last executing test programs: 25m57.429143402s ago: executing program 2 (id=585): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, 0x0, &(0x7f0000000500)='sysfs\x00', 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = socket(0xa, 0x3, 0xff) setsockopt$inet6_int(r0, 0x29, 0x3, &(0x7f0000000040)=0x7, 0x4) syz_emit_ethernet(0x3e, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0) syz_80211_inject_frame(&(0x7f0000000780)=@broadcast, &(0x7f00000027c0)=ANY=[], 0x132c) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000000)='3', 0x4e) r2 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x80001) move_mount(r2, 0x0, 0xffffffffffffffff, 0x0, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x145091, 0x0) 25m55.329567938s ago: executing program 2 (id=590): write(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$rtl8150(0xffffffffffffffff, 0x0, 0x0) ioctl$I2C_RDWR(0xffffffffffffffff, 0x707, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) gettid() timer_create(0x0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)={0x44, 0x2, 0x6, 0x3, 0x0, 0x0, {0xd}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x44}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) write(r0, &(0x7f0000000200)='2', 0x1) 25m53.264222282s ago: executing program 2 (id=592): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r0, &(0x7f00000000c0)='7', 0x1) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) 25m52.7277005s ago: executing program 2 (id=594): socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f00000000c0)={'veth1_to_team\x00'}) fanotify_init(0x200, 0x800) r0 = memfd_create(&(0x7f0000000500)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x1c\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\x83\x11\v}k+\xeb\xc3\xc0O\xae\xd2\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb901nEy\x82\x83\x80\xd3O\x00|hP\x00\x00\x00\x00\x00\x00\x00\x05\x86\xfe\xd9\xa5\xc6\nSy\xa3N\xba-]\'q\xc6\xfb\x02\x9a\xa9Z\xa8\x80Bx\xbd74\xcf\"\xa5\xea$\x95\xfd\x06T\xef\x89\xe4j\x06\xdc\x15\xe7\xc3\xb5H\xf7\xdc\xee\x182\xab\xe2?\"\xbewm\x9d\xd8x\xd92\xeeS/\xd2\xcd[\x9dcO1\xcb\x12lZ$\xa7\x9d\xf8b\xf6}\xc5``\xfe0\x8a\'v-\x99`?\x97\x8c\xdd\xd6\xfa\xa2\x06>\xf3\xe2uI\xe65C\xdb\x84\xe6eU\xe8RK\xd6=s\xcd\x9d\x1f#3\xc5\x16\xd0\xbbD\xc5\xde\xc8/\v\xa5W\xbep\x87\x15\x10\xcdm\xa7\x93\x01\x1c,9V8\xdc\xfd\xb7\xc0\xfc\x04\x00p\xad\x12\xb2\xbf\xfbFZ\x1a\f\x99\x05\xe4\x1eP\xed\x87\x89\xbeo\xfbv\xb6\x8a\xee\xf6Oc8\xaf\x11[\xc3\x98w-\xf0\xb2z\xc7\xaf;\x92\xad4\x1b\x92L\x97<\xbdh\x80\xf2\xc0\xd0n)K\xf2#Ncp\xe4\xb4\xfb\x94\x18\xc2-TWA\x13\xfe\xea\xad\v\xc4\xa5\x02\xf9\xed]\xf4\\\x01\xab\xdc\xb6\xcdP\x93\xf2\xc3\x96\xf2\xc0\xd6-x\xd5\xd6\xc7\x9d\xa5\x1f\xd2t\xd7\x8f}b\x9749\xd4a7\x18\xe0\x91KV7[\xb8\x8dL\xc8\xc8\x8f>sbE\xf5\xa7\xdb|\xb0m\x16c\x84\r\"\xf2\x92s\xeb\xaf\x1c\x00\xf4\x8dL\xa5\x10\x89FB\xfb8\xf9\x9d\xcbm\x1c\x91\xe9fd$5\xdc\xad\xec\xef\x90\xd9\xefX\xd2m\x9e\xec\x94w\xb3\xf9\xd9\x0eu-z\x81\xbb\xa6\xc0\x00\xa1\xd9\xcbI\xda\xa3\b\x9e@\xb8\xc8k\xdeQ/\xb8X\x9c\xff4Np~\xc4\xc1_\x1c#zX\a\xd41\x1c\x7fH\x91\xd9k\x05\x1f\n\b\b\x88\xd6\xcf4i\xa0B\xe7\x9c\x9c\xe6\xcax\xca\xa1E#6\xe9\xf31W\xd0\x1bY3/\x00I#\xfa\xb0\f\xd5!\x9fR[\x0e\xdb`\xdb\x82M\'k\x16(\xfa\xc2\xec\x96e\\Q\xe9\x19\xe1u\x86\xcb\xc3\xb0\xb8\x19\xb9l\x1fk!R\xb1P\x8b\xda\xffE\x89\x97\n\x17m\xd10\x1a\xe7Qz\xd8\bi\x8dRw+\xa1^N\xaf\x1b\x1dg\x8f$\xbe\x93\x8d\x8b\xfd\r\xee<\x84\x95\x82)TH\xcac9\x98\x13WW@;\xb4\xd5\x0f\xa1\xb3xX(\x80\xe8\x89\xed e.\xe04\xba\x9c=\xc6\x04\f\xbf\x06\xce5\xf99GD8@\xd2\r\xd0\xdf@\xe3\xbe\"qq#]\x86W\tA\xa7\x91\x85\xae\x9c\x8dO\xa6\xa3\xf9i\x83\xc5\xa8C\x164\xef\xa4\\\a\xaa%\x94!3k]\xd5\xbe\'U\xf17', 0x1) r1 = dup(r0) execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x4000, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r2, &(0x7f0000000000)='3', 0x4e) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./lower\x00', 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000200)='./mnt\x00', 0x0, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) name_to_handle_at(r4, 0x0, 0x0, 0x0, 0x1000) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000600)=ANY=[@ANYBLOB="8000"], 0x0) 25m51.892343219s ago: executing program 0 (id=597): setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4001}) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000080)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0xac140001}}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) r2 = socket$inet_sctp(0x2, 0x1, 0x84) bind(r2, &(0x7f0000000000)=@in={0x2, 0x3210, @rand_addr=0xac140001}, 0x10) listen(r2, 0x5) write$tun(r0, 0x0, 0x4a) 25m51.613891157s ago: executing program 2 (id=598): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x8001, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, 0x0) r3 = open_tree(0xffffffffffffffff, &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x21, 0x2, 0x10000000000002) connect$rxrpc(r5, &(0x7f0000000100)=@in4={0x21, 0x80, 0x2, 0x10, {0x2, 0x8003, @multicast2}}, 0x24) sendmmsg(r5, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="100000001001000001"], 0x10, 0xe000}, 0x5}], 0x1, 0x0) recvmmsg(r5, &(0x7f0000002940)=[{{0x0, 0xffffffffffffff0a, 0x0}, 0x2}], 0xf000, 0x10002, 0x0) openat(r3, &(0x7f0000000900)='./sys_sec/tomoyo/domain_policy\x00', 0xa2001, 0x108) 25m50.944648118s ago: executing program 1 (id=599): openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000400)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) preadv(r1, 0x0, 0x0, 0x4, 0xfffffffe) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r2 = syz_open_dev$usbmon(0x0, 0x4, 0x0) syz_open_dev$usbfs(0x0, 0x20000007e, 0x16d782) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN_LIVE(0xa, 0x0, 0x0) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r2, 0xf507, 0x0) bpf$MAP_CREATE(0x100000000000000, 0x0, 0x48) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x401, 0x0) write(r3, &(0x7f0000000180)='p:s/p ./file0:0', 0xf) openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing/events/s/p/enable\x00', 0x1, 0x0) 25m49.995096659s ago: executing program 1 (id=601): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wlan0\x00'}) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 25m49.781022038s ago: executing program 1 (id=602): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="002281"], 0x0}, 0x0) syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) syz_usb_connect(0x4, 0x61, &(0x7f0000000ac0)={{0x12, 0x1, 0x110, 0x52, 0xae, 0x8f, 0xff, 0x19d2, 0x137, 0x1d3f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x4f, 0x3, 0x2, 0x7, 0x90, 0x8, "", [{{0x9, 0x4, 0xa0, 0x5, 0x0, 0xc7, 0xa6, 0x14, 0x10}}, {{0x9, 0x4, 0xab, 0xfd, 0x4, 0xff, 0x1, 0x3, 0x4, [], [{{0x9, 0x5, 0x2, 0x0, 0x8, 0x6, 0xff, 0x2}}, {{0x9, 0x5, 0x80, 0x0, 0x10, 0xc, 0x6, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x40, 0xd}]}}, {{0x9, 0x5, 0xc, 0x0, 0x40, 0x8, 0x7f, 0x5}}, {{0x9, 0x5, 0x4, 0x8, 0x3ff, 0x3, 0xe, 0x81}}]}}, {{0x9, 0x4, 0x79, 0x7, 0x0, 0xff, 0x4, 0x3f, 0x6}}]}}]}}, &(0x7f00000021c0)={0x0, 0x0, 0xc, &(0x7f0000001f00)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x14, 0x2, 0x4, 0xe77}]}}) r1 = syz_open_dev$hidraw(&(0x7f0000000080), 0x1, 0x202) ioctl$HIDIOCSFEATURE(r1, 0xc0404806, &(0x7f0000000180)) syz_usb_control_io(r0, 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 25m49.50669765s ago: executing program 2 (id=604): r0 = socket(0x1e, 0x1, 0x0) connect$tipc(r0, &(0x7f0000000040)=@name={0x1e, 0x2, 0x3, {{0x40, 0x2}, 0x2}}, 0x10) syz_open_dev$vim2m(0x0, 0x1, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000280)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() lseek(0xffffffffffffffff, 0x1fd, 0x3) sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r5, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x0, 0x4, 0x1ff}}) ioctl$TIOCL_PASTESEL(r5, 0x541c, &(0x7f0000000000)) 25m47.559620414s ago: executing program 1 (id=605): r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'wlan0\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r3, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000000)={0x3c, r4, 0xb97534d5fe9704cf, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x580}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 25m47.165302455s ago: executing program 1 (id=606): socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f00000000c0)={'veth1_to_team\x00'}) fanotify_init(0x200, 0x800) r0 = memfd_create(&(0x7f0000000500)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x1c\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\x83\x11\v}k+\xeb\xc3\xc0O\xae\xd2\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb901nEy\x82\x83\x80\xd3O\x00|hP\x00\x00\x00\x00\x00\x00\x00\x05\x86\xfe\xd9\xa5\xc6\nSy\xa3N\xba-]\'q\xc6\xfb\x02\x9a\xa9Z\xa8\x80Bx\xbd74\xcf\"\xa5\xea$\x95\xfd\x06T\xef\x89\xe4j\x06\xdc\x15\xe7\xc3\xb5H\xf7\xdc\xee\x182\xab\xe2?\"\xbewm\x9d\xd8x\xd92\xeeS/\xd2\xcd[\x9dcO1\xcb\x12lZ$\xa7\x9d\xf8b\xf6}\xc5``\xfe0\x8a\'v-\x99`?\x97\x8c\xdd\xd6\xfa\xa2\x06>\xf3\xe2uI\xe65C\xdb\x84\xe6eU\xe8RK\xd6=s\xcd\x9d\x1f#3\xc5\x16\xd0\xbbD\xc5\xde\xc8/\v\xa5W\xbep\x87\x15\x10\xcdm\xa7\x93\x01\x1c,9V8\xdc\xfd\xb7\xc0\xfc\x04\x00p\xad\x12\xb2\xbf\xfbFZ\x1a\f\x99\x05\xe4\x1eP\xed\x87\x89\xbeo\xfbv\xb6\x8a\xee\xf6Oc8\xaf\x11[\xc3\x98w-\xf0\xb2z\xc7\xaf;\x92\xad4\x1b\x92L\x97<\xbdh\x80\xf2\xc0\xd0n)K\xf2#Ncp\xe4\xb4\xfb\x94\x18\xc2-TWA\x13\xfe\xea\xad\v\xc4\xa5\x02\xf9\xed]\xf4\\\x01\xab\xdc\xb6\xcdP\x93\xf2\xc3\x96\xf2\xc0\xd6-x\xd5\xd6\xc7\x9d\xa5\x1f\xd2t\xd7\x8f}b\x9749\xd4a7\x18\xe0\x91KV7[\xb8\x8dL\xc8\xc8\x8f>sbE\xf5\xa7\xdb|\xb0m\x16c\x84\r\"\xf2\x92s\xeb\xaf\x1c\x00\xf4\x8dL\xa5\x10\x89FB\xfb8\xf9\x9d\xcbm\x1c\x91\xe9fd$5\xdc\xad\xec\xef\x90\xd9\xefX\xd2m\x9e\xec\x94w\xb3\xf9\xd9\x0eu-z\x81\xbb\xa6\xc0\x00\xa1\xd9\xcbI\xda\xa3\b\x9e@\xb8\xc8k\xdeQ/\xb8X\x9c\xff4Np~\xc4\xc1_\x1c#zX\a\xd41\x1c\x7fH\x91\xd9k\x05\x1f\n\b\b\x88\xd6\xcf4i\xa0B\xe7\x9c\x9c\xe6\xcax\xca\xa1E#6\xe9\xf31W\xd0\x1bY3/\x00I#\xfa\xb0\f\xd5!\x9fR[\x0e\xdb`\xdb\x82M\'k\x16(\xfa\xc2\xec\x96e\\Q\xe9\x19\xe1u\x86\xcb\xc3\xb0\xb8\x19\xb9l\x1fk!R\xb1P\x8b\xda\xffE\x89\x97\n\x17m\xd10\x1a\xe7Qz\xd8\bi\x8dRw+\xa1^N\xaf\x1b\x1dg\x8f$\xbe\x93\x8d\x8b\xfd\r\xee<\x84\x95\x82)TH\xcac9\x98\x13WW@;\xb4\xd5\x0f\xa1\xb3xX(\x80\xe8\x89\xed e.\xe04\xba\x9c=\xc6\x04\f\xbf\x06\xce5\xf99GD8@\xd2\r\xd0\xdf@\xe3\xbe\"qq#]\x86W\tA\xa7\x91\x85\xae\x9c\x8dO\xa6\xa3\xf9i\x83\xc5\xa8C\x164\xef\xa4\\\a\xaa%\x94!3k]\xd5\xbe\'U\xf17', 0x1) r1 = dup(r0) execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x4000, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r2, &(0x7f0000000000)='3', 0x4e) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./lower\x00', 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000200)='./mnt\x00', 0x0, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) name_to_handle_at(r4, 0x0, 0x0, 0x0, 0x1000) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000600)=ANY=[@ANYBLOB="8000"], 0x0) 25m46.809860762s ago: executing program 1 (id=607): r0 = socket(0x1e, 0x1, 0x0) connect$tipc(r0, &(0x7f0000000040)=@name={0x1e, 0x2, 0x3, {{0x40, 0x2}, 0x2}}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$vim2m(0x0, 0x1, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000280)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() lseek(0xffffffffffffffff, 0x1fd, 0x3) sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r5, 0x541c, 0x0) ioctl$TCSETS2(r5, 0x402c542b, 0x0) ioctl$TIOCL_PASTESEL(r5, 0x541c, &(0x7f0000000000)) 25m46.571855809s ago: executing program 0 (id=609): socket$inet6_mptcp(0xa, 0x1, 0x106) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000200), 0x20000, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="010000004200000006000000080000", @ANYRES32=0x1, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) 25m40.094317177s ago: executing program 0 (id=612): openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000400)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) preadv(r1, 0x0, 0x0, 0x4, 0xfffffffe) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r2 = syz_open_dev$usbmon(0x0, 0x4, 0x0) syz_open_dev$usbfs(0x0, 0x20000007e, 0x16d782) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN_LIVE(0xa, 0x0, 0x0) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r2, 0xf507, 0x0) bpf$MAP_CREATE(0x100000000000000, 0x0, 0x48) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000800000/0x1000)=nil, 0x1000, 0x5, 0x12, r3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x401, 0x0) write(r4, &(0x7f0000000180)='p:s/p ./file0:0', 0xf) openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing/events/s/p/enable\x00', 0x1, 0x0) 25m39.583601844s ago: executing program 3 (id=614): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x34, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x17}]}}}]}]}], {0x14}}, 0xcc}}, 0x4000040) syz_emit_ethernet(0xfef3, &(0x7f0000000200)={@local, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x64, 0x11, 0x0, @remote, @local, {[], {0x4e20, 0xe22, 0x64, 0x0, @wg=@response={0x2, 0x1, 0x100004, "628e0960f6d6d3f6ee6d6b84b345dccac643e7df3e526ff07833b291322d4a74", "882ed6741e7632daeaec0c95f2ad1cd6", {"8fb3d9fd3efe8e4ea8b5ec7448ddd6a3", "215990e1b896120966af96b22cf049f0"}}}}}}}}, 0x0) 25m39.332265017s ago: executing program 0 (id=615): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x8001, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r3 = open_tree(0xffffffffffffffff, &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x21, 0x2, 0x10000000000002) connect$rxrpc(r5, &(0x7f0000000100)=@in4={0x21, 0x80, 0x2, 0x10, {0x2, 0x8003, @multicast2}}, 0x24) sendmmsg(r5, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="100000001001000001"], 0x10, 0xe000}, 0x5}], 0x1, 0x0) recvmmsg(r5, &(0x7f0000002940)=[{{0x0, 0xffffffffffffff0a, 0x0}, 0x2}], 0xf000, 0x10002, 0x0) openat(r3, &(0x7f0000000900)='./sys_sec/tomoyo/domain_policy\x00', 0xa2001, 0x108) 25m39.192731403s ago: executing program 3 (id=616): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_MATCH_INFO={0x4}, @NFTA_MATCH_NAME={0xb, 0x1, 'socket\x00'}, @NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x84}, 0x1, 0x0, 0x0, 0x24044800}, 0x0) 25m39.007341713s ago: executing program 3 (id=617): openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000400)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) preadv(r1, 0x0, 0x0, 0x4, 0xfffffffe) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r2 = syz_open_dev$usbmon(0x0, 0x4, 0x0) syz_open_dev$usbfs(0x0, 0x20000007e, 0x16d782) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN_LIVE(0xa, 0x0, 0x0) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r2, 0xf507, 0x0) bpf$MAP_CREATE(0x100000000000000, 0x0, 0x48) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x50) mmap(&(0x7f0000800000/0x1000)=nil, 0x1000, 0x5, 0x12, r3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x401, 0x0) write(r4, &(0x7f0000000180)='p:s/p ./file0:0', 0xf) openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing/events/s/p/enable\x00', 0x1, 0x0) 25m38.757157406s ago: executing program 3 (id=618): openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000400)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) preadv(r1, 0x0, 0x0, 0x4, 0xfffffffe) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r2 = syz_open_dev$usbmon(0x0, 0x4, 0x0) syz_open_dev$usbfs(0x0, 0x20000007e, 0x16d782) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN_LIVE(0xa, 0x0, 0x0) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r2, 0xf507, 0x0) bpf$MAP_CREATE(0x100000000000000, 0x0, 0x48) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x401, 0x0) write(r3, &(0x7f0000000180)='p:s/p ./file0:0', 0xf) openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing/events/s/p/enable\x00', 0x1, 0x0) 25m38.582471066s ago: executing program 3 (id=619): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x8001, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r3 = open_tree(0xffffffffffffffff, &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x21, 0x2, 0x10000000000002) connect$rxrpc(r5, &(0x7f0000000100)=@in4={0x21, 0x80, 0x2, 0x10, {0x2, 0x8003, @multicast2}}, 0x24) sendmmsg(r5, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f0000002940)=[{{0x0, 0xffffffffffffff0a, 0x0}, 0x2}], 0xf000, 0x10002, 0x0) openat(r3, &(0x7f0000000900)='./sys_sec/tomoyo/domain_policy\x00', 0xa2001, 0x108) 25m37.538279529s ago: executing program 0 (id=620): openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000400)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) preadv(r1, 0x0, 0x0, 0x4, 0xfffffffe) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r2 = syz_open_dev$usbmon(0x0, 0x4, 0x0) syz_open_dev$usbfs(0x0, 0x20000007e, 0x16d782) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN_LIVE(0xa, 0x0, 0x0) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r2, 0xf507, 0x0) bpf$MAP_CREATE(0x100000000000000, 0x0, 0x48) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000800000/0x1000)=nil, 0x1000, 0x5, 0x12, r3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x401, 0x0) write(r4, &(0x7f0000000180)='p:s/p ./file0:0', 0xf) openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing/events/s/p/enable\x00', 0x1, 0x0) 25m37.03672788s ago: executing program 0 (id=621): r0 = socket(0x1e, 0x1, 0x0) connect$tipc(r0, &(0x7f0000000040)=@name={0x1e, 0x2, 0x3, {{0x40, 0x2}, 0x2}}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$vim2m(0x0, 0x1, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000280)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() lseek(0xffffffffffffffff, 0x1fd, 0x3) sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r5, 0x541c, 0x0) ioctl$TCSETS2(r5, 0x402c542b, 0x0) ioctl$TIOCL_PASTESEL(r5, 0x541c, &(0x7f0000000000)) 25m33.519940249s ago: executing program 32 (id=604): r0 = socket(0x1e, 0x1, 0x0) connect$tipc(r0, &(0x7f0000000040)=@name={0x1e, 0x2, 0x3, {{0x40, 0x2}, 0x2}}, 0x10) syz_open_dev$vim2m(0x0, 0x1, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000280)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() lseek(0xffffffffffffffff, 0x1fd, 0x3) sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r5, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x0, 0x4, 0x1ff}}) ioctl$TIOCL_PASTESEL(r5, 0x541c, &(0x7f0000000000)) 25m30.033114718s ago: executing program 33 (id=607): r0 = socket(0x1e, 0x1, 0x0) connect$tipc(r0, &(0x7f0000000040)=@name={0x1e, 0x2, 0x3, {{0x40, 0x2}, 0x2}}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$vim2m(0x0, 0x1, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000280)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() lseek(0xffffffffffffffff, 0x1fd, 0x3) sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r5, 0x541c, 0x0) ioctl$TCSETS2(r5, 0x402c542b, 0x0) ioctl$TIOCL_PASTESEL(r5, 0x541c, &(0x7f0000000000)) 25m24.276899677s ago: executing program 3 (id=624): socket$inet6_mptcp(0xa, 0x1, 0x106) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000200), 0x20000, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="010000004200000006000000080000", @ANYRES32=0x1, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) 25m20.832363297s ago: executing program 34 (id=621): r0 = socket(0x1e, 0x1, 0x0) connect$tipc(r0, &(0x7f0000000040)=@name={0x1e, 0x2, 0x3, {{0x40, 0x2}, 0x2}}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$vim2m(0x0, 0x1, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000280)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() lseek(0xffffffffffffffff, 0x1fd, 0x3) sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r5, 0x541c, 0x0) ioctl$TCSETS2(r5, 0x402c542b, 0x0) ioctl$TIOCL_PASTESEL(r5, 0x541c, &(0x7f0000000000)) 25m9.164996386s ago: executing program 35 (id=624): socket$inet6_mptcp(0xa, 0x1, 0x106) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000200), 0x20000, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="010000004200000006000000080000", @ANYRES32=0x1, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) 8.69901354s ago: executing program 7 (id=4783): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000300)={0x6, {{0x2, 0x0, @multicast2}}}, 0xe7) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, 0x0, 0x0) r1 = userfaultfd(0x1) ioctl$UFFDIO_COPY(r1, 0xc028aa05, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110c230000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) syz_init_net_socket$x25(0x9, 0x5, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x4, 0xf, 0x80000006}, 0x0, 0x0) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f00000005c0)={0x6, {{0x2, 0x4e23, @multicast2}}, 0x1, 0x1, [{{0x2, 0x4e24, @multicast2}}]}, 0x10c) r4 = socket$inet6_udp(0xa, 0x2, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x15}}, 0x6}, 0x1c) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000180)='veth0_macvtap\x00', 0x10) r6 = fcntl$dupfd(r5, 0x0, r5) sendmsg$TIPC_NL_NAME_TABLE_GET(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x4040011) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, 0x0, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r6, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x90}, 0x8080) close_range(r4, 0xffffffffffffffff, 0x0) 8.675677383s ago: executing program 6 (id=4784): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) openat$dir(0xffffffffffffff9c, &(0x7f0000000400)='./file0/file1\x00', 0x40, 0x83) umount2(&(0x7f00000001c0)='./file0\x00', 0x1) pipe2$9p(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84080) mount$9p_fd(0x0, 0x0, &(0x7f0000000540), 0x200080, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x9) close(r2) r3 = epoll_create1(0x80000) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000480), 0x0, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@debug={'debug', 0x3d, 0xb}}, {@access_client}, {@noextend}, {@fscache}, {@cache_readahead}, {@noxattr}]}}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/devices.allow\x00', 0x2, 0x48) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000600)={0xa}) 7.767978952s ago: executing program 6 (id=4786): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB]) openat$dir(0xffffffffffffff9c, &(0x7f0000000400)='./file0/file1\x00', 0x40, 0x83) umount2(&(0x7f00000001c0)='./file0\x00', 0x1) pipe2$9p(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84080) mount$9p_fd(0x0, 0x0, &(0x7f0000000540), 0x200080, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x9) close(r3) r4 = epoll_create1(0x80000) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000480), 0x0, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@debug={'debug', 0x3d, 0xb}}, {@access_client}, {@noextend}, {@fscache}, {@cache_readahead}, {@noxattr}]}}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/devices.allow\x00', 0x2, 0x48) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000600)={0xa}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r6, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) futex_waitv(&(0x7f0000000180)=[{0x0, &(0x7f0000000000), 0x2}, {0x3, &(0x7f0000000040)=0x3, 0x2}], 0x2, 0x0, 0x0, 0x0) futex(&(0x7f0000000140)=0x2, 0x5, 0x0, 0x0, &(0x7f0000000000), 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) mmap(&(0x7f0000ff2000/0xd000)=nil, 0xd000, 0x2000004, 0x4001011, r7, 0x34da2000) syslog(0x2, &(0x7f00000001c0)=""/229, 0xe5) syslog(0x9, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) 7.552169459s ago: executing program 4 (id=4787): r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) read(r0, &(0x7f0000000100)=""/6, 0x6) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="1800000025000101"], 0x18}, 0x1, 0x0, 0x0, 0x4048957}, 0x28040) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@ipv6_newrule={0x44, 0x1a, 0x1, 0x0, 0x25dfdbfe, {0xa, 0x0, 0x14, 0x0, 0xa, 0x0, 0x0, 0x7}, [@FRA_SRC={0x14, 0x2, @local}, @FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'ip6gre0\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd63"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) ioctl$BTRFS_IOC_ENCODED_WRITE(r0, 0x40789440, &(0x7f00000003c0)={&(0x7f0000000380)=[{&(0x7f0000000240)="29bee972f18d7340a6f150ffee07f92a0f3318af7ee31eeed0a23e4217ba07a1a39d336e152ac7bb53be945ea696cb0bbbbb87858dbdfa5e928be100b9db49f59c101b3942c144529b80a7", 0x4b}, {0x0}], 0x2, 0xaa94, 0x0, 0x7, 0x7f, 0xff, 0x8, 0x5}) r4 = socket(0x10, 0x3, 0x0) r5 = socket(0x10, 0x3, 0x4) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'bridge_slave_0\x00'}) sendmmsg(r4, &(0x7f0000000000), 0x400000000000235, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000080)={0x5, 0x13, 0x6, 0x103, 