last executing test programs: 4m11.169391652s ago: executing program 3 (id=56): syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x6, 0x2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x5}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$pptp(0x18, 0x1, 0x2) connect$pptp(r2, &(0x7f0000000040)={0x18, 0x2, {0xfffc, @initdev={0xac, 0x1e, 0x5, 0x0}}}, 0x1e) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r7 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_S_FMT(r7, 0xc0d05605, &(0x7f0000000180)={0x1, @pix={0x200, 0x2f5380, 0x41414770, 0x58595556, 0x425, 0x10001, 0xa, 0x9e0, 0x1, 0x3, 0x0, 0x7}}) quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0) ioctl$VIDIOC_DBG_S_REGISTER(r7, 0x4038564f, &(0x7f0000000340)={{0x4, @name="f43089c266b41e0b000022001cad5a0f8db8cd620800"}, 0x3c, 0x4, 0x47}) 4m7.541149974s ago: executing program 3 (id=64): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x2}, &(0x7f0000001fee)='R\x10rust\xe3c*s\xa8rVid:\xc4e', 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x7, 0x4, 0x20, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_GET_MAP_INFO(0x3, &(0x7f00000006c0)={r1, 0x0, 0x0}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f00000000c0)='./file0\x00') renameat2(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./file5\x00', 0x2) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r3 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r4, &(0x7f0000002080)={0xfc, {"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", 0x1000}}, 0x1006) r5 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r5, 0x4020565a, &(0x7f00000000c0)={0x3, 0x980900, 0x3}) ioctl$VIDIOC_QUERYMENU(r5, 0xc008561c, &(0x7f0000000000)={0x980900, 0x7, @value=0x2}) io_submit(0x0, 0x1, &(0x7f0000000340)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x6, r0, &(0x7f00000005c0)="0d6cf014c1eae8d5163e42f8a2e32f572c816e6256bd299b41701444c9c42b299d17fe21dce4b0a269130d358b5a0e2fd56ae20288778b2f7af105c80b4f096f4514e7c6ce", 0x45, 0xce49}]) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f00000004c0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x60}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0x0, 0x8}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x700}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x0, 0x6, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0x50}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x20}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0x7, 0x0}, {0x18, 0x2, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r6, &(0x7f0000001ac0)={0x0, 0x700, &(0x7f0000001a80)={&(0x7f0000000a40)={0x3c, 0x0, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8}}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) 4m6.139351025s ago: executing program 3 (id=68): syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x403}}]}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[], 0x14}}, 0x4000) sendmsg$WG_CMD_GET_DEVICE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000002e80)={&(0x7f0000000340)=ANY=[], 0x2b08}}, 0x4004006) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000100)=@ccm_128={{0x304}, "2697312e4e898ca7", "35e23ca3a988def7dfbd438c536346cd", "11398f4a", "50cc97386065eda9"}, 0x28) recvmmsg(r0, &(0x7f0000001040)=[{{0x0, 0x0, 0x0}, 0x2004}, {{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f00000007c0)=""/106, 0x6a}], 0x1}, 0x4}], 0x2, 0x40000002, 0x0) 4m5.380605855s ago: executing program 3 (id=71): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r1 = getpid() mmap$KVM_VCPU(&(0x7f0000ffa000/0x4000)=nil, 0x0, 0x1000008, 0x20010, r0, 0x0) r2 = syz_pidfd_open(r1, 0x0) prlimit64(r1, 0xc, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = signalfd(0xffffffffffffffff, 0x0, 0x0) fcntl$setownex(r4, 0xf, 0x0) faccessat2(r4, &(0x7f0000000100)='.\x00', 0x20, 0x600) setpgid(r3, 0x0) setpgid(0x0, r3) mount$9p_fd(0x0, &(0x7f0000000280)='./file1\x00', &(0x7f0000000240), 0x10000, &(0x7f00000002c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB="2c77660600000000e1ffff06d04b255c8e0debc8e3efa49c8ffc", @ANYRESHEX=r2, @ANYBLOB=',\x00']) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bpf(0x0, 0x0, &(0x7f0000000180), 0x48004, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0a00000000100bd97d0900ba242b5222838900004b9905c8548a7e822931c858725b7461419c6f56dd8d605c21120683bf71e814beb178a53846", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000001c0)=@generic={&(0x7f00000000c0)='./file0/file0\x00', r5}, 0x18) r6 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_READY(r6, 