last executing test programs: 5m22.212128984s ago: executing program 0 (id=651): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x3, &(0x7f0000000540)=ANY=[], &(0x7f0000000280)='GPL\x00', 0xa, 0xb9, &(0x7f00000012c0)=""/185, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/partitions\x00', 0x0, 0x0) preadv(r0, &(0x7f0000001500)=[{&(0x7f00000002c0)=""/4084, 0xff4}], 0x1, 0x202, 0x0) r1 = getpid() sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x50}}, 0x8000002) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001780)=ANY=[@ANYBLOB="380000001000ffff28bd7000fadbdf2500000000", @ANYRES32=0x0, @ANYBLOB="391a0300299605001800128009000100626f6e64000000000800028004001f"], 0x38}, 0x1, 0x0, 0x0, 0x48094}, 0x240400c0) r2 = socket(0x10, 0x3, 0x0) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x26000411}, 0x800) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x800001) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, 0x0, 0x20000041) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r5, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) r6 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) sendfile(r6, r6, 0x0, 0x8) listen(r6, 0x80000001) writev(r5, &(0x7f0000000200), 0x0) 5m20.92610521s ago: executing program 0 (id=657): socket$inet6_sctp(0xa, 0x1, 0x84) (async) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) (async) r1 = socket$inet_tcp(0x2, 0x1, 0x0) (async) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) (async) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040), 0x0) (async) r3 = eventfd2(0x0, 0x0) read$eventfd(r3, &(0x7f0000000040), 0x8) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) r4 = socket$inet_sctp(0x2, 0x1, 0x84) r5 = dup(r4) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x2}}, 0x20) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r5, &(0x7f0000000180)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x4}}, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000ec0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4880}, 0x4008000) (async) shutdown(r4, 0x1) (async) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_BT_POWER(r6, 0x112, 0x9, 0x0, 0x0) (async) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, 0x0, 0x0) (async) syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) syz_init_net_socket$ax25(0x3, 0x5, 0xcb) (async) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r7, 0x0, 0x0) sendto$inet6(r7, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async) socket$inet6_sctp(0xa, 0x1, 0x84) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) sendmsg$TIPC_NL_BEARER_GET(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000500)={0x274, 0x0, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x60}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8001}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1d06ac7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x80}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3ff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xb7e5}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x101}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xd}]}, @TIPC_NLA_MEDIA={0xd4, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9ea6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xcbc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x976}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1000}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfff}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8719}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8106}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x18}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}]}, @TIPC_NLA_SOCK={0x50, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffffffe}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x80000001}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffffffff}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xffff0001}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}]}, @TIPC_NLA_MEDIA={0xac, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x400}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}]}]}]}, 0x274}, 0x1, 0x0, 0x0, 0x20000140}, 0x4000091) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 5m20.848851952s ago: executing program 0 (id=658): socket$inet6_tcp(0xa, 0x1, 0x0) timer_create(0x8, &(0x7f00000002c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f00000000c0)) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x32, &(0x7f0000000f00)=0x1000000, 0x4) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x80, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c000000020603000000000000000000000000020500e2ff070000000900020073797a31000000000c00078008001240000000090500050002000000050004000000000016000300686173683a6e00000000000000816e6574000000"], 0x5c}, 0x1, 0x0, 0x0, 0x48840}, 0x0) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r4 = eventfd2(0x5, 0x801) r5 = syz_open_dev$video4linux(&(0x7f00000001c0), 0x4, 0x400) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r5, 0xc040564a, &(0x7f0000000280)={0x9, 0x0, 0x300b, 0x8, 0x5, 0x9f9, 0x1, 0x1}) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000080)={0x6, 0x0, 0x0, r4, 0x8}) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r6, &(0x7f0000000040), 0xe) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r7, &(0x7f0000000000), 0xe) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0xfffff000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) r9 = syz_genetlink_get_family_id$gtp(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000002100)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="00000000000000000000f7c5f372f7e8d8f100000000"], 0x1c}}, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080), 0x101080, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) openat$ptmx(0xffffffffffffff9c, 0x0, 0x2, 0x0) r10 = socket$inet6_mptcp(0xa, 0x1, 0x106) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8000c, 0x62}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r10, 0x8933, &(0x7f0000000040)={'vxcan0\x00'}) 5m20.115596308s ago: executing program 0 (id=662): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r0, 0x10c, 0x4, &(0x7f0000000180)=0x8, 0x4) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x3a}) 5m19.99748871s ago: executing program 0 (id=664): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendto$packet(r2, &(0x7f0000000280)="0f30", 0x2, 0x0, 0x0, 0x0) getsockname$packet(r2, 0x0, &(0x7f0000000100)) sendmsg$nl_route(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x7c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xe}, {0xfff1, 0xffff}, {0x0, 0xfff1}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x40}, @TCA_RATE={0x6, 0x5, {0xf1, 0x8}}, @TCA_RATE={0x6, 0x5, {0x0, 0x30}}, @qdisc_kind_options=@q_codel={{0xa}, {0x34, 0x2, [@TCA_CODEL_TARGET={0x8, 0x1, 0x47df8000}, @TCA_CODEL_CE_THRESHOLD={0x8}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x8f}, @TCA_CODEL_ECN={0x8, 0x4, 0x1}, @TCA_CODEL_ECN={0x8, 0x4, 0x1}, @TCA_CODEL_CE_THRESHOLD={0x8}]}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000800}, 0x88) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000940)=@delchain={0x24, 0x2a, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x6}, {0x0, 0xffff}}}, 0x24}}, 0x0) 5m19.766704819s ago: executing program 0 (id=666): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x3000) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r0 = syz_open_dev$media(&(0x7f0000001a80), 0x3, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f0000000300)={0x80000000, 0x0, &(0x7f0000000380)}) syz_open_dev$vim2m(0x0, 0x2000000003, 0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x20000810) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f0000000380)=0x200000000) r3 = dup2(r2, r2) write$vhost_msg_v2(r3, 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f0000000400)={0x80000000, 0x0, 0x0}) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, 0x0) r4 = socket(0x10, 0x80003, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "0000000000000000000100000e00"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) syz_io_uring_setup(0x10d2, 0x0, &(0x7f00000000c0), 0x0) sendmsg$nl_generic(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)=ANY=[], 0x78}}, 0x0) keyctl$setperm(0x5, 0x0, 0x52b242d) socket$inet_tcp(0x2, 0x1, 0x0) r7 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r7, &(0x7f0000000540)=[{{&(0x7f0000000180)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)="18", 0x1}], 0x1}}, {{&(0x7f0000000100)={0xa, 0x4e20, 0x3ff, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000340)="3dd4", 0x2}], 0x1}}, {{&(0x7f0000000440)={0xa, 0x4e23, 0x2, @local, 0x6}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000480)='w', 0x1}], 0x1}}], 0x3, 0x800) shutdown(r7, 0x1) 5m4.672036815s ago: executing program 32 (id=666): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x3000) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r0 = syz_open_dev$media(&(0x7f0000001a80), 0x3, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f0000000300)={0x80000000, 0x0, &(0x7f0000000380)}) syz_open_dev$vim2m(0x0, 0x2000000003, 0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x20000810) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f0000000380)=0x200000000) r3 = dup2(r2, r2) write$vhost_msg_v2(r3, 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f0000000400)={0x80000000, 0x0, 0x0}) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, 0x0) r4 = socket(0x10, 0x80003, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "0000000000000000000100000e00"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) syz_io_uring_setup(0x10d2, 0x0, &(0x7f00000000c0), 0x0) sendmsg$nl_generic(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)=ANY=[], 0x78}}, 0x0) keyctl$setperm(0x5, 0x0, 0x52b242d) socket$inet_tcp(0x2, 0x1, 0x0) r7 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r7, &(0x7f0000000540)=[{{&(0x7f0000000180)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)="18", 0x1}], 0x1}}, {{&(0x7f0000000100)={0xa, 0x4e20, 0x3ff, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000340)="3dd4", 0x2}], 0x1}}, {{&(0x7f0000000440)={0xa, 0x4e23, 0x2, @local, 0x6}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000480)='w', 0x1}], 0x1}}], 0x3, 0x800) shutdown(r7, 0x1) 10.059179826s ago: executing program 1 (id=2526): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) (async) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) (async) r2 = socket(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x68, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x3c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x2, 0x0, 0x0, 0x7, 0x8}, {0x12, 0x1, 0x0, 0x1, 0x8001, 0x400}, 0xa5, 0x4, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}, @TCA_TBF_PBURST={0x8, 0x7, 0x71d}]}}]}, 0x68}}, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) (async) syz_open_dev$vim2m(0x0, 0x5, 0x2) (async) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000002340)=@newqdisc={0x3c, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r6, {0xffff}, {0xfff2, 0xa}, {0x2}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x2, [@TCA_FQ_PIE_TUPDATE={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80c0}, 0x4000) (async) r8 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x29, '\x00', r6, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) (async) connect$inet(r8, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b40)=ANY=[@ANYBLOB="28010000170001000000000000000000ac1414bb0000000000000000000000000000000000000000ac141400000000000019000000000000ff010000000000000000000000000001ff02000000000000000000000000000100000000000000000000000000000000c6f6b67878a4893960f95ac6b68d39ba750afdc04702302cb351351498d26517b98c8d944d7af8a61d24fd85b9d92e58ed1f6cf055d51fa57979e106045b18a52d3814eb566e29c0716f50139eb699ddc57952800892a2316597edbfcf8b81dcb5eed2a0ff4814fca227c25927197d6dc67f790be3a7fc42c5d904b7dca040afd03115215f586950f42c", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc02000000000000000000000000000000e6ff0000000000000200000000000000000000000000000000000000000000c19cd770095a3ccf9eddb5", @ANYRES32=0x0, @ANYRESHEX=r6, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b66b6e00"/124], 0x128}}, 0x0) (async) write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="1500000065ffe40010000008003950323030302e75"], 0x15) (async) r11 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) (async) r12 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) prlimit64(0x0, 0x0, &(0x7f0000000300)={0x0, 0xc}, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r12, 0xc0184800, &(0x7f0000000080)={0x10001, r11, 0x1}) (async) ioctl$AUTOFS_IOC_EXPIRE(r9, 0x810c9365, &(0x7f00000003c0)={{0x1, 0x5}, 0x100, './file0\x00'}) (async) r13 = dup(0xffffffffffffffff) write$FUSE_BMAP(r13, &(0x7f0000000100)={0x18, 0x0, 0x0, {0xa9}}, 0x18) (async) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000500)={0x0, @in={{0x2, 0x4e24, @multicast2}}}, &(0x7f00000005c0)=0x84) (async) write$FUSE_INIT(r13, &(0x7f00000001c0)={0x50, 0x2f, 0x0, {0x7, 0x21, 0x1000, 0x14210000, 0x81, 0x1005, 0x0, 0x8, 0x0, 0x0, 0x80}}, 0x50) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000140), 0x834828, &(0x7f0000000280)=ANY=[@ANYRES16, @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRES32, @ANYBLOB="2c6b564c5017da1b9dbd75288600"]) chdir(&(0x7f0000000600)='./file0\x00') 10.056115463s ago: executing program 1 (id=2527): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MCAST_RATE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="6c79b5eac230b45739e194defa29951fda5e2ffca3790017b131c0f294ee18dbe23fdc40c5a2c3d9365b2a65cb9020aac405f85bb02fffcadf4f37e18e98cdb789e1ae423dc3980e5104cc1d8c3633d32323c8ad9d6a583ed488fe21868324908e2ef15f08791cb3e1fd7057ed0a001cb0f1e826077b113b2e01ec8cd5bf722be408b83cc429a69177e512150c8923add09168123fcc50aca8ee99722c8f90233ee054243cb049889ce49e363d8c12242421c1e6ab08a878ecbcf1cbacabc12e0ead3edac135340a7b7d5fd282db4f9d0cb30cbe6ae912fef797d9fb90a2fbf9490ec8a63e15313132ab1f", @ANYRES16=0x0, @ANYRESOCT=r1, @ANYRES16=r3, @ANYRESDEC=r0], 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x881) bind$inet6(0xffffffffffffffff, 0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VIDIOC_G_SLICED_VBI_CAP(0xffffffffffffffff, 0xc0745645, &(0x7f0000000380)={0x5, [0x10, 0x3, 0x6, 0x0, 0xfff7, 0x5, 0xf, 0xfff, 0x9, 0x8000, 0x800, 0x4, 0x8, 0x1, 0x459, 0x9, 0x0, 0xe1, 0x1, 0x7ff, 0x4b77, 0x6, 0x4, 0xfff, 0x6, 0xe, 0x2, 0x8, 0x200, 0x0, 0xf, 0x2, 0x6, 0x3, 0x5, 0x2fb, 0x6, 0x2, 0x4, 0x3, 0x1, 0x7, 0xde81, 0x8, 0xd66, 0x2, 0x4, 0x8], 0x3}) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r5, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000400), r6, 0x0, 0x3, 0x1}}, 0x20) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/tty/drivers\x00', 0x0, 0x0) read$FUSE(r7, 0x0, 0x0) r8 = socket(0x15, 0x5, 0x0) setsockopt$IPT_SO_SET_REPLACE(r8, 0x4000000000000, 0x40, &(0x7f0000000ec0)=@raw={'raw\x00', 0xc08, 0x3, 0x440, 0x310, 0x5002004a, 0xb, 0x310, 0xea13, 0x3a8, 0x3c8, 0x3c8, 0x3a8, 0x3c8, 0x3, 0x0, {[{{@ip={@multicast2, @private=0xa010101, 0xff, 0xffffffff, 'bridge0\x00', 'veth0_macvtap\x00', {}, {0xff}, 0x5c, 0x3, 0x2}, 0x0, 0x2c8, 0x310, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x2, 0x0, [{}, {0x16}, {0x4}, {}, {}, {0x0, 0x0, 0x5e}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x6}, {0x0, 0x0, 0x4}, {}, {0x4, 0x8}, {}, {}, {0x1}, {0x0, 0x0, 0x0, 0x7f}, {0x0, 0x4}, {}, {}, {}, {0xfffc}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {0x0, 0x0, 0x40}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x80}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xfd}]}}, @common=@inet=@socket3={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x4a0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x101, 0x4}) syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000240)={0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0xf, 0x1, 0x0, 0xffffffffffffff37}) ioctl$DRM_IOCTL_MODE_CURSOR(r4, 0xc01c64a3, &(0x7f0000000280)={0x1, r9, 0x8000001, 0x8, 0xa, 0x89, 0x7fffffff}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) syz_usb_connect(0x0, 0x3f, 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 7.80283574s ago: executing program 4 (id=2539): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9c, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x3, &(0x7f0000000080)=0x7) openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0), 0x141440, 0x0) socket$can_raw(0x1d, 0x3, 0x1) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='contention_end\x00', r0}, 0x18) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, &(0x7f0000000080)={0xffffffffffffffff, 0x3, 0x7, 0x0, 0x80000001}) openat$sndseq(0xffffffffffffff9c, 0x0, 0x101000) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x35, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x9000000) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x0, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) 7.207367435s ago: executing program 4 (id=2543): bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x60b17f360213d71e, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)='devtmpfs\x00', 0x800, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'bond0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xd40}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_PROTOCOL={0x5, 0x7, 0x1}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) socket$key(0xf, 0x3, 0x2) syz_usb_connect$hid(0x5, 0x0, 0x0, 0x0) ptrace(0x11, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$netrom(0xffffffffffffffff, &(0x7f0000000000)={{0x6, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}, [@default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @bcast]}, 0x48) r5 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000140), 0x121040, 0x0) ioctl$SOUND_MIXER_READ_VOLUME(r5, 0x40086603, &(0x7f0000000040)) r6 = socket$inet_udp(0x2, 0x2, 0x0) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r6, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r6, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f0000001580)={{{@in6=@private1, @in=@local, 0x0, 0x0, 0x4e22, 0x0, 0x2, 0x0, 0x20, 0x11}, {0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x10, 0x9}, {}, 0x6, 0x0, 0x1}, {{@in=@rand_addr=0x64010102, 0x4d2, 0x33}, 0x0, @in=@private=0xa010100, 0x3506, 0x0, 0x2, 0xb7, 0x2, 0xfffffff9}}, 0xe8) getsockopt$IPT_SO_GET_INFO(r6, 0x0, 0x40, &(0x7f00000000c0)={'nat\x00', 0x0, [0x9, 0x8, 0xffffa25a, 0x1ff, 0x8000]}, &(0x7f0000000140)=0x54) r8 = accept4$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000380)=0x14, 0x80000) setsockopt$packet_fanout(r8, 0x107, 0x12, &(0x7f00000003c0)={0x1, 0x6}, 0x4) sendmmsg(r6, &(0x7f0000007fc0), 0x800001d, 0x1c) 6.850210928s ago: executing program 1 (id=2546): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) r1 = openat$nvme_fabrics(0xffffff9c, &(0x7f0000000080), 0x24c100, 0x0) ioctl$USBDEVFS_RESET(r1, 0x5514) 6.71502939s ago: executing program 1 (id=2547): set_mempolicy(0x3, &(0x7f0000000000)=0x4000000ffb, 0x8) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000008001000004"], 0x50) r1 = openat$vmci(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_VMCI_SET_NOTIFY(r1, 0x7cb, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000010000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r2, 0x0, 0xa}, 0x18) r3 = socket$nl_generic(0x10, 0x3, 0x10) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r4, 0x0) setpgid(0x0, r4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) capset(&(0x7f0000000340)={0x20080522}, &(0x7f0000000300)={0x0, 0x0, 0x5f22}) ioctl$AUTOFS_IOC_EXPIRE(r5, 0x810c9365, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="73ebcb5b0000408000007eca000008af2b00", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x4004044) 6.658671171s ago: executing program 1 (id=2548): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2) ppoll(&(0x7f0000000280)=[{r1, 0xc0}, {r1, 0xa69f}, {r1, 0x8086}], 0x3, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r2, 0xc020aa08, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) r3 = socket$inet6(0xa, 0x400000000001, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002b80)={0x11, 0x5, &(0x7f0000002b40)=ANY=[@ANYBLOB="180500000000c800000000004b64ffec850000007d000000850000002a00000095a490d0d10a41115b90078b098eafc150a68aae84933feb9862"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = socket(0x40000000015, 0x5, 0x0) connect$inet(r5, &(0x7f0000000240)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r5, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r5, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000e80)="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", 0x266}, {&(0x7f0000000580)="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", 0x175}, {&(0x7f0000002a80)="266a546475688763b44d30a862bc689d0b1d020dbb8656767fbd1d91637fccf4e308ae461b2548ba45299eb42928ff4ee493318ef9f71739a3f86f5193e556e085fc8c47937fc8395e70ba93fd9e9d5f5413437784f92bb0128a9756b1c9b87c36cfe56c02568995726f7538f9ed3095531590839a2be05cf75ab02f51372bbc48c81b0283ffac37f28926e0a20a01d3ae06d03acc7095428e97af0141e80215b0823f76efad", 0xa6}], 0x3, 0x0, 0x0, 0x2000c090}, 0x0) sendmsg$alg(r5, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) read$alg(r5, &(0x7f0000003780)=""/4096, 0x1000) bind$inet6(r3, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0xffffffff, @loopback}, 0x1c) ioctl$DRM_IOCTL_MODE_CURSOR2(r0, 0xc02464bb, &(0x7f0000000180)={0x2, 0x0, 0xe13, 0x7ffffff5}) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r7 = accept4(r6, 0x0, 0x0, 0x800) r8 = openat$pfkey(0xffffff9c, &(0x7f0000000240), 0x200, 0x0) sendmmsg$alg(r8, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebcca0e9796cfd1647e299f4e376fdba128280b372219d205e81fca7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f0000000440)="e870f5434d50a94cb5f719c17c219500004db394", 0x14}], 0x2, &(0x7f0000002c40)=[@assoc={0x10, 0x117, 0x4, 0x10001}, @op={0x10}], 0x20}], 0x1, 0x40800) recvmsg(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000540)=""/75, 0x4b}], 0x2}, 0x0) sendmmsg$alg(r7, &(0x7f0000002a40)=[{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)="5a62f48e7cae01667b92afb863aee9a76802a9e600e1a211fadaf896ebf8bd85c9a4bd83217fe1f28eb0649d44aacca4e7", 0x31}, {&(0x7f00000005c0)="872eb38a2028143756f0a7ab5c317f39ab9240481156b0cd5bf91f1d977c98bde2ba1bfb6eb11910e6e40f1d902f9573ca4f6fecb4406f816e3a44e00b9970e16e34fab3284b9ad9881d467e2c95d5dbc6ffa6a73590e3d220c44dd415915aa29ddb13e9a352bbd82b95ecf55a4796a5f784ad4817a402e7ff2018bd1760205aa4f3603dcb7068fb3bba8257671f6df695459a032c92b142e2038fbf0ad153628d7b1a3c14dc40f0f4e144a77dd60c1bb8ebff5e6fe92dc175eda9b55cf4970ec6a073b21b3d76572c38dea14a400ce9b38d728351ac6430ca4c19caab30fe9ddecc3ba52ba8aa7a2dbb3f7e117b68c78048da2c114849354bc0a4", 0xfb}], 0x2, &(0x7f00000006c0)=[@op={0x10, 0x117, 0x3, 0x1}, @assoc={0x10, 0x117, 0x4, 0x8}], 0x20}, {0x0, 0x0, &(0x7f00000018c0)=[{&(0x7f0000000700)="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", 0x1000}, {&(0x7f0000001700)="d0350e49aa63ec440258e9267f2f1cbc8048576237d7ce978f5c1658e15449711533233c49c47eb8e3913ac86023cd0711394f5538480eea3860fe0f7fea8a74479c35301ba19f8ec954058ab65f2738da1504378e3551c08938e390b33e29dc3b68840fb300d34152558e6351c0a6f4af7a6be7026f146922c2c1dbb8dc4b3ddfcaa9", 0x83}, {&(0x7f00000017c0)="5b7b5ee4297c610d8aec00a835fc33b4f6040c296a52833d2c0bb77049bf4c4f0997c25e9a0cce1f68904691f0c4036d1bf64140db9af24c1e47df19d80914ab2f957f90f98c577dec3fcc7da0cbe8165e8ba73a556c7e35e3f38c59dc304bb21330ef24a9fdbc79468c16e2", 0x6c}, {&(0x7f0000001840)="f4997bac5c045f92d06b4f6fc35adcc5674d594e2c44b29fda8a8ab5c465be3b9e5186a86aea557a1f7fa17e5fcb64f508f461b1d1c36b120f787bbad0b881348a082a889bdc60769211cebd3396bfe99eb1f27c66eb187e003cd00c6c3adff21e1935b43dd5", 0x66}], 0x4, &(0x7f0000001900)=[@op={0x10, 0x117, 0x3, 0x1}, @op={0x10, 0x117, 0x3, 0x1}, @iv={0x1010, 0x117, 0x2, 0x1000, "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"}, @iv={0x108, 0x117, 0x2, 0xf5, "056b847116eb9f351aa3593e4ed421be390853db7d587a124f048e6bf9f6ef1508fca3950e0cd64baba5d0dc43254839db4ffd74f0ab48214a846fac512330ef5f03541b0a8660fa93d6ee1ce0eb0d948f6b237fae4d568199a6c60badf1cdc38c397dac7c292e6bbd34069ae69fa01ea5350eac5a8fd8f99dcc616d1e8af41a7e403eaf24b86493cb0604579f25bde153467cfefc8d78ff733209ab725ae6b597cd2ee2a65f44184d7549c8bcc6f7845f3a668aab827791333fa88d4641e4eef1fb8eba8495f43ffb7895b9193e68b08e5221e048da1d0fed687d3d6589f0d32fe21f788c0a90f713842050002eca99e461375e96"}], 0x1138, 0x20000800}], 0x2, 0x40000) 6.303751113s ago: executing program 1 (id=2549): socket$phonet_pipe(0x23, 0x5, 0x2) r0 = socket(0x10, 0x2, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) io_setup(0x4, &(0x7f0000000040)=0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x4}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0x4, &(0x7f0000000500)={0x9}, 0x0) io_pgetevents(r1, 0x1ff, 0x5, &(0x7f0000000400)=[{}, {}, {}, {}, {}], &(0x7f00000001c0), &(0x7f00000004c0)={0x0}) sched_setscheduler(0x0, 0x3, &(0x7f0000000280)=0x7) bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0xc, 0x0, 0x7ffc1ffb}]}) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f00000002c0)={0xffffffff, 0x0, 0x0, 'queue1\x00'}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="6c000000020601000000000615000000000000000e0003006269746d617dab703a697000000030020400000000000900020073797a3000000006240207800c00028008000140ffffffff0c0001800800014080ffffff05001400000000000500050002000000050001000600"], 0x6c}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r5, 0x402c5342, &(0x7f0000000040)={0x0, 0x7a125, 0x60, {0x0, 0x100}, 0x0, 0x40000a6f}) r7 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r7, &(0x7f0000000080)={&(0x7f0000000100)=@rxrpc=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e20, 0x9c000000, @ipv4={'\x00', '\xff\xff', @remote}, 0x1df}}, 0x80, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="100000001001000001000000dc000000470626070d1d90a1ae306ec7e5917144d9c96d951d7fd7a324037dc7aa924cd20b754e3e40ded8ebca6c63f9916df1131fe5b328ca62a20334b809bc99f8392b1344686442d50792f8575a710d3c7f5f98274e9a64ee20ef560ea973907320d6841e838412a5d34042e3a2e7abbea0"], 0x10}, 0x40) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', r8, 0x4, 0x6, 0x4, 0x2, 0x47, @mcast1, @loopback, 0x1, 0x8, 0x3, 0x66}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'ip6tnl0\x00', r9, 0x0, 0x0, 0x0, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, @remote, 0x0, 0x8, 0x2}}) 6.253545101s ago: executing program 33 (id=2549): socket$phonet_pipe(0x23, 0x5, 0x2) r0 = socket(0x10, 0x2, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) io_setup(0x4, &(0x7f0000000040)=0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x4}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0x4, &(0x7f0000000500)={0x9}, 0x0) io_pgetevents(r1, 0x1ff, 0x5, &(0x7f0000000400)=[{}, {}, {}, {}, {}], &(0x7f00000001c0), &(0x7f00000004c0)={0x0}) sched_setscheduler(0x0, 0x3, &(0x7f0000000280)=0x7) bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0xc, 0x0, 0x7ffc1ffb}]}) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f00000002c0)={0xffffffff, 0x0, 0x0, 'queue1\x00'}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="6c000000020601000000000615000000000000000e0003006269746d617dab703a697000000030020400000000000900020073797a3000000006240207800c00028008000140ffffffff0c0001800800014080ffffff05001400000000000500050002000000050001000600"], 