0xff, "10120dfe0ef7f0220000ff490a0080002a0008"}) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f0000000040)=0xa) r6 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi2\x00', 0x1, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, r7}, 0x50) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0x10, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r8}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r9}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r10, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) ioctl$COMEDI_DEVINFO(r6, 0x80b06401, &(0x7f0000000180)) 7.300402038s ago: executing program 7 (id=4788): openat$sndseq(0xffffff9c, &(0x7f0000000000), 0x0) mkdir(&(0x7f0000000000)='./sys\x00', 0x1ff) r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f0000000000)={0xffffffff, 0x0, 0x1, 0x7}) mount(0x0, &(0x7f00000001c0)='./sys/bus/pci/devices/0000:00:1d.0/remove\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r1 = fsopen(&(0x7f0000000180)='ecryptfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r2 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSRS485(r2, 0x5437, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/pci/devices/0000:00:1d.0/remove\x00', 0x1, 0x0) r4 = fsopen(&(0x7f0000000240)='btrfs\x00', 0x1) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$audio1(0xffffff9c, &(0x7f0000000200), 0x561080, 0x0) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r5, 0x0) syz_emit_ethernet(0xaa, &(0x7f0000000340)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x74, 0x6, 0x0, @dev={0xfe, 0x80, '\x00', 0x3b}, @local, {[@dstopts={0x2f, 0x2, '\x00', [@padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x2}, @pad1]}, @srh={0x1, 0x6, 0x4, 0x3, 0x5, 0x8, 0x1, [@ipv4={'\x00', '\xff\xff', @remote}, @ipv4={'\x00', '\xff\xff', @loopback}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}]}, @hopopts={0xdf, 0x0, '\x00', [@pad1]}], {{0x0, 0x4622, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x0, 0x0, 0x1}}}}}}}, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) write(r3, &(0x7f0000000400)='1', 0x1) writev(r3, &(0x7f0000000a40)=[{&(0x7f0000000040)="9de24dfccd00", 0x6}], 0x1) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0xe8381, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) ioctl$KVM_GET_CLOCK(r3, 0x8030ae7c, &(0x7f0000000140)) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) ioctl$KVM_SET_IRQCHIP(r7, 0x4048aec9, &(0x7f0000000980)={0x1, 0x0, @ioapic={0xfee00, 0x2968, 0x4, 0x3, 0x0, [{0x98, 0x37, 0x84, '\x00', 0x7f}, {0x41, 0x8, 0x30, '\x00', 0xf5}, {0xe9, 0x1, 0x9, '\x00', 0x51}, {0x7, 0x9, 0x3, '\x00', 0x8f}, {0x3, 0x7f, 0x91, '\x00', 0xa}, {0xf, 0xe3, 0x8, '\x00', 0xaa}, {0x6, 0x8, 0x6, '\x00', 0x8}, {0x1, 0x3, 0x8, '\x00', 0x67}, {0x0, 0x7, 0xa, '\x00', 0x8}, {0x8, 0x81, 0x13, '\x00', 0x9f}, {0xf, 0x8, 0x8, '\x00', 0x3}, {0x3, 0x4c, 0x3, '\x00', 0xa}, {0x1e, 0x6, 0x3, '\x00', 0xa6}, {0x8, 0x0, 0x8, '\x00', 0x9}, {0x2, 0x4c, 0xa2, '\x00', 0x1}, {0x8, 0x5e, 0x4, '\x00', 0x3}, {0x5, 0xa0, 0x47, '\x00', 0x4}, {0x7, 0x3, 0x2, '\x00', 0xa7}, {0x5, 0x0, 0xf, '\x00', 0x7}, {0x5e, 0xa, 0xa}, {0x7f, 0x6, 0x7, '\x00', 0x4}, {0x93, 0x44, 0x9, '\x00', 0x10}, {0x2, 0x8, 0x2}, {0x6, 0xc, 0x3, '\x00', 0x8}]}}) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x10, 0x7fff0000}]}) close_range(r8, 0xffffffffffffffff, 0x0) 7.125579447s ago: executing program 4 (id=4789): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e79"]) openat$dir(0xffffffffffffff9c, &(0x7f0000000400)='./file0/file1\x00', 0x40, 0x83) umount2(&(0x7f00000001c0)='./file0\x00', 0x1) pipe2$9p(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84080) mount$9p_fd(0x0, 0x0, &(0x7f0000000540), 0x200080, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x9) close(r3) r4 = epoll_create1(0x80000) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000480), 0x0, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@debug={'debug', 0x3d, 0xb}}, {@access_client}, {@noextend}, {@fscache}, {@cache_readahead}, {@noxattr}]}}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/devices.allow\x00', 0x2, 0x48) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000600)={0xa}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r6, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) futex_waitv(&(0x7f0000000180)=[{0x0, &(0x7f0000000000), 0x2}, {0x3, &(0x7f0000000040)=0x3, 0x2}], 0x2, 0x0, 0x0, 0x0) futex(&(0x7f0000000140)=0x2, 0x5, 0x0, 0x0, &(0x7f0000000000), 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) mmap(&(0x7f0000ff2000/0xd000)=nil, 0xd000, 0x2000004, 0x4001011, r7, 0x34da2000) syslog(0x2, &(0x7f00000001c0)=""/229, 0xe5) syslog(0x9, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) 6.396433654s ago: executing program 7 (id=4790): openat$sndseq(0xffffff9c, &(0x7f0000000000), 0x0) mkdir(&(0x7f0000000000)='./sys\x00', 0x1ff) r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f0000000000)={0xffffffff, 0x0, 0x1, 0x7}) mount(0x0, &(0x7f00000001c0)='./sys/bus/pci/devices/0000:00:1d.0/remove\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r1 = fsopen(&(0x7f0000000180)='ecryptfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r2 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSRS485(r2, 0x5437, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/pci/devices/0000:00:1d.0/remove\x00', 0x1, 0x0) r4 = fsopen(&(0x7f0000000240)='btrfs\x00', 0x1) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$audio1(0xffffff9c, &(0x7f0000000200), 0x561080, 0x0) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r5, 0x0) syz_emit_ethernet(0xaa, &(0x7f0000000340)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x74, 0x6, 0x0, @dev={0xfe, 0x80, '\x00', 0x3b}, @local, {[@dstopts={0x2f, 0x2, '\x00', [@padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x2}, @pad1]}, @srh={0x1, 0x6, 0x4, 0x3, 0x5, 0x8, 0x1, [@ipv4={'\x00', '\xff\xff', @remote}, @ipv4={'\x00', '\xff\xff', @loopback}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}]}, @hopopts={0xdf, 0x0, '\x00', [@pad1]}], {{0x0, 0x4622, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x0, 0x0, 0x1}}}}}}}, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) write(r3, &(0x7f0000000400)='1', 0x1) writev(r3, &(0x7f0000000a40)=[{&(0x7f0000000040)="9de24dfccd00", 0x6}], 0x1) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0xe8381, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) ioctl$KVM_GET_CLOCK(r3, 0x8030ae7c, &(0x7f0000000140)) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) ioctl$KVM_SET_IRQCHIP(r7, 0x4048aec9, &(0x7f0000000980)={0x1, 0x0, @ioapic={0xfee00, 0x2968, 0x4, 0x3, 0x0, [{0x98, 0x37, 0x84, '\x00', 0x7f}, {0x41, 0x8, 0x30, '\x00', 0xf5}, {0xe9, 0x1, 0x9, '\x00', 0x51}, {0x7, 0x9, 0x3, '\x00', 0x8f}, {0x3, 0x7f, 0x91, '\x00', 0xa}, {0xf, 0xe3, 0x8, '\x00', 0xaa}, {0x6, 0x8, 0x6, '\x00', 0x8}, {0x1, 0x3, 0x8, '\x00', 0x67}, {0x0, 0x7, 0xa, '\x00', 0x8}, {0x8, 0x81, 0x13, '\x00', 0x9f}, {0xf, 0x8, 0x8, '\x00', 0x3}, {0x3, 0x4c, 0x3, '\x00', 0xa}, {0x1e, 0x6, 0x3, '\x00', 0xa6}, {0x8, 0x0, 0x8, '\x00', 0x9}, {0x2, 0x4c, 0xa2, '\x00', 0x1}, {0x8, 0x5e, 0x4, '\x00', 0x3}, {0x5, 0xa0, 0x47, '\x00', 0x4}, {0x7, 0x3, 0x2, '\x00', 0xa7}, {0x5, 0x0, 0xf, '\x00', 0x7}, {0x5e, 0xa, 0xa}, {0x7f, 0x6, 0x7, '\x00', 0x4}, {0x93, 0x44, 0x9, '\x00', 0x10}, {0x2, 0x8, 0x2}, {0x6, 0xc, 0x3, '\x00', 0x8}]}}) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x10, 0x7fff0000}]}) close_range(r8, 0xffffffffffffffff, 0x0) 5.878880569s ago: executing program 6 (id=4791): r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) read(r0, &(0x7f0000000100)=""/6, 0x6) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="1800000025000101"], 0x18}, 0x1, 0x0, 0x0, 0x4048957}, 0x28040) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@ipv6_newrule={0x44, 0x1a, 0x1, 0x0, 0x25dfdbfe, {0xa, 0x0, 0x14, 0x0, 0xa, 0x0, 0x0, 0x7}, [@FRA_SRC={0x14, 0x2, @local}, @FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'ip6gre0\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd63"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) ioctl$BTRFS_IOC_ENCODED_WRITE(r0, 0x40789440, &(0x7f00000003c0)={&(0x7f0000000380)=[{&(0x7f0000000240)="29bee972f18d7340a6f150ffee07f92a0f3318af7ee31eeed0a23e4217ba07a1a39d336e152ac7bb53be945ea696cb0bbbbb87858dbdfa5e928be100b9db49f59c101b3942c144529b80a7", 0x4b}], 0x1, 0xaa94, 0x0, 0x7, 0x7f, 0xff, 0x8, 0x5}) r4 = socket(0x10, 0x3, 0x0) r5 = socket(0x10, 0x3, 0x4) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'bridge_slave_0\x00'}) sendmmsg(r4, &(0x7f0000000000), 0x400000000000235, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000080)={0x5, 0x13, 0x6, 0x103, 0xff, "10120dfe0ef7f0220000ff490a0080002a0008"}) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f0000000040)=0xa) r6 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi2\x00', 0x1, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, r7}, 0x50) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0x10, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r8}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r9}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r10, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) ioctl$COMEDI_DEVINFO(r6, 0x80b06401, &(0x7f0000000180)) 5.838715647s ago: executing program 5 (id=4792): timer_create(0x0, &(0x7f0000000280)={0x0, 0x21, 0x2}, &(0x7f0000000200)=0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x108}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) symlinkat(&(0x7f0000000400)='./file1/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4008054}}, {{&(0x7f00000003c0)=@file={0x1, './file1\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x80}}], 0x2, 0x0) setgid(0xee00) syz_open_procfs$pagemap(0x0, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f000077b000/0x4000)=nil, 0x4000, &(0x7f0000000300)='\x00') ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) socket$inet6_sctp(0xa, 0x5, 0x84) syz_io_uring_setup(0x867, &(0x7f0000000140)={0x0, 0x9164, 0x1000, 0x1, 0x359}, &(0x7f00000002c0), &(0x7f0000ff4000), &(0x7f0000000000)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x38}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x2000, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0xc0001, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000001c0)=0x15) ioctl$TCSETS(r4, 0x40384708, &(0x7f0000000040)={0x4, 0x1, 0xe, 0x5, 0x11, "3e0000000100"}) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close_range(r5, 0xffffffffffffffff, 0x0) close_range(r1, r1, 0x0) 5.41269001s ago: executing program 7 (id=4793): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000300)={0x6, {{0x2, 0x0, @multicast2}}}, 0xe7) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, 0x0, 0x0) r1 = userfaultfd(0x1) ioctl$UFFDIO_COPY(r1, 0xc028aa05, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110c230000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) syz_init_net_socket$x25(0x9, 0x5, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x4, 0xf, 0x80000006}, 0x0, 0x0) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f00000005c0)={0x6, {{0x2, 0x4e23, @multicast2}}, 0x1, 0x1, [{{0x2, 0x4e24, @multicast2}}]}, 0x10c) r4 = socket$inet6_udp(0xa, 0x2, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x15}}, 0x6}, 0x1c) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000180)='veth0_macvtap\x00', 0x10) r6 = fcntl$dupfd(r5, 0x0, r5) sendmsg$TIPC_NL_NAME_TABLE_GET(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x4040011) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, 0x0, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r6, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x90}, 0x8080) close_range(r4, 0xffffffffffffffff, 0x0) 4.710782212s ago: executing program 4 (id=4794): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000300)={0x6, {{0x2, 0x0, @multicast2}}}, 0xe7) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x7, {{0x2, 0x0, @multicast2}}}, 0x88) r1 = userfaultfd(0x1) ioctl$UFFDIO_COPY(r1, 0xc028aa05, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110c230000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) syz_init_net_socket$x25(0x9, 0x5, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x4, 0xf, 0x80000006}, 0x0, 0x0) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f00000005c0)={0x6, {{0x2, 0x4e23, @multicast2}}, 0x1, 0x1, [{{0x2, 0x4e24, @multicast2}}]}, 0x10c) r4 = socket$inet6_udp(0xa, 0x2, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x15}}, 0x6}, 0x1c) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000180)='veth0_macvtap\x00', 0x10) r6 = fcntl$dupfd(r5, 0x0, r5) sendmsg$TIPC_NL_NAME_TABLE_GET(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x4040011) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, 0x0, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r6, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x90}, 0x8080) close_range(r4, 0xffffffffffffffff, 0x0) 4.26934902s ago: executing program 5 (id=4795): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) openat$dir(0xffffffffffffff9c, &(0x7f0000000400)='./file0/file1\x00', 0x40, 0x83) umount2(&(0x7f00000001c0)='./file0\x00', 0x1) pipe2$9p(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84080) mount$9p_fd(0x0, 0x0, &(0x7f0000000540), 0x200080, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x9) close(r2) r3 = epoll_create1(0x80000) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000480), 0x0, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@debug={'debug', 0x3d, 0xb}}, {@access_client}, {@noextend}, {@fscache}, {@cache_readahead}, {@noxattr}]}}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/devices.allow\x00', 0x2, 0x48) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000600)={0xa}) 4.166626788s ago: executing program 5 (id=4796): openat$sndseq(0xffffff9c, &(0x7f0000000000), 0x0) mkdir(&(0x7f0000000000)='./sys\x00', 0x1ff) r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f0000000000)={0xffffffff, 0x0, 0x1, 0x7}) mount(0x0, &(0x7f00000001c0)='./sys/bus/pci/devices/0000:00:1d.0/remove\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r1 = fsopen(&(0x7f0000000180)='ecryptfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r2 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSRS485(r2, 0x5437, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/pci/devices/0000:00:1d.0/remove\x00', 0x1, 0x0) r4 = fsopen(&(0x7f0000000240)='btrfs\x00', 0x1) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$audio1(0xffffff9c, &(0x7f0000000200), 0x561080, 0x0) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r5, 0x0) syz_emit_ethernet(0xaa, &(0x7f0000000340)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x74, 0x6, 0x0, @dev={0xfe, 0x80, '\x00', 0x3b}, @local, {[@dstopts={0x2f, 0x2, '\x00', [@padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x2}, @pad1]}, @srh={0x1, 0x6, 0x4, 0x3, 0x5, 0x8, 0x1, [@ipv4={'\x00', '\xff\xff', @remote}, @ipv4={'\x00', '\xff\xff', @loopback}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}]}, @hopopts={0xdf, 0x0, '\x00', [@pad1]}], {{0x0, 0x4622, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x0, 0x0, 0x1}}}}}}}, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) write(r3, &(0x7f0000000400)='1', 0x1) writev(r3, &(0x7f0000000a40)=[{&(0x7f0000000040)="9de24dfccd00", 0x6}], 0x1) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0xe8381, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) ioctl$KVM_GET_CLOCK(r3, 0x8030ae7c, &(0x7f0000000140)) syz_open_procfs(0x0, 0x0) ioctl$KVM_SET_IRQCHIP(r7, 0x4048aec9, &(0x7f0000000980)={0x1, 0x0, @ioapic={0xfee00, 0x2968, 0x4, 0x3, 0x0, [{0x98, 0x37, 0x84, '\x00', 0x7f}, {0x41, 0x8, 0x30, '\x00', 0xf5}, {0xe9, 0x1, 0x9, '\x00', 0x51}, {0x7, 0x9, 0x3, '\x00', 0x8f}, {0x3, 0x7f, 0x91, '\x00', 0xa}, {0xf, 0xe3, 0x8, '\x00', 0xaa}, {0x6, 0x8, 0x6, '\x00', 0x8}, {0x1, 0x3, 0x8, '\x00', 0x67}, {0x0, 0x7, 0xa, '\x00', 0x8}, {0x8, 0x81, 0x13, '\x00', 0x9f}, {0xf, 0x8, 0x8, '\x00', 0x3}, {0x3, 0x4c, 0x3, '\x00', 0xa}, {0x1e, 0x6, 0x3, '\x00', 0xa6}, {0x8, 0x0, 0x8, '\x00', 0x9}, {0x2, 0x4c, 0xa2, '\x00', 0x1}, {0x8, 0x5e, 0x4, '\x00', 0x3}, {0x5, 0xa0, 0x47, '\x00', 0x4}, {0x7, 0x3, 0x2, '\x00', 0xa7}, {0x5, 0x0, 0xf, '\x00', 0x7}, {0x5e, 0xa, 0xa}, {0x7f, 0x6, 0x7, '\x00', 0x4}, {0x93, 0x44, 0x9, '\x00', 0x10}, {0x2, 0x8, 0x2}, {0x6, 0xc, 0x3, '\x00', 0x8}]}}) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x10, 0x7fff0000}]}) close_range(r8, 0xffffffffffffffff, 0x0) 3.545069219s ago: executing program 6 (id=4797): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000300)={0x6, {{0x2, 0x0, @multicast2}}}, 0xe7) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x7, {{0x2, 0x0, @multicast2}}}, 0x88) r1 = userfaultfd(0x1) ioctl$UFFDIO_COPY(r1, 0xc028aa05, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110c230000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) syz_init_net_socket$x25(0x9, 0x5, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x4, 0xf, 0x80000006}, 0x0, 0x0) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f00000005c0)={0x6, {{0x2, 0x4e23, @multicast2}}, 0x1, 0x1, [{{0x2, 0x4e24, @multicast2}}]}, 0x10c) r4 = socket$inet6_udp(0xa, 0x2, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x15}}, 0x6}, 0x1c) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000180)='veth0_macvtap\x00', 0x10) r6 = fcntl$dupfd(r5, 0x0, r5) sendmsg$TIPC_NL_NAME_TABLE_GET(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x4040011) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, 0x0, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r6, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x90}, 0x8080) close_range(r4, 0xffffffffffffffff, 0x0) 3.37958283s ago: executing program 7 (id=4798): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[]) openat$dir(0xffffffffffffff9c, &(0x7f0000000400)='./file0/file1\x00', 0x40, 0x83) umount2(&(0x7f00000001c0)='./file0\x00', 0x1) pipe2$9p(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84080) mount$9p_fd(0x0, 0x0, &(0x7f0000000540), 0x200080, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x9) close(r3) r4 = epoll_create1(0x80000) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000480), 0x0, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@debug={'debug', 0x3d, 0xb}}, {@access_client}, {@noextend}, {@fscache}, {@cache_readahead}, {@noxattr}]}}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/devices.allow\x00', 0x2, 0x48) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000600)={0xa}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r6, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) futex_waitv(&(0x7f0000000180)=[{0x0, &(0x7f0000000000), 0x2}, {0x3, &(0x7f0000000040)=0x3, 0x2}], 0x2, 0x0, 0x0, 0x0) futex(&(0x7f0000000140)=0x2, 0x5, 0x0, 0x0, &(0x7f0000000000), 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) mmap(&(0x7f0000ff2000/0xd000)=nil, 0xd000, 0x2000004, 0x4001011, r7, 0x34da2000) syslog(0x2, &(0x7f00000001c0)=""/229, 0xe5) syslog(0x9, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) 3.270734441s ago: executing program 5 (id=4799): openat$sndseq(0xffffff9c, &(0x7f0000000000), 0x0) mkdir(&(0x7f0000000000)='./sys\x00', 0x1ff) r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f0000000000)={0xffffffff, 0x0, 0x1, 0x7}) mount(0x0, &(0x7f00000001c0)='./sys/bus/pci/devices/0000:00:1d.0/remove\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r1 = fsopen(&(0x7f0000000180)='ecryptfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r2 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSRS485(r2, 0x5437, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/pci/devices/0000:00:1d.0/remove\x00', 0x1, 0x0) r4 = fsopen(&(0x7f0000000240)='btrfs\x00', 0x1) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$audio1(0xffffff9c, &(0x7f0000000200), 0x561080, 0x0) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r5, 0x0) syz_emit_ethernet(0xaa, &(0x7f0000000340)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x74, 0x6, 0x0, @dev={0xfe, 0x80, '\x00', 0x3b}, @local, {[@dstopts={0x2f, 0x2, '\x00', [@padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x2}, @pad1]}, @srh={0x1, 0x6, 0x4, 0x3, 0x5, 0x8, 0x1, [@ipv4={'\x00', '\xff\xff', @remote}, @ipv4={'\x00', '\xff\xff', @loopback}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}]}, @hopopts={0xdf, 0x0, '\x00', [@pad1]}], {{0x0, 0x4622, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x0, 0x0, 0x1}}}}}}}, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) write(r3, &(0x7f0000000400)='1', 0x1) writev(r3, &(0x7f0000000a40)=[{&(0x7f0000000040)="9de24dfccd00", 0x6}], 0x1) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0xe8381, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) ioctl$KVM_GET_CLOCK(r3, 0x8030ae7c, &(0x7f0000000140)) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) ioctl$KVM_SET_IRQCHIP(r7, 0x4048aec9, &(0x7f0000000980)={0x1, 0x0, @ioapic={0xfee00, 0x2968, 0x4, 0x3, 0x0, [{0x98, 0x37, 0x84, '\x00', 0x7f}, {0x41, 0x8, 0x30, '\x00', 0xf5}, {0xe9, 0x1, 0x9, '\x00', 0x51}, {0x7, 0x9, 0x3, '\x00', 0x8f}, {0x3, 0x7f, 0x91, '\x00', 0xa}, {0xf, 0xe3, 0x8, '\x00', 0xaa}, {0x6, 0x8, 0x6, '\x00', 0x8}, {0x1, 0x3, 0x8, '\x00', 0x67}, {0x0, 0x7, 0xa, '\x00', 0x8}, {0x8, 0x81, 0x13, '\x00', 0x9f}, {0xf, 0x8, 0x8, '\x00', 0x3}, {0x3, 0x4c, 0x3, '\x00', 0xa}, {0x1e, 0x6, 0x3, '\x00', 0xa6}, {0x8, 0x0, 0x8, '\x00', 0x9}, {0x2, 0x4c, 0xa2, '\x00', 0x1}, {0x8, 0x5e, 0x4, '\x00', 0x3}, {0x5, 0xa0, 0x47, '\x00', 0x4}, {0x7, 0x3, 0x2, '\x00', 0xa7}, {0x5, 0x0, 0xf, '\x00', 0x7}, {0x5e, 0xa, 0xa}, {0x7f, 0x6, 0x7, '\x00', 0x4}, {0x93, 0x44, 0x9, '\x00', 0x10}, {0x2, 0x8, 0x2}, {0x6, 0xc, 0x3, '\x00', 0x8}]}}) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x10, 0x7fff0000}]}) close_range(r8, 0xffffffffffffffff, 0x0) 3.014180888s ago: executing program 4 (id=4800): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000300)={0x6, {{0x2, 0x0, @multicast2}}}, 0xe7) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x7, {{0x2, 0x0, @multicast2}}}, 0x88) r1 = userfaultfd(0x1) ioctl$UFFDIO_COPY(r1, 0xc028aa05, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r2 = openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110c230000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) syz_init_net_socket$x25(0x9, 0x5, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x4, 0xf, 0x80000006}, 0x0, 0x0) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f00000005c0)={0x6, {{0x2, 0x4e23, @multicast2}}, 0x1, 0x1, [{{0x2, 0x4e24, @multicast2}}]}, 0x10c) r4 = socket$inet6_udp(0xa, 0x2, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x15}}, 0x6}, 0x1c) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000180)='veth0_macvtap\x00', 0x10) r6 = fcntl$dupfd(r5, 0x0, r5) sendmsg$TIPC_NL_NAME_TABLE_GET(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x4040011) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, 0x0, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r6, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x90}, 0x8080) close_range(r4, 0xffffffffffffffff, 0x0) 2.358162354s ago: executing program 6 (id=4801): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000300)={0x6, {{0x2, 0x0, @multicast2}}}, 0xe7) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x7, {{0x2, 0x0, @multicast2}}}, 0x88) r1 = userfaultfd(0x1) ioctl$UFFDIO_COPY(r1, 0xc028aa05, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r2 = openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110c230000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) syz_init_net_socket$x25(0x9, 0x5, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x4, 0xf, 0x80000006}, 0x0, 0x0) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f00000005c0)={0x6, {{0x2, 0x4e23, @multicast2}}, 0x1, 0x1, [{{0x2, 0x4e24, @multicast2}}]}, 0x10c) r4 = socket$inet6_udp(0xa, 0x2, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x15}}, 0x6}, 0x1c) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000180)='veth0_macvtap\x00', 0x10) r6 = fcntl$dupfd(r5, 0x0, r5) sendmsg$TIPC_NL_NAME_TABLE_GET(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x4040011) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, 0x0, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r6, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x90}, 0x8080) close_range(r4, 0xffffffffffffffff, 0x0) 2.259417331s ago: executing program 5 (id=4802): r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) read(r0, &(0x7f0000000100)=""/6, 0x6) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="1800000025000101"], 0x18}, 0x1, 0x0, 0x0, 0x4048957}, 0x28040) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@ipv6_newrule={0x44, 