0x9360, 0x800000000000001) ioctl$KVM_SET_MSRS(r0, 0xc008ae88, &(0x7f0000000340)=ANY=[@ANYBLOB="05000000000000e672000040"]) mq_open(&(0x7f0000000200)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x800, 0x109, &(0x7f0000000000)={0x2, 0x0, 0x6}) 4m5.181424343s ago: executing program 3 (id=73): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000340)={0x1d, r1, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000400)="81b641f1f3843704b6", 0x9}], 0x1}, 0x48005) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, &(0x7f0000000180)=[{0x2, 0xffffffffffffffdf, {0x2, 0x1}, {0x1, 0x0, 0x5}, 0x2, 0x1}, {0x1, 0x0, {0x0, 0x0, 0x2}, {0x0, 0xff, 0x1}, 0xfe}], 0x40) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r3, {0xfffd, 0x10}, {0x1, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x840) 4m4.863303006s ago: executing program 3 (id=75): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x2}, &(0x7f0000001fee)='R\x10rust\xe3c*s\xa8rVid:\xc4e', 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x7, 0x4, 0x20, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_GET_MAP_INFO(0x3, &(0x7f00000006c0)={r1, 0x0, 0x0}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f00000000c0)='./file0\x00') renameat2(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./file5\x00', 0x2) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r3 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r4, &(0x7f0000002080)={0xfc, {"a2336848149e516d4b5e071887f70e09d038e7ff7fc6e5539b0d500a8b089b3f383563030890e0879b0a71c6e70a9b334a959b669a242f0a0af3988f7ef319520100ffe8d178708c523c921b1b3e31070d0773090acd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9903f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928d28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f2730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b81305c038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849cd9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484539ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1f93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb8843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b2804563407308c58c89d9e99c81769177e6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463373b4b87c9050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e080000007ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e3933ed07c2b8081c128ad2706f48261ff07000000000000613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59500000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006) r5 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r5, 0x4020565a, &(0x7f00000000c0)={0x3, 0x980900, 0x3}) ioctl$VIDIOC_QUERYMENU(r5, 0xc008561c, &(0x7f0000000000)={0x980900, 0x7, @value=0x2}) io_submit(0x0, 0x1, &(0x7f0000000340)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x6, r0, &(0x7f00000005c0), 0x0, 0xce49}]) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f00000004c0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x60}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0x0, 0x8}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x700}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x0, 0x6, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0x50}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x20}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0x7, 0x0}, {0x18, 0x2, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r6, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={0x0}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) 4m4.71883046s ago: executing program 32 (id=75): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x2}, &(0x7f0000001fee)='R\x10rust\xe3c*s\xa8rVid:\xc4e', 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x7, 0x4, 0x20, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_GET_MAP_INFO(0x3, &(0x7f00000006c0)={r1, 0x0, 0x0}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f00000000c0)='./file0\x00') renameat2(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./file5\x00', 0x2) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r3 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r4, &(0x7f0000002080)={0xfc, {"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", 0x1000}}, 0x1006) r5 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r5, 0x4020565a, &(0x7f00000000c0)={0x3, 0x980900, 0x3}) ioctl$VIDIOC_QUERYMENU(r5, 0xc008561c, &(0x7f0000000000)={0x980900, 0x7, @value=0x2}) io_submit(0x0, 0x1, &(0x7f0000000340)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x6, r0, &(0x7f00000005c0), 