0x6c}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r5, 0x402c5342, &(0x7f0000000040)={0x0, 0x7a125, 0x60, {0x0, 0x100}, 0x0, 0x40000a6f}) r7 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r7, &(0x7f0000000080)={&(0x7f0000000100)=@rxrpc=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e20, 0x9c000000, @ipv4={'\x00', '\xff\xff', @remote}, 0x1df}}, 0x80, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="100000001001000001000000dc000000470626070d1d90a1ae306ec7e5917144d9c96d951d7fd7a324037dc7aa924cd20b754e3e40ded8ebca6c63f9916df1131fe5b328ca62a20334b809bc99f8392b1344686442d50792f8575a710d3c7f5f98274e9a64ee20ef560ea973907320d6841e838412a5d34042e3a2e7abbea0"], 0x10}, 0x40) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', r8, 0x4, 0x6, 0x4, 0x2, 0x47, @mcast1, @loopback, 0x1, 0x8, 0x3, 0x66}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'ip6tnl0\x00', r9, 0x0, 0x0, 0x0, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, @remote, 0x0, 0x8, 0x2}}) 4.104346555s ago: executing program 4 (id=2560): bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x19, 0x4, 0x4, 0x7ff, 0x0, 0xffffffffffffffff, 0x7f, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50) (async) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) (async) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) (async) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) (async) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000013000/0x4000)=nil, 0x3000, 0x3}) ioctl$UFFDIO_MOVE(r0, 0xc028aa05, &(0x7f0000000240)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000072000/0x4000)=nil, 0x3000, 0x3}) 4.007288422s ago: executing program 4 (id=2561): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) pipe(&(0x7f00000000c0)) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r1, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0x400003}, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) rt_sigaction(0x8, &(0x7f0000000080)={&(0x7f0000000200)="2437460f1c2bc4a2f99c9022000000c4a2f1002746c44179700d32233333a738e7c44240f29a3b470000a5c4c4a14d590c9736fe0d094e486ff5f5bb559a00000f75bed5370b1c2665d2950e000000db37", 0x88000007, 0x0}, 0x0, 0x8, &(0x7f0000000300)) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='stat\x00') lseek(r2, 0x9, 0x0) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) write$6lowpan_control(0xffffffffffffffff, &(0x7f0000000180)='connect aa:aa:aa:aa:aa:11 0', 0x1b) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000015c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x3c, 0x1e, 0xa, 0x105, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xc0}}, 0x0) r6 = inotify_init1(0x0) inotify_add_watch(r6, &(0x7f0000000180)='./control\x00', 0x64000ba6) inotify_add_watch(r6, &(0x7f0000000180)='./control\x00', 0xa4000960) ioctl$SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, &(0x7f0000000000)=0xffff0018) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r7, 0x4b46, &(0x7f00000000c0)) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}]}, 0x50}, 0x1, 0x0, 0x0, 0x4004000}, 0x40080) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000680), 0x40000, 0x19) sched_setattr(r3, &(0x7f00000001c0)={0x38, 0x3, 0xc, 0x101, 0x6, 0x7, 0x6b4, 0x510000000, 0x6, 0x40}, 0x0) setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0xffe, 0x0, 0x0) 2.549881718s ago: executing program 2 (id=2563): mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x31462, &(0x7f0000000300)='psrquita') r0 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000200)="01c0ad8bf80757aca59fd0ccc54b1f62e19703b494e6efc6651a2cda544a75967b4a384610ba33c1a8c39cb9752bc1253e57f6d003305b9240ddfda45f5ccfb090a112c392ed331eb8776edaf0c6815e2c630248977bd4173cddb6a95b367cb9ebfc9c", 0x63}, {&(0x7f0000000340)='^pb', 0x3}, {&(0x7f0000000380)="09205be0309e8f73f4a4234cd58a5fc8edcd35eb79c0e857a0d55019f5161c860d132047a2f424c98c7d870c687ce0c63ef8a1bf9e89eaaa468847421267525f890994a813213373", 0x48}, {&(0x7f00000004c0)="246c10e526c2cf47198d33984efca6144c6bbaaf85738b7b51d03f29e6d7be06579791ad553c28c4d9cb54ed525f14249d6cc6433931b855331d0dc11cff027b6c2fa3f8875b88b92b113af850432065b4", 0x51}, {&(0x7f0000000540)="ab827931cae2beca87d322e6fb9ce05069be5582e2d9693942af5dfc80522bb365cfc231155de2de61e97b99fae98f8d4544aa20e9760f71f98c56d24e5f93dc73", 0x41}], 0x5}, 0x0) chdir(&(0x7f0000000280)='./file1\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) syz_emit_ethernet(0x66, &(0x7f0000000480)=ANY=[@ANYRES64=r1], 0x0) chdir(&(0x7f0000000180)='./file1\x00') listen(r2, 0x4) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000100)={0x1d, r4}, 0x18) connect$can_j1939(r3, &(0x7f0000000080)={0x1d, r4, 0x0, {0x0, 0xf0, 0x2}, 0x1}, 0x18) getpeername$packet(r3, 0x0, &(0x7f00000000c0)) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r5, 0x84, 0x4, &(0x7f0000000d80)=0x101, 0x4) sendto$inet6(r5, &(0x7f0000000000)='X', 0x1, 0x4000000, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r6 = socket(0x2d, 0x2, 0x0) connect$qrtr(r6, &(0x7f0000000300)={0x2d, 0xffffffffffffffff, 0x4001}, 0xc) quotactl_fd$Q_QUOTAON(r1, 0xffffffff80000200, 0xee00, 0x0) r7 = openat$audio(0xffffffffffffff9c, &(0x7f0000000600), 0x400000000ce243, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r7, 0x80045017, &(0x7f00000021c0)) mknodat(0xffffffffffffff9c, &(0x7f00000005c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x2000, 0x0) socket$nl_route(0x10, 0x3, 0x0) unlink(&(0x7f0000000040)='./file0\x00') mknod$loop(&(0x7f0000000000)='./file2\x00', 0x20, 0x0) 2.391352984s ago: executing program 2 (id=2564): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001d000108fdffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008001b000000000014001680100001800c0007000100000009000000"], 0x3c}, 0x1, 0x0, 0x0, 0x44004}, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000100), 0x2000000, 0xe2001) r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r3, 0xc1105511, &(0x7f0000000300)={{0x8, 0x1, 0x8, 0x7fffffff, 'syz0\x00', 0x7}, 0x0, 0x10000000, 0x5, 0x0, 0x0, 0xd33, 'syz0\x00', 0x0}) pipe2(0x0, 0x800) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001c80)=ANY=[@ANYBLOB="1e0000005300000002000000dffa0000050004009a310d669ef1fe56bc0d00d5d36f44a3bb658708961d682d", @ANYRES32=0x1, @ANYBLOB='\x00\f\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="04000000000000008000000000000001e8fff41e1d54cdede1d3e5e4cf124d1b00000000000000000000008208594c037221557b6b5cffc33c088a2a25ff62a52f62da"], 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x0, 0x141301) r7 = dup(r6) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x7aad, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x2}, &(0x7f0000000180), &(0x7f00000001c0)) ioctl$KVM_X86_SET_MSR_FILTER(r7, 0x4104aec6, &(0x7f0000001ac0)={0x0, [{0x0, 0x250, 0xce, &(0x7f00000001c0)="f67ed58f7fd9a0ca5ee64858107634f891af97c7521f2c8e9170d124e04b8e4747a9ed6fda897bdddd1358d39285156df75bc70df529671a8e0db5f8237d95469072172a8ee9192a4818"}, {0x0, 0x8000, 0xfbd3, &(0x7f00000009c0)="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"}, {0x2, 0x8000, 0xfffffff4, &(0x7f0000001dc0)="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"}, {0x2, 0x658, 0x9, &(0x7f0000003dc0)="e4ac15bcad651ca9670621f15f9a2435711da01c1267f4d7200fb56a18476c2b7bc37ff7b3f9be281b17cb35a44e145f0e016523c33bece8f318bec18e5892b82ebeafe7998501b05d2dcedace0d9bd6c2a761732fb9a8a0906b9fa5ad784b5fc435aa51f26e542e2930332948aa34e453aafc566238081445db83cd2f1c12561a470f056aa339f2d740e4326c06fd1003ba06be19622e43d98f31e01a10c7de968279cef2297ec140f53e586f0eb3fc7d8bdce5db9cdfc5b84e92ddbae6587a105709bfcdad0893000000"}, {0x2, 0x640, 0x2aae1f2c, &(0x7f0000000500)="eb4fadf392813464a90857c10b270d920c1d1f7cc62b31956eeae0b2f1b8aa539242754500d2839e673d6ea4aa8e3f22f88559dc2ad21e950f5831f4a894883b7e1203e840f97daa2944c7b2d9bb97d1623df89643d00c0d1651335a99dc5ccf33b08d05c07dc5f59d78efd496607853ae0e7bcf539c0b2459adb3ba00860098edec640253c859a9271db02c2325e0b3e267f0c54b93317900c61940e844ad4f00f1c556d5521344f4e6eb0f3ba6e2d48a78117581cfefd0e75d6c6c39b44291982a9c3411cedd24"}, {0x6, 0x338, 0x5, &(0x7f0000000600)="bf9ff33d4200689c93f6cd8f4edfe6f2214b0c7ec88e77dca2b6ad957719bbce40f6d963d2867632a87b42540f75cd26ca0cba11dc6b04181ac02cff853906b6796b126aaa5db275b868b42026f4079394c400dd40bc8744b408e7121d098fed5f33322e0f2b86"}, {0x0, 0x7a0, 0x6, &(0x7f0000000680)="59e0b5c7ff71aac433471e732f13ec774822766fb59f275793ffcf4b9396e63696dc0b0ad5c73cdae753bb95530fed1a162350cb6b11d6a358bc555b9bf8fd706260577d5d9c87cbad9d6e4b1c384124160194abc656a5f1126baa59cb78c7b1ae69895708b058b949c96298212aece7373c12d82ff031673c50c145b30047732b38f083252eb84e8333f51a5296689914af94592b505b1fc4aeb42b60ddc4ec6dce0b509b3e5f3a5741be088786828debb22c41d9d6a1d860fe88e56de9f8702a03ab7cba5b86537798b7487ee26ca6908741f97d5b3262d0326a2972f88db95044d7b05bc279047304dfbb3ffc42c96f69e165"}, {0x2, 0x0, 0x0, &(0x7f00000000c0)}, {0x1, 0x8000, 0x3ff, &(0x7f0000002dc0)="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"}, {0x0, 0x5c8, 0x6, &(0x7f0000000780)="f438e400a9e99ee01855bc03f88bcb4a4a1140ec15eb53808d4575305d613597d96d44e8ff1f77587de411d67abad7c3e5554e7351525f55236e5bc1a67b53cdb9159e01d8b06b1ea19f8de053ec4fb9c770c57a35d8ab1083c5efdd420a04a35683d251a6863e9c39d3aad9d1579e51bf7be277b96ef7f1db1cef2b0ac7b37ae4c87e45898c8caabb979c90244f72141156c10ec6c5bd7234095467d1282bdca25c74ea09b48abc2b9fa95fb3af9616881c41eaa00ee2bd84"}, {0x2, 0x478, 0x4, &(0x7f0000000840)="e2670f1d4ef5e2ce1c52a91b8e65bd99acd9918b532a49dcf0d4d0589a5ea6251316408ea8b6270be966e4ec57e3fc1c530d911a72996a119793166a93139b96a4f7e521ea23a3c581087f637f87ae1e121fcc3af76cd4fece9ea06411e2e99b5b5efb0ab0f7467b18054a58d608768884592c28c3210fd4477df70b0944b8b1c6e16dacf65916de15ea5a41cf4991"}, {0x2, 0x250, 0x4e90, &(0x7f0000000900)="77946b201a6814cb8d764ecbe89328d654753e7bce8e948a0ef7b730438a5221c034d7e547abaf5ad02e301bca8a2cdb232ad49f4632da37d10a43f9998656ce95fe22ccdf498f4f7dba"}, {0x3, 0x108, 0xdb42, &(0x7f0000000240)="6454eaabc79ec1870b8621cd03957d419c374af2644bf10e0eb2d16ed9d879a470"}, {0x0, 0x5d0, 0x4, &(0x7f00000019c0)="1caee3e83570e103909dd24298775a76a150288bd5b36982e251cfceb8fc9fd159b5a6d45f5b9909114f000124d1526e284b2238bba02079a6a518857baad7c2af565746be359352631f3b987db9d87fde824895439e0d9222b4bef3a9e3aa6fa7cc975172329b61e4db59c0c7b3cb73978b4d8a116444c1174315e14d71af5ddb63957df77f0e6ed96503673343e6f332dcbe0de2ae185b93c941e0e7e9631b258c0530ce758deded84498360c5efd0d0a8aade182addf14464"}, {0x0, 0x0, 0x4, 0x0}, {0x0, 0xa8, 0x7, &(0x7f0000001a80)="8e19f308b7ef63d95461ec57c3f0025f528e8922b5"}]}) r8 = syz_io_uring_setup(0x497, &(0x7f0000000000)={0x0, 0xf62c, 0x800, 0x3, 0x37d}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r9, r10, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r8, 0x3516, 0x0, 0x0, 0x0, 0x0) r11 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/profiling', 0x40042, 0x101) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f00000002c0)={r11, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00", [0x0, 0xfffffffffffffff8]}}) r12 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r12, 0x0, 0x482, &(0x7f0000000040)={0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e23, 0x3, 'dh\x00', 0x1, 0x7, 0x49}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r12, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e21, 0x0, 'wrr\x00', 0x4, 0x7e, 0x25}, {@rand_addr=0xac1414aa, 0x4e22, 0x3, 0x1cb, 0x12d59, 0x12d5c}}, 0x44) setsockopt$IP_VS_SO_SET_FLUSH(r12, 0x0, 0x485, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000001d80)=[{{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000000980)=[{0x0}], 0x1}}], 0x1, 0x48000) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xc, 0x0, &(0x7f0000000000)) 1.79410318s ago: executing program 3 (id=2568): r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000100)=0x5) connect$netrom(r1, &(0x7f0000000080)={{0x6, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@null, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x8, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x48) connect$netrom(r1, 0x0, 0x0) r2 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) close(r2) execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x0) r3 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) r5 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@fallback=r2, 0x3, 0x0, 0x101, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0x0, &(0x7f00000001c0)=[0x0], &(0x7f0000000200)=[0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000300)=ANY=[@ANYRES32=0x0, @ANYRES32=r4, @ANYBLOB="190000001420000000000000", @ANYRES32=r4, @ANYBLOB="4c565572cf2d0f0fc3459b834a79c04f", @ANYRES64=r6], 0x20) r7 = fsmount(r5, 0x0, 0x0) symlinkat(&(0x7f0000000080)='./file1\x00', r7, &(0x7f0000000140)='./file0\x00') r8 = socket$inet6(0xa, 0x3, 0x8000000003c) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r10 = io_uring_setup(0xd71, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r10, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r10, 0x10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000002700)=""/4096, 0x1000}], 0x0, 0xa}, 0x20) ioctl$sock_SIOCGIFINDEX_802154(r9, 0x8933, &(0x7f00000002c0)={'wpan1\x00'}) connect$inet6(r8, &(0x7f00000000c0)={0xa, 0x0, 0x9, @dev={0xfe, 0x80, '\x00', 0xf}, 0x7}, 0x1c) symlinkat(&(0x7f0000000000)='.\x00', r4, &(0x7f0000000140)='./file0\x00') 1.765391971s ago: executing program 3 (id=2569): socket$alg(0x26, 0x5, 0x0) (async) socket$alg(0x26, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x80000) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000040), 0x141000, 0x0) syz_open_dev$usbmon(&(0x7f00000000c0), 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f00000008c0)={0x1ff, 0x0, 0xfffffffffffffffd}, 0x0, 0x0) r0 = syz_open_dev$usbfs(0x0, 0x76, 0x101301) socket(0x80000000000000a, 0x2, 0x0) socket$inet6(0xa, 0x1, 0x8010000000000084) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, 0x0, &(0x7f00000000c0)) (async) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, 0x0, &(0x7f00000000c0)) ioctl$FBIOGET_FSCREENINFO(0xffffffffffffffff, 0x4602, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_ethernet(0x10aa, 0x0, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0201, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'team0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c000000100005ff04000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r6, @ANYBLOB], 0x3c}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, 0x0, 0x0) (async) sendmsg$nl_xfrm(r7, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x85, &(0x7f0000000340)={0x0, @in={{0x2, 0x0, @broadcast}}, 0x6, 0x1}, 0x90) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000180)=@urb_type_bulk={0x3, {0x1, 0x1}, 0x9, 0x81, 0x0, 0x0, 0xfffffff7, 0x5, 0x3, 0x37f2, 0x8, 0x0}) (async) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000180)=@urb_type_bulk={0x3, {0x1, 0x1}, 0x9, 0x81, 0x0, 0x0, 0xfffffff7, 0x5, 0x3, 0x37f2, 0x8, 0x0}) 1.479294229s ago: executing program 2 (id=2570): timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f0000000340), 0x11000) vmsplice(r0, &(0x7f0000000280)=[{&(0x7f0000000200)="a5", 0x1}], 0x1, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(0xffffffffffffffff, 0xc01864cd, &(0x7f0000000280)={0x0, 0x0}) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0xfe97d1c440879c24) mkdir(&(0x7f00000004c0)='./bus\x00', 0x92) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r1 = open(&(0x7f0000000140)='./file1\x00', 0x4b0bebfb85e8ac87, 0x180) mknodat$loop(r1, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') rename(&(0x7f0000000100)='./file1\x00', &(0x7f00000001c0)='./file0\x00') r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) mkdirat(r2, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r3 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) mkdirat(r3, &(0x7f0000000440)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) r4 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) renameat2(r4, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', r4, &(0x7f00000002c0)='./file0\x00', 0x2) 1.373845498s ago: executing program 3 (id=2571): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x5, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x5, 0x4, 0x4, 0x0, 0x1}) r1 = openat$nullb(0xffffff9c, &(0x7f0000000080), 0x183000, 0x0) ioctl$IOC_PR_RELEASE(r1, 0x401070ca, &(0x7f00000000c0)={0x7ff, 0x37a}) ioctl$BLKPG(r1, 0x1269, &(0x7f00000001c0)={0x3, 0x0, 0x94, &(0x7f0000000100)={0x0, 0x2, 0x9}}) removexattr(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)=@known='system.sockprotoname\x00') madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x10) r2 = syz_open_dev$sndctrl(&(0x7f0000000280), 0xb, 0x82) syz_clone3(&(0x7f00000004c0)={0x28200000, &(0x7f00000002c0), &(0x7f0000000300)=0x0, &(0x7f0000000340)=0x0, {0x2}, &(0x7f0000000380)=""/85, 0x55, &(0x7f0000000400)=""/79, &(0x7f0000000480)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff], 0x5}, 0x58) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r2, 0xc1105518, &(0x7f0000000580)={{0x9, 0x1, 0x40, 0x101, '\x00', 0xffffff7f}, 0x1, 0x30000407, 0x13eecbc5, r3, 0x7, 0x7fffffff, 'syz0\x00', &(0x7f0000000540)=['\x00', '&)/\\*\x00', '\x00', 'system.sockprotoname\x00', '\x00', 'system.sockprotoname\x00', ')\x00'], 0x35}) r5 = socket$nl_crypto(0x10, 0x3, 0x15) fsetxattr$trusted_overlay_opaque(r5, &(0x7f00000006c0), &(0x7f0000000700), 0x2, 0x3) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r6, &(0x7f0000000bc0)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000780)={0x3c4, 0x1, 0x2, 0x201, 0x0, 0x0, {0x5}, [@CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x3}, @CTA_EXPECT_NAT={0x1f4, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x64, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x60, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @local}}}]}, @CTA_EXPECT_NAT_TUPLE={0x5c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x10, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x5c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast2}}}]}, @CTA_EXPECT_NAT_TUPLE={0x4c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}]}, @CTA_EXPECT_ZONE={0x6}, @CTA_EXPECT_TUPLE={0x68, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00'}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}]}, @CTA_EXPECT_MASK={0x70, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @rand_addr=0x64010100}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}]}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x6}, @CTA_EXPECT_MASTER={0x74, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x39}}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_EXPECT_HELP_NAME={0xb, 0x6, 'amanda\x00'}, @CTA_EXPECT_MASTER={0x44, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x1}]}, 0x3c4}, 0x1, 0x0, 0x0, 0x8010}, 0x80) openat$tcp_congestion(0xffffff9c, &(0x7f0000000c00), 0x1, 0x0) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000c80), r1) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r0, &(0x7f0000000e80)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000cc0)={0x168, r7, 0x8, 0x70bd2b, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xd}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x80000000}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xb77}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x9}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x800000}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x80000000}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x3}}]}, 0x168}, 0x1, 0x0, 0x0, 0xc0}, 0x44000) mkdirat$cgroup_root(0xffffff9c, &(0x7f0000000ec0)='./cgroup/syz1\x00', 0x1ff) r8 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000f80)=@nat={'nat\x00', 0x1b, 0x5, 0x538, 0x318, 0x1fc, 0xffffffff, 0x0, 0x318, 0x470, 0x470, 0xffffffff, 0x470, 0x470, 0x5, &(0x7f0000000f00), {[{{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @loopback, [0xffffff00, 0xffffffff, 0x0, 0xffffffff], [0xff000000, 0xff000000, 0xffffffff], 'veth1_to_batadv\x00', 'erspan0\x00', {}, {}, 0x62, 0x1, 0x1, 0x1}, 0x0, 0xc8, 0x110, 0x0, {}, [@common=@ipv6header={{0x24}, {0x76, 0x44, 0x1}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x1, @ipv4=@multicast1, @ipv4=@private=0x5, @icmp_id=0x66, @icmp_id=0x66}}}, {{@ipv6={@mcast1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, [0xffffff00, 0xffffffff, 0xff000000, 0xffffff00], [0xffffffff, 0xffffff00, 0xff000000, 0xffffff00], 'gretap0\x00', 'caif0\x00', {0xff}, {0x91031845a38c947f}, 0x3c, 0x3, 0x1, 0x81}, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x2, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @icmp_id=0x66, @icmp_id=0x68}}}, {{@ipv6={@private0={0xfc, 0x0, '\x00', 0x1}, @empty, [0x0, 0xff, 0x0, 0xffffff00], [0xff000000, 0x0, 0xffffff00], 'geneve0\x00', 'syzkaller0\x00', {0xff}, {0xff}, 0x97, 0xe1, 0x7, 0x5d}, 0x0, 0xd4, 0x11c, 0x0, {}, [@common=@ah={{0x30}, {[0x4d4, 0x4d3], 0x9, 0x81, 0x2}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, @ipv4=@multicast1, @port=0x4e21, @port=0x4e21}}}, {{@uncond, 0x0, 0x110, 0x158, 0x0, {}, [@common=@ipv6header={{0x24}, {0x80, 0x12}}, @common=@hbh={{0x48}, {0x7, 0x5, 0x0, [0x400, 0x5, 0x4, 0xfffc, 0xc824, 0x8, 0x1, 0xee38, 0x1, 0x9, 0x3, 0x920, 0xff, 0x1, 0xfffa, 0xf0], 0xd}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x8, @ipv4=@broadcast, @ipv6=@private0, @icmp_id=0x64, @icmp_id=0x65}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x594) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000001540)=0x2) ptrace(0xffffffffffffffff, r4) sendto$inet6(r8, &(0x7f0000001580)="d65cdfabbd0f66dc7a8df06ca795eb9b0ec7b9983b429ae53fcb354b78bf0e8c617589e175", 0x25, 0xc094, &(0x7f00000015c0)={0xa, 0x4e22, 0xfffff590, @mcast1, 0x2}, 0x1c) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000001600)={{0x1, 0x1, 0x18, r6}, './file0\x00'}) ioctl$SNDCTL_SEQ_SYNC(r9, 0x5101) ioctl$VHOST_VDPA_SET_STATUS(r9, 0x4001af72, &(0x7f0000001640)=0x7) getsockopt$IP_VS_SO_GET_SERVICE(r6, 0x0, 0x483, &(0x7f0000001680), &(0x7f0000001700)=0x60) syz_open_dev$sndmidi(&(0x7f0000001740), 0x3, 0x71300) write$RDMA_USER_CM_CMD_CREATE_ID(r9, &(0x7f00000017c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000001780)={0xffffffffffffffff}, 0x111, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r9, &(0x7f0000001800)={0x15, 0x110, 0xfa00, {r10, 0x81, 0x0, 0x0, 0x0, @in={0x2, 0x4e21, @multicast1}, @ib={0x1b, 0x9, 0xfffffffd, {"44c2e6776e279ef3d268a492a3c5ba73"}, 0x7, 0x7, 0x9}}}, 0x118) 1.303083955s ago: executing program 3 (id=2572): getpeername$tipc(0xffffffffffffffff, &(0x7f0000000000)=@name, &(0x7f0000000040)=0x10) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x2) ioctl$FIOCLEX(r0, 0x5451) r1 = openat$cgroup_root(0xffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f00000000c0)='blkio.bfq.idle_time\x00', 0x0, 0x0) r3 = openat$iommufd(0xffffff9c, &(0x7f0000000100), 0x20400, 0x0) ioctl$IOMMU_VFIO_IOAS$CLEAR(r3, 0x3b88, &(0x7f0000000140)={0xc}) r4 = open(&(0x7f0000000180)='./file0\x00', 0x10000, 0x28) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r4, 0xc0189378, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r2, {r2}}, './file0\x00'}) r7 = openat$ttynull(0xffffff9c, &(0x7f0000000200), 0x42240, 0x0) ioctl$KDSKBLED(r7, 0x4b65, 0xfffeffff) sched_setscheduler(0xffffffffffffffff, 0x3, &(0x7f0000000240)=0xfffffff8) ioctl$SIOCNRDECOBS(r4, 0x89e2) capset(&(0x7f0000000280)={0x20071026, 0xffffffffffffffff}, &(0x7f00000002c0)={0x9, 0x1, 0x81, 0x2}) fcntl$getownex(r0, 0x10, &(0x7f0000000300)={0x0, 0x0}) ptrace$poke(0x5, r8, &(0x7f0000000340), 0x3) getsockopt$ARPT_SO_GET_INFO(r4, 0x0, 0x60, &(0x7f0000000380)={'filter\x00', 0x0, [0x4c, 0xe, 0x8]}, &(0x7f0000000400)=0x44) ioctl$FIONREAD(r5, 0x541b, &(0x7f0000000440)) ioctl$sock_SIOCSPGRP(r5, 0x8902, &(0x7f0000000480)=r8) setsockopt$inet_tcp_int(r2, 0x6, 0x5, &(0x7f00000004c0)=0xfa, 0x4) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000500)={0x0, @initdev}, &(0x7f0000000540)=0xc) ioctl$sock_inet6_SIOCSIFDSTADDR(r4, 0x8918, &(0x7f0000000580)={@mcast2, 0x13, r9}) socketpair(0x2c, 0x3, 0x8, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$IOMMU_VFIO_IOAS$SET(r6, 0x3b88, &(0x7f0000000600)={0xc}) fsync(r10) r11 = dup(r1) ioctl$KDSKBLED(r11, 0x4b65, 0x2) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000680)=@o_path={&(0x7f0000000640)='./file0\x00', r6, 0x4000, r11}, 0x14) getdents64(r2, &(0x7f00000006c0)=""/98, 0x62) openat$urandom(0xffffff9c, &(0x7f0000000740), 0x10000, 0x0) 1.266913834s ago: executing program 3 (id=2573): r0 = socket$pppoe(0x18, 0x1, 0x0) socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x4, @local, 'bridge_slave_1\x00'}}, 0x1e) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r1) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x8c, 0x30, 0x1, 0x0, 0x0, {}, [{0x78, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) getpid() (async) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, &(0x7f0000000080)={0x300, 0x3000040, 0x8, 0x1b, 0xfe, 0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) (async) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x1) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xd, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) openat$sequencer(0xffffffffffffff9c, &(0x7f00000020c0), 0x0, 0x0) bind$can_j1939(r6, &(0x7f0000000040)={0x1d, r7, 0x8000000000000003}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x7, &(0x7f00000000c0)) rt_sigprocmask(0x1, 0x0, 0x0, 0x0) (async) rt_sigprocmask(0x1, 0x0, 0x0, 0x0) 1.032081898s ago: executing program 2 (id=2576): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$key(0xf, 0x3, 0x2) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, 0x0, &(0x7f0000000180)) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f00000001c0)={0x0, 0x4}, &(0x7f0000000240)=0x8) ioctl$CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, &(0x7f00000000c0)={"fc000010", 0x0, 0x5, 0x4, 0xf, 0x0, "000000ff00070000000900", '\x00', "05030400", "e86eade4", ['\x00', "00000012184eb81f00", "0c000004dd372a9000"]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x94) r2 = socket(0x10, 0x3, 0x0) bind$netlink(r2, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) write(r2, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)=@newtaction={0x90, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x7c, 0x1, [@m_ctinfo={0x48, 0x1, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18}]}, {0x4}, {0xc}, {0xc}}}, @m_mirred={0x30, 0x2, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x90}}, 0x0) connect$netlink(r2, &(0x7f00000005c0)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r2, 0x1, 0x21, &(0x7f0000b4bffc)=0x8, 0x4) recvmmsg(r2, &(0x7f0000000780), 0x0, 0x2002, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000280)={0xffffffffffffffff, &(0x7f0000000080)="c26e7ff8645d9f0aa8a53c5945d9de966d4430c4b10808c76faefb80fd19149d5f7c022068ce273f461ed68c5ba5749d7afd84", &(0x7f0000000480)=""/238}, 0x1c) r4 = socket$inet6(0xa, 0xa, 0x400000) connect$inet6(r4, 0x0, 0x0) sendmmsg$inet6(r4, 0x0, 0x0, 0xc8000) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @raw_data="dea233684c996156af0d4bd8e3300217e750b8c97b7123d48003e7e1d3be5f710c41a1db6719881876e9bcc6e2f73c67cc6b675eb43188b5b7f9f898868de9a9c5d536d418ba283121a73a5aba55a87d2a2525295f4492bbde02ad8bc8e88779f2de06f38e99172df4d45b6f13c813dee4230c204a93172922b778fef7a1f89ce876bb89d44cd705bbb28db4869dfac20d928950507acd92c02d17f51b0a627539f6e0a0bdb92004bc6252cd35e8cd100962db9a83ad63a4e7e1ca17c1b6aac63fefa9bebe429d00"}) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x4, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f0000000340), 