0x1a, 0x1, 0x0, 0x25dfdbfe, {0xa, 0x0, 0x14, 0x0, 0xa, 0x0, 0x0, 0x7}, [@FRA_SRC={0x14, 0x2, @local}, @FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'ip6gre0\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd63"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) ioctl$BTRFS_IOC_ENCODED_WRITE(r0, 0x40789440, &(0x7f00000003c0)={&(0x7f0000000380)=[{&(0x7f0000000240)="29bee972f18d7340a6f150ffee07f92a0f3318af7ee31eeed0a23e4217ba07a1a39d336e152ac7bb53be945ea696cb0bbbbb87858dbdfa5e928be100b9db49f59c101b3942c144529b80a7", 0x4b}, {0x0}], 0x2, 0xaa94, 0x0, 0x7, 0x7f, 0xff, 0x8, 0x5}) r4 = socket(0x10, 0x3, 0x0) r5 = socket(0x10, 0x3, 0x4) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'bridge_slave_0\x00'}) sendmmsg(r4, &(0x7f0000000000), 0x400000000000235, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000080)={0x5, 0x13, 0x6, 0x103, 0xff, "10120dfe0ef7f0220000ff490a0080002a0008"}) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f0000000040)=0xa) r6 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi2\x00', 0x1, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, r7}, 0x50) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0x10, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r8}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r9}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r10, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) ioctl$COMEDI_DEVINFO(r6, 0x80b06401, &(0x7f0000000180)) 1.497914488s ago: executing program 4 (id=4803): openat$sndseq(0xffffff9c, &(0x7f0000000000), 0x0) mkdir(&(0x7f0000000000)='./sys\x00', 0x1ff) r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f0000000000)={0xffffffff, 0x0, 0x1, 0x7}) mount(0x0, &(0x7f00000001c0)='./sys/bus/pci/devices/0000:00:1d.0/remove\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r1 = fsopen(&(0x7f0000000180)='ecryptfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r2 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSRS485(r2, 0x5437, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/pci/devices/0000:00:1d.0/remove\x00', 0x1, 0x0) r4 = fsopen(&(0x7f0000000240)='btrfs\x00', 0x1) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$audio1(0xffffff9c, &(0x7f0000000200), 0x561080, 0x0) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r5, 0x0) syz_emit_ethernet(0xaa, &(0x7f0000000340)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x74, 0x6, 0x0, @dev={0xfe, 0x80, '\x00', 0x3b}, @local, {[@dstopts={0x2f, 0x2, '\x00', [@padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x2}, @pad1]}, @srh={0x1, 0x6, 0x4, 0x3, 0x5, 0x8, 0x1, [@ipv4={'\x00', '\xff\xff', @remote}, @ipv4={'\x00', '\xff\xff', @loopback}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}]}, @hopopts={0xdf, 0x0, '\x00', [@pad1]}], {{0x0, 0x4622, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x0, 0x0, 0x1}}}}}}}, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) write(r3, &(0x7f0000000400)='1', 0x1) writev(r3, &(0x7f0000000a40)=[{&(0x7f0000000040)="9de24dfccd00", 0x6}], 0x1) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0xe8381, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) ioctl$KVM_GET_CLOCK(r3, 0x8030ae7c, &(0x7f0000000140)) syz_open_procfs(0x0, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x10, 0x7fff0000}]}) close_range(r8, 0xffffffffffffffff, 0x0) 1.102646025s ago: executing program 6 (id=4804): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000300)={0x6, {{0x2, 0x0, @multicast2}}}, 0xe7) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x7, {{0x2, 0x0, @multicast2}}}, 0x88) r1 = userfaultfd(0x1) ioctl$UFFDIO_COPY(r1, 0xc028aa05, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110c230000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) syz_init_net_socket$x25(0x9, 0x5, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x4, 0xf, 0x80000006}, 0x0, 0x0) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f00000005c0)={0x6, {{0x2, 0x4e23, @multicast2}}, 0x1, 0x1, [{{0x2, 0x4e24, @multicast2}}]}, 0x10c) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x15}}, 0x6}, 0x1c) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) r5 = fcntl$dupfd(r4, 0x0, r4) sendmsg$TIPC_NL_NAME_TABLE_GET(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x4040011) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, 0x0, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r5, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x90}, 0x8080) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 740.745717ms ago: executing program 7 (id=4805): openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) socket$kcm(0x21, 0x7, 0x2) r0 = openat$ptmx(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCGETD(r0, 0x5424, &(0x7f00000000c0)) r1 = socket$packet(0x11, 0x2, 0x300) close(r1) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0xb04, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) ioctl$MON_IOCX_MFETCH(0xffffffffffffffff, 0xc00c9207, &(0x7f0000000440)={0x0, 0x0, 0x4}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000180)) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) syz_ublk_setup_queues(r9, r7, &(0x7f0000000180)={0x0, 0xae0c, 0x800, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x10000004, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1000, 0xfffffffe, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x0, 0x1f0, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) inotify_init() r10 = openat$audio(0xffffff9c, &(0x7f0000000000), 0x101000, 0x0) read$dsp(r10, &(0x7f0000000040)=""/74, 0x4a) 50.343281ms ago: executing program 5 (id=4806): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e79"]) openat$dir(0xffffffffffffff9c, &(0x7f0000000400)='./file0/file1\x00', 0x40, 0x83) umount2(&(0x7f00000001c0)='./file0\x00', 0x1) pipe2$9p(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84080) mount$9p_fd(0x0, 0x0, &(0x7f0000000540), 0x200080, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x9) close(r3) r4 = epoll_create1(0x80000) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000480), 0x0, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@debug={'debug', 0x3d, 0xb}}, {@access_client}, {@noextend}, {@fscache}, {@cache_readahead}, {@noxattr}]}}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/devices.allow\x00', 0x2, 0x48) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000600)={0xa}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r6, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) futex_waitv(&(0x7f0000000180)=[{0x0, &(0x7f0000000000), 0x2}, {0x3, &(0x7f0000000040)=0x3, 0x2}], 0x2, 0x0, 0x0, 0x0) futex(&(0x7f0000000140)=0x2, 0x5, 0x0, 0x0, &(0x7f0000000000), 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) mmap(&(0x7f0000ff2000/0xd000)=nil, 0xd000, 0x2000004, 0x4001011, r7, 0x34da2000) syslog(0x2, &(0x7f00000001c0)=""/229, 0xe5) syslog(0x9, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) 0s ago: executing program 4 (id=4807): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76"]) openat$dir(0xffffffffffffff9c, &(0x7f0000000400)='./file0/file1\x00', 0x40, 0x83) umount2(&(0x7f00000001c0)='./file0\x00', 0x1) pipe2$9p(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84080) mount$9p_fd(0x0, 0x0, &(0x7f0000000540), 0x200080, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x9) close(r3) r4 = epoll_create1(0x80000) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000480), 0x0, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@debug={'debug', 0x3d, 0xb}}, {@access_client}, {@noextend}, {@fscache}, {@cache_readahead}, {@noxattr}]}}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/devices.allow\x00', 0x2, 0x48) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000600)={0xa}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r6, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) futex_waitv(&(0x7f0000000180)=[{0x0, &(0x7f0000000000), 0x2}, {0x3, &(0x7f0000000040)=0x3, 0x2}], 0x2, 0x0, 0x0, 0x0) futex(&(0x7f0000000140)=0x2, 0x5, 0x0, 0x0, &(0x7f0000000000), 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) mmap(&(0x7f0000ff2000/0xd000)=nil, 0xd000, 0x2000004, 0x4001011, r7, 0x34da2000) syslog(0x2, &(0x7f00000001c0)=""/229, 0xe5) syslog(0x9, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) kernel console output (not intermixed with test programs): 54] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 992.262920][T16865] netlink: 64 bytes leftover after parsing attributes in process `syz.7.3044'. [ 992.287617][T16554] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 992.354536][T16868] netlink: 'syz.6.3043': attribute type 3 has an invalid length. [ 992.451616][ T1441] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.451675][ T1441] ieee802154 phy1 wpan1: encryption failed: -22 [ 992.459297][T16554] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 992.460141][T16554] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 992.669112][T16554] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 992.672042][T16865] syzkaller1: entered promiscuous mode [ 992.672066][T16865] syzkaller1: entered allmulticast mode [ 992.678611][T16554] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 993.297276][T16554] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 993.704677][T16882] syzkaller1: entered promiscuous mode [ 993.710852][T16882] syzkaller1: entered allmulticast mode [ 994.167653][T16554] 8021q: adding VLAN 0 to HW filter on device bond0 [ 994.635710][T16554] 8021q: adding VLAN 0 to HW filter on device team0 [ 994.772566][ T1171] bridge0: port 1(bridge_slave_0) entered blocking state [ 994.772634][ T1171] bridge0: port 1(bridge_slave_0) entered forwarding state [ 994.773996][ T1171] bridge0: port 2(bridge_slave_1) entered blocking state [ 994.774061][ T1171] bridge0: port 2(bridge_slave_1) entered forwarding state [ 997.601766][T16554] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 998.349217][T16554] veth0_vlan: entered promiscuous mode [ 998.368436][T16947] netlink: 'syz.6.3054': attribute type 3 has an invalid length. [ 998.386784][T16554] veth1_vlan: entered promiscuous mode [ 998.568760][T16554] veth0_macvtap: entered promiscuous mode [ 998.577377][T16554] veth1_macvtap: entered promiscuous mode [ 998.842358][T16554] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 998.845417][T16554] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 999.458078][ T5616] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 999.459337][ T5616] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 999.459377][ T5616] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 999.459407][ T5616] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1001.765111][T10333] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1001.765132][T10333] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1002.376168][T10333] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1002.376187][T10333] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1002.919658][T16979] netlink: 'syz.4.2996': attribute type 3 has an invalid length. [ 1003.280104][ T5762] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1003.323897][ T5762] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1003.514938][ T5762] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1003.818854][ T5762] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1003.856107][ T5762] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1005.226745][T16983] bridge0: port 1(bridge_slave_0) entered blocking state [ 1005.226875][T16983] bridge0: port 1(bridge_slave_0) entered disabled state [ 1005.226978][T16983] bridge_slave_0: entered allmulticast mode [ 1005.228439][T16983] bridge_slave_0: entered promiscuous mode [ 1005.250662][T16983] bridge0: port 2(bridge_slave_1) entered blocking state [ 1005.250807][T16983] bridge0: port 2(bridge_slave_1) entered disabled state [ 1005.251377][T16983] bridge_slave_1: entered allmulticast mode [ 1005.253031][T16983] bridge_slave_1: entered promiscuous mode [ 1005.480477][T16983] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1005.484213][T16983] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1005.823903][T16983] team0: Port device team_slave_0 added [ 1005.853099][T16983] team0: Port device team_slave_1 added [ 1006.021341][T16983] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1006.021359][T16983] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1006.021383][T16983] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1006.055073][ T5762] Bluetooth: hci2: command tx timeout [ 1007.667724][T16701] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1007.741343][T17031] netlink: 64 bytes leftover after parsing attributes in process `syz.5.3066'. [ 1007.873890][T16983] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1007.873910][T16983] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1007.873935][T16983] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1008.015664][T16983] hsr_slave_0: entered promiscuous mode [ 1008.016577][T16983] hsr_slave_1: entered promiscuous mode [ 1008.017269][T16983] debugfs: 'hsr0' already exists in 'hsr' [ 1008.017292][T16983] Cannot create hsr debugfs directory [ 1008.153556][T17035] syzkaller1: entered promiscuous mode [ 1008.153582][T17035] syzkaller1: entered allmulticast mode [ 1008.166265][ T5762] Bluetooth: hci2: command tx timeout [ 1008.200094][T17037] syzkaller1: entered promiscuous mode [ 1008.200118][T17037] syzkaller1: entered allmulticast mode [ 1008.365518][T16701] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1008.961954][T17051] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3069'. [ 1009.558190][T17058] netlink: 'syz.5.3070': attribute type 3 has an invalid length. [ 1009.637441][T16701] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1009.924304][T17063] netlink: 64 bytes leftover after parsing attributes in process `syz.6.3071'. [ 1010.206521][ T5762] Bluetooth: hci2: command tx timeout [ 1012.286976][ T5762] Bluetooth: hci2: command tx timeout [ 1013.635129][T16701] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1015.518958][T16701] bridge_slave_1: left allmulticast mode [ 1015.518985][T16701] bridge_slave_1: left promiscuous mode [ 1015.519171][T16701] bridge0: port 2(bridge_slave_1) entered disabled state [ 1015.593129][T16701] bridge_slave_0: left allmulticast mode [ 1015.593248][T16701] bridge_slave_0: left promiscuous mode [ 1015.593839][T16701] bridge0: port 1(bridge_slave_0) entered disabled state [ 1016.726604][T16701] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1016.781792][T16701] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1016.826488][T16701] bond0 (unregistering): Released all slaves [ 1016.895331][ T5455] 8021q: adding VLAN 0 to HW filter on device eth14 [ 1018.757464][ T5455] 8021q: adding VLAN 0 to HW filter on device eth15 [ 1022.781817][T16701] hsr_slave_0: left promiscuous mode [ 1022.835218][T16701] hsr_slave_1: left promiscuous mode [ 1022.886472][T16701] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1022.886568][T16701] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1022.934099][T16701] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1022.934122][T16701] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1023.090268][T16701] veth1_macvtap: left promiscuous mode [ 1023.090331][T16701] veth0_macvtap: left promiscuous mode [ 1023.090495][T16701] veth1_vlan: left promiscuous mode [ 1023.090595][T16701] veth0_vlan: left promiscuous mode [ 1023.508945][T17180] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3085'. [ 1024.524665][T16701] team0 (unregistering): Port device team_slave_1 removed [ 1024.599828][T16701] team0 (unregistering): Port device team_slave_0 removed [ 1025.178946][T17192] syzkaller1: entered promiscuous mode [ 1025.178969][T17192] syzkaller1: entered allmulticast mode [ 1025.559825][T17207] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3088'. [ 1025.832561][T17208] syzkaller1: entered promiscuous mode [ 1025.832586][T17208] syzkaller1: entered allmulticast mode [ 1028.476869][T17229] netlink: 64 bytes leftover after parsing attributes in process `syz.5.3091'. [ 1028.599567][T16983] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1028.917192][T16983] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1028.918033][T17228] syzkaller1: entered promiscuous mode [ 1028.918054][T17228] syzkaller1: entered allmulticast mode [ 1028.919692][T16983] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1028.951561][T16983] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1028.952477][T16983] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1029.045806][T16983] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1029.658281][T16983] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1029.751721][T16983] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1029.890951][T16701] IPVS: stop unused estimator thread 0... [ 1030.213299][T16983] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1030.242417][T16983] 8021q: adding VLAN 0 to HW filter on device team0 [ 1030.290101][ T6848] bridge0: port 1(bridge_slave_0) entered blocking state [ 1030.290172][ T6848] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1030.310634][T10333] bridge0: port 2(bridge_slave_1) entered blocking state [ 1030.310721][T10333] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1031.957690][T16983] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1033.056484][T16983] veth0_vlan: entered promiscuous mode [ 1033.062434][T16983] veth1_vlan: entered promiscuous mode [ 1033.150012][T16983] veth0_macvtap: entered promiscuous mode [ 1033.154505][T16983] veth1_macvtap: entered promiscuous mode [ 1033.182120][T16983] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1033.218134][T16983] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1033.266243][T16593] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1033.266285][T16593] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1033.266311][T16593] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1033.266337][T16593] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1033.525816][ T99] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1033.525841][ T99] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1033.827083][T17284] syzkaller1: entered promiscuous mode [ 1033.827106][T17284] syzkaller1: entered allmulticast mode [ 1033.829915][ T106] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1033.829947][ T106] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1037.569033][T16557] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1037.577877][T16557] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1037.579921][T16557] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1037.584285][T16557] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1037.595391][T16557] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1039.747393][ T5762] Bluetooth: hci3: command tx timeout [ 1040.360046][T17311] bridge0: port 1(bridge_slave_0) entered blocking state [ 1040.360204][T17311] bridge0: port 1(bridge_slave_0) entered disabled state [ 1040.360522][T17311] bridge_slave_0: entered allmulticast mode [ 1040.361792][T17311] bridge_slave_0: entered promiscuous mode [ 1040.429533][T17311] bridge0: port 2(bridge_slave_1) entered blocking state [ 1040.429662][T17311] bridge0: port 2(bridge_slave_1) entered disabled state [ 1040.429947][T17311] bridge_slave_1: entered allmulticast mode [ 1040.431278][T17311] bridge_slave_1: entered promiscuous mode [ 1040.681591][T17311] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1040.761397][T17311] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1040.850693][T17311] team0: Port device team_slave_0 added [ 1040.854507][T17311] team0: Port device team_slave_1 added [ 1041.024012][T17311] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1041.024032][T17311] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1041.024055][T17311] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1041.085475][T17311] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1041.085495][T17311] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1041.085521][T17311] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1041.365990][T17311] hsr_slave_0: entered promiscuous mode [ 1041.366806][T17311] hsr_slave_1: entered promiscuous mode [ 1041.367334][T17311] debugfs: 'hsr0' already exists in 'hsr' [ 1041.367352][T17311] Cannot create hsr debugfs directory [ 1041.642647][T17345] netlink: 64 bytes leftover after parsing attributes in process `syz.7.3105'. [ 1041.768152][T16701] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1041.805249][ T5762] Bluetooth: hci3: command tx timeout [ 1041.855761][T17348] syzkaller1: entered promiscuous mode [ 1041.855783][T17348] syzkaller1: entered allmulticast mode [ 1042.192951][T16701] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1042.265046][T17352] syzkaller1: entered promiscuous mode [ 1042.265073][T17352] syzkaller1: entered allmulticast mode [ 1043.901310][ T5762] Bluetooth: hci3: command tx timeout [ 1043.929392][T17363] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3111'. [ 1043.935027][T16701] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1044.003943][T17362] syzkaller1: entered promiscuous mode [ 1044.003963][T17362] syzkaller1: entered allmulticast mode [ 1044.012485][T17362] usb usb5: usbfs: process 17362 (syz.4.3111) did not claim interface 0 before use [ 1044.047550][T17367] netlink: 64 bytes leftover after parsing attributes in process `syz.5.3113'. [ 1044.301990][T16701] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1044.384256][T17367] syzkaller1: entered promiscuous mode [ 1044.384281][T17367] syzkaller1: entered allmulticast mode [ 1044.818257][T17377] netlink: 'syz.4.3114': attribute type 3 has an invalid length. [ 1045.837367][ T5455] 8021q: adding VLAN 0 to HW filter on device eth15 [ 1045.964892][ T5762] Bluetooth: hci3: command tx timeout [ 1046.270338][ T5455] 8021q: adding VLAN 0 to HW filter on device eth14 [ 1046.680964][ T5455] 8021q: adding VLAN 0 to HW filter on device eth16 [ 1047.293212][ T5455] 8021q: adding VLAN 0 to HW filter on device eth17 [ 1048.020977][T16701] bridge_slave_1: left allmulticast mode [ 1048.021004][T16701] bridge_slave_1: left promiscuous mode [ 1048.021183][T16701] bridge0: port 2(bridge_slave_1) entered disabled state [ 1048.098737][T16701] bridge_slave_0: left allmulticast mode [ 1048.098765][T16701] bridge_slave_0: left promiscuous mode [ 1048.098965][T16701] bridge0: port 1(bridge_slave_0) entered disabled state [ 1052.189068][T16701] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1052.466504][T16701] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1052.767867][T16701] bond0 (unregistering): Released all slaves [ 1053.015956][T17451] netlink: 64 bytes leftover after parsing attributes in process `syz.5.3122'. [ 1053.873285][T17455] syzkaller1: entered promiscuous mode [ 1053.873379][T17455] syzkaller1: entered allmulticast mode [ 1053.887791][ T1441] ieee802154 phy0 wpan0: encryption failed: -22 [ 1053.887850][ T1441] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.012208][T17467] netlink: 'syz.4.3123': attribute type 3 has an invalid length. [ 1057.158705][T17494] netlink: 64 bytes leftover after parsing attributes in process `syz.7.3125'. [ 1057.401595][T17491] usb usb5: usbfs: process 17491 (syz.7.3125) did not claim interface 0 before use [ 1057.838400][T17495] syzkaller1: entered promiscuous mode [ 1057.838422][T17495] syzkaller1: entered allmulticast mode [ 1057.841181][T17502] syzkaller1: entered promiscuous mode [ 1057.841204][T17502] syzkaller1: entered allmulticast mode [ 1058.232269][T16701] hsr_slave_0: left promiscuous mode [ 1058.254427][T16701] hsr_slave_1: left promiscuous mode [ 1058.255470][T16701] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1058.255547][T16701] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1058.273856][T16701] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1058.273877][T16701] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1058.288529][T16701] veth1_macvtap: left promiscuous mode [ 1058.288596][T16701] veth0_macvtap: left promiscuous mode [ 1058.288772][T16701] veth1_vlan: left promiscuous mode [ 1058.288865][T16701] veth0_vlan: left promiscuous mode [ 1058.893907][T16701] team0 (unregistering): Port device team_slave_1 removed [ 1058.913433][T16701] team0 (unregistering): Port device team_slave_0 removed [ 1061.184242][T17544] netlink: 64 bytes leftover after parsing