0x0, 0xce49}]) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f00000004c0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x60}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0x0, 0x8}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x700}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x0, 0x6, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0x50}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x20}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0x7, 0x0}, {0x18, 0x2, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r6, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={0x0}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) 2m25.022250381s ago: executing program 2 (id=377): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000001c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x8a, 0x3}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = dup3(r1, r0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) mkdirat(0xffffffffffffffff, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000580)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x78, 0x18, &(0x7f0000000980)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x1, 0x3}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x800000, 0x22}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x0, 0x39}}, &(0x7f0000000240)={0x0, 0x28, 0x50}}, 0x1000}], 0x0, 0x0, 0x0}) 2m24.913681009s ago: executing program 2 (id=378): syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x6, 0x2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x5}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$pptp(0x18, 0x1, 0x2) connect$pptp(r3, &(0x7f0000000040)={0x18, 0x2, {0xfffc, @initdev={0xac, 0x1e, 0x5, 0x0}}}, 0x1e) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) socket$inet6(0xa, 0x80002, 0x0) r8 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_S_FMT(r8, 0xc0d05605, &(0x7f0000000180)={0x1, @pix={0x200, 0x2f5380, 0x41414770, 0x58595556, 0x425, 0x10001, 0xa, 0x9e0, 0x1, 0x3, 0x0, 0x7}}) quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0) ioctl$VIDIOC_DBG_S_REGISTER(r8, 0x4038564f, &(0x7f0000000340)={{0x4, @name="f43089c266b41e0b000022001cad5a0f8db8cd620800"}, 0x3c, 0x4, 0x47}) 2m23.114122053s ago: executing program 2 (id=382): syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x6, 0x2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x5}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$pptp(0x18, 0x1, 0x2) connect$pptp(r3, &(0x7f0000000040)={0x18, 0x2, {0xfffc, @initdev={0xac, 0x1e, 0x5, 0x0}}}, 0x1e) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) socket$inet6(0xa, 0x80002, 0x0) r8 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_S_FMT(r8, 0xc0d05605, &(0x7f0000000180)={0x1, @pix={0x200, 0x2f5380, 0x41414770, 0x58595556, 0x425, 0x10001, 0xa, 0x9e0, 0x1, 0x3, 0x0, 0x7}}) quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0) ioctl$VIDIOC_DBG_S_REGISTER(r8, 0x4038564f, &(0x7f0000000340)={{0x4, @name="f43089c266b41e0b000022001cad5a0f8db8cd620800"}, 0x3c, 0x4, 0x47}) 2m21.227982038s ago: executing program 2 (id=388): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r1 = getpid() mmap$KVM_VCPU(&(0x7f0000ffa000/0x4000)=nil, 0x0, 0x1000008, 0x20010, r0, 0x0) r2 = syz_pidfd_open(r1, 0x0) prlimit64(r1, 0xc, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = signalfd(0xffffffffffffffff, 0x0, 0x0) fcntl$setownex(r4, 0xf, 0x0) faccessat2(r4, &(0x7f0000000100)='.\x00', 0x20, 0x600) setpgid(r3, 0x0) setpgid(0x0, r3) mount$9p_fd(0x0, 0x0, &(0x7f0000000240), 0x10000, &(0x7f00000002c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB="2c77660600000000e1ffff06d04b255c8e0debc8e3efa49c8ffc", @ANYRESHEX=r2, @ANYBLOB=',\x00']) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bpf(0x0, 0x0, &(0x7f0000000180), 0x48004, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0a00000000100bd97d0900ba242b5222838900004b9905c8548a7e822931c858725b7461419c6f56dd8d605c21120683bf71e814beb178a53846", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000001c0)=@generic={&(0x7f00000000c0)='./file0/file0\x00', r5}, 0x18) r6 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_READY(r6, 0x9360, 0x800000000000001) ioctl$KVM_SET_MSRS(r0, 0xc008ae88, &(0x7f0000000340)=ANY=[@ANYBLOB="05000000000000e672000040"]) mq_open(&(0x7f0000000200)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x800, 0x109, &(0x7f0000000000)={0x2, 0x0, 0x6}) 2m21.14284443s ago: executing program 2 (id=389): syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x6, 