0x630 [ 1434.243294][ T1418] handle_tx+0x5dc/0x630 [ 1434.243306][ T1418] dev_hard_start_xmit+0x94/0x740 [ 1434.243321][ T1418] __dev_queue_xmit+0xa46/0x4490 [ 1434.243334][ T1418] ? lockdep_hardirqs_on+0x7c/0x110 [ 1434.243348][ T1418] ? finish_task_switch.isra.0+0x221/0xc10 [ 1434.243361][ T1418] ? rcu_is_watching+0x12/0xc0 [ 1434.243373][ T1418] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1434.243384][ T1418] ? __schedule+0x11a3/0x5de0 [ 1434.243398][ T1418] ? __lock_acquire+0xb97/0x1ce0 [ 1434.243415][ T1418] ? do_raw_spin_lock+0x12c/0x2b0 [ 1434.243435][ T1418] ? rcu_is_watching+0x12/0xc0 [ 1434.243446][ T1418] tx+0xcc/0x190 [ 1434.243461][ T1418] ? __pfx_tx+0x10/0x10 [ 1434.243476][ T1418] kthread+0x1e1/0x3e0 [ 1434.243488][ T1418] ? find_held_lock+0x2b/0x80 [ 1434.243499][ T1418] ? __pfx_kthread+0x10/0x10 [ 1434.243511][ T1418] ? __pfx_default_wake_function+0x10/0x10 [ 1434.243526][ T1418] ? lockdep_hardirqs_on+0x7c/0x110 [ 1434.243542][ T1418] ? __kthread_parkme+0x19e/0x250 [ 1434.243558][ T1418] ? __pfx_kthread+0x10/0x10 [ 1434.243571][ T1418] kthread+0x3c5/0x780 [ 1434.243587][ T1418] ? __pfx_kthread+0x10/0x10 [ 1434.243605][ T1418] ? rcu_is_watching+0x12/0xc0 [ 1434.243617][ T1418] ? __pfx_kthread+0x10/0x10 [ 1434.243635][ T1418] ret_from_fork+0x5d4/0x6f0 [ 1434.243657][ T1418] ? __pfx_kthread+0x10/0x10 [ 1434.243675][ T1418] ret_from_fork_asm+0x1a/0x30 [ 1434.243694][ T1418] [ 1434.243699][ T1418] [ 1434.317511][ T1418] Allocated by task 24515: [ 1434.318952][ T1418] kasan_save_stack+0x33/0x60 [ 1434.320521][ T1418] kasan_save_track+0x14/0x30 [ 1434.322239][ T1418] __kasan_kmalloc+0xaa/0xb0 [ 1434.323830][ T1418] alloc_tty_struct+0x96/0x8c0 [ 1434.325694][ T1418] tty_init_dev.part.0+0x1e/0x500 [ 1434.327366][ T1418] tty_open+0xa50/0xf90 [ 1434.328702][ T1418] chrdev_open+0x234/0x6a0 [ 1434.330315][ T1418] do_dentry_open+0x982/0x1530 [ 1434.332171][ T1418] vfs_open+0x82/0x3f0 [ 1434.333821][ T1418] path_openat+0x1de4/0x2cb0 [ 1434.335559][ T1418] do_filp_open+0x20b/0x470 [ 1434.337058][ T1418] do_sys_openat2+0x11b/0x1d0 [ 1434.338619][ T1418] __ia32_compat_sys_openat+0x16d/0x210 [ 1434.340487][ T1418] __do_fast_syscall_32+0x7c/0x3a0 [ 1434.342132][ T1418] do_fast_syscall_32+0x32/0x80 [ 1434.343690][ T1418] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1434.346159][ T1418] [ 1434.346937][ T1418] Freed by task 60: [ 1434.348226][ T1418] kasan_save_stack+0x33/0x60 [ 1434.349744][ T1418] kasan_save_track+0x14/0x30 [ 1434.351438][ T1418] kasan_save_free_info+0x3b/0x60 [ 1434.353480][ T1418] __kasan_slab_free+0x60/0x70 [ 1434.355385][ T1418] kfree+0x2b4/0x4d0 [ 1434.356891][ T1418] process_one_work+0x9cf/0x1b70 [ 1434.358562][ T1418] worker_thread+0x6c8/0xf10 [ 1434.360358][ T1418] kthread+0x3c5/0x780 [ 1434.362033][ T1418] ret_from_fork+0x5d4/0x6f0 [ 1434.363952][ T1418] ret_from_fork_asm+0x1a/0x30 [ 1434.365975][ T1418] [ 1434.366975][ T1418] Last potentially related work creation: [ 1434.368968][ T1418] kasan_save_stack+0x33/0x60 [ 1434.370736][ T1418] kasan_record_aux_stack+0xa7/0xc0 [ 1434.372612][ T1418] insert_work+0x36/0x230 [ 1434.374477][ T1418] __queue_work+0x97e/0x1160 [ 1434.376439][ T1418] queue_work_on+0x1a4/0x1f0 [ 1434.378384][ T1418] release_tty+0x4de/0x5d0 [ 1434.380283][ T1418] tty_release_struct+0xb7/0xe0 [ 1434.382346][ T1418] tty_release+0xe2d/0x1430 [ 1434.384196][ T1418] __fput+0x402/0xb70 [ 1434.385826][ T1418] task_work_run+0x14d/0x240 [ 1434.387766][ T1418] exit_to_user_mode_loop+0xeb/0x110 [ 1434.389976][ T1418] __do_fast_syscall_32+0x2ac/0x3a0 [ 1434.391693][ T1418] do_fast_syscall_32+0x32/0x80 [ 1434.393237][ T1418] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1434.395400][ T1418] [ 1434.396182][ T1418] The buggy address belongs to the object at ffff88806c022000 [ 1434.396182][ T1418] which belongs to the cache kmalloc-cg-2k of size 2048 [ 1434.400597][ T1418] The buggy address is located 1168 bytes inside of [ 1434.400597][ T1418] freed 2048-byte region [ffff88806c022000, ffff88806c022800) [ 1434.404956][ T1418] [ 1434.405752][ T1418] The buggy address belongs to the physical page: [ 1434.407743][ T1418] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x6c020 [ 1434.410460][ T1418] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1434.413100][ T1418] memcg:ffff888070852581 [ 1434.414583][ T1418] anon flags: 0x4fff00000000040(head|node=1|zone=1|lastcpupid=0x7ff) [ 1434.417084][ T1418] page_type: f5(slab) [ 1434.418351][ T1418] raw: 04fff00000000040 ffff88801b84c140 0000000000000000 dead000000000001 [ 1434.421046][ T1418] raw: 0000000000000000 0000000000080008 00000000f5000000 ffff888070852581 [ 1434.423715][ T1418] head: 04fff00000000040 ffff88801b84c140 0000000000000000 dead000000000001 [ 1434.427029][ T1418] head: 0000000000000000 0000000000080008 00000000f5000000 ffff888070852581 [ 1434.429890][ T1418] head: 04fff00000000003 ffffea0001b00801 00000000ffffffff 00000000ffffffff [ 1434.432619][ T1418] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 1434.435691][ T1418] page dumped because: kasan: bad access detected [ 1434.438326][ T1418] page_owner tracks the page as allocated [ 1434.440575][ T1418] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 15672, tgid 15672 (syz-executor), ts 828686614094, free_ts 439251655399 [ 1434.449385][ T1418] post_alloc_hook+0x1c0/0x230 [ 1434.451446][ T1418] get_page_from_freelist+0x132b/0x38e0 [ 1434.453795][ T1418] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 1434.455925][ T1418] alloc_pages_mpol+0x1fb/0x550 [ 1434.457480][ T1418] new_slab+0x247/0x330 [ 1434.458873][ T1418] ___slab_alloc+0xcf2/0x1740 [ 1434.460467][ T1418] __slab_alloc.constprop.0+0x56/0xb0 [ 1434.462386][ T1418] __kmalloc_cache_noprof+0xfb/0x3e0 [ 1434.464584][ T1418] ipv6_add_dev+0x1c9/0x15f0 [ 1434.466347][ T1418] addrconf_notify+0x53e/0x19e0 [ 1434.468068][ T1418] notifier_call_chain+0xbc/0x410 [ 1434.469998][ T1418] call_netdevice_notifiers_info+0xbe/0x140 [ 1434.472349][ T1418] register_netdevice+0x182e/0x2270 [ 1434.473988][ T1418] veth_newlink+0x446/0xa00 [ 1434.475424][ T1418] rtnl_newlink+0xc45/0x2000 [ 1434.476899][ T1418] rtnetlink_rcv_msg+0x95e/0xe90 [ 1434.478456][ T1418] page last free pid 10745 tgid 10745 stack trace: [ 1434.480450][ T1418] __free_frozen_pages+0x7d5/0x10f0 [ 1434.482115][ T1418] __folio_put+0x329/0x450 [ 1434.483533][ T1418] skb_release_data+0x81a/0x9e0 [ 1434.485089][ T1418] sk_skb_reason_drop+0x129/0x1a0 [ 1434.486671][ T1418] virtio_transport_remove_sock+0x137/0x200 [ 1434.488531][ T1418] virtio_transport_release+0xe2/0x640 [ 1434.490225][ T1418] __vsock_release+0xa0/0x5a0 [ 1434.491729][ T1418] __vsock_release+0x302/0x5a0 [ 1434.493273][ T1418] vsock_release+0x99/0x130 [ 1434.494715][ T1418] __sock_release+0xb0/0x270 [ 1434.496194][ T1418] sock_close+0x1c/0x30 [ 1434.497509][ T1418] __fput+0x402/0xb70 [ 1434.498775][ T1418] task_work_run+0x14d/0x240 [ 1434.500252][ T1418] exit_to_user_mode_loop+0xeb/0x110 [ 1434.501892][ T1418] __do_fast_syscall_32+0x2ac/0x3a0 [ 1434.503493][ T1418] do_fast_syscall_32+0x32/0x80 [ 1434.505004][ T1418] [ 1434.505774][ T1418] Memory state around the buggy address: [ 1434.507534][ T1418] ffff88806c022380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1434.510026][ T1418] ffff88806c022400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1434.512537][ T1418] >ffff88806c022480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1434.515032][ T1418] ^ [ 1434.516655][ T1418] ffff88806c022500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1434.519281][ T1418] ffff88806c022580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1434.521821][ T1418] ================================================================== [ 1434.524391][ T1418] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1434.526630][ T1418] CPU: 0 UID: 0 PID: 1418 Comm: aoe_tx0 Not tainted syzkaller #0 PREEMPT(full) [ 1434.529445][ T1418] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1434.532819][ T1418] Call Trace: [ 1434.533913][ T1418] [ 1434.534871][ T1418] dump_stack_lvl+0x3d/0x1f0 [ 1434.536368][ T1418] vpanic+0x6e8/0x7a0 [ 1434.537646][ T1418] ? __pfx_vpanic+0x10/0x10 [ 1434.539140][ T1418] ? handle_tx+0x5dc/0x630 [ 1434.540625][ T1418] panic+0xca/0xd0 [ 1434.541915][ T1418] ? __pfx_panic+0x10/0x10 [ 1434.543399][ T1418] ? check_panic_on_warn+0x1f/0xb0 [ 1434.545024][ T1418] check_panic_on_warn+0xab/0xb0 [ 1434.546592][ T1418] end_report+0x107/0x170 [ 1434.547964][ T1418] kasan_report+0xee/0x110 [ 1434.549397][ T1418] ? handle_tx+0x5dc/0x630 [ 1434.550840][ T1418] handle_tx+0x5dc/0x630 [ 1434.552206][ T1418] dev_hard_start_xmit+0x94/0x740 [ 1434.553817][ T1418] __dev_queue_xmit+0xa46/0x4490 [ 1434.555381][ T1418] ? lockdep_hardirqs_on+0x7c/0x110 [ 1434.557018][ T1418] ? finish_task_switch.isra.0+0x221/0xc10 [ 1434.558948][ T1418] ? rcu_is_watching+0x12/0xc0 [ 1434.560601][ T1418] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1434.562771][ T1418] ? __schedule+0x11a3/0x5de0 [ 1434.564664][ T1418] ? __lock_acquire+0xb97/0x1ce0 [ 1434.566644][ T1418] ? do_raw_spin_lock+0x12c/0x2b0 [ 1434.568541][ T1418] ? rcu_is_watching+0x12/0xc0 [ 1434.570323][ T1418] tx+0xcc/0x190 [ 1434.571604][ T1418] ? __pfx_tx+0x10/0x10 [ 1434.572934][ T1418] kthread+0x1e1/0x3e0 [ 1434.574238][ T1418] ? find_held_lock+0x2b/0x80 [ 1434.575726][ T1418] ? __pfx_kthread+0x10/0x10 [ 1434.577198][ T1418] ? __pfx_default_wake_function+0x10/0x10 [ 1434.579027][ T1418] ? lockdep_hardirqs_on+0x7c/0x110 [ 1434.580711][ T1418] ? __kthread_parkme+0x19e/0x250 [ 1434.582281][ T1418] ? __pfx_kthread+0x10/0x10 [ 1434.583701][ T1418] kthread+0x3c5/0x780 [ 1434.585072][ T1418] ? __pfx_kthread+0x10/0x10 [ 1434.586722][ T1418] ? rcu_is_watching+0x12/0xc0 [ 1434.588559][ T1418] ? __pfx_kthread+0x10/0x10 [ 1434.590042][ T1418] ret_from_fork+0x5d4/0x6f0 [ 1434.591551][ T1418] ? __pfx_kthread+0x10/0x10 [ 1434.593042][ T1418] ret_from_fork_asm+0x1a/0x30 [ 1434.594585][ T1418] [ 1434.596336][ T1418] Kernel Offset: disabled [ 1434.597718][ T1418] Rebooting in 86400 seconds.. VM DIAGNOSIS: 20:16:45 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000020 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85617045 RDI=ffffffff9b0f9700 RBP=ffffffff9b0f96c0 RSP=ffffc900079cf458 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000031343154 R12=0000000000000000 R13=0000000000000020 R14=ffffffff9b0f96c0 R15=ffffffff85616fe0 