attributes in process `syz.5.3133'. [ 1061.331824][T17544] syzkaller1: entered promiscuous mode [ 1061.331848][T17544] syzkaller1: entered allmulticast mode [ 1061.347938][T17311] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1061.440166][T17311] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1061.440922][T17311] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1061.531185][T17311] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1061.532155][T17311] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1061.626873][T17311] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1062.129006][T17311] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1062.233142][T17311] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1062.382436][T16701] IPVS: stop unused estimator thread 0... [ 1063.198392][T17311] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1063.220303][T17311] 8021q: adding VLAN 0 to HW filter on device team0 [ 1063.366500][ T1158] bridge0: port 1(bridge_slave_0) entered blocking state [ 1063.366582][ T1158] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1063.383786][ T1158] bridge0: port 2(bridge_slave_1) entered blocking state [ 1063.383889][ T1158] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1063.447252][T17311] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1065.829099][T17311] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1066.783153][T17311] veth0_vlan: entered promiscuous mode [ 1066.791180][T17311] veth1_vlan: entered promiscuous mode [ 1066.884207][T17311] veth0_macvtap: entered promiscuous mode [ 1066.888580][T17311] veth1_macvtap: entered promiscuous mode [ 1067.274273][T17311] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1067.301729][T17311] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1067.573808][ T5832] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1067.574621][ T5832] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1067.576139][ T5832] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1067.576294][ T5832] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1067.653440][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1067.653462][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1067.818815][ T1158] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1067.818836][ T1158] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1070.696054][T16557] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1070.742235][T16557] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1070.771022][T16557] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1070.842485][T16557] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1070.872940][T16557] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1072.886422][T17684] netlink: 'syz.7.3151': attribute type 3 has an invalid length. [ 1073.017229][ T5762] Bluetooth: hci0: command tx timeout [ 1073.063894][T16701] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1073.080155][T17689] netlink: 'syz.4.3150': attribute type 3 has an invalid length. [ 1074.550114][T17660] bridge0: port 1(bridge_slave_0) entered blocking state [ 1074.550257][T17660] bridge0: port 1(bridge_slave_0) entered disabled state [ 1074.550371][T17660] bridge_slave_0: entered allmulticast mode [ 1074.551694][T17660] bridge_slave_0: entered promiscuous mode [ 1074.579750][T17660] bridge0: port 2(bridge_slave_1) entered blocking state [ 1074.579873][T17660] bridge0: port 2(bridge_slave_1) entered disabled state [ 1074.579979][T17660] bridge_slave_1: entered allmulticast mode [ 1074.581376][T17660] bridge_slave_1: entered promiscuous mode [ 1074.659326][T17660] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1074.661666][T17660] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1074.685062][T17660] team0: Port device team_slave_0 added [ 1074.687147][T17660] team0: Port device team_slave_1 added [ 1074.710488][T17660] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1074.710506][T17660] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1074.710528][T17660] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1074.712207][T17660] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1074.712221][T17660] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1074.712244][T17660] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1074.747042][T17660] hsr_slave_0: entered promiscuous mode [ 1074.747848][T17660] hsr_slave_1: entered promiscuous mode [ 1074.748450][T17660] debugfs: 'hsr0' already exists in 'hsr' [ 1074.748469][T17660] Cannot create hsr debugfs directory [ 1075.095297][ T5762] Bluetooth: hci0: command tx timeout [ 1076.817360][T16701] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1077.189737][ T5762] Bluetooth: hci0: command tx timeout [ 1077.201872][T16701] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1077.289633][T17725] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3157'. [ 1077.322902][T17725] syzkaller1: entered promiscuous mode [ 1077.322924][T17725] syzkaller1: entered allmulticast mode [ 1077.455554][T16701] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1078.572373][T16701] bridge_slave_1: left allmulticast mode [ 1078.572399][T16701] bridge_slave_1: left promiscuous mode [ 1078.572584][T16701] bridge0: port 2(bridge_slave_1) entered disabled state [ 1078.585029][T16701] bridge_slave_0: left allmulticast mode [ 1078.585060][T16701] bridge_slave_0: left promiscuous mode [ 1078.585261][T16701] bridge0: port 1(bridge_slave_0) entered disabled state [ 1079.252985][ T5762] Bluetooth: hci0: command tx timeout [ 1079.304012][T16701] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1079.662180][T16701] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1079.797456][T16701] bond0 (unregistering): Released all slaves [ 1080.423249][ T5455] 8021q: adding VLAN 0 to HW filter on device eth14 [ 1081.461150][T16701] hsr_slave_0: left promiscuous mode [ 1081.477062][T16701] hsr_slave_1: left promiscuous mode [ 1081.477852][T16701] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1081.477871][T16701] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1081.481607][T16701] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1081.481627][T16701] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1081.526930][T16701] veth1_macvtap: left promiscuous mode [ 1081.526968][T16701] veth0_macvtap: left promiscuous mode [ 1081.527183][T16701] veth1_vlan: left promiscuous mode [ 1081.527302][T16701] veth0_vlan: left promiscuous mode [ 1081.578566][ T5762] Bluetooth: hci1: command 0x0406 tx timeout [ 1081.849111][T17786] netlink: 64 bytes leftover after parsing attributes in process `syz.7.3167'. [ 1082.772667][T16701] team0 (unregistering): Port device team_slave_1 removed [ 1082.830230][T16701] team0 (unregistering): Port device team_slave_0 removed [ 1083.150895][T17791] syzkaller1: entered promiscuous mode [ 1083.150921][T17791] syzkaller1: entered allmulticast mode [ 1084.337409][T17805] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3170'. [ 1084.562472][T17805] syzkaller1: entered promiscuous mode [ 1084.562494][T17805] syzkaller1: entered allmulticast mode [ 1085.002849][T17660] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1085.074297][T17660] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1085.089781][T17660] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1085.698119][T17660] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1085.703032][T17660] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1086.123944][T17660] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1086.124862][T17660] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1086.327508][T17660] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1088.001154][T17660] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1088.065960][T17660] 8021q: adding VLAN 0 to HW filter on device team0 [ 1088.093158][ T6848] bridge0: port 1(bridge_slave_0) entered blocking state [ 1088.093256][ T6848] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1088.131139][ T6863] bridge0: port 2(bridge_slave_1) entered blocking state [ 1088.131227][ T6863] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1088.311209][T16701] IPVS: stop unused estimator thread 0... [ 1089.934358][T17660] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1092.221576][T17660] veth0_vlan: entered promiscuous mode [ 1092.283864][T17660] veth1_vlan: entered promiscuous mode [ 1092.364893][T17660] veth0_macvtap: entered promiscuous mode [ 1092.371691][T17660] veth1_macvtap: entered promiscuous mode [ 1092.401996][T17660] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1092.449508][T17660] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1093.049652][T16593] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1093.049797][T16593] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1093.049904][T16593] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1093.050010][T16593] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1094.678773][T10333] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1094.678798][T10333] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1094.841179][ T6863] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1094.841202][ T6863] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1094.913032][T17897] netlink: 64 bytes leftover after parsing attributes in process `syz.7.3182'. [ 1095.155678][T17898] syzkaller1: entered promiscuous mode [ 1095.155702][T17898] syzkaller1: entered allmulticast mode [ 1095.820126][T17910] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3184'. [ 1095.848982][T17910] syzkaller1: entered promiscuous mode [ 1095.849004][T17910] syzkaller1: entered allmulticast mode [ 1096.669703][T17917] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3185'. [ 1096.694271][T17917] syzkaller1: entered promiscuous mode [ 1096.694295][T17917] syzkaller1: entered allmulticast mode [ 1099.959020][T17940] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3192'. [ 1100.045028][T17946] syzkaller1: entered promiscuous mode [ 1100.045051][T17946] syzkaller1: entered allmulticast mode [ 1102.723086][T17954] netlink: 88 bytes leftover after parsing attributes in process `syz.5.3204'. [ 1102.723699][T17954] syzkaller1: entered promiscuous mode [ 1102.723715][T17954] syzkaller1: entered allmulticast mode [ 1106.098716][T17983] netlink: 64 bytes leftover after parsing attributes in process `syz.5.3201'. [ 1106.139091][T17983] syzkaller1: entered promiscuous mode [ 1106.139116][T17983] syzkaller1: entered allmulticast mode [ 1106.671881][T17988] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3203'. [ 1106.711748][T17988] syzkaller1: entered promiscuous mode [ 1106.711772][T17988] syzkaller1: entered allmulticast mode [ 1107.542242][T17994] netlink: 64 bytes leftover after parsing attributes in process `syz.7.3207'. [ 1107.652810][T17994] syzkaller1: entered promiscuous mode [ 1107.652834][T17994] syzkaller1: entered allmulticast mode [ 1107.694383][T17996] netlink: 64 bytes leftover after parsing attributes in process `syz.6.3208'. [ 1107.875251][T17996] syzkaller1: entered promiscuous mode [ 1107.875276][T17996] syzkaller1: entered allmulticast mode [ 1107.884294][T18002] netlink: 76 bytes leftover after parsing attributes in process `syz.5.3209'. [ 1107.898398][T18002] syzkaller1: entered promiscuous mode [ 1107.898419][T18002] syzkaller1: entered allmulticast mode [ 1110.473977][T18023] netlink: 64 bytes leftover after parsing attributes in process `syz.7.3214'. [ 1110.602552][T18023] syzkaller1: entered promiscuous mode [ 1110.602576][T18023] syzkaller1: entered allmulticast mode [ 1113.249031][T18039] netlink: 64 bytes leftover after parsing attributes in process `syz.6.3217'. [ 1113.293504][T18039] syzkaller1: entered promiscuous mode [ 1113.293532][T18039] syzkaller1: entered allmulticast mode [ 1113.717879][T18045] netlink: 64 bytes leftover after parsing attributes in process `syz.7.3218'. [ 1115.051119][T18045] syzkaller1: entered promiscuous mode [ 1115.051143][T18045] syzkaller1: entered allmulticast mode [ 1115.341071][ T1441] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.342339][ T1441] ieee802154 phy1 wpan1: encryption failed: -22 [ 1115.565334][T18056] netlink: 76 bytes leftover after parsing attributes in process `syz.4.3221'. [ 1115.758868][T18057] syzkaller1: entered promiscuous mode [ 1115.758890][T18057] syzkaller1: entered allmulticast mode [ 1116.014461][T18064] netlink: 64 bytes leftover after parsing attributes in process `syz.6.3223'. [ 1116.241992][T18071] netlink: 64 bytes leftover after parsing attributes in process `syz.7.3224'. [ 1116.547621][T18065] syzkaller1: entered promiscuous mode [ 1116.547646][T18065] syzkaller1: entered allmulticast mode [ 1116.645368][T18072] syzkaller1: entered promiscuous mode [ 1116.645396][T18072] syzkaller1: entered allmulticast mode [ 1117.262207][T18085] netlink: 'syz.6.3227': attribute type 3 has an invalid length. [ 1117.265027][T18077] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3226'. [ 1117.328373][T18084] netlink: 'syz.7.3228': attribute type 3 has an invalid length. [ 1117.418378][T18077] syzkaller1: entered promiscuous mode [ 1117.418401][T18077] syzkaller1: entered allmulticast mode [ 1118.869988][T18094] netlink: 64 bytes leftover after parsing attributes in process `syz.7.3230'. [ 1118.938444][T18094] syzkaller1: entered promiscuous mode [ 1118.938466][T18094] syzkaller1: entered allmulticast mode [ 1119.733655][T18106] netlink: 76 bytes leftover after parsing attributes in process `syz.4.3233'. [ 1119.958419][T18107] syzkaller1: entered promiscuous mode [ 1119.958445][T18107] syzkaller1: entered allmulticast mode [ 1120.530384][T18115] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3234'. [ 1120.570976][T18115] syzkaller1: entered promiscuous mode [ 1120.571002][T18115] syzkaller1: entered allmulticast mode [ 1121.586733][T18121] netlink: 64 bytes leftover after parsing attributes in process `syz.6.3237'. [ 1121.711377][T18121] syzkaller1: entered promiscuous mode [ 1121.711404][T18121] syzkaller1: entered allmulticast mode [ 1123.422179][T18130] netlink: 64 bytes leftover after parsing attributes in process `syz.5.3238'. [ 1123.806159][T18135] netlink: 64 bytes leftover after parsing attributes in process `syz.7.3240'. [ 1124.015758][T18135] syzkaller1: entered promiscuous mode [ 1124.015785][T18135] syzkaller1: entered allmulticast mode [ 1124.611223][T18146] netlink: 76 bytes leftover after parsing attributes in process `syz.5.3243'. [ 1124.612072][T18146] syzkaller1: entered promiscuous mode [ 1124.612092][T18146] syzkaller1: entered allmulticast mode [ 1124.861625][T18149] netlink: 'syz.7.3244': attribute type 3 has an invalid length. [ 1127.661251][ T5762] Bluetooth: hci2: command 0x0406 tx timeout [ 1129.277459][T18180] netlink: 64 bytes leftover after parsing attributes in process `syz.5.3252'. [ 1129.347280][T18182] netlink: 64 bytes leftover after parsing attributes in process `syz.6.3251'. [ 1129.358782][T18180] syzkaller1: entered promiscuous mode [ 1129.358804][T18180] syzkaller1: entered allmulticast mode [ 1129.363894][T18180] usb usb5: usbfs: process 18180 (syz.5.3252) did not claim interface 0 before use [ 1129.429696][T18182] syzkaller1: entered promiscuous mode [ 1129.429719][T18182] syzkaller1: entered allmulticast mode [ 1139.282617][T18268] netlink: 64 bytes leftover after parsing attributes in process `syz.7.3269'. [ 1139.418307][T18268] syzkaller1: entered promiscuous mode [ 1139.418329][T18268] syzkaller1: entered allmulticast mode [ 1139.524169][T18275] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3268'. [ 1142.277744][T18311] netlink: 64 bytes leftover after parsing attributes in process `syz.7.3277'. [ 1142.292502][T18311] syzkaller1: entered promiscuous mode [ 1142.292520][T18311] syzkaller1: entered allmulticast mode [ 1142.296143][T18311] usb usb5: usbfs: process 18311 (syz.7.3277) did not claim interface 0 before use [ 1142.342100][T18312] netlink: 64 bytes leftover after parsing attributes in process `syz.6.3276'. [ 1142.590645][T18313] syzkaller1: entered promiscuous mode [ 1142.590745][T18313] syzkaller1: entered allmulticast mode [ 1142.738321][T18319] netlink: 76 bytes leftover after parsing attributes in process `syz.4.3278'. [ 1143.085760][T18319] syzkaller1: entered promiscuous mode [ 1143.085786][T18319] syzkaller1: entered allmulticast mode [ 1153.427041][T18384] netlink: 'syz.7.3293': attribute type 3 has an invalid length. [ 1153.473330][T18383] netlink: 64 bytes leftover after parsing attributes in process `syz.5.3294'. [ 1153.510139][T18383] syzkaller1: entered promiscuous mode [ 1153.510162][T18383] syzkaller1: entered allmulticast mode [ 1153.922223][T18386] netlink: 64 bytes leftover after parsing attributes in process `syz.6.3295'. [ 1153.956315][T18386] syzkaller1: entered promiscuous mode [ 1153.956338][T18386] syzkaller1: entered allmulticast mode [ 1157.054864][T18389] netlink: 72 bytes leftover after parsing attributes in process `syz.7.3296'. [ 1157.067406][T18389] syzkaller1: entered promiscuous mode [ 1157.067430][T18389] syzkaller1: entered allmulticast mode [ 1159.570557][T18417] netlink: 72 bytes leftover after parsing attributes in process `syz.6.3308'. [ 1159.611668][T18420] syzkaller1: entered promiscuous mode [ 1159.611694][T18420] syzkaller1: entered allmulticast mode [ 1160.073902][T18424] netlink: 64 bytes leftover after parsing attributes in process `syz.7.3303'. [ 1160.094423][T18424] syzkaller1: entered promiscuous mode [ 1160.094446][T18424] syzkaller1: entered allmulticast mode [ 1163.502050][ T5762] Bluetooth: hci3: command 0x0406 tx timeout [ 1163.935488][T18450] netlink: 64 bytes leftover after parsing attributes in process `syz.5.3309'. [ 1163.959335][T18450] syzkaller1: entered promiscuous mode [ 1163.959358][T18450] syzkaller1: entered allmulticast mode [ 1167.866121][T18478] netlink: 72 bytes leftover after parsing attributes in process `syz.7.3314'. [ 1167.930472][T18478] syzkaller1: entered promiscuous mode [ 1167.930494][T18478] syzkaller1: entered allmulticast mode [ 1168.071214][T18483] netlink: 'syz.4.3316': attribute type 3 has an invalid length. [ 1168.630378][T18499] netlink: 'syz.5.3319': attribute type 3 has an invalid length. [ 1173.253647][T18533] netlink: 'syz.6.3326': attribute type 3 has an invalid length. [ 1173.766964][T18539] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3328'. [ 1174.417313][T18540] syzkaller1: entered promiscuous mode [ 1174.417339][T18540] syzkaller1: entered allmulticast mode [ 1174.884915][T18547] netlink: 'syz.6.3329': attribute type 3 has an invalid length. [ 1176.778035][ T1441] ieee802154 phy0 wpan0: encryption failed: -22 [ 1176.778095][ T1441] ieee802154 phy1 wpan1: encryption failed: -22 [ 1178.459064][T18558] netlink: 'syz.4.3334': attribute type 3 has an invalid length. [ 1178.571219][T18566] netlink: 64 bytes leftover after parsing attributes in process `syz.6.3335'. [ 1178.706621][T18563] syzkaller1: entered promiscuous mode [ 1178.706646][T18563] syzkaller1: entered allmulticast mode [ 1184.516765][T18601] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3344'. [ 1184.606098][T18604] syzkaller1: entered promiscuous mode [ 1184.606123][T18604] syzkaller1: entered allmulticast mode [ 1190.353334][T18652] netlink: 64 bytes leftover after parsing attributes in process `syz.5.3355'. [ 1190.535344][T18652] syzkaller1: entered promiscuous mode [ 1190.535367][T18652] syzkaller1: entered allmulticast mode [ 1191.115959][T18660] netlink: 64 bytes leftover after parsing attributes in process `syz.5.3357'. [ 1191.190217][T18663] syzkaller1: entered promiscuous mode [ 1191.190297][T18663] syzkaller1: entered allmulticast mode [ 1194.302499][ T5762] Bluetooth: hci0: command 0x0406 tx timeout [ 1195.020673][T18680] netlink: 64 bytes leftover after parsing attributes in process `syz.6.3360'. [ 1195.048505][T18680] syzkaller1: entered promiscuous mode [ 1195.048530][T18680] syzkaller1: entered allmulticast mode [ 1197.544638][T18716] netlink: 64 bytes leftover after parsing attributes in process `syz.6.3367'. [ 1197.618753][T18717] syzkaller1: entered promiscuous mode [ 1197.618775][T18717] syzkaller1: entered allmulticast mode [ 1198.937938][T18731] syzkaller1: entered promiscuous mode [ 1198.937959][T18731] syzkaller1: entered allmulticast mode [ 1204.357411][T18787] syzkaller1: entered promiscuous mode [ 1204.357436][T18787] syzkaller1: entered allmulticast mode [ 1204.444105][T18789] netlink: 'syz.7.3384': attribute type 3 has an invalid length. [ 1204.609016][T18790] netlink: 'syz.6.3383': attribute type 3 has an invalid length. [ 1206.468947][T18796] netlink: 64 bytes leftover after parsing attributes in process `syz.5.3385'. [ 1206.488816][T18796] syzkaller1: entered promiscuous mode [ 1206.488839][T18796] syzkaller1: entered allmulticast mode [ 1209.612950][T18821] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3390'. [ 1209.699695][T18822] syzkaller1: entered promiscuous mode [ 1209.714567][T18822] syzkaller1: entered allmulticast mode [ 1210.245800][T18825] netlink: 64 bytes leftover after parsing attributes in process `syz.5.3391'. [ 1210.448716][T18827] syzkaller1: entered promiscuous mode [ 1210.448744][T18827] syzkaller1: entered allmulticast mode [ 1210.521426][T18837] netlink: 'syz.6.3392': attribute type 3 has an invalid length. [ 1210.548703][T18836] netlink: 'syz.7.3393': attribute type 3 has an invalid length. [ 1210.700248][T18840] syzkaller1: entered promiscuous mode [ 1210.700272][T18840] syzkaller1: entered allmulticast mode [ 1211.663820][T18847] netlink: 'syz.6.3397': attribute type 3 has an invalid length. [ 1220.551423][T18915] netlink: 'syz.7.3412': attribute type 3 has an invalid length. [ 1223.684753][T18927] syzkaller1: entered promiscuous mode [ 1223.684777][T18927] syzkaller1: entered allmulticast mode [ 1228.013947][T18971] netlink: 64 bytes leftover after parsing attributes in process `syz.6.3425'. [ 1228.651439][T18965] syzkaller1: entered promiscuous mode [ 1228.651462][T18965] syzkaller1: entered allmulticast mode [ 1229.337858][T18981] syzkaller1: entered promiscuous mode [ 1229.337883][T18981] syzkaller1: entered allmulticast mode [ 1229.774335][T18987] netlink: 64 bytes leftover after parsing attributes in process `syz.6.3430'. [ 1229.805196][T18987] syzkaller1: entered promiscuous mode [ 1229.805217][T18987] syzkaller1: entered allmulticast mode [ 1230.335883][T18996] netlink: 'syz.4.3433': attribute type 3 has an invalid length. [ 1233.865976][T19013] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3437'. [ 1233.879300][T19013] syzkaller1: entered promiscuous mode [ 1233.879323][T19013] syzkaller1: entered allmulticast mode [ 1233.941999][T19015] netlink: 'syz.5.3436': attribute type 3 has an invalid length. [ 1234.854063][T19021] syzkaller1: entered promiscuous mode [ 1234.854086][T19021] syzkaller1: entered allmulticast mode [ 1235.298123][T19029] netlink: 64 bytes leftover after parsing attributes in process `syz.5.3441'. [ 1235.348884][T19029] syzkaller1: entered promiscuous mode [ 1235.348908][T19029] syzkaller1: entered allmulticast mode [ 1238.260796][ T1441] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.260852][ T1441] ieee802154 phy1 wpan1: encryption failed: -22 [ 1240.516260][T19061] netlink: 'syz.6.3447': attribute type 3 has an invalid length. [ 1247.435444][T19115] netlink: 'syz.6.3457': attribute type 3 has an invalid length. [ 1250.743303][T19138] netlink: 'syz.4.3463': attribute type 3 has an invalid length. [ 1250.831979][T19136] netlink: 'syz.7.3461': attribute type 3 has an invalid length. [ 1254.034943][T19153] netlink: 64 bytes leftover after parsing attributes in process `syz.6.3465'. [ 1254.066356][T19153] syzkaller1: entered promiscuous mode [ 1254.066388][T19153] syzkaller1: entered allmulticast mode [ 1258.299156][T19204] netlink: 'syz.7.3473': attribute type 3 has an invalid length. [ 1258.500642][T19210] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3476'. [ 1258.769836][T19210] syzkaller1: entered promiscuous mode [ 1258.769860][T19210] syzkaller1: entered allmulticast mode [ 1260.939656][T19233] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3478'. [ 1261.026069][T19233] syzkaller1: entered promiscuous mode [ 1261.026361][T19233] syzkaller1: entered allmulticast mode [ 1262.979279][T19253] netlink: 64 bytes leftover after parsing attributes in process `syz.6.3484'. [ 1262.997488][T19253] syzkaller1: entered promiscuous mode [ 1262.997510][T19253] syzkaller1: entered allmulticast mode [ 1267.241035][T19299] netlink: 64 bytes leftover after parsing attributes in process `syz.6.3499'. [ 1267.253059][T19299] syzkaller1: entered promiscuous mode [ 1267.253072][T19299] syzkaller1: entered allmulticast mode [ 1268.937927][T19323] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3505'. [ 1268.953929][T19323] syzkaller1: entered promiscuous mode [ 1268.953942][T19323] syzkaller1: entered allmulticast mode [ 1268.961340][T19324] netlink: 'syz.6.3503': attribute type 3 has an invalid length. [ 1270.112271][T19332] netlink: 64 bytes leftover after parsing attributes in process `syz.5.3508'. [ 1270.126745][T19332] syzkaller1: entered promiscuous mode [ 1270.126758][T19332] syzkaller1: entered allmulticast mode [ 1270.715752][T19342] netlink: 'syz.5.3511': attribute type 3 has an invalid length. [ 1273.506150][T19353] netlink: 64 bytes leftover after parsing attributes in process `syz.5.3515'. [ 1273.603725][T19353] syzkaller1: entered promiscuous mode [ 1273.603763][T19353] syzkaller1: entered allmulticast mode [ 1277.426367][T19400] netlink: 64 bytes leftover after parsing attributes in process `syz.6.3524'. [ 1277.545925][T19400] syzkaller1: entered promiscuous mode [ 1277.545945][T19400] syzkaller1: entered allmulticast mode [ 1277.613235][T19411] netlink: 88 bytes leftover after parsing attributes in process `syz.7.3526'. [ 1277.686944][T19412] syzkaller1: entered promiscuous mode [ 1277.686993][T19412] syzkaller1: entered allmulticast mode [ 1278.344863][T19416] netlink: 64 bytes leftover after parsing attributes in process `syz.7.3528'. [ 1278.486986][T19416] syzkaller1: entered promiscuous mode [ 1278.487002][T19416] syzkaller1: entered allmulticast mode [ 1279.434784][T19426] netlink: 'syz.6.3530': attribute type 3 has an invalid length. [ 1281.778871][T19437] netlink: 64 bytes leftover after parsing attributes in process `syz.5.3535'. [ 1281.795585][T19437] syzkaller1: entered promiscuous mode [ 1281.795607][T19437] syzkaller1: entered allmulticast mode [ 1282.198296][T19453] netlink: 88 bytes leftover after parsing attributes in process `syz.7.3538'. [ 1282.662979][T19454] syzkaller1: entered promiscuous mode [ 1282.663019][T19454] syzkaller1: entered allmulticast mode [ 1283.258993][T19469] netlink: 'syz.5.3541': attribute type 3 has an invalid length. [ 1283.270054][T19471] netlink: 'syz.6.3542': attribute type 3 has an invalid length. [ 1285.194234][T19501] netlink: 88 bytes leftover after parsing attributes in process `syz.6.3548'. [ 1285.199881][T19501] syzkaller1: entered promiscuous mode [ 1285.199900][T19501] syzkaller1: entered allmulticast mode [ 1285.359357][T19505] netlink: 64 bytes leftover after parsing attributes in process `syz.6.3550'. [ 1285.367879][T19505] syzkaller1: entered promiscuous mode [ 1285.367892][T19505] syzkaller1: entered allmulticast mode [ 1286.668975][T19521] netlink: 'syz.7.3553': attribute type 3 has an invalid length. [ 1289.660644][T19540] netlink: 88 bytes leftover after parsing attributes in process `syz.6.3557'. [ 1289.661373][T19540] syzkaller1: entered promiscuous mode [ 1289.661385][T19540] syzkaller1: entered allmulticast mode [ 1289.780699][T19545] netlink: 'syz.5.3559': attribute type 3 has an invalid length. [ 1291.433553][T19560] netlink: 88 bytes leftover after parsing attributes in process `syz.5.3572'. [ 1291.434271][T19560] syzkaller1: entered promiscuous mode [ 1291.434295][T19560] syzkaller1: entered allmulticast mode [ 1292.717355][T19575] netlink: 64 bytes leftover after parsing attributes in process `syz.5.3566'. [ 1292.729905][T19575] syzkaller1: entered promiscuous mode [ 1292.729925][T19575] syzkaller1: entered allmulticast mode [ 1293.933714][T19604] netlink: 'syz.6.3570': attribute type 3 has an invalid length. [ 1295.680517][T19626] netlink: 88 bytes leftover after parsing attributes in process `syz.4.3575'. [ 1295.681189][T19626] syzkaller1: entered promiscuous mode [ 1295.681201][T19626] syzkaller1: entered allmulticast mode [ 1296.945146][T19628] netlink: 64 bytes leftover after parsing attributes in process `syz.7.3577'. [ 1296.960814][T19628] syzkaller1: entered promiscuous mode [ 1296.960832][T19628] syzkaller1: entered allmulticast mode [ 1297.271555][T19643] netlink: 64 bytes leftover after parsing attributes in process `syz.6.3582'. [ 1297.288811][T19643] syzkaller1: entered promiscuous mode [ 1297.288830][T19643] syzkaller1: entered allmulticast mode [ 1299.007982][T19666] netlink: 'syz.5.3586': attribute type 3 has an invalid length. [ 1299.066721][T19669] netlink: 'syz.7.3587': attribute type 3 has an invalid length. [ 1299.646128][ T1441] ieee802154 phy0 wpan0: encryption failed: -22 [ 1299.646158][ T1441] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.667782][T19682] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3588'. [ 1300.753741][T19684] netlink: 88 bytes leftover after parsing attributes in process `syz.5.3590'. [ 1300.762818][T19684] syzkaller1: entered promiscuous mode [ 1300.762833][T19684] syzkaller1: entered allmulticast mode [ 1302.005709][T19702] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3593'. [ 1302.012840][T19702] syzkaller1: entered promiscuous mode [ 1302.012854][T19702] syzkaller1: entered allmulticast mode [ 1302.775921][T19729] netlink: 'syz.6.3600': attribute type 3 has an invalid length. [ 1303.712459][T19742] netlink: 'syz.6.3603': attribute type 3 has an invalid length. [ 1306.635213][T19751] netlink: 88 bytes leftover after parsing attributes in process `syz.5.3606'. [ 1306.635749][T19751] syzkaller1: entered promiscuous mode [ 1306.635760][T19751] syzkaller1: entered allmulticast mode [ 1306.897001][T19767] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3612'. [ 1306.909711][T19767] syzkaller1: entered promiscuous mode [ 1306.909723][T19767] syzkaller1: entered allmulticast mode [ 1307.854649][T19782] netlink: 'syz.6.3615': attribute type 3 has an invalid length. [ 1309.546361][T19788] netlink: 88 bytes leftover after parsing attributes in process `syz.6.3618'. [ 1309.547250][T19788] syzkaller1: entered promiscuous mode [ 1309.547264][T19788] syzkaller1: entered allmulticast mode [ 1310.771427][T19822] netlink: 'syz.5.3625': attribute type 3 has an invalid length. [ 1312.630722][T19855] netlink: 'syz.5.3630': attribute type 3 has an invalid length. [ 1314.006603][T19868] netlink: 'syz.6.3634': attribute type 3 has an invalid length. [ 1316.454352][T19910] netlink: 'syz.4.3644': attribute type 3 has an invalid length. [ 1319.659452][T19925] netlink: 'syz.7.3649': attribute type 3 has an invalid length. [ 1323.984913][T19969] netlink: 'syz.7.3656': attribute type 3 has an invalid length. [ 1325.265040][ T1039] kworker/0:3 (1039) used greatest stack depth: 17576 bytes left [ 1326.462462][T19995] netlink: 64 bytes leftover after parsing attributes in process `syz.5.3665'. [ 1326.468621][T19995] syzkaller1: entered promiscuous mode [ 1326.468639][T19995] syzkaller1: entered allmulticast mode [ 1327.082598][T20014] netlink: 'syz.6.3673': attribute type 3 has an invalid length. [ 1328.281995][T20027] netlink: 64 bytes leftover after parsing attributes in process `syz.5.3675'. [ 1330.322611][T20041] netlink: 'syz.6.3677': attribute type 3 has an invalid length. [ 1331.944438][T20058] netlink: 'syz.4.3681': attribute type 3 has an invalid length. [ 1333.204438][T20078] netlink: 64 bytes leftover after parsing attributes in process `syz.5.3687'. [ 1334.478074][T20087] netlink: 'syz.4.3691': attribute type 3 has an invalid length. [ 1335.587021][T20108] netlink: 64 bytes leftover after parsing attributes in process `syz.6.3698'. [ 1337.351102][T20141] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3708'. [ 1337.357815][T20141] syzkaller1: entered promiscuous mode [ 1337.357827][T20141] syzkaller1: entered allmulticast mode [ 1337.379235][T20143] netlink: 64 bytes leftover after parsing attributes in process `syz.6.3707'. [ 1337.390843][T20143] syzkaller1: entered promiscuous mode [ 1337.390856][T20143] syzkaller1: entered allmulticast mode [ 1338.991065][T20177] netlink: 'syz.6.3714': attribute type 3 has an invalid length. [ 1339.874286][T20183] netlink: 64 bytes leftover after parsing attributes in process `syz.7.3717'. [ 1339.880779][T20183] syzkaller1: entered promiscuous mode [ 1339.880802][T20183] syzkaller1: entered allmulticast mode [ 1339.924614][T20187] netlink: 'syz.5.3716': attribute type 3 has an invalid length. [ 1340.058540][T20193] netlink: 'syz.6.3715': attribute type 3 has an invalid length. [ 1340.917509][T20203] netlink: 'syz.6.3721': attribute type 3 has an invalid length. [ 1341.008517][T20206] netlink: 'syz.7.3723': attribute type 3 has an invalid length. [ 1342.366030][T20230] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3729'. [ 1342.396248][T20230] syzkaller1: entered promiscuous mode [ 1342.396262][T20230] syzkaller1: entered allmulticast mode [ 1344.494084][T20252] netlink: 'syz.7.3736': attribute type 3 has an invalid length. [ 1344.910449][T20261] netlink: 64 bytes leftover after parsing attributes in process `syz.5.3738'. [ 1344.914198][T20261] syzkaller1: entered promiscuous mode [ 1344.914211][T20261] syzkaller1: entered allmulticast mode [ 1348.340579][T20310] netlink: 64 bytes leftover after parsing attributes in process `syz.7.3749'. [ 1348.362435][T20310] syzkaller1: entered promiscuous mode [ 1348.362456][T20310] syzkaller1: entered allmulticast mode [ 1349.702036][T20340] Bluetooth: MGMT ver 1.23 [ 1350.898766][T20355] netlink: 64 bytes leftover after parsing attributes in process `syz.7.3761'. [ 1350.902436][T20355] syzkaller1: entered promiscuous mode [ 1350.902450][T20355] syzkaller1: entered allmulticast mode [ 1354.545184][T20408] netlink: 'syz.4.3772': attribute type 3 has an invalid length. [ 1355.297611][T20423] netlink: 64 bytes leftover after parsing attributes in process `syz.7.3776'. [ 1355.310897][T20423] syzkaller1: entered promiscuous mode [ 1355.310917][T20423] syzkaller1: entered allmulticast mode [ 1358.017706][T20457] netlink: 'syz.4.3786': attribute type 3 has an invalid length. [ 1358.270990][T20463] netlink: 64 bytes leftover after parsing attributes in process `syz.6.3788'. [ 1358.281633][T20463] syzkaller1: entered promiscuous mode [ 1358.281651][T20463] syzkaller1: entered allmulticast mode [ 1359.374345][T20471] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3790'. [ 1359.408142][T20471] netlink: 'syz.7.3790': attribute type 3 has an invalid length. [ 1359.553569][T20482] netlink: 'syz.5.3793': attribute type 3 has an invalid length. [ 1360.450266][T20492] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3796'. [ 1360.459944][T20492] netlink: 'syz.7.3796': attribute type 3 has an invalid length. [ 1360.587166][T20497] netlink: 'syz.4.3795': attribute type 3 has an invalid length. [ 1360.737461][T20501] netlink: 64 bytes leftover after parsing attributes in process `syz.5.3799'. [ 1360.743957][T20501] syzkaller1: entered promiscuous mode [ 1360.743970][T20501] syzkaller1: entered allmulticast mode [ 1361.088887][ T1441] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.088938][ T1441] ieee802154 phy1 wpan1: encryption failed: -22 [ 1362.537001][T20524] netlink: 'syz.6.3804': attribute type 3 has an invalid length. [ 1364.501637][T20546] netlink: 64 bytes leftover after parsing attributes in process `syz.6.3810'. [ 1364.616096][T20545] syzkaller1: entered promiscuous mode [ 1364.616335][T20545] syzkaller1: entered allmulticast mode [ 1364.768869][T20547] netlink: 'syz.7.3808': attribute type 3 has an invalid length. [ 1366.093822][T20554] netlink: 'syz.4.3812': attribute type 3 has an invalid length. [ 1366.145713][T20557] netlink: 64 bytes leftover after parsing attributes in process `syz.5.3820'. [ 1366.154242][T20557] syzkaller1: entered promiscuous mode [ 1366.154329][T20557] syzkaller1: entered allmulticast mode [ 1367.448951][T20577] netlink: 'syz.7.3817': attribute type 3 has an invalid length. [ 1367.828080][T20584] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3819'. [ 1367.889822][T20585] syzkaller1: entered promiscuous mode [ 1367.889836][T20585] syzkaller1: entered allmulticast mode [ 1368.264463][T20592] netlink: 'syz.6.3822': attribute type 3 has an invalid length. [ 1368.813192][T20599] netlink: 64 bytes leftover after parsing attributes in process `syz.5.3824'. [ 1368.819896][T20599] syzkaller1: entered promiscuous mode [ 1368.819962][T20599] syzkaller1: entered allmulticast mode [ 1369.088129][T20608] netlink: 'syz.4.3826': attribute type 3 has an invalid length. [ 1372.521887][T20650] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3837'. [ 1372.525775][T20650] syzkaller1: entered promiscuous mode [ 1372.525788][T20650] syzkaller1: entered allmulticast mode [ 1373.359631][T20659] netlink: 'syz.5.3840': attribute type 3 has an invalid length. [ 1375.770747][T20689] netlink: 'syz.6.3855': attribute type 3 has an invalid length. [ 1375.782590][T20688] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3847'. [ 1375.793961][T20688] syzkaller1: entered promiscuous mode [ 1375.793974][T20688] syzkaller1: entered allmulticast mode [ 1378.751709][T20721] netlink: 'syz.5.3852': attribute type 3 has an invalid length. [ 1383.190716][T20764] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3864'. [ 1383.208822][T20764] netlink: 'syz.6.3864': attribute type 3 has an invalid length. [ 1383.210158][T20765] netlink: 'syz.7.3865': attribute type 3 has an invalid length. [ 1384.198188][T20779] netlink: 'syz.7.3868': attribute type 3 has an invalid length. [ 1384.220626][T20782] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3870'. [ 1384.309174][T20786] netlink: 'syz.4.3869': attribute type 3 has an invalid length. [ 1384.325853][T20782] netlink: 'syz.5.3870': attribute type 3 has an invalid length. [ 1384.519934][T20793] netlink: 'syz.6.3871': attribute type 3 has an invalid length. [ 1387.402230][T20810] netlink: 'syz.7.3876': attribute type 3 has an invalid length. [ 1391.798529][T20852] netlink: 'syz.7.3885': attribute type 3 has an invalid length. [ 1393.177869][T20875] Bluetooth: hci0: unsupported parameter 255 [ 1393.177882][T20875] Bluetooth: hci0: unsupported parameter 255 [ 1395.553647][T20916] netlink: 'syz.4.3899': attribute type 3 has an invalid length. [ 1402.199530][T20998] netlink: 'syz.5.3921': attribute type 3 has an invalid length. [ 1405.370573][T21024] netlink: 'syz.4.3926': attribute type 3 has an invalid length. [ 1405.513245][T21028] netlink: 'syz.7.3927': attribute type 3 has an invalid length. [ 1411.492665][T21086] netlink: 'syz.4.3939': attribute type 3 has an invalid length. [ 1414.552768][T21103] netlink: 'syz.7.3943': attribute type 3 has an invalid length. [ 1416.069114][T21127] netlink: 'syz.6.3948': attribute type 3 has an invalid length. [ 1418.198376][T21151] netlink: 'syz.5.3954': attribute type 3 has an invalid length. [ 1422.527139][ T1441] ieee802154 phy0 wpan0: encryption failed: -22 [ 1422.527390][ T1441] ieee802154 phy1 wpan1: encryption failed: -22 [ 1423.752148][T21228] netlink: 'syz.4.3975': attribute type 3 has an invalid length. [ 1427.099596][T21256] Bluetooth: hci0: invalid length 0, exp 2 for type 12 [ 1427.773051][T21271] netlink: 'syz.6.3987': attribute type 3 has an invalid length. [ 1430.911466][T21278] Bluetooth: hci0: invalid length 0, exp 2 for type 12 [ 1431.781948][T21301] netlink: 'syz.4.3994': attribute type 3 has an invalid length. [ 1432.644266][T21309] netlink: 'syz.4.3996': attribute type 3 has an invalid length. [ 1435.797225][T21332] netlink: 'syz.5.4002': attribute type 3 has an invalid length. [ 1440.032854][T21373] netlink: 'syz.6.4010': attribute type 3 has an invalid length. [ 1440.501994][T21382] netlink: 'syz.7.4014': attribute type 3 has an invalid length. [ 1445.931285][T21417] Bluetooth: hci0: unsupported parameter 255 [ 1445.931299][T21417] Bluetooth: hci0: unsupported parameter 255 [ 1447.646723][T21434] netlink: 'syz.7.4026': attribute type 3 has an invalid length. [ 1450.673205][T21447] netlink: 'syz.4.4030': attribute type 3 has an invalid length. [ 1454.236572][T21476] netlink: 'syz.5.4038': attribute type 3 has an invalid length. [ 1457.502375][T21502] netlink: 'syz.7.4046': attribute type 3 has an invalid length. [ 1460.688642][T21534] netlink: 'syz.6.4054': attribute type 3 has an invalid length. [ 1462.940911][T21552] netlink: 'syz.6.4059': attribute type 3 has an invalid length. [ 1473.622490][T21639] netlink: 'syz.4.4079': attribute type 3 has an invalid length. [ 1475.478800][T21653] netlink: 'syz.4.4085': attribute type 3 has an invalid length. [ 1476.149267][T21666] netlink: 'syz.5.4088': attribute type 3 has an invalid length. [ 1479.604632][T21701] netlink: 'syz.7.4096': attribute type 3 has an invalid length. [ 1481.926138][T21721] netlink: 'syz.5.4100': attribute type 3 has an invalid length. [ 1483.888625][T21739] netlink: 'syz.7.4108': attribute type 3 has an invalid length. [ 1483.973451][ T1441] ieee802154 phy0 wpan0: encryption failed: -22 [ 1483.973531][ T1441] ieee802154 phy1 wpan1: encryption failed: -22 [ 1487.563564][T21774] netlink: 'syz.4.4117': attribute type 3 has an invalid length. [ 1491.795558][T21810] netlink: 'syz.6.4128': attribute type 3 has an invalid length. [ 1495.505636][T21858] netlink: 'syz.7.4138': attribute type 3 has an invalid length. [ 1495.562120][T21859] netlink: 'syz.4.4139': attribute type 3 has an invalid length. [ 1496.175477][T21868] netlink: 'syz.6.4141': attribute type 3 has an invalid length. [ 1499.030068][T21892] netlink: 'syz.5.4148': attribute type 3 has an invalid length. [ 1501.950444][T21904] netlink: 'syz.7.4149': attribute type 3 has an invalid length. [ 1502.054138][T21909] netlink: 'syz.4.4151': attribute type 3 has an invalid length. [ 1505.047985][T21922] netlink: 'syz.7.4153': attribute type 3 has an invalid length. [ 1508.578161][T21954] netlink: 'syz.7.4164': attribute type 3 has an invalid length. [ 1513.675927][T21990] netlink: 'syz.4.4173': attribute type 3 has an invalid length. [ 1515.592149][T21999] netlink: 'syz.7.4177': attribute type 3 has an invalid length. [ 1517.880908][T22027] netlink: 'syz.4.4187': attribute type 3 has an invalid length. [ 1517.996037][T22030] netlink: 'syz.7.4188': attribute type 3 has an invalid length. [ 1518.265617][T22036] netlink: 'syz.6.4189': attribute type 3 has an invalid length. [ 1520.921159][T22047] netlink: 'syz.5.4190': attribute type 3 has an invalid length. [ 1521.070169][T22056] 9p: Bad value for 'rfdno' [ 1521.202943][ T44] audit: type=1804 audit(1789049358.802:2): pid=22060 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.4196" name="/newroot/282/cgroup.controllers" dev="tmpfs" ino=1499 res=1 errno=0 [ 1521.204529][ T44] audit: type=1800 audit(1789049358.802:3): pid=22060 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.4196" name="cgroup.controllers" dev="tmpfs" ino=1499 res=0 errno=0 [ 1522.011338][T22067] 9pnet_virtio: no channels available for device syz [ 1522.015733][T22067] 9p: Bad value for 'rfdno' [ 1522.245569][T22076] netlink: 'syz.5.4201': attribute type 3 has an invalid length. [ 1525.269748][T22100] 9pnet_virtio: no channels available for device syz [ 1525.273364][T22100] 9p: Bad value for 'rfdno' [ 1525.273606][T22103] 9pnet_virtio: no channels available for device syz [ 1525.283985][T22103] 9p: Bad value for 'rfdno' [ 1525.341423][T22106] 9p: Bad value for 'rfdno' [ 1526.941302][T22123] netlink: 'syz.4.4214': attribute type 3 has an invalid length. [ 1530.020594][T22134] 9p: Bad value for 'rfdno' [ 1530.223144][T22149] netlink: 'syz.7.4222': attribute type 3 has an invalid length. [ 1530.251628][T22150] netlink: 'syz.6.4223': attribute type 3 has an invalid length. [ 1530.305966][ T44] audit: type=1804 audit(1789049367.912:4): pid=22134 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.4219" name="/newroot/285/cgroup.controllers" dev="tmpfs" ino=1519 res=1 errno=0 [ 1530.309204][ T44] audit: type=1800 audit(1789049367.912:5): pid=22134 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.4219" name="cgroup.controllers" dev="tmpfs" ino=1519 res=0 errno=0 [ 1533.405497][T22165] 9p: Bad value for 'rfdno' [ 1533.527428][T22176] 9pnet_virtio: no channels available for device syz [ 1533.542559][T22176] 9p: Bad value for 'rfdno' [ 1533.556727][ T44] audit: type=1804 audit(1789049371.162:6): pid=22178 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.4228" name="/newroot/255/cgroup.controllers" dev="tmpfs" ino=1353 res=1 errno=0 [ 1533.556759][ T44] audit: type=1800 audit(1789049371.162:7): pid=22178 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.4228" name="cgroup.controllers" dev="tmpfs" ino=1353 res=0 errno=0 [ 1535.011598][T22190] Cache volume key already in use (9p,syz,) [ 1535.024409][T22190] 9p: Bad value for 'rfdno' [ 1535.160664][T22195] 9pnet_virtio: no channels available for device syz [ 1535.191778][T22195] 9p: Bad value for 'rfdno' [ 1535.819423][ T44] audit: type=1804 audit(1789049373.422:8): pid=22190 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.4236" name="/newroot/294/cgroup.controllers" dev="tmpfs" ino=1582 res=1 errno=0 [ 1535.819455][ T44] audit: type=1800 audit(1789049373.422:9): pid=22190 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.4236" name="cgroup.controllers" dev="tmpfs" ino=1582 res=0 errno=0 [ 1537.239279][T22215] 9p: Bad value for 'rfdno' [ 1537.250739][T22218] 9pnet_virtio: no channels available for device syz [ 1537.267067][T22218] 9p: Bad value for 'rfdno' [ 1537.372972][ T44] audit: type=1804 audit(1789049374.972:10): pid=22219 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.7.4244" name="/newroot/296/cgroup.controllers" dev="tmpfs" ino=1579 res=1 errno=0 [ 1537.373382][ T44] audit: type=1800 audit(1789049374.972:11): pid=22219 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.4244" name="cgroup.controllers" dev="tmpfs" ino=1579 res=0 errno=0 [ 1537.409278][ T44] audit: type=1804 audit(1789049375.012:12): pid=22220 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.4245" name="/newroot/289/cgroup.controllers" dev="tmpfs" ino=1545 res=1 errno=0 [ 1537.409326][ T44] audit: type=1800 audit(1789049375.012:13): pid=22220 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.4245" name="cgroup.controllers" dev="tmpfs" ino=1545 res=0 errno=0 [ 1537.527675][T22222] 9pnet_virtio: no channels available for device syz [ 1537.550940][T22222] 9p: Bad value for 'rfdno' [ 1538.682143][ T44] audit: type=1804 audit(1789049376.282:14): pid=22222 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.4246" name="/newroot/260/cgroup.controllers" dev="tmpfs" ino=1386 res=1 errno=0 [ 1538.683171][ T44] audit: type=1800 audit(1789049376.282:15): pid=22222 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.4246" name="cgroup.controllers" dev="tmpfs" ino=1386 res=0 errno=0 [ 1538.855585][T22225] 9pnet_virtio: no channels available for device syz [ 1538.858573][T22225] 9p: Bad value for 'rfdno' [ 1538.907552][T22227] 9pnet_virtio: no channels available for device syz [ 1538.910196][T22227] 9p: Bad value for 'rfdno' [ 1538.945581][ T44] audit: type=1804 audit(1789049376.552:16): pid=22228 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.4247" name="/newroot/290/cgroup.controllers" dev="tmpfs" ino=1553 res=1 errno=0 [ 1538.945615][ T44] audit: type=1800 audit(1789049376.552:17): pid=22228 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.4247" name="cgroup.controllers" dev="tmpfs" ino=1553 res=0 errno=0 [ 1539.108124][T22235] 9p: Bad value for 'rfdno' [ 1540.532530][T22245] Cache volume key already in use (9p,syz,) [ 1540.543932][T22245] 9p: Bad value for 'rfdno' [ 1543.435674][T22271] 9pnet_virtio: no channels available for device syz [ 1543.440074][T22271] 9p: Bad value for 'rfdno' [ 1543.689391][ T44] kauditd_printk_skb: 6 callbacks suppressed [ 1543.689405][ T44] audit: type=1804 audit(1789049381.292:24): pid=22271 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.4261" name="/newroot/295/cgroup.controllers" dev="tmpfs" ino=1582 res=1 errno=0 [ 1543.689431][ T44] audit: type=1800 audit(1789049381.292:25): pid=22271 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.4261" name="cgroup.controllers" dev="tmpfs" ino=1582 res=0 errno=0 [ 1544.513991][T22285] 9p: Bad value for 'rfdno' [ 1544.561951][ T44] audit: type=1804 audit(1789049382.162:26): pid=22285 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.4264" name="/newroot/265/cgroup.controllers" dev="tmpfs" ino=1415 res=1 errno=0 [ 1544.562070][ T44] audit: type=1800 audit(1789049382.162:27): pid=22285 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.4264" name="cgroup.controllers" dev="tmpfs" ino=1415 res=0 errno=0 [ 1545.423806][ T1441] ieee802154 phy0 wpan0: encryption failed: -22 [ 1545.423836][ T1441] ieee802154 phy1 wpan1: encryption failed: -22 [ 1546.014719][T22297] 9pnet_virtio: no channels available for device syz [ 1546.018905][T22297] 9p: Bad value for 'rfdno' [ 1546.079840][T22301] 9pnet_virtio: no channels available for device syz [ 1546.085223][T22301] 9p: Bad value for 'rfdno' [ 1546.175612][ T44] audit: type=1804 audit(1789049383.782:28): pid=22297 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.4268" name="/newroot/296/cgroup.controllers" dev="tmpfs" ino=1590 res=1 errno=0 [ 1546.176008][ T44] audit: type=1800 audit(1789049383.782:29): pid=22297 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.4268" name="cgroup.controllers" dev="tmpfs" ino=1590 res=0 errno=0 [ 1546.255581][ T44] audit: type=1804 audit(1789049383.862:30): pid=22301 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.7.4271" name="/newroot/304/cgroup.controllers" dev="tmpfs" ino=1623 res=1 errno=0 [ 1546.255629][ T44] audit: type=1800 audit(1789049383.862:31): pid=22301 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.4271" name="cgroup.controllers" dev="tmpfs" ino=1623 res=0 errno=0 [ 1546.535973][T22315] 9p: Bad value for 'rfdno' [ 1547.103228][T22319] 9pnet_virtio: no channels available for device syz [ 1547.111959][T22319] 9p: Bad value for 'rfdno' [ 1547.230153][ T44] audit: type=1804 audit(1789049384.832:32): pid=22319 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.7.4277" name="/newroot/305/cgroup.controllers" dev="tmpfs" ino=1631 res=1 errno=0 [ 1547.230348][ T44] audit: type=1800 audit(1789049384.832:33): pid=22319 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.4277" name="cgroup.controllers" dev="tmpfs" ino=1631 res=0 errno=0 [ 1547.270786][T22321] 9pnet_virtio: no channels available for device syz [ 1547.280182][T22321] 9p: Bad value for 'rfdno' [ 1548.680506][T22343] 9pnet_virtio: no channels available for device syz [ 1548.683279][T22343] 9p: Bad value for 'rfdno' [ 1548.816507][T22347] Cache volume key already in use (9p,syz,) [ 1548.844543][T22347] 9p: Bad value for 'rfdno' [ 1548.974522][ T44] kauditd_printk_skb: 4 callbacks suppressed [ 1548.974542][ T44] audit: type=1804 audit(1789049386.572:38): pid=22350 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.4288" name="/newroot/269/cgroup.controllers" dev="tmpfs" ino=1440 res=1 errno=0 [ 1548.987420][ T44] audit: type=1800 audit(1789049386.592:39): pid=22350 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.4288" name="cgroup.controllers" dev="tmpfs" ino=1440 res=0 errno=0 [ 1551.416615][T22373] 9p: Bad value for 'rfdno' [ 1551.705616][ T44] audit: type=1804 audit(1789049389.312:40): pid=22374 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.4294" name="/newroot/270/cgroup.controllers" dev="tmpfs" ino=1447 res=1 errno=0 [ 1551.706607][ T44] audit: type=1800 audit(1789049389.312:41): pid=22374 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.4294" name="cgroup.controllers" dev="tmpfs" ino=1447 res=0 errno=0 [ 1554.815705][T22419] 9p: Bad value for 'rfdno' [ 1556.008104][T22430] netlink: 'syz.4.4311': attribute type 3 has an invalid length. [ 1556.451844][T22439] Cache volume key already in use (9p,syz,) [ 1556.462879][T22439] 9p: Bad value for 'rfdno' [ 1559.153041][T22446] 9p: Bad value for 'rfdno' [ 1559.205327][T22445] Cache volume key already in use (9p,syz,) [ 1559.426942][T22451] netlink: 'syz.4.4319': attribute type 3 has an invalid length. [ 1562.523753][T22467] 9p: Bad value for 'rfdno' [ 1562.535975][T22469] 9pnet_virtio: no channels available for device syz [ 1562.541756][T22469] 9p: Bad value for 'rfdno' [ 1562.587932][ T44] audit: type=1804 audit(1789049400.192:42): pid=22472 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.4323" name="/newroot/275/cgroup.controllers" dev="tmpfs" ino=1476 res=1 errno=0 [ 1562.590637][ T44] audit: type=1800 audit(1789049400.192:43): pid=22472 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.4323" name="cgroup.controllers" dev="tmpfs" ino=1476 res=0 errno=0 [ 1564.387196][T22486] 9p: Bad value for 'rfdno' [ 1564.390552][T22488] 9pnet_virtio: no channels available for device syz [ 1564.401741][T22488] 9p: Bad value for 'rfdno' [ 1565.658458][T22496] netlink: 'syz.4.4331': attribute type 3 has an invalid length. [ 1568.854145][T22527] 9pnet_virtio: no channels available for device syz [ 1568.862274][T22527] 9p: Bad value for 'rfdno' [ 1568.876984][T22526] 9p: Bad value for 'rfdno' [ 1568.926320][T22530] 9pnet_virtio: no channels available for device syz [ 1568.927971][T22530] 9p: Bad value for 'rfdno' [ 1569.172184][T22537] 9pnet_virtio: no channels available for device syz [ 1569.187418][T22537] 9p: Bad value for 'rfdno' [ 1569.503844][T22540] 9pnet_virtio: no channels available for device syz [ 1569.509297][T22540] 9p: Bad value for 'rfdno' [ 1569.565566][ T44] audit: type=1804 audit(1789049407.172:44): pid=22541 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.7.4341" name="/newroot/324/cgroup.controllers" dev="tmpfs" ino=1736 res=1 errno=0 [ 1569.566037][ T44] audit: type=1800 audit(1789049407.172:45): pid=22541 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.4341" name="cgroup.controllers" dev="tmpfs" ino=1736 res=0 errno=0 [ 1569.819151][T22545] Cache volume key already in use (9p,syz,) [ 1569.832698][T22545] 9p: Bad value for 'rfdno' [ 1571.361679][T22569] 9pnet_virtio: no channels available for device syz [ 1571.371106][T22569] 9p: Bad value for 'rfdno' [ 1571.442802][ T44] audit: type=1804 audit(1789049409.042:46): pid=22569 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.4350" name="/newroot/323/cgroup.controllers" dev="tmpfs" ino=1753 res=1 errno=0 [ 1571.444244][ T44] audit: type=1800 audit(1789049409.042:47): pid=22569 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.4350" name="cgroup.controllers" dev="tmpfs" ino=1753 res=0 errno=0 [ 1572.250183][T22580] 9p: Bad value for 'rfdno' [ 1572.514864][ T44] audit: type=1804 audit(1789049410.112:48): pid=22580 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.7.4354" name="/newroot/327/cgroup.controllers" dev="tmpfs" ino=1754 res=1 errno=0 [ 1572.515135][ T44] audit: type=1800 audit(1789049410.112:49): pid=22580 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.4354" name="cgroup.controllers" dev="tmpfs" ino=1754 res=0 errno=0 [ 1574.231875][T22606] 9pnet_virtio: no channels available for device syz [ 1574.239220][T22606] 9p: Bad value for 'rfdno' [ 1574.274239][ T44] audit: type=1804 audit(1789049411.872:50): pid=22606 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.4361" name="/newroot/321/cgroup.controllers" dev="tmpfs" ino=1734 res=1 errno=0 [ 1574.284048][ T44] audit: type=1800 audit(1789049411.872:51): pid=22606 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.4361" name="cgroup.controllers" dev="tmpfs" ino=1734 res=0 errno=0 [ 1574.482997][T22611] 9p: Bad value for 'rfdno' [ 1574.503822][ T44] audit: type=1804 audit(1789049412.102:52): pid=22611 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.7.4362" name="/newroot/328/cgroup.controllers" dev="tmpfs" ino=1761 res=1 errno=0 [ 1574.504115][ T44] audit: type=1800 audit(1789049412.102:53): pid=22611 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.4362" name="cgroup.controllers" dev="tmpfs" ino=1761 res=0 errno=0 [ 1574.701854][T22621] 9pnet_virtio: no channels available for device syz [ 1574.712942][T22621] 9p: Bad value for 'rfdno' [ 1575.339197][T22636] netlink: 'syz.7.4369': attribute type 3 has an invalid length. [ 1575.881097][T22639] 9p: Bad value for 'rfdno' [ 1576.997622][T22652] 9p: Bad value for 'rfdno' [ 1579.473634][T22679] 9p: Bad value for 'rfdno' [ 1579.483407][T22681] 9pnet_virtio: no channels available for device syz [ 1579.486126][T22681] 9p: Bad value for 'rfdno' [ 1580.017236][T22691] netlink: 'syz.6.4387': attribute type 3 has an invalid length. [ 1580.018347][T22690] netlink: 'syz.7.4386': attribute type 3 has an invalid length. [ 1580.215104][T22693] 9pnet_virtio: no channels available for device syz [ 1580.219734][T22693] 9p: Bad value for 'rfdno' [ 1580.277784][ T44] audit: type=1804 audit(1789049417.882:54): pid=22693 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.4389" name="/newroot/328/cgroup.controllers" dev="tmpfs" ino=1777 res=1 errno=0 [ 1580.278657][ T44] audit: type=1800 audit(1789049417.882:55): pid=22693 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.4389" name="cgroup.controllers" dev="tmpfs" ino=1777 res=0 errno=0 [ 1580.332143][T22696] 9pnet_virtio: no channels available for device syz [ 1580.391401][ T44] audit: type=1804 audit(1789049417.992:56): pid=22697 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.4390" name="/newroot/329/cgroup.controllers" dev="tmpfs" ino=1785 res=1 errno=0 [ 1580.391598][ T44] audit: type=1800 audit(1789049417.992:57): pid=22697 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.4390" name="cgroup.controllers" dev="tmpfs" ino=1785 res=0 errno=0 [ 1581.189983][T22700] 9pnet_virtio: no channels available for device syz [ 1581.192569][T22700] 9p: Bad value for 'rfdno' [ 1581.248833][ T44] audit: type=1804 audit(1789049418.852:58): pid=22701 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.4391" name="/newroot/330/cgroup.controllers" dev="tmpfs" ino=1793 res=1 errno=0 [ 1581.249033][ T44] audit: type=1800 audit(1789049418.852:59): pid=22701 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.4391" name="cgroup.controllers" dev="tmpfs" ino=1793 res=0 errno=0 [ 1583.103860][T22718] Cache volume key already in use (9p,syz,) [ 1583.117054][T22718] 9p: Bad value for 'rfdno' [ 1583.173891][ T44] audit: type=1804 audit(1789049420.772:60): pid=22718 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.4396" name="/newroot/333/cgroup.controllers" dev="tmpfs" ino=1810 res=1 errno=0 [ 1583.174002][ T44] audit: type=1800 audit(1789049420.772:61): pid=22718 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.4396" name="cgroup.controllers" dev="tmpfs" ino=1810 res=0 errno=0 [ 1584.285716][T22728] 9p: Bad value for 'rfdno' [ 1584.367810][T22732] 9pnet_virtio: no channels available for device syz [ 1584.376716][T22732] 9p: Bad value for 'rfdno' [ 1584.540936][ T44] audit: type=1804 audit(1789049422.142:62): pid=22737 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.4399" name="/newroot/337/cgroup.controllers" dev="tmpfs" ino=1831 res=1 errno=0 [ 1584.541054][ T44] audit: type=1800 audit(1789049422.142:63): pid=22737 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.4399" name="cgroup.controllers" dev="tmpfs" ino=1831 res=0 errno=0 [ 1585.616573][T22743] netlink: 'syz.5.4401': attribute type 3 has an invalid length. [ 1589.698058][T22781] 9pnet_virtio: no channels available for device syz [ 1589.702659][T22781] 9p: Bad value for 'rfdno' [ 1589.711143][ T44] audit: type=1804 audit(1789049427.312:64): pid=22777 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.4409" name="/newroot/341/cgroup.controllers" dev="tmpfs" ino=1855 res=1 errno=0 [ 1589.711238][ T44] audit: type=1800 audit(1789049427.312:65): pid=22777 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.4409" name="cgroup.controllers" dev="tmpfs" ino=1855 res=0 errno=0 [ 1589.789213][ T44] audit: type=1804 audit(1789049427.392:66): pid=22781 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.7.4411" name="/newroot/336/cgroup.controllers" dev="tmpfs" ino=1808 res=1 errno=0 [ 1589.789911][ T44] audit: type=1800 audit(1789049427.392:67): pid=22781 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.4411" name="cgroup.controllers" dev="tmpfs" ino=1808 res=0 errno=0 [ 1592.287045][ T44] audit: type=1804 audit(1789049429.892:68): pid=22808 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.7.4418" name="/newroot/339/cgroup.controllers" dev="tmpfs" ino=1826 res=1 errno=0 [ 1592.287093][ T44] audit: type=1800 audit(1789049429.892:69): pid=22808 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.4418" name="cgroup.controllers" dev="tmpfs" ino=1826 res=0 errno=0 [ 1592.622881][T22813] 9pnet_virtio: no channels available for device syz [ 1592.633049][T22813] 9p: Bad value for 'rfdno' [ 1592.691490][ T44] audit: type=1804 audit(1789049430.292:70): pid=22813 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.4420" name="/newroot/295/cgroup.controllers" dev="tmpfs" ino=1598 res=1 errno=0 [ 1592.691782][ T44] audit: type=1800 audit(1789049430.292:71): pid=22813 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.4420" name="cgroup.controllers" dev="tmpfs" ino=1598 res=0 errno=0 [ 1592.720616][T22816] 9pnet_virtio: no channels available for device syz [ 1592.724642][T22816] 9p: Bad value for 'rfdno' [ 1592.784512][ T44] audit: type=1804 audit(1789049430.382:72): pid=22816 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.4421" name="/newroot/339/cgroup.controllers" dev="tmpfs" ino=1844 res=1 errno=0 [ 1592.784793][ T44] audit: type=1800 audit(1789049430.382:73): pid=22816 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.4421" name="cgroup.controllers" dev="tmpfs" ino=1844 res=0 errno=0 [ 1593.267807][T22826] netlink: 'syz.7.4423': attribute type 3 has an invalid length. [ 1594.342729][T22831] 9p: Bad value for 'rfdno' [ 1596.313790][T22836] Cache volume key already in use (9p,syz,) [ 1596.349911][T22836] 9p: Bad value for 'rfdno' [ 1596.405024][ T44] kauditd_printk_skb: 2 callbacks suppressed [ 1596.405036][ T44] audit: type=1804 audit(1789049434.012:76): pid=22836 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.7.4429" name="/newroot/341/cgroup.controllers" dev="tmpfs" ino=1838 res=1 errno=0 [ 1596.405141][ T44] audit: type=1800 audit(1789049434.012:77): pid=22836 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.4429" name="cgroup.controllers" dev="tmpfs" ino=1838 res=0 errno=0 [ 1598.369793][T22862] 9p: Bad value for 'rfdno' [ 1598.485802][ T44] audit: type=1804 audit(1789049436.092:78): pid=22862 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.7.4437" name="/newroot/344/cgroup.controllers" dev="tmpfs" ino=1857 res=1 errno=0 [ 1598.486766][ T44] audit: type=1800 audit(1789049436.092:79): pid=22862 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.4437" name="cgroup.controllers" dev="tmpfs" ino=1857 res=0 errno=0 [ 1598.517558][T22867] 9pnet_virtio: no channels available for device syz [ 1598.520770][T22867] 9p: Bad value for 'rfdno' [ 1598.576122][ T44] audit: type=1804 audit(1789049436.182:80): pid=22867 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.4438" name="/newroot/345/cgroup.controllers" dev="tmpfs" ino=1882 res=1 errno=0 [ 1598.576262][ T44] audit: type=1800 audit(1789049436.182:81): pid=22867 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.4438" name="cgroup.controllers" dev="tmpfs" ino=1882 res=0 errno=0 [ 1598.619488][T22871] Cache volume key already in use (9p,syz,) [ 1598.630342][T22871] 9p: Bad value for 'rfdno' [ 1598.752686][T22878] 9pnet_virtio: no channels available for device syz [ 1598.756474][T22878] 9p: Bad value for 'rfdno' [ 1598.813519][ T44] audit: type=1804 audit(1789049436.412:82): pid=22878 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.7.4440" name="/newroot/345/cgroup.controllers" dev="tmpfs" ino=1865 res=1 errno=0 [ 1598.814243][ T44] audit: type=1800 audit(1789049436.412:83): pid=22878 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.4440" name="cgroup.controllers" dev="tmpfs" ino=1865 res=0 errno=0 [ 1599.465671][T22886] 9pnet_virtio: no channels available for device syz [ 1599.543650][T22886] 9p: Bad value for 'rfdno' [ 1599.829430][T22894] netlink: 'syz.6.4448': attribute type 3 has an invalid length. [ 1600.339946][T22898] 9p: Bad value for 'rfdno' [ 1600.459476][ T44] audit: type=1804 audit(1789049438.062:84): pid=22898 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.4449" name="/newroot/348/cgroup.controllers" dev="tmpfs" ino=1901 res=1 errno=0 [ 1600.459947][ T44] audit: type=1800 audit(1789049438.062:85): pid=22898 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.4449" name="cgroup.controllers" dev="tmpfs" ino=1901 res=0 errno=0 [ 1600.962852][T22911] Bluetooth: hci0: invalid length 0, exp 2 for type 12 [ 1601.048261][T22916] 9p: Bad value for 'rfdno' [ 1601.093507][T22918] netlink: 'syz.4.4456': attribute type 3 has an invalid length. [ 1604.114066][T22926] Cache volume key already in use (9p,syz,) [ 1604.124143][T22926] 9p: Bad value for 'rfdno' [ 1604.130719][T22928] 9pnet_virtio: no channels available for device syz [ 1604.134588][T22928] 9p: Bad value for 'rfdno' [ 1604.180860][ T44] kauditd_printk_skb: 2 callbacks suppressed [ 1604.180878][ T44] audit: type=1804 audit(1789049441.782:88): pid=22926 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.4460" name="/newroot/303/cgroup.controllers" dev="tmpfs" ino=1643 res=1 errno=0 [ 1604.181060][ T44] audit: type=1800 audit(1789049441.782:89): pid=22926 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.4460" name="cgroup.controllers" dev="tmpfs" ino=1643 res=0 errno=0 [ 1604.209540][ T44] audit: type=1804 audit(1789049441.812:90): pid=22930 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.4459" name="/newroot/351/cgroup.controllers" dev="tmpfs" ino=1920 res=1 errno=0 [ 1604.209588][ T44] audit: type=1800 audit(1789049441.812:91): pid=22930 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.4459" name="cgroup.controllers" dev="tmpfs" ino=1920 res=0 errno=0 [ 1605.188049][T22940] 9p: Bad value for 'rfdno' [ 1605.437561][T22945] 9pnet_virtio: no channels available for device syz [ 1605.443680][T22945] 9p: Bad value for 'rfdno' [ 1606.847032][ T1441] ieee802154 phy0 wpan0: encryption failed: -22 [ 1606.847061][ T1441] ieee802154 phy1 wpan1: encryption failed: -22 [ 1607.957617][T22964] 9p: Bad value for 'rfdno' [ 1608.030922][T22966] 9pnet_virtio: no channels available for device syz [ 1608.039300][T22966] 9p: Bad value for 'rfdno' [ 1608.273558][ T44] audit: type=1804 audit(1789049445.872:92): pid=22966 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.4470" name="/newroot/355/cgroup.controllers" dev="tmpfs" ino=1932 res=1 errno=0 [ 1608.273611][ T44] audit: type=1800 audit(1789049445.872:93): pid=22966 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.4470" name="cgroup.controllers" dev="tmpfs" ino=1932 res=0 errno=0 [ 1608.827580][T22972] 9pnet_virtio: no channels available for device syz [ 1608.841108][T22972] 9p: Bad value for 'rfdno' [ 1608.978843][ T44] audit: type=1804 audit(1789049446.582:94): pid=22974 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.4472" name="/newroot/306/cgroup.controllers" dev="tmpfs" ino=1662 res=1 errno=0 [ 1608.978876][ T44] audit: type=1800 audit(1789049446.582:95): pid=22974 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.4472" name="cgroup.controllers" dev="tmpfs" ino=1662 res=0 errno=0 [ 1609.193335][T22980] 9pnet_virtio: no channels available for device syz [ 1609.199512][T22980] 9p: Bad value for 'rfdno' [ 1609.322937][ T44] audit: type=1804 audit(1789049446.922:96): pid=22980 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.4473" name="/newroot/355/cgroup.controllers" dev="tmpfs" ino=1943 res=1 errno=0 [ 1609.322970][ T44] audit: type=1800 audit(1789049446.922:97): pid=22980 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.4473" name="cgroup.controllers" dev="tmpfs" ino=1943 res=0 errno=0 [ 1609.996420][T22987] 9pnet_virtio: no channels available for device syz [ 1610.001954][T22987] 9p: Bad value for 'rfdno' [ 1610.081649][ T44] audit: type=1804 audit(1789049447.682:98): pid=22987 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.4476" name="/newroot/307/cgroup.controllers" dev="tmpfs" ino=1670 res=1 errno=0 [ 1610.081858][ T44] audit: type=1800 audit(1789049447.682:99): pid=22987 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.4476" name="cgroup.controllers" dev="tmpfs" ino=1670 res=0 errno=0 [ 1613.972792][T23011] 9p: Bad value for 'rfdno' [ 1614.473397][T23021] 9pnet_virtio: no channels available for device syz [ 1614.480177][T23021] 9p: Bad value for 'rfdno' [ 1614.542201][ T44] audit: type=1804 audit(1789049452.142:100): pid=23021 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.4486" name="/newroot/359/cgroup.controllers" dev="tmpfs" ino=1967 res=1 errno=0 [ 1614.542236][ T44] audit: type=1800 audit(1789049452.142:101): pid=23021 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.4486" name="cgroup.controllers" dev="tmpfs" ino=1967 res=0 errno=0 [ 1614.648052][T23024] 9pnet_virtio: no channels available for device syz [ 1614.652707][T23024] 9p: Bad value for 'rfdno' [ 1615.740815][T23034] 9p: Bad value for 'rfdno' [ 1616.178409][ T44] audit: type=1804 audit(1789049453.782:102): pid=23034 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.7.4490" name="/newroot/355/cgroup.controllers" dev="tmpfs" ino=1921 res=1 errno=0 [ 1616.178441][ T44] audit: type=1800 audit(1789049453.782:103): pid=23034 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.4490" name="cgroup.controllers" dev="tmpfs" ino=1921 res=0 errno=0 [ 1616.449873][T23041] netlink: 'syz.6.4492': attribute type 3 has an invalid length. [ 1619.550910][T23052] 9p: Bad value for 'rfdno' [ 1619.719054][ T44] audit: type=1804 audit(1789049457.322:104): pid=23056 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.7.4494" name="/newroot/356/cgroup.controllers" dev="tmpfs" ino=1928 res=1 errno=0 [ 1619.719106][ T44] audit: type=1800 audit(1789049457.322:105): pid=23056 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.4494" name="cgroup.controllers" dev="tmpfs" ino=1928 res=0 errno=0 [ 1619.894892][T23058] 9pnet_virtio: no channels available for device syz [ 1619.899352][T23058] 9p: Bad value for 'rfdno' [ 1620.036039][ T44] audit: type=1804 audit(1789049457.642:106): pid=23059 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.4498" name="/newroot/363/cgroup.controllers" dev="tmpfs" ino=1991 res=1 errno=0 [ 1620.036151][ T44] audit: type=1800 audit(1789049457.642:107): pid=23059 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.4498" name="cgroup.controllers" dev="tmpfs" ino=1991 res=0 errno=0 [ 1621.282880][T23073] Cache volume key already in use (9p,syz,) [ 1621.336076][T23073] 9p: Bad value for 'rfdno' [ 1621.411427][T23077] 9pnet_virtio: no channels available for device syz [ 1621.414994][T23077] 9p: Bad value for 'rfdno' [ 1621.561118][ T44] audit: type=1804 audit(1789049459.162:108): pid=23077 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.7.4502" name="/newroot/357/cgroup.controllers" dev="tmpfs" ino=1936 res=1 errno=0 [ 1621.561711][ T44] audit: type=1800 audit(1789049459.162:109): pid=23077 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.4502" name="cgroup.controllers" dev="tmpfs" ino=1936 res=0 errno=0 [ 1621.796829][ T44] audit: type=1804 audit(1789049459.402:110): pid=23073 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.4503" name="/newroot/365/cgroup.controllers" dev="tmpfs" ino=1986 res=1 errno=0 [ 1621.796881][ T44] audit: type=1800 audit(1789049459.402:111): pid=23073 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.4503" name="cgroup.controllers" dev="tmpfs" ino=1986 res=0 errno=0 [ 1627.778708][T23108] 9p: Bad value for 'rfdno' [ 1628.146600][ T44] audit: type=1804 audit(1789049465.752:112): pid=23108 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.4512" name="/newroot/367/cgroup.controllers" dev="tmpfs" ino=2013 res=1 errno=0 [ 1628.146713][ T44] audit: type=1800 audit(1789049465.752:113): pid=23108 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.4512" name="cgroup.controllers" dev="tmpfs" ino=2013 res=0 errno=0 [ 1628.383202][T23122] 9pnet_virtio: no channels available for device syz [ 1628.392841][T23122] 9p: Bad value for 'rfdno' [ 1628.493154][ T44] audit: type=1804 audit(1789049466.092:114): pid=23123 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.4516" name="/newroot/368/cgroup.controllers" dev="tmpfs" ino=2006 res=1 errno=0 [ 1628.495244][ T44] audit: type=1800 audit(1789049466.102:115): pid=23123 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.4516" name="cgroup.controllers" dev="tmpfs" ino=2006 res=0 errno=0 [ 1628.736110][T23126] 9pnet_virtio: no channels available for device syz [ 1628.741108][T23126] 9p: Bad value for 'rfdno' [ 1628.846228][ T44] audit: type=1804 audit(1789049466.452:116): pid=23127 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.7.4518" name="/newroot/361/cgroup.controllers" dev="tmpfs" ino=1959 