0x2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x5}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$pptp(0x18, 0x1, 0x2) connect$pptp(r3, &(0x7f0000000040)={0x18, 0x2, {0xfffc, @initdev={0xac, 0x1e, 0x5, 0x0}}}, 0x1e) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) socket$inet6(0xa, 0x80002, 0x0) r8 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_S_FMT(r8, 0xc0d05605, &(0x7f0000000180)={0x1, @pix={0x200, 0x2f5380, 0x41414770, 0x58595556, 0x425, 0x10001, 0xa, 0x9e0, 0x1, 0x3, 0x0, 0x7}}) quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0) ioctl$VIDIOC_DBG_S_REGISTER(r8, 0x4038564f, &(0x7f0000000340)={{0x4, @name="f43089c266b41e0b000022001cad5a0f8db8cd620800"}, 0x3c, 0x4, 0x47}) 2m20.951090245s ago: executing program 2 (id=391): syz_emit_ethernet(0x4e, &(0x7f0000000780)={@broadcast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00 \x00', 0x18, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, @local, {[], @mld={0x187, 0x0, 0x0, 0x0, 0x0, @local}}}}}}, 0x0) 2m20.880655893s ago: executing program 33 (id=391): syz_emit_ethernet(0x4e, &(0x7f0000000780)={@broadcast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00 \x00', 0x18, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, @local, {[], @mld={0x187, 0x0, 0x0, 0x0, 0x0, @local}}}}}}, 0x0) 5.646143393s ago: executing program 5 (id=840): close(0x3) syz_open_dev$midi(0x0, 0x3, 0x88c02) r0 = syz_io_uring_setup(0x88b, &(0x7f0000000140)={0x0, 0x1000aede, 0x40, 0x1, 0xffdfffff}, &(0x7f0000000000), &(0x7f0000000040)) r1 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x484, &(0x7f0000000000)=""/108, 0x0) io_uring_enter(r0, 0x47f4, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r2) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000ffdbdf254400000008000300", @ANYRES32, @ANYRESOCT=r3], 0x38}, 0x1, 0x0, 0x0, 0x45}, 0x14) socket$inet_smc(0x2b, 0x1, 0x0) syz_emit_vhci(0x0, 0x16) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x26e1, 0x0) close(r4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) ioctl$SIOCSIFHWADDR(r4, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100008dffff"}) getsockopt$X25_QBITINCL(0xffffffffffffffff, 0x106, 0x1, &(0x7f0000000100), &(0x7f0000000140)=0x4) 5.548758462s ago: executing program 5 (id=841): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000b80), r0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x2, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x800, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x0, 0xffffffff}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042) writev(r3, &(0x7f0000000040)=[{&(0x7f0000000640)="f3", 0x1}], 0x1) read$msr(r3, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000005c0), &(0x7f0000000600)=0xc) r6 = socket$packet(0x11, 0x2, 0x300) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="30000000100001000000ce6bb9092919507f3400", @ANYRES32=0x0, @ANYBLOB="000000000000000408000a00", @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) openat$nvme_fabrics(0xffffff9c, &(0x7f0000000300), 0x10480, 0x0) recvmmsg(r6, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0x39}, 0x0, 0x1, 0x0, 0x4}, 0x0) 5.510602274s ago: executing program 4 (id=843): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000080)='cpu.pressure\x00', 0x2, 0x0) pwritev(r4, &(0x7f0000000000)=[{0x0}], 0x1, 0x2, 0x1) r5 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) open(0x0, 0x60840, 0x1d2) r6 = socket$inet(0xa, 0x801, 0x84) sendto$inet(r6, &(0x7f0000000080)='w', 0x34000, 0x0, &(0x7f00000000c0)={0x2, 0x0, @rand_addr=0x64010102}, 0x10) r7 = socket$netlink(0x10, 0x3, 0x4) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, 0x0, 0x0) writev(r7, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7", 0x3e}], 0x1) 4.661754898s ago: executing program 0 (id=845): syz_init_net_socket$x25(0x9, 0x5, 0x0) getsockopt$EBT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd74) syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x7079, 0x0, 0x14, 0x28b, 0x0, r1}, &(0x7f0000000140)=0x0, &(0x7f0000000280)=0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)={0x20, r6, 0x301, 0xfffffffc, 0x0, {0x2b}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}}, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0xf0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x48, 0x0, r7, 0x21eae}}, 0x20}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x3}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x26e1, 0x0) close(r10) r11 