last executing test programs: 1m20.577899584s ago: executing program 2 (id=319): r0 = fsopen(&(0x7f0000000440)='msdos\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) userfaultfd(0x80401) openat$comedi(0xffffff9c, &(0x7f0000000340)='/dev/comedi3\x00', 0x800, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x80c80, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x12, r3, 0x0) r4 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0xa2ac0, 0x0) write$USERIO_CMD_REGISTER(r4, &(0x7f00000020c0)={0x0, 0x2}, 0x2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r5, 0xc06864b8, 0x0) syz_io_uring_setup(0x8005e2, &(0x7f0000000340)={0x0, 0x406bc0, 0x2200, 0xa, 0x200000, 0x0, r3}, &(0x7f0000000400)=0x0, &(0x7f0000000140)) socket$inet_sctp(0x2, 0x5, 0x84) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0xc0601, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f00000003c0)=0x14) r8 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) r9 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000002c0)={'syz', 0x0}, 0x0, 0x0, r8) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x8001af84, 0x0) pipe2$watch_queue(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r8, r10, 0x9d) r11 = add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000280)={'fscrypt:', @desc1}, &(0x7f0000000180)={0x0, "de8d0d27ca969fa15f8b3b7bae39c1b3327d4332f8c149d2d65a347d67f6db7eb90dfdad3cdebaaf421412f812305c9da91699b5a02c1295596f0fd9ec78f2fd", 0x17}, 0x3b, r8) keyctl$KEYCTL_MOVE(0x1e, r11, r8, r9, 0x0) capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000180)={0x3, 0xfffffff9, 0x1000009, 0x9}) syz_io_uring_submit(r6, 0x0, &(0x7f00000001c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x11, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x0, 0x3938700}, 0x1, 0x12, 0x1}) io_uring_enter(0xffffffffffffffff, 0xa3d, 0x0, 0x0, 0x0, 0x0) mq_open(&(0x7f0000000300)='!\xce6\xf2\x95^\x8f\a\x00\x00\x00\x00\x00\x00\x00\xe8/x\x00', 0x800, 0x13e, &(0x7f0000000480)={0x6, 0xfffffc3d, 0x4007, 0x4}) 1m20.248624785s ago: executing program 2 (id=322): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r0 = openat$binfmt(0xffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_misc(r0, &(0x7f0000000080)="93b7159f084d33592cdf78de9de2c002600ff289f33a9f123163f803b83e1175c7cfe8832bb3915c7b79cd60197f54fa45d4065d89cc6d269274b86ee906c02c39392bc518263d0ca2e111fd18a22d9a68e0b7997cf72d8960bc54616d58b408251c505887e68aa54ae074845591e2070c7ef022867157bd4300c8351f7c5e22c2bc6fa93a9d3f2418e67a7c99f8a9d56d9213c726f7bcb1d8f0a7470bd659787dc3572bda19e5f6c71c8075431120c70d77fa94313b04acc78ec7d584dd3c483c83cd65653fa038390e7f091ad982e3a90c1dd1b4b8bbbac9b10428e194d5facbb6c8ad3037dcea8ba9509b84cc99ae739fab", 0xf3) r1 = socket$kcm(0x10, 0x2, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000c80)=ANY=[@ANYBLOB="b7020000b96871dfbfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000001e6400000000000045040400010000001704000001000a00b7040000000100006a0af2fe00000000850000002f000000b7000000000000009500000000000000455781a5feee5e1ce784909b849d5550adf200000000000000b61d69f2ffdaa10350e11cb97c8ad51bcda0c4ee6d9674c77404ceb9971e43405d621ffbc9a4fd39b0631f6dde53a9a53608c10556e5734eb84049761451ce2e2d9f8004e26f7fcc059c06220002595f6dba87b81d1106fb0289ce67a66afd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7480884bd6fee53f5b2e7b91c61ced1ebad000000000000e8122a793c080a882add4e1179bd4a44f231b6d753a78845d8363e0401861abebe428ba953df4aece69311687f4122073a236c3ad198e3f3a532efa04137d452ff47d2638da3261c8362bb7c7824be6195a66d2e17e122040e11e3bd4a69fc6e8d9f7043e09b9e10dc7777bfae5884e4ba1e9cc4a2bbe99e30810400000000000000c53d716c0975e1ce4a655362e7062ff6ab3934555c01840219829472adefa06d3482c7b2711b98eabdca89b77efd13e6dba4a431ce47911834118093b6cabaa17a57727474e1785ee234835088445aa4a9b677d3d342640e328562b7f097a02dbf8fe1d704765de7482040b2fc3000000000000000008947baeaeaa2f804924600273ee26d8115cbca081a14cba24788779291745083fccdddc90d7af35c528d46362ea0d8d79c79ddca066da478c197d4a550470557bc99cca336bd88cd28a5ee651627e3a6fbf6ea53b95ddb64c69c7d8d2f4baddc239828760459564124bad68209d2a1d16ad085886c017679cfcda8b10700ac1e2bcc5ede5b5687aa418abfa29acd7339e73b2cd185c9eb5fb34fccd20ffa155b16c0c309ed6f6663677df37de0ec0d0f548b273940be5d1fe0bae14d1a76bf741330dacd9cc19c0163bcc93059e8d2d1bfa928e2ba458ecd989cb3581a3f270ad48255ac0dad4923e3e357e4e90583ce8d43ec65ed491d87a51d7c13f665dcf772e3ead71112ea821f70aee1ccbd71c5a1c21e87d5b7b73d356337dbcf3456ff6cd0d6b98a258e3509afd15b9dcae4d0d750ffa07909c955e718585b2456308beda2fa03bb9bcf03cdff31ee4b1665b987829c0f0872c006c6e4ed666fe23b343aae943923eedbdb0e7abee90e3da7b98b7d07d2d4816201ad1737798635b0a3ebd3aed120e4500c16e6c9dc729f009db49c6b8b19613e4df92cb4ff5106419291d4222980b49ddb9527ce785822d8f4e2571f67a7c7819b0889d7614ab5e25b468ab3102cab53f312f2e29075891bd21c2301f338b8a961a01fb282fd4e53d8c0a2ebb71ceaf7e3b34e4502b5fad975855ce0e4d4c163519fabd209c3d4302f46c90a19d8a0a03396e8949a91184e8d680f724d65700b9a18d28e22810be9fb37ce6cac86c45a03165c1af3152a3c21dc927f0697343abf80e3aae6149b14d08f188e61f900bbb0eae54b0566ad8489918ddc866871e06a5f50cf35b551f7b4c7ae0300838056a65d2e0058c9d8bf1c99d40fb3e2ecdbd68b5f79003c04266a43b8794a5d90b2348f4e81ed1d00000000000000000000e321e9aa37fc5cbee1f627e86e2f58a24ccd9c0376772b2bd5e99ab9d86b753de57a5f40714d11282d809bf6bf5f7009ff38db199273d029f5b65b573722b8131f473775031a7889a2e6b6e804b26429c839373dffd00347a65a2e8ca7d387857dddcea793ce7a08e92648dd663d25d5374ddf20e98e824b269a199210b7064fb6cda054ccef091d11"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19}, 0x42) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000040)=r2, 0x4) r3 = socket$can_raw(0x1d, 0x3, 0x1) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) bind$can_raw(r3, &(0x7f00000000c0)={0x1d, r5}, 0x44) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="b80000001300e99900000000fedbdf2500000000000000000000000000000000fe8000000000a81e181fff433a000000000000000000bbb9000033000000000a00603000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000007f00000000000000030000000000000000000000000000000000000000000000ffffffffffffffff0002000000000000fffffffffffffffe0300000000000000000000000000000000000000000000000100000000000000060000000000000001000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r7, 0x0, r9, 0x0, 0xf3a, 0x1) splice(r8, 0x0, r7, 0x0, 0x100000004, 0x0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000000)=0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x60d0, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r10, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r11 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r11, 0x2) ppoll(&(0x7f0000000100)=[{r11, 0x219c}], 0x1, 0x0, 0x0, 0x0) r12 = socket$inet6_sctp(0xa, 0x1, 0x84) r13 = syz_open_dev$vim2m(&(0x7f0000000040), 0x0, 0x2) ioctl$vim2m_VIDIOC_DQBUF(r13, 0xc0445609, &(0x7f0000000240)=@mmap={0x6, 0x1, 0x4, 0x10a148, 0x7a6b, {}, {0x4, 0x0, 0x9, 0x5, 0xfd, 0x8, "9f509ff9"}, 0xbfb6, 0x1, {}, 0x7}) r14 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r14, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000700)=@updpolicy={0xc0, 0x19, 0x1, 0xfffffffc, 0x0, {{@in=@dev={0xac, 0x14, 0x14, 0x23}, @in6=@local, 0x4e22, 0x0, 0x4e24, 0x0, 0xa, 0x0, 0x60, 0x0, 0x0, 0xee01}, {0x0, 0x1000000000000401, 0x0, 0x40000000, 0x0, 0x1a, 0x1, 0xfffffffffffffffe}, {0x77, 0x3, 0x0, 0x100000000007fff}, 0x0, 0x6e6bb1, 0x1, 0x0, 0x3}, [@mark={0xc, 0x15, {0x35075b, 0x7}}]}, 0xc0}}, 0x0) sendto$inet6(r12, &(0x7f0000000240)="8a", 0x1, 0x51, &(0x7f0000000080)={0xa, 0x3, 0x1, @local, 0x9}, 0x1c) write$binfmt_script(r6, &(0x7f0000000240), 0x3af4701e) 1m19.387438898s ago: executing program 2 (id=326): syz_emit_ethernet(0xe2, &(0x7f0000000480)={@multicast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, "fbddf0", 0xac, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @loopback, {[], @echo_reply={0x81, 0x0, 0x0, 0x3, 0x2e57, "29dd5d17a2c11a40a184f74df97496e1b4b28558bbd83820d8fadbbbc3f9fc19efa7490d989b16da6beeec7c5acf437412f24a84508a57082f1c1479e067950b7c1dde41fdff36bdfe14344ae6e386a87949a24df8fb26c4679b39b4d130646bd00000000033a1b483e7d260bdf613754b5b6e62bb6f0d83ccad71f50762700388d2b6dcfa8092938728671824e8d8cc78fda095969fe1e5db12c5563a05d0c031ab305e"}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x94) socket$netlink(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={0x4c, 0x0, 0x1, 0x301, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_ORIG={0x4}, @CTA_TUPLE_REPLY={0x2c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x7}]}, 0x4c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="3800d40003010104000000000000000002000000240001801400018008000100e000000108000200c90000010c0002800500010000000000"], 0x38}}, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) openat$kvm(0xffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @multicast2, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000180)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r7, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000047c0)={0x60, r8, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r9}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect$cdc_ncm(0x1, 0x0, 0x0, 0x0) r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r10, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480f0000005e140602000000000e000a001000000002800000121f", 0x2e}], 0x1}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r9, {}, {}, {0x8, 0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x8881}, 0x0) 1m16.827786142s ago: executing program 2 (id=334): r0 = socket(0x1000000000000010, 0x80802, 0x0) bind$netlink(r0, &(0x7f0000000440)={0x10, 0x0, 0x0, 0x10004400}, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x29}, 0x48) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000000)=r1, 0x4) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r3 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @local}, 0x1c) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) 1m16.517738229s ago: executing program 2 (id=339): r0 = fsopen(&(0x7f0000000100)='bpf\x00', 0x0) (async) futex(0x0, 0x3, 0x0, &(0x7f0000fd7ff0), 0x0, 0xfffffffd) (async) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x6, 0x0, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x5}, 0x50) (async) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000240)={@loopback, 0x0}, &(0x7f00000003c0)=0x14) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) (async) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r5 = dup3(r4, r3, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) (async, rerun: 64) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) (rerun: 64) write$cgroup_int(r6, &(0x7f0000000040)=0x1c8, 0x12) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000480)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x1}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000580)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000500), &(0x7f0000000540)='%-5lx \x00'}, 0x1c) (async, rerun: 32) r9 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) (rerun: 32) ioctl$FS_IOC_FSSETXATTR(r9, 0x401c5820, &(0x7f0000000080)={0x8}) (async) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r9, 0xc25c4110, &(0x7f0000000800)={0x940, [[0x4, 0x2, 0x6, 0x3, 0x3, 0x1000, 0x8001, 0x8], [0x6, 0x8, 0x4, 0xccb, 0xca1, 0x25f, 0x2, 0x5], [0x2, 0x1, 0x7, 0x2, 0x80000000, 0x7, 0x2, 0x9]], '\x00', [{0x3, 0x9d}, {0x0, 0x6}, {0x8f4, 0x7ff, 0x1, 0x0, 0x1}, {0x4, 0x6, 0x0, 0x0, 0x0, 0x1}, {0xfdb7, 0xfff, 0x0, 0x1, 0x1, 0x1}, {0xeb93, 0xbdd5, 0x0, 0x1, 0x1, 0x1}, {0x6, 0x7, 0x0, 0x1, 0x0, 0x1}, {0x5, 0x7, 0x0, 0x0, 0x1}, {0x8462, 0x3, 0x1, 0x1, 0x1, 0x1}, {0x8, 0x3, 0x1, 0x1, 0x0, 0x1}, {0x2e3a, 0xa7, 0x1, 0x0, 0x0, 0x1}, {0xfffffff8, 0x0, 0x1, 0x1}], '\x00', 0x6000000}) (async) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x3, 0xd, &(0x7f00000003c0)=@framed={{0x18, 0x2}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r10}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffd}}, @call={0x85, 0x0, 0x0, 0x7d}]}, &(0x7f0000000380)='GPL\x00'}, 0x94) (async) r11 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000a80)=@o_path={&(0x7f0000000740)='./file0\x00', 0x0, 0x8, r5}, 0x14) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000bc0)={{r7}, &(0x7f0000000700), &(0x7f0000000ac0)=r11}, 0x1c) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x19, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@map_idx_val={0x18, 0x5, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, @printk={@li}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0xa8, 0x0, 0x0, 0x41100, 0xa, '\x00', r2, 0x25, r5, 0x8, &(0x7f0000000400)={0x4, 0x3}, 0x8, 0x10, &(0x7f0000000440)={0x4, 0x0, 0x4, 0x9}, 0x10, 0x0, 0x0, 0x3, &(0x7f00000005c0)=[r6, 0x1, r7, r8, r9, r10], &(0x7f0000000600)=[{0x1, 0x5, 0x10, 0x3}, {0x2, 0x4, 0xc, 0x7}, {0x4, 0x5, 0xc, 0x8}]}, 0x94) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f0000000280)='\xebU\x95\xa4i\xea`\xe0[\x9a\x84\x11\xc9&R:\xe9\xea\xec\xe05@b\x1f\xab\xb7\xe6\xd4\x18\xe7D@\xf5\xb2\xb4\xe8i$\x038\x99\xfb;\xbeR\xbf\xc2\r\x13\xf0\xf0\xec\x94\xad\nA\xee>\xb3i4\\\xc8\xd7 \x8d\xe0D\x953|) \xd8p\x12\x11\x81\x7f\x93\a\xfb!\x83\xc2\xd8\xe4\x98\xae\xb7\f\x0fR\xd3\xad\xa5\xca\xd5\xc2\bv+\x9a\x94\xd0\x05\x8d\xef\x9f94>\xa5?\x9a\x11Et\xef\xea\xe9e\x81\'jB\xca\f\xccz\x15x\x1cn\xe4\xf3\xbd\xb4q{\xb33\xffM\x95Jm\x90\x00\x15\r\xc8R\xb4\xf89>\xb7\x1e\xe3\x99\x99_~\xdb\xdc\xfd\x0f\x8f\xfc\xe4\xa4\xe8\x03K\xea\xb2\x91H|EB\xfd2\x10atXE\xee\xf4\x13c\xb5u\x85w$\xd3}\x19\xe7n\xf9\xe7\x11@\xceB\xd7/\xde\x80F\xe0\xd0dI\xedfq]\xb1\xaa\x9b)\\o\xd1\xdcx\x06\x80\x9f\xb3\xcc\r\b\xcb\xb1\x1c\x03G\xe4\xf0H`\x0e\xe1\xc7\x13\x9e%J\xe6\xe2\xe6\xb4:\xa8\xf51~\xc5\x8a\xfe++s\x0f\xa9\x00\x00A\xb8\xf1\xdb', &(0x7f00000000c0)="8c", 0xff57) 1m16.436850458s ago: executing program 2 (id=340): r0 = socket$can_bcm(0x1d, 0x2, 0x2) (async) io_setup(0x9, &(0x7f0000000240)=0x0) connect$can_bcm(r0, &(0x7f0000000000), 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x9c}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) r3 = eventfd(0x101) io_submit(r1, 0x2, &(0x7f0000000140)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x30, r0, &(0x7f0000000300)="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", 0x1000, 0xffffffffe6aa2cfc}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x6, 0xb2c8, r0, &(0x7f00000000c0)="483569cf22e91600007069c1796942843e6209da4f4fd747e561ff3989cc41", 0x1f, 0x6, 0x0, 0x0, r3}]) (async) syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0009030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) r5 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) (async, rerun: 32) r6 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) ioctl(r6, 0x8b2d, &(0x7f0000000040)) (async) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000780)={0x2, 0x400000000000003, 0x0, 0x0, 0x16, 0x0, 0x0, 0x0, [@sadb_lifetime={0x4, 0x3, 0xfb}, @sadb_address={0x5, 0x6, 0x6c, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private1}}, @sadb_lifetime={0x4, 0x4, 0x2000, 0x7, 0x3}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3}, @sadb_address={0x5, 0x5, 0x0, 0x80, 0x0, @in6={0xa, 0x0, 0x0, @mcast1}}]}, 0xb0}}, 0x0) (async) syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x20100) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r8, &(0x7f0000000000), 0xffffff6a) (async) sendfile(r5, r8, 0x0, 0xffffffff000) (async, rerun: 32) read$char_usb(r4, 0x0, 0x0) (rerun: 32) 1m0.885789114s ago: executing program 32 (id=340): r0 = socket$can_bcm(0x1d, 0x2, 0x2) (async) io_setup(0x9, &(0x7f0000000240)=0x0) connect$can_bcm(r0, &(0x7f0000000000), 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x9c}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) r3 = eventfd(0x101) io_submit(r1, 0x2, &(0x7f0000000140)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x30, r0, &(0x7f0000000300)="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", 0x1000, 0xffffffffe6aa2cfc}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x6, 0xb2c8, r0, &(0x7f00000000c0)="483569cf22e91600007069c1796942843e6209da4f4fd747e561ff3989cc41", 0x1f, 0x6, 0x0, 0x0, r3}]) (async) syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0009030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) r5 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) (async, rerun: 32) r6 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) ioctl(r6, 0x8b2d, &(0x7f0000000040)) (async) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000780)={0x2, 0x400000000000003, 0x0, 0x0, 0x16, 0x0, 0x0, 0x0, [@sadb_lifetime={0x4, 0x3, 0xfb}, @sadb_address={0x5, 0x6, 0x6c, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private1}}, @sadb_lifetime={0x4, 0x4, 0x2000, 0x7, 0x3}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3}, @sadb_address={0x5, 0x5, 0x0, 0x80, 0x0, @in6={0xa, 0x0, 0x0, @mcast1}}]}, 0xb0}}, 0x0) (async) syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x20100) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r8, &(0x7f0000000000), 0xffffff6a) (async) sendfile(r5, r8, 0x0, 0xffffffff000) (async, rerun: 32) read$char_usb(r4, 0x0, 0x0) (rerun: 32) 3.366961024s ago: executing program 4 (id=709): socket(0x1d, 0x2, 0x9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) symlinkat(&(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') setxattr$trusted_overlay_upper(&(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000040), 0x0, 0x0, 0x3) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/tcp6\x00') openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r1, 0x29, 0x4e, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c) syz_emit_ethernet(0x66, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setpriority(0x2, 0x0, 0x7) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) 2.508110805s ago: executing program 4 (id=723): socket$pppoe(0x18, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0xfffffffd, {}, [{0x90, 0x1, [@m_ct={0x44, 0x5, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x0, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socket(0xa, 0x1, 0x0) msgget(0x3, 0x616) socket$inet6_sctp(0xa, 0x1, 0x84) r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bind$inet(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x3, 0x0) r2 = socket(0x10, 0x2, 0x0) write(r2, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r2, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) socket$nl_rdma(0x10, 0x3, 0x14) write$FUSE_INIT(r0, &(0x7f0000000380)={0x50, 0xfffffffffffffffe, 0x0, {0x7, 0x27, 0x0, 0xa81001a, 0x66d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000003700)=ANY=[@ANYBLOB="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"/2542], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1d4}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r3, 0x300f000, 0xe, 0x0, &(0x7f0000000080)="0069c2704ade28eddb0000200000", 0x0, 0x48b8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 2.507601945s ago: executing program 3 (id=724): syz_clone3(&(0x7f0000000240)={0x8000, &(0x7f0000000000)=0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=0x0, {0xe}, &(0x7f00000000c0)=""/81, 0x51, &(0x7f0000000140)=""/188, &(0x7f0000000200)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0], 0x9}, 0x58) ioctl$BTRFS_IOC_QGROUP_CREATE(r0, 0x4010942a, &(0x7f00000002c0)={0x1, 0x7}) r2 = openat$sndseq(0xffffff9c, &(0x7f0000000300), 0x60800) r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000340), 0x282002) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000380)={{0xffffffffffffffff, 0x2, 0xfe000000, 0x2, 0x81}}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) connect$unix(r4, &(0x7f0000000400)=@file={0x0, './file0\x00'}, 0x6e) ioctl$F2FS_IOC_COMPRESS_FILE(r4, 0xf518, 0x0) r5 = openat$sndseq(0xffffff9c, &(0x7f0000000480), 0x90800) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r5, 0x80045300, &(0x7f00000004c0)) ioctl$CEC_G_MODE(r4, 0x80046108, &(0x7f0000000500)) prlimit64(r1, 0x0, &(0x7f0000000540)={0x80000001, 0xffff5ad6}, &(0x7f0000000580)) r6 = openat$mice(0xffffff9c, &(0x7f00000005c0), 0x24040) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x100000b, 0x8010, r5, 0xf149f000) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f0000000680)={'syztnl0\x00', &(0x7f0000000600)={'syztnl0\x00', 0x0, 0x4, 0x7, 0x3, 0xfffffffa, 0x0, @loopback, @private0, 0x8000, 0x80, 0x2}}) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000800)={&(0x7f00000006c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x60, 0x60, 0x7, [@typedef={0xa}, @typedef={0xd}, @enum={0xb, 0x5, 0x0, 0x6, 0x4, [{0xc, 0x5}, {0x7}, {0x8, 0x4}, {0x10, 0xfffffffc}, {0x0, 0x1}]}, @enum={0xc, 0x1, 0x0, 0x6, 0x4, [{0x0, 0x4}]}]}, {0x0, [0x61, 0x5f, 0xdaae43880e61a456, 0x5f, 0x0]}}, &(0x7f0000000740)=""/132, 0x7f, 0x84, 0x1, 0x1}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x13, 0x1, 0x4, 0x9, 0x8010, 0x1, 0x0, '\x00', r7, r8, 0x4, 0x4, 0x3, 0x0, @value=r6}, 0x50) r9 = accept4$inet6(r6, &(0x7f00000008c0)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000900)=0x1c, 0x80000) fstat(r9, &(0x7f0000000940)) r10 = openat$binfmt(0xffffff9c, 0x0, 0x41, 0x1ff) close_range(r2, r10, 0x0) r11 = syz_open_dev$sndpcmc(&(0x7f00000009c0), 0xfffffffe, 0x282001) ioctl$SNDRV_PCM_IOCTL_WRITEI_FRAMES(r11, 0x400c4150, &(0x7f0000000a40)={0x0, &(0x7f0000000a00)="3bc51b0337f4779cc8f328b3e0769dc38815f97f0d952354b900977127951be849f01c", 0x23}) r12 = epoll_create1(0x80000) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r12) setsockopt$IP_VS_SO_SET_STARTDAEMON(r6, 0x0, 0x48b, &(0x7f0000000a80)={0x1, 'veth0_to_hsr\x00', 0x3}, 0x18) ioctl$FAT_IOCTL_GET_VOLUME_ID(r10, 0x80047213, &(0x7f0000000ac0)) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$EXT4_IOC_GROUP_ADD(r11, 0x40246608, &(0x7f0000000b00)={0xa, 0x80, 0x2659375e, 0x400, 0xa, 0x7f}) openat$sndtimer(0xffffff9c, &(0x7f0000000b40), 0x0) 2.358076393s ago: executing program 3 (id=725): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r1, 0xc008551b, &(0x7f0000000040)={0x60}) (async) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000400)={0x18, 