0x80000001, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x301000, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f00000003c0)={0x10003, 0x0, 0x1, 0x1000, &(0x7f0000fff000/0x1000)=nil}) 994.267038ms ago: executing program 2 (id=2578): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @private=0xa010101}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f00000000c0), 0x4) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000500)={0x1, [0x0]}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f00000008c0)={r1, 0x10, "83cd73d913625563f3877450d9e218b0"}, &(0x7f0000000340)=0x18) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f00000003c0)={r2, 0xb6, 0x3, 0x6, 0x4000, 0x401, 0x7, 0x3, {r2, @in={{0x2, 0x4e20, @broadcast}}, 0x5, 0x6, 0x5, 0x3, 0x1}}, &(0x7f0000000480)=0xb0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0xc2d41, 0x0) ioctl$SNAPSHOT_FREE_SWAP_PAGES(r3, 0x3309) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$MRT_ADD_MFC(0xffffffffffffffff, 0x0, 0xcc, &(0x7f0000000200)={@empty, @private, 0x0, "606b177019716ea6ff1f4d7ed79c31e2e0f1da00000000230000002000", 0x3e1f}, 0x3c) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x122}, 0x1, 0x0, 0x0, 0x2}, 0x0) r5 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TLS_TX(r5, 0x6, 0x1, &(0x7f0000000000)=@gcm_128={{0x304}, "e851afbc1c29cf50", "70f0e4b6e6ae947f7d0ca9d441f08645", "b326f8a7", "7dba26ff0e565eef"}, 0x28) 944.019082ms ago: executing program 4 (id=2580): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) r0 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$restrict_keyring(0x1d, r0, 0x0, 0x0) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000240)='asymmetric\x00', &(0x7f0000000180)=@keyring={'key_or_keyring:', r0}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x1c}}, 0x0) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000400)=ANY=[@ANYBLOB="140000002f0001010000000000000000040000800fe1b68794a08994bc140b550bc5261b1e98fbcdab59bbe0df7ffff91e0ae3e2974972211a2f8726827840bc5719588c03f4ec4d090c0df81f1cfbdf7d381718b5611ffe3cf82e1d9400a2512176986e9ff8571b"], 0x14}], 0x1}, 0x0) ioprio_get$pid(0x2, 0x0) fcntl$setlease(r3, 0x400, 0x0) r6 = gettid() timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) truncate(&(0x7f0000000900)='./file1\x00', 0x24b9) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="24007fd8dcbb02001523f1fc189100000000000000000000000000000000a43915f84c88a8df6146d4d26d49bba6045672af5ccaf15d6755dff372418332827918d31b9a69942cea443dccaf76e37017fed8593b9989af39"], 0x24}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8002, &(0x7f0000000700)=ANY=[@ANYBLOB="56c78e3c733d76697274676f2c6e6f65bc33dbde548d51f5638173733d616e792c63616368653d66736361636865"]) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r8, 0x84, 0x77, &(0x7f0000000000)=ANY=[@ANYBLOB="f700006f"], 0x8) r9 = socket$inet(0x2, 0x3, 0x4) r10 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000b40)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x2, {0x0, 0x0, 0x0, r11, {}, {0xe, 0xffff}, {0x0, 0x6}}, [@qdisc_kind_options=@q_htb={{0x8}, {0xc, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x10}]}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}]}, 0x40}}, 0x0) 883.32512ms ago: executing program 3 (id=2582): ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) get_thread_area(&(0x7f0000000000)={0x8000000c}) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = userfaultfd(0x80001) read$FUSE(0xffffffffffffffff, 0x0, 0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) r3 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000000040)=0x490, 0x4) write(r3, &(0x7f0000000440)="b1118e4ef6a4e608ff08000098ff93da14cd992576d7b365020000000000000067faa180669e4d00", 0x28) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) syz_io_uring_setup(0x1ec8, &(0x7f0000001480)={0x0, 0xb0d7, 0x400, 0x1, 0x337}, &(0x7f0000000500), &(0x7f0000ff4000)) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008d}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000e00)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb010018000000000000801a000000169c40c3020000000000000000000000000e0000000000090000d70000000000000000b6467bf3c0a68079cbbdfeec091c9dfdea772087a51fbdb8b6a51121b166abc08ba0eb75978b8cdb3b02bd739c1e80e8720d542c4c470693c2461e1d430075116dbb252a76b607e60a0024626b119bf659bbf34d"], 0x0, 0x32, 0x0, 0x1}, 0x28) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r4 = socket(0x2b, 0x1, 0x0) listen(r4, 0x0) setsockopt$sock_timeval(r4, 0x1, 0x14, &(0x7f0000454ff0)={0x0, 0x2710}, 0x10) accept4$x25(r4, 0x0, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) rmdir(0x0) timer_gettime(r1, &(0x7f0000000180)) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) 663.419602ms ago: executing program 5 (id=2584): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) seccomp$SECCOMP_GET_ACTION_AVAIL(0x5, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)={0x4b, 0x0, [{0x40000021, 0x0, 0x6}]}) 562.235683ms ago: executing program 5 (id=2585): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x92) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = open(&(0x7f0000000140)='./file1\x00', 0x4b0bebfb85e8ac87, 0x180) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x2c, 0x3e, 0x107, 0xfffffffe, 0xfffffffc, {0x1, 0x7c}, [@nested={0x8, 0x142, 0x0, 0x1, [@typed={0x4, 0x8}]}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x3, 0x0, 0x0, @uid=r3}]}, @nested={0x4, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000c000}, 0xc000) mount$cgroup2(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000540)={[{@memory_hugetlb_accounting}, {@favordynmods}, {}], [{@fowner_lt={'fowner<', r3}}]}) symlinkat(&(0x7f0000000040)='./file1\x00', r0, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00') r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CAP_X86_USER_SPACE_MSR(r5, 0x4068aea3, &(0x7f00000043c0)={0xc4, 0x0, 0x8}) r6 = syz_open_procfs(0x0, &(0x7f0000000340)='mountinfo\x00') ppoll(&(0x7f0000000040)=[{r6, 0x200}], 0x1, 0x0, 0x0, 0x0) fcntl$addseals(r1, 0x409, 0x0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) mknodat$loop(r0, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') rename(&(0x7f0000000100)='./file1\x00', &(0x7f00000001c0)='./file0\x00') r7 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) mkdirat(r7, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r8 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) mkdirat(r8, &(0x7f0000000440)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) r9 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) r10 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$vga_arbiter(r10, &(0x7f0000000600)=@other={'unlock', ' ', 'none'}, 0xc) renameat2(r9, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', r9, &(0x7f00000002c0)='./file0\x00', 0x2) 382.404371ms ago: executing program 5 (id=2586): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000340), 0x802, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000800)={0x0, {0x1, 0x0, 0x3807, 0x3, 0x3, 0x80000001}}) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{0x0, 0x0, 0xfffd, 0x8001}, 'syz1\x00'}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$uinput_user_dev(r0, &(0x7f0000000900)={'syz1\x00', {0x0, 0x0, 0x6}, 0x37b4, [0xfeff, 0x4, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x3, 0x100, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0xbffffffe, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffd, 0x0, 0x3f, 0x1, 0x0, 0x0, 0x3, 0xffffffff, 0x0, 0xffff, 0x0, 0x20, 0x6, 0x5, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x20004, 0x0, 0x0, 0x105], [0x10, 0xffffffff, 0x7, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x7, 0x0, 0x0, 0x0, 0xbb, 0x1, 0xfffffffc, 0x5, 0x800, 0x0, 0xfffffffc, 0x0, 0x1, 0x0, 0x3, 0xec6a, 0x5, 0x40000000, 0xffffffff, 0xfffffffc, 0x7fffffff, 0xfffffffd, 0x3, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfffffffc, 0x0, 0x8c, 0x0, 0x0, 0x4, 0x5, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x4000000, 0x80, 0x0, 0x4, 0x0, 0x7, 0x800000, 0x7], [0x10000, 0x4, 0x0, 0x0, 0xffffffff, 0x1, 0xa000000, 0x0, 0x0, 0xb78, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x4f, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x520, 0xd, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0xfffffffd, 0x0, 0xfffffffc, 0x2af, 0x0, 0x9, 0x0, 0x10000, 0x3, 0x0, 0x0, 0x0, 0x6, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xff, 0x4000005, 0x0, 0x4, 0x2, 0x400000, 0x0, 0x6, 0x0, 0x0, 0x0, 0x3], [0x0, 0x0, 0x0, 0x6, 0x0, 0x401, 0x0, 0x211, 0x4, 0x0, 0x100, 0x3, 0x0, 0x0, 0x80, 0x0, 0x3, 0x0, 0x2, 0x1, 0x7fff, 0x0, 0xd, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x3, 0xbfb6, 0xfffffffe, 0x4, 0x3, 0x0, 0x0, 0x1, 0xffffffff, 0x100, 0x0, 0x6, 0x3, 0xfffffffd, 0x53591b27, 0x3fffffd, 0x0, 0x0, 0x5, 0x400, 0x7, 0x9, 0x0, 0x0, 0x80000000, 0x1000000, 0x0, 0x3]}, 0x45c) 310.453372ms ago: executing program 5 (id=2587): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x3, &(0x7f0000000100)=@raw=[@jmp={0x5, 0x1, 0xd, 0x5, 0x8, 0x20, 0xfffffffffffffffc}, @map_idx={0x18, 0x5, 0x5, 0x0, 0x5}], &(0x7f0000000140)='GPL\x00', 0x6, 0x35, &(0x7f0000000240)=""/53, 0x40f00, 0x3e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000300)={0x3, 0x5, 0x2, 0xfff}, 0x10, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000340)=[{0x1, 0x4, 0x9}, {0x5, 0x3, 0xd, 0x2}, {0x3, 0x5, 0x9, 0x6}], 0x10, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000003c0)='kfree\x00', r0, 0x0, 0xfffffffffffffffc}, 0x18) r1 = mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x42, 0x1f0, 0x0) mq_unlink(&(0x7f0000000000)='eth0\x00') close(r1) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newtaction={0x78, 0x30, 0x48b, 0x0, 0x0, {}, [{0x64, 0x1, [@m_nat={0x60, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x38, 0x6, "5ce300dbca8f45287e1862ae47b680a3d87c76499741920af50e3d0ed78ad5c7dd0200000085b63f881fd9e53ef1a02fea49a11a"}, {0xc}, {0xc}}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x24008040}, 0x8000) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 300.018905ms ago: executing program 5 (id=2588): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002800000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007b00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="0000000000000000000051229dc9", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0) socket$inet6(0xa, 0x2, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count', 0x82c02, 0x190) io_setup(0x1, &(0x7f00000016c0)=0x0) io_submit(r3, 0x1, &(0x7f0000000140)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x8, r2, &(0x7f00000001c0)="de90", 0x2, 0x4, 0x0, 0x2}]) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, 0x0, 0x0) syz_emit_ethernet(0x4e, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x3a) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r5}, 0x10) connect$rxrpc(0xffffffffffffffff, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @multicast2}}, 0x24) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'virt_wifi0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0xa300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_PROTECT={0x5}]}}}, @IFLA_LINK={0x8, 0x5, r7}]}, 0x44}, 0x1, 0x0, 0x0, 0x2400c000}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002800000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007b00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="0000000000000000000051229dc9", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0) (async) socket$inet6(0xa, 0x2, 0x0) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count', 0x82c02, 0x190) (async) io_setup(0x1, &(0x7f00000016c0)) (async) io_submit(r3, 0x1, &(0x7f0000000140)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x8, r2, &(0x7f00000001c0)="de90", 0x2, 0x4, 0x0, 0x2}]) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) bind$inet6(r4, 0x0, 0x0) (async) syz_emit_ethernet(0x4e, 0x0, 0x0) (async) socket$inet6(0xa, 0x2, 0x3a) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r5}, 0x10) (async) connect$rxrpc(0xffffffffffffffff, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @multicast2}}, 0x24) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'virt_wifi0\x00'}) (async) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0xa300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_PROTECT={0x5}]}}}, @IFLA_LINK={0x8, 0x5, r7}]}, 0x44}, 0x1, 0x0, 0x0, 0x2400c000}, 0x0) (async) 84.306105ms ago: executing program 5 (id=2589): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000007b00), 0x40040, 0x0) ioctl$RTC_PIE_ON(r0, 0x7005) pread64(r0, &(0x7f0000007b40)=""/183, 0xb7, 0x2) r1 = syz_open_dev$vim2m(&(0x7f0000000c00), 0x6eb, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000000)={0x15, 0x1, 0x0, "6906007722366ccee4ba568eb4f80102f5372f2c74f6024305f11fd3454ad23d"}) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) getgroups(0x44, &(0x7f0000000040)) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="180100001f00010000000000000000000501008014000300fc010000000000000000000000000000140001"], 0x118}], 0x1}, 0x0) syz_open_dev$vim2m(&(0x7f0000000340), 0x1, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x11) setsockopt$MRT_FLUSH(0xffffffffffffffff, 0x0, 0xd4, &(0x7f0000000000), 0x4) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, &(0x7f0000000900)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}]}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) io_setup(0x2e, 0x0) r6 = syz_io_uring_setup(0x10a, &(0x7f0000000140)={0x0, 0x5883, 0x1000, 0x800, 0xfffffdfc, 0x0, r5}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x7, 0x4, 0x0, 0x0, 0x18, 0x1}) io_uring_enter(r6, 0x3516, 0x0, 0x0, 0x0, 0x0) r9 = openat$null(0xffffff9c, &(0x7f0000000000), 0x600, 0x0) ioctl$UI_DEV_SETUP(r9, 0x405c5503, &(0x7f0000000040)={{0x8, 0x3, 0xff, 0xfffc}, 'syz1\x00', 0xd}) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1802007ffd2f20b1dd156c00000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$vhost_msg_v2(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x0, {&(0x7f0000000c40)=""/4096, 0x1000, &(0x7f00000004c0)=""/207, 0x3, 0x2}}, 0x48) 70.095499ms ago: executing program 4 (id=2590): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x78, 0x30, 0x1, 0x0, 0x0, {}, [{0x64, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x34, 0x1, 0x0, 0x0, {{0x8}, {0xc, 0x2, 0x0, 0x1, [@TCA_IFE_TYPE={0x6, 0x5, 0x5}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x6}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_IDLE(r5, 0x103, 0x7, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) r6 = io_uring_setup(0x513d, &(0x7f0000000180)={0x0, 0x49d3, 0x10, 0x2, 0x1a7, 0x0, r4}) io_uring_register$IORING_REGISTER_FILES2(r6, 0xd, &(0x7f00000007c0)={0x7, 0x1, 0x0, &(0x7f0000000540)=[{&(0x7f0000000280)=""/7, 0x7}, {&(0x7f0000000400)=""/163, 0xa3}, {&(0x7f0000001240)=""/4096, 0x1000}, {&(0x7f0000000700)=""/166, 0xa6}, {&(0x7f0000002240)=""/4096, 0x1000}, {&(0x7f0000000340)=""/114, 0x72}, {&(0x7f0000000500)=""/2, 0x2}], &(0x7f0000000800)=[0xfffffffffffffffb, 0x9, 0x4, 0x0, 0xffffffffffffff7f]}, 0x20) r7 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000980)=ANY=[@ANYBLOB="38000000031401002dbd7000000000000900020073797a30000000000800410073697700140033006c6f0000000000000000000000000000935f319ceb23d9ec641f56a98f8482cf5616d0456af3d768f6585c1e75fce92b"], 0x38}, 0x1, 0x0, 0x0, 0x408d4}, 0x800) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000003240)=@nat={'nat\x00', 0x1b, 0x5, 0x578, 0x1d0, 0x1d0, 0xffffffff, 0x0, 0x0, 0x4e4, 0x4e4, 0xffffffff, 0x4e4, 0x4e4, 0x5, &(0x7f0000000900), {[{{@uncond, 0x0, 0x90, 0xc4, 0x0, {}, [@common=@socket0={{0x20}}]}, @SNAT0={0x34, 'SNAT\x00', 0x0, {0x1, {0x8, @local, @broadcast, @icmp_id=0x67, @gre_key=0xe72f}}}}, {{@uncond, 0x0, 0xb0, 0x10c, 0x0, {}, [@common=@socket0={{0x20}}, @common=@socket0={{0x20}}]}, @common=@CLUSTERIP={0x5c, 'CLUSTERIP\x00', 0x0, {0x1, @random="93c4e9272298", 0x5a18, 0xb, [0x17, 0x1b, 0x1, 0x6, 0x2f, 0x13, 0x17, 0x13, 0x30, 0x11, 0x1, 0x32, 0x2a, 0x3f, 0x29, 0x20], 0x1, 0x0, 0x6}}}, {{@ip={@loopback, @dev={0xac, 0x14, 0x14, 0x12}, 0xff, 0xff000000, 'pim6reg\x00', 'veth1_vlan\x00', {0xff}, {}, 0x5c, 0x0, 0x20}, 0x0, 0x204, 0x238, 0x0, {}, [@common=@inet=@policy={{0x154}, {[{@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [0xffffffff, 0xff000000, 0xffffffff], @ipv6=@ipv4={'\x00', '\xff\xff', @broadcast}, [0x0, 0xffffff00, 0xff], 0x4d5, 0x34ff, 0x8, 0x1, 0x10, 0x14}, {@ipv6=@private2={0xfc, 0x2, '\x00', 0x1}, [0xffffffff, 0xff000000, 0xff, 0xff], @ipv6=@private2, [0xffffff00, 0xffffffff, 0xffffff00, 0xffffff00], 0x4d4, 0x3500, 0x3c, 0x1, 0x5, 0x6}, {@ipv6=@dev={0xfe, 0x80, '\x00', 0x30}, [0xffffffff, 0xff, 0xff], @ipv6=@empty, [0xff000000, 0xffffff00], 0x4d6, 0x3503, 0x2f, 0x1, 0xf, 0x8}, {@ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, [0xff, 0xffffff00, 0xff, 0xff000000], @ipv4=@empty, [0xff, 0xffff00], 0x4d6, 0x3502, 0x8, 0x1, 0x2, 0xc}], 0x4}}, @common=@unspec=@connlimit={{0x40}, {[0x0, 0xffffff00, 0xff], 0xfffffff5, 0x6}}]}, @DNAT0={0x34, 'DNAT\x00', 0x0, {0x1, {0x12, @multicast1, @multicast1, @icmp_id=0x64, @icmp_id=0x68}}}}, {{@ip={@local, @rand_addr=0x64010101, 0xff000000, 0xffffffff, 'pimreg\x00', 'pimreg1\x00', {0xff}, {0xff}, 0x4, 0x1, 0x8}, 0x0, 0x94, 0xdc, 0x0, {}, [@common=@ttl={{0x24}, {0x3, 0x5}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x19, @ipv4=@rand_addr=0x64010100, @ipv6=@remote, @port=0x4e20, @port=0x4e22}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x5d4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x4) r8 = syz_open_dev$vim2m(&(0x7f0000000000), 0x404, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r8, 0xc008561c, &(0x7f0000000140)={0xf0f045}) ppoll(&(0x7f0000000080)=[{r8, 0x2046}], 0x1, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000780), 0x0, 0x91, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x9, &(0x7f0000000580)=ANY=[@ANYRES8=r3], &(0x7f0000000640)='GPL\x00', 0xfffffff6, 0x71, &(0x7f0000000680)=""/113, 0x41100, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x43}, 0x94) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 0s ago: executing program 2 (id=2591): syz_usb_connect(0x4, 0x0, 0x0, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0xf0ff}}]}) r0 = syz_open_dev$evdev(&(0x7f0000001540), 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x5452, &(0x7f0000000240)=""/77) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x57, 0x0, 0x0, {0xfffe, 0x1}, {0x74, 0x2}, @const={0x6, {0x7f, 0x0, 0x8000, 0xfffd}}}) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x78, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x1068) syz_open_procfs(0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x116b, &(0x7f0000002240)=ANY=[@ANYBLOB], 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r3, 0x0, 0x50) r4 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) socket$phonet_pipe(0x23, 0x5, 0x2) close(0x3) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r5, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x38, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x102}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x60}}, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, 0x1c) kernel console output (not intermixed with test programs): le querying for an remote control event. [ 527.399548][T12020] vhci_hcd vhci_hcd.0: Device attached [ 527.406097][T12012] dvb-usb: bulk message failed: -22 (2/0) [ 527.440072][T12031] vhci_hcd: connection closed [ 527.441255][T11183] vhci_hcd: stop threads [ 527.445669][T11183] vhci_hcd: release socket [ 527.448472][T11183] vhci_hcd: disconnect device [ 527.547033][ T34] dvb-usb: bulk message failed: -22 (1/0) [ 527.549862][ T34] dvb-usb: error while querying for an remote control event. [ 527.709594][T12018] usb 7-1: reset high-speed USB device number 59 using dummy_hcd [ 527.717750][ T34] dvb-usb: bulk message failed: -22 (1/0) [ 527.720201][ T34] dvb-usb: error while querying for an remote control event. [ 527.725870][T12018] usb 7-1: device reset changed ep0 maxpacket size! [ 527.732151][ T5404] usb 7-1: USB disconnect, device number 59 [ 527.866926][ T5404] usb 7-1: new high-speed USB device number 60 using dummy_hcd [ 527.877020][ T34] dvb-usb: bulk message failed: -22 (1/0) [ 527.883852][ T34] dvb-usb: error while querying for an remote control event. [ 528.017224][ T5404] usb 7-1: Using ep0 maxpacket: 8 [ 528.024508][ T5404] usb 7-1: unable to get BOS descriptor or descriptor too short [ 528.028095][ T5404] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 528.030566][ T5404] usb 7-1: can't read configurations, error -71 [ 528.047067][ T34] dvb-usb: bulk message failed: -22 (1/0) [ 528.049114][ T34] dvb-usb: error while querying for an remote control event. [ 528.207051][ T34] dvb-usb: bulk message failed: -22 (1/0) [ 528.208997][ T34] dvb-usb: error while querying for an remote control event. [ 528.367011][ T34] dvb-usb: bulk message failed: -22 (1/0) [ 528.370088][ T34] dvb-usb: error while querying for an remote control event. [ 528.389405][T12052] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1498'. [ 528.480920][ T34] usb 6-1: USB disconnect, device number 36 [ 528.497480][ T34] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 528.877024][ T5404] usb 7-1: new high-speed USB device number 61 using dummy_hcd [ 529.030309][ T5404] usb 7-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 529.034391][ T5404] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 529.037816][ T5404] usb 7-1: Product: syz [ 529.039414][ T5404] usb 7-1: Manufacturer: syz [ 529.041241][ T5404] usb 7-1: SerialNumber: syz [ 529.044168][ T5404] usb 7-1: config 0 descriptor?? [ 529.205984][T12078] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 5, id = 0 [ 529.327839][T12084] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1509'. [ 529.360166][T12087] comedi comedi2: comedi_parport: I/O port conflict (0x400b02f,3) [ 529.415583][ T7398] usb 7-1: USB disconnect, device number 61 [ 529.981867][T12109] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1516'. [ 530.169090][T12114] overlayfs: failed to clone upperpath [ 530.271631][T12117] nfs: Deprecated parameter 'nointr' [ 530.366338][T12134] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1523'. [ 530.491138][T12142] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1526'. [ 530.494919][T12142] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1526'. [ 531.311687][T12181] overlayfs: failed to clone upperpath [ 531.941332][T12207] vlan2: entered allmulticast mode [ 531.943720][T12207] bridge_slave_0: entered allmulticast mode [ 532.054510][T12209] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 532.140405][T12213] overlayfs: failed to clone upperpath [ 532.453478][T12225] 9pnet_fd: Insufficient options for proto=fd [ 532.480865][T12225] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1551'. [ 532.512934][T12228] input: syz1 as /devices/virtual/input/input152 [ 533.740148][T12280] 9pnet_fd: Insufficient options for proto=fd [ 533.895314][T12288] wlan0 speed is unknown, defaulting to 1000 [ 534.219672][T12298] vlan2: entered allmulticast mode [ 534.221855][T12298] bridge_slave_0: entered allmulticast mode [ 534.677223][T12312] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 534.680277][T12312] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 534.695285][T12312] vhci_hcd vhci_hcd.0: Device attached [ 534.853359][T12325] netlink: 'syz.1.1577': attribute type 3 has an invalid length. [ 534.856207][T12325] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1577'. [ 534.857823][T12323] /dev/sr0: Can't open blockdev [ 534.864133][T12323] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1577'. [ 534.919301][T12328] 9pnet_fd: Insufficient options for proto=fd [ 534.947196][ T29] usb 41-1: new low-speed USB device number 17 using vhci_hcd [ 534.949928][T12328] 9pnet_fd: Insufficient options for proto=fd [ 535.329330][T12313] vhci_hcd: connection reset by peer [ 535.332395][T11179] vhci_hcd: stop threads [ 535.335363][T11179] vhci_hcd: release socket [ 535.337770][T11179] vhci_hcd: disconnect device [ 535.967190][T12355] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1585'. [ 537.389579][T12410] syz_tun: refused to change device tx_queue_len [ 537.458837][T12418] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 537.459894][T12419] ALSA: mixer_oss: invalid OSS volume 'PHOõfiЧaEEAKER' [ 537.465981][T12419] ALSA: mixer_oss: invalid OSS volume 'Â' [ 537.468270][T12419] ALSA: mixer_oss: invalid OSS volume '' [ 538.032547][T12440] tipc: Started in network mode [ 538.034617][T12440] tipc: Node identity , cluster identity 4711 [ 538.037397][T12440] tipc: Failed to obtain node identity [ 538.039769][T12440] tipc: Enabling of bearer rejected, failed to enable media [ 538.396754][ T6928] usb 8-1: new high-speed USB device number 54 using dummy_hcd [ 538.426557][ T6001] Bluetooth: hci4: command 0x0c1a tx timeout [ 538.563040][ T6928] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 538.566632][ T6928] usb 8-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 538.569268][ T6928] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 538.572992][ T6928] usb 8-1: config 0 descriptor?? [ 538.629358][T12450] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1612'. [ 538.792816][ T6928] usbhid 8-1:0.0: can't add hid device: -71 [ 538.795301][ T6928] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 538.799352][ T6928] usb 8-1: USB disconnect, device number 54 [ 538.817449][T12455] overlayfs: failed to clone upperpath [ 539.306618][ T6928] usb 8-1: new high-speed USB device number 55 using dummy_hcd [ 539.466459][ T6928] usb 8-1: Using ep0 maxpacket: 32 [ 539.470336][ T6928] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 539.474578][ T6928] usb 8-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 539.478266][ T6928] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 539.483054][ T6928] usb 8-1: config 0 descriptor?? [ 539.487309][ T6928] ldusb 8-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 539.541231][ T6928] ldusb 8-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 539.999522][T12479] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1622'. [ 540.044933][T12479] bond0 (unregistering): Released all slaves [ 540.106465][ T29] vhci_hcd: vhci_device speed not set [ 540.130283][T12484] netlink: 'syz.2.1624': attribute type 1 has an invalid length. [ 540.133601][T12484] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.1624'. [ 541.414938][ T6074] usb 8-1: USB disconnect, device number 55 [ 541.418300][ T6074] ldusb 8-1:0.0: LD USB Device #0 now disconnected [ 541.837380][T12516] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1631'. [ 541.843145][T12516] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 541.860163][T12516] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 541.972832][T12519] 9pnet_fd: Insufficient options for proto=fd [ 542.785039][T12536] vxcan1: entered allmulticast mode [ 543.135231][T12542] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1638'. [ 543.560019][T12560] input: syz1 as /devices/virtual/input/input153 [ 543.573221][T12560] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1644'. [ 