RIP=ffffffff8561706f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880974c3000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f5516ba8 CR3=0000000052eb7000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 d1f1786b8f617309 d0e8dddc7293b188 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a530037e25846b7f 262788802441b778 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 c71b8a7112955aa2 365a70ea29e65b9b ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 1e2392a0535090ef b447ebd52dc4a02e ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000007fc0 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000040 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000372653aad74 9e0000030e000003 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 653a3418653c2ce1 17000003b0008001 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0001eb7516000000 c0000003fe000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000365407efb 653c2e0449000003 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 718cfb840ef551c4 cba02f3c80ea3e85 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 8c90c9ecaab80b57 4cf7a0c950993273 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a54ff53a3c6ef372 bb67ae856a09e667 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5be0cd191f83d9ab 9b05688c510e527f ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=00000000042936d1 RBX=0000000000000001 RCX=ffffffff8b90abf9 RDX=0000000000000000 RSI=ffffffff8de4cac1 RDI=ffffffff8c162d00 RBP=ffffed1003bdf488 RSP=ffffc9000046fdf8 R8 =0000000000000001 R9 =ffffed1005666655 R10=ffff88802b3332ab R11=0000000000000000 R12=0000000000000001 R13=ffff88801defa440 R14=ffffffff90ab8290 R15=0000000000000000 RIP=ffffffff8b90975f RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880975c3000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f4fe1da4 CR3=0000000052eb7000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000ff ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4e4f4954504f5f4e 4153410063657865 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=0000000000000003 RCX=0000000000000002 RDX=ffff888020370000 RSI=ffffffff816a0d21 RDI=ffffffff8c162d00 RBP=ffff8880659bb940 RSP=ffffc900045276a8 R8 =0000000000000001 R9 =0000000000000001 R10=ffffffff90ab8297 R11=0000000000000000 R12=0000000000000003 R13=0000000000000003 R14=ffff88802b43b3c0 R15=ffffed100cb37728 RIP=ffffffff8b90975f RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880976c3000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000322d4ffc CR3=0000000055ed9000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000ff ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4e4f4954504f5f4e 4153410063657865 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000001175b55 RBX=0000000000000003 RCX=ffffffff8b90abf9 RDX=0000000000000000 RSI=ffffffff8de4cac1 RDI=ffffffff8c162d00 RBP=ffffed1003867000 RSP=ffffc9000048fdf8 R8 =0000000000000001 R9 =ffffed10056a6655 R10=ffff88802b5332ab R11=0000000000000000 R12=0000000000000003 R13=ffff88801c338000 R14=ffffffff90ab8290 R15=0000000000000000 RIP=ffffffff8b90975f RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880977c3000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000080fde000 CR3=0000000067e27000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000ff ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4e4f4954504f5f4e 4153410063657865 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000