0x0, {0x2, @broadcast, 'veth0\x00'}}, 0x1e) (async) r3 = socket$pppoe(0x18, 0x1, 0x0) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x4, 0xdd, 0xa}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x10, '\x00', 0x0, @sock_ops=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x39, 0x0, 0x0, 0x0}, 0x94) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r5}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000240)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) connect$pppoe(r3, &(0x7f0000000080)={0x18, 0x0, {0xd, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'veth1\x00'}}, 0x1e) (async) r6 = socket$kcm(0x10, 0x2, 0x0) (async) r7 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@getstat={0xe0, 0x15, 0x0, 0x70bd29, 0x0, {{'drbg_pr_hmac_sha384\x00'}, '\x00', '\x00', 0x0, 0x2400}}, 0xe0}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00fa40", @ANYRES16=0x0, @ANYBLOB="000000000000000000004c0000000c00a6000000000000000000080001"], 0x3c}}, 0x0) (async) sendmsg$nl_crypto(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f0000000120003"], 0xf0}}, 0x0) (async) sendmsg$kcm(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000540)="2e00000010008188040f46ecdb4cb9ccf5960ef42b000000e3bd6efb010511000b0002000d000010ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0xc9e}, 0x8800) (async) r8 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r8, &(0x7f0000000140)=[{&(0x7f00000000c0)="580000001500add427323b472545b4560a117fff0b0082001b59000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffbfffffffe7ee000000000000000002", 0x54}, {&(0x7f0000000180)="abd9296f", 0x4}], 0x2) (async) bind$inet(r0, &(0x7f0000003900)={0x2, 0x4e24, @multicast1}, 0x10) (async) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @empty}, 0x10) sendmmsg$inet(r0, &(0x7f0000000ec0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000040)="81", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000001080)="84", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000001040)=[{&(0x7f0000000e00)="b6dfe813", 0x4}, {0x0}], 0x2}}], 0x3, 0x40008d4) (async) setsockopt$inet_tcp_int(r0, 0x6, 0xc, &(0x7f0000000080)=0x7fe00, 0x4) 2.357390014s ago: executing program 3 (id=726): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r2 = openat$binder_debug(0xffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) write$6lowpan_enable(r2, &(0x7f0000000080)='1', 0x1) write$tun(r0, &(0x7f00000004c0)={@val, @void, @eth={@random="ad65d0fc00", @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x1, 0x2, 0x20, 0x64, 0x0, 0x1, 0x11, 0x0, @rand_addr=0x64010102, @empty=0xe0000001}, {0x4e22, 0x4e21, 0xc, 0x0, @gue={{0x1, 0x0, 0x1, 0xff, 0x0, @void}}}}}}}}, 0x32) 1.758021298s ago: executing program 3 (id=727): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000140000001100"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a300000"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r0, 0x0, 0x4000800) close(r0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, 0x0, 0x0) r2 = fsopen(&(0x7f00000000c0)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) tkill(0x0, 0xb) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_pidfd_open(0x0, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r3, 0x0, 0x0, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000180)="f84c05853a0878f3b5e3f3f2dbf21eb5eb", 0x20) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) 1.686957439s ago: executing program 0 (id=731): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000080), 0x1, 0x0) ioctl$EVIOCGKEYCODE_V2(r3, 0x40084503, &(0x7f0000001500)=""/4103) bind$inet(r2, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) write$6lowpan_enable(r1, &(0x7f0000000000)='1', 0x1) sendfile(r2, r1, 0x0, 0x20000023893) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000001d00070f000000000000000007000000", @ANYRES32=0x0, @ANYBLOB="000802009699d77394677ed3055ac79ecebe1fa3ee539952bd62653fb92b5c7d7dbcb5048dd735b6fb9f40f14bc30646cce3fe71244cc93318bcb8d3a31ea5973b66bef6bd85863de9a5a640d314ccc36ea7"], 0x1c}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bond={{0x9}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_ACTOR_SYS_PRIO={0x6, 0x18, 0xfff}, @IFLA_BOND_AD_LACP_RATE={0x5}, @IFLA_BOND_MODE={0x5, 0x1, 0x4}]}}}]}, 0x4c}}, 0x0) 1.587776018s ago: executing program 0 (id=732): openat$comedi(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/comedi4\x00', 0x101000, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(r1, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x6}) ioctl(r1, 0x8b22, &(0x7f0000000040)) r2 = syz_io_uring_setup(0x1327, &(0x7f0000000300)={0x0, 0x7303, 0x10100, 0x0, 0x2}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0}) io_uring_enter(r2, 0x2def, 0x4000, 0x0, 0x0, 0x0) 1.586741106s ago: executing program 0 (id=733): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0x58, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df53365bf1315246f8b4d49de3b192afe4b91abb0789e9dd67"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r4}, 0x10) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r5}, 0x10) (async) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x18}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x44, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x8, 0x0, 0x2, 0x8, 0xc, 0x7}, {0x1, 0x1, 0x1, 0x401, 0x0, 0x7ffffffb}, 0x2000001, 0x1000, 0x575}}, @TCA_TBF_RATE64={0xc, 0x4, 0x274bdcb7db3981e2}, @TCA_TBF_PRATE64={0xc, 0x5, 0xe1e31d5aa9748ab8}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x404}, 0x0) 1.583788969s ago: executing program 0 (id=734): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)={0x14, 0x19, 0xa, 0x401, 0x0, 0x0, {0x2}}, 0x14}}, 0x8004) (async) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000080000000000000000400000095"], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) ioctl$SIOCSIFHWADDR(r3, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100008d8dff"}) (async) r4 = socket$inet_sctp(0x2, 0x1, 0x84) listen(r4, 0x9) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) 1.507960053s ago: executing program 0 (id=735): r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000021c0)={0x2020}, 0x2020) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b80)=@filter={'filter\x00', 0xe, 0x4, 0x3dc, 0xffffffff, 0x0, 0xc8, 0xc8, 0xffffffff, 0xffffffff, 0x314, 0x314, 0x314, 0xffffffff, 0x4, &(0x7f00000000c0), {[{{@uncond, 0x0, 0xa4, 0xc8}, @REJECT={0x24, 'REJECT\x00', 0x0, {0x8}}}, {{@ipv6={@local, @mcast2, [0xff000000, 0xffffffff, 0x0, 0xffffffff], [0xffffff00, 0xffffff, 0xff, 0xff000000], 'syz_tun\x00', 'wg1\x00', {0xff}, {}, 0x33, 0x2, 0x9, 0x1f}, 0x0, 0xa4, 0xc8}, @REJECT={0x24, 'REJECT\x00', 0x0, {0x4}}}, {{@uncond, 0x0, 0x160, 0x184, 0x0, {}, [@common=@srh1={{0x8c}, {0x21, 0x5, 0x2, 0xf5, 0x62b, @remote, @private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [0xc1959add8e549836, 0xffffff00, 0x0, 0xff], [0xff000000, 0x7fffffff, 0xffffff00, 0xff], [0xffffffff, 0x0, 0xffffffff], 0x35efa9b2ec2d8aa, 0x3430}}, @common=@frag={{0x30}, {[0x7f, 0x5], 0x10001, 0x34, 0x3}}]}, @REJECT={0x24, 'REJECT\x00', 0x0, {0x3}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x438) socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r5, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x4001, 0x0, @loopback}, 0x1c) r7 = socket$netlink(0x10, 0x3, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, 0x0) r8 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x8c2b01) write$char_usb(r8, &(0x7f0000000040)="e2", 0x12d8) sendmsg$nl_route(r7, 0x0, 0x804) 1.506821846s ago: executing program 1 (id=736): socket$inet_sctp(0x2, 0xe6a75bb3fa8875d2, 0x84) (async) socket$inet_sctp(0x2, 0xe6a75bb3fa8875d2, 0x84) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) (async) socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000c40), 0x12) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200)=0x1, 0x12) write$cgroup_int(r3, &(0x7f00000000c0), 0x12) socket$netlink(0x10, 0x3, 0x0) (async) r4 = socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) (async) r5 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000ac0)={0x0}, 0x1, 0x0, 0x0, 0x200480c0}, 0x20000085) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000180)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c0000001000040000000000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001ae3f5f0d1fde720252d5cd40038739daa6c7460cd979b38d57caf140012800900010076657468000014d737a1f866207dbe4eb3e25e8adb48d3128108b9e9174c2b8cbc538212f9ae0d51914b9884aa3c33033c85aae389bb7f6876337b09ed1f31ae1c17ce3ef808672ab6f61852a1c6990ecffdcc8dfb2845b1606c08e1de0e62af54dcff08063d29476042ba65a5745c76248f256793d5b7b9b2cfc2315331947098a90da2464052120450"], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r7, 0xfffffffc) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000001) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'veth0_to_bond\x00'}) 1.505963883s ago: executing program 1 (id=737): socket$pppoe(0x18, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0xfffffffd, {}, [{0x90, 0x1, [@m_ct={0x44, 0x5, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x0, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket(0xa, 0x1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) msgget(0x3, 0x616) socket$inet6_sctp(0xa, 0x1, 0x84) r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bind$inet(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x3, 0x0) r2 = socket(0x10, 0x2, 0x0) write(r2, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r2, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) socket$nl_rdma(0x10, 0x3, 0x14) write$FUSE_INIT(r0, &(0x7f0000000380)={0x50, 0xfffffffffffffffe, 0x0, {0x7, 0x27, 0x0, 0xa81001a, 0x66d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000003700)=ANY=[@ANYBLOB="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"/2542], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1d4}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r3, 0x300f000, 0xe, 0x0, &(0x7f0000000080)="0069c2704ade28eddb0000200000", 0x0, 0x48b8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 992.142741ms ago: executing program 4 (id=738): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) recvfrom(r1, &(0x7f0000000080)=""/175, 0xaf, 0x40000001, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={r0, 0xe0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000001640)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) 927.954228ms ago: executing program 4 (id=739): syz_io_uring_setup(0x48be, &(0x7f0000001280)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000000000), &(0x7f0000001180)) r0 = syz_io_uring_setup(0x2a31, &(0x7f0000000000)={0x0, 0x2f33, 0x4, 0x0, 0x16d}, &(0x7f0000000100), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_RESTRICTIONS(r0, 0xb, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB="fc000000190001000000000000000000ac1414bb000000000000000000000000ac1e000100000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000004400080000100000000000000000000000000001000004d22b00000000000000ff02000000000000000000000000000100"/176], 0xfc}}, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x52, r4, 0x1, 0x0, 0x0, {{}, {0x0, 0x6}}}, 0xfd53}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000001300)=ANY=[@ANYBLOB="40010000100001000000000000000000fe8000"/28, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="6401010200000000000000000000000000000000320000000000000000000000000000000000000100000000000001800000000000000000000000000000000000000000000000000300000000000000000000000002000004000000000000000000000000000000000000000080000004000000000000000000004011000000000000000000000000000000040000000000000025bd7000013500000a00000100000000480003006465666c61746500", @ANYBLOB], 0x140}, 0x1, 0x0, 0x0, 0x4004000}, 0x4810) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x3, &(0x7f0000000140)=ANY=[@ANYRES64=r1], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) r6 = userfaultfd(0x80001) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r6, 0xc020aa07, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1, 0x2}) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0cc5605, 0x0) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x0) chdir(&(0x7f00000000c0)='./file0\x00') epoll_create(0xf) 817.839469ms ago: executing program 3 (id=740): r0 = epoll_create1(0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0x11}) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000080)={'wg0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv6_getaddr={0x20, 0x16, 0x300, 0x70bd26, 0x25dfdbfe, {0xa, 0x37, 0x81, 0x0, r3}, [@IFA_RT_PRIORITY={0x8, 0x9, 0xffffffff}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x4044094) (async) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$kcm_KCM_RECV_DISABLE(r2, 0x119, 0x1, &(0x7f0000000180)=0x80, 0x4) (async, rerun: 64) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, 0x1, 0x4, 0x5, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x1}, @NFULA_CFG_CMD={0x5, 0x1, 0x2}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x4}]}, 0x2c}}, 0x8000) (async, rerun: 64) mkdirat(r2, &(0x7f00000002c0)='./file0\x00', 0x0) (async) name_to_handle_at(r2, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)=@FILEID_INO32_GEN_PARENT={0x10, 0x2, {{0x7, 0xbe}, 0x0, 0xffffffff}}, &(0x7f0000000380), 0x400) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f00000003c0)={0x0, 0xfffffffc}, &(0x7f0000000400)=0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r2, 0x84, 0x6c, &(0x7f0000000440)={r5, 0x2e, "35ad464e3bc45c0859d3efc8eb8406e05aef37b41d1eb97cfee9f7b8b6d2f2edd1585c91bcd9b615f1c4edc33da2"}, &(0x7f0000000480)=0x36) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000500), r2) sendmsg$ETHTOOL_MSG_EEE_SET(r2, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x2c, r7, 0x10, 0x70bd2b, 0x25dfdbfd, {}, [@ETHTOOL_A_EEE_ENABLED={0x5}, @ETHTOOL_A_EEE_ENABLED={0x5, 0x5, 0x1}, @ETHTOOL_A_EEE_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8880}, 0x804) (async) ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f0000000600)={0x3, 0x0, [{0x90d, 0x0, 0x4}, {0xbf3, 0x0, 0x9}, {0x929, 0x0, 0x6}]}) (async) getresuid(&(0x7f00000006c0), &(0x7f0000000700)=0x0, &(0x7f0000000740)=0x0) (async) getgroups(0x2, &(0x7f0000000780)=[0x0, 0xee01]) (async) r11 = getuid() (async) getsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f00000007c0)={{{@in6=@remote, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6}}, &(0x7f00000008c0)=0xe4) mount$fuse(0x0, &(0x7f0000000640)='./file0\x00', &(0x7f0000000680), 0x1100002, &(0x7f0000000900)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id', 0x3d, r9}, 0x2c, {'group_id', 0x3d, r10}, 0x2c, {[{@blksize}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0x200}}, {@blksize={'blksize', 0x3d, 0x400}}], [{@fowner_gt={'fowner>', r11}}, {@euid_eq={'euid', 0x3d, r12}}]}}) (async, rerun: 64) r13 = openat(r2, &(0x7f0000000a40)='./file0\x00', 0x48c182, 0x10b) (async, rerun: 64) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000a80)) (async) syz_open_dev$sndmidi(&(0x7f0000000ac0), 0x800, 0x24000) recvmmsg(r13, &(0x7f0000006f40)=[{{&(0x7f0000000b00)=@ethernet={0x0, @dev}, 0x80, &(0x7f0000001bc0)=[{&(0x7f0000000b80)=""/33, 0x21}, {&(0x7f0000000bc0)=""/4096, 0x1000}], 0x2, &(0x7f0000001c00)=""/184, 0xb8}, 0x80000000}, {{&(0x7f0000001cc0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f00000030c0)=[{&(0x7f0000001d40)=""/4096, 0x1000}, {&(0x7f0000002d40)=""/221, 0xdd}, {&(0x7f0000002e40)=""/179, 0xb3}, {&(0x7f0000002f00)=""/250, 0xfa}, {&(0x7f0000003000)=""/114, 0x72}, {&(0x7f0000003080)=""/42, 0x2a}], 0x6, &(0x7f0000003100)=""/114, 0x72}, 0x5}, {{&(0x7f0000003180)=@caif=@dbg, 0x80, &(0x7f00000055c0)=[{&(0x7f0000003200)=""/142, 0x8e}, {&(0x7f00000032c0)=""/228, 0xe4}, {&(0x7f00000033c0)=""/4096, 0x1000}, {&(0x7f00000043c0)=""/175, 0xaf}, {&(0x7f0000004480)=""/4096, 0x1000}, {&(0x7f0000005480)=""/201, 0xc9}, {&(0x7f0000005580)=""/33, 0x21}], 0x7}, 0x80000001}, {{&(0x7f0000005600)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f0000006800)=[{&(0x7f0000005680)=""/15, 0xf}, {&(0x7f00000056c0)=""/8, 0x8}, {&(0x7f0000005700)=""/4096, 0x1000}, {&(0x7f0000006700)=""/217, 0xd9}], 0x4, &(0x7f0000006840)=""/22, 0x16}, 0xffffffff}, {{&(0x7f0000006880)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f0000006a00)=[{&(0x7f0000006900)=""/206, 0xce}], 0x1, &(0x7f0000006a40)=""/197, 0xc5}, 0xff}, {{0x0, 0x0, &(0x7f0000006e00)=[{&(0x7f0000006b40)=""/174, 0xae}, {&(0x7f0000006c00)=""/37, 0x25}, {&(0x7f0000006c40)=""/157, 0x9d}, {&(0x7f0000006d00)=""/200, 0xc8}], 0x4, &(0x7f0000006e40)=""/203, 0xcb}, 0x1000}], 0x6, 0x2000, &(0x7f0000007000)) quotactl$Q_SETQUOTA(0xffffffff80000802, &(0x7f0000007040)=@sg0, r8, &(0x7f0000007080)={0xe4e5, 0xa48, 0xff, 0x5, 0x7, 0x12d9, 0x3, 0x6, 0x1}) (async) ioctl$EVIOCGSND(r2, 0x8040451a, &(0x7f0000007100)=""/84) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r15, 0x84, 0x6f, &(0x7f0000007240)={r6, 0xbc, &(0x7f0000007180)=[@in6={0xa, 0x4e24, 0x8, @ipv4={'\x00', '\xff\xff', @loopback}, 0x1}, @in6={0xa, 0x4e24, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @in6={0xa, 0x4e23, 0x1800000, @local, 0x7}, @in6={0xa, 0x4e20, 0x100, @mcast2, 0x4}, @in={0x2, 0x4e23, @multicast2}, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x40}}, @in6={0xa, 0x4e21, 0x6, @private2, 0xb328}, @in={0x2, 0x4e21, @multicast1}]}, &(0x7f0000007280)=0xc) (async) connect$bt_sco(r14, &(0x7f00000072c0), 0x8) getsockopt$TIPC_IMPORTANCE(0xffffffffffffffff, 0x10f, 0x7f, &(0x7f0000007340), &(0x7f0000007380)=0x4) 817.413769ms ago: executing program 3 (id=741): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x400000000003, 0x7ffff, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x82, 0x0) write$binfmt_aout(r0, &(0x7f0000000340)=ANY=[], 0xff2e) ioctl$TCXONC(r0, 0x540a, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1c0000, 0x1, &(0x7f0000000040)) r2 = dup(0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x2, &(0x7f0000000180)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}}) io_submit(0x0, 0x1, &(0x7f0000000300)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x5, 0x9bd, r1, &(0x7f0000001600)="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", 0x1000, 0x6, 0x0, 0x3, r2}]) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x48c00, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) userfaultfd(0x802) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) eventfd(0x1a52) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100000800000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000032ce8500000004000000850000000500000095", @ANYRES16=r1], &(0x7f0000000200)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='global_dirty_state\x00', r6}, 0x10) r7 = syz_io_uring_setup(0x32b7, &(0x7f0000000180)={0x0, 0xc27c, 0x2, 0x3, 0x39a}, &(0x7f0000000080), &(0x7f0000000040)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) io_uring_register$IORING_REGISTER_PROBE(r7, 0x8, &(0x7f00000000c0)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x10) sendfile(r5, r5, 0x0, 0x200000) 576.211291ms ago: executing program 1 (id=742): r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket(0x2, 0x80805, 0x0) (async) r2 = socket$inet_sctp(0x2, 0x1, 0x84) (async, rerun: 32) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) (rerun: 32) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_UNLINKAT={0x24, 0x0, 0x0, r0, 0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, {0x0, r3}}) (async, rerun: 64) r4 = syz_io_uring_setup(0x57a0, &(0x7f0000000080)={0x0, 0xd498, 0x40, 0x1, 0x348}, &(0x7f0000000100), &(0x7f0000000140)) (rerun: 64) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xa, 0x0, 0x0) (async) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x10, &(0x7f00000007c0)=ANY=[@ANYBLOB="18050061040b00000000000007000000b7080004000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffbfa400000000000007040000f0ffffffb7020000080000008e81a8f73bf34e316d0450e8939687bf5125eca8f1cc4ad910529964875bc245a5678dfc3639549ebcc51c0c4a2156fa5bd8edd1bd6bd25e0669d731a50659c4b1be85d3a03c558dcd689a3cebedf24bda318e6bc6e8e891e5c288e4a1fd2bd378372aa1f62536142b75b561de83696ab72019ad102f56675bb53db94bdc5f05889e594f9a4d", @ANYRES32=r5, @ANYBLOB="0000000000000000b70400000800000085000000950000009500000000000000"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9b}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r6, 0xfffff000, 0xd, 0x0, &(0x7f0000001700)="61df7100c80400d5721ff59fe8", 0x0, 0x1, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x4c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000500)=@IORING_OP_FILES_UPDATE={0x14, 0x2c, 0x0, 0x0, 0xa78, 0x0}) (async, rerun: 64) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x84, @broadcast, 0x4e20, 0x3, 'wrr\x00', 0x1, 0x2, 0x6e}, 0x2c) (async, rerun: 64) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=@newtaction={0x19c, 0x30, 0x800, 0x0, 0x0, {}, [{0x188, 0x1, [@m_mirred={0x13c, 0x14, 0x0, 0x0, {{0xb}, {0x64, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x2, 0x7fff, 0x0, 0x9e6, 0x1}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x3, 0x1, 0x3, 0x9, 0x1}, 0x3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xf, 0x7f, 0x7, 0x7}, 0x4}}]}, {0xaf, 0x6, "ebcc53ff8c61afcaa1d676e8ad997f3a6d04297033413ef115e3cee2c0db5fbfbfa68b2d221f03f3e7c481c0da751992ac9d36a9e2f734f3e5b76a40c38cc92b368c339e6b2e5be282ceee47dd23e366118ff7f493a82f23495c43b11bba8bf57dfbe7a09608dea0d194bdb47b3e935d1d59aedd4d4a2ce04b7069e38e30803ebbbf54d27bbaf462ea263f0874f164066a1a151e3af8c87a09f09d480e56f9dac5cff2e2f19f6f2dcfabc8"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x19c}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async, rerun: 32) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async, rerun: 32) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) r7 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x4) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x15d74000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs={0x1, 0x0, 0x4e20}, 0x6e) (async, rerun: 