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_emit_ethernet(0x7e, &(0x7f0000000540)={@local, @random="ca8d6f7ea8db", @void, {@llc={0x4, {@snap={0x0, 0xaa, "4689", "6ab047", 0x11, "7616565c399f45ee77d05bbf98c6c92c919031c4ec4a82f14243ded16a4ad2982abffd03261a6b73bec121b14daa9bb220cc84e79c8f979abe3db208c3c9ccd7267f02079c25a279efdc053663420c8f51fa62512547a4353bb0ac05013c0ed7f91e702e21ac33"}}}}}, 0x0) recvmsg(r11, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) ioctl$SIOCSIFHWADDR(r10, 0x8b06, &(0x7f0000000000)={'wlan1\x00', @random="060000000010"}) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001000010000003a194618000000008553", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r10, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0), 0x106, 0x5}}, 0x20) r12 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r12, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x110, 0x0, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) 4.561519524s ago: executing program 4 (id=846): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'lblcr\x00'}, 0x2c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xb3, &(0x7f0000000140)=""/179, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000002540)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff, 0x3c, 0x0, @void}, 0x10) r4 = shmget$private(0x0, 0x9000, 0x0, &(0x7f0000ff7000/0x9000)=nil) shmat(r4, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r4, &(0x7f0000ff9000/0x1000)=nil, 0x5000) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8001, &(0x7f0000000000)=0x6, 0x8, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x90}, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x0, {0x21, @broadcast, 'vlan1\x00'}}, 0x1e) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="30000000190001000000000000000000021800000000ff00"], 0x30}}, 0x8000) r6 = syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x9300) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) ioctl$HIDIOCGRDESC(r6, 0x90044802, &(0x7f0000000240)) 4.168073637s ago: executing program 5 (id=847): socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x1e, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, 0x0) r4 = dup(0xffffffffffffffff) write$6lowpan_enable(r4, 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) capset(&(0x7f0000000280)={0x19980330}, &(0x7f0000000300)={0x2, 0x7, 0xc, 0x0, 0x4, 0x7}) connect$inet(r5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000340)=[{0x20, 0xc, 0x77, 0xfffff024}, {0x28}, {0x6, 0x0, 0x0, 0x2}]}, 0x8) sendmmsg(r6, &(0x7f0000001c00), 0x400000000000159, 0x40840) r8 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r8, 0x29, 0x4e, &(0x7f0000000040)=0x9, 0x4) syz_emit_ethernet(0x4e, &(0x7f0000000780)={@broadcast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00 \x00', 0x18, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, @local, {[], @mld={0x187, 0x0, 0x0, 0x0, 0x0, @local}}}}}}, 0x0) 3.844532112s ago: executing program 1 (id=848): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000001c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x8a, 0x3}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) mkdirat(0xffffffffffffffff, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000580), 0x0, 0x0, 0x0}) 3.77764816s ago: executing program 0 (id=849): close(0x3) syz_open_dev$midi(0x0, 0x3, 0x88c02) r0 = syz_io_uring_setup(0x88b, &(0x7f0000000140)={0x0, 0x1000aede, 0x40, 0x1, 0xffdfffff}, &(0x7f0000000000), &(0x7f0000000040)) r1 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x484, &(0x7f0000000000)=""/108, 0x0) io_uring_enter(r0, 0x47f4, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r2) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000ffdbdf254400000008000300", @ANYRES32, @ANYRESOCT=r3], 0x38}, 0x1, 0x0, 0x0, 0x45}, 0x14) socket$inet_smc(0x2b, 0x1, 0x0) syz_emit_vhci(0x0, 0x16) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x26e1, 0x0) close(r4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) ioctl$SIOCSIFHWADDR(r4, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100008dffff"}) getsockopt$X25_QBITINCL(0xffffffffffffffff, 0x106, 0x1, &(0x7f0000000100), &(0x7f0000000140)=0x4) 3.712430317s ago: executing program 1 (id=850): syz_init_net_socket$x25(0x9, 0x5, 0x0) getsockopt$EBT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd74) syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x7079, 0x0, 0x14, 0x28b, 0x0, r1}, &(0x7f0000000140)=0x0, &(0x7f0000000280)=0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)={0x20, r6, 0x301, 0xfffffffc, 