543.654840][T12542] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1638'. [ 543.813015][T12567] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1646'. [ 543.833750][T12567] vxlan0: entered promiscuous mode [ 543.840732][T11179] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 543.844141][T11179] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 543.847469][T11179] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 543.850219][T11179] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 544.682739][T12585] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1649'. [ 544.691112][T12585] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 544.703498][T12585] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 544.797330][T12592] No source specified [ 544.800128][T12591] [U] R5¡JCÒ°~V6“˜|‡7§¤Á…KXVZZËG—RÙÔ $¨ [ 544.863577][T12595] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1654'. [ 545.194639][T12604] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1658'. [ 545.303483][T12605] random: crng reseeded on system resumption [ 545.885087][T12616] vxcan1: entered allmulticast mode [ 546.033792][T12622] overlayfs: failed to resolve './bus': -2 [ 546.072974][T12626] netlink: 'syz.2.1665': attribute type 1 has an invalid length. [ 546.101558][T12626] 8021q: adding VLAN 0 to HW filter on device bond4 [ 546.113734][T12626] bond4: (slave gretap1): making interface the new active one [ 546.117907][T12626] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 546.240096][T12640] netlink: 'syz.4.1668': attribute type 1 has an invalid length. [ 546.242772][T12640] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.1668'. [ 546.243359][T12645] cgroup: fork rejected by pids controller in /syz2 [ 547.111740][T12701] overlayfs: failed to clone upperpath [ 547.856132][ T5404] usb 7-1: new full-speed USB device number 62 using dummy_hcd [ 547.864093][T12713] pim6reg: entered allmulticast mode [ 547.890587][T12713] pim6reg: left allmulticast mode [ 548.046207][ T40] kauditd_printk_skb: 3825 callbacks suppressed [ 548.046219][ T40] audit: type=1804 audit(1756286540.921:6436): pid=12719 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1682" name="/newroot/463/file0" dev="tmpfs" ino=2478 res=1 errno=0 [ 548.064773][T12719] ref_ctr increment failed for inode: 0x9ae offset: 0x7 ref_ctr_offset: 0x2 of mm: 0xffff88806e8bb5c0 [ 548.088091][T12718] uprobe: syz.1.1682:12718 failed to unregister, leaking uprobe [ 548.210942][T12723] netlink: 'syz.1.1683': attribute type 1 has an invalid length. [ 548.214520][T12723] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.1683'. [ 548.796011][ T34] usb 8-1: new high-speed USB device number 56 using dummy_hcd [ 548.955254][ T34] usb 8-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 548.961880][ T34] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 548.972251][ T34] usb 8-1: Product: syz [ 548.974656][ T34] usb 8-1: Manufacturer: syz [ 548.986024][ T34] usb 8-1: SerialNumber: syz [ 549.026769][ T34] usb 8-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 549.046947][ T34] usb 8-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 549.109066][T12748] ALSA: mixer_oss: invalid OSS volume '00000000000000000000004' [ 549.911112][T12753] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 549.913902][T12753] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 549.917896][T12753] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 549.920854][T12753] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 550.110965][ T34] ath9k_htc 8-1:1.0: ath9k_htc: Target is unresponsive [ 550.113308][ T34] ath9k_htc: Failed to initialize the device [ 550.134383][ T34] usb 8-1: ath9k_htc: USB layer deinitialized [ 550.141489][ T34] usb 8-1: USB disconnect, device number 56 [ 550.231324][T12780] pimreg: entered allmulticast mode [ 550.251315][T12780] pimreg: left allmulticast mode [ 550.361109][ T34] kernel read not supported for file /vcs (pid: 34 comm: kworker/3:0) [ 550.366097][T12781] macsec1: entered promiscuous mode [ 550.368393][T12781] dummy0: entered promiscuous mode [ 550.451339][T12783] vxcan1: entered allmulticast mode [ 550.477234][ T40] audit: type=1326 audit(1756286543.361:6437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12788 comm="syz.1.1701" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 550.485899][ T40] audit: type=1326 audit(1756286543.361:6438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12788 comm="syz.1.1701" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 550.492735][ T40] audit: type=1326 audit(1756286543.361:6439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12788 comm="syz.1.1701" exe="/syz-executor" sig=0 arch=40000003 syscall=224 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 550.501243][ T40] audit: type=1326 audit(1756286543.361:6440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12788 comm="syz.1.1701" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 550.508807][ T40] audit: type=1326 audit(1756286543.361:6441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12788 comm="syz.1.1701" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 550.515666][ T40] audit: type=1326 audit(1756286543.361:6442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12788 comm="syz.1.1701" exe="/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 550.523330][ T40] audit: type=1326 audit(1756286543.371:6443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12788 comm="syz.1.1701" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 550.530406][ T40] audit: type=1326 audit(1756286543.371:6444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12788 comm="syz.1.1701" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 550.538072][ T40] audit: type=1326 audit(1756286543.371:6445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12788 comm="syz.1.1701" exe="/syz-executor" sig=0 arch=40000003 syscall=260 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 550.924266][T12794] input: syz1 as /devices/virtual/input/input154 [ 551.899026][T12806] No control pipe specified [ 552.101989][T12818] syzkaller0: entered promiscuous mode [ 552.103919][T12818] syzkaller0: entered allmulticast mode [ 552.493801][T12826] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(11) [ 552.496090][T12826] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 552.499469][T12826] vhci_hcd vhci_hcd.0: Device attached [ 552.502822][T12826] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(13) [ 552.505008][T12826] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 552.507947][T12826] vhci_hcd vhci_hcd.0: Device attached [ 552.514948][T12826] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 552.519895][T12826] vhci_hcd vhci_hcd.0: pdev(2) rhport(3) sockfd(18) [ 552.522116][T12826] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 552.525072][T12826] vhci_hcd vhci_hcd.0: Device attached [ 552.535567][T12826] vhci_hcd vhci_hcd.0: pdev(2) rhport(4) sockfd(20) [ 552.538493][T12826] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 552.542202][T12826] vhci_hcd vhci_hcd.0: Device attached [ 552.546954][T12826] vhci_hcd vhci_hcd.0: pdev(2) rhport(5) sockfd(22) [ 552.549906][T12826] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 552.553271][T12826] vhci_hcd vhci_hcd.0: Device attached [ 552.556596][T12826] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 552.560268][T12826] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 552.563787][T12826] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 552.587414][T12835] vhci_hcd: connection closed [ 552.587647][T12833] vhci_hcd: connection closed [ 552.590256][T12829] vhci_hcd: connection closed [ 552.591906][T12831] vhci_hcd: connection closed [ 552.593446][T11193] vhci_hcd: stop threads [ 552.593463][T11193] vhci_hcd: release socket [ 552.595059][T12827] vhci_hcd: connection closed [ 552.597047][T11193] vhci_hcd: disconnect device [ 552.601490][T11193] vhci_hcd: stop threads [ 552.603117][T11193] vhci_hcd: release socket [ 552.604763][T11193] vhci_hcd: disconnect device [ 552.611565][T11193] vhci_hcd: stop threads [ 552.613532][T11193] vhci_hcd: release socket [ 552.615090][T11193] vhci_hcd: disconnect device [ 552.620839][T11193] vhci_hcd: stop threads [ 552.622389][T11193] vhci_hcd: release socket [ 552.624081][T11193] vhci_hcd: disconnect device [ 552.627436][T11193] vhci_hcd: stop threads [ 552.629069][T11193] vhci_hcd: release socket [ 552.630663][T11193] vhci_hcd: disconnect device [ 552.675823][ T34] vhci_hcd: vhci_device speed not set [ 552.862294][T12840] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1712'. [ 553.028806][T12843] netlink: 'syz.4.1712': attribute type 2 has an invalid length. [ 553.032186][T12843] netlink: 'syz.4.1712': attribute type 4 has an invalid length. [ 553.835723][T12856] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1715'. [ 553.991982][T12872] input: syz1 as /devices/virtual/input/input155 [ 554.141468][T12885] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1724'. [ 555.254733][T12898] netlink: 'syz.1.1724': attribute type 2 has an invalid length. [ 555.258117][T12898] netlink: 'syz.1.1724': attribute type 4 has an invalid length. [ 555.377497][T12903] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1729'. [ 555.412401][T12907] input: syz1 as /devices/virtual/input/input156 [ 555.460988][T12911] trusted_key: encrypted_key: insufficient parameters specified [ 555.506590][T12915] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1735'. [ 556.108234][T12940] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1742'. [ 556.277933][T12950] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1745'. [ 556.524127][T12952] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1746'. [ 556.534723][T12954] input: syz1 as /devices/virtual/input/input157 [ 556.829057][T12960] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1750'. [ 557.176187][ T40] kauditd_printk_skb: 331 callbacks suppressed [ 557.176204][ T40] audit: type=1326 audit(1756286550.062:6777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12980 comm="syz.1.1757" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 557.185730][ T40] audit: type=1326 audit(1756286550.062:6778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12980 comm="syz.1.1757" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 557.192284][ T40] audit: type=1326 audit(1756286550.062:6779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12980 comm="syz.1.1757" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 557.199010][ T40] audit: type=1326 audit(1756286550.062:6780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12980 comm="syz.1.1757" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 557.205636][ T40] audit: type=1326 audit(1756286550.062:6781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12980 comm="syz.1.1757" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 557.209559][T12981] netlink: 'syz.1.1757': attribute type 1 has an invalid length. [ 557.212231][ T40] audit: type=1326 audit(1756286550.062:6782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12980 comm="syz.1.1757" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 557.215208][T12981] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1757'. [ 557.221942][ T40] audit: type=1326 audit(1756286550.082:6783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12980 comm="syz.1.1757" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 557.221972][ T40] audit: type=1326 audit(1756286550.082:6784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12980 comm="syz.1.1757" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 557.221994][ T40] audit: type=1326 audit(1756286550.082:6785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12980 comm="syz.1.1757" exe="/syz-executor" sig=0 arch=40000003 syscall=197 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 557.222015][ T40] audit: type=1326 audit(1756286550.082:6786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12980 comm="syz.1.1757" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 557.305482][ T5991] Bluetooth: hci4: command 0x0c1a tx timeout [ 557.912628][T12999] 9pnet_fd: Insufficient options for proto=fd [ 557.914916][T12999] 9pnet_fd: Insufficient options for proto=fd [ 557.951309][T12997] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 557.953366][T12997] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 557.956956][T12997] vhci_hcd vhci_hcd.0: Device attached [ 557.962784][T12997] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1760'. [ 558.191032][ T9] kernel read not supported for file /dsp (pid: 9 comm: kworker/0:0) [ 558.231814][T13016] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1768'. [ 558.235567][ T6928] usb 42-1: SetAddress Request (2) to port 0 [ 558.237529][ T6928] usb 42-1: new SuperSpeed USB device number 2 using vhci_hcd [ 558.240226][T13016] vlan2: entered allmulticast mode [ 558.242250][T13016] hsr0: entered allmulticast mode [ 558.244699][T13016] hsr_slave_0: entered allmulticast mode [ 558.247443][T13016] hsr_slave_1: entered allmulticast mode [ 558.512730][T13005] vhci_hcd: connection reset by peer [ 558.514850][T11178] vhci_hcd: stop threads [ 558.516954][T11178] vhci_hcd: release socket [ 558.519051][T11178] vhci_hcd: disconnect device [ 558.896836][T13025] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1771'. [ 559.113584][T13042] input: syz1 as /devices/virtual/input/input159 [ 559.145563][T13046] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1778'. [ 559.389934][T13063] random: crng reseeded on system resumption [ 559.961740][T13084] input: syz1 as /devices/virtual/input/input160 [ 560.097755][T13088] veth1_vlan: left allmulticast mode [ 560.117263][T11198] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 560.123582][T11198] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 560.126821][T11198] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 560.130550][T11198] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 560.174617][T13100] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1792'. [ 560.408971][T13116] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1797'. [ 560.439173][T13119] input: syz1 as /devices/virtual/input/input161 [ 560.473908][T13120] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1793'. [ 560.483977][T13124] vxcan1 speed is unknown, defaulting to 1000 [ 560.487759][T13125] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 560.492696][T13124] vxcan1 speed is unknown, defaulting to 1000 [ 560.496962][T13124] vxcan1 speed is unknown, defaulting to 1000 [ 560.551529][T13129] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1800'. [ 560.554950][T13129] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1800'. [ 560.577929][T13124] infiniband syz1: set down [ 560.581070][T13124] infiniband syz1: added vxcan1 [ 560.583576][ T7398] vxcan1 speed is unknown, defaulting to 1000 [ 560.586005][T13124] syz1: rxe_create_cq: returned err = -12 [ 560.587847][T13124] infiniband syz1: Couldn't create ib_mad CQ [ 560.590734][T13124] infiniband syz1: Couldn't open port 1 [ 560.602869][T13124] RDS/IB: syz1: added [ 560.604552][T13124] smc: adding ib device syz1 with port count 1 [ 560.607348][T13124] smc: ib device syz1 port 1 has pnetid [ 560.611044][ T34] vxcan1 speed is unknown, defaulting to 1000 [ 560.616638][T13124] vxcan1 speed is unknown, defaulting to 1000 [ 560.702548][T13124] vxcan1 speed is unknown, defaulting to 1000 [ 560.791122][T13124] vxcan1 speed is unknown, defaulting to 1000 [ 560.869728][T13124] vxcan1 speed is unknown, defaulting to 1000 [ 561.283787][T13157] input: syz1 as /devices/virtual/input/input162 [ 561.759188][T13167] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1809'. [ 561.762244][T13167] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 561.764916][T13167] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 561.791150][T13174] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 561.820165][T13173] fuse: Bad value for 'fd' [ 561.823015][ T9] Process accounting resumed [ 561.923179][T13182] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 562.018376][T13184] block nbd2: Attempted send on invalid socket [ 562.020695][T13184] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 562.024697][T13184] ADFS-fs (nbd2): error: unable to read block 3, try 0 [ 562.282370][T13189] I/O error, dev loop3, sector 128 op 0x0:(READ) flags 0x1800 phys_seg 1 prio class 2 [ 562.286410][T13189] gfs2: error -5 reading superblock [ 562.597053][T13213] wlan0 speed is unknown, defaulting to 1000 [ 562.601342][T13213] vxcan1 speed is unknown, defaulting to 1000 [ 562.802021][T13220] wlan0 speed is unknown, defaulting to 1000 [ 562.807373][T13220] vxcan1 speed is unknown, defaulting to 1000 [ 563.305362][ T6928] usb 42-1: device descriptor read/8, error -110 [ 564.004620][ T6928] usb usb42-port1: attempt power cycle [ 564.064470][T13281] syzkaller1: entered promiscuous mode [ 564.066477][T13281] syzkaller1: entered allmulticast mode [ 564.356203][ T7398] Process accounting resumed [ 564.360612][T13313] input: syz0 as /devices/virtual/input/input163 [ 564.398594][T13318] can: request_module (can-proto-0) failed. [ 564.399540][T13317] can: request_module (can-proto-0) failed. [ 564.608857][ T6928] usb usb42-port1: unable to enumerate USB device [ 564.681630][T13336] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.751472][T13336] __nla_validate_parse: 4 callbacks suppressed [ 564.751484][T13336] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1853'. [ 564.757029][T13340] input: syz1 as /devices/virtual/input/input164 [ 565.333247][T13357] syz_tun: entered allmulticast mode [ 565.404644][T13358] kvm: requested 7542 ns i8254 timer period limited to 200000 ns [ 565.496936][T13367] 9pnet: p9_errstr2errno: server reported unknown error @í΂Í00000000000000000005 [ 566.170922][T13356] syz_tun: left allmulticast mode [ 566.279262][T13389] input: syz1 as /devices/virtual/input/input165 [ 566.438251][T13406] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1872'. [ 566.458063][T13406] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1872'. [ 566.607240][T13422] input: syz1 as /devices/virtual/input/input166 [ 566.700571][T13426] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1879'. [ 566.753718][T13426] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1879'. [ 567.021517][T13441] Trying to write to read-only block-device nullb0 [ 567.374431][ T40] kauditd_printk_skb: 56 callbacks suppressed [ 567.374442][ T40] audit: type=1326 audit(1756286560.252:6843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13449 comm="syz.3.1886" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ae579 code=0x7ffc0000 [ 567.395623][ T40] audit: type=1326 audit(1756286560.262:6844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13449 comm="syz.3.1886" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ae579 code=0x7ffc0000 [ 567.403011][ T40] audit: type=1326 audit(1756286560.272:6845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13449 comm="syz.3.1886" exe="/syz-executor" sig=0 arch=40000003 syscall=437 compat=1 ip=0xf70ae579 code=0x7ffc0000 [ 567.411386][ T40] audit: type=1326 audit(1756286560.272:6846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13449 comm="syz.3.1886" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ae579 code=0x7ffc0000 [ 567.425623][T13454] pim6reg: entered allmulticast mode [ 567.438519][ T40] audit: type=1326 audit(1756286560.272:6847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13449 comm="syz.3.1886" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf70ae579 code=0x7ffc0000 [ 567.457482][ T40] audit: type=1326 audit(1756286560.272:6848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13449 comm="syz.3.1886" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ae579 code=0x7ffc0000 [ 567.464736][ T40] audit: type=1326 audit(1756286560.272:6849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13449 comm="syz.3.1886" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf70ae579 code=0x7ffc0000 [ 567.479048][ T40] audit: type=1326 audit(1756286560.272:6850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13449 comm="syz.3.1886" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ae579 code=0x7ffc0000 [ 567.489157][T13456] input: syz1 as /devices/virtual/input/input168 [ 567.489918][ T40] audit: type=1326 audit(1756286560.272:6851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13449 comm="syz.3.1886" exe="/syz-executor" sig=0 arch=40000003 syscall=14 compat=1 ip=0xf70ae579 code=0x7ffc0000 [ 567.502471][ T40] audit: type=1326 audit(1756286560.272:6852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13449 comm="syz.3.1886" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ae579 code=0x7ffc0000 [ 567.565980][T13458] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1888'. [ 567.607545][T13458] 8021q: adding VLAN 0 to HW filter on device bond6 [ 567.612644][T13458] bond5: (slave bond6): Enslaving as an active interface with an up link [ 567.628760][T13458] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1888'. [ 567.634528][T13458] bond5 (unregistering): (slave bond6): Releasing backup interface [ 567.643403][T13458] bond5 (unregistering): Released all slaves [ 568.101066][T13449] pim6reg: left allmulticast mode [ 568.440740][T13470] sp0: Synchronizing with TNC [ 568.569891][T13481] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1893'. [ 568.890267][T13467] [U] è` [ 569.490156][T13487] input: syz1 as /devices/virtual/input/input169 [ 570.226649][T13519] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1905'. [ 570.407906][T13523] binder: 13522:13523 ioctl c0306201 80000080 returned -14 [ 570.439384][T13530] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 570.731415][T13540] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1912'. [ 570.734475][T13540] netlink: 'syz.3.1912': attribute type 30 has an invalid length. [ 570.753687][ T1187] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 570.759526][ T1187] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 570.762475][ T1187] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 570.765562][ T1187] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 571.047691][T13544] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 571.049856][T13544] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 571.064195][T13544] vhci_hcd vhci_hcd.0: Device attached [ 571.314632][ T6074] usb 43-1: new high-speed USB device number 6 using vhci_hcd [ 571.418209][T13557] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1917'. [ 571.435071][T13557] vlan3: entered promiscuous mode [ 571.436872][T13557] vlan3: entered allmulticast mode [ 571.498146][T13558] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1917'. [ 571.654407][T13545] vhci_hcd: connection reset by peer [ 571.656792][T11193] vhci_hcd: stop threads [ 571.658790][T11193] vhci_hcd: release socket [ 571.660919][T11193] vhci_hcd: disconnect device [ 572.316941][T13575] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1920'. [ 572.782094][ T40] kauditd_printk_skb: 15 callbacks suppressed [ 572.782105][ T40] audit: type=1326 audit(1756286565.663:6868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13584 comm="syz.4.1923" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd3579 code=0x7ffc0000 [ 572.797743][ T40] audit: type=1326 audit(1756286565.673:6869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13584 comm="syz.4.1923" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd3579 code=0x7ffc0000 [ 572.807689][ T40] audit: type=1326 audit(1756286565.673:6870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13584 comm="syz.4.1923" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf7fd3579 code=0x7ffc0000 [ 572.814073][ T40] audit: type=1326 audit(1756286565.673:6871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13584 comm="syz.4.1923" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf7fd35a7 code=0x7ffc0000 [ 572.822313][ T40] audit: type=1326 audit(1756286565.673:6872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13584 comm="syz.4.1923" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf7fd3579 code=0x7ffc0000 [ 572.831622][ T40] audit: type=1326 audit(1756286565.673:6873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13584 comm="syz.4.1923" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf7fd35a7 code=0x7ffc0000 [ 572.838495][ T40] audit: type=1326 audit(1756286565.673:6874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13584 comm="syz.4.1923" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd3579 code=0x7ffc0000 [ 572.845380][ T40] audit: type=1326 audit(1756286565.673:6875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13584 comm="syz.4.1923" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd3579 code=0x7ffc0000 [ 572.852341][ T40] audit: type=1326 audit(1756286565.673:6876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13584 comm="syz.4.1923" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd3579 code=0x7ffc0000 [ 572.860084][ T40] audit: type=1326 audit(1756286565.673:6877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13584 comm="syz.4.1923" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd3579 code=0x7ffc0000 [ 573.788891][T13619] 9pnet_fd: Insufficient options for proto=fd [ 573.926381][T13638] input: syz1 as /devices/virtual/input/input170 [ 573.940503][T13640] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 573.948895][T13640] CIFS mount error: No usable UNC path provided in device string! [ 573.948895][T13640] [ 573.952209][T13640] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 574.027167][T13645] loop7: detected capacity change from 0 to 7 [ 574.033219][ C3] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 574.036672][ C3] Buffer I/O error on dev loop7, logical block 0, async page read [ 574.062296][ C3] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 574.065266][ C3] Buffer I/O error on dev loop7, logical block 0, async page read [ 574.115588][ C2] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 574.118508][ C2] Buffer I/O error on dev loop7, logical block 0, async page read [ 574.124792][ C2] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 574.127741][ C2] Buffer I/O error on dev loop7, logical block 0, async page read [ 574.130783][ C2] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 574.133653][ C2] Buffer I/O error on dev loop7, logical block 0, async page read [ 574.136509][ C2] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 574.139398][ C2] Buffer I/O error on dev loop7, logical block 0, async page read [ 574.142505][ C2] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 574.145526][ C2] Buffer I/O error on dev loop7, logical block 0, async page read [ 574.148257][T13645] ldm_validate_partition_table(): Disk read failed. [ 574.151503][ C3] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 574.155327][ C3] Buffer I/O error on dev loop7, logical block 0, async page read [ 574.164276][ C3] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 574.168123][ C3] Buffer I/O error on dev loop7, logical block 0, async page read [ 574.176286][ C3] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 574.180165][ C3] Buffer I/O error on dev loop7, logical block 0, async page read [ 574.185588][T13645] Dev loop7: unable to read RDB block 0 [ 574.186854][T13651] comedi comedi0: Cannot bond this driver to itself! [ 574.187881][T13645] loop7: unable to read partition table [ 574.192393][T13645] loop7: partition table beyond EOD, truncated [ 574.196080][T13645] loop_reread_partitions: partition scan of loop7 () failed (rc=-5) [ 574.401663][T13656] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 574.403724][T13656] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 574.424469][T13656] vhci_hcd vhci_hcd.0: Device attached [ 574.757287][ T29] usb 39-1: new low-speed USB device number 11 using vhci_hcd [ 574.832105][T13669] syz.2.1947 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 575.021854][T13657] vhci_hcd: connection reset by peer [ 575.024835][T11178] vhci_hcd: stop threads [ 575.026708][T11178] vhci_hcd: release socket [ 575.028877][T11178] vhci_hcd: disconnect device [ 575.093794][T13670] delete_channel: no stack [ 575.958497][T13714] mmap: syz.4.1958 (13714): VmData 45780992 exceed data ulimit 32768. Update limits or use boot option ignore_rlimit_data. [ 576.279414][T13734] wireguard0: entered promiscuous mode [ 576.281733][T13734] wireguard0: entered allmulticast mode [ 576.434440][ T6074] vhci_hcd: vhci_device speed not set [ 576.475626][T13741] pim6reg: entered allmulticast mode [ 576.579060][T13750] comedi: valid board names for 8255 driver are: [ 576.581287][T13750] 8255 [ 576.582264][T13750] comedi: valid board names for vmk80xx driver are: [ 576.584729][T13750] vmk80xx [ 576.586384][T13750] comedi: valid board names for usbduxsigma driver are: [ 576.589268][T13750] usbduxsigma [ 576.590467][T13750] comedi: valid board names for usbduxfast driver are: [ 576.592869][T13750] usbduxfast [ 576.594026][T13750] comedi: valid board names for usbdux driver are: [ 576.596826][T13750] usbdux [ 576.598018][T13750] comedi: valid board names for ni6501 driver are: [ 576.600402][T13750] ni6501 [ 576.601436][T13750] comedi: valid board names for dt9812 driver are: [ 576.605226][T13750] dt9812 [ 576.606293][T13750] comedi: valid board names for ni_labpc_cs driver are: [ 576.608775][T13750] ni_labpc_cs [ 576.610746][T13750] comedi: valid board names for ni_daq_700 driver are: [ 576.613501][T13750] ni_daq_700 [ 576.614964][T13750] comedi: valid board names for labpc_pci driver are: [ 576.617135][T13750] labpc_pci [ 576.618217][T13750] comedi: valid board names for adl_pci9118 driver are: [ 576.620407][T13750] pci9118dg [ 576.621504][T13750] pci9118hg [ 576.622590][T13750] pci9118hr [ 576.623674][T13750] comedi: valid board names for 8255_pci driver are: [ 576.625934][T13750] 8255_pci [ 576.626994][T13750] comedi: valid board names for s526 driver are: [ 576.629073][T13750] s526 [ 576.630005][T13750] comedi: valid board names for multiq3 driver are: [ 576.637383][T13750] multiq3 [ 576.640398][T13750] comedi: valid board names for pcmuio driver are: [ 576.643948][T13750] pcmuio48 [ 576.645936][T13750] pcmuio96 [ 576.647506][T13750] comedi: valid board names for pcmmio driver are: [ 576.650877][T13750] pcmmio [ 576.652177][T13750] comedi: valid board names for pcmda12 driver are: [ 576.654423][T13750] pcmda12 [ 576.655477][T13750] comedi: valid board names for pcmad driver are: [ 576.657536][T13750] pcmad12 [ 576.658668][T13750] pcmad16 [ 576.660101][T13750] comedi: valid board names for ni_labpc driver are: [ 576.663056][T13750] lab-pc-1200 [ 576.666481][T13750] lab-pc-1200ai [ 576.667725][T13750] lab-pc+ [ 576.668783][T13750] comedi: valid board names for atmio16 driver are: [ 576.671114][T13750] atmio16 [ 576.672299][T13750] atmio16d [ 576.673639][T13750] comedi: valid board names for ni_at_ao driver are: [ 576.676124][T13750] at-ao-6 [ 576.677165][T13750] at-ao-10 [ 576.678226][T13750] comedi: valid board names for ni_at_a2150 driver are: [ 576.680583][T13750] ni_at_a2150 [ 576.681783][T13750] comedi: valid board names for adq12b driver are: [ 576.683998][T13750] adq12b [ 576.685151][T13750] comedi: valid board names for mpc624 driver are: [ 576.687316][T13750] mpc624 [ 576.688361][T13750] comedi: valid board names for c6xdigio driver are: [ 576.690655][T13750] c6xdigio [ 576.691822][T13750] comedi: valid board names for aio_iiro_16 driver are: [ 576.694401][T13750] aio_iiro_16 [ 576.695788][T13750] comedi: valid board names for aio_aio12_8 driver are: [ 576.698516][T13750] aio_aio12_8 [ 576.699670][T13750] aio_ai12_8 [ 576.700953][T13750] aio_ao12_4 [ 576.702159][T13750] comedi: valid board names for fl512 driver are: [ 576.704512][T13750] fl512 [ 576.705540][T13750] comedi: valid board names for dmm32at driver are: [ 576.707730][T13750] dmm32at [ 576.708866][T13750] comedi: valid board names for dt282x driver are: [ 576.710973][T13750] dt2821 [ 576.711995][T13750] dt2821-f [ 576.713068][T13750] dt2821-g [ 576.714189][T13750] dt2823 [ 576.715344][T13750] dt2824-pgh [ 576.716547][T13750] dt2824-pgl [ 576.717731][T13750] dt2825 [ 576.718772][T13750] dt2827 [ 576.719857][T13750] dt2828 [ 576.720891][T13750] dt2829 [ 576.721954][T13750] dt21-ez [ 576.723096][T13750] dt23-ez [ 576.724361][T13750] dt24-ez [ 576.725465][T13750] dt24-ez-pgl [ 576.726685][T13750] comedi: valid board names for dt2817 driver are: [ 576.728872][T13750] dt2817 [ 576.730006][T13750] comedi: valid board names for dt2815 driver are: [ 576.732429][T13750] dt2815 [ 576.733656][T13750] comedi: valid board names for dt2814 driver are: [ 576.736075][T13750] dt2814 [ 576.737124][T13750] comedi: valid board names for dt2811 driver are: [ 576.739230][T13750] dt2811-pgh [ 576.740370][T13750] dt2811-pgl [ 576.741504][T13750] comedi: valid board names for dt2801 driver are: [ 576.743813][T13750] dt2801 [ 576.744929][T13750] comedi: valid board names for das6402 driver are: [ 576.747106][T13750] das6402-12 [ 576.748252][T13750] das6402-16 [ 576.749382][T13750] comedi: valid board names for das1800 driver are: [ 576.751585][T13750] das-1701st [ 576.752805][T13750] das-1701st-da [ 576.754369][T13750] das-1702st [ 576.755590][T13750] das-1702st-da [ 576.756837][T13750] das-1702hr [ 576.757975][T13750] das-1702hr-da [ 576.759208][T13750] das-1701ao [ 576.760392][T13750] das-1702ao [ 576.761580][T13750] das-1801st [ 576.762715][T13750] das-1801st-da [ 576.763942][T13750] das-1802st [ 576.765157][T13750] das-1802st-da [ 576.766437][T13750] das-1802hr [ 576.767570][T13750] das-1802hr-da [ 576.768801][T13750] das-1801hc [ 576.769975][T13750] das-1802hc [ 576.771121][T13750] das-1801ao [ 576.772301][T13750] das-1802ao [ 576.773520][T13750] comedi: valid board names for das800 driver are: [ 576.775777][T13750] das-800 [ 576.776914][T13750] cio-das800 [ 576.778044][T13750] das-801 [ 576.779105][T13750] cio-das801 [ 576.780243][T13750] das-802 [ 576.781332][T13750] cio-das802 [ 576.782465][T13750] cio-das802/16 [ 576.783672][T13750] comedi: valid board names for isa-das08 driver are: [ 576.785914][T13750] isa-das08 [ 576.787043][T13750] das08-pgm [ 576.788174][T13750] das08-pgh [ 576.789286][T13750] das08-pgl [ 576.790413][T13750] das08-aoh [ 576.791548][T13750] das08-aol [ 576.792676][T13750] das08-aom [ 576.793803][T13750] das08/jr-ao [ 576.795094][T13750] das08jr-16-ao [ 576.796389][T13750] pc104-das08 [ 576.797547][T13750] das08jr/16 [ 576.798701][T13750] comedi: valid board names for das16m1 driver are: [ 576.800907][T13750] das16m1 [ 576.801983][T13750] comedi: valid board names for dac02 driver are: [ 576.804110][T13750] dac02 [ 576.805244][T13750] comedi: valid board names for rti802 driver are: [ 576.807380][T13750] rti802 [ 576.808448][T13750] comedi: valid board names for rti800 driver are: [ 576.810569][T13750] rti800 [ 576.811600][T13750] rti815 [ 576.812652][T13750] comedi: valid board names for pcm3724 driver are: [ 576.814910][T13750] pcm3724 [ 576.816013][T13750] comedi: valid board names for pcl818 driver are: [ 576.818179][T13750] pcl818l [ 576.819269][T13750] pcl818h [ 576.820344][T13750] pcl818hd [ 576.821443][T13750] pcl818hg [ 576.822543][T13750] pcl818 [ 576.823845][T13750] pcl718 [ 576.825289][T13750] pcm3718 [ 576.826613][T13750] comedi: valid board names for pcl816 driver are: [ 576.829283][T13750] pcl816 [ 576.830641][T13750] pcl814b [ 576.831974][T13750] comedi: valid board names for pcl812 driver are: [ 576.834913][T13750] pcl812 [ 576.836215][T13750] pcl812pg [ 576.837628][T13750] acl8112pg [ 576.839095][T13750] acl8112dg [ 576.840550][T13750] acl8112hg [ 576.842038][T13750] a821pgl [ 576.843446][T13750] a821pglnda [ 576.843845][T13757] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1968'. [ 576.845133][T13750] a821pgh [ 576.849451][T13750] a822pgl [ 576.850842][T13750] a822pgh [ 576.852241][T13750] a823pgl [ 576.853640][T13750] a823pgh [ 576.855687][T13750] pcl813 [ 576.857103][T13750] pcl813b [ 576.858540][T13750] acl8113 [ 576.859985][T13750] iso813 [ 576.861272][T13750] acl8216 [ 576.862655][T13750] a826pg [ 576.864034][T13750] comedi: valid board names for pcl730 driver are: [ 576.867028][T13750] pcl730 [ 576.868414][T13750] iso730 [ 576.869713][T13750] acl7130 [ 576.871032][T13750] pcm3730 [ 576.872397][T13750] pcl725 [ 576.873666][T13750] p8r8dio [ 576.875377][T13750] acl7225b [ 576.876988][T13750] p16r16dio [ 576.878553][T13750] pcl733 [ 576.879947][T13750] pcl734 [ 576.881262][T13750] opmm-1616-xt [ 576.882788][T13750] pearl-mm-p [ 576.884331][T13750] ir104-pbf [ 576.885747][T13750] comedi: valid board names for pcl726 driver are: [ 576.888702][T13750] pcl726 [ 576.890195][T13750] pcl727 [ 576.891695][T13750] pcl728 [ 576.893239][T13750] acl6126 [ 576.895163][T13750] acl6128 [ 576.898205][T13750] comedi: valid board names for pcl724 driver are: [ 576.901500][T13750] pcl724 [ 576.902774][T13750] pcl722 [ 576.904055][T13750] pcl731 [ 576.905496][T13750] acl7122 [ 576.906838][T13750] acl7124 [ 576.908179][T13750] pet48dio [ 576.909320][T13750] pcmio48 [ 576.910523][T13750] onyx-mm-dio [ 576.911667][T13750] comedi: valid board names for pcl711 driver are: [ 576.913837][T13750] pcl711 [ 576.915144][T13750] pcl711b [ 576.916287][T13750] acl8112hg [ 576.917386][T13750] acl8112dg [ 576.918498][T13750] comedi: valid board names for amplc_pc263 driver are: [ 576.920726][T13750] pc263 [ 576.921739][T13750] comedi: valid board names for amplc_pc236 driver are: [ 576.924182][T13750] pc36at [ 576.925451][T13750] comedi: valid board names for amplc_dio200 driver are: [ 576.928030][T13750] pc212e [ 576.929210][T13750] pc214e [ 576.930276][T13750] pc215e [ 576.931284][T13750] pc218e [ 576.932301][T13750] pc272e [ 576.933303][T13750] comedi: valid board names for comedi_parport driver are: [ 576.935719][T13750] comedi_parport [ 576.936983][T13750] comedi: valid board names for comedi_test driver are: [ 576.939219][T13750] comedi_test [ 576.940512][T13750] comedi: valid board names for comedi_bond driver are: [ 576.942863][T13750] comedi_bond [ 577.120886][T13738] pim6reg: left allmulticast mode [ 577.849846][T13781] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1973'. [ 577.853116][T13781] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1973'. [ 578.320529][T13797] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1979'. [ 578.326120][T13797] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1979'. [ 578.329571][T13797] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1979'. [ 578.345463][T13799] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1978'. [ 578.371232][T13801] netlink: 5 bytes leftover after parsing attributes in process `syz.4.1980'. [ 578.376463][T13801] 0ªX¹¦D: renamed from macvtap0 [ 578.382568][T13801] veth0_macvtap: entered allmulticast mode [ 578.390538][T13801] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 578.397320][T13801] netlink: 'syz.4.1980': attribute type 1 has an invalid length. [ 578.399824][T13801] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1980'. [ 578.667216][T13817] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 578.669497][T13817] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 578.673071][T13817] vhci_hcd vhci_hcd.0: Device attached [ 578.924354][ T6074] usb 43-1: new low-speed USB device number 7 using vhci_hcd [ 579.374481][T13818] vhci_hcd: connection reset by peer [ 579.377144][T11178] vhci_hcd: stop threads [ 579.379066][T11178] vhci_hcd: release socket [ 579.381392][T11178] vhci_hcd: disconnect device [ 579.865438][ T29] vhci_hcd: vhci_device speed not set [ 580.018185][ T40] kauditd_printk_skb: 1135 callbacks suppressed [ 580.018201][ T40] audit: type=1800 audit(2000000006.210:8013): pid=13857 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1994" name="SYSV00000000" dev="tmpfs" ino=2 res=0 errno=0 [ 580.268055][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 580.286647][T13861] input: syz1 as /devices/virtual/input/input171 [ 580.619457][T13879] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2003'. [ 580.658114][T13884] overlayfs: missing 'lowerdir' [ 581.149817][T13864] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 581.217846][T13895] input: syz1 as /devices/virtual/input/input172 [ 581.262974][T13901] netlink: 'syz.2.2009': attribute type 1 has an invalid length. [ 581.271746][T13901] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 581.271997][T13897] loop6: detected capacity change from 0 to 7 [ 581.280318][T13897] Dev loop6: unable to read RDB block 7 [ 581.282072][T13897] loop6: unable to read partition table [ 581.283940][T13897] loop6: partition table beyond EOD, truncated [ 581.285937][T13897] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà) failed (rc=-5) [ 581.346662][T13910] batadv_slave_1: entered promiscuous mode [ 581.489869][T13917] overlayfs: missing 'lowerdir' [ 581.577416][T13919] FAULT_INJECTION: forcing a failure. [ 581.577416][T13919] name failslab, interval 1, probability 0, space 0, times 0 [ 581.581867][T13919] CPU: 0 UID: 0 PID: 13919 Comm: syz.3.2014 Not tainted syzkaller #0 PREEMPT(full) [ 581.581883][T13919] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 581.581890][T13919] Call Trace: [ 581.581895][T13919] [ 581.581900][T13919] dump_stack_lvl+0x16c/0x1f0 [ 581.581919][T13919] should_fail_ex+0x512/0x640 [ 581.581935][T13919] ? fs_reclaim_acquire+0xae/0x150 [ 581.581953][T13919] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 581.581969][T13919] should_failslab+0xc2/0x120 [ 581.581984][T13919] __kmalloc_noprof+0xd2/0x510 [ 581.582000][T13919] tomoyo_realpath_from_path+0xc2/0x6e0 [ 581.582017][T13919] ? tomoyo_profile+0x47/0x60 [ 581.582028][T13919] tomoyo_path_number_perm+0x245/0x580 [ 581.582041][T13919] ? tomoyo_path_number_perm+0x237/0x580 [ 581.582055][T13919] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 581.582082][T13919] ? find_held_lock+0x2b/0x80 [ 581.582094][T13919] ? hook_file_ioctl_common+0x145/0x410 [ 581.582112][T13919] ? __fget_files+0x20e/0x3c0 [ 581.582126][T13919] security_file_ioctl_compat+0x9b/0x240 [ 581.582141][T13919] __ia32_compat_sys_ioctl+0xc3/0x370 [ 581.582160][T13919] __do_fast_syscall_32+0x7c/0x3a0 [ 581.582176][T13919] do_fast_syscall_32+0x32/0x80 [ 581.582191][T13919] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 581.582211][T13919] RIP: 0023:0xf70ae579 [ 581.582221][T13919] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 581.582231][T13919] RSP: 002b:00000000f549e55c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 581.582242][T13919] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000000005301 [ 581.582249][T13919] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 581.582255][T13919] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 581.582262][T13919] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 581.582268][T13919] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 581.582282][T13919] [ 581.582286][T13919] ERROR: Out of memory at tomoyo_realpath_from_path. [ 581.800442][T13927] input: syz1 as /devices/virtual/input/input173 [ 582.276286][T13909] batadv_slave_1: left promiscuous mode [ 582.375155][T13947] overlayfs: missing 'lowerdir' [ 582.424085][ T6001] Bluetooth: hci4: command 0x0c1a tx timeout [ 582.654005][T13952] __nla_validate_parse: 4 callbacks suppressed [ 582.654018][T13952] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2025'. [ 582.754031][T13956] A link change request failed with some changes committed already. Interface bond3 may have been left with an inconsistent configuration, please check. [ 582.966571][T13962] FAULT_INJECTION: forcing a failure. [ 582.966571][T13962] name failslab, interval 1, probability 0, space 0, times 0 [ 582.971327][T13962] CPU: 3 UID: 0 PID: 13962 Comm: syz.2.2028 Not tainted syzkaller #0 PREEMPT(full) [ 582.971348][T13962] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 582.971358][T13962] Call Trace: [ 582.971367][T13962] [ 582.971376][T13962] dump_stack_lvl+0x16c/0x1f0 [ 582.971403][T13962] should_fail_ex+0x512/0x640 [ 582.971428][T13962] ? fs_reclaim_acquire+0xae/0x150 [ 582.971452][T13962] ? tomoyo_encode2+0x100/0x3e0 [ 582.971473][T13962] should_failslab+0xc2/0x120 [ 582.971496][T13962] __kmalloc_noprof+0xd2/0x510 [ 582.971516][T13962] ? d_absolute_path+0x136/0x1a0 [ 582.971545][T13962] tomoyo_encode2+0x100/0x3e0 [ 582.971569][T13962] tomoyo_encode+0x29/0x50 [ 582.971589][T13962] tomoyo_realpath_from_path+0x18f/0x6e0 [ 582.971620][T13962] tomoyo_path_number_perm+0x245/0x580 [ 582.971639][T13962] ? tomoyo_path_number_perm+0x237/0x580 [ 582.971661][T13962] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 582.971702][T13962] ? find_held_lock+0x2b/0x80 [ 582.971720][T13962] ? hook_file_ioctl_common+0x145/0x410 [ 582.971797][T13962] ? __fget_files+0x20e/0x3c0 [ 582.971822][T13962] security_file_ioctl_compat+0x9b/0x240 [ 582.971846][T13962] __ia32_compat_sys_ioctl+0xc3/0x370 [ 582.971874][T13962] __do_fast_syscall_32+0x7c/0x3a0 [ 582.971900][T13962] do_fast_syscall_32+0x32/0x80 [ 582.971923][T13962] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 582.971950][T13962] RIP: 0023:0xf70ce579 [ 582.971964][T13962] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 582.972001][T13962] RSP: 002b:00000000f54be55c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 582.972019][T13962] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000000005301 [ 582.972030][T13962] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 582.972040][T13962] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 582.972050][T13962] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 582.972060][T13962] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 582.972083][T13962] [ 582.972101][T13962] ERROR: Out of memory at tomoyo_realpath_from_path. [ 583.335658][T13967] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 583.338001][T13967] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 583.356133][T13967] vhci_hcd vhci_hcd.0: Device attached [ 583.615263][ T29] usb 41-1: new low-speed USB device number 19 using vhci_hcd [ 583.642815][T13983] trusted_key: encrypted_key: keyword 'lmÄ9default' not recognized [ 583.679484][T13987] overlayfs: missing 'lowerdir' [ 583.979700][T13968] vhci_hcd: connection reset by peer [ 583.984103][T11178] vhci_hcd: stop threads [ 583.985567][T11178] vhci_hcd: release socket [ 583.990592][T11178] vhci_hcd: disconnect device [ 584.023958][ T6074] vhci_hcd: vhci_device speed not set [ 584.871315][ T40] audit: type=1326 audit(2000000011.050:8014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14015 comm="syz.4.2041" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd3579 code=0x7ffc0000 [ 584.889745][ T40] audit: type=1326 audit(2000000011.050:8015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14015 comm="syz.4.2041" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd3579 code=0x7ffc0000 [ 584.897703][ T40] audit: type=1326 audit(2000000011.050:8016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14015 comm="syz.4.2041" exe="/syz-executor" sig=0 arch=40000003 syscall=354 compat=1 ip=0xf7fd3579 code=0x7ffc0000 [ 584.904713][ T40] audit: type=1326 audit(2000000011.050:8017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14015 comm="syz.4.2041" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd3579 code=0x7ffc0000 [ 584.912328][T14016] overlayfs: failed to clone upperpath [ 584.915328][ T40] audit: type=1326 audit(2000000011.050:8018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14015 comm="syz.4.2041" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd3579 code=0x7ffc0000 [ 584.923522][ T40] audit: type=1326 audit(2000000011.050:8019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14015 comm="syz.4.2041" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7fd3579 code=0x7ffc0000 [ 584.972090][ T40] audit: type=1326 audit(2000000011.050:8020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14015 comm="syz.4.2041" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd3579 code=0x7ffc0000 [ 585.003657][T14019] overlayfs: failed to clone upperpath [ 585.006686][ T40] audit: type=1326 audit(2000000011.050:8021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14015 comm="syz.4.2041" exe="/syz-executor" sig=0 arch=40000003 syscall=361 compat=1 ip=0xf7fd3579 code=0x7ffc0000 [ 585.022024][ T40] audit: type=1326 audit(2000000011.050:8022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14015 comm="syz.4.2041" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd3579 code=0x7ffc0000 [ 585.034134][ T40] audit: type=1326 audit(2000000011.050:8023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14015 comm="syz.4.2041" exe="/syz-executor" sig=0 arch=40000003 syscall=363 compat=1 ip=0xf7fd3579 code=0x7ffc0000 [ 585.041345][ T40] audit: type=1326 audit(2000000011.050:8024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14015 comm="syz.4.2041" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd3579 code=0x7ffc0000 [ 585.048471][ T40] audit: type=1326 audit(2000000011.050:8025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14015 comm="syz.4.2041" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7fd3579 code=0x7ffc0000 [ 585.056132][ T40] audit: type=1326 audit(2000000011.050:8026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14015 comm="syz.4.2041" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd3579 code=0x7ffc0000 [ 585.063584][ T40] audit: type=1326 audit(2000000011.050:8027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14015 comm="syz.4.2041" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd3579 code=0x7ffc0000 [ 585.073818][ T40] audit: type=1326 audit(2000000011.050:8028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14015 comm="syz.4.2041" exe="/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf7fd3579 code=0x7ffc0000 [ 585.081063][ T40] audit: type=1326 audit(2000000011.050:8029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14015 comm="syz.4.2041" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd3579 code=0x7ffc0000 [ 585.089277][ T40] audit: type=1326 audit(2000000011.060:8030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14015 comm="syz.4.2041" exe="/syz-executor" sig=0 arch=40000003 syscall=362 compat=1 ip=0xf7fd3579 code=0x7ffc0000 [ 585.101645][ T40] audit: type=1326 audit(2000000011.060:8031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14015 comm="syz.4.2041" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd3579 code=0x7ffc0000 [ 585.108773][ T40] audit: type=1326 audit(2000000011.060:8032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14015 comm="syz.4.2041" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd3579 code=0x7ffc0000 [ 585.254054][ T5404] usb 8-1: new high-speed USB device number 57 using dummy_hcd [ 585.453947][ T5404] usb 8-1: Using ep0 maxpacket: 8 [ 585.456962][ T5404] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 585.459550][ T5404] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 585.462558][ T5404] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 585.466717][ T5404] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 585.470733][ T5404] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 585.475455][ T5404] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 585.478994][ T5404] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 585.690089][ T5404] usb 8-1: GET_CAPABILITIES returned 0 [ 585.692046][ T5404] usbtmc 8-1:16.0: can't read capabilities [ 585.703696][T14036] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 585.706210][T14036] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 585.710314][T14036] vhci_hcd vhci_hcd.0: Device attached [ 585.822179][T14048] 9pnet_fd: Insufficient options for proto=fd [ 585.861360][T14050] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2051'. [ 585.909886][ T7398] usb 8-1: USB disconnect, device number 57 [ 585.994063][ T6074] usb 39-1: new low-speed USB device number 12 using vhci_hcd [ 586.000292][T14059] netlink: 'syz.3.2053': attribute type 1 has an invalid length. [ 586.003633][T14059] netlink: 208 bytes leftover after parsing attributes in process `syz.3.2053'. [ 586.011568][T14060] netlink: 'syz.3.2053': attribute type 1 has an invalid length. [ 586.015210][T14060] netlink: 208 bytes leftover after parsing attributes in process `syz.3.2053'. [ 586.420982][T14037] vhci_hcd: connection reset by peer [ 586.423430][T11178] vhci_hcd: stop threads [ 586.425582][T11178] vhci_hcd: release socket [ 586.427589][T11178] vhci_hcd: disconnect device [ 586.724754][T14083] gtp1: entered promiscuous mode [ 586.732861][T14083] comedi comedi0: pcl730: I/O port conflict (0x2,4) [ 587.000817][T14098] input: syz1 as /devices/virtual/input/input174 [ 587.398997][T14110] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(11) [ 587.401135][T14110] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 587.416175][T14110] vhci_hcd vhci_hcd.0: Device attached [ 587.426462][T14110] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(13) [ 587.428674][T14110] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 587.431771][T14110] vhci_hcd vhci_hcd.0: Device attached [ 587.438771][T14110] vhci_hcd vhci_hcd.0: pdev(2) rhport(2) sockfd(15) [ 587.440877][T14110] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 587.447770][T14110] vhci_hcd vhci_hcd.0: Device attached [ 587.464952][T14110] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 587.474027][T14110] vhci_hcd vhci_hcd.0: pdev(2) rhport(4) sockfd(19) [ 587.476498][T14110] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 587.486128][T14110] vhci_hcd vhci_hcd.0: Device attached [ 587.497302][T14110] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(21) [ 587.499360][T14110] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 587.504544][T14110] vhci_hcd vhci_hcd.0: Device attached [ 587.510657][T14110] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 587.521555][T14110] vhci_hcd vhci_hcd.0: pdev(2) rhport(6) sockfd(25) [ 587.523590][T14110] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 587.532674][T14110] vhci_hcd vhci_hcd.0: Device attached [ 587.540533][T14110] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 587.568678][T14121] vhci_hcd: connection closed [ 587.568808][T14119] vhci_hcd: connection closed [ 587.570999][T11178] vhci_hcd: stop threads [ 587.571614][T14113] vhci_hcd: connection closed [ 587.573491][T14117] vhci_hcd: connection closed [ 587.578400][T14115] vhci_hcd: connection closed [ 587.583124][T11178] vhci_hcd: release socket [ 587.583339][T14111] vhci_hcd: connection closed [ 587.585767][T11178] vhci_hcd: disconnect device [ 587.599606][T11178] vhci_hcd: stop threads [ 587.601389][T11178] vhci_hcd: release socket [ 587.604671][T11178] vhci_hcd: disconnect device [ 587.607570][T11178] vhci_hcd: stop threads [ 587.609838][T11178] vhci_hcd: release socket [ 587.612242][T11178] vhci_hcd: disconnect device [ 587.621245][T11178] vhci_hcd: stop threads [ 587.643992][T11178] vhci_hcd: release socket [ 587.646936][T11178] vhci_hcd: disconnect device [ 587.652541][T11178] vhci_hcd: stop threads [ 587.655456][T11178] vhci_hcd: release socket [ 587.657579][T11178] vhci_hcd: disconnect device [ 587.660979][T11178] vhci_hcd: stop threads [ 587.662852][T11178] vhci_hcd: release socket [ 587.667218][T11178] vhci_hcd: disconnect device [ 587.915397][T14129] autofs: Bad value for 'uid' [ 587.917476][T14129] autofs: Bad value for 'uid' [ 588.531424][T14149] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 588.533496][T14149] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 588.536374][T14149] vhci_hcd vhci_hcd.0: Device attached [ 589.199622][T14150] vhci_hcd: connection reset by peer [ 589.203070][T11198] vhci_hcd: stop threads [ 589.208958][T11198] vhci_hcd: release socket [ 589.230190][T11198] vhci_hcd: disconnect device [ 589.293720][ T29] vhci_hcd: vhci_device speed not set [ 589.409210][T14200] overlayfs: failed to clone upperpath [ 589.672253][ T6001] Bluetooth: hci4: unexpected event for opcode 0x0c05 [ 591.133650][ T6074] vhci_hcd: vhci_device speed not set [ 591.204665][T14227] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2093'. [ 591.343839][ T40] kauditd_printk_skb: 104 callbacks suppressed [ 591.343857][ T40] audit: type=1326 audit(2000000017.520:8137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14242 comm="syz.1.2097" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 591.363650][ T40] audit: type=1326 audit(2000000017.520:8138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14242 comm="syz.1.2097" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 591.383635][ T40] audit: type=1326 audit(2000000017.520:8139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14242 comm="syz.1.2097" exe="/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 591.396015][ T40] audit: type=1326 audit(2000000017.520:8140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14242 comm="syz.1.2097" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 591.396063][ T40] audit: type=1326 audit(2000000017.520:8141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14242 comm="syz.1.2097" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 591.396101][ T40] audit: type=1326 audit(2000000017.520:8142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14242 comm="syz.1.2097" exe="/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 591.396139][ T40] audit: type=1326 audit(2000000017.520:8143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14242 comm="syz.1.2097" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 591.396184][ T40] audit: type=1326 audit(2000000017.520:8144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14242 comm="syz.1.2097" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 591.396222][ T40] audit: type=1326 audit(2000000017.520:8145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14242 comm="syz.1.2097" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 591.396261][ T40] audit: type=1326 audit(2000000017.520:8146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14242 comm="syz.1.2097" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be579 code=0x7ffc0000 [ 591.468913][T14244] tmpfs: Bad value for 'mpol' [ 591.469283][T14244] tmpfs: Bad value for 'mpol' [ 591.469632][T14244] tmpfs: Bad value for 'mpol' [ 591.469847][T14244] tmpfs: Bad value for 'mpol' [ 591.470046][T14244] tmpfs: Bad value for 'mpol' [ 591.470273][T14244] tmpfs: Bad value for 'mpol' [ 591.470708][T14244] tmpfs: Bad value for 'mpol' [ 591.470933][T14244] tmpfs: Bad value for 'mpol' [ 591.471128][T14244] tmpfs: Bad value for 'mpol' [ 591.476874][T14244] tmpfs: Bad value for 'mpol' [ 591.477110][T14244] tmpfs: Bad value for 'mpol' [ 591.477341][T14244] tmpfs: Bad value for 'mpol' [ 591.477611][T14244] tmpfs: Bad value for 'mpol' [ 591.477835][T14244] tmpfs: Bad value for 'mpol' [ 591.478059][T14244] tmpfs: Bad value for 'mpol' [ 591.478291][T14244] tmpfs: Bad value for 'mpol' [ 591.478554][T14244] tmpfs: Bad value for 'mpol' [ 591.478801][T14244] tmpfs: Bad value for 'mpol' [ 591.479036][T14244] tmpfs: Bad value for 'mpol' [ 591.479285][T14244] tmpfs: Bad value for 'mpol' [ 591.479584][T14244] tmpfs: Bad value for 'mpol' [ 591.616673][T14258] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2098'. [ 591.819877][T14260] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 592.595756][T14278] overlayfs: empty lowerdir [ 592.873792][T14287] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 592.876325][T14287] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 592.882838][T14287] vhci_hcd vhci_hcd.0: Device attached [ 593.086234][T14288] vhci_hcd: connection closed [ 593.086482][ T1153] vhci_hcd: stop threads [ 593.089348][ T1153] vhci_hcd: release socket [ 593.090815][ T1153] vhci_hcd: disconnect device [ 593.143457][ T6074] usb 39-1: new low-speed USB device number 13 using vhci_hcd [ 593.145866][ T6074] usb 39-1: enqueue for inactive port 0 [ 593.213629][ T6074] vhci_hcd: vhci_device speed not set [ 593.748704][T14319] overlayfs: failed to resolve './file1': -2 [ 594.001665][T14335] tmpfs: Unknown parameter '18446744073709551615' [ 594.010302][T14332] x_tables: ip_tables: HMARK.0 target: invalid size 64 (kernel) != (user) 72 [ 594.063992][T14337] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2120'. [ 594.342346][T14346] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2122'. [ 594.379689][T14343] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2122'. [ 594.386573][T14343] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2122'. [ 594.796962][T14376] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2129'. [ 594.866941][T14376] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2129'. [ 594.942693][T14380] input: syz1 as /devices/virtual/input/input176 [ 596.273462][T14418] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2140'. [ 596.277293][T14418] netlink: 'syz.1.2140': attribute type 20 has an invalid length. [ 596.280573][T14418] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2140'. [ 596.679967][T14434] overlayfs: failed to clone upperpath [ 597.251124][T14448] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2147'. [ 597.317457][T14450] CIFS mount error: No usable UNC path provided in device string! [ 597.317457][T14450] [ 597.321825][T14450] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 599.050422][T14458] virtio-fs: tag not found [ 599.079554][T14462] input: syz1 as /devices/virtual/input/input177 [ 599.089319][T14465] overlayfs: failed to clone upperpath [ 599.129451][T14470] 9pnet_fd: Insufficient options for proto=fd [ 599.213507][T14475] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2150'. [ 599.253312][T14480] fuse: Bad value for 'fd' [ 599.836095][T14486] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2160'. [ 599.840371][T14486] netlink: 'syz.4.2160': attribute type 10 has an invalid length. [ 599.843557][T14486] netlink: 2 bytes leftover after parsing attributes in process `syz.4.2160'. [ 600.645584][T14502] wlan0 speed is unknown, defaulting to 1000 [ 600.648199][T14502] vxcan1 speed is unknown, defaulting to 1000 [ 601.176755][T14508] overlayfs: failed to clone upperpath [ 601.573036][ T5404] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 601.712999][ T5404] usb 6-1: device descriptor read/64, error -71 [ 601.785569][T14517] overlayfs: failed to clone upperpath [ 601.962972][ T5404] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 602.113143][ T5404] usb 6-1: device descriptor read/64, error -71 [ 602.137855][T14525] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 602.221561][T14522] cgroup: fork rejected by pids controller in /syz4 [ 602.224460][ T5404] usb usb6-port1: attempt power cycle [ 602.563011][ T5404] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 602.592158][ T5404] usb 6-1: device descriptor read/8, error -71 [ 602.693773][T14578] ip6tnl3: entered promiscuous mode [ 602.695642][T14578] ip6tnl3: entered allmulticast mode [ 602.822960][ T5404] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 602.867676][ T5404] usb 6-1: device descriptor read/8, error -71 [ 602.973388][ T5404] usb usb6-port1: unable to enumerate USB device [ 603.262061][ T40] kauditd_printk_skb: 68 callbacks suppressed [ 603.262074][ T40] audit: type=1326 audit(2000000029.451:8215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14595 comm="syz.3.2182" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf70ae579 code=0x0 [ 603.331821][T14600] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2182'. [ 603.506101][T14609] input: syz1 as /devices/virtual/input/input178 [ 604.226752][ T6001] Bluetooth: hci4: unexpected event for opcode 0x0419 [ 604.398086][T14663] overlayfs: failed to clone upperpath [ 604.561564][T14674] tipc: Started in network mode [ 604.564118][T14674] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 604.566916][T14674] tipc: Enabling of bearer rejected, failed to enable media [ 604.679156][T14675] /dev/nullb0: Can't lookup blockdev [ 605.267101][T14701] input: syz1 as /devices/virtual/input/input180 [ 605.356266][T14705] fuse: Unknown parameter '000000000000000000000030x00000000000000030000000000000000000000300000000000000000003' [ 605.953199][T14724] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 605.956400][T14724] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 606.009829][T14724] vhci_hcd vhci_hcd.0: Device attached [ 606.422830][ T29] usb 41-1: new low-speed USB device number 20 using vhci_hcd [ 606.728506][T14725] vhci_hcd: connection reset by peer [ 606.730560][T11174] vhci_hcd: stop threads [ 606.732024][T11174] vhci_hcd: release socket [ 606.733614][T11174] vhci_hcd: disconnect device [ 606.847893][T14732] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2215'. [ 606.922058][T14736] input: syz1 as /devices/virtual/input/input181 [ 607.156108][T14747] IPVS: set_ctl: invalid protocol: 192 164.0.0.0:20000 [ 607.217597][T14755] netlink: 'syz.4.2222': attribute type 10 has an invalid length. [ 607.220677][T14755] hsr_slave_0: left promiscuous mode [ 608.633162][T14783] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.2230'. [ 608.709842][T14792] dlm: no locking on control device [ 608.924195][T14799] netlink: 244 bytes leftover after parsing attributes in process `syz.1.2236'. [ 610.408737][T14830] netlink: 'syz.2.2242': attribute type 10 has an invalid length. [ 610.411778][T14830] hsr_slave_0: left promiscuous mode [ 610.416461][T14830] hsr_slave_1: left promiscuous mode [ 610.653051][T14835] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2243'. [ 610.655860][T14835] netlink: 'syz.2.2243': attribute type 5 has an invalid length. [ 610.658326][T14835] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2243'. [ 610.688238][T14835] geneve2: entered promiscuous mode [ 610.689984][T14835] geneve2: entered allmulticast mode [ 610.693558][T11198] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 610.703288][T11198] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 610.706159][T11198] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 610.733920][T11198] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 611.334280][T14842] netlink: 'syz.1.2247': attribute type 10 has an invalid length. [ 611.337057][T14842] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2247'. [ 611.690317][T14860] netlink: 'syz.3.2253': attribute type 10 has an invalid length. [ 611.693693][T14860] hsr_slave_0: left promiscuous mode [ 611.696011][T14860] hsr_slave_1: left promiscuous mode [ 611.712413][ T29] vhci_hcd: vhci_device speed not set [ 611.714490][T14861] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 611.717531][T14861] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 611.720736][T14861] vhci_hcd vhci_hcd.0: Device attached [ 611.839262][T14862] vhci_hcd: connection closed [ 611.839555][ T1187] vhci_hcd: stop threads [ 611.842636][ T1187] vhci_hcd: release socket [ 611.844526][ T1187] vhci_hcd: disconnect device [ 611.868676][T14869] random: crng reseeded on system resumption [ 611.902463][ T6074] vhci_hcd: vhci_device speed not set [ 612.175950][T14877] Bluetooth: MGMT ver 1.23 [ 612.276722][T14888] netlink: 372 bytes leftover after parsing attributes in process `syz.4.2260'. [ 613.075439][T14901] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 613.457554][T14921] input: syz1 as /devices/virtual/input/input183 [ 614.000891][T14931] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 614.003015][T14931] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 614.006545][T14931] vhci_hcd vhci_hcd.0: Device attached [ 614.242220][ T29] usb 39-1: new low-speed USB device number 15 using vhci_hcd [ 614.678327][T14932] vhci_hcd: connection reset by peer [ 614.680358][ T1187] vhci_hcd: stop threads [ 614.681938][ T1187] vhci_hcd: release socket [ 614.684487][ T1187] vhci_hcd: disconnect device [ 615.097547][T14942] iso9660: Unknown parameter '-}' [ 616.206281][T14964] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2279'. [ 616.209304][T14964] netlink: 'syz.3.2279': attribute type 5 has an invalid length. [ 616.211830][T14964] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2279'. [ 616.218469][T14964] geneve2: entered promiscuous mode [ 616.220168][T14964] geneve2: entered allmulticast mode [ 616.222840][T11178] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 256 - 0 [ 616.225928][T11178] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 256 - 0 [ 616.228644][T11178] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 256 - 0 [ 616.231365][T11178] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 256 - 0 [ 616.454396][T14973] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2286'. [ 616.457492][T14973] batadv_slave_0: entered promiscuous mode [ 616.761248][ T5991] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 616.765225][ T5991] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 616.770746][ T5991] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 616.777471][ T5991] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 616.783163][ T5991] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 616.816948][T14982] wlan0 speed is unknown, defaulting to 1000 [ 616.819623][T14982] vxcan1 speed is unknown, defaulting to 1000 [ 617.037261][T14982] chnl_net:caif_netlink_parms(): no params data found [ 617.137723][T14982] bridge0: port 1(bridge_slave_0) entered blocking state [ 617.140201][T14982] bridge0: port 1(bridge_slave_0) entered disabled state [ 617.142751][T14982] bridge_slave_0: entered allmulticast mode [ 617.145600][T14982] bridge_slave_0: entered promiscuous mode [ 617.148837][T14982] bridge0: port 2(bridge_slave_1) entered blocking state [ 617.151769][T14982] bridge0: port 2(bridge_slave_1) entered disabled state [ 617.154716][T14982] bridge_slave_1: entered allmulticast mode [ 617.157817][T14982] bridge_slave_1: entered promiscuous mode [ 617.191355][T14982] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 617.196867][T14982] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 617.231558][T14997] input: syz1 as /devices/virtual/input/input184 [ 617.248399][T14982] team0: Port device team_slave_0 added [ 617.252885][T14982] team0: Port device team_slave_1 added [ 617.284640][T14982] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 617.287483][T14982] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 617.297945][T14982] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 617.302716][T14982] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 617.304857][T14982] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 617.313346][T14982] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 617.353993][T14982] hsr_slave_0: entered promiscuous mode [ 617.356356][T14982] hsr_slave_1: entered promiscuous mode [ 617.756674][T15009] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2293'. [ 617.759574][T15009] netlink: 'syz.4.2293': attribute type 5 has an invalid length. [ 617.762323][T15009] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2293'. [ 617.786993][T14982] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 617.792275][T14982] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 617.796738][T14982] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 617.803310][T14982] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 617.821552][T14982] bridge0: port 2(bridge_slave_1) entered blocking state [ 617.823989][T14982] bridge0: port 2(bridge_slave_1) entered forwarding state [ 617.827413][T14982] bridge0: port 1(bridge_slave_0) entered blocking state [ 617.829697][T14982] bridge0: port 1(bridge_slave_0) entered forwarding state [ 617.849841][T14992] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 617.861626][T15009] geneve2: entered promiscuous mode [ 617.866080][T15009] geneve2: entered allmulticast mode [ 617.872372][T11178] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 256 - 0 [ 617.875917][T11178] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 256 - 0 [ 617.878916][T11178] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 256 - 0 [ 617.887634][T11178] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 256 - 0 [ 617.901800][T14982] 8021q: adding VLAN 0 to HW filter on device bond0 [ 617.911619][T11178] bridge0: port 1(bridge_slave_0) entered disabled state [ 617.915703][T11178] bridge0: port 2(bridge_slave_1) entered disabled state [ 617.930167][T14982] 8021q: adding VLAN 0 to HW filter on device team0 [ 617.942264][T11178] bridge0: port 1(bridge_slave_0) entered blocking state [ 617.944642][T11178] bridge0: port 1(bridge_slave_0) entered forwarding state [ 617.959059][T11178] bridge0: port 2(bridge_slave_1) entered blocking state [ 617.961384][T11178] bridge0: port 2(bridge_slave_1) entered forwarding state [ 617.994599][T15023] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 617.996761][T15023] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 617.999280][T15023] vhci_hcd vhci_hcd.0: Device attached [ 618.034975][T14982] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 618.038409][T14982] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 618.209823][T14982] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 618.263413][T14982] veth0_vlan: entered promiscuous mode [ 618.270920][T14982] veth1_vlan: entered promiscuous mode [ 618.306298][T14982] veth0_macvtap: entered promiscuous mode [ 618.313877][T14982] veth1_macvtap: entered promiscuous mode [ 618.331117][T14982] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 618.342043][ T6074] usb 41-1: new low-speed USB device number 21 using vhci_hcd [ 618.346038][T14982] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 618.360371][T11193] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 618.367889][T11193] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 618.374287][T11193] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 618.377104][T11193] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 618.455810][ T1153] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 618.458401][ T1153] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 618.485624][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 618.488226][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 618.595891][T15025] vhci_hcd: connection reset by peer [ 618.597843][ T12] vhci_hcd: stop threads [ 618.599300][ T12] vhci_hcd: release socket [ 618.601534][ T12] vhci_hcd: disconnect device [ 618.822227][ T5991] Bluetooth: hci0: command tx timeout [ 619.057286][T15048] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2300'. [ 619.060365][T15048] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 619.063830][T15048] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 619.068512][T15048] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2300'. [ 619.125465][T15049] fuse: Bad value for 'fd' [ 619.130891][ T7398] Process accounting resumed [ 619.481296][ T29] vhci_hcd: vhci_device speed not set [ 619.689782][T15063] < [ 619.848482][T15061] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 619.851768][T15067] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2308'. [ 619.856268][T15061] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 619.859909][T15061] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 619.873782][T15061] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 619.904225][T15065] random: crng reseeded on system resumption [ 620.768355][T15085] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2313'. [ 620.873309][T15087] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2312'. [ 620.937158][T15087] 8021q: adding VLAN 0 to HW filter on device team0 [ 620.989244][T15087] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 621.005138][T15088] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 621.083484][T15088] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 621.174020][T15088] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 621.297411][T15088] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 621.304098][T15095] input: syz1 as /devices/virtual/input/input185 [ 621.370507][T15097] Invalid ELF header magic: != ELF [ 621.442724][ T1153] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 621.453301][ T1153] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 621.459572][ T1153] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 621.493103][ T1153] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 621.545610][T15108] block nbd1: Attempted send on invalid socket [ 621.547669][T15108] blk_print_req_error: 5 callbacks suppressed [ 621.547679][T15108] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 621.554142][T15108] ADFS-fs (nbd1): error: unable to read block 3, try 0 [ 621.702513][ T5991] Bluetooth: hci4: command 0x0c1a tx timeout [ 621.861892][ T5991] Bluetooth: hci0: command 0x041b tx timeout [ 622.410679][T15120] input: syz1 as /devices/virtual/input/input186 [ 623.451910][ T6074] vhci_hcd: vhci_device speed not set [ 623.641831][T15146] genirq: Flags mismatch irq 4. 00200000 (pcmmio) vs. 00200080 (ttyS0) [ 623.941742][ T5991] Bluetooth: hci0: command 0x041b tx timeout [ 624.898553][T15172] : entered promiscuous mode [ 625.609319][ T40] audit: type=1326 audit(2000000051.792:8216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15182 comm="syz.2.2340" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce579 code=0x7ffc0000 [ 625.623174][T15185] overlayfs: failed to clone upperpath [ 625.628767][ T40] audit: type=1326 audit(2000000051.792:8217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15182 comm="syz.2.2340" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce579 code=0x7ffc0000 [ 625.630055][T15183] overlayfs: failed to get inode (-116) [ 625.641895][ T40] audit: type=1326 audit(2000000051.792:8218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15182 comm="syz.2.2340" exe="/syz-executor" sig=0 arch=40000003 syscall=354 compat=1 ip=0xf70ce579 code=0x7ffc0000 [ 625.642706][T15183] overlayfs: failed to look up (bus) for ino (-116) [ 625.664374][ T40] audit: type=1326 audit(2000000051.792:8219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15182 comm="syz.2.2340" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce579 code=0x7ffc0000 [ 625.671171][ T40] audit: type=1326 audit(2000000051.792:8220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15182 comm="syz.2.2340" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce579 code=0x7ffc0000 [ 625.691869][ T40] audit: type=1326 audit(2000000051.792:8221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15182 comm="syz.2.2340" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf70ce579 code=0x7ffc0000 [ 625.699650][ T40] audit: type=1326 audit(2000000051.792:8222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15182 comm="syz.2.2340" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce579 code=0x7ffc0000 [ 625.707729][ T40] audit: type=1326 audit(2000000051.792:8223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15182 comm="syz.2.2340" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce579 code=0x7ffc0000 [ 625.738218][ T40] audit: type=1326 audit(2000000051.792:8224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15182 comm="syz.2.2340" exe="/syz-executor" sig=0 arch=40000003 syscall=361 compat=1 ip=0xf70ce579 code=0x7ffc0000 [ 625.748387][ T40] audit: type=1326 audit(2000000051.792:8225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15182 comm="syz.2.2340" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce579 code=0x7ffc0000 [ 625.867137][T15206] input: syz1 as /devices/virtual/input/input187 [ 626.029060][ T5991] Bluetooth: hci0: command 0x041b tx timeout [ 626.035491][T15215] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2349'. [ 626.414160][T15236] macsec0: entered promiscuous mode [ 626.416362][T15236] macsec0: entered allmulticast mode [ 626.418556][T15236] veth1_macvtap: entered allmulticast mode [ 627.884871][T15263] overlayfs: failed to clone upperpath [ 628.101704][ T5991] Bluetooth: hci0: command 0x041b tx timeout [ 628.215919][T15276] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2365'. [ 628.220860][T15276] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2365'. [ 628.334899][ T1112] ata1.00: Read log 0x10 page 0x00 failed, Emask 0x1 [ 628.337679][ T1112] ata1: failed to read log page 10h (errno=-5) [ 628.340246][ T1112] ata1.00: exception Emask 0x1 SAct 0x200000 SErr 0x0 action 0x0 [ 628.425057][ T1112] ata1.00: irq_stat 0x40000000 [ 628.427224][ T1112] ata1.00: failed command: WRITE FPDMA QUEUED [ 628.429578][ T1112] ata1.00: cmd 61/00:a8:ce:ed:08/01:00:00:00:00/40 tag 21 ncq dma 131072 out [ 628.429578][ T1112] res 50/04:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error) [ 628.441126][ T1112] ata1.00: status: { DRDY } [ 628.442958][ T1112] ata1.00: error: { ABRT } [ 628.450499][ T1112] ata1.00: configured for UDMA/100 [ 628.452606][ T1112] ata1: EH complete [ 628.879344][T15293] wlan0 speed is unknown, defaulting to 1000 [ 628.882146][T15293] vxcan1 speed is unknown, defaulting to 1000 [ 628.901230][T15273] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2364'. [ 628.904157][T15273] netlink: 'syz.4.2364': attribute type 30 has an invalid length. [ 628.910623][T11193] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 628.914243][T11193] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 628.917213][T11193] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 628.919999][T11193] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 630.170809][T15319] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2376'. [ 630.181751][ T5991] Bluetooth: hci0: command 0x041b tx timeout [ 630.203891][T15319] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 631.112107][T15321] netlink: 'syz.4.2378': attribute type 1 has an invalid length. [ 631.146245][T15321] bond2: (slave geneve3): making interface the new active one [ 631.149701][T15321] bond2: (slave geneve3): Enslaving as an active interface with an up link [ 631.158484][T15321] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2378'. [ 