res=1 errno=0 [ 1628.846265][ T44] audit: type=1800 audit(1789049466.452:117): pid=23127 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.4518" name="cgroup.controllers" dev="tmpfs" ino=1959 res=0 errno=0 [ 1631.026477][T23142] 9p: Bad value for 'rfdno' [ 1632.210608][T23160] 9p: Bad value for 'rfdno' [ 1632.470596][ T44] audit: type=1804 audit(1789049470.072:118): pid=23160 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.4527" name="/newroot/371/cgroup.controllers" dev="tmpfs" ino=2025 res=1 errno=0 [ 1632.471045][ T44] audit: type=1800 audit(1789049470.072:119): pid=23160 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.4527" name="cgroup.controllers" dev="tmpfs" ino=2025 res=0 errno=0 [ 1633.043016][T23167] 9p: Bad value for 'rfdno' [ 1633.135333][T23169] 9pnet_virtio: no channels available for device syz [ 1633.138358][T23169] 9p: Bad value for 'rfdno' [ 1633.328460][ T44] audit: type=1804 audit(1789049470.932:120): pid=23167 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.4529" name="/newroot/372/cgroup.controllers" dev="tmpfs" ino=2032 res=1 errno=0 [ 1633.328644][ T44] audit: type=1800 audit(1789049470.932:121): pid=23167 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.4529" name="cgroup.controllers" dev="tmpfs" ino=2032 res=0 errno=0 [ 1633.426764][ T44] audit: type=1804 audit(1789049471.032:122): pid=23169 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.4531" name="/newroot/319/cgroup.controllers" dev="tmpfs" ino=1738 res=1 errno=0 [ 1633.426880][ T44] audit: type=1800 audit(1789049471.032:123): pid=23169 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.4531" name="cgroup.controllers" dev="tmpfs" ino=1738 res=0 errno=0 [ 1634.610966][T23185] 9p: Bad value for 'rfdno' [ 1635.103726][T23193] 9pnet_virtio: no channels available for device syz [ 1635.107788][T23193] 9p: Bad value for 'rfdno' [ 1635.554574][ T44] audit: type=1804 audit(1789049473.142:124): pid=23193 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.4537" name="/newroot/372/cgroup.controllers" dev="tmpfs" ino=2044 res=1 errno=0 [ 1635.554630][ T44] audit: type=1800 audit(1789049473.142:125): pid=23193 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.4537" name="cgroup.controllers" dev="tmpfs" ino=2044 res=0 errno=0 [ 1635.810264][T23196] netlink: 'syz.5.4539': attribute type 3 has an invalid length. [ 1635.881829][T23200] 9p: Bad value for 'rfdno' [ 1636.573673][ T44] audit: type=1804 audit(1789049474.162:126): pid=23200 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.7.4538" name="/newroot/367/cgroup.controllers" dev="tmpfs" ino=1995 res=1 errno=0 [ 1636.584618][ T44] audit: type=1800 audit(1789049474.192:127): pid=23200 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.4538" name="cgroup.controllers" dev="tmpfs" ino=1995 res=0 errno=0 [ 1636.896320][T23207] 9pnet_virtio: no channels available for device syz [ 1637.032905][T23207] 9p: Bad value for 'rfdno' [ 1637.412246][ T44] audit: type=1804 audit(1789049475.012:128): pid=23207 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.4541" name="/newroot/373/cgroup.controllers" dev="tmpfs" ino=2052 res=1 errno=0 [ 1637.412730][ T44] audit: type=1800 audit(1789049475.012:129): pid=23207 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.4541" name="cgroup.controllers" dev="tmpfs" ino=2052 res=0 errno=0 [ 1638.152777][T23219] netlink: 'syz.5.4544': attribute type 3 has an invalid length. [ 1638.281084][T23221] 9p: Bad value for 'rfdno' [ 1638.676033][ T44] audit: type=1804 audit(1789049476.272:130): pid=23221 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.7.4545" name="/newroot/369/cgroup.controllers" dev="tmpfs" ino=2009 res=1 errno=0 [ 1638.676080][ T44] audit: type=1800 audit(1789049476.272:131): pid=23221 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.4545" name="cgroup.controllers" dev="tmpfs" ino=2009 res=0 errno=0 [ 1639.418916][T23231] 9pnet_virtio: no channels available for device syz [ 1639.447051][T23231] 9p: Bad value for 'rfdno' [ 1639.814993][ T44] audit: type=1804 audit(1789049477.412:132): pid=23240 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.4547" name="/newroot/377/cgroup.controllers" dev="tmpfs" ino=2062 res=1 errno=0 [ 1639.815042][ T44] audit: type=1800 audit(1789049477.412:133): pid=23240 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.4547" name="cgroup.controllers" dev="tmpfs" ino=2062 res=0 errno=0 [ 1639.867192][T23243] netlink: 'syz.7.4549': attribute type 3 has an invalid length. [ 1640.323857][T23249] 9p: Bad value for 'rfdno' [ 1640.694187][ T44] audit: type=1804 audit(1789049478.302:134): pid=23253 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.4551" name="/newroot/324/cgroup.controllers" dev="tmpfs" ino=1766 res=1 errno=0 [ 1640.695119][ T44] audit: type=1800 audit(1789049478.302:135): pid=23253 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.4551" name="cgroup.controllers" dev="tmpfs" ino=1766 res=0 errno=0 [ 1641.589923][T23260] 9pnet_virtio: no channels available for device syz [ 1641.724204][T23260] 9p: Bad value for 'rfdno' [ 1641.971113][ T44] audit: type=1804 audit(1789049479.562:136): pid=23260 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.7.4554" name="/newroot/371/cgroup.controllers" dev="tmpfs" ino=2022 res=1 errno=0 [ 1641.971169][ T44] audit: type=1800 audit(1789049479.562:137): pid=23260 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.4554" name="cgroup.controllers" dev="tmpfs" ino=2022 res=0 errno=0 [ 1642.300322][T23267] Cache volume key already in use (9p,syz,) [ 1642.393467][T23267] 9p: Bad value for 'rfdno' [ 1642.435839][T23270] 9pnet_virtio: no channels available for device syz [ 1642.536272][T23270] 9p: Bad value for 'rfdno' [ 1642.654790][ T44] audit: type=1804 audit(1789049480.262:138): pid=23273 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.4557" name="/newroot/379/cgroup.controllers" dev="tmpfs" ino=2075 res=1 errno=0 [ 1642.654841][ T44] audit: type=1800 audit(1789049480.262:139): pid=23273 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.4557" name="cgroup.controllers" dev="tmpfs" ino=2075 res=0 errno=0 [ 1643.850952][ T44] audit: type=1804 audit(1789049481.412:140): pid=23270 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.4558" name="/newroot/378/cgroup.controllers" dev="tmpfs" ino=2082 res=1 errno=0 [ 1643.851000][ T44] audit: type=1800 audit(1789049481.412:141): pid=23270 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.4558" name="cgroup.controllers" dev="tmpfs" ino=2082 res=0 errno=0 [ 1644.081749][T23289] netlink: 'syz.7.4560': attribute type 3 has an invalid length. [ 1644.549802][T23293] 9p: Bad value for 'rfdno' [ 1644.651170][ T44] audit: type=1804 audit(1789049482.252:142): pid=23298 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.4563" name="/newroot/379/cgroup.controllers" dev="tmpfs" ino=2089 res=1 errno=0 [ 1644.651359][ T44] audit: type=1800 audit(1789049482.252:143): pid=23298 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.4563" name="cgroup.controllers" dev="tmpfs" ino=2089 res=0 errno=0 [ 1645.651136][T23304] 9pnet_virtio: no channels available for device syz [ 1645.660972][T23304] 9p: Bad value for 'rfdno' [ 1645.822229][T23308] netlink: 'syz.7.4566': attribute type 3 has an invalid length. [ 1645.898504][ T44] audit: type=1804 audit(1789049483.502:144): pid=23309 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.4564" name="/newroot/327/cgroup.controllers" dev="tmpfs" ino=1784 res=1 errno=0 [ 1645.899316][ T44] audit: type=1800 audit(1789049483.502:145): pid=23309 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.4564" name="cgroup.controllers" dev="tmpfs" ino=1784 res=0 errno=0 [ 1646.741615][T23317] Cache volume key already in use (9p,syz,) [ 1646.973528][T23317] 9p: Bad value for 'rfdno' [ 1648.194909][ T44] audit: type=1804 audit(1789049485.792:146): pid=23330 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.4570" name="/newroot/382/cgroup.controllers" dev="tmpfs" ino=2093 res=1 errno=0 [ 1648.195560][ T44] audit: type=1800 audit(1789049485.792:147): pid=23330 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.4570" name="cgroup.controllers" dev="tmpfs" ino=2093 res=0 errno=0 [ 1650.367029][T23344] 9p: Bad value for 'rfdno' [ 1650.703440][ T44] audit: type=1804 audit(1789049488.302:148): pid=23349 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.7.4576" name="/newroot/377/cgroup.controllers" dev="tmpfs" ino=2055 res=1 errno=0 [ 1650.703492][ T44] audit: type=1800 audit(1789049488.302:149): pid=23349 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.4576" name="cgroup.controllers" dev="tmpfs" ino=2055 res=0 errno=0 [ 1651.647907][T23355] 9pnet_virtio: no channels available for device syz [ 1651.684723][T23355] 9p: Bad value for 'rfdno' [ 1652.036584][ T44] audit: type=1804 audit(1789049489.632:150): pid=23355 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.4577" name="/newroot/382/cgroup.controllers" dev="tmpfs" ino=2107 res=1 errno=0 [ 1652.036801][ T44] audit: type=1800 audit(1789049489.632:151): pid=23355 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.4577" name="cgroup.controllers" dev="tmpfs" ino=2107 res=0 errno=0 [ 1652.251076][T23366] 9p: Bad value for 'rfdno' [ 1652.994351][ T44] audit: type=1804 audit(1789049490.552:152): pid=23371 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.4581" name="/newroot/383/cgroup.controllers" dev="tmpfs" ino=2114 res=1 errno=0 [ 1652.994397][ T44] audit: type=1800 audit(1789049490.552:153): pid=23371 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.4581" name="cgroup.controllers" dev="tmpfs" ino=2114 res=0 errno=0 [ 1654.180577][T23380] Cache volume key already in use (9p,syz,) [ 1654.292746][T23384] 9p: Bad value for 'rfdno' [ 1656.155046][T23395] netlink: 'syz.6.4589': attribute type 3 has an invalid length. [ 1656.838301][T23398] 9p: Bad value for 'rfdno' [ 1659.739347][T23434] netlink: 'syz.4.4596': attribute type 3 has an invalid length. [ 1660.882871][T23441] 9p: Bad value for 'rfdno' [ 1661.600683][ T44] audit: type=1804 audit(1789049499.202:154): pid=23441 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.4598" name="/newroot/389/cgroup.controllers" dev="tmpfs" ino=2131 res=1 errno=0 [ 1661.601476][ T44] audit: type=1800 audit(1789049499.202:155): pid=23441 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.4598" name="cgroup.controllers" dev="tmpfs" ino=2131 res=0 errno=0 [ 1664.289859][T23472] 9pnet_virtio: no channels available for device syz [ 1664.339687][T23470] 9p: Bad value for 'rfdno' [ 1664.361751][T23472] 9p: Bad value for 'rfdno' [ 1664.516145][T23476] netlink: 'syz.7.4606': attribute type 3 has an invalid length. [ 1664.866668][ T44] audit: type=1804 audit(1789049502.472:156): pid=23479 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.4605" name="/newroot/389/cgroup.controllers" dev="tmpfs" ino=2147 res=1 errno=0 [ 1664.866856][ T44] audit: type=1800 audit(1789049502.472:157): pid=23479 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.4605" name="cgroup.controllers" dev="tmpfs" ino=2147 res=0 errno=0 [ 1665.567096][T23484] 9pnet_virtio: no channels available for device syz [ 1665.748230][T23484] 9p: Bad value for 'rfdno' [ 1666.247170][ T44] audit: type=1804 audit(1789049503.842:158): pid=23486 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.4609" name="/newroot/390/cgroup.controllers" dev="tmpfs" ino=2155 res=1 errno=0 [ 1666.247222][ T44] audit: type=1800 audit(1789049503.842:159): pid=23486 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.4609" name="cgroup.controllers" dev="tmpfs" ino=2155 res=0 errno=0 [ 1668.335013][T23501] 9p: Bad value for 'rfdno' [ 1668.354118][ T1441] ieee802154 phy0 wpan0: encryption failed: -22 [ 1668.354174][ T1441] ieee802154 phy1 wpan1: encryption failed: -22 [ 1669.930262][ T44] audit: type=1804 audit(1789049507.532:160): pid=23500 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.4608" name="/newroot/339/cgroup.controllers" dev="tmpfs" ino=1853 res=1 errno=0 [ 1669.930314][ T44] audit: type=1800 audit(1789049507.532:161): pid=23500 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.4608" name="cgroup.controllers" dev="tmpfs" ino=1853 res=0 errno=0 [ 1669.953379][T23512] 9p: Bad value for 'rfdno' [ 1670.332816][ T44] audit: type=1804 audit(1789049507.932:162): pid=23513 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.4615" name="/newroot/393/cgroup.controllers" dev="tmpfs" ino=2173 res=1 errno=0 [ 1670.332869][ T44] audit: type=1800 audit(1789049507.932:163): pid=23513 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.4615" name="cgroup.controllers" dev="tmpfs" ino=2173 res=0 errno=0 [ 1671.329721][T23521] netlink: 'syz.5.4617': attribute type 3 has an invalid length. [ 1675.498229][T23565] 9p: Bad value for 'rfdno' [ 1675.543488][T23566] netlink: 'syz.7.4628': attribute type 3 has an invalid length. [ 1676.104884][ T44] audit: type=1804 audit(1789049513.712:164): pid=23561 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.4627" name="/newroot/396/cgroup.controllers" dev="tmpfs" ino=2190 res=1 errno=0 [ 1676.105107][ T44] audit: type=1800 audit(1789049513.712:165): pid=23561 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.4627" name="cgroup.controllers" dev="tmpfs" ino=2190 res=0 errno=0 [ 1676.432675][T23572] netlink: 'syz.5.4629': attribute type 3 has an invalid length. [ 1676.467054][T23574] 9p: Bad value for 'rfdno' [ 1676.754490][ T44] audit: type=1804 audit(1789049514.352:166): pid=23574 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.4630" name="/newroot/397/cgroup.controllers" dev="tmpfs" ino=2198 res=1 errno=0 [ 1676.754547][ T44] audit: type=1800 audit(1789049514.352:167): pid=23574 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.4630" name="cgroup.controllers" dev="tmpfs" ino=2198 res=0 errno=0 [ 1678.214379][T23581] 9p: Bad value for 'rfdno' [ 1678.278273][ T44] audit: type=1804 audit(1789049515.882:168): pid=23581 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.4632" name="/newroot/399/cgroup.controllers" dev="tmpfs" ino=2211 res=1 errno=0 [ 1678.278324][ T44] audit: type=1800 audit(1789049515.882:169): pid=23581 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.4632" name="cgroup.controllers" dev="tmpfs" ino=2211 res=0 errno=0 [ 1680.217537][T23604] netlink: 'syz.7.4637': attribute type 3 has an invalid length. [ 1681.706067][T23617] 9p: Bad value for 'rfdno' [ 1682.264064][T23620] 9pnet_virtio: no channels available for device syz [ 1682.271052][T23620] 9p: Bad value for 'rfdno' [ 1682.373660][ T44] audit: type=1804 audit(1789049519.982:170): pid=23614 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.4641" name="/newroot/399/cgroup.controllers" dev="tmpfs" ino=2188 res=1 errno=0 [ 1682.374483][ T44] audit: type=1800 audit(1789049519.982:171): pid=23614 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.4641" name="cgroup.controllers" dev="tmpfs" ino=2188 res=0 errno=0 [ 1683.525549][ T44] audit: type=1804 audit(1789049521.132:172): pid=23624 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.7.4643" name="/newroot/392/cgroup.controllers" dev="tmpfs" ino=2135 res=1 errno=0 [ 1683.528394][ T44] audit: type=1800 audit(1789049521.132:173): pid=23624 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.4643" name="cgroup.controllers" dev="tmpfs" ino=2135 res=0 errno=0 [ 1683.903700][T23629] netlink: 'syz.4.4645': attribute type 3 has an invalid length. [ 1684.164877][T23634] netlink: 'syz.7.4646': attribute type 3 has an invalid length. [ 1686.986908][T23640] 9p: Bad value for 'rfdno' [ 1686.991234][T23646] netlink: 'syz.5.4648': attribute type 3 has an invalid length. [ 1687.087454][ T44] audit: type=1804 audit(1789049524.692:174): pid=23640 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.4644" name="/newroot/400/cgroup.controllers" dev="tmpfs" ino=2195 res=1 errno=0 [ 1687.119355][ T44] audit: type=1800 audit(1789049524.712:175): pid=23640 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.4644" name="cgroup.controllers" dev="tmpfs" ino=2195 res=0 errno=0 [ 1687.547206][T23655] netlink: 'syz.5.4652': attribute type 3 has an invalid length. [ 1687.883289][T23660] netlink: 'syz.6.4651': attribute type 3 has an invalid length. [ 1691.323751][T23677] netlink: 'syz.4.4655': attribute type 3 has an invalid length. [ 1691.725593][T23682] netlink: 'syz.7.4656': attribute type 3 has an invalid length. [ 1692.124288][T23692] netlink: 'syz.5.4658': attribute type 3 has an invalid length. [ 1693.232654][T23698] 9p: Bad value for 'rfdno' [ 1694.040692][ T44] audit: type=1804 audit(1789049531.622:176): pid=23698 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.7.4660" name="/newroot/397/cgroup.controllers" dev="tmpfs" ino=2164 res=1 errno=0 [ 1694.041115][ T44] audit: type=1800 audit(1789049531.622:177): pid=23698 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.4660" name="cgroup.controllers" dev="tmpfs" ino=2164 res=0 errno=0 [ 1695.783387][T23716] netlink: 'syz.4.4665': attribute type 3 has an invalid length. [ 1695.930802][T23719] 9p: Bad value for 'rfdno' [ 1696.502446][ T44] audit: type=1804 audit(1789049534.092:178): pid=23715 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.7.4666" name="/newroot/398/cgroup.controllers" dev="tmpfs" ino=2171 res=1 errno=0 [ 1696.502510][ T44] audit: type=1800 audit(1789049534.092:179): pid=23715 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.4666" name="cgroup.controllers" dev="tmpfs" ino=2171 res=0 errno=0 [ 1696.865612][T23725] netlink: 'syz.4.4668': attribute type 3 has an invalid length. [ 1697.260152][ T44] audit: type=1804 audit(1789049534.852:180): pid=23724 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.4667" name="/newroot/352/cgroup.controllers" dev="tmpfs" ino=1924 res=1 errno=0 [ 1697.260201][ T44] audit: type=1800 audit(1789049534.852:181): pid=23724 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.4667" name="cgroup.controllers" dev="tmpfs" ino=1924 res=0 errno=0 [ 1697.686418][T23729] 9pnet_virtio: no channels available for device syz [ 1697.756432][T23729] 9p: Bad value for 'rfdno' [ 1698.165968][ T44] audit: type=1804 audit(1789049535.762:182): pid=23730 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.4669" name="/newroot/405/cgroup.controllers" dev="tmpfs" ino=2224 res=1 errno=0 [ 1698.166032][ T44] audit: type=1800 audit(1789049535.762:183): pid=23730 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.4669" name="cgroup.controllers" dev="tmpfs" ino=2224 res=0 errno=0 [ 1700.989969][T23748] 9p: Bad value for 'rfdno' [ 1701.267030][ T44] audit: type=1804 audit(1789049538.862:184): pid=23749 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.4674" name="/newroot/354/cgroup.controllers" dev="tmpfs" ino=1937 res=1 errno=0 [ 1701.267236][ T44] audit: type=1800 audit(1789049538.862:185): pid=23749 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.4674" name="cgroup.controllers" dev="tmpfs" ino=1937 res=0 errno=0 [ 1703.132976][T23771] netlink: 'syz.7.4678': attribute type 3 has an invalid length. [ 1703.152703][T23770] 9p: Bad value for 'rfdno' [ 1703.666298][ T44] audit: type=1804 audit(1789049541.272:186): pid=23770 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.4680" name="/newroot/355/cgroup.controllers" dev="tmpfs" ino=1944 res=1 errno=0 [ 1703.666566][ T44] audit: type=1800 audit(1789049541.272:187): pid=23770 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.4680" name="cgroup.controllers" dev="tmpfs" ino=1944 res=0 errno=0 [ 1705.741020][T23786] netlink: 'syz.6.4684': attribute type 3 has an invalid length. [ 1706.967168][T23794] netlink: 'syz.4.4686': attribute type 3 has an invalid length. [ 1711.000106][T23817] netlink: 'syz.4.4691': attribute type 3 has an invalid length. [ 1713.207297][T23835] netlink: 'syz.7.4694': attribute type 3 has an invalid length. [ 1715.158767][ T44] audit: type=1804 audit(1789049552.762:188): pid=23847 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.4699" name="/newroot/416/cgroup.controllers" dev="tmpfs" ino=2303 res=1 errno=0 [ 1715.158937][ T44] audit: type=1800 audit(1789049552.762:189): pid=23847 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.4699" name="cgroup.controllers" dev="tmpfs" ino=2303 res=0 errno=0 [ 1716.426324][ T44] audit: type=1804 audit(1789049554.032:190): pid=23845 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.7.4698" name="/newroot/405/cgroup.controllers" dev="tmpfs" ino=2209 res=1 errno=0 [ 1716.426494][ T44] audit: type=1800 audit(1789049554.032:191): pid=23845 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.4698" name="cgroup.controllers" dev="tmpfs" ino=2209 res=0 errno=0 [ 1716.951832][T23858] netlink: 'syz.4.4701': attribute type 3 has an invalid length. [ 1717.368394][ T44] audit: type=1804 audit(1789049554.972:192): pid=23863 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.4703" name="/newroot/360/cgroup.controllers" dev="tmpfs" ino=1972 res=1 errno=0 [ 1717.370299][ T44] audit: type=1800 audit(1789049554.972:193): pid=23863 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.4703" name="cgroup.controllers" dev="tmpfs" ino=1972 res=0 errno=0 [ 1718.808221][T23872] 9p: Bad value for 'rfdno' [ 1718.970726][ T44] audit: type=1804 audit(1789049556.572:194): pid=23874 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.4705" name="/newroot/361/cgroup.controllers" dev="tmpfs" ino=1979 res=1 errno=0 [ 1718.970934][ T44] audit: type=1800 audit(1789049556.572:195): pid=23874 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.4705" name="cgroup.controllers" dev="tmpfs" ino=1979 res=0 errno=0 [ 1721.013952][T23886] 9p: Bad value for 'rfdno' [ 1721.411521][ T44] audit: type=1804 audit(1789049559.012:196): pid=23886 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.4709" name="/newroot/362/cgroup.controllers" dev="tmpfs" ino=1986 res=1 errno=0 [ 1721.412585][ T44] audit: type=1800 audit(1789049559.012:197): pid=23886 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.4709" name="cgroup.controllers" dev="tmpfs" ino=1986 res=0 errno=0 [ 1724.141947][T23909] netlink: 'syz.7.4714': attribute type 3 has an invalid length. [ 1724.646418][T23913] 9p: Bad value for 'rfdno' [ 1725.309416][ T44] audit: type=1804 audit(1789049562.902:198): pid=23913 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.4716" name="/newroot/364/cgroup.controllers" dev="tmpfs" ino=1999 res=1 errno=0 [ 1725.314994][ T44] audit: type=1800 audit(1789049562.922:199): pid=23913 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.4716" name="cgroup.controllers" dev="tmpfs" ino=1999 res=0 errno=0 [ 1726.770103][T23933] 9p: Bad value for 'rfdno' [ 1727.101581][ T44] audit: type=1804 audit(1789049564.702:200): pid=23928 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.7.4720" name="/newroot/410/cgroup.controllers" dev="tmpfs" ino=2239 res=1 errno=0 [ 1727.101836][ T44] audit: type=1800 audit(1789049564.702:201): pid=23928 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.4720" name="cgroup.controllers" dev="tmpfs" ino=2239 res=0 errno=0 [ 1727.398035][T23945] netlink: 'syz.4.4723': attribute type 3 has an invalid length. [ 1729.350070][T23957] 9p: Bad value for 'rfdno' [ 1729.726607][ T1441] ieee802154 phy0 wpan0: encryption failed: -22 [ 1729.726660][ T1441] ieee802154 phy1 wpan1: encryption failed: -22 [ 1729.779290][ T44] audit: type=1804 audit(1789049567.362:202): pid=23957 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.4728" name="/newroot/424/cgroup.controllers" dev="tmpfs" ino=2348 res=1 errno=0 [ 1729.779343][ T44] audit: type=1800 audit(1789049567.372:203): pid=23957 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.4728" name="cgroup.controllers" dev="tmpfs" ino=2348 res=0 errno=0 [ 1733.943933][T24001] 9p: Bad value for 'rfdno' [ 1734.139723][ T44] audit: type=1804 audit(1789049571.742:204): pid=24003 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.4741" name="/newroot/372/cgroup.controllers" dev="tmpfs" ino=2045 res=1 errno=0 [ 1734.139913][ T44] audit: type=1800 audit(1789049571.742:205): pid=24003 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.4741" name="cgroup.controllers" dev="tmpfs" ino=2045 res=0 errno=0 [ 1737.749436][T24035] netlink: 'syz.4.4749': attribute type 3 has an invalid length. [ 1740.072648][T24060] 9p: Bad value for 'rfdno' [ 1740.341290][ T44] audit: type=1804 audit(1789049577.952:206): pid=24060 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.4757" name="/newroot/430/cgroup.controllers" dev="tmpfs" ino=2383 