64) sendmmsg$unix(r9, &(0x7f0000000000), 0x400000000000041, 0x0) (rerun: 64) sched_setaffinity(r7, 0x8, &(0x7f0000000240)=0x2) (async, rerun: 32) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 32) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, 0x0, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r2, 0x0, 0x485, 0x0, 0x0) (async, rerun: 32) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async, rerun: 32) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5021900000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_SREG={0x8, 0x7, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_TYPE={0x5}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x4a}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x2}]}}}]}]}], {0x14}}, 0x94}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 437.235373ms ago: executing program 1 (id=743): socket$netlink(0x10, 0x3, 0x10) (async) socket$netlink(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) (async) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x800020, 0x0, 0xffffffffffffffc0, 0x9, 0x8, 0x0, 0x3}, 0x0) socket$kcm(0x2d, 0x2, 0x0) gettid() (async) r2 = gettid() ptrace$getregset(0x4204, r2, 0x201, &(0x7f00000002c0)={&(0x7f0000000380)=""/199, 0xc7}) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ADD(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={0x18, r5, 0x4c1dad3e3d6a7499, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000080}, 0x2400c000) (async) sendmsg$TIPC_NL_BEARER_ADD(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={0x18, r5, 0x4c1dad3e3d6a7499, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000080}, 0x2400c000) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x0) (async) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002300)=@updpolicy={0xfe0, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0xaa3, 0xfffffffffffffff8}, {0x0, 0xc}}, [@algo_aead={0xdcb, 0x12, {{'morus640-sse2\x00'}, 0x6bf8, 0x200, "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"}}, @user_kmaddress={0x2c, 0x13, {@in6=@ipv4={'\x00', '\xff\xff', @multicast1}, @in6=@empty, 0x0, 0x2}}, @offload={0xc, 0x1c, {0x0, 0x1}}, @migrate={0x9c, 0x11, [{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in=@multicast1, @in=@broadcast, @in6=@remote, 0x3c, 0x1, 0x0, 0x3507, 0xa}, {@in6=@mcast1, @in=@empty, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@empty, 0x0, 0x2, 0x0, 0x3505, 0xa, 0x2}]}, @tfcpad={0x8, 0x16, 0x3}, @etimer_thresh={0x8, 0xc, 0xffff}, @lastused={0xc, 0xf, 0x2}, @replay_esn_val={0x38, 0x17, {0x7, 0x70bd2b, 0x70bd26, 0x70bd2d, 0x70bd26, 0xa, [0x5, 0x8, 0xae8, 0x3, 0x6, 0x5, 0x7]}}, @offload={0xc, 0x1c, {0x0, 0x2}}, @user_kmaddress={0x2c, 0x13, {@in6=@dev={0xfe, 0x80, '\x00', 0x21}, @in6=@loopback, 0x0, 0xa}}]}, 0xfe0}}, 0x40000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00'}, 0x48) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x9fd, 0x84, 0x105}, 0x50) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x9fd, 0x84, 0x105}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r7}, 0x38) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r7}, 0x38) r8 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsmount(r8, 0x0, 0x0) (async) r9 = fsmount(r8, 0x0, 0x0) openat$cgroup_subtree(r9, &(0x7f0000000100), 0x2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x84, &(0x7f0000000480)=[@in={0x2, 0x4e21, @empty}, @in6={0xa, 0x4e23, 0x10001, @private0, 0x8}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x32}}, @in={0x2, 0x4e20, @multicast1}, @in6={0xa, 0x4e22, 0x8000, @private0={0xfc, 0x0, '\x00', 0x1}, 0xfff}, @in6={0xa, 0x4e24, 0x1, @remote}]}, &(0x7f0000000280)=0xc) r10 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000001180)='hugetlb.2MB.rsvd.limit_in_bytes\x00', 0x2, 0x0) write$cgroup_subtree(r10, 0x0, 0x27) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0xffffffff) (async) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0xffffffff) 66.692932ms ago: executing program 4 (id=744): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000600), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000740)={'syztnl2\x00', &(0x7f0000000640)={'gretap0\x00', 0x0, 0x1, 0x7800, 0x9, 0x8, {{0x29, 0x4, 0x0, 0x3e, 0xa4, 0x67, 0x0, 0xb, 0x4, 0x0, @broadcast, @private=0xa010102, {[@end, @timestamp={0x44, 0x28, 0xef, 0x0, 0x6, [0x9, 0x2, 0x6, 0x1, 0x4, 0x6, 0x5, 0x0, 0x80]}, @noop, @end, @ssrr={0x89, 0x1f, 0x41, [@remote, @private=0xa010102, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, @loopback, @local, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @timestamp_addr={0x44, 0x44, 0x29, 0x1, 0xa, [{@private=0xa010102, 0x3}, {@remote, 0xbc7e}, {@dev={0xac, 0x14, 0x14, 0x33}, 0x3}, {@local, 0x4}, {@loopback, 0x7}, {@multicast1, 0xf8d3}, {@rand_addr=0x64010102, 0x3}, {@loopback, 0x7}]}]}}}}}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a40)={0xffffffffffffffff, 0xe0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x5, &(0x7f00000007c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xdb, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000880), &(0x7f00000008c0), 0x8, 0xa4, 0x8, 0x8, &(0x7f0000000900)}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d40)={0xffffffffffffffff, 0xe0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000a80)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0xa, &(0x7f0000000ac0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000b00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x57, &(0x7f0000000b40)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000b80), &(0x7f0000000bc0), 0x8, 0x41, 0x8, 0x8, &(0x7f0000000c00)}}, 0x10) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000e00)={'gre0\x00', &(0x7f0000000d80)={'gretap0\x00', 0x0, 0x10, 0x10, 0x97, 0xffff4849, {{0xb, 0x4, 0x1, 0x8, 0x2c, 0x4, 0x0, 0x0, 0x4, 0x0, @broadcast, @multicast1, {[@timestamp_prespec={0x44, 0xc, 0x45, 0x3, 0x5, [{@rand_addr=0x64010101, 0x1}]}, @ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4}, @noop, @noop]}}}}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000ec0)={'syztnl0\x00', &(0x7f0000000e40)={'erspan0\x00', 0x0, 0x7, 0x40, 0x5, 0x7ff, {{0x18, 0x4, 0x0, 0x25, 0x60, 0x64, 0x0, 0x10, 0x29, 0x0, @empty, @dev={0xac, 0x14, 0x14, 0x37}, {[@generic={0x89, 0x12, "5ddbb5d34e2a776d055ffd6db7a2c70b"}, @noop, @generic={0x94, 0x10, "80134b605eb34a8086f206db13e2"}, @ra={0x94, 0x4}, @ssrr={0x89, 0xf, 0x49, [@dev={0xac, 0x14, 0x14, 0x2b}, @dev={0xac, 0x14, 0x14, 0xe}, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @ra={0x94, 0x4}, @generic={0x83, 0xc, "d6144a6ed1f92bec142b"}, @ra={0x94, 0x4}, @noop]}}}}}) sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000001040)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001000)={&(0x7f0000000f00)={0xf4, r0, 0x8, 0x70bd26, 0x25dfdbff, {}, [@ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}, @ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}, @ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x1}, @ETHTOOL_A_PAUSE_RX={0x5}, @ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x1}, @ETHTOOL_A_PAUSE_HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}]}, @ETHTOOL_A_PAUSE_AUTONEG={0x5}, @ETHTOOL_A_PAUSE_AUTONEG={0x5}, @ETHTOOL_A_PAUSE_HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}]}, 0xf4}, 0x1, 0x0, 0x0, 0x4004}, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/sem\x00', 0x0, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) r7 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000001700), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r7, 0xc0285700, &(0x7f0000000000)={0x0, "f3c492eb0165203d36bec7080089b42c000004002231a110000000005900"}) r8 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r9 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r10 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r10, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r10, &(0x7f0000000100)={0xa, 0x4e21, 0xc, @loopback, 0xb6}, 0x1c) fcntl$notify(r9, 0x402, 0x8000001f) r11 = open(&(0x7f0000000280)='.\x00', 0x0, 0x40) fcntl$notify(r11, 0x402, 0x80000024) r12 = open(&(0x7f0000000280)='.\x00', 0x2000, 0x148) ioctl$ifreq_SIOCGIFINDEX_vcan(r12, 0x8933, &(0x7f0000000240)={'vcan0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x10, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x4}, [@ldst={0x1, 0x2, 0x3, 0x6, 0x6, 0x100, 0x4}, @exit, @call={0x85, 0x0, 0x0, 0xc3}, @call={0x85, 0x0, 0x0, 0x77}, @map_fd={0x18, 0x4, 0x1, 0x0, r12}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x4}, @tail_call={{0x18, 0x2, 0x1, 0x0, r12}}]}, &(0x7f0000000140)='GPL\x00', 0xffffffff, 0xbe, &(0x7f00000002c0)=""/190, 0x41000, 0x40, '\x00', r13, 0x25, r8, 0x8, &(0x7f0000000380)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000400)={0x3, 0xd, 0x10000, 0x1}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000000440)=[r6, r9, r6], &(0x7f0000000480)=[{0x3, 0x5, 0x2, 0xc}, {0x4, 0x2, 0xc, 0x7}, {0x4, 0x2, 0x7, 0x4}, {0x0, 0x2, 0xe, 0xa}, {0x5, 0x1, 0xf, 0x1}, {0x0, 0x2, 0x5, 0x4}, {0x4, 0x3, 0x8, 0x6}], 0x10, 0x3ff}, 0x94) fcntl$notify(r12, 0x402, 0x36) r14 = socket$nl_generic(0x10, 0x3, 0x10) r15 = socket$alg(0x26, 0x5, 0x0) r16 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r14) sendmsg$NL80211_CMD_GET_MPP(r14, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000006c0)=ANY=[@ANYBLOB="94000000", @ANYRES16=r16, @ANYBLOB="000219bd7000fbdbdf256b0000000800", @ANYRES32, @ANYBLOB], 0x94}, 0x1, 0x0, 0x0, 0x10}, 0x40080) bind$alg(r15, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x40800) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) 66.481878ms ago: executing program 1 (id=745): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)=ANY=[@ANYBLOB="1800000000d20a0000"], 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) 8.276975ms ago: executing program 0 (id=746): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = open_tree(0xffffffffffffff9c, 0x0, 0x89901) r3 = syz_io_uring_setup(0x5e65, &(0x7f0000000400)={0x0, 0x5e94, 0x2, 0x0, 0x1a}, &(0x7f0000000340)=0x0, &(0x7f0000000300)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r3, 0x16, &(0x7f0000000040)={&(0x7f0000001000)={[{0x0, 0xffffffffffffff3a, 0x3, 0xf4}]}, 0x1, 0x1}, 0x1) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f00000000c0)=[{&(0x7f0000000040)="3900000013000318680907070000000f0000ff3f3f000000170a001700000000040037000d00030001332564aa58b9a64411f6bbf44dc48f57", 0x39}], 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x10, r7, 0x0, 0x0, 0x0, 0x262, 0x1, {0x1}}) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r9 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r9, 0xc0105512, &(0x7f0000000200)) syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), r2) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2020, 0x0) ioctl$USBDEVFS_IOCTL(r9, 0x80045505, &(0x7f0000000040)=@usbdevfs_connect) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(r9, 0x80045505, &(0x7f0000000000)=0x1) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r12, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB]) ioctl$KVM_KVMCLOCK_CTRL(r12, 0xaead) ioctl$KVM_RUN(r12, 0xae80, 0x0) syz_genetlink_get_family_id$net_dm(&(0x7f0000000480), r8) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x6, &(0x7f0000000480)=ANY=[@ANYBLOB="180200002f72ffff0000000000004000850000002c0000001800000004000000000000000700000095"], &(0x7f0000000200)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x14}, 0x94) 8.055572ms ago: executing program 1 (id=747): r0 = io_uring_setup(0x224a, &(0x7f00000002c0)={0x0, 0x1670, 0x40, 0x2, 0x3d3}) r1 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r1, &(0x7f0000000600)={&(0x7f00000001c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x5a, &(0x7f0000000380)=[{&(0x7f0000000640)="80", 0x26892}], 0x1}, 0xfc) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x141, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x3) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000040)=0x7e) sendmsg$inet(r1, &(0x7f0000000680)={&(0x7f0000000000)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000180)="c6", 0x1}], 0x1}, 0x4000080) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000340)=""/138) close_range(r0, 0xffffffffffffffff, 0x0) 0s ago: executing program 4 (id=748): r0 = socket$packet(0x11, 0x2, 0x300) socket$kcm(0x11, 0xa, 0x300) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000003a00)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x9}}, 0x10, &(0x7f0000000b40)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001a00), 0x101d0}], 0x4}, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000180)={0x2, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x6}]}, 0x8) bpf$ENABLE_STATS(0x20, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) r2 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) ioctl$SG_IO(r2, 0x2285, 0x0) r3 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000001c0), 0x80000, 0x0) setsockopt$inet6_mreq(r3, 0x29, 0x15, &(0x7f0000000240)={@private1={0xfc, 0x1, '\x00', 0x1}}, 0x14) writev(r2, &(0x7f0000000400)=[{&(0x7f0000000080)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}, {&(0x7f0000000040)="aa1d484e2400a0000000f7c08bfcd111fbdf23ea32db0e8f21d5bc27bd8063067a0689fff2a41cfbf0e9", 0x2a}], 0x2) syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000009b768405e0483020b9901e40201090227000100000000090400fb015cc7aa00090509"], 0x0) syz_open_dev$sndpcmp(&(0x7f0000000000), 0x3, 0x183c00) syz_io_uring_setup(0x24fa, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000500)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r6, 0x6, 0x1, &(0x7f0000000140)=@gcm_128={{0x304}, "db114a144486726d", "f08aa5840ab83403e2996399a17b3939", "716c1eb3", "37bc9b1f5ee4479f"}, 0x28) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r7, &(0x7f0000000040)=ANY=[], 0x118) capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x200042, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/\x00et/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44\x8cm\xa0\x8dN\xd4\xa2\x88\x00\xd1l,'}, 0xff0a) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$KVM_CREATE_IRQCHIP(r10, 0xae60) ioctl$KVM_SIGNAL_MSI(r10, 0x4020aea5, &(0x7f0000000000)={0xd23c0853f5c4551d, 0x4000, 0x5, 0x1, 0x7}) ioctl$KDGKBMETA(r8, 0x4b62, &(0x7f0000000740)) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x11, r7, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_STATX={0x15, 0x2, 0x0, r7, 0x0, 0x0, 0x100, 0x100, 0x1}) 0s ago: executing program 1 (id=749): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000020001801000020646c2100000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r4, &(0x7f0000000280)=ANY=[@ANYBLOB="a8"], 0xa8) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f0000000040)={0x30}, 0x30) (async) write$FUSE_BMAP(r4, &(0x7f0000000000)={0x18}, 0x18) (async) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) (async) getrusage(0xffffffffffffffff, &(0x7f0000000200)) (async) write$FUSE_DIRENTPLUS(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="3200000000000078ab", @ANYRES16, @ANYRES16=r1], 0x7) (async) mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@posixacl}]}}) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:1142' (ED25519) to the list of known hosts. [ 40.783256][ T5958] cgroup: Unknown subsys name 'net' [ 40.939448][ T5958] cgroup: Unknown subsys name 'cpuset' [ 40.942451][ T5958] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 41.620625][ T5958] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 44.443667][ T5973] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 44.447242][ T5976] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 44.450447][ T5978] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 44.453466][ T5978] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 44.456054][ T5978] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 44.459268][ T5978] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 44.462907][ T63] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 44.465436][ T63] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 44.468338][ T63] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 44.471711][ T63] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 44.504303][ T63] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 44.507451][ T63] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 44.509894][ T5978] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 44.510060][ T63] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 44.514893][ T5978] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 44.515376][ T63] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 44.518036][ T5978] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 44.521178][ T63] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 44.522583][ T5978] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 44.526702][ T5978] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 44.580138][ T5975] chnl_net:caif_netlink_parms(): no params data found [ 44.602080][ T5971] chnl_net:caif_netlink_parms(): no params data found [ 44.688769][ T5971] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.691207][ T5971] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.693540][ T5971] bridge_slave_0: entered allmulticast mode [ 44.696836][ T5971] bridge_slave_0: entered promiscuous mode [ 44.700900][ T5971] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.703826][ T5971] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.706853][ T5971] bridge_slave_1: entered allmulticast mode [ 44.711139][ T5971] bridge_slave_1: entered promiscuous mode [ 44.766624][ T5971] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 44.769864][ T5975] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.772089][ T5975] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.774502][ T5975] bridge_slave_0: entered allmulticast mode [ 44.777266][ T5975] bridge_slave_0: entered promiscuous mode [ 44.780652][ T5975] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.783231][ T5975] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.785555][ T5975] bridge_slave_1: entered allmulticast mode [ 44.787987][ T5975] bridge_slave_1: entered promiscuous mode [ 44.801503][ T5971] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 44.824980][ T5975] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 44.829471][ T5984] chnl_net:caif_netlink_parms(): no params data found [ 44.847561][ T5971] team0: Port device team_slave_0 added [ 44.850308][ T5975] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 44.870644][ T5971] team0: Port device team_slave_1 added [ 44.890127][ T5975] team0: Port device team_slave_0 added [ 44.909173][ T5975] team0: Port device team_slave_1 added [ 44.919045][ T5971] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 44.921235][ T5971] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 44.929445][ T5971] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 44.955614][ T5971] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 44.959314][ T5971] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 44.970391][ T5971] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 44.976492][ T5981] chnl_net:caif_netlink_parms(): no params data found [ 44.990614][ T5975] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 44.993049][ T5975] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.002613][ T5975] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 45.033787][ T5975] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 45.036172][ T5975] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.044704][ T5975] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 45.048500][ T5984] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.050622][ T5984] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.052821][ T5984] bridge_slave_0: entered allmulticast mode [ 45.055119][ T5984] bridge_slave_0: entered promiscuous mode [ 45.090028][ T5984] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.093039][ T5984] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.096197][ T5984] bridge_slave_1: entered allmulticast mode [ 45.099634][ T5984] bridge_slave_1: entered promiscuous mode [ 45.122151][ T5971] hsr_slave_0: entered promiscuous mode [ 45.124757][ T5971] hsr_slave_1: entered promiscuous mode [ 45.184759][ T5975] hsr_slave_0: entered promiscuous mode [ 45.189320][ T5975] hsr_slave_1: entered promiscuous mode [ 45.191745][ T5975] debugfs: 'hsr0' already exists in 'hsr' [ 45.193595][ T5975] Cannot create hsr debugfs directory [ 45.196697][ T5984] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 45.203302][ T5984] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 45.233539][ T5981] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.236248][ T5981] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.239367][ T5981] bridge_slave_0: entered allmulticast mode [ 45.242475][ T5981] bridge_slave_0: entered promiscuous mode [ 45.246332][ T5981] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.249696][ T5981] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.252840][ T5981] bridge_slave_1: entered allmulticast mode [ 45.256119][ T5981] bridge_slave_1: entered promiscuous mode [ 45.285668][ T5984] team0: Port device team_slave_0 added [ 45.322427][ T5984] team0: Port device team_slave_1 added [ 45.326531][ T5981] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 45.333296][ T5981] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 45.381441][ T5984] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 45.384183][ T5984] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.392314][ T5984] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 45.397510][ T5984] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 45.400154][ T5984] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.408780][ T5984] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 45.417883][ T5981] team0: Port device team_slave_0 added [ 45.422100][ T5981] team0: Port device team_slave_1 added [ 45.455363][ T5981] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 