631.161565][T11174] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 631.171339][T11174] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 631.174787][T11174] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 631.178111][T11174] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 631.372535][T15328] wlan0 speed is unknown, defaulting to 1000 [ 631.377507][T15328] vxcan1 speed is unknown, defaulting to 1000 [ 631.931472][ T5404] usb 8-1: new high-speed USB device number 58 using dummy_hcd [ 632.081293][ T5404] usb 8-1: Using ep0 maxpacket: 8 [ 632.084693][ T5404] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 632.088104][ T5404] usb 8-1: config 0 has no interfaces? [ 632.090938][ T5404] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 632.094933][ T5404] usb 8-1: config 0 has no interfaces? [ 632.098385][ T5404] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 632.102770][ T5404] usb 8-1: config 0 has no interfaces? [ 632.106840][ T5404] usb 8-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 632.110498][ T5404] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 632.113865][ T5404] usb 8-1: Product: syz [ 632.115735][ T5404] usb 8-1: Manufacturer: syz [ 632.118695][ T5404] usb 8-1: SerialNumber: syz [ 632.129138][ T5404] usb 8-1: config 0 descriptor?? [ 632.261363][ T5991] Bluetooth: hci0: command 0x041b tx timeout [ 632.476486][ T7398] usb 8-1: USB disconnect, device number 58 [ 632.731399][T15347] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 632.733680][T15347] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 632.955996][ T40] kauditd_printk_skb: 58 callbacks suppressed [ 632.956013][ T40] audit: type=1800 audit(2000000059.153:8284): pid=15375 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2393" name="SYSV00000000" dev="tmpfs" ino=4 res=0 errno=0 [ 634.152491][T15402] trusted_key: encrypted_key: insufficient parameters specified [ 634.587916][T15421] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2397'. [ 634.741191][ T5991] Bluetooth: hci0: command 0x041b tx timeout [ 634.743500][ T5991] Bluetooth: hci4: command 0x0c1a tx timeout [ 636.287100][T15448] No control pipe specified [ 636.347053][T15448] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2410'. [ 636.437054][T15461] wlan0 speed is unknown, defaulting to 1000 [ 636.440492][T15461] vxcan1 speed is unknown, defaulting to 1000 [ 636.517074][T15460] can: request_module (can-proto-3) failed. [ 636.801881][T15476] overlayfs: failed to clone upperpath [ 636.895079][ T6001] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 636.899697][T15480] overlayfs: failed to clone upperpath [ 637.283968][T15494] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 637.286060][T15494] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 637.290253][T15494] vhci_hcd vhci_hcd.0: Device attached [ 637.560965][ T6074] usb 43-1: new low-speed USB device number 8 using vhci_hcd [ 637.900603][T15495] vhci_hcd: connection reset by peer [ 637.902526][ T1187] vhci_hcd: stop threads [ 637.903938][ T1187] vhci_hcd: release socket [ 637.905723][ T1187] vhci_hcd: disconnect device [ 637.942724][T15507] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2425'. [ 637.945576][T15507] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2425'. [ 638.034386][ T6001] Bluetooth: hci4: unexpected event for opcode 0x1002 [ 638.614244][T15522] kvm: kvm [15521]: vcpu1, guest rIP: 0xfff0 Unhandled WRMSR(0x40000011) = 0x6 [ 639.392655][T15538] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2435'. [ 639.428927][T15540] input: syz1 as /devices/virtual/input/input189 [ 640.069632][T15576] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 640.745874][T15587] IPVS: length: 143 != 221208 [ 640.893427][T15592] Invalid logical block size (20480) [ 641.706021][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 642.037651][T15623] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2461'. [ 642.158350][T15626] CIFS mount error: No usable UNC path provided in device string! [ 642.158350][T15626] [ 642.162260][T15626] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 642.165935][T15626] overlayfs: overlapping lowerdir path [ 642.534859][ T5991] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 642.549546][ T5991] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 642.561868][ T5991] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 642.567396][ T5991] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 642.580329][ T5991] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 642.654808][T15650] netlink: 'syz.3.2468': attribute type 1 has an invalid length. [ 642.660849][ T6074] vhci_hcd: vhci_device speed not set [ 642.663396][T15641] wlan0 speed is unknown, defaulting to 1000 [ 642.666069][T15641] vxcan1 speed is unknown, defaulting to 1000 [ 642.889456][T15641] chnl_net:caif_netlink_parms(): no params data found [ 642.964684][T15641] bridge0: port 1(bridge_slave_0) entered blocking state [ 642.966957][T15641] bridge0: port 1(bridge_slave_0) entered disabled state [ 642.969368][T15641] bridge_slave_0: entered allmulticast mode [ 642.973449][T15641] bridge_slave_0: entered promiscuous mode [ 642.977484][T15641] bridge0: port 2(bridge_slave_1) entered blocking state [ 642.979767][T15641] bridge0: port 2(bridge_slave_1) entered disabled state [ 642.982363][T15641] bridge_slave_1: entered allmulticast mode [ 642.985034][T15641] bridge_slave_1: entered promiscuous mode [ 643.122426][T15641] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 643.127381][T15641] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 643.178985][T15641] team0: Port device team_slave_0 added [ 643.183973][T15641] team0: Port device team_slave_1 added [ 643.285746][T15641] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 643.288623][T15641] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 643.297540][T15641] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 643.302468][T15641] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 643.304773][T15641] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 643.312847][T15641] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 643.377472][T15662] FAULT_INJECTION: forcing a failure. [ 643.377472][T15662] name failslab, interval 1, probability 0, space 0, times 0 [ 643.382980][T15662] CPU: 3 UID: 0 PID: 15662 Comm: syz.1.2471 Not tainted syzkaller #0 PREEMPT(full) [ 643.382998][T15662] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 643.383005][T15662] Call Trace: [ 643.383010][T15662] [ 643.383014][T15662] dump_stack_lvl+0x16c/0x1f0 [ 643.383033][T15662] should_fail_ex+0x512/0x640 [ 643.383049][T15662] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 643.383064][T15662] should_failslab+0xc2/0x120 [ 643.383078][T15662] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 643.383092][T15662] ? getname_flags.part.0+0x4c/0x550 [ 643.383110][T15662] getname_flags.part.0+0x4c/0x550 [ 643.383128][T15662] getname_flags+0x93/0xf0 [ 643.383140][T15662] __ia32_sys_renameat2+0xc7/0x130 [ 643.383156][T15662] __do_fast_syscall_32+0x7c/0x3a0 [ 643.383173][T15662] do_fast_syscall_32+0x32/0x80 [ 643.383210][T15662] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 643.383226][T15662] RIP: 0023:0xf70ae579 [ 643.383235][T15662] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 643.383246][T15662] RSP: 002b:00000000f549e55c EFLAGS: 00000296 ORIG_RAX: 0000000000000161 [ 643.383258][T15662] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000080000100 [ 643.383265][T15662] RDX: 0000000000000006 RSI: 00000000800002c0 RDI: 0000000000000002 [ 643.383271][T15662] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 643.383277][T15662] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 643.383283][T15662] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 643.383297][T15662] [ 643.445588][ C3] vkms_vblank_simulate: vblank timer overrun [ 643.458976][T15641] hsr_slave_0: entered promiscuous mode [ 643.461567][T15641] hsr_slave_1: entered promiscuous mode [ 643.463667][T15641] debugfs: 'hsr0' already exists in 'hsr' [ 643.465521][T15641] Cannot create hsr debugfs directory [ 643.626191][T15670] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2474'. [ 643.712288][T15641] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 643.851295][T15641] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 643.923398][T15641] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 643.991712][T15641] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 644.164841][T15641] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 644.170755][T15641] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 644.176497][T15641] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 644.182800][T15641] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 644.247466][T15641] 8021q: adding VLAN 0 to HW filter on device bond0 [ 644.259677][T15641] 8021q: adding VLAN 0 to HW filter on device team0 [ 644.265700][ T1153] bridge0: port 1(bridge_slave_0) entered blocking state [ 644.268509][ T1153] bridge0: port 1(bridge_slave_0) entered forwarding state [ 644.276829][T11174] bridge0: port 2(bridge_slave_1) entered blocking state [ 644.279782][T11174] bridge0: port 2(bridge_slave_1) entered forwarding state [ 644.438414][T15641] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 644.466720][T15641] veth0_vlan: entered promiscuous mode [ 644.477615][T15641] veth1_vlan: entered promiscuous mode [ 644.505758][T15641] veth0_macvtap: entered promiscuous mode [ 644.511862][T15641] veth1_macvtap: entered promiscuous mode [ 644.528750][T15641] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 644.540044][T15641] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 644.547790][T11193] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 644.562891][T11193] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 644.572477][T11193] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 644.598084][T11193] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 644.657553][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 644.670586][ T6001] Bluetooth: hci3: command tx timeout [ 644.671421][T15695] fuse: Bad value for 'user_id' [ 644.674959][T15694] fuse: Bad value for 'user_id' [ 644.675277][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 644.675421][T15695] fuse: Bad value for 'user_id' [ 644.677343][T15694] fuse: Bad value for 'user_id' [ 644.732266][T11193] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 644.735560][T11193] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 645.138385][T15713] netlink: 100 bytes leftover after parsing attributes in process `syz.4.2479'. [ 645.553345][T15718] overlayfs: failed to resolve './file0': -2 [ 646.001669][T15742] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2486'. [ 646.120652][T15739] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 646.122763][T15739] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 646.125830][T15739] vhci_hcd vhci_hcd.0: Device attached [ 646.498927][T15748] netlink: 100 bytes leftover after parsing attributes in process `syz.1.2488'. [ 646.516408][T15748] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2488'. [ 646.591977][T15740] vhci_hcd: connection closed [ 646.595705][T11174] vhci_hcd: stop threads [ 646.600554][ T6074] usb 43-1: new low-speed USB device number 9 using vhci_hcd [ 646.608876][T11174] vhci_hcd: release socket [ 646.616302][T11174] vhci_hcd: disconnect device [ 646.780500][ T5991] Bluetooth: hci3: command tx timeout [ 646.851047][T15752] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 648.120410][T15776] wlan0 speed is unknown, defaulting to 1000 [ 648.124320][T15776] vxcan1 speed is unknown, defaulting to 1000 [ 648.581847][T15798] netlink: 'syz.4.2501': attribute type 4 has an invalid length. [ 648.585836][T15798] netlink: 14345 bytes leftover after parsing attributes in process `syz.4.2501'. [ 648.773842][T15806] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 648.776099][T15806] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 648.783883][T15806] vhci_hcd vhci_hcd.0: Device attached [ 648.820357][ T5991] Bluetooth: hci3: command 0x040f tx timeout [ 649.160430][ T29] usb 39-1: new low-speed USB device number 16 using vhci_hcd [ 649.478212][T15807] vhci_hcd: connection reset by peer [ 649.480821][ T12] vhci_hcd: stop threads [ 649.482631][ T12] vhci_hcd: release socket [ 649.484647][ T12] vhci_hcd: disconnect device [ 649.488388][T15815] random: crng reseeded on system resumption [ 649.820278][T15819] 9pnet: Could not find request transport: fa [ 650.709274][T15832] netlink: 108 bytes leftover after parsing attributes in process `syz.4.2510'. [ 650.793359][T15838] netlink: 'syz.4.2512': attribute type 10 has an invalid length. [ 650.796035][T15838] macvlan0: entered promiscuous mode [ 650.863883][T15840] wlan0 speed is unknown, defaulting to 1000 [ 650.866498][T15840] vxcan1 speed is unknown, defaulting to 1000 [ 650.900436][ T6001] Bluetooth: hci3: command 0x040f tx timeout [ 651.218690][T15846] netlink: 'syz.1.2515': attribute type 11 has an invalid length. [ 651.223304][T15846] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2515'. [ 651.503603][T15856] lo speed is unknown, defaulting to 1000 [ 651.505899][T15856] lo speed is unknown, defaulting to 1000 [ 651.511694][T15856] lo speed is unknown, defaulting to 1000 [ 651.546171][T15856] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 651.608656][T15856] lo speed is unknown, defaulting to 1000 [ 651.616260][T15856] lo speed is unknown, defaulting to 1000 [ 651.621308][T15856] lo speed is unknown, defaulting to 1000 [ 651.654807][T15856] lo speed is unknown, defaulting to 1000 [ 651.661409][T15856] lo speed is unknown, defaulting to 1000 [ 651.667528][T15856] lo speed is unknown, defaulting to 1000 [ 652.123014][ T6074] vhci_hcd: vhci_device speed not set [ 652.263164][T15863] input: syz1 as /devices/virtual/input/input190 [ 652.305634][T15865] FAULT_INJECTION: forcing a failure. [ 652.305634][T15865] name failslab, interval 1, probability 0, space 0, times 0 [ 652.309762][T15865] CPU: 0 UID: 0 PID: 15865 Comm: syz.1.2521 Not tainted syzkaller #0 PREEMPT(full) [ 652.309786][T15865] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 652.309797][T15865] Call Trace: [ 652.309804][T15865] [ 652.309811][T15865] dump_stack_lvl+0x16c/0x1f0 [ 652.309839][T15865] should_fail_ex+0x512/0x640 [ 652.309863][T15865] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 652.309886][T15865] should_failslab+0xc2/0x120 [ 652.309910][T15865] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 652.309931][T15865] ? getname_flags.part.0+0x4c/0x550 [ 652.309962][T15865] getname_flags.part.0+0x4c/0x550 [ 652.310005][T15865] getname_flags+0x93/0xf0 [ 652.310027][T15865] __ia32_sys_renameat2+0xd4/0x130 [ 652.310050][T15865] __do_fast_syscall_32+0x7c/0x3a0 [ 652.310074][T15865] do_fast_syscall_32+0x32/0x80 [ 652.310090][T15865] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 652.310104][T15865] RIP: 0023:0xf70ae579 [ 652.310113][T15865] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 652.310124][T15865] RSP: 002b:00000000f549e55c EFLAGS: 00000296 ORIG_RAX: 0000000000000161 [ 652.310135][T15865] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000080000100 [ 652.310142][T15865] RDX: 0000000000000006 RSI: 00000000800002c0 RDI: 0000000000000002 [ 652.310149][T15865] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 652.310155][T15865] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 652.310161][T15865] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 652.310175][T15865] [ 652.420241][T15871] wlan0 speed is unknown, defaulting to 1000 [ 652.422908][T15871] vxcan1 speed is unknown, defaulting to 1000 [ 652.616896][T15871] lo speed is unknown, defaulting to 1000 [ 652.880281][T15884] netlink: 100 bytes leftover after parsing attributes in process `syz.1.2522'. [ 652.980090][ T5991] Bluetooth: hci3: command 0x040f tx timeout [ 652.989579][T15885] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.2523'. [ 653.003005][T15885] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 653.316140][T15891] netlink: 348 bytes leftover after parsing attributes in process `syz.3.2525'. [ 653.639054][T15908] overlayfs: failed to clone upperpath [ 653.793866][T15915] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 654.270397][ T29] vhci_hcd: vhci_device speed not set [ 655.070126][ T5991] Bluetooth: hci3: command 0x040f tx timeout [ 656.255282][T15954] bond0: entered promiscuous mode [ 656.257906][T15954] bond0: left promiscuous mode [ 657.197487][T11193] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 657.313789][T15989] block nbd3: shutting down sockets [ 657.315121][T11193] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 657.357118][ T6001] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 657.364103][ T6001] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 657.368084][ T6001] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 657.373206][ T6001] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 657.377310][ T6001] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 657.403105][T11193] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 657.427668][T15990] wlan0 speed is unknown, defaulting to 1000 [ 657.431961][T15990] vxcan1 speed is unknown, defaulting to 1000 [ 657.484750][T11193] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 657.527373][T15990] lo speed is unknown, defaulting to 1000 [ 657.620431][T11193] bridge_slave_1: left allmulticast mode [ 657.622251][T11193] bridge_slave_1: left promiscuous mode [ 657.625739][T11193] bridge0: port 2(bridge_slave_1) entered disabled state [ 657.643678][T11193] bridge_slave_0: left allmulticast mode [ 657.646090][T11193] bridge_slave_0: left promiscuous mode [ 657.648510][T11193] bridge0: port 1(bridge_slave_0) entered disabled state [ 657.966782][T11193] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 657.972378][T11193] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 657.976109][T11193] bond0 (unregistering): Released all slaves [ 657.982942][T11193] bond1 (unregistering): Released all slaves [ 657.998615][T15990] chnl_net:caif_netlink_parms(): no params data found [ 658.065208][T16007] Bluetooth: MGMT ver 1.23 [ 658.086644][T15990] bridge0: port 1(bridge_slave_0) entered blocking state [ 658.088917][T16007] genirq: Flags mismatch irq 4. 00200000 (das16m1) vs. 00200080 (ttyS0) [ 658.088999][T15990] bridge0: port 1(bridge_slave_0) entered disabled state [ 658.093191][T16007] rdma_rxe: rxe_newlink: failed to add ipvlan1 [ 658.094981][T15990] bridge_slave_0: entered allmulticast mode [ 658.099479][T15990] bridge_slave_0: entered promiscuous mode [ 658.131325][T15990] bridge0: port 2(bridge_slave_1) entered blocking state [ 658.132845][T16009] input: syz1 as /devices/virtual/input/input192 [ 658.133652][T15990] bridge0: port 2(bridge_slave_1) entered disabled state [ 658.138763][T15990] bridge_slave_1: entered allmulticast mode [ 658.141933][T15990] bridge_slave_1: entered promiscuous mode [ 658.173184][T16011] overlayfs: failed to resolve './file0': -2 [ 658.182740][T15990] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 658.195871][T15990] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 658.258888][T15990] team0: Port device team_slave_0 added [ 658.264198][T15990] team0: Port device team_slave_1 added [ 658.315024][T15990] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 658.317929][T15990] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 658.328316][T15990] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 658.333078][T15990] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 658.335515][T15990] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 658.343702][T15990] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 658.412130][T11193] hsr_slave_0: left promiscuous mode [ 658.415482][T11193] hsr_slave_1: left promiscuous mode [ 658.418376][T11193] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 658.422312][T11193] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 658.425283][T11193] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 658.427636][T11193] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 658.456888][T11193] veth1_macvtap: left promiscuous mode [ 658.459203][T11193] veth0_macvtap: left promiscuous mode [ 659.114761][T11193] team0 (unregistering): Port device team_slave_1 removed [ 659.221028][T11193] team0 (unregistering): Port device team_slave_0 removed [ 659.462189][ T5991] Bluetooth: hci0: command tx timeout [ 660.072095][T15990] hsr_slave_0: entered promiscuous mode [ 660.074389][T15990] hsr_slave_1: entered promiscuous mode [ 660.081919][ T9] lo speed is unknown, defaulting to 1000 [ 660.085131][ T9] infiniband syz0: ib_query_port failed (-19) [ 660.297804][T15990] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 660.303761][T15990] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 660.308921][T15990] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 660.315706][T15990] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 660.382518][T15990] 8021q: adding VLAN 0 to HW filter on device bond0 [ 660.392748][T15990] 8021q: adding VLAN 0 to HW filter on device team0 [ 660.402073][T11186] bridge0: port 1(bridge_slave_0) entered blocking state [ 660.404378][T11186] bridge0: port 1(bridge_slave_0) entered forwarding state [ 660.412525][T11174] bridge0: port 2(bridge_slave_1) entered blocking state [ 660.414987][T11174] bridge0: port 2(bridge_slave_1) entered forwarding state [ 660.576605][T15990] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 660.743893][T15990] veth0_vlan: entered promiscuous mode [ 660.751815][T15990] veth1_vlan: entered promiscuous mode [ 660.781942][T15990] veth0_macvtap: entered promiscuous mode [ 660.788338][T15990] veth1_macvtap: entered promiscuous mode [ 660.802602][T15990] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 660.811800][T15990] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 660.824657][ T1187] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 660.828269][ T1187] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 660.835435][ T1187] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 660.838962][ T1187] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 660.896798][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 660.901261][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 660.924170][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 660.927547][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 661.178810][T16068] loop2: detected capacity change from 0 to 7 [ 661.186210][ C3] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 661.190232][ C3] buffer_io_error: 5 callbacks suppressed [ 661.190249][ C3] Buffer I/O error on dev loop2, logical block 0, async page read [ 661.196385][ C3] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 661.199719][ C3] Buffer I/O error on dev loop2, logical block 0, async page read [ 661.218964][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 661.222306][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 661.237581][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 661.240521][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 661.246956][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 661.250235][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 661.254483][ T6928] IPVS: starting estimator thread 0... [ 661.254482][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 661.254505][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 661.263687][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 661.266602][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 661.270991][T16068] ldm_validate_partition_table(): Disk read failed. [ 661.273458][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 661.276312][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 661.277710][T16071] input: syz1 as /devices/virtual/input/input193 [ 661.283096][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 661.286067][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 661.290611][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 661.293866][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 661.296874][T16068] Dev loop2: unable to read RDB block 0 [ 661.302227][T16068] loop2: unable to read partition table [ 661.304285][T16068] loop2: partition table beyond EOD, truncated [ 661.306535][T16068] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 661.369956][T16069] IPVS: using max 43 ests per chain, 103200 per kthread [ 661.497988][T16077] loop9: detected capacity change from 0 to 7 [ 661.504761][T16077] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 661.507284][T16077] loop9: partition table partially beyond EOD, truncated [ 661.511523][T16077] loop9: p1 size 2437361653 extends beyond EOD, truncated [ 661.540777][ T5991] Bluetooth: hci0: command tx timeout [ 662.400443][T16103] input: syz1 as /devices/virtual/input/input194 [ 662.513502][T16120] random: crng reseeded on system resumption [ 662.849371][T16138] cgroup2: Unknown parameter 'fowner<00000000004294967295' [ 663.053498][T16141] input: syz1 as /devices/virtual/input/input195 [ 663.166564][T16145] macsec1: entered promiscuous mode [ 663.171153][T16145] macsec1: entered allmulticast mode [ 663.356950][T16150] netlink: 'syz.5.2589': attribute type 3 has an invalid length. [ 663.361900][T16150] netlink: 'syz.5.2589': attribute type 1 has an invalid length. [ 663.365556][T16150] netlink: 220 bytes leftover after parsing attributes in process `syz.5.2589'. [ 663.474177][T16155] [ 663.475073][T16155] ===================================================== [ 663.477193][T16155] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected [ 663.479516][T16155] syzkaller #0 Not tainted [ 663.481117][T16155] ----------------------------------------------------- [ 663.484613][T16155] syz.2.2591/16155 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 663.487866][T16155] ffff88804bbba360 (&new->fa_lock){....}-{3:3}, at: kill_fasync+0x138/0x510 [ 663.491153][T16155] [ 663.491153][T16155] and this task is already holding: [ 663.493456][T16155] ffff888068dbb028 (&client->buffer_lock){....}-{3:3}, at: evdev_pass_values+0x10e/0x9b0 [ 663.496508][T16155] which would create a new lock dependency: [ 663.498817][T16155] (&client->buffer_lock){....}-{3:3} -> (&new->fa_lock){....}-{3:3} [ 663.501419][T16155] [ 663.501419][T16155] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 663.504368][T16155] (&dev->event_lock#2){..-.}-{3:3} [ 663.504390][T16155] [ 663.504390][T16155] ... which became SOFTIRQ-irq-safe at: [ 663.509009][T16155] lock_acquire+0x179/0x350 [ 663.510936][T16155] _raw_spin_lock_irqsave+0x3a/0x60 [ 663.513121][T16155] input_inject_event+0x9f/0x3b0 [ 663.515281][T16155] led_set_brightness+0x217/0x290 [ 663.517416][T16155] led_trigger_event+0xda/0x270 [ 663.519532][T16155] kbd_bh+0x21b/0x300 [ 663.521215][T16155] tasklet_action_common+0x284/0x400 [ 663.523485][T16155] handle_softirqs+0x219/0x8e0 [ 663.525685][T16155] __irq_exit_rcu+0x109/0x170 [ 663.527695][T16155] irq_exit_rcu+0x9/0x30 [ 663.529557][T16155] common_interrupt+0xbf/0xe0 [ 663.531813][T16155] asm_common_interrupt+0x26/0x40 [ 663.534208][T16155] bochs_primary_plane_helper_atomic_update+0x770/0xac0 [ 663.537200][T16155] drm_atomic_helper_commit_planes+0x954/0x1010 [ 663.539811][T16155] drm_atomic_helper_commit_tail+0x7f/0x110 [ 663.542295][T16155] commit_tail+0x35b/0x400 [ 663.544376][T16155] drm_atomic_helper_commit+0x2fd/0x380 [ 663.546555][T16155] drm_atomic_commit+0x231/0x300 [ 663.548608][T16155] drm_atomic_helper_dirtyfb+0x5fd/0x780 [ 663.550959][T16155] drm_fbdev_shmem_helper_fb_dirty+0x1c9/0x340 [ 663.553726][T16155] drm_fb_helper_damage_work+0x27b/0x5f0 [ 663.556296][T16155] process_one_work+0x9cf/0x1b70 [ 663.558407][T16155] worker_thread+0x6c8/0xf10 [ 663.560459][T16155] kthread+0x3c5/0x780 [ 663.562283][T16155] ret_from_fork+0x5d4/0x6f0 [ 663.564330][T16155] ret_from_fork_asm+0x1a/0x30 [ 663.566419][T16155] [ 663.566419][T16155] to a SOFTIRQ-irq-unsafe lock: [ 663.569245][T16155] (tasklist_lock){.