0x0, {0x2b}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}}, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0xf0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x48, 0x0, r7, 0x21eae}}, 0x20}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x3}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r9, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00'}) close(0xffffffffffffffff) r10 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_emit_ethernet(0x7e, &(0x7f0000000540)={@local, @random="ca8d6f7ea8db", @void, {@llc={0x4, {@snap={0x0, 0xaa, "4689", "6ab047", 0x11, "7616565c399f45ee77d05bbf98c6c92c919031c4ec4a82f14243ded16a4ad2982abffd03261a6b73bec121b14daa9bb220cc84e79c8f979abe3db208c3c9ccd7267f02079c25a279efdc053663420c8f51fa62512547a4353bb0ac05013c0ed7f91e702e21ac33"}}}}}, 0x0) recvmsg(r10, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b06, &(0x7f0000000000)={'wlan1\x00', @random="060000000010"}) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001000010000003a194618000000008553", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0), 0x106, 0x5}}, 0x20) r11 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r11, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x110, 0x0, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) 3.712128955s ago: executing program 0 (id=851): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x50}, 0x9c) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000000)=0x29, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r4 = userfaultfd(0x801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='loginuid\x00') ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r4, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) r5 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000000)=0x3) ioctl$TIOCSSOFTCAR(r6, 0x80047437, 0x0) r7 = add_key$keyring(&(0x7f0000000300), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) add_key$user(&(0x7f0000000080), &(0x7f0000000100)={'syz', 0x0}, &(0x7f00000001c0)="a6", 0x1, r7) keyctl$KEYCTL_MOVE(0x1e, r5, 0xffffffffffffffff, r7, 0x1) 3.552565664s ago: executing program 4 (id=852): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r1 = getpid() mmap$KVM_VCPU(&(0x7f0000ffa000/0x4000)=nil, 0x0, 0x1000008, 0x20010, r0, 0x0) r2 = syz_pidfd_open(r1, 0x0) prlimit64(r1, 0xc, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = signalfd(0xffffffffffffffff, 0x0, 0x0) fcntl$setownex(r4, 0xf, 0x0) faccessat2(r4, &(0x7f0000000100)='.\x00', 0x20, 0x600) setpgid(r3, 0x0) setpgid(0x0, r3) mount$9p_fd(0x0, &(0x7f0000000280)='./file1\x00', &(0x7f0000000240), 0x10000, &(0x7f00000002c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB="2c77660600000000e1ffff06d04b255c8e0debc8e3efa49c8f", @ANYRESHEX=r2, @ANYBLOB=',\x00']) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bpf(0x0, 0x0, &(0x7f0000000180), 0x48004, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0a00000000100bd97d0900ba242b5222838900004b9905c8548a7e822931c858725b7461419c6f56dd8d605c21120683bf71e814beb178a53846", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000001c0)=@generic={&(0x7f00000000c0)='./file0/file0\x00', r5}, 0x18) r6 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_READY(r6, 0x9360, 0x800000000000001) ioctl$KVM_SET_MSRS(r0, 0xc008ae88, &(0x7f0000000340)=ANY=[@ANYBLOB="05000000000000e672000040"]) mq_open(&(0x7f0000000200)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x800, 0x109, &(0x7f0000000000)={0x2, 0x0, 0x6}) 3.182412665s ago: executing program 5 (id=853): setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x50}, 0x9c) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x8c, 0x30, 0x1, 0x0, 0x0, {}, [{0x78, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000000)=0x3) ioctl$TIOCSSOFTCAR(r4, 0x80047437, 0x0) 2.908251794s ago: executing program 5 (id=854): mkdir(0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x5, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socket$igmp6(0xa, 0x3, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) dup(r3) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff), 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$inet_udplite(0x2, 0x2, 0x88) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r5 = socket$netlink(0x10, 0x3, 0x4) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x4, 0x2ffffffff}, 0x2e) syz_80211_join_ibss(&(0x7f0000000100)='wlan0\x00', 0x0, 0x0, 0x1) syz_clone3(&(0x7f00000003c0)={0x385200080, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r4}}, 0x58) 2.759344036s ago: executing program 1 (id=855): syz_init_net_socket$x25(0x9, 