45.457730][ T5981] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.465816][ T5981] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 45.493490][ T5981] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 45.495799][ T5981] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.504587][ T5981] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 45.530917][ T5984] hsr_slave_0: entered promiscuous mode [ 45.533883][ T5984] hsr_slave_1: entered promiscuous mode [ 45.536550][ T5984] debugfs: 'hsr0' already exists in 'hsr' [ 45.538980][ T5984] Cannot create hsr debugfs directory [ 45.566926][ T5981] hsr_slave_0: entered promiscuous mode [ 45.569619][ T5981] hsr_slave_1: entered promiscuous mode [ 45.572549][ T5981] debugfs: 'hsr0' already exists in 'hsr' [ 45.574786][ T5981] Cannot create hsr debugfs directory [ 45.657849][ T5971] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 45.672107][ T5971] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 45.688858][ T5971] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 45.695994][ T5971] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 45.714889][ T5975] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 45.719390][ T5975] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 45.722747][ T5975] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 45.729725][ T5975] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 45.746091][ T5984] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 45.750332][ T5984] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 45.754286][ T5984] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 45.758944][ T5984] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 45.780210][ T5981] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 45.784045][ T5981] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 45.795245][ T5981] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 45.799216][ T5981] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 45.834089][ T5975] 8021q: adding VLAN 0 to HW filter on device bond0 [ 45.843919][ T5975] 8021q: adding VLAN 0 to HW filter on device team0 [ 45.856138][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.858389][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.861275][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.863417][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.872962][ T5971] 8021q: adding VLAN 0 to HW filter on device bond0 [ 45.882146][ T5984] 8021q: adding VLAN 0 to HW filter on device bond0 [ 45.896435][ T5971] 8021q: adding VLAN 0 to HW filter on device team0 [ 45.904618][ T5984] 8021q: adding VLAN 0 to HW filter on device team0 [ 45.912263][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.915055][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.924985][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.927885][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.936682][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.939426][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.951882][ T5981] 8021q: adding VLAN 0 to HW filter on device bond0 [ 45.957415][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.959905][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.001318][ T5981] 8021q: adding VLAN 0 to HW filter on device team0 [ 46.009703][ T68] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.012245][ T68] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.026036][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.029077][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.070905][ T5975] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 46.087097][ T5975] veth0_vlan: entered promiscuous mode [ 46.093781][ T5975] veth1_vlan: entered promiscuous mode [ 46.114182][ T5975] veth0_macvtap: entered promiscuous mode [ 46.117487][ T5971] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 46.123927][ T5975] veth1_macvtap: entered promiscuous mode [ 46.140830][ T5975] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 46.146787][ T5984] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 46.152605][ T5975] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 46.156654][ T5981] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 46.169151][ T1235] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.172515][ T1235] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.177901][ T5971] veth0_vlan: entered promiscuous mode [ 46.183950][ T1235] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.187080][ T1235] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.205790][ T5971] veth1_vlan: entered promiscuous mode [ 46.234333][ T5984] veth0_vlan: entered promiscuous mode [ 46.242991][ T5984] veth1_vlan: entered promiscuous mode [ 46.243118][ T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.248454][ T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.266532][ T5971] veth0_macvtap: entered promiscuous mode [ 46.269155][ T1235] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.270723][ T5971] veth1_macvtap: entered promiscuous mode [ 46.271601][ T1235] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.274868][ T5981] veth0_vlan: entered promiscuous mode [ 46.287055][ T5971] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 46.291149][ T5971] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 46.297937][ T5984] veth0_macvtap: entered promiscuous mode [ 46.302221][ T46] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.306890][ T5984] veth1_macvtap: entered promiscuous mode [ 46.310814][ T5975] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 46.312145][ T46] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.319834][ T46] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.323118][ T5981] veth1_vlan: entered promiscuous mode [ 46.328877][ T46] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.337326][ T5984] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 46.345218][ T5984] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 46.372637][ T60] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.376030][ T60] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.380473][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.383639][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.388512][ T5981] veth0_macvtap: entered promiscuous mode [ 46.393162][ T60] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.397765][ T60] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.405859][ T5981] veth1_macvtap: entered promiscuous mode [ 46.415061][ T1150] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.418670][ T1150] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.425547][ T5981] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 46.437013][ T5981] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 46.448625][ T1139] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.451492][ T1139] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.456710][ T1139] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.459929][ T1139] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.464096][ T1150] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.466577][ T1150] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.482193][ T1150] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.484855][ T1150] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.514586][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.517501][ T5973] Bluetooth: hci1: command tx timeout [ 46.520144][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.527492][ T5973] Bluetooth: hci0: command tx timeout [ 46.534272][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.536724][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.542097][ T6062] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2'. [ 46.564433][ T6062] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2'. [ 46.596574][ T6065] random: crng reseeded on system resumption [ 46.597482][ T5973] Bluetooth: hci2: command tx timeout [ 46.598682][ T5976] Bluetooth: hci3: command tx timeout [ 46.629521][ T6062] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2'. [ 46.687582][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 46.691051][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 46.691257][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 46.699227][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 46.706722][ T6060] skbuff: bad partial csum: csum=65506/2 headroom=178 headlen=65526 [ 47.008098][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 47.008118][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 47.013635][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 47.249060][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 47.362619][ T6076] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(11) [ 47.364760][ T6076] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 47.367293][ T6076] vhci_hcd vhci_hcd.0: Device attached [ 47.379839][ T6076] batadv1: entered allmulticast mode [ 47.382680][ T6076] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 47.556310][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 47.658805][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 47.843045][ T6082] vhci_hcd: connection closed [ 47.844402][ T1139] vhci_hcd: stop threads [ 47.847234][ T1139] vhci_hcd: release socket [ 47.880447][ T1150] batman_adv: batadv1: adding TT local entry 33:33:00:00:00:01 to non-existent VLAN -1 [ 47.894184][ T1139] vhci_hcd: disconnect device [ 47.957260][ T6085] loop6: detected capacity change from 0 to 2098 [ 48.399000][ T1235] batman_adv: batadv1: adding TT local entry 33:33:00:00:00:01 to non-existent VLAN -1 [ 48.610940][ T5976] Bluetooth: hci0: command tx timeout [ 48.613637][ T5976] Bluetooth: hci1: command tx timeout [ 48.635368][ T6087] warning: `syz.2.6' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 48.656862][ T6091] batadv_slave_1: entered promiscuous mode [ 48.677848][ T5973] Bluetooth: hci3: command tx timeout [ 48.679714][ T5976] Bluetooth: hci2: command tx timeout [ 48.799179][ T6099] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9'. [ 48.829486][ T6099] ip_vti0: entered promiscuous mode [ 48.831232][ T6099] ip_vti0: entered allmulticast mode [ 49.034417][ T6115] syz.3.10 (6115) used obsolete PPPIOCDETACH ioctl [ 50.161544][ T6100] batadv_slave_1: left promiscuous mode [ 50.237590][ T6039] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 50.408135][ T6150] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14'. [ 50.410311][ T6039] usb 8-1: Using ep0 maxpacket: 8 [ 50.414722][ T6039] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 50.419035][ T6039] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 50.441286][ T6039] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 50.447604][ T6039] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 50.451684][ T6039] usb 8-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 50.462643][ T6039] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 50.491458][ T6039] hub 8-1:1.0: bad descriptor, ignoring hub [ 50.511245][ T6039] hub 8-1:1.0: probe with driver hub failed with error -5 [ 50.534844][ T6039] cdc_wdm 8-1:1.0: skipping garbage [ 50.537036][ T6039] cdc_wdm 8-1:1.0: skipping garbage [ 50.558325][ T6039] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 50.567725][ T6039] cdc_wdm 8-1:1.0: Unknown control protocol [ 50.677644][ T5973] Bluetooth: hci1: command tx timeout [ 50.680052][ T5976] Bluetooth: hci0: command tx timeout [ 50.757595][ T5976] Bluetooth: hci2: command tx timeout [ 50.760917][ T5973] Bluetooth: hci3: command tx timeout [ 51.158600][ T6125] usb 8-1: reset high-speed USB device number 2 using dummy_hcd [ 51.408054][ T6134] kexec: Could not allocate control_code_buffer [ 51.419813][ T6134] Process accounting resumed [ 51.489921][ T6162] tipc: Started in network mode [ 51.492358][ T6162] tipc: Node identity , cluster identity 4711 [ 51.495219][ T6162] tipc: Failed to obtain node identity [ 51.498038][ T6162] tipc: Enabling of bearer rejected, failed to enable media [ 51.523160][ T6162] syzkaller0: entered promiscuous mode [ 51.525660][ T6162] syzkaller0: entered allmulticast mode [ 51.729822][ T6163] ======================================================= [ 51.729822][ T6163] WARNING: The mand mount option has been deprecated and [ 51.729822][ T6163] and is ignored by this kernel. Remove the mand [ 51.729822][ T6163] option from the mount to silence this warning. [ 51.729822][ T6163] ======================================================= [ 52.758879][ T5978] Bluetooth: hci0: command tx timeout [ 52.760879][ T5976] Bluetooth: hci1: command tx timeout [ 52.826007][ T6179] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input5 [ 52.842557][ T5978] Bluetooth: hci2: command tx timeout [ 52.844357][ T5976] Bluetooth: hci3: command tx timeout [ 52.878837][ T6179] netlink: 4 bytes leftover after parsing attributes in process `syz.1.20'. [ 52.947718][ T6039] usb 8-1: USB disconnect, device number 2 [ 53.074529][ T6184] input: syz0 as /devices/virtual/input/input6 [ 54.319242][ T6196] netlink: 28 bytes leftover after parsing attributes in process `syz.3.26'. [ 54.322748][ T6196] ip_vti0: entered promiscuous mode [ 54.325173][ T6196] ip_vti0: entered allmulticast mode [ 54.917846][ T5976] Bluetooth: hci3: command 0x0405 tx timeout [ 56.308494][ T6239] syz.2.37: attempt to access beyond end of device [ 56.308494][ T6239] loop2: rw=0, sector=2, nr_sectors = 2 limit=0 [ 56.314473][ T6239] MINIX-fs: unable to read superblock [ 56.887535][ T5973] Bluetooth: hci3: Malformed Event: 0x2f [ 56.945628][ T40] audit: type=1800 audit(1755774609.161:2): pid=6262 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.42" name="cgroup.controllers" dev="tmpfs" ino=54 res=0 errno=0 [ 56.971537][ T5973] Bluetooth: hci3: unexpected event for opcode 0x1002 [ 57.215711][ T6283] dlm: no locking on control device [ 58.354644][ T6297] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 58.496646][ T6312] tmpfs: Bad value for 'mpol' [ 58.936266][ T5973] Bluetooth: hci3: unexpected event for opcode 0x1002 [ 59.132264][ T6334] dlm: no locking on control device [ 59.381210][ T6336] Illegal XDP return value 4294967274 on prog (id 16) dev N/A, expect packet loss! [ 59.637429][ T5973] Bluetooth: hci0: command 0x0c1a tx timeout [ 60.226152][ T6352] netlink: 36 bytes leftover after parsing attributes in process `syz.3.68'. [ 60.231174][ T6352] netlink: 16 bytes leftover after parsing attributes in process `syz.3.68'. [ 60.331477][ T6357] netlink: 64 bytes leftover after parsing attributes in process `syz.2.70'. [ 60.670869][ T6371] netlink: 12 bytes leftover after parsing attributes in process `syz.2.72'. [ 61.205673][ T6378] input: syz1 as /devices/virtual/input/input9 [ 62.053157][ T6399] netlink: 4400 bytes leftover after parsing attributes in process `syz.3.78'. [ 62.240169][ T6405] netlink: 'syz.1.81': attribute type 1 has an invalid length. [ 63.182122][ T6429] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input10 [ 63.198742][ T6429] netlink: 68 bytes leftover after parsing attributes in process `syz.2.84'. [ 63.201940][ T6429] netlink: 24 bytes leftover after parsing attributes in process `syz.2.84'. [ 63.412838][ T6439] capability: warning: `syz.1.89' uses deprecated v2 capabilities in a way that may be insecure [ 63.740963][ T6451] netlink: 28 bytes leftover after parsing attributes in process `syz.1.92'. [ 63.747745][ T6451] ip_vti0: entered promiscuous mode [ 63.749427][ T6451] ip_vti0: entered allmulticast mode [ 63.918095][ T6454] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 63.920236][ T6454] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 63.940704][ T6454] vhci_hcd vhci_hcd.0: Device attached [ 64.694289][ T6463] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 64.719626][ T46] Bluetooth: hci4: Frame reassembly failed (-84) [ 64.723481][ T46] Bluetooth: hci4: Frame reassembly failed (-84) [ 64.791722][ T6089] usb 42-1: SetAddress Request (2) to port 0 [ 64.798100][ T6089] usb 42-1: new SuperSpeed USB device number 2 using vhci_hcd [ 65.090255][ T6456] vhci_hcd: connection reset by peer [ 65.097632][ T60] vhci_hcd: stop threads [ 65.099054][ T60] vhci_hcd: release socket [ 65.100549][ T60] vhci_hcd: disconnect device [ 65.810155][ T6476] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.975259][ T6476] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.045285][ T6476] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.104680][ T6476] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.270745][ T60] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.283774][ T12] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.349967][ T60] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.350106][ T6490] Zero length message leads to an empty skb [ 66.353207][ T60] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.682110][ T6492] macsec1: entered promiscuous mode [ 66.757468][ T5973] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 66.757523][ T5976] Bluetooth: hci4: command 0xfc11 tx timeout [ 66.874065][ T6502] netlink: 29 bytes leftover after parsing attributes in process `syz.0.105'. [ 67.573709][ T6515] 9pnet_fd: Insufficient options for proto=fd [ 68.887548][ T24] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 68.900876][ T6539] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 68.903659][ T6539] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 68.917899][ T6539] vhci_hcd vhci_hcd.0: Device attached [ 69.047455][ T24] usb 7-1: Using ep0 maxpacket: 32 [ 69.058789][ T24] usb 7-1: config index 0 descriptor too short (expected 29220, got 36) [ 69.067757][ T24] usb 7-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 69.071362][ T24] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 69.075256][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 69.087579][ T24] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 69.091602][ T24] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 69.107532][ T24] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 69.117580][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.143525][ T24] usb 7-1: config 0 descriptor?? [ 69.177444][ T34] usb 39-1: new low-speed USB device number 2 using vhci_hcd [ 69.282251][ T6542] vhci_hcd: connection reset by peer [ 69.284718][ T12] vhci_hcd: stop threads [ 69.286563][ T12] vhci_hcd: release socket [ 69.288555][ T12] vhci_hcd: disconnect device [ 69.362642][ T24] usblp 7-1:0.0: usblp0: USB Bidirectional printer dev 2 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 69.664113][ T1017] usb 7-1: USB disconnect, device number 2 [ 69.690045][ T1017] usblp0: removed [ 69.711793][ T6553] block device autoloading is deprecated and will be removed. [ 69.877729][ T5973] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 69.881051][ T5973] Bluetooth: hci1: Injecting HCI hardware error event [ 69.883684][ T5973] Bluetooth: hci1: hardware error 0x00 [ 69.887507][ T6089] usb 42-1: device descriptor read/8, error -110 [ 70.018731][ T6561] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 70.404507][ T6089] usb usb42-port1: attempt power cycle [ 70.841626][ T6589] syz.3.126: attempt to access beyond end of device [ 70.841626][ T6589] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 70.907857][ C3] vkms_vblank_simulate: vblank timer overrun [ 70.921875][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 70.924783][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 70.967687][ T6089] usb usb42-port1: unable to enumerate USB device [ 71.227424][ T6089] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 71.431218][ T6089] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 71.434459][ T6089] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 71.437970][ T6089] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 71.449141][ T6089] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 71.472603][ T6089] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 71.475419][ T6089] usb 6-1: Product: syz [ 71.476963][ T6089] usb 6-1: Manufacturer: syz [ 71.478803][ T6089] usb 6-1: SerialNumber: syz [ 71.728409][ T6089] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 71.754710][ T61] usb 6-1: USB disconnect, device number 2 [ 71.757908][ T61] usblp0: removed [ 71.957474][ T5973] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 73.117324][ T6617] ceph: No mds server is up or the cluster is laggy [ 73.130068][ T6616] /dev/nullb0: Can't open blockdev [ 73.146114][ T6089] libceph: connect (1)[c::]:6789 error -101 [ 73.148544][ T6089] libceph: mon0 (1)[c::]:6789 connect error [ 73.697465][ T6039] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 73.700298][ T6639] netlink: 28 bytes leftover after parsing attributes in process `syz.0.139'. [ 73.703801][ T6639] netlink: 196 bytes leftover after parsing attributes in process `syz.0.139'. [ 73.706837][ T6639] netlink: 28 bytes leftover after parsing attributes in process `syz.0.139'. [ 73.709808][ T6639] netlink: 196 bytes leftover after parsing attributes in process `syz.0.139'. [ 74.277551][ T34] vhci_hcd: vhci_device speed not set [ 74.782952][ T6650] process 'syz.3.141' launched '/dev/fd/8' with NULL argv: empty string added [ 74.790442][ T6646] netlink: 16 bytes leftover after parsing attributes in process `syz.1.140'. [ 74.793261][ T6646] netlink: 16 bytes leftover after parsing attributes in process `syz.1.140'. [ 74.797109][ T6647] netlink: 16 bytes leftover after parsing attributes in process `syz.1.140'. [ 74.807229][ T6647] netlink: 16 bytes leftover after parsing attributes in process `syz.1.140'. [ 74.811280][ T6646] tipc: Started in network mode [ 74.813340][ T6646] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 74.816388][ T6646] tipc: Enabled bearer , priority 0 [ 74.821156][ T6645] tipc: Enabling of bearer rejected, already enabled [ 74.847882][ T6645] openvswitch: netlink: IP tunnel TTL not specified. [ 74.857766][ T6039] usb 7-1: Using ep0 maxpacket: 32 [ 74.868445][ T6039] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 74.872486][ T6039] usb 7-1: config 0 has no interface number 0 [ 74.880458][ T6039] usb 7-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 74.884490][ T6039] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.889982][ T6039] usb 7-1: Product: syz [ 74.891824][ T6039] usb 7-1: Manufacturer: syz [ 74.893670][ T6039] usb 7-1: SerialNumber: syz [ 74.900206][ T6039] usb 7-1: config 0 descriptor?? [ 74.921083][ T6039] usb 7-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 74.924955][ T6039] usb 7-1: selecting invalid altsetting 1 [ 74.928013][ T6039] usb 7-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 74.957986][ T6039] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 74.963966][ T6039] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 74.969919][ T6039] usb 7-1: media controller created [ 75.110221][ T6629] netlink: 4 bytes leftover after parsing attributes in process `syz.2.136'. [ 75.120897][ T6629] netlink: 4 bytes leftover after parsing attributes in process `syz.2.136'. [ 75.161549][ T6039] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 75.744096][ T6039] usb 7-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 75.767852][ T6039] zl10353_read_register: readreg error (reg=127, ret==-71) [ 75.772222][ T6039] usb 7-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 75.837395][ T6039] usb 7-1: USB disconnect, device number 3 [ 75.931893][ T10] tipc: Node number set to 11578026 [ 76.479111][ T6684] tmpfs: Bad value for 'grpquota_block_hardlimit' [ 76.486387][ T6684] netlink: 'syz.2.150': attribute type 1 has an invalid length. [ 76.488971][ T6684] NCSI netlink: No device for ifindex 0 [ 77.120549][ T6687] syz.1.151 uses obsolete (PF_INET,SOCK_PACKET) [ 77.966400][ T6716] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 77.972015][ T6716] overlayfs: missing 'lowerdir' [ 78.663546][ T6748] MTD: Couldn't look up 'mountinfo': -2 [ 79.068446][ T6764] trusted_key: encrypted_key: master key parameter 'cY?