+.+}-{3:3} [ 663.569283][T16155] [ 663.569283][T16155] ... which became SOFTIRQ-irq-unsafe at: [ 663.574895][T16155] ... [ 663.574906][T16155] lock_acquire+0x179/0x350 [ 663.578273][T16155] _raw_read_lock+0x5f/0x70 [ 663.580688][T16155] __do_wait+0x105/0x890 [ 663.582870][T16155] do_wait+0x21e/0x5a0 [ 663.584943][T16155] kernel_wait+0x9f/0x160 [ 663.586815][T16155] call_usermodehelper_exec_work+0xf1/0x170 [ 663.589193][T16155] process_one_work+0x9cf/0x1b70 [ 663.590976][T16155] worker_thread+0x6c8/0xf10 [ 663.592573][T16155] kthread+0x3c5/0x780 [ 663.594202][T16155] ret_from_fork+0x5d4/0x6f0 [ 663.596203][T16155] ret_from_fork_asm+0x1a/0x30 [ 663.598107][T16155] [ 663.598107][T16155] other info that might help us debug this: [ 663.598107][T16155] [ 663.601189][T16155] Chain exists of: [ 663.601189][T16155] &dev->event_lock#2 --> &client->buffer_lock --> tasklist_lock [ 663.601189][T16155] [ 663.606528][T16155] Possible interrupt unsafe locking scenario: [ 663.606528][T16155] [ 663.609870][T16155] CPU0 CPU1 [ 663.612056][T16155] ---- ---- [ 663.614324][T16155] lock(tasklist_lock); [ 663.616060][T16155] local_irq_disable(); [ 663.618771][T16155] lock(&dev->event_lock#2); [ 663.621888][T16155] lock(&client->buffer_lock); [ 663.625007][T16155] [ 663.626462][T16155] lock(&dev->event_lock#2); [ 663.628604][T16155] [ 663.628604][T16155] *** DEADLOCK *** [ 663.628604][T16155] [ 663.631908][T16155] 7 locks held by syz.2.2591/16155: [ 663.634020][T16155] #0: ffff888023368118 (&evdev->mutex){+.+.}-{4:4}, at: evdev_write+0x184/0x440 [ 663.637692][T16155] #1: ffff8880228b4230 (&dev->event_lock#2){..-.}-{3:3}, at: input_inject_event+0x9f/0x3b0 [ 663.642344][T16155] #2: ffffffff8e5c10a0 (rcu_read_lock){....}-{1:3}, at: input_inject_event+0xbb/0x3b0 [ 663.646035][T16155] #3: ffffffff8e5c10a0 (rcu_read_lock){....}-{1:3}, at: input_pass_values+0x80/0x880 [ 663.648937][T16155] #4: ffffffff8e5c10a0 (rcu_read_lock){....}-{1:3}, at: evdev_events+0x7b/0x390 [ 663.652422][T16155] #5: ffff888068dbb028 (&client->buffer_lock){....}-{3:3}, at: evdev_pass_values+0x10e/0x9b0 [ 663.656771][T16155] #6: ffffffff8e5c10a0 (rcu_read_lock){....}-{1:3}, at: kill_fasync+0x62/0x510 [ 663.660757][T16155] [ 663.660757][T16155] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 663.665008][T16155] -> (&dev->event_lock#2){..-.}-{3:3} { [ 663.666930][T16155] IN-SOFTIRQ-W at: [ 663.668645][T16155] lock_acquire+0x179/0x350 [ 663.671266][T16155] _raw_spin_lock_irqsave+0x3a/0x60 [ 663.673898][T16155] input_inject_event+0x9f/0x3b0 [ 663.676057][T16155] led_set_brightness+0x217/0x290 [ 663.678180][T16155] led_trigger_event+0xda/0x270 [ 663.680766][T16155] kbd_bh+0x21b/0x300 [ 663.682669][T16155] tasklet_action_common+0x284/0x400 [ 663.684923][T16155] handle_softirqs+0x219/0x8e0 [ 663.686976][T16155] __irq_exit_rcu+0x109/0x170 [ 663.689377][T16155] irq_exit_rcu+0x9/0x30 [ 663.691347][T16155] common_interrupt+0xbf/0xe0 [ 663.693498][T16155] asm_common_interrupt+0x26/0x40 [ 663.695661][T16155] bochs_primary_plane_helper_atomic_update+0x770/0xac0 [ 663.698401][T16155] drm_atomic_helper_commit_planes+0x954/0x1010 [ 663.700939][T16155] drm_atomic_helper_commit_tail+0x7f/0x110 [ 663.703361][T16155] commit_tail+0x35b/0x400 [ 663.705323][T16155] drm_atomic_helper_commit+0x2fd/0x380 [ 663.707854][T16155] drm_atomic_commit+0x231/0x300 [ 663.709988][T16155] drm_atomic_helper_dirtyfb+0x5fd/0x780 [ 663.712395][T16155] drm_fbdev_shmem_helper_fb_dirty+0x1c9/0x340 [ 663.714897][T16155] drm_fb_helper_damage_work+0x27b/0x5f0 [ 663.717535][T16155] process_one_work+0x9cf/0x1b70 [ 663.720142][T16155] worker_thread+0x6c8/0xf10 [ 663.722589][T16155] kthread+0x3c5/0x780 [ 663.724902][T16155] ret_from_fork+0x5d4/0x6f0 [ 663.727595][T16155] ret_from_fork_asm+0x1a/0x30 [ 663.730325][T16155] INITIAL USE at: [ 663.732019][T16155] lock_acquire+0x179/0x350 [ 663.734697][T16155] _raw_spin_lock_irqsave+0x3a/0x60 [ 663.737370][T16155] input_inject_event+0x9f/0x3b0 [ 663.740232][T16155] led_set_brightness+0x217/0x290 [ 663.743024][T16155] kbd_led_trigger_activate+0xcb/0x110 [ 663.746044][T16155] led_trigger_set+0x59a/0xc50 [ 663.748765][T16155] led_trigger_set_default+0x1e0/0x2e0 [ 663.751732][T16155] led_classdev_register_ext+0x7b8/0xa10 [ 663.754809][T16155] input_leds_connect+0x552/0x8e0 [ 663.757516][T16155] input_attach_handler.isra.0+0x173/0x250 [ 663.760590][T16155] input_register_device+0xab9/0x1180 [ 663.763507][T16155] atkbd_connect+0x5f8/0xa40 [ 663.766164][T16155] serio_driver_probe+0x7f/0xd0 [ 663.768902][T16155] really_probe+0x241/0xa90 [ 663.771509][T16155] __driver_probe_device+0x1de/0x440 [ 663.774418][T16155] driver_probe_device+0x4c/0x1b0 [ 663.777203][T16155] __driver_attach+0x283/0x580 [ 663.779955][T16155] bus_for_each_dev+0x13e/0x1d0 [ 663.782725][T16155] serio_handle_event+0x335/0xc30 [ 663.785563][T16155] process_one_work+0x9cf/0x1b70 [ 663.788357][T16155] worker_thread+0x6c8/0xf10 [ 663.790982][T16155] kthread+0x3c5/0x780 [ 663.793442][T16155] ret_from_fork+0x5d4/0x6f0 [ 663.796067][T16155] ret_from_fork_asm+0x1a/0x30 [ 663.798764][T16155] } [ 663.799897][T16155] ... key at: [] __key.7+0x0/0x40 [ 663.802874][T16155] -> (&client->buffer_lock){....}-{3:3} { [ 663.805322][T16155] INITIAL USE at: [ 663.806969][T16155] lock_acquire+0x179/0x350 [ 663.809521][T16155] _raw_spin_lock+0x2e/0x40 [ 663.811964][T16155] evdev_pass_values+0x10e/0x9b0 [ 663.814564][T16155] evdev_events+0x1bb/0x390 [ 663.817113][T16155] input_pass_values+0x74b/0x880 [ 663.819844][T16155] input_handle_event+0xf00/0x14d0 [ 663.821977][T16155] input_inject_event+0x1e8/0x3b0 [ 663.824001][T16155] evdev_write+0x2e1/0x440 [ 663.825919][T16155] vfs_write+0x2a0/0x11d0 [ 663.827790][T16155] ksys_write+0x1f8/0x250 [ 663.829674][T16155] __do_fast_syscall_32+0x7c/0x3a0 [ 663.831769][T16155] do_fast_syscall_32+0x32/0x80 [ 663.833879][T16155] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 663.836385][T16155] } [ 663.837207][T16155] ... key at: [] __key.1+0x0/0x40 [ 663.839463][T16155] ... acquired at: [ 663.840701][T16155] _raw_spin_lock+0x2e/0x40 [ 663.842199][T16155] evdev_pass_values+0x10e/0x9b0 [ 663.843829][T16155] evdev_events+0x1bb/0x390 [ 663.845358][T16155] input_pass_values+0x74b/0x880 [ 663.846965][T16155] input_handle_event+0xf00/0x14d0 [ 663.848649][T16155] input_inject_event+0x1e8/0x3b0 [ 663.850311][T16155] evdev_write+0x2e1/0x440 [ 663.851791][T16155] vfs_write+0x2a0/0x11d0 [ 663.853298][T16155] ksys_write+0x1f8/0x250 [ 663.854898][T16155] __do_fast_syscall_32+0x7c/0x3a0 [ 663.856747][T16155] do_fast_syscall_32+0x32/0x80 [ 663.858584][T16155] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 663.860910][T16155] [ 663.861681][T16155] [ 663.861681][T16155] the dependencies between the lock to be acquired [ 663.861687][T16155] and SOFTIRQ-irq-unsafe lock: [ 663.865913][T16155] -> (tasklist_lock){.+.+}-{3:3} { [ 663.867595][T16155] HARDIRQ-ON-R at: [ 663.868905][T16155] lock_acquire+0x179/0x350 [ 663.870959][T16155] _raw_read_lock+0x5f/0x70 [ 663.873021][T16155] __do_wait+0x105/0x890 [ 663.874987][T16155] do_wait+0x21e/0x5a0 [ 663.876868][T16155] kernel_wait+0x9f/0x160 [ 663.878797][T16155] call_usermodehelper_exec_work+0xf1/0x170 [ 663.881250][T16155] process_one_work+0x9cf/0x1b70 [ 663.883412][T16155] worker_thread+0x6c8/0xf10 [ 663.885451][T16155] kthread+0x3c5/0x780 [ 663.887374][T16155] ret_from_fork+0x5d4/0x6f0 [ 663.889458][T16155] ret_from_fork_asm+0x1a/0x30 [ 663.891561][T16155] SOFTIRQ-ON-R at: [ 663.892877][T16155] lock_acquire+0x179/0x350 [ 663.894943][T16155] _raw_read_lock+0x5f/0x70 [ 663.896985][T16155] __do_wait+0x105/0x890 [ 663.898941][T16155] do_wait+0x21e/0x5a0 [ 663.900845][T16155] kernel_wait+0x9f/0x160 [ 663.902802][T16155] call_usermodehelper_exec_work+0xf1/0x170 [ 663.905262][T16155] process_one_work+0x9cf/0x1b70 [ 663.907422][T16155] worker_thread+0x6c8/0xf10 [ 663.909484][T16155] kthread+0x3c5/0x780 [ 663.911406][T16155] ret_from_fork+0x5d4/0x6f0 [ 663.913475][T16155] ret_from_fork_asm+0x1a/0x30 [ 663.915628][T16155] INITIAL USE at: [ 663.916927][T16155] lock_acquire+0x179/0x350 [ 663.918944][T16155] _raw_write_lock_irq+0x36/0x50 [ 663.921099][T16155] copy_process+0x4caf/0x7690 [ 663.923124][T16155] kernel_clone+0xfc/0x930 [ 663.925131][T16155] user_mode_thread+0xc7/0x110 [ 663.927199][T16155] rest_init+0x23/0x2b0 [ 663.929312][T16155] start_kernel+0x3ee/0x4d0 [ 663.931565][T16155] x86_64_start_reservations+0x18/0x30 [ 663.934075][T16155] x86_64_start_kernel+0x130/0x190 [ 663.936290][T16155] common_startup_64+0x13e/0x148 [ 663.938407][T16155] INITIAL READ USE at: [ 663.939871][T16155] lock_acquire+0x179/0x350 [ 663.942022][T16155] _raw_read_lock+0x5f/0x70 [ 663.944352][T16155] __do_wait+0x105/0x890 [ 663.946435][T16155] do_wait+0x21e/0x5a0 [ 663.948485][T16155] kernel_wait+0x9f/0x160 [ 663.950616][T16155] call_usermodehelper_exec_work+0xf1/0x170 [ 663.953281][T16155] process_one_work+0x9cf/0x1b70 [ 663.955630][T16155] worker_thread+0x6c8/0xf10 [ 663.957792][T16155] kthread+0x3c5/0x780 [ 663.959906][T16155] ret_from_fork+0x5d4/0x6f0 [ 663.962181][T16155] ret_from_fork_asm+0x1a/0x30 [ 663.964566][T16155] } [ 663.965451][T16155] ... key at: [] tasklist_lock+0x18/0x40 [ 663.967923][T16155] ... acquired at: [ 663.969214][T16155] _raw_read_lock+0x5f/0x70 [ 663.970711][T16155] send_sigurg+0xed/0xc80 [ 663.972165][T16155] sk_send_sigurg+0x76/0x360 [ 663.973682][T16155] unix_stream_sendmsg+0xfa5/0x1340 [ 663.975417][T16155] ____sys_sendmsg+0xa95/0xc70 [ 663.976987][T16155] ___sys_sendmsg+0x134/0x1d0 [ 663.978549][T16155] __sys_sendmsg+0x16d/0x220 [ 663.980102][T16155] __do_fast_syscall_32+0x7c/0x3a0 [ 663.981778][T16155] do_fast_syscall_32+0x32/0x80 [ 663.983387][T16155] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 663.985499][T16155] [ 663.986266][T16155] -> (&f_owner->lock){....}-{3:3} { [ 663.987885][T16155] INITIAL USE at: [ 663.989178][T16155] lock_acquire+0x179/0x350 [ 663.991150][T16155] _raw_write_lock_irq+0x36/0x50 [ 663.993222][T16155] __f_setown+0x61/0x3c0 [ 663.995325][T16155] fcntl_dirnotify+0x7b1/0xb60 [ 663.997468][T16155] do_fcntl+0xe62/0x15a0 [ 663.999434][T16155] do_compat_fcntl64+0x367/0x710 [ 664.001531][T16155] __do_fast_syscall_32+0x7c/0x3a0 [ 664.003705][T16155] do_fast_syscall_32+0x32/0x80 [ 664.005783][T16155] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 664.008303][T16155] INITIAL READ USE at: [ 664.009732][T16155] lock_acquire+0x179/0x350 [ 664.011860][T16155] _raw_read_lock_irqsave+0x74/0x90 [ 664.014162][T16155] send_sigio+0x31/0x3e0 [ 664.016238][T16155] kill_fasync+0x214/0x510 [ 664.018527][T16155] lease_break_callback+0x23/0x30 [ 664.021068][T16155] __break_lease+0x671/0x1810 [ 664.023333][T16155] vfs_truncate+0x4d3/0x6e0 [ 664.025392][T16155] __ia32_compat_sys_truncate+0x171/0x1e0 [ 664.027906][T16155] __do_fast_syscall_32+0x7c/0x3a0 [ 664.030566][T16155] do_fast_syscall_32+0x32/0x80 [ 664.032778][T16155] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 664.035455][T16155] } [ 664.036291][T16155] ... key at: [] __key.1+0x0/0x40 [ 664.038572][T16155] ... acquired at: [ 664.039857][T16155] _raw_read_lock_irqsave+0x74/0x90 [ 664.041583][T16155] send_sigio+0x31/0x3e0 [ 664.043017][T16155] kill_fasync+0x214/0x510 [ 664.044522][T16155] lease_break_callback+0x23/0x30 [ 664.046156][T16155] __break_lease+0x671/0x1810 [ 664.047698][T16155] vfs_truncate+0x4d3/0x6e0 [ 664.049212][T16155] __ia32_compat_sys_truncate+0x171/0x1e0 [ 664.051079][T16155] __do_fast_syscall_32+0x7c/0x3a0 [ 664.052750][T16155] do_fast_syscall_32+0x32/0x80 [ 664.054370][T16155] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 664.056408][T16155] [ 664.057175][T16155] -> (&new->fa_lock){....}-{3:3} { [ 664.058830][T16155] INITIAL USE at: [ 664.060121][T16155] lock_acquire+0x179/0x350 [ 664.062029][T16155] _raw_write_lock_irq+0x36/0x50 [ 664.064067][T16155] fasync_remove_entry+0xb2/0x1e0 [ 664.066151][T16155] fasync_helper+0xaf/0xd0 [ 664.068045][T16155] lease_modify+0x232/0x500 [ 664.069991][T16155] generic_setlease+0x348/0x1300 [ 664.072021][T16155] kernel_setlease+0x106/0x140 [ 664.073989][T16155] vfs_setlease+0x258/0x2d0 [ 664.075938][T16155] fcntl_setlease+0x497/0x5a0 [ 664.077891][T16155] do_fcntl+0x751/0x15a0 [ 664.079781][T16155] do_compat_fcntl64+0x367/0x710 [ 664.081844][T16155] __do_fast_syscall_32+0x7c/0x3a0 [ 664.083916][T16155] do_fast_syscall_32+0x32/0x80 [ 664.085946][T16155] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 664.088429][T16155] INITIAL READ USE at: [ 664.089813][T16155] lock_acquire+0x179/0x350 [ 664.091860][T16155] _raw_read_lock_irqsave+0x74/0x90 [ 664.094099][T16155] kill_fasync+0x138/0x510 [ 664.096153][T16155] lease_break_callback+0x23/0x30 [ 664.098353][T16155] __break_lease+0x671/0x1810 [ 664.100497][T16155] vfs_truncate+0x4d3/0x6e0 [ 664.102529][T16155] __ia32_compat_sys_truncate+0x171/0x1e0 [ 664.105178][T16155] __do_fast_syscall_32+0x7c/0x3a0 [ 664.107379][T16155] do_fast_syscall_32+0x32/0x80 [ 664.109667][T16155] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 664.112265][T16155] } [ 664.113089][T16155] ... key at: [] __key.0+0x0/0x40 [ 664.115341][T16155] ... acquired at: [ 664.116632][T16155] lock_acquire+0x179/0x350 [ 664.118257][T16155] _raw_read_lock_irqsave+0x74/0x90 [ 664.119997][T16155] kill_fasync+0x138/0x510 [ 664.121498][T16155] evdev_pass_values+0x619/0x9b0 [ 664.123135][T16155] evdev_events+0x1bb/0x390 [ 664.124674][T16155] input_pass_values+0x74b/0x880 [ 664.126292][T16155] input_handle_event+0xf00/0x14d0 [ 664.127979][T16155] input_inject_event+0x1e8/0x3b0 [ 664.129663][T16155] evdev_write+0x2e1/0x440 [ 664.131141][T16155] vfs_write+0x2a0/0x11d0 [ 664.132590][T16155] ksys_write+0x1f8/0x250 [ 664.134032][T16155] __do_fast_syscall_32+0x7c/0x3a0 [ 664.135751][T16155] do_fast_syscall_32+0x32/0x80 [ 664.137344][T16155] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 664.139433][T16155] [ 664.140226][T16155] [ 664.140226][T16155] stack backtrace: [ 664.142063][T16155] CPU: 1 UID: 0 PID: 16155 Comm: syz.2.2591 Not tainted syzkaller #0 PREEMPT(full) [ 664.142076][T16155] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 664.142084][T16155] Call Trace: [ 664.142089][T16155] [ 664.142094][T16155] dump_stack_lvl+0x116/0x1f0 [ 664.142110][T16155] check_irq_usage+0x7dc/0x920 [ 664.142124][T16155] ? tracing_record_taskinfo_sched_switch+0x54/0x400 [ 664.142142][T16155] ? check_path.constprop.0+0x24/0x50 [ 664.142157][T16155] ? __lock_acquire+0x12bc/0x1ce0 [ 664.142170][T16155] __lock_acquire+0x12bc/0x1ce0 [ 664.142185][T16155] lock_acquire+0x179/0x350 [ 664.142199][T16155] ? kill_fasync+0x138/0x510 [ 664.142216][T16155] _raw_read_lock_irqsave+0x74/0x90 [ 664.142229][T16155] ? kill_fasync+0x138/0x510 [ 664.142244][T16155] kill_fasync+0x138/0x510 [ 664.142259][T16155] evdev_pass_values+0x619/0x9b0 [ 664.142271][T16155] evdev_events+0x1bb/0x390 [ 664.142283][T16155] input_pass_values+0x74b/0x880 [ 664.142294][T16155] input_handle_event+0xf00/0x14d0 [ 664.142304][T16155] ? _copy_from_user+0x59/0xd0 [ 664.142322][T16155] input_inject_event+0x1e8/0x3b0 [ 664.142334][T16155] evdev_write+0x2e1/0x440 [ 664.142344][T16155] ? __pfx_evdev_write+0x10/0x10 [ 664.142354][T16155] ? common_file_perm+0x1a9/0x340 [ 664.142368][T16155] ? bpf_lsm_file_permission+0x9/0x10 [ 664.142384][T16155] ? security_file_permission+0x71/0x210 [ 664.142399][T16155] ? rw_verify_area+0xcf/0x6c0 [ 664.142410][T16155] ? __pfx_evdev_write+0x10/0x10 [ 664.142419][T16155] vfs_write+0x2a0/0x11d0 [ 664.142433][T16155] ? __pfx_vfs_write+0x10/0x10 [ 664.142444][T16155] ? find_held_lock+0x2b/0x80 [ 664.142454][T16155] ? __fget_files+0x204/0x3c0 [ 664.142466][T16155] ? __fget_files+0x20e/0x3c0 [ 664.142479][T16155] ksys_write+0x1f8/0x250 [ 664.142491][T16155] ? __pfx_ksys_write+0x10/0x10 [ 664.142507][T16155] ? rcu_is_watching+0x12/0xc0 [ 664.142519][T16155] __do_fast_syscall_32+0x7c/0x3a0 [ 664.142534][T16155] do_fast_syscall_32+0x32/0x80 [ 664.142548][T16155] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 664.142562][T16155] RIP: 0023:0xf712e579 [ 664.142571][T16155] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 664.142582][T16155] RSP: 002b:00000000f551e55c EFLAGS: 00000296 ORIG_RAX: 0000000000000004 [ 664.142593][T16155] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000040 [ 664.142600][T16155] RDX: 0000000000001068 RSI: 0000000000000000 RDI: 0000000000000000 [ 664.142606][T16155] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 664.142613][T16155] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 664.142619][T16155] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 664.142629][T16155] [ 664.235238][ T5991] Bluetooth: hci0: command tx timeout [ 664.480422][T11193] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 664.484741][T11193] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 664.488922][T11193] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 664.709952][T11193] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 664.714286][T11193] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 664.718543][T11193] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 664.827085][T11193] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 664.830368][T11193] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 664.833569][T11193] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 664.887475][T11193] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 664.891027][T11193] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 664.894382][T11193] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 665.062550][T11193] bond2 (unregistering): (slave geneve3): Releasing active interface [ 665.431251][T11193] bond1 (unregistering): Released all slaves [ 665.437175][T11193] bond0 (unregistering): Released all slaves [ 665.443688][T11193] bond2 (unregistering): Released all slaves [ 665.533184][T11193] : left promiscuous mode [ 665.674243][T11193] IPVS: stopping backup sync thread 12078 ... [ 665.884144][T11193] veth1_macvtap: left allmulticast mode [ 665.886670][T11193] veth0_macvtap: left allmulticast mode [ 667.319594][T11193] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 667.323009][T11193] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 667.404178][T11193] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 667.407476][T11193] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 667.487408][T11193] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 667.490789][T11193] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 667.547654][T11193] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 667.551185][T11193] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 667.640820][T11193] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 667.693600][T11193] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 667.742297][T11193] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 667.782447][T11193] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 667.845151][T11193] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 667.923937][T11193] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 667.964165][T11193] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 668.015475][T11193] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 668.115777][T11193] bridge_slave_1: left allmulticast mode [ 668.118211][T11193] bridge_slave_1: left promiscuous mode [ 668.121013][T11193] bridge0: port 2(bridge_slave_1) entered disabled state [ 668.125254][T11193] bridge_slave_0: left allmulticast mode [ 668.127625][T11193] bridge_slave_0: left promiscuous mode [ 668.130542][T11193] bridge0: port 1(bridge_slave_0) entered disabled state [ 668.133934][T11193] bridge_slave_1: left allmulticast mode [ 668.135725][T11193] bridge_slave_1: left promiscuous mode [ 668.137499][T11193] bridge0: port 2(bridge_slave_1) entered disabled state [ 668.141312][T11193] bridge0: port 1(bridge_slave_0) entered disabled state [ 668.202078][T11193] bond0 (unregistering): (slave ip6gre1): Releasing backup interface [ 668.204962][T11193] ip6gre1 (unregistering): left promiscuous mode [ 668.480757][T11193] bond0 (unregistering): Released all slaves [ 668.484716][T11193] bond1 (unregistering): Released all slaves [ 668.567595][T11193] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 668.571357][T11193] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 668.574626][T11193] bond0 (unregistering): Released all slaves [ 668.655562][T11193] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 668.659067][T11193] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 668.662385][T11193] bond0 (unregistering): Released all slaves [ 668.750517][T11193] : left promiscuous mode [ 668.820547][T11193] tipc: Left network mode [ 669.350009][T11193] hsr_slave_0: left promiscuous mode [ 669.352513][T11193] hsr_slave_1: left promiscuous mode [ 669.355029][T11193] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 669.358037][T11193] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 669.361582][T11193] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 669.364580][T11193] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 669.370520][T11193] hsr_slave_0: left promiscuous mode [ 669.373228][T11193] hsr_slave_1: left promiscuous mode [ 669.376661][T11193] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 669.379903][T11193] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 669.383389][T11193] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 669.386531][T11193] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 669.396142][T11193] veth1_macvtap: left promiscuous mode [ 669.398530][T11193] veth0_macvtap: left promiscuous mode [ 669.401061][T11193] veth1_vlan: left promiscuous mode [ 669.403290][T11193] veth0_vlan: left promiscuous mode [ 669.406719][T11193] veth1_macvtap: left promiscuous mode [ 669.409017][T11193] veth0_macvtap: left promiscuous mode [ 669.411806][T11193] veth1_vlan: left promiscuous mode [ 669.414177][T11193] veth0_vlan: left promiscuous mode [ 669.630844][T11193] team0 (unregistering): Port device macvlan1 removed [ 670.026767][T11193] team0 (unregistering): Port device team_slave_1 removed [ 670.650365][T11193] team0 (unregistering): Port device team_slave_1 removed [ 670.689156][T11193] team0 (unregistering): Port device team_slave_0 removed [ 670.997699][T11193] team0 (unregistering): Port device team_slave_1 removed [ 671.040091][T11193] team0 (unregistering): Port device team_slave_0 removed [ 672.034020][T11193] IPVS: stop unused estimator thread 0... [ 672.036685][T11193] IPVS: stop unused estimator thread 0... VM DIAGNOSIS: 09:24:17 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000000 RBX=ffffffff93d78440 RCX=ffffffff81c2ebdf RDX=0000000000000000 RSI=ffffffff8c162c80 RDI=ffffffff8c162cc0 RBP=0000000000000000 RSP=ffffc90004ebf540 R8 =0000000000000000 R9 =fffffbfff2157052 R10=ffffffff90ab8297 R11=0000000000000000 R12=0000000000000001 R13=ffff888025972440 R14=ffff88802b23a440 R15=ffff8880136c68c0 RIP=ffffffff81a1d98b RFL=00000092 [--S-A--] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff8880974c3000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000008003e018 CR3=0000000049be2000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000ff ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4e4f4954504f5f4e 4153410063657865 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=000000000000002d RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85617045 RDI=ffffffff9b0f9700 RBP=ffffffff9b0f96c0 RSP=ffffc90004f0f2f0 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=2d2d2d2d2d2d2d2d R12=0000000000000000 R13=000000000000002d R14=ffffffff9b0f96c0 R15=ffffffff85616fe0 RIP=ffffffff8561706f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff8880975c3000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000002e419ffc CR3=000000004ba78000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 b1a8b814e040bded a5bbb3d067d9375d ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 111eac9fd4fc4205 00f22b90e8737236 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 c15ce378bd0af8b1 df80b6316452075b ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 25b0864b28cfcadc ad1f5f27fa650ac9 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000400 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000040 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 03420000086d0000 000001d20194b7c8 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 826b0000bd140000 f6500000feac0000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 26f400000194b31b 000002420194b2ec ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0194be540194bebd fe8e00000194b0ed ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 b514b231c442daa1 6e32d75dedfbd3f8 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ccc33adacecd7c5e fe32aac3a7c33f33 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a54ff53a3c6ef372 bb67ae856a09e667 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5be0cd191f83d9ab 9b05688c510e527f ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 EAX=f6cb0f18 EBX=ffffffff ECX=815ed133 EDX=ffffffff ESI=815ed133 EDI=00000000 EBP=f6cb0f20 ESP=ff81dd00 EIP=f70eef9d EFL=00000246 [---Z-P-] CPL=3 II=0 A20=1 SMM=0 HLT=0 ES =002b 00000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0023 00000000 ffffffff 00c0fb00 DPL=3 CS32 [-RA] SS =002b 00000000 ffffffff 00c0f300 DPL=3 DS [-WA] DS =002b 00000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 00000000 ffffffff 00c00000 GS =0063 56afa440 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 00000000 ffffffff 00c00000 TR =0040 00091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000555bc2521000 CR3=00000000619a8000 CR4=00352ef0 DR0=000000005ffffffd DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000600 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000ff ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4e4f4954504f5f4e 4153410063657865 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=00000000000003df RBX=ffff88804fdf3800 RCX=ffffffff892d216d RDX=1ffff11009fbe705 RSI=0000000000000001 RDI=0000000000000001 RBP=0000000000000001 RSP=ffffc90004d8fb00 R8 =0000000000000006 R9 =0000000000000000 R10=0000000000001000 R11=0000000000000003 R12=0000000000001000 R13=ffff888021272000 R14=0000000000000000 R15=ffff88804fdf3818 RIP=ffffffff81bb03e8 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880977c3000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000331edff8 CR3=00000000619a8000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000ff ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4e4f4954504f5f4e 4153410063657865 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000