res=1 errno=0 [ 1740.341491][ T44] audit: type=1800 audit(1789049577.952:207): pid=24060 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.4757" name="cgroup.controllers" dev="tmpfs" ino=2383 res=0 errno=0 [ 1741.584211][T24066] 9p: Bad value for 'rfdno' [ 1741.677348][T24069] netlink: 'syz.5.4759': attribute type 3 has an invalid length. [ 1745.164294][T24096] netlink: 'syz.7.4766': attribute type 3 has an invalid length. [ 1749.672344][T24140] 9p: Bad value for 'rfdno' [ 1750.175630][ T44] audit: type=1804 audit(1789049587.772:208): pid=24140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.4779" name="/newroot/381/cgroup.controllers" dev="tmpfs" ino=2095 res=1 errno=0 [ 1750.177194][ T44] audit: type=1800 audit(1789049587.772:209): pid=24140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.4779" name="cgroup.controllers" dev="tmpfs" ino=2095 res=0 errno=0 [ 1752.232424][T24162] 9p: Bad value for 'rfdno' [ 1752.594316][T24169] netlink: 'syz.4.4787': attribute type 3 has an invalid length. [ 1752.602865][ T44] audit: type=1804 audit(1789049590.192:210): pid=24167 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.4786" name="/newroot/436/cgroup.controllers" dev="tmpfs" ino=2393 res=1 errno=0 [ 1752.602916][ T44] audit: type=1800 audit(1789049590.192:211): pid=24167 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.4786" name="cgroup.controllers" dev="tmpfs" ino=2393 res=0 errno=0 [ 1752.870577][T24177] 9pnet_virtio: no channels available for device syz [ 1753.037457][T24177] 9p: Bad value for 'rfdno' [ 1753.849642][ T44] audit: type=1804 audit(1789049591.452:212): pid=24177 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.4789" name="/newroot/438/cgroup.controllers" dev="tmpfs" ino=2431 res=1 errno=0 [ 1753.849700][ T44] audit: type=1800 audit(1789049591.452:213): pid=24177 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.4789" name="cgroup.controllers" dev="tmpfs" ino=2431 res=0 errno=0 [ 1754.467257][T24187] netlink: 'syz.6.4791': attribute type 3 has an invalid length. [ 1756.625268][T24209] 9p: Bad value for 'rfdno' [ 1757.048338][ T44] audit: type=1804 audit(1789049594.652:214): pid=24215 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.7.4798" name="/newroot/431/cgroup.controllers" dev="tmpfs" ino=2353 res=1 errno=0 [ 1757.050581][ T44] audit: type=1800 audit(1789049594.652:215): pid=24215 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.4798" name="cgroup.controllers" dev="tmpfs" ino=2353 res=0 errno=0 [ 1758.303545][T24225] netlink: 'syz.5.4802': attribute type 3 has an invalid length. [ 1759.872970][T24235] 9p: Bad value for 'rfdno' [ 1760.021536][ C0] ================================================================== [ 1760.021555][ C0] BUG: KASAN: slab-use-after-free in _raw_spin_lock_irqsave+0x3a/0x60 [ 1760.021590][ C0] Read of size 1 at addr ffff88804bc59818 by task kworker/u33:12/1171 [ 1760.021609][ C0] [ 1760.021618][ C0] CPU: 0 UID: 0 PID: 1171 Comm: kworker/u33:12 Not tainted syzkaller #0 PREEMPT(full) [ 1760.021649][ C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1760.021663][ C0] Workqueue: events_unbound toggle_allocation_gate [ 1760.021693][ C0] Call Trace: [ 1760.021701][ C0] [ 1760.021709][ C0] dump_stack_lvl+0x100/0x190 [ 1760.021736][ C0] print_report+0x13d/0x4b0 [ 1760.021765][ C0] ? __virt_addr_valid+0x239/0x430 [ 1760.021795][ C0] ? _raw_spin_lock_irqsave+0x3a/0x60 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1760.021818][ C0] kasan_report+0xdf/0x1c0 [ 1760.021844][ C0] ? _raw_spin_lock_irqsave+0x3a/0x60 [ 1760.021869][ C0] ? _raw_spin_lock_irqsave+0x3a/0x60 [ 1760.021893][ C0] __kasan_check_byte+0x36/0x50 [ 1760.021918][ C0] lock_acquire+0x132/0x380 [ 1760.021945][ C0] ? do_raw_spin_unlock+0x53/0x1e0 [ 1760.021964][ C0] ? .slowpath+0x9/0x18 [ 1760.021992][ C0] _raw_spin_lock_irqsave+0x3a/0x60 [ 1760.022015][ C0] ? p9_req_put+0xaf/0x250 [ 1760.022035][ C0] p9_req_put+0xaf/0x250 [ 1760.022055][ C0] req_done+0x1dc/0x2e0 [ 1760.022082][ C0] ? __pfx_req_done+0x10/0x10 [ 1760.022107][ C0] ? find_held_lock+0x2b/0x80 [ 1760.022130][ C0] ? __pfx_req_done+0x10/0x10 [ 1760.022155][ C0] vring_interrupt+0x2ef/0x660 [ 1760.022178][ C0] ? __pfx_vring_interrupt+0x10/0x10 [ 1760.022401][ C0] __handle_irq_event_percpu+0x232/0x880 [ 1760.022426][ C0] handle_irq_event+0xab/0x1e0 [ 1760.022447][ C0] handle_edge_irq+0x34c/0x950 [ 1760.022469][ C0] __common_interrupt+0xd8/0x2f0 [ 1760.022497][ C0] common_interrupt+0x60/0xe0 [ 1760.022519][ C0] asm_common_interrupt+0x26/0x40 [ 1760.022539][ C0] RIP: 0010:handle_softirqs+0x1a9/0x9d0 [ 1760.022568][ C0] Code: 89 6c 24 28 4c 89 7c 24 10 48 c7 c7 a0 9c ed 8b e8 cc b3 04 0a 31 d2 65 66 89 15 de 39 c2 12 e8 6d ed 49 00 fb bb ff ff ff ff <48> c7 c5 c0 a0 a0 8e 41 0f bc dc 83 c3 01 0f 85 9d 00 00 00 e9 b9 [ 1760.022588][ C0] RSP: 0018:ffffc90000007f20 EFLAGS: 00000212 [ 1760.022606][ C0] RAX: 0000000000602c80 RBX: 00000000ffffffff RCX: 0000000000000004 [ 1760.022620][ C0] RDX: 0000000000000101 RSI: ffffffff8e3f18bd RDI: ffffffff8c622c80 [ 1760.022633][ C0] RBP: 1ffff92000000fec R08: 0000000000000001 R09: 0000000000000000 [ 1760.022652][ C0] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000000282 [ 1760.022665][ C0] R13: 000000000000000a R14: 00000001000239d6 R15: fffffbfff1d41e50 [ 1760.022683][ C0] ? __hrtimer_rearm_deferred+0x23c/0x7b0 [ 1760.022710][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 1760.022737][ C0] ? _raw_spin_unlock+0x28/0x50 [ 1760.022760][ C0] ? __hrtimer_rearm_deferred+0x9b/0x7b0 [ 1760.022784][ C0] __irq_exit_rcu+0x16a/0x210 [ 1760.022811][ C0] irq_exit_rcu+0x9/0x30 [ 1760.022837][ C0] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 1760.022863][ C0] [ 1760.022872][ C0] [ 1760.022879][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1760.022901][ C0] RIP: 0010:preempt_schedule_irq+0x49/0x90 [ 1760.022928][ C0] Code: 00 00 00 fc ff df 48 89 eb 48 c1 eb 03 48 01 d3 f6 c4 02 75 47 bf 01 00 00 00 e8 52 bb 06 f6 e8 7d 0c 44 f6 fb bf 01 00 00 00 d2 8f ff ff 9c 58 fa f6 c4 02 75 1e bf 01 00 00 00 e8 40 5b 06 [ 1760.022947][ C0] RSP: 0018:ffffc90006727798 EFLAGS: 00000206 [ 1760.022963][ C0] RAX: 0000000000602c7d RBX: ffffed10042444b0 RCX: 0000000000000040 [ 1760.022975][ C0] RDX: 0000000000000001 RSI: ffffffff8e3f18bd RDI: 0000000000000001 [ 1760.022989][ C0] RBP: ffff888021222580 R08: 0000000000000001 R09: 0000000000000000 [ 1760.023001][ C0] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000000 [ 1760.023014][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1760.023033][ C0] ? preempt_schedule_irq+0x43/0x90 [ 1760.023059][ C0] irqentry_exit+0x205/0xa10 [ 1760.023088][ C0] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 1760.023108][ C0] RIP: 0010:smp_call_function_many_cond+0x8f4/0x18c0 [ 1760.023135][ C0] Code: 00 00 00 fc ff df 48 8b 4c 24 08 49 89 ce 83 e1 07 49 c1 ee 03 49 89 cd 49 01 c6 41 83 c5 03 e8 32 b6 0c 00 f3 90 41 0f b6 06 <41> 38 c5 7c 08 84 c0 0f 85 ca 0d 00 00 8b 45 08 31 ff 83 e0 01 41 [ 1760.023152][ C0] RSP: 0018:ffffc900067278a0 EFLAGS: 00000293 [ 1760.023168][ C0] RAX: 0000000000000000 RBX: 0000000000000001 RCX: 0000000000000000 [ 1760.023179][ C0] RDX: ffff888021222580 RSI: ffffffff81feab9e RDI: ffff888021222580 [ 1760.023193][ C0] RBP: ffff88802b341a40 R08: 0000000000000005 R09: 0000000000000000 [ 1760.023205][ C0] R10: 0000000000000001 R11: 0000000000000000 R12: ffffed1004244763 [ 1760.023218][ C0] R13: 0000000000000003 R14: ffffed1005668349 R15: 0000000000000001 [ 1760.023234][ C0] ? smp_call_function_many_cond+0x8ee/0x18c0 [ 1760.023264][ C0] ? __pfx_do_sync_core+0x10/0x10 [ 1760.023288][ C0] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 1760.023315][ C0] ? __pfx___text_poke+0x10/0x10 [ 1760.023337][ C0] ? __kmalloc_cache_node_noprof+0xa9/0x720 [ 1760.023363][ C0] ? __kmalloc_cache_node_noprof+0xa9/0x720 [ 1760.023386][ C0] smp_text_poke_batch_finish+0x337/0xc60 [ 1760.023412][ C0] ? __kmalloc_cache_node_noprof+0xa9/0x720 [ 1760.023436][ C0] ? __pfx_smp_text_poke_batch_finish+0x10/0x10 [ 1760.023463][ C0] ? arch_jump_label_transform_queue+0xc0/0x120 [ 1760.023488][ C0] ? find_held_lock+0x2b/0x80 [ 1760.023510][ C0] arch_jump_label_transform_apply+0x1c/0x30 [ 1760.023535][ C0] jump_label_update+0x37a/0x550 [ 1760.023556][ C0] static_key_disable_cpuslocked+0x162/0x1c0 [ 1760.023577][ C0] static_key_disable+0x1a/0x20 [ 1760.023596][ C0] toggle_allocation_gate+0x149/0x2d0 [ 1760.023619][ C0] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 1760.023647][ C0] ? process_one_work+0xa2c/0x1b10 [ 1760.023670][ C0] ? process_one_work+0x906/0x1b10 [ 1760.023692][ C0] ? process_one_work+0x906/0x1b10 [ 1760.023717][ C0] process_one_work+0xac7/0x1b10 [ 1760.023743][ C0] ? __pfx_process_one_work+0x10/0x10 [ 1760.023765][ C0] ? lock_acquire+0x1d1/0x380 [ 1760.023792][ C0] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 1760.023816][ C0] worker_thread+0x5ef/0xe50 [ 1760.023843][ C0] ? kthread+0x13a/0x450 [ 1760.023862][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1760.023884][ C0] kthread+0x373/0x450 [ 1760.023903][ C0] ? __pfx_kthread+0x10/0x10 [ 1760.023924][ C0] ret_from_fork+0x730/0xd60 [ 1760.023952][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1760.023980][ C0] ? __switch_to+0x800/0x10f0 [ 1760.024003][ C0] ? __pfx_kthread+0x10/0x10 [ 1760.024025][ C0] ret_from_fork_asm+0x1a/0x30 [ 1760.024048][ C0] [ 1760.024058][ C0] [ 1760.024063][ C0] Allocated by task 24237: [ 1760.024073][ C0] kasan_save_stack+0x30/0x50 [ 1760.024095][ C0] kasan_save_track+0x14/0x30 [ 1760.024114][ C0] __kasan_kmalloc+0xaa/0xb0 [ 1760.024132][ C0] __kmalloc_cache_noprof+0x2f8/0x6d0 [ 1760.024158][ C0] p9_client_create+0xaf/0xd40 [ 1760.024175][ C0] v9fs_session_init+0x3c/0xdd0 [ 1760.024195][ C0] v9fs_get_tree+0xb8/0xb50 [ 1760.024217][ C0] vfs_get_tree+0x92/0x320 [ 1760.024240][ C0] path_mount+0x7d0/0x24c0 [ 1760.024262][ C0] __ia32_sys_mount+0x292/0x310 [ 1760.024283][ C0] __do_fast_syscall_32+0x13a/0x8b0 [ 1760.024309][ C0] do_fast_syscall_32+0x32/0x70 [ 1760.024334][ C0] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1760.024356][ C0] [ 1760.024362][ C0] Freed by task 24237: [ 1760.024370][ C0] kasan_save_stack+0x30/0x50 [ 1760.024389][ C0] kasan_save_track+0x14/0x30 [ 1760.024408][ C0] kasan_save_free_info+0x3b/0x70 [ 1760.024433][ C0] __kasan_slab_free+0x5f/0x80 [ 1760.024454][ C0] kfree+0x22b/0x6d0 [ 1760.024477][ C0] p9_client_create+0x72d/0xd40 [ 1760.024495][ C0] v9fs_session_init+0x3c/0xdd0 [ 1760.024513][ C0] v9fs_get_tree+0xb8/0xb50 [ 1760.024533][ C0] vfs_get_tree+0x92/0x320 [ 1760.024556][ C0] path_mount+0x7d0/0x24c0 [ 1760.024577][ C0] __ia32_sys_mount+0x292/0x310 [ 1760.024599][ C0] __do_fast_syscall_32+0x13a/0x8b0 [ 1760.024624][ C0] do_fast_syscall_32+0x32/0x70 [ 1760.024826][ C0] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1760.024846][ C0] [ 1760.024852][ C0] The buggy address belongs to the object at ffff88804bc59800 [ 1760.024852][ C0] which belongs to the cache kmalloc-512 of size 512 [ 1760.024866][ C0] The buggy address is located 24 bytes inside of [ 1760.024866][ C0] freed 512-byte region [ffff88804bc59800, ffff88804bc59a00) [ 1760.024886][ C0] [ 1760.024892][ C0] The buggy address belongs to the physical page: [ 1760.024901][ C0] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x4bc58 [ 1760.024919][ C0] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1760.024935][ C0] flags: 0x4fff00000000040(head|node=1|zone=1|lastcpupid=0x7ff) [ 1760.024953][ C0] page_type: f5(slab) [ 1760.024996][ C0] raw: 04fff00000000040 ffff88801c042c80 dead000000000100 dead000000000122 [ 1760.025014][ C0] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 1760.025031][ C0] head: 04fff00000000040 ffff88801c042c80 dead000000000100 dead000000000122 [ 1760.025048][ C0] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 1760.025065][ C0] head: 04fff00000000002 ffffffffffffff01 00000000ffffffff 00000000ffffffff [ 1760.025083][ C0] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 1760.025093][ C0] page dumped because: kasan: bad access detected [ 1760.025103][ C0] page_owner tracks the page as allocated [ 1760.025110][ C0] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5832, tgid 5832 (kworker/u32:4), ts 86233369915 [ 1760.025139][ C0] post_alloc_hook+0xfd/0x120 [ 1760.025164][ C0] get_page_from_freelist+0x110d/0x35d0 [ 1760.025181][ C0] __alloc_frozen_pages_noprof+0x2eb/0x3300 [ 1760.025198][ C0] new_slab+0xa9/0x6e0 [ 1760.025213][ C0] refill_objects+0xe3/0x410 [ 1760.025228][ C0] __pcs_replace_empty_main+0x35e/0x650 [ 1760.025253][ C0] __kmalloc_cache_noprof+0x4f4/0x6d0 [ 1760.025279][ C0] __ipv6_dev_mc_inc+0x2f1/0xc80 [ 1760.025305][ C0] addrconf_dad_work+0x276/0x1360 [ 1760.025324][ C0] process_one_work+0xac7/0x1b10 [ 1760.025342][ C0] worker_thread+0x5ef/0xe50 [ 1760.025361][ C0] kthread+0x373/0x450 [ 1760.025378][ C0] ret_from_fork+0x730/0xd60 [ 1760.025403][ C0] ret_from_fork_asm+0x1a/0x30 [ 1760.025419][ C0] page last free pid 30 tgid 30 ts 85116536728 stack trace: [ 1760.025429][ C0] __free_frozen_pages+0x79f/0x10f0 [ 1760.025473][ C0] qlist_free_all+0x47/0xf0 [ 1760.025489][ C0] kasan_quarantine_reduce+0x1a0/0x1f0 [ 1760.025507][ C0] __kasan_slab_alloc+0x69/0x90 [ 1760.025527][ C0] __kmalloc_cache_noprof+0x278/0x6d0 [ 1760.025551][ C0] nsim_fib_event_work+0x1573/0x6330 [ 1760.025571][ C0] process_one_work+0xac7/0x1b10 [ 1760.025591][ C0] worker_thread+0x5ef/0xe50 [ 1760.025610][ C0] kthread+0x373/0x450 [ 1760.025627][ C0] ret_from_fork+0x730/0xd60 [ 1760.025656][ C0] ret_from_fork_asm+0x1a/0x30 [ 1760.025672][ C0] [ 1760.025676][ C0] Memory state around the buggy address: [ 1760.025686][ C0] ffff88804bc59700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1760.025698][ C0] ffff88804bc59780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1760.025711][ C0] >ffff88804bc59800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1760.025722][ C0] ^ [ 1760.025731][ C0] ffff88804bc59880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1760.025744][ C0] ffff88804bc59900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1760.025753][ C0] ================================================================== [ 1760.025764][ C0] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1761.202357][ C0] CPU: 0 UID: 0 PID: 1171 Comm: kworker/u33:12 Not tainted syzkaller #0 PREEMPT(full) [ 1761.218813][ C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1761.223047][ C0] Workqueue: events_unbound toggle_allocation_gate [ 1761.238299][ C0] Call Trace: [ 1761.239795][ C0] [ 1761.241195][ C0] dump_stack_lvl+0x100/0x190 [ 1761.243754][ C0] vpanic+0x553/0x970 [ 1761.245463][ C0] ? __pfx_vpanic+0x10/0x10 [ 1761.247442][ C0] ? __pfx_vprintk_emit+0x10/0x10 [ 1761.249951][ C0] ? _raw_spin_lock_irqsave+0x3a/0x60 [ 1761.252175][ C0] panic+0xd1/0xe0 [ 1761.265192][ C0] ? __pfx_panic+0x10/0x10 [ 1761.267501][ C0] ? end_report.part.0+0x23/0x90 [ 1761.269614][ C0] ? rcu_is_watching+0x13/0xc0 [ 1761.271659][ C0] ? end_report.part.0+0x23/0x90 [ 1761.274025][ C0] check_panic_on_warn.cold+0x19/0x34 [ 1761.286351][ C0] end_report.part.0+0x3a/0x90 [ 1761.288358][ C0] kasan_report.cold+0xe/0x18 [ 1761.290546][ C0] ? _raw_spin_lock_irqsave+0x3a/0x60 [ 1761.293056][ C0] ? _raw_spin_lock_irqsave+0x3a/0x60 [ 1761.309804][ C0] __kasan_check_byte+0x36/0x50 [ 1761.311836][ C0] lock_acquire+0x132/0x380 [ 1761.313789][ C0] ? do_raw_spin_unlock+0x53/0x1e0 [ 1761.316020][ C0] ? .slowpath+0x9/0x18 [ 1761.318042][ C0] _raw_spin_lock_irqsave+0x3a/0x60 [ 1761.320374][ C0] ? p9_req_put+0xaf/0x250 [ 1761.322581][ C0] p9_req_put+0xaf/0x250 [ 1761.324380][ C0] req_done+0x1dc/0x2e0 [ 1761.335902][ C0] ? __pfx_req_done+0x10/0x10 [ 1761.338506][ C0] ? find_held_lock+0x2b/0x80 [ 1761.341014][ C0] ? __pfx_req_done+0x10/0x10 [ 1761.343347][ C0] vring_interrupt+0x2ef/0x660 [ 1761.346812][ C0] ? __pfx_vring_interrupt+0x10/0x10 [ 1761.356038][ C0] __handle_irq_event_percpu+0x232/0x880 [ 1761.370109][ C0] handle_irq_event+0xab/0x1e0 [ 1761.372044][ C0] handle_edge_irq+0x34c/0x950 [ 1761.390034][ C0] __common_interrupt+0xd8/0x2f0 [ 1761.392018][ C0] common_interrupt+0x60/0xe0 [ 1761.394081][ C0] asm_common_interrupt+0x26/0x40 [ 1761.396092][ C0] RIP: 0010:handle_softirqs+0x1a9/0x9d0 [ 1761.398353][ C0] Code: 89 6c 24 28 4c 89 7c 24 10 48 c7 c7 a0 9c ed 8b e8 cc b3 04 0a 31 d2 65 66 89 15 de 39 c2 12 e8 6d ed 49 00 fb bb ff ff ff ff <48> c7 c5 c0 a0 a0 8e 41 0f bc dc 83 c3 01 0f 85 9d 00 00 00 e9 b9 [ 1761.410883][ C0] RSP: 0018:ffffc90000007f20 EFLAGS: 00000212 [ 1761.413385][ C0] RAX: 0000000000602c80 RBX: 00000000ffffffff RCX: 0000000000000004 [ 1761.431003][ C0] RDX: 0000000000000101 RSI: ffffffff8e3f18bd RDI: ffffffff8c622c80 [ 1761.434114][ C0] RBP: 1ffff92000000fec R08: 0000000000000001 R09: 0000000000000000 [ 1761.437102][ C0] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000000282 [ 1761.440136][ C0] R13: 000000000000000a R14: 00000001000239d6 R15: fffffbfff1d41e50 [ 1761.443168][ C0] ? __hrtimer_rearm_deferred+0x23c/0x7b0 [ 1761.445354][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 1761.447371][ C0] ? _raw_spin_unlock+0x28/0x50 [ 1761.449195][ C0] ? __hrtimer_rearm_deferred+0x9b/0x7b0 [ 1761.451292][ C0] __irq_exit_rcu+0x16a/0x210 [ 1761.453079][ C0] irq_exit_rcu+0x9/0x30 [ 1761.454745][ C0] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 1761.456973][ C0] [ 1761.458663][ C0] [ 1761.460141][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1761.462977][ C0] RIP: 0010:preempt_schedule_irq+0x49/0x90 [ 1761.465883][ C0] Code: 00 00 00 fc ff df 48 89 eb 48 c1 eb 03 48 01 d3 f6 c4 02 75 47 bf 01 00 00 00 e8 52 bb 06 f6 e8 7d 0c 44 f6 fb bf 01 00 00 00 d2 8f ff ff 9c 58 fa f6 c4 02 75 1e bf 01 00 00 00 e8 40 5b 06 [ 1761.475731][ C0] RSP: 0018:ffffc90006727798 EFLAGS: 00000206 [ 1761.478515][ C0] RAX: 0000000000602c7d RBX: ffffed10042444b0 RCX: 0000000000000040 [ 1761.481478][ C0] RDX: 0000000000000001 RSI: ffffffff8e3f18bd RDI: 0000000000000001 [ 1761.484338][ C0] RBP: ffff888021222580 R08: 0000000000000001 R09: 0000000000000000 [ 1761.487846][ C0] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000000 [ 1761.492222][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1761.496899][ C0] ? preempt_schedule_irq+0x43/0x90 [ 1761.499568][ C0] irqentry_exit+0x205/0xa10 [ 1761.501985][ C0] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 1761.505003][ C0] RIP: 0010:smp_call_function_many_cond+0x8f4/0x18c0 [ 1761.509279][ C0] Code: 00 00 00 fc ff df 48 8b 4c 24 08 49 89 ce 83 e1 07 49 c1 ee 03 49 89 cd 49 01 c6 41 83 c5 03 e8 32 b6 0c 00 f3 90 41 0f b6 06 <41> 38 c5 7c 08 84 c0 0f 85 ca 0d 00 00 8b 45 08 31 ff 83 e0 01 41 [ 1761.519906][ C0] RSP: 0018:ffffc900067278a0 EFLAGS: 00000293 [ 1761.523097][ C0] RAX: 0000000000000000 RBX: 0000000000000001 RCX: 0000000000000000 [ 1761.527916][ C0] RDX: ffff888021222580 RSI: ffffffff81feab9e RDI: ffff888021222580 [ 1761.532219][ C0] RBP: ffff88802b341a40 R08: 0000000000000005 R09: 0000000000000000 [ 1761.540827][ C0] R10: 0000000000000001 R11: 0000000000000000 R12: ffffed1004244763 [ 1761.547071][ C0] R13: 0000000000000003 R14: ffffed1005668349 R15: 0000000000000001 [ 1761.551897][ C0] ? smp_call_function_many_cond+0x8ee/0x18c0 [ 1761.555948][ C0] ? __pfx_do_sync_core+0x10/0x10 [ 1761.558995][ C0] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 1761.561822][ C0] ? __pfx___text_poke+0x10/0x10 [ 1761.564229][ C0] ? __kmalloc_cache_node_noprof+0xa9/0x720 [ 1761.566686][ C0] ? __kmalloc_cache_node_noprof+0xa9/0x720 [ 1761.569473][ C0] smp_text_poke_batch_finish+0x337/0xc60 [ 1761.572149][ C0] ? __kmalloc_cache_node_noprof+0xa9/0x720 [ 1761.574399][ C0] ? __pfx_smp_text_poke_batch_finish+0x10/0x10 [ 1761.576710][ C0] ? arch_jump_label_transform_queue+0xc0/0x120 [ 1761.579024][ C0] ? find_held_lock+0x2b/0x80 [ 1761.580812][ C0] arch_jump_label_transform_apply+0x1c/0x30 [ 1761.583057][ C0] jump_label_update+0x37a/0x550 [ 1761.584855][ C0] static_key_disable_cpuslocked+0x162/0x1c0 [ 1761.588361][ C0] static_key_disable+0x1a/0x20 [ 1761.591527][ C0] toggle_allocation_gate+0x149/0x2d0 [ 1761.594722][ C0] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 1761.597945][ C0] ? process_one_work+0xa2c/0x1b10 [ 1761.600158][ C0] ? process_one_work+0x906/0x1b10 [ 1761.602702][ C0] ? process_one_work+0x906/0x1b10 [ 1761.605579][ C0] process_one_work+0xac7/0x1b10 [ 1761.608317][ C0] ? __pfx_process_one_work+0x10/0x10 [ 1761.611646][ C0] ? lock_acquire+0x1d1/0x380 [ 1761.614660][ C0] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 1761.622049][ C0] worker_thread+0x5ef/0xe50 [ 1761.625015][ C0] ? kthread+0x13a/0x450 [ 1761.627648][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1761.630953][ C0] kthread+0x373/0x450 [ 1761.633485][ C0] ? __pfx_kthread+0x10/0x10 [ 1761.636301][ C0] ret_from_fork+0x730/0xd60 [ 1761.639167][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1761.641704][ C0] ? __switch_to+0x800/0x10f0 [ 1761.644252][ C0] ? __pfx_kthread+0x10/0x10 [ 1761.646694][ C0] ret_from_fork_asm+0x1a/0x30 [ 1761.649145][ C0] [ 1761.675913][ C0] Kernel Offset: disabled [ 1761.678197][ C0] Rebooting in 86400 seconds.. VM DIAGNOSIS: 14:13:17 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000039 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85aeb445 RDI=ffffffff9bc571e0 RBP=ffffffff9bc571a0 RSP=ffffc90000007308 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=3563623430386552 R12=0000000000000000 R13=0000000000000039 R14=000000000000000b R15=ffffc90000007620 RIP=ffffffff85aeb46f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888096960000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000000002fa1fff8 CR3=0000000000288000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000001486fb1 RBX=ffff88801cb14b00 RCX=ffffffff8bce7185 RDX=0000000000000001 RSI=ffffffff8e3f18bd RDI=ffffffff8c622c80 RBP=ffffed1003962960 RSP=ffffc9000047fe00 R8 =0000000000000001 R9 =ffffed10056667bd R10=ffff88802b333deb R11=0000000000000001 R12=0000000000000000 R13=0000000000000000 R14=1ffff9200008ffc4 R15=dffffc0000000000 RIP=ffffffff8bce56bf RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888096a60000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00000000f744e2a8 CR3=000000005f12d000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000001e4 0000000000000005 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000001 RBX=ffffc900067a7c92 RCX=ffffffff81af691b RDX=000000000000000a RSI=ffffc900067a7c88 RDI=ffff888024929b40 RBP=ffff888024929b50 RSP=ffffc900067a7b48 R8 =0000000000000001 R9 =ffffed1004925369 R10=ffff888024929b49 R11=0000000000000000 R12=ffff888024929b40 R13=ffffc900067a7c58 R14=0000000000000000 R15=00000000000000e7 RIP=ffffffff810014b0 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888096b60000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000055700b74cf40 CR3=000000005f931000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6771b404ac 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000001d6c01a4 0000000200000025 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0001da2500028611 000336b40003bbbf ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000ffff00001050 0000470800006901 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000c42400009b92 00005a9900001c00 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffaaaaaaffaaaaaa ffaaaaaaffaaaaaa ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00ff0000000000aa 00ff0000000000aa ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00ff0000000000aa 00ff0000000000aa ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ff0000aaff0000aa ffaaaaaaffaaaaaa ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00ff0000000000aa 00ff0000000000aa ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000ef5e3f RBX=ffff88801cb10000 RCX=ffffffff8bce7185 RDX=0000000000000001 RSI=ffffffff8e3f18bd RDI=ffffffff8c622c80 RBP=ffffed1003962000 RSP=ffffc9000049fe00 R8 =0000000000000001 R9 =ffffed10056a67bd R10=ffff88802b533deb R11=0000000000000001 R12=0000000000000000 R13=0000000000000000 R14=1ffff92000093fc4 R15=dffffc0000000000 RIP=ffffffff8bce56bf RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00000000 DS =0000 0000000000000000 ffffffff 00000000 FS =0000 0000000000000000 ffffffff 00000000 GS =0000 ffff888096c60000 ffffffff 00000000 LDT=0000 0000000000000000 ffffffff 00000000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000000080001000 CR3=000000006e795000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000c400000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000