(<`Ͼ3Q#Pd' is invalid [ 79.594322][ T6039] IPVS: starting estimator thread 0... [ 79.687508][ T6785] IPVS: using max 29 ests per chain, 69600 per kthread [ 79.889352][ T6789] autofs4:pid:6789:validate_dev_ioctl: invalid path supplied for cmd(0xc018937d) [ 80.537142][ T6786] [U] R5JCҰ~V6|7KXVZZGR $ [ 81.158455][ T53] cfg80211: failed to load regulatory.db [ 81.193893][ T6814] __nla_validate_parse: 2 callbacks suppressed [ 81.193914][ T6814] netlink: 20 bytes leftover after parsing attributes in process `syz.1.178'. [ 81.330746][ T6818] can0: slcan on ptm1. [ 81.332975][ T6821] : renamed from hsr0 (while UP) [ 81.379458][ T6821] netlink: 201660 bytes leftover after parsing attributes in process `syz.1.180'. [ 81.598581][ T53] usb 8-1: new low-speed USB device number 3 using dummy_hcd [ 81.812604][ T53] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 81.844274][ T53] usb 8-1: config 0 has no interfaces? [ 81.863816][ T53] usb 8-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 81.891118][ T53] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.949302][ T53] usb 8-1: config 0 descriptor?? [ 82.168875][ T53] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 82.178939][ T53] hid-generic 0000:0000:0000.0002: hidraw1: HID v0.00 Device [syz1] on syz0 [ 82.459092][ T53] usb 8-1: USB disconnect, device number 3 [ 82.645527][ T6853] dlm: no locking on control device [ 82.838271][ T6818] can0 (unregistered): slcan off ptm1. [ 83.184100][ T6866] bridge_slave_0: left allmulticast mode [ 83.186071][ T6866] bridge_slave_0: left promiscuous mode [ 83.188440][ T838] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 83.192118][ T6866] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.198408][ T6866] bridge_slave_1: left allmulticast mode [ 83.200743][ T6866] bridge_slave_1: left promiscuous mode [ 83.202912][ T6866] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.209608][ T6866] bond0: (slave bond_slave_0): Releasing backup interface [ 83.214629][ T6866] bond0: (slave bond_slave_1): Releasing backup interface [ 83.223768][ T6866] team0: Port device team_slave_0 removed [ 83.230166][ T6866] team0: Port device team_slave_1 removed [ 83.234089][ T6866] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 83.236617][ T6866] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 83.241259][ T6866] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 83.244039][ T6866] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 83.255364][ T1235] tipc: Resetting bearer [ 83.262884][ T6867] team0: Mode changed to "loadbalance" [ 83.314012][ T6866] netlink: 'syz.1.187': attribute type 10 has an invalid length. [ 83.323505][ T6866] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.326775][ T6866] team0: Port device bond0 added [ 83.338684][ T838] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 83.341677][ T838] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 83.344990][ T838] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 83.347960][ T838] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 83.352707][ T838] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 83.356054][ T838] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 83.358832][ T838] usb 8-1: Product: syz [ 83.363126][ T838] usb 8-1: Manufacturer: syz [ 83.367130][ T838] cdc_wdm 8-1:1.0: skipping garbage [ 83.369586][ T838] cdc_wdm 8-1:1.0: skipping garbage [ 83.372312][ T838] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 83.374283][ T838] cdc_wdm 8-1:1.0: Unknown control protocol [ 83.578196][ C0] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 83.578334][ T838] usb 8-1: USB disconnect, device number 4 [ 83.581008][ C0] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 83.586324][ C0] cdc_wdm 8-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 83.616410][ T6880] netlink: 132 bytes leftover after parsing attributes in process `syz.2.191'. [ 83.643321][ T6884] netlink: 24 bytes leftover after parsing attributes in process `syz.2.192'. [ 83.955048][ T6892] netlink: 4 bytes leftover after parsing attributes in process `syz.3.193'. [ 83.977587][ T1017] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 84.137492][ T1017] usb 7-1: Using ep0 maxpacket: 16 [ 84.140832][ T1017] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 84.144634][ T1017] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 84.148151][ T1017] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 84.152394][ T1017] usb 7-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 84.155391][ T1017] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.163275][ T1017] usb 7-1: config 0 descriptor?? [ 84.238722][ T6898] netlink: 4 bytes leftover after parsing attributes in process `syz.1.195'. [ 84.576318][ T1017] usbhid 7-1:0.0: can't add hid device: -71 [ 84.580463][ T1017] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 84.591235][ T1017] usb 7-1: USB disconnect, device number 4 [ 85.174730][ T6943] openvswitch: netlink: IP tunnel dst address not specified [ 87.132571][ T6989] mmap: syz.0.216 (6989) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 87.140867][ T6989] overlay: Unknown parameter 'uid<00000000000000000000' [ 87.272561][ T7004] syzkaller0: entered promiscuous mode [ 87.274942][ T7004] syzkaller0: entered allmulticast mode [ 89.673455][ T7051] wlan0 speed is unknown, defaulting to 1000 [ 89.675875][ T7051] wlan0 speed is unknown, defaulting to 1000 [ 89.679601][ T7051] wlan0 speed is unknown, defaulting to 1000 [ 89.683941][ T7051] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 89.689800][ T7051] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 89.705998][ T7051] wlan0 speed is unknown, defaulting to 1000 [ 89.710879][ T7051] wlan0 speed is unknown, defaulting to 1000 [ 89.714372][ T7051] wlan0 speed is unknown, defaulting to 1000 [ 89.717657][ T7051] wlan0 speed is unknown, defaulting to 1000 [ 89.817424][ C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 89.820670][ C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 89.886639][ T7065] netlink: 16 bytes leftover after parsing attributes in process `syz.0.234'. [ 90.197476][ T7068] netlink: 4 bytes leftover after parsing attributes in process `syz.0.234'. [ 90.237791][ T7068] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 90.237791][ T7068] program syz.0.234 not setting count and/or reply_len properly [ 90.653734][ T7067] syz.2.232 (7067) used greatest stack depth: 19504 bytes left [ 91.438225][ T7082] random: crng reseeded on system resumption [ 91.498694][ T7083] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 91.501330][ T7083] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 91.685121][ T7083] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 91.687537][ T7083] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 91.856037][ T7097] netlink: 12 bytes leftover after parsing attributes in process `syz.0.241'. [ 92.422703][ T40] audit: type=1326 audit(1755774644.641:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7106 comm="syz.3.243" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa4579 code=0x7ffc0000 [ 92.436218][ T40] audit: type=1326 audit(1755774644.641:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7106 comm="syz.3.243" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa4579 code=0x7ffc0000 [ 92.444890][ T40] audit: type=1326 audit(1755774644.651:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7106 comm="syz.3.243" exe="/syz-executor" sig=0 arch=40000003 syscall=354 compat=1 ip=0xf7fa4579 code=0x7ffc0000 [ 92.459429][ T40] audit: type=1326 audit(1755774644.651:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7106 comm="syz.3.243" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fa4579 code=0x0 [ 92.478873][ T40] audit: type=1326 audit(1755774644.671:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7116 comm="syz.1.246" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc1579 code=0x7ffc0000 [ 92.486342][ T40] audit: type=1326 audit(1755774644.671:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7116 comm="syz.1.246" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc1579 code=0x7ffc0000 [ 92.496331][ T40] audit: type=1326 audit(1755774644.671:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7116 comm="syz.1.246" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7fc1579 code=0x7ffc0000 [ 92.504774][ T40] audit: type=1326 audit(1755774644.671:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7116 comm="syz.1.246" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc1579 code=0x7ffc0000 [ 92.514741][ T40] audit: type=1326 audit(1755774644.671:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7116 comm="syz.1.246" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc1579 code=0x7ffc0000 [ 92.524784][ T40] audit: type=1326 audit(1755774644.671:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7116 comm="syz.1.246" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7fc1579 code=0x7ffc0000 [ 92.600200][ T7118] netlink: 48 bytes leftover after parsing attributes in process `syz.1.246'. [ 93.184876][ T7155] loop2: detected capacity change from 0 to 7 [ 93.192233][ T7155] loop2: [CUMANA/ADFS] p1 [ADFS] p1 [ 93.193962][ T7155] loop2: partition table partially beyond EOD, truncated [ 93.196252][ T7155] loop2: p1 size 2989602745 extends beyond EOD, truncated [ 93.211541][ T5979] udevd[5979]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 93.741181][ T7166] siw: device registration error -23 [ 93.745000][ T7166] netlink: 8 bytes leftover after parsing attributes in process `syz.2.256'. [ 94.516294][ T7172] syzkaller1: entered promiscuous mode [ 94.518425][ T7172] syzkaller1: entered allmulticast mode [ 94.523438][ T7172] netlink: 'syz.2.258': attribute type 1 has an invalid length. [ 94.526531][ T7174] dvmrp1: tun_chr_ioctl cmd 1074025676 [ 94.528917][ T7174] dvmrp1: owner set to 0 [ 94.697548][ T7178] /dev/nullb0: Can't open blockdev [ 94.721147][ T7180] netlink: 28 bytes leftover after parsing attributes in process `syz.0.261'. [ 94.882416][ T7183] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 94.884963][ T7183] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 94.893268][ T7183] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 94.897725][ T7183] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 96.268410][ T7216] syzkaller1: entered promiscuous mode [ 96.270459][ T7216] syzkaller1: entered allmulticast mode [ 96.278381][ T7216] program syz.3.266 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 96.899588][ T7229] usb 1-1: USB disconnect, device number 2 [ 99.071169][ T40] kauditd_printk_skb: 46 callbacks suppressed [ 99.071180][ T40] audit: type=1326 audit(1755774651.291:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7263 comm="syz.3.280" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa4579 code=0x7ffc0000 [ 99.082560][ T40] audit: type=1326 audit(1755774651.291:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7263 comm="syz.3.280" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa4579 code=0x7ffc0000 [ 99.084785][ T6039] libceph: connect (1)[c::]:6789 error -101 [ 99.089627][ T40] audit: type=1326 audit(1755774651.291:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7263 comm="syz.3.280" exe="/syz-executor" sig=0 arch=40000003 syscall=65 compat=1 ip=0xf7fa4579 code=0x7ffc0000 [ 99.092066][ T6039] libceph: mon0 (1)[c::]:6789 connect error [ 99.098713][ T40] audit: type=1326 audit(1755774651.291:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7263 comm="syz.3.280" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa4579 code=0x7ffc0000 [ 99.107956][ T40] audit: type=1326 audit(1755774651.291:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7263 comm="syz.3.280" exe="/syz-executor" sig=0 arch=40000003 syscall=434 compat=1 ip=0xf7fa4579 code=0x7ffc0000 [ 99.114652][ T40] audit: type=1326 audit(1755774651.291:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7263 comm="syz.3.280" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa4579 code=0x7ffc0000 [ 99.121725][ T40] audit: type=1326 audit(1755774651.291:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7263 comm="syz.3.280" exe="/syz-executor" sig=0 arch=40000003 syscall=440 compat=1 ip=0xf7fa4579 code=0x7ffc0000 [ 99.128737][ T40] audit: type=1326 audit(1755774651.291:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7263 comm="syz.3.280" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa4579 code=0x7ffc0000 [ 99.136766][ T40] audit: type=1326 audit(1755774651.291:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7263 comm="syz.3.280" exe="/syz-executor" sig=0 arch=40000003 syscall=431 compat=1 ip=0xf7fa4579 code=0x7ffc0000 [ 99.145720][ T40] audit: type=1326 audit(1755774651.291:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7263 comm="syz.3.280" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa4579 code=0x7ffc0000 [ 99.359027][ T6039] libceph: connect (1)[c::]:6789 error -101 [ 99.361911][ T6039] libceph: mon0 (1)[c::]:6789 connect error [ 99.867829][ T6039] libceph: connect (1)[c::]:6789 error -101 [ 99.870455][ T6039] libceph: mon0 (1)[c::]:6789 connect error [ 99.940044][ T7264] ceph: No mds server is up or the cluster is laggy [ 100.040843][ T7289] fuse: Unknown parameter '0x00000000000000060x0000000000000007' [ 100.175894][ T7293] uprobe: syz.2.287:7293 failed to unregister, leaking uprobe [ 102.025296][ T7342] netlink: 201660 bytes leftover after parsing attributes in process `syz.1.302'. [ 102.927437][ T838] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 103.067537][ T838] usb 7-1: device descriptor read/64, error -71 [ 103.207046][ T6039] kernel read not supported for file /dsp (pid: 6039 comm: kworker/3:3) [ 103.317523][ T838] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 103.447487][ T838] usb 7-1: device descriptor read/64, error -71 [ 103.569483][ T838] usb usb7-port1: attempt power cycle [ 103.604605][ T7380] random: crng reseeded on system resumption [ 103.928848][ T838] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 103.947936][ T838] usb 7-1: device descriptor read/8, error -71 [ 104.187518][ T838] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 104.209364][ T838] usb 7-1: device descriptor read/8, error -71 [ 104.318094][ T838] usb usb7-port1: unable to enumerate USB device [ 105.630820][ T7392] netlink: 8 bytes leftover after parsing attributes in process `syz.3.308'. [ 105.928007][ T7414] /dev/nullb0: Can't open blockdev [ 106.072722][ T7422] netlink: 3 bytes leftover after parsing attributes in process `syz.1.318'. [ 106.084868][ T7422] batadv1: entered allmulticast mode [ 106.146005][ T7430] input: syz1 as /devices/virtual/input/input13 [ 106.159537][ T7420] wlan0 speed is unknown, defaulting to 1000 [ 106.361391][ T7430] PKCS7: Unknown OID: [4] 2.19.50.2018883.1651(bad) [ 106.364238][ T7430] PKCS7: Only support pkcs7_signedData type [ 106.799434][ T40] kauditd_printk_skb: 21 callbacks suppressed [ 106.799448][ T40] audit: type=1326 audit(1755774659.021:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7451 comm="syz.0.325" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe5579 code=0x7ffc0000 [ 106.809357][ T40] audit: type=1326 audit(1755774659.021:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7451 comm="syz.0.325" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe5579 code=0x7ffc0000 [ 106.828783][ T40] audit: type=1326 audit(1755774659.021:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7451 comm="syz.0.325" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe5579 code=0x7ffc0000 [ 106.858346][ T40] audit: type=1326 audit(1755774659.081:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7451 comm="syz.0.325" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe5579 code=0x7ffc0000 [ 106.878848][ T7458] netlink: 8 bytes leftover after parsing attributes in process `syz.0.325'. [ 106.884224][ T40] audit: type=1326 audit(1755774659.091:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7451 comm="syz.0.325" exe="/syz-executor" sig=0 arch=40000003 syscall=365 compat=1 ip=0xf7fe5579 code=0x7ffc0000 [ 106.891008][ T40] audit: type=1326 audit(1755774659.101:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7451 comm="syz.0.325" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe5579 code=0x7ffc0000 [ 106.897900][ T40] audit: type=1326 audit(1755774659.101:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7451 comm="syz.0.325" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe5579 code=0x7ffc0000 [ 106.905324][ T40] audit: type=1326 audit(1755774659.101:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7451 comm="syz.0.325" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7fe5579 code=0x7ffc0000 [ 106.913520][ T40] audit: type=1326 audit(1755774659.101:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7451 comm="syz.0.325" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe5579 code=0x7ffc0000 [ 106.923271][ T40] audit: type=1326 audit(1755774659.101:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7451 comm="syz.0.325" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe5579 code=0x7ffc0000 [ 106.930743][ T7458] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 107.107676][ T7462] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 107.109708][ T7462] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 107.112929][ T7462] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 107.116980][ T7462] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 107.119808][ T7462] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 107.123106][ T7462] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 107.311407][ T7466] bridge_slave_0: left allmulticast mode [ 107.314134][ T7466] bridge_slave_0: left promiscuous mode [ 107.378826][ T7466] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.577830][ T7474] netlink: 'syz.2.326': attribute type 10 has an invalid length. [ 107.640950][ T7477] netlink: 4 bytes leftover after parsing attributes in process `syz.2.326'. [ 107.812475][ T7466] bridge_slave_1: left allmulticast mode [ 107.814874][ T7466] bridge_slave_1: left promiscuous mode [ 107.817648][ T7466] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.911678][ T7466] bond0: (slave bond_slave_0): Releasing backup interface [ 108.190031][ T7466] bond0: (slave bond_slave_1): Releasing backup interface [ 108.309472][ T7466] team0: Port device team_slave_0 removed [ 108.363251][ T7466] team0: Port device team_slave_1 removed [ 108.381586][ T7473] team0: Mode changed to "loadbalance" [ 108.386919][ T7474] 8021q: adding VLAN 0 to HW filter on device bond0 [ 108.390865][ T7474] team0: Port device bond0 added [ 108.415708][ T7477] team0 (unregistering): Port device bond0 removed [ 108.441814][ T6039] wlan0 speed is unknown, defaulting to 1000 [ 108.977497][ T7497] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 109.167462][ T5973] Bluetooth: hci2: command 0x0c1a tx timeout [ 109.167641][ T5976] Bluetooth: hci3: command 0x0405 tx timeout [ 109.960827][ T7512] erofs (device nbd3): cannot find valid erofs superblock [ 110.057655][ T6039] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 110.219262][ T6039] usb 6-1: device descriptor read/64, error -71 [ 110.477470][ T6039] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 110.627540][ T6039] usb 6-1: device descriptor read/64, error -71 [ 110.737789][ T6039] usb usb6-port1: attempt power cycle [ 111.057901][ T7524] netlink: 44 bytes leftover after parsing attributes in process `syz.0.342'. [ 111.061256][ T7524] netem: unknown loss type 12 [ 111.063085][ T7524] netem: change failed [ 111.067701][ T7524] netlink: 20 bytes leftover after parsing attributes in process `syz.0.342'. [ 111.087427][ T6039] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 111.111437][ T6039] usb 6-1: device descriptor read/8, error -71 [ 111.237487][ T5976] Bluetooth: hci3: command 0x0405 tx timeout [ 111.247673][ T5976] Bluetooth: hci2: command 0x0c1a tx timeout [ 111.347464][ T6039] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 111.408537][ T6039] usb 6-1: device descriptor read/8, error -71 [ 111.517724][ T6039] usb usb6-port1: unable to enumerate USB device [ 112.479418][ T40] kauditd_printk_skb: 21 callbacks suppressed [ 112.479434][ T40] audit: type=1326 audit(1755774664.701:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7536 comm="syz.3.346" exe="/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf7fa4579 code=0x7fc00000 [ 112.508167][ T7554] netlink: 'syz.3.349': attribute type 4 has an invalid length. [ 113.331548][ T5973] Bluetooth: hci3: command 0x0405 tx timeout [ 113.333497][ T5976] Bluetooth: hci2: command 0x0c1a tx timeout [ 113.642355][ T7569] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 113.645271][ T7569] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 113.881976][ T7575] veth1_macvtap: left promiscuous mode [ 113.883996][ T7575] macsec0: entered promiscuous mode [ 113.885691][ T7575] macsec0: entered allmulticast mode [ 114.133897][ T5976] Bluetooth: hci3: SCO packet for unknown connection handle 201 [ 114.141386][ T7577] netlink: 12 bytes leftover after parsing attributes in process `syz.3.355'. [ 114.160805][ T7577] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 114.405603][ T7579] wlan0 speed is unknown, defaulting to 1000 [ 116.498506][ T7606] syz_tun: entered promiscuous mode [ 116.501410][ T7606] batadv_slave_0: entered promiscuous mode [ 116.737647][ T5976] Bluetooth: hci3: unexpected event for opcode 0x1002 [ 117.000856][ T7617] dlm: no locking on control device [ 117.517008][ T40] audit: type=1326 audit(1755774669.731:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7623 comm="syz.0.367" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe5579 code=0x7ffc0000 [ 117.526476][ T40] audit: type=1326 audit(1755774669.731:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7623 comm="syz.0.367" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe5579 code=0x7ffc0000 [ 117.536683][ T40] audit: type=1326 audit(1755774669.731:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7623 comm="syz.0.367" exe="/syz-executor" sig=0 arch=40000003 syscall=120 compat=1 ip=0xf7fe5579 code=0x7ffc0000 [ 117.546840][ T40] audit: type=1326 audit(1755774669.731:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7623 comm="syz.0.367" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe5579 code=0x7ffc0000 [ 117.555639][ T40] audit: type=1326 audit(1755774669.731:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7625 comm="syz.0.367" exe="/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf7fe5579 code=0x7ffc0000 [ 117.563033][ T40] audit: type=1326 audit(1755774669.751:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7623 comm="syz.0.367" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe5579 code=0x7ffc0000 [ 117.569973][ T40] audit: type=1326 audit(1755774669.751:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7623 comm="syz.0.367" exe="/syz-executor" sig=0 arch=40000003 syscall=345 compat=1 ip=0xf7fe5579 code=0x7ffc0000 [ 117.681102][ T40] audit: type=1326 audit(1755774669.891:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7625 comm="syz.0.367" exe="/syz-executor" sig=0 arch=40000003 syscall=1 compat=1 ip=0xf7fe5579 code=0x7ffc0000 [ 117.692302][ T40] audit: type=1326 audit(1755774669.911:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7623 comm="syz.0.367" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7fe5598 code=0x7ffc0000 [ 117.701034][ T40] audit: type=1326 audit(1755774669.911:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7623 comm="syz.0.367" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe5579 code=0x7ffc0000 [ 117.772574][ T7635] dlm: no locking on control device [ 118.327500][ T24] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 118.457548][ T24] usb 5-1: device descriptor read/64, error -71 [ 118.708696][ T24] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 118.887522][ T24] usb 5-1: device descriptor read/64, error -71 [ 119.007501][ T24] usb usb5-port1: attempt power cycle [ 119.367460][ T24] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 119.376431][ T7657] wlan0 speed is unknown, defaulting to 1000 [ 119.400616][ T24] usb 5-1: device descriptor read/8, error -71 [ 119.443785][ T7663] netlink: 'syz.3.375': attribute type 1 has an invalid length. [ 119.578046][ T7663] /dev/sr0: Can't open blockdev [ 119.599611][ T7668] netlink: 48 bytes leftover after parsing attributes in process `syz.1.377'. [ 119.637406][ T24] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 119.657902][ T24] usb 5-1: device descriptor read/8, error -71 [ 119.784342][ T7677] /dev/nullb0: Can't open blockdev [ 120.020144][ T7682] wlan0 speed is unknown, defaulting to 1000 [ 120.441670][ T7677] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 120.630068][ T24] usb usb5-port1: unable to enumerate USB device [ 121.158476][ T7694] netlink: 8 bytes leftover after parsing attributes in process `syz.0.382'. [ 121.869632][ T7718] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 122.004370][ T7720] netlink: 8 bytes leftover after parsing attributes in process `syz.1.389'. [ 122.145877][ T7715] tipc: Failed to remove unknown binding: 66,1,1/0:340751944/340751946 [ 122.148640][ T7715] tipc: Failed to remove unknown binding: 66,1,1/0:340751944/340751946 [ 122.307273][ T5976] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 122.307865][ T7727] netlink: 64 bytes leftover after parsing attributes in process `syz.0.391'. [ 123.958068][ T40] kauditd_printk_skb: 30 callbacks suppressed [ 123.958083][ T40] audit: type=1326 audit(1755774676.181:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7744 comm="syz.1.394" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc1579 code=0x7ffc0000 [ 123.997730][ T40] audit: type=1326 audit(1755774676.191:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7744 comm="syz.1.394" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc1579 code=0x7ffc0000 [ 124.006403][ T40] audit: type=1326 audit(1755774676.191:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7744 comm="syz.1.394" exe="/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf7fc1579 code=0x7ffc0000 [ 124.035924][ T40] audit: type=1326 audit(1755774676.191:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7744 comm="syz.1.394" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc1579 code=0x7ffc0000 [ 124.046159][ T40] audit: type=1326 audit(1755774676.191:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7744 comm="syz.1.394" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc1579 code=0x7ffc0000 [ 124.055340][ T40] audit: type=1326 audit(1755774676.191:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7744 comm="syz.1.394" exe="/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf7fc1579 code=0x7ffc0000 [ 124.064461][ T40] audit: type=1326 audit(1755774676.191:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7744 comm="syz.1.394" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc1579 code=0x7ffc0000 [ 124.074668][ T40] audit: type=1326 audit(1755774676.191:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7744 comm="syz.1.394" exe="/syz-executor" sig=0 arch=40000003 syscall=362 compat=1 ip=0xf7fc1579 code=0x7ffc0000 [ 124.083494][ T40] audit: type=1326 audit(1755774676.191:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7744 comm="syz.1.394" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc1579 code=0x7ffc0000 [ 124.092454][ T40] audit: type=1326 audit(1755774676.191:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7744 comm="syz.1.394" exe="/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf7fc1579 code=0x7ffc0000 [ 124.561932][ T7757] netlink: 56 bytes leftover after parsing attributes in process `syz.3.399'. [ 125.778522][ T5973] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 125.781198][ T5973] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 125.783837][ T5973] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 125.786678][ T5973] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 125.789549][ T5973] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 125.802140][ T7783] wlan0 speed is unknown, defaulting to 1000 [ 125.859956][ T7783] chnl_net:caif_netlink_parms(): no params data found [ 126.302386][ T7790] loop2: detected capacity change from 0 to 7 [ 126.309543][ T7790] Dev loop2: unable to read RDB block 7 [ 126.311914][ T7790] loop2: unable to read partition table [ 126.314358][ T7790] loop2: partition table beyond EOD, truncated [ 126.316950][ T7790] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 127.808146][ T5976] Bluetooth: hci4: command tx timeout [ 127.938679][ T7783] bridge0: port 1(bridge_slave_0) entered blocking state [ 127.941907][ T7783] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.944962][ T7783] bridge_slave_0: entered allmulticast mode [ 127.948167][ T7783] bridge_slave_0: entered promiscuous mode [ 127.952001][ T7783] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.954845][ T7783] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.957954][ T7783] bridge_slave_1: entered allmulticast mode [ 127.968199][ T7783] bridge_slave_1: entered promiscuous mode [ 127.998139][ T7783] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 128.004178][ T7783] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 128.038080][ T7783] team0: Port device team_slave_0 added [ 128.041590][ T7783] team0: Port device team_slave_1 added [ 128.076174][ T7810] netlink: 72 bytes leftover after parsing attributes in process `syz.0.413'. [ 128.082869][ T13] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.095350][ T7783] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 128.099127][ T7783] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 128.119132][ T7783] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 128.124584][ T7783] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 128.127566][ T7783] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 128.138536][ T7783] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 128.272243][ T13] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.293764][ T7783] hsr_slave_0: entered promiscuous mode [ 128.296462][ T7783] hsr_slave_1: entered promiscuous mode [ 128.299021][ T7783] debugfs: 'hsr0' already exists in 'hsr' [ 128.301336][ T7783] Cannot create hsr debugfs directory [ 128.603821][ T13] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.704452][ T13] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.727880][ T7783] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 128.736171][ T7783] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 128.740310][ T7783] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 128.748693][ T7783] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 128.770623][ T7783] bridge0: port 2(bridge_slave_1) entered blocking state [ 128.772906][ T7783] bridge0: port 2(bridge_slave_1) entered forwarding state [ 128.775704][ T7783] bridge0: port 1(bridge_slave_0) entered blocking state [ 128.777892][ T7783] bridge0: port 1(bridge_slave_0) entered forwarding state [ 128.823414][ T7783] 8021q: adding VLAN 0 to HW filter on device bond0 [ 128.842424][ T7783] 8021q: adding VLAN 0 to HW filter on device team0 [ 128.859142][ T1139] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.891129][ T1139] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.042170][ T13] bond0 (unregistering): Released all slaves [ 129.079740][ T1139] bridge0: port 1(bridge_slave_0) entered blocking state [ 129.082487][ T1139] bridge0: port 1(bridge_slave_0) entered forwarding state [ 129.118367][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 129.120773][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 129.385614][ T7783] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 129.456188][ T34] wlan0 speed is unknown, defaulting to 1000 [ 129.458837][ T34] syz2: Port: 1 Link DOWN [ 129.514749][ T7783] veth0_vlan: entered promiscuous mode [ 129.528657][ T13] hsr_slave_0: left promiscuous mode [ 129.531129][ T13] hsr_slave_1: left promiscuous mode [ 129.535455][ T13] veth1_macvtap: left promiscuous mode [ 129.537272][ T13] veth0_macvtap: left promiscuous mode [ 129.540942][ T13] veth1_vlan: left promiscuous mode [ 129.542716][ T13] veth0_vlan: left promiscuous mode [ 129.737918][ T7783] veth1_vlan: entered promiscuous mode [ 129.753476][ T7783] veth0_macvtap: entered promiscuous mode [ 129.758305][ T7783] veth1_macvtap: entered promiscuous mode [ 129.768250][ T7783] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 129.775707][ T7783] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 129.785859][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.791118][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.794784][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.801223][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.874992][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 129.879636][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 129.887554][ T5973] Bluetooth: hci4: command tx timeout [ 129.895376][ T1139] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 129.902838][ T1139] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 130.080477][ T13] IPVS: stop unused estimator thread 0... [ 130.201751][ T7887] netlink: 4 bytes leftover after parsing attributes in process `syz.4.406'. [ 130.288884][ T7889] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2147484288 (4294968576 ns) > initial count (34 ns). Using initial count to start timer. [ 131.967476][ T5973] Bluetooth: hci4: command 0x040f tx timeout [ 132.358873][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.361641][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.614685][ T7908] Set syz1 is full, maxelem 65536 reached [ 132.731171][ T7926] sch_fq: defrate 4294967295 ignored. [ 132.880737][ T7931] overlayfs: statfs failed on './file0' [ 132.890643][ T7931] netlink: 14 bytes leftover after parsing attributes in process `syz.1.431'. [ 132.901173][ T7931] team0: Port device bond0 removed [ 132.903554][ T7931] bond0 (unregistering): Released all slaves [ 132.918307][ T6039] infiniband syz1: ib_query_port failed (-19) [ 132.938662][ T7933] netlink: 'syz.4.432': attribute type 3 has an invalid length. [ 132.941084][ T7933] netlink: 173368 bytes leftover after parsing attributes in process `syz.4.432'. [ 132.945519][ T7933] binder: 7932:7933 ioctl c0306201 80000080 returned -14 [ 133.176764][ T7943] netlink: 'syz.4.433': attribute type 1 has an invalid length. [ 133.480662][ T7948] Bluetooth: MGMT ver 1.23 [ 134.047624][ T5973] Bluetooth: hci4: command 0x040f tx timeout [ 134.177144][ T7964] netlink: 4400 bytes leftover after parsing attributes in process `syz.4.439'. [ 134.185872][ T7964] debugfs: '`] Iq!>s*!)\' already exists in 'ieee80211' [ 134.362918][ T7969] netlink: 8 bytes leftover after parsing attributes in process `syz.3.441'. [ 134.617197][ T7975] netlink: 32 bytes leftover after parsing attributes in process `syz.0.442'. [ 134.873666][ T7982] netlink: 5 bytes leftover after parsing attributes in process `syz.1.444'. [ 134.876651][ T7982] 0XD: renamed from macvtap0 (while UP) [ 134.879661][ T7982] 0XD: entered allmulticast mode [ 134.881390][ T7982] veth0_macvtap: entered allmulticast mode [ 134.883565][ T7982] A link change request failed with some changes committed already. Interface 30XD may have been left with an inconsistent configuration, please check. [ 135.482976][ T7996] netlink: 'syz.3.448': attribute type 3 has an invalid length. [ 135.563456][ T7997] bridge_slave_0: left allmulticast mode [ 135.565960][ T7997] bridge_slave_0: left promiscuous mode [ 135.568975][ T7997] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.585553][ T7997] bridge_slave_1: left allmulticast mode [ 135.589139][ T7997] bridge_slave_1: left promiscuous mode [ 135.591550][ T7997] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.607776][ T7997] bond0: (slave bond_slave_0): Releasing backup interface [ 135.623455][ T7997] bond0: (slave bond_slave_1): Releasing backup interface [ 135.658294][ T7997] team0: Port device team_slave_0 removed [ 135.713433][ T8003] comedi comedi3: pcl812: I/O port conflict (0x5,16) [ 135.728412][ T7997] team0: Port device team_slave_1 removed [ 135.735834][ T7997] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 135.738449][ T7997] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 135.777242][ T7997] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 135.780913][ T7997] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 136.011520][ T7997] netlink: 4 bytes leftover after parsing attributes in process `syz.3.448'. [ 136.121660][ T5973] Bluetooth: hci4: command 0x040f tx timeout [ 136.333885][ T8009] netlink: 4 bytes leftover after parsing attributes in process `syz.1.451'. [ 136.459189][ T8000] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.543257][ T8000] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.562228][ T8016] netlink: 20 bytes leftover after parsing attributes in process `syz.0.454'. [ 136.592634][ T8018] netlink: 'syz.4.455': attribute type 6 has an invalid length. [ 136.721788][ T8000] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.741912][ T8018] netlink: 24 bytes leftover after parsing attributes in process `syz.4.455'. [ 136.752880][ T8018] netlink: 4 bytes leftover after parsing attributes in process `syz.4.455'. [ 136.830070][ T8035] netlink: 8 bytes leftover after parsing attributes in process `syz.4.459'. [ 136.834156][ T8035] netlink: 'syz.4.459': attribute type 5 has an invalid length. [ 136.854469][ T8035] geneve2: entered promiscuous mode [ 136.856858][ T8035] geneve2: entered allmulticast mode [ 136.866798][ T8000] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.875648][ T1235] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 136.880069][ T46] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 136.905170][ T46] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 136.909806][ T46] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 136.953212][ T8040] trusted_key: syz.1.461 sent an empty control message without MSG_MORE. [ 136.958787][ T8040] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 136.998300][ T1235] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.033062][ T12] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.040498][ T12] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.045757][ T12] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.031905][ T8099] batadv0: mtu less than device minimum [ 139.619068][ T8105] veth0: entered promiscuous mode [ 139.967838][ T9] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 140.080187][ T8110] sp0: Synchronizing with TNC [ 140.103263][ T8110] sch_tbf: burst 1821 is lower than device lo mtu (65550) ! [ 140.110344][ T8110] __nla_validate_parse: 4 callbacks suppressed [ 140.110354][ T8110] netlink: 12 bytes leftover after parsing attributes in process `syz.1.479'. [ 140.158173][ T9] usb 8-1: Using ep0 maxpacket: 32 [ 140.182195][ T9] usb 8-1: config index 0 descriptor too short (expected 29220, got 36) [ 140.185986][ T9] usb 8-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 140.189467][ T9] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 140.193205][ T9] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 140.202801][ T9] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 140.229445][ T9] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 140.234991][ T9] usb 8-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 140.238404][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.288195][ T9] usb 8-1: config 0 descriptor?? [ 140.338857][ T8102] veth0: left promiscuous mode [ 140.613507][ T8113] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 140.623552][ T9] usblp 8-1:0.0: usblp0: USB Bidirectional printer dev 5 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 140.683824][ T9] usb 8-1: USB disconnect, device number 5 [ 140.718323][ T9] usblp0: removed [ 140.832813][ T8120] netlink: 'syz.0.482': attribute type 1 has an invalid length. [ 140.847554][ T8120] 8021q: adding VLAN 0 to HW filter on device bond1 [ 140.882381][ T8120] bond1: (slave veth3): Enslaving as an active interface with a down link [ 140.906909][ T8120] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 140.909844][ T8120] bond1: (slave batadv0): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 140.940000][ T8129] serio: Serial port ptm1 [ 141.137637][ T9] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 141.307507][ T9] usb 8-1: Using ep0 maxpacket: 32 [ 141.332463][ T9] usb 8-1: config index 0 descriptor too short (expected 29220, got 36) [ 141.335484][ T9] usb 8-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 141.338509][ T9] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 141.341412][ T9] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 141.344491][ T9] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 141.348714][ T9] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 141.352754][ T9] usb 8-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 141.358980][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.362882][ T9] usb 8-1: config 0 descriptor?? [ 141.593164][ T9] usblp 8-1:0.0: usblp0: USB Bidirectional printer dev 6 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 141.795750][ C0] usblp0: nonzero read bulk status received: -71 [ 141.796190][ T6039] usb 8-1: USB disconnect, device number 6 [ 143.120554][ T8186] tipc: Enabled bearer , priority 10 [ 143.282432][ T8196] fuse: Unknown parameter 'rootmOde' [ 143.318651][ T8107] usblp0: removed [ 143.441541][ T8206] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 143.643553][ T8209] netlink: 'syz.4.501': attribute type 27 has an invalid length. [ 143.742696][ T8209] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.745522][ T8209] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.941408][ T8209] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 143.951786][ T8209] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 144.034290][ T8209] geneve2: left promiscuous mode [ 144.036511][ T8209] geneve2: left allmulticast mode [ 144.057623][ T8213] 8021q: adding VLAN 0 to HW filter on device bond0 [ 144.060450][ T8213] 8021q: adding VLAN 0 to HW filter on device team0 [ 144.064172][ T8213] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 144.071528][ T46] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.075479][ T46] netdevsim netdevsim4 netdevsim0: unset [1, 1] type 2 family 0 port 256 - 0 [ 144.082816][ T46] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.087739][ T46] netdevsim netdevsim4 netdevsim1: unset [1, 1] type 2 family 0 port 256 - 0 [ 144.094861][ T46] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.100965][ T46] netdevsim netdevsim4 netdevsim2: unset [1, 1] type 2 family 0 port 256 - 0 [ 144.104865][ T46] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.109129][ T46] netdevsim netdevsim4 netdevsim3: unset [1, 1] type 2 family 0 port 256 - 0 [ 144.911586][ T8232] netlink: 4 bytes leftover after parsing attributes in process `syz.0.507'. [ 145.288077][ T5838] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 145.502238][ T54] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 145.679673][ T54] usb 6-1: config 195 has an invalid interface number: 145 but max is 0 [ 145.682930][ T54] usb 6-1: config 195 has no interface number 0 [ 145.691568][ T54] usb 6-1: config 195 interface 145 has no altsetting 0 [ 145.696776][ T54] usb 6-1: New USB device found, idVendor=055f, idProduct=c211, bcdDevice=9b.e4 [ 145.700766][ T54] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.704194][ T54] usb 6-1: Product: syz [ 145.705749][ T54] usb 6-1: Manufacturer: syz [ 145.707391][ T54] usb 6-1: SerialNumber: syz [ 145.744271][ T8288] netlink: 20 bytes leftover after parsing attributes in process `syz.3.513'. [ 145.866014][ T8292] netlink: 8 bytes leftover after parsing attributes in process `syz.3.514'. [ 145.876966][ T8292] netlink: 8 bytes leftover after parsing attributes in process `syz.3.514'. [ 145.881121][ T8292] netlink: 24 bytes leftover after parsing attributes in process `syz.3.514'. [ 146.089370][ T8300] overlayfs: failed to resolve './file0': -2 [ 146.092732][ T6039] libceph: connect (1)[c::]:6789 error -101 [ 146.095265][ T6039] libceph: mon0 (1)[c::]:6789 connect error [ 146.307427][ T8299] ceph: No mds server is up or the cluster is laggy [ 146.638579][ T54] gspca_main: sunplus-2.14.0 probing 055f:c211 [ 146.641648][ T54] gspca_sunplus: reg_r err -71 [ 147.697552][ T54] sunplus 6-1:195.145: probe with driver sunplus failed with error -71 [ 147.702702][ T54] usb 6-1: USB disconnect, device number 7 [ 152.978162][ T8365] netlink: 16 bytes leftover after parsing attributes in process `syz.1.524'. [ 153.733962][ C1] vcan0: j1939_tp_rxtimer: 0xffff888029dd1400: rx timeout, send abort [ 153.737176][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888029dd1400: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 154.271628][ T8405] netlink: 4 bytes leftover after parsing attributes in process `syz.4.536'. [ 154.275751][ T8405] netlink: 4 bytes leftover after parsing attributes in process `syz.4.536'. [ 154.279953][ T8405] netlink: 4 bytes leftover after parsing attributes in process `syz.4.536'. [ 154.567466][ T54] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 154.570982][ T8424] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 154.573411][ T8424] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 154.579320][ T8424] vhci_hcd vhci_hcd.0: Device attached [ 154.717433][ T54] usb 6-1: Using ep0 maxpacket: 8 [ 154.728320][ T54] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 154.732133][ T54] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 154.735585][ T54] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 154.740743][ T54] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 154.746846][ T54] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 154.751261][ T54] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.827427][ T6089] usb 37-1: new high-speed USB device number 2 using vhci_hcd [ 154.972569][ T54] usb 6-1: GET_CAPABILITIES returned 0 [ 154.975157][ T54] usbtmc 6-1:16.0: can't read capabilities [ 155.171940][ T8425] vhci_hcd: connection reset by peer [ 155.174100][ T1177] vhci_hcd: stop threads [ 155.176078][ T1177] vhci_hcd: release socket [ 155.179011][ T1177] vhci_hcd: disconnect device [ 155.193618][ T6039] usb 6-1: USB disconnect, device number 8 [ 155.915161][ T8442] netlink: 8 bytes leftover after parsing attributes in process `syz.1.544'. [ 155.926733][ T8442] ip_vti0: left promiscuous mode [ 155.931839][ T8442] ip_vti0: left allmulticast mode [ 155.947217][ T8442] tipc: Resetting bearer [ 155.951288][ T8442] tipc: Resetting bearer [ 155.957590][ T8442] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 155.984070][ T8444] tipc: Started in network mode [ 155.986197][ T8444] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 155.989214][ T8444] tipc: Enabled bearer , priority 0 [ 156.173543][ T8450] "syz.0.547" (8450) uses obsolete ecb(arc4) skcipher [ 156.183057][ T8450] bridge1: entered promiscuous mode [ 156.219644][ T8435] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 156.221885][ T8435] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 156.224080][ T8435] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 156.226094][ T8435] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 156.228890][ T8435] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 156.396104][ T8464] can0: slcan on pty26. [ 156.420903][ T40] kauditd_printk_skb: 41 callbacks suppressed [ 156.420919][ T40] audit: type=1804 audit(1755774708.641:213): pid=8464 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.550" name="/newroot/159/bus" dev="tmpfs" ino=877 res=1 errno=0 [ 157.054050][ T54] tipc: Node number set to 11578026 [ 157.262280][ T8460] can0 (unregistered): slcan off pty26. [ 157.706027][ T24] IPVS: starting estimator thread 0... [ 157.753101][ T8507] IPVS: set_ctl: invalid protocol: 137 172.20.20.12:20000 [ 157.807469][ T8509] IPVS: using max 57 ests per chain, 136800 per kthread [ 157.957906][ T5973] Bluetooth: hci2: command 0x0c1a tx timeout [ 158.277478][ T5976] Bluetooth: hci3: command 0x0405 tx timeout [ 158.283319][ T5973] Bluetooth: hci4: command 0x040f tx timeout [ 158.470726][ T8522] ucma_write: process 545 (syz.0.560) changed security contexts after opening file descriptor, this is not allowed. [ 158.476504][ T6039] Process accounting resumed [ 159.723943][ T8522] kexec: Could not allocate control_code_buffer [ 159.965624][ T6089] vhci_hcd: vhci_device speed not set [ 160.092653][ T8561] siw: device registration error -23 [ 160.317609][ T8564] siw: device registration error -23 [ 160.357813][ T5973] Bluetooth: hci4: command 0x040f tx timeout [ 161.229922][ T8571] sp0: Synchronizing with TNC [ 161.384619][ T8578] netlink: 'syz.3.576': attribute type 10 has an invalid length. [ 161.396949][ T8578] syz_tun: entered promiscuous mode [ 161.403438][ T8578] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 161.406110][ T9] syz1: Port: 1 Link ACTIVE [ 161.497930][ T5838] usb 6-1: new low-speed USB device number 9 using dummy_hcd [ 161.657564][ T5838] usb 6-1: device descriptor read/64, error -71 [ 161.867779][ T8566] [U] ` [ 161.907449][ T5838] usb 6-1: new low-speed USB device number 10 using dummy_hcd [ 162.067475][ T5838] usb 6-1: device descriptor read/64, error -71 [ 162.177651][ T5838] usb usb6-port1: attempt power cycle [ 162.247838][ T5973] block nbd0: Receive control failed (result -107) [ 162.307487][ T8601] nbd0: detected capacity change from 0 to 32 [ 162.310308][ T8407] block nbd0: Dead connection, failed to find a fallback [ 162.312568][ T8407] block nbd0: shutting down sockets [ 162.314592][ T8407] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 162.318042][ T8407] Buffer I/O error on dev nbd0, logical block 0, async page read [ 162.327498][ T8407] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 162.330371][ T8407] Buffer I/O error on dev nbd0, logical block 0, async page read [ 162.333320][ T8407] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 162.336495][ T8407] Buffer I/O error on dev nbd0, logical block 0, async page read [ 162.339400][ T8407] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 162.342209][ T8407] Buffer I/O error on dev nbd0, logical block 0, async page read [ 162.344626][ T8407] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 162.347771][ T8407] Buffer I/O error on dev nbd0, logical block 0, async page read [ 162.350484][ T8407] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 162.353260][ T8407] Buffer I/O error on dev nbd0, logical block 0, async page read [ 162.355735][ T8407] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 162.358975][ T8407] Buffer I/O error on dev nbd0, logical block 0, async page read [ 162.361563][ T8407] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 162.364351][ T8407] Buffer I/O error on dev nbd0, logical block 0, async page read [ 162.366787][ T8407] ldm_validate_partition_table(): Disk read failed. [ 162.369032][ T8407] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 162.372477][ T8407] Buffer I/O error on dev nbd0, logical block 0, async page read [ 162.375371][ T8407] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 162.379430][ T8407] Buffer I/O error on dev nbd0, logical block 0, async page read [ 162.382050][ T8407] Dev nbd0: unable to read RDB block 0 [ 162.383943][ T8407] nbd0: unable to read partition table [ 162.392153][ T8407] ldm_validate_partition_table(): Disk read failed. [ 162.395045][ T8407] Dev nbd0: unable to read RDB block 0 [ 162.395145][ T8607] 9pnet_fd: Insufficient options for proto=fd [ 162.405547][ T8407] nbd0: unable to read partition table [ 162.406657][ T8606] netlink: 20 bytes leftover after parsing attributes in process `syz.4.583'. [ 162.407729][ T8604] tipc: Enabled bearer , priority 0 [ 162.447445][ T5973] Bluetooth: hci4: command 0x040f tx timeout [ 162.517495][ T5838] usb 6-1: new low-speed USB device number 11 using dummy_hcd [ 162.538186][ T5838] usb 6-1: device descriptor read/8, error -71 [ 162.807470][ T5838] usb 6-1: new low-speed USB device number 12 using dummy_hcd [ 162.838363][ T5838] usb 6-1: device descriptor read/8, error -71 [ 162.941890][ T8618] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 162.947864][ T5838] usb usb6-port1: unable to enumerate USB device [ 163.235720][ T8603] tipc: Disabling bearer [ 163.478311][ T8631] ldm_validate_partition_table(): Disk read failed. [ 163.481419][ T8631] Dev nbd0: unable to read RDB block 0 [ 163.484230][ T8631] nbd0: unable to read partition table [ 164.665502][ T5973] Bluetooth: hci2: unexpected event for opcode 0x1002 [ 164.834945][ T8664] netlink: 5 bytes leftover after parsing attributes in process `syz.4.598'. [ 164.841339][ T8665] syz.3.595 (8665): drop_caches: 2 [ 164.842254][ T8664] 0XD: renamed from macvtap0 [ 164.843293][ T8665] syz.3.595 (8665): drop_caches: 2 [ 164.848390][ T8664] 0XD: entered allmulticast mode [ 164.850663][ T8664] veth0_macvtap: entered allmulticast mode [ 164.858322][ T8664] A link change request failed with some changes committed already. Interface 30XD may have been left with an inconsistent configuration, please check. [ 164.930377][ T8668] dlm: no locking on control device [ 165.531366][ T8673] netlink: 124 bytes leftover after parsing attributes in process `syz.4.600'. [ 165.534246][ T8673] netlink: 15 bytes leftover after parsing attributes in process `syz.4.600'. [ 165.537039][ T8673] netlink: 15 bytes leftover after parsing attributes in process `syz.4.600'. [ 165.668696][ T40] audit: type=1804 audit(1755774717.891:214): pid=8682 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.603" name="/newroot/166/file0/file0" dev="9p" ino=35913866 res=1 errno=0 [ 165.740506][ T8692] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 165.742877][ T8692] UDF-fs: Scanning with blocksize 2048 failed [ 165.745560][ T8692] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 165.749426][ T8692] UDF-fs: Scanning with blocksize 4096 failed [ 166.690262][ T8707] netlink: 40 bytes leftover after parsing attributes in process `syz.0.609'. [ 166.845638][ T5976] Bluetooth: hci2: unexpected event for opcode 0x1002 [ 167.114556][ T8733] dlm: no locking on control device [ 167.756709][ T8747] overlayfs: failed to decode file handle (len=24, type=248, flags=0, err=-22) [ 167.761428][ T8747] netlink: 'syz.0.619': attribute type 1 has an invalid length. [ 168.159666][ T40] audit: type=1326 audit(1755774720.381:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8753 comm="syz.4.621" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702e579 code=0x7ffc0000 [ 168.226525][ T8748] netlink: 'syz.1.617': attribute type 11 has an invalid length. [ 168.230475][ T8742] block device autoloading is deprecated and will be removed. [ 168.240332][ T40] audit: type=1326 audit(1755774720.461:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8753 comm="syz.4.621" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702e579 code=0x7ffc0000 [ 169.004904][ T6089] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 169.159715][ T6089] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 169.163958][ T6089] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 169.172299][ T6089] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 169.178327][ T6089] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.187626][ T8785] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 169.193764][ T6089] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 169.768021][ T8813] dlm: no locking on control device [ 170.280908][ T8826] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.341499][ T8826] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.420568][ T8835] tipc: Enabled bearer , priority 0 [ 170.425797][ T8826] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.432646][ T8835] syzkaller0: entered promiscuous mode [ 170.435067][ T8835] syzkaller0: entered allmulticast mode [ 170.446573][ T8835] tipc: Resetting bearer [ 170.452899][ T8834] tipc: Resetting bearer [ 170.460876][ T8834] tipc: Disabling bearer [ 170.484950][ T8826] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.611379][ T68] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.626454][ T1139] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.628246][ T8853] netlink: 4 bytes leftover after parsing attributes in process `syz.1.635'. [ 170.633308][ T1139] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.640063][ T1139] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.723057][ T8865] netlink: 28 bytes leftover after parsing attributes in process `syz.1.637'. [ 170.725868][ T8865] nbd: must specify at least one socket [ 170.843517][ T6089] libceph: connect (1)[c::]:6789 error -101 [ 170.845590][ T6089] libceph: mon0 (1)[c::]:6789 connect error [ 170.895108][ T8881] ceph: No mds server is up or the cluster is laggy [ 170.904632][ T8881] /dev/nullb0: Can't open blockdev [ 170.977419][ T9] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 171.148720][ T9] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 171.150965][ T8904] netlink: 'syz.4.639': attribute type 4 has an invalid length. [ 171.152074][ T9] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 171.152101][ T9] usb 6-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 171.152112][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.152502][ T8906] netlink: 25 bytes leftover after parsing attributes in process `syz.4.639'. [ 171.172050][ T9] usb 6-1: config 0 descriptor?? [ 171.390755][ T34] usb 6-1: USB disconnect, device number 13 [ 171.570905][ T24] usb 8-1: USB disconnect, device number 7 [ 171.605529][ T8921] veth1_to_batadv: entered promiscuous mode [ 171.608065][ T8921] macsec1: entered promiscuous mode [ 171.730141][ T8929] netlink: 35 bytes leftover after parsing attributes in process `syz.3.645'. [ 172.965306][ T8934] netlink: 8 bytes leftover after parsing attributes in process `syz.0.646'. [ 172.974063][ T8934] netlink: 'syz.0.646': attribute type 5 has an invalid length. [ 172.976514][ T8934] netlink: 20 bytes leftover after parsing attributes in process `syz.0.646'. [ 172.997822][ T8934] geneve2: entered promiscuous mode [ 173.000038][ T8934] geneve2: entered allmulticast mode [ 173.007706][ T46] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 256 - 0 [ 173.011528][ T46] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 256 - 0 [ 173.014327][ T46] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 256 - 0 [ 173.027644][ T46] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 256 - 0 [ 173.156222][ T8942] tmpfs: Bad value for 'mpol' [ 173.274618][ T8947] /dev/nullb0: Can't open blockdev [ 173.579947][ T8953] netlink: 28 bytes leftover after parsing attributes in process `syz.1.652'. [ 173.583066][ T8953] netlink: 8 bytes leftover after parsing attributes in process `syz.1.652'. [ 173.600240][ T40] audit: type=1326 audit(1755774725.821:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8952 comm="syz.1.652" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fc1579 code=0x0 [ 173.929575][ T8956] fuse: Unknown parameter 'group_id00000000000000000000' [ 173.933131][ T8956] lo speed is unknown, defaulting to 1000 [ 173.935471][ T8956] lo speed is unknown, defaulting to 1000 [ 173.937825][ T8956] lo speed is unknown, defaulting to 1000 [ 174.059939][ T8956] infiniband sz1: set down [ 174.061446][ T8956] infiniband sz1: added lo [ 174.063079][ T6089] lo speed is unknown, defaulting to 1000 [ 174.102399][ T8956] RDS/IB: sz1: added [ 174.104944][ T8956] smc: adding ib device sz1 with port count 1 [ 174.107650][ T8956] smc: ib device sz1 port 1 has pnetid [ 174.110676][ T6089] lo speed is unknown, defaulting to 1000 [ 174.113557][ T8956] lo speed is unknown, defaulting to 1000 [ 174.155270][ T8956] lo speed is unknown, defaulting to 1000 [ 174.189521][ T8956] lo speed is unknown, defaulting to 1000 [ 174.223921][ T8956] lo speed is unknown, defaulting to 1000 [ 174.257446][ T34] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 174.408644][ T34] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 174.413116][ T34] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 174.417058][ T34] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 174.421585][ T34] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.426767][ T8957] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 174.432638][ T34] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 174.466610][ T8969] IPVS: Error connecting to the multicast addr [ 174.529337][ T8971] overlayfs: failed to resolve './file1': -2 [ 174.697719][ T6089] usb 8-1: USB disconnect, device number 8 [ 174.848663][ T8980] netlink: 16 bytes leftover after parsing attributes in process `syz.4.658'. [ 175.590553][ T8984] netlink: zone id is out of range [ 175.592862][ T8984] netlink: zone id is out of range [ 175.594888][ T8984] netlink: zone id is out of range [ 175.597041][ T8984] netlink: zone id is out of range [ 175.599504][ T8984] netlink: zone id is out of range [ 175.601589][ T8984] netlink: zone id is out of range [ 175.603848][ T8984] netlink: zone id is out of range [ 175.606048][ T8984] netlink: zone id is out of range [ 175.608495][ T8984] netlink: zone id is out of range [ 175.610598][ T8984] netlink: zone id is out of range [ 175.823901][ T8991] netlink: 24 bytes leftover after parsing attributes in process `syz.0.661'. [ 175.907217][ T8995] netlink: 120 bytes leftover after parsing attributes in process `syz.4.664'. [ 176.334752][ T8998] nvme_fabrics: missing parameter 'transport=%s' [ 176.337527][ T8998] nvme_fabrics: missing parameter 'nqn=%s' [ 176.720391][ T9014] lo speed is unknown, defaulting to 1000 [ 177.157547][ T34] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 177.236436][ T9032] netlink: 'syz.4.673': attribute type 4 has an invalid length. [ 177.307495][ T34] usb 5-1: Using ep0 maxpacket: 16 [ 177.312328][ T34] usb 5-1: config 0 has no interfaces? [ 177.316630][ T34] usb 5-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 177.320973][ T34] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.324460][ T34] usb 5-1: Product: syz [ 177.326330][ T34] usb 5-1: Manufacturer: syz [ 177.328745][ T34] usb 5-1: SerialNumber: syz [ 177.332191][ T34] usb 5-1: config 0 descriptor?? [ 177.538198][ T9027] netlink: 12 bytes leftover after parsing attributes in process `syz.0.672'. [ 177.541693][ T9027] afs: Unknown parameter '%SIZ| [ 177.541693][ T9027] u'ҁ' [ 177.640620][ T9047] lo: entered promiscuous mode [ 177.642390][ T9047] tunl0: entered promiscuous mode [ 177.644089][ T9047] gre0: entered promiscuous mode [ 177.645743][ T9047] gretap0: entered promiscuous mode [ 177.647546][ T9047] erspan0: entered promiscuous mode [ 177.649351][ T9047] ip6_vti0: entered promiscuous mode [ 177.652135][ T9047] sit0: entered promiscuous mode [ 177.692660][ T9047] ip6tnl0: entered promiscuous mode [ 177.695173][ T9047] ip6gre0: entered promiscuous mode [ 177.708771][ T9047] ip6gretap0: entered promiscuous mode [ 177.747599][ T9047] bridge0: entered promiscuous mode [ 177.750396][ T9047] vcan0: entered promiscuous mode [ 177.752445][ T9047] bond0: entered promiscuous mode [ 177.755012][ T9047] dummy0: entered promiscuous mode [ 177.764670][ T9047] nlmon0: entered promiscuous mode [ 177.781122][ T9047] caif0: entered promiscuous mode [ 177.783141][ T9047] batadv0: entered promiscuous mode [ 177.785980][ T9047] vxcan0: entered promiscuous mode [ 177.788315][ T9047] vxcan1: entered promiscuous mode [ 177.790348][ T9047] veth0: entered promiscuous mode [ 177.793094][ T9047] veth1: entered promiscuous mode [ 177.799943][ T9047] wg0: entered promiscuous mode [ 177.802876][ T9047] wg1: entered promiscuous mode [ 177.805649][ T9047] wg2: entered promiscuous mode [ 177.808473][ T9047] veth0_to_bridge: entered promiscuous mode [ 177.811583][ T9047] bridge_slave_0: entered promiscuous mode [ 177.814150][ T9047] veth1_to_bridge: entered promiscuous mode [ 177.817775][ T9047] bridge_slave_1: entered promiscuous mode [ 177.820893][ T9047] veth0_to_bond: entered promiscuous mode [ 177.823527][ T9047] bond_slave_0: entered promiscuous mode [ 177.826115][ T9047] veth1_to_bond: entered promiscuous mode [ 177.829491][ T9047] bond_slave_1: entered promiscuous mode [ 177.832194][ T9047] veth0_to_team: entered promiscuous mode [ 177.836271][ T9047] team_slave_0: entered promiscuous mode [ 177.839311][ T9047] veth1_to_team: entered promiscuous mode [ 177.842970][ T9047] team_slave_1: entered promiscuous mode [ 177.845360][ T9047] veth0_to_batadv: entered promiscuous mode [ 177.850237][ T9047] batadv_slave_0: entered promiscuous mode [ 177.854034][ T9047] veth1_to_batadv: entered promiscuous mode [ 177.858133][ T9047] batadv_slave_1: entered promiscuous mode [ 177.861767][ T9047] xfrm0: entered promiscuous mode [ 177.864724][ T9047] veth0_to_hsr: entered promiscuous mode [ 177.869082][ T9047] veth1_to_hsr: entered promiscuous mode [ 177.874862][ T9047] hsr0: entered promiscuous mode [ 177.879206][ T9047] veth1_virt_wifi: entered promiscuous mode [ 177.883070][ T9047] veth0_virt_wifi: entered promiscuous mode [ 177.886717][ T9047] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 177.896052][ T9047] vlan0: entered promiscuous mode [ 177.898653][ T9047] vlan1: entered promiscuous mode [ 177.901295][ T9047] macvlan0: entered promiscuous mode [ 177.905201][ T9047] macvlan1: entered promiscuous mode [ 177.909183][ T9047] ipvlan0: entered promiscuous mode [ 177.911762][ T9047] ipvlan1: entered promiscuous mode [ 177.914415][ T9047] veth1_macvtap: entered promiscuous mode [ 177.926377][ T9047] macvtap0: entered promiscuous mode [ 177.933760][ T9047] geneve0: entered promiscuous mode [ 177.937251][ T9047] geneve1: entered promiscuous mode [ 177.958303][ T9047] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 177.966874][ T9047] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode [ 177.971121][ T9047] vlan2: entered promiscuous mode [ 177.972982][ T9047] mac80211_hwsim hwsim10 wlan2: entered promiscuous mode [ 177.975440][ T9047] erspan0.1: entered promiscuous mode [ 177.977511][ T9047] netdevsim netdevsim3 eth0: entered promiscuous mode [ 177.979891][ T9047] netdevsim netdevsim3 eth1: entered promiscuous mode [ 177.984142][ T9047] netdevsim netdevsim3 eth2: entered promiscuous mode [ 177.986387][ T9047] netdevsim netdevsim3 eth3: entered promiscuous mode [ 177.989258][ T9047] xfrm1: entered promiscuous mode [ 177.992731][ T9049] macsec1: entered promiscuous mode [ 178.037736][ T1143] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.041402][ T1143] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.044829][ T1143] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.049040][ T1143] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.056268][ T24] usb 5-1: USB disconnect, device number 6 [ 178.351418][ T9054] netlink: 16 bytes leftover after parsing attributes in process `syz.4.679'. [ 179.211649][ T9099] dlm: no locking on control device [ 180.026683][ T9112] netlink: 4 bytes leftover after parsing attributes in process `syz.0.690'. [ 180.353514][ T9116] siw: device registration error -23 [ 181.815684][ T9139] netlink: 'syz.3.699': attribute type 10 has an invalid length. [ 181.818081][ T9139] netlink: 'syz.3.699': attribute type 10 has an invalid length. [ 182.374341][ T9154] net_ratelimit: 16 callbacks suppressed [ 182.374357][ T9154] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 182.441679][ T40] audit: type=1326 audit(1755774734.661:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9161 comm="syz.3.706" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa4579 code=0x7ffc0000 [ 182.451404][ T40] audit: type=1326 audit(1755774734.661:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9161 comm="syz.3.706" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa4579 code=0x7ffc0000 [ 182.463184][ T40] audit: type=1326 audit(1755774734.661:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9161 comm="syz.3.706" exe="/syz-executor" sig=0 arch=40000003 syscall=8 compat=1 ip=0xf7fa4579 code=0x7ffc0000 [ 182.489539][ T40] audit: type=1326 audit(1755774734.661:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9161 comm="syz.3.706" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa4579 code=0x7ffc0000 [ 182.501016][ T40] audit: type=1326 audit(1755774734.661:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9161 comm="syz.3.706" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa4579 code=0x7ffc0000 [ 182.509854][ T40] audit: type=1326 audit(1755774734.671:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9161 comm="syz.3.706" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7fa4579 code=0x7ffc0000 [ 182.516900][ T40] audit: type=1326 audit(1755774734.671:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9161 comm="syz.3.706" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa4579 code=0x7ffc0000 [ 182.524266][ T40] audit: type=1326 audit(1755774734.671:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9161 comm="syz.3.706" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa4579 code=0x7ffc0000 [ 182.531523][ T40] audit: type=1326 audit(1755774734.681:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9161 comm="syz.3.706" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7fa4579 code=0x7ffc0000 [ 182.544733][ T40] audit: type=1326 audit(1755774734.681:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9161 comm="syz.3.706" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa4579 code=0x7ffc0000 [ 182.605543][ T9168] tipc: Resetting bearer [ 182.618732][ T9172] evm: overlay not supported [ 182.637737][ T5838] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 183.637472][ T5838] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 184.010401][ T9224] netlink: 2 bytes leftover after parsing attributes in process `syz.3.725'. [ 184.627599][ T9233] netlink: 84 bytes leftover after parsing attributes in process `syz.3.727'. [ 184.794039][ T9239] sp0: Synchronizing with TNC [ 184.807678][ T9238] [U] [ 184.982913][ T5838] libceph: connect (1)[c::]:6789 error -101 [ 184.984885][ T5838] libceph: mon0 (1)[c::]:6789 connect error [ 185.238263][ T5838] libceph: connect (1)[c::]:6789 error -101 [ 185.241175][ T5838] libceph: mon0 (1)[c::]:6789 connect error [ 185.460494][ T9266] ceph: No mds server is up or the cluster is laggy [ 185.467226][ T9277] netlink: 4 bytes leftover after parsing attributes in process `syz.4.739'. [ 185.472451][ T9277] netlink: 84 bytes leftover after parsing attributes in process `syz.4.739'. [ 185.885725][ T9289] IPVS: set_ctl: invalid protocol: 1536 156.1.0.0:20000 [ 186.543659][ T9316] ------------[ cut here ]------------ [ 186.545412][ T9316] WARNING: CPU: 2 PID: 9316 at mm/page_alloc.c:5124 __alloc_frozen_pages_noprof+0x30b/0x23f0 [ 186.548753][ T9316] Modules linked in: [ 186.550728][ T9316] CPU: 2 UID: 0 PID: 9316 Comm: syz.1.749 Not tainted syzkaller #0 PREEMPT(full) [ 186.555067][ T9316] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 186.558488][ T9316] RIP: 0010:__alloc_frozen_pages_noprof+0x30b/0x23f0 [ 186.560597][ T9316] Code: f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 cc cc cc cc 83 fe 0a 0f 86 0a fe ff ff 80 3d 06 50 80 0e 00 75 0b c6 05 fd 4f 80 0e 01 90 <0f> 0b 90 45 31 f6 eb 81 4d 85 f6 74 22 44 89 fa 89 ee 4c 89 f7 e8 [ 186.566629][ T9316] RSP: 0018:ffffc90004faf7d0 EFLAGS: 00010246 [ 186.569077][ T9316] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 186.571609][ T9316] RDX: 0000000000000000 RSI: 0000000000000031 RDI: 0000000000040d40 [ 186.574227][ T9316] RBP: 0000000000000031 R08: 0000000000000005 R09: 0000000000000009 [ 186.576738][ T9316] R10: 0000000000000031 R11: 000000000000001e R12: 0000000000040d40 [ 186.580452][ T9316] R13: 1ffff920009f5f0f R14: ffffffff9ae70a24 R15: 0000000000000031 [ 186.583824][ T9316] FS: 0000000000000000(0000) GS:ffff8880976c4000(0063) knlGS:00000000f54e6b40 [ 186.587732][ T9316] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 186.590649][ T9316] CR2: 0000000080001000 CR3: 0000000063a54000 CR4: 0000000000352ef0 [ 186.594028][ T9316] Call Trace: [ 186.595518][ T9316] [ 186.596808][ T9316] ? __do_fast_syscall_32+0x7c/0x3a0 [ 186.599007][ T9316] ? do_fast_syscall_32+0x32/0x80 [ 186.600624][ T9316] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 186.602677][ T9316] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 186.604650][ T9316] ? rcu_is_watching+0x12/0xc0 [ 186.606176][ T9316] ? trace_irq_enable.constprop.0+0xd4/0x120 [ 186.608128][ T9316] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 186.610011][ T9316] ? policy_nodemask+0xea/0x4e0 [ 186.611542][ T9316] alloc_pages_mpol+0x1fb/0x550 [ 186.613080][ T9316] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 186.614976][ T9316] ? v9fs_fid_get_acl+0x7a/0x120 [ 186.616689][ T9316] ___kmalloc_large_node+0xed/0x160 [ 186.617628][ T6039] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 186.618724][ T9316] ? v9fs_fid_get_acl+0x7a/0x120 [ 186.623575][ T9316] __kmalloc_large_node_noprof+0x1c/0x70 [ 186.625351][ T9316] __kmalloc_noprof.cold+0xc/0x61 [ 186.626952][ T9316] ? __pfx_iget5_locked+0x10/0x10 [ 186.628616][ T9316] ? v9fs_cache_inode_get_cookie+0x28f/0x3a0 [ 186.630560][ T9316] ? p9_req_put+0x1c6/0x250 [ 186.632015][ T9316] v9fs_fid_get_acl+0x7a/0x120 [ 186.633554][ T9316] v9fs_get_acl+0x3f4/0x530 [ 186.634973][ T9316] v9fs_inode_from_fid_dotl+0x264/0x2f0 [ 186.636706][ T9316] v9fs_mount+0x4fd/0xa90 [ 186.638172][ T9316] ? rcu_is_watching+0x12/0xc0 [ 186.639705][ T9316] ? __pfx_v9fs_mount+0x10/0x10 [ 186.641258][ T9316] ? aa_get_newest_label+0xd2/0x250 [ 186.642951][ T9316] ? apparmor_capable+0x114/0x1d0 [ 186.644619][ T9316] ? __pfx_v9fs_mount+0x10/0x10 [ 186.646191][ T9316] legacy_get_tree+0x10c/0x220 [ 186.647755][ T9316] vfs_get_tree+0x8b/0x340 [ 186.649179][ T9316] path_mount+0x1513/0x2000 [ 186.650644][ T9316] ? __pfx_path_mount+0x10/0x10 [ 186.652241][ T9316] ? kmem_cache_free+0x2d1/0x4d0 [ 186.653839][ T9316] ? putname+0x154/0x1a0 [ 186.655183][ T9316] ? getname_flags.part.0+0x1c5/0x550 [ 186.656882][ T9316] ? __ia32_sys_mount+0x28b/0x310 [ 186.658549][ T9316] __ia32_sys_mount+0x28b/0x310 [ 186.660114][ T9316] ? __pfx___ia32_sys_mount+0x10/0x10 [ 186.661838][ T9316] ? syscall_user_dispatch+0x78/0x140 [ 186.663515][ T9316] ? rcu_is_watching+0x12/0xc0 [ 186.665026][ T9316] __do_fast_syscall_32+0x7c/0x3a0 [ 186.666652][ T9316] do_fast_syscall_32+0x32/0x80 [ 186.668264][ T9316] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 186.670264][ T9316] RIP: 0023:0xf7fc1579 [ 186.671669][ T9316] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 186.677688][ T9316] RSP: 002b:00000000f54e655c EFLAGS: 00000296 ORIG_RAX: 0000000000000015 [ 186.680356][ T9316] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00000000800003c0 [ 186.682858][ T9316] RDX: 0000000080000b80 RSI: 0000000000000000 RDI: 0000000080000140 [ 186.685304][ T9316] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 186.685808][ T9311] netlink: 5 bytes leftover after parsing attributes in process `syz.0.746'. [ 186.687825][ T9316] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 186.687835][ T9316] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 186.687845][ T9316] [ 186.687852][ T9316] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 186.687860][ T9316] CPU: 2 UID: 0 PID: 9316 Comm: syz.1.749 Not tainted syzkaller #0 PREEMPT(full) [ 186.687872][ T9316] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 186.687878][ T9316] Call Trace: [ 186.687882][ T9316] [ 186.687886][ T9316] dump_stack_lvl+0x3d/0x1f0 [ 186.687903][ T9316] vpanic+0x6e8/0x7a0 [ 186.687918][ T9316] ? __pfx_vpanic+0x10/0x10 [ 186.687934][ T9316] ? __alloc_frozen_pages_noprof+0x30b/0x23f0 [ 186.687948][ T9316] panic+0xca/0xd0 [ 186.687961][ T9316] ? __pfx_panic+0x10/0x10 [ 186.687977][ T9316] ? check_panic_on_warn+0x1f/0xb0 [ 186.687992][ T9316] check_panic_on_warn+0xab/0xb0 [ 186.688007][ T9316] __warn+0xf6/0x3c0 [ 186.688021][ T9316] ? __alloc_frozen_pages_noprof+0x30b/0x23f0 [ 186.688034][ T9316] report_bug+0x3c3/0x580 [ 186.688045][ T9316] ? __alloc_frozen_pages_noprof+0x30b/0x23f0 [ 186.688058][ T9316] handle_bug+0x184/0x210 [ 186.688072][ T9316] exc_invalid_op+0x17/0x50 [ 186.688086][ T9316] asm_exc_invalid_op+0x1a/0x20 [ 186.688097][ T9316] RIP: 0010:__alloc_frozen_pages_noprof+0x30b/0x23f0 [ 186.688111][ T9316] Code: f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 cc cc cc cc 83 fe 0a 0f 86 0a fe ff ff 80 3d 06 50 80 0e 00 75 0b c6 05 fd 4f 80 0e 01 90 <0f> 0b 90 45 31 f6 eb 81 4d 85 f6 74 22 44 89 fa 89 ee 4c 89 f7 e8 [ 186.688121][ T9316] RSP: 0018:ffffc90004faf7d0 EFLAGS: 00010246 [ 186.688130][ T9316] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 186.688136][ T9316] RDX: 0000000000000000 RSI: 0000000000000031 RDI: 0000000000040d40 [ 186.688143][ T9316] RBP: 0000000000000031 R08: 0000000000000005 R09: 0000000000000009 [ 186.688148][ T9316] R10: 0000000000000031 R11: 000000000000001e R12: 0000000000040d40 [ 186.688155][ T9316] R13: 1ffff920009f5f0f R14: ffffffff9ae70a24 R15: 0000000000000031 [ 186.688164][ T9316] ? __do_fast_syscall_32+0x7c/0x3a0 [ 186.688178][ T9316] ? do_fast_syscall_32+0x32/0x80 [ 186.688191][ T9316] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 186.688206][ T9316] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 186.688221][ T9316] ? rcu_is_watching+0x12/0xc0 [ 186.688232][ T9316] ? trace_irq_enable.constprop.0+0xd4/0x120 [ 186.688248][ T9316] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 186.688264][ T9316] ? policy_nodemask+0xea/0x4e0 [ 186.688278][ T9316] alloc_pages_mpol+0x1fb/0x550 [ 186.688292][ T9316] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 186.688306][ T9316] ? v9fs_fid_get_acl+0x7a/0x120 [ 186.688322][ T9316] ___kmalloc_large_node+0xed/0x160 [ 186.688338][ T9316] ? v9fs_fid_get_acl+0x7a/0x120 [ 186.688352][ T9316] __kmalloc_large_node_noprof+0x1c/0x70 [ 186.688368][ T9316] __kmalloc_noprof.cold+0xc/0x61 [ 186.688384][ T9316] ? __pfx_iget5_locked+0x10/0x10 [ 186.688398][ T9316] ? v9fs_cache_inode_get_cookie+0x28f/0x3a0 [ 186.688413][ T9316] ? p9_req_put+0x1c6/0x250 [ 186.688427][ T9316] v9fs_fid_get_acl+0x7a/0x120 [ 186.688442][ T9316] v9fs_get_acl+0x3f4/0x530 [ 186.688457][ T9316] v9fs_inode_from_fid_dotl+0x264/0x2f0 [ 186.688470][ T9316] v9fs_mount+0x4fd/0xa90 [ 186.688479][ T9316] ? rcu_is_watching+0x12/0xc0 [ 186.688489][ T9316] ? __pfx_v9fs_mount+0x10/0x10 [ 186.688498][ T9316] ? aa_get_newest_label+0xd2/0x250 [ 186.688510][ T9316] ? apparmor_capable+0x114/0x1d0 [ 186.688521][ T9316] ? __pfx_v9fs_mount+0x10/0x10 [ 186.688530][ T9316] legacy_get_tree+0x10c/0x220 [ 186.688543][ T9316] vfs_get_tree+0x8b/0x340 [ 186.688552][ T9316] path_mount+0x1513/0x2000 [ 186.688566][ T9316] ? __pfx_path_mount+0x10/0x10 [ 186.688579][ T9316] ? kmem_cache_free+0x2d1/0x4d0 [ 186.688590][ T9316] ? putname+0x154/0x1a0 [ 186.688604][ T9316] ? getname_flags.part.0+0x1c5/0x550 [ 186.688621][ T9316] ? __ia32_sys_mount+0x28b/0x310 [ 186.688634][ T9316] __ia32_sys_mount+0x28b/0x310 [ 186.688647][ T9316] ? __pfx___ia32_sys_mount+0x10/0x10 [ 186.688660][ T9316] ? syscall_user_dispatch+0x78/0x140 [ 186.688676][ T9316] ? rcu_is_watching+0x12/0xc0 [ 186.688687][ T9316] __do_fast_syscall_32+0x7c/0x3a0 [ 186.688701][ T9316] do_fast_syscall_32+0x32/0x80 [ 186.688714][ T9316] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 186.688730][ T9316] RIP: 0023:0xf7fc1579 [ 186.688738][ T9316] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 186.688748][ T9316] RSP: 002b:00000000f54e655c EFLAGS: 00000296 ORIG_RAX: 0000000000000015 [ 186.688758][ T9316] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00000000800003c0 [ 186.688764][ T9316] RDX: 0000000080000b80 RSI: 0000000000000000 RDI: 0000000080000140 [ 186.688770][ T9316] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 186.688776][ T9316] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 186.688782][ T9316] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 186.688791][ T9316] [ 186.691396][ T9316] Kernel Offset: disabled VM DIAGNOSIS: 11:12:18 Registers: info registers vcpu 0 CPU#0 RAX=000000000063d16c RBX=0000000000000000 RCX=ffffffff8b908bf9 RDX=ffffed1005646656 RSI=ffffffff8c162c80 RDI=ffffffff8190cca1 RBP=fffffbfff1c52ef8 RSP=ffffffff8e207e08 R8 =0000000000000000 R9 =ffffed1005646655 R10=ffff88802b2332ab R11=ffff88802b23b298 R12=0000000000000000 R13=ffffffff8e2977c0 R14=ffffffff90ab7690 R15=0000000000000000 RIP=ffffffff8b90775f RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880974c4000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000003211affc CR3=0000000047dc9000 CR4=00352ef0 DR0=000000005ffffffd DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000ff ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4e4f4954504f5f4e 4153410063657865 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=ffff888050af3000 RBX=0000000000001000 RCX=0000000000000d80 RDX=0000000000001000 RSI=ffff888062f92280 RDI=ffff888050af3280 RBP=ffff888050af3000 RSP=ffffc900045070b0 R8 =0000000000000000 R9 =ffffed100c5f25ff R10=ffff888062f92fff R11=0000000000000000 R12=ffff888062f92000 R13=dffffc0000000000 R14=ffffea00018be480 R15=00000000f68cb000 RIP=ffffffff8b8f6056 RFL=00010246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff8880975c4000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000080026000 CR3=000000005e54e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000020001 Opmask01=0000000000000010 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=00000000ffffffdf Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fffca43de0b 00007fffca43de0b ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fffca43e310 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fffca43e310 0000003000000018 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343534352e363831 20205b3e343c002d 2d2d2d2d2d2d2d2d 2d2d2d5d20657200 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3435343524363231 2020513434360027 2727272727272727 2727275720657200 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5f636f6c6c615f5f 20343231353a632e 636f6c6c615f6567 61702f6d6d207461 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3030303063666637 78303d65646f6320 3937353461663766 78303d706920313d ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7461706d6f632030 34323d6c6c616373 7973203330303030 3030343d68637261 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 20303d6769732022 726f747563657865 2d7a79732f223d65 786520223630372e ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 332e7a7973223d6d 6d6f632031363139 3d6469702064656e 69666e6f636e753d ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 65746e656d676172 66206562206c6c69 7720656361667265 746e692073696874 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000049 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85616b45 RDI=ffffffff9b0f8680 RBP=ffffffff9b0f8640 RSP=ffffc90004faf140 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=552032203a555043 R12=0000000000000000 R13=0000000000000049 R14=ffffffff9b0f8640 R15=ffffffff85616ae0 RIP=ffffffff85616b6f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff8880976c4000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000080001000 CR3=0000000063a54000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000002000002 Opmask01=0000000000800001 Opmask02=00000000ffff7fdf Opmask03=0000000082000020 Opmask04=00000000ffffffff Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005596ce861d80 00005596ce861d80 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005596ce83ba30 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe222ff1b20 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000ff000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00ff000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe222f52c80 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2c2c2c2c2c2c2c2c 2c2c2c2c2c2c2c2c 2c2c2c2c2c2c2c2c 2c2c2c2c2c2c2c2c ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6e69646165520073 25203a656c696620 7974706d6520676e 697070696b530065 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4245484d4952005f 090c164940454a0c 55585c41490c4b42 455c5c4547530049 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000559397ef4d44 0000000000000041 0000000000000034 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000041 0000000000000000 0000000039326c6c 696b66722fc75c29 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 322e392d3533712d 63707276703a2939 3030322c39484349 2b35335128435064 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7261646e6174536e 703a554d45516e76 733a302e3072623a 343130322f31302f ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343064623a312b32 316f70627e322d33 2e36312e312d6e61 696265642d332e36 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 323032302c313032 302c394631302c32 4331302c38423130 2c464131302c4541 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=00000000001bde8c RBX=0000000000000003 RCX=ffffffff8b908bf9 RDX=ffffed10056a6656 RSI=ffffffff8c162c80 RDI=ffffffff8190cca1 RBP=ffffed1003867000 RSP=ffffc9000048fdf8 R8 =0000000000000000 R9 =ffffed10056a6655 R10=ffff88802b5332ab R11=0000000000000001 R12=0000000000000003 R13=ffff88801c338000 R14=ffffffff90ab7690 R15=0000000000000000 RIP=ffffffff8b90775f RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880977c4000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000581da4c0 CR3=0000000064588000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000ff ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4e4f4954504f5f4e 4153410063657865 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000