0x5, 0x0) getsockopt$EBT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd74) syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x7079, 0x0, 0x14, 0x28b, 0x0, r1}, &(0x7f0000000140)=0x0, &(0x7f0000000280)=0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)={0x20, r6, 0x301, 0xfffffffc, 0x0, {0x2b}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}}, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0xf0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x48, 0x0, r7, 0x21eae}}, 0x20}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x3}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r9, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00'}) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x26e1, 0x0) r11 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_emit_ethernet(0x7e, &(0x7f0000000540)={@local, @random="ca8d6f7ea8db", @void, {@llc={0x4, {@snap={0x0, 0xaa, "4689", "6ab047", 0x11, "7616565c399f45ee77d05bbf98c6c92c919031c4ec4a82f14243ded16a4ad2982abffd03261a6b73bec121b14daa9bb220cc84e79c8f979abe3db208c3c9ccd7267f02079c25a279efdc053663420c8f51fa62512547a4353bb0ac05013c0ed7f91e702e21ac33"}}}}}, 0x0) recvmsg(r11, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) ioctl$SIOCSIFHWADDR(r10, 0x8b06, &(0x7f0000000000)={'wlan1\x00', @random="060000000010"}) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001000010000003a194618000000008553", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r10, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0), 0x106, 0x5}}, 0x20) r12 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r12, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x110, 0x0, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) 2.702564086s ago: executing program 4 (id=856): mkdir(0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x5, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socket$igmp6(0xa, 0x3, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000847fff), 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$inet_udplite(0x2, 0x2, 0x88) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r5 = socket$netlink(0x10, 0x3, 0x4) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x4, 0x2ffffffff}, 0x2e) syz_80211_join_ibss(&(0x7f0000000100)='wlan0\x00', 0x0, 0x0, 0x1) syz_clone3(&(0x7f00000003c0)={0x385200080, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r4}}, 0x58) 2.693960932s ago: executing program 0 (id=857): mkdir(0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x5, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socket$igmp6(0xa, 0x3, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) dup(r3) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff), 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$inet_udplite(0x2, 0x2, 0x88) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r5 = socket$netlink(0x10, 0x3, 0x4) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x4, 0x2ffffffff}, 0x2e) syz_80211_join_ibss(&(0x7f0000000100)='wlan0\x00', 0x0, 0x0, 0x1) syz_clone3(&(0x7f00000003c0)={0x385200080, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r4}}, 0x58) 2.023928169s ago: executing program 1 (id=858): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000001c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x8a, 0x3}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) mkdirat(0xffffffffffffffff, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000580), 0x0, 0x0, 0x0}) 1.952193695s ago: executing program 1 (id=859): creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39ddd8) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0xaab, 0x2}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x1) r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x25dfdbfb, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x8, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}, @m_ife={0x48, 0x3, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$nl_route(0x10, 0x3, 0x0) close(r5) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x2, 0x2, 0x0, 0x3, 0x11, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb}, @sadb_x_sa2={0x2, 0x9}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, @sadb_x_sec_ctx={0x1, 0x18, 0x4}]}, 0x88}}, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x2000011, 0xffffffffffffffff, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write$qrtrtun(r0, &(0x7f0000000300)="ca0e808bb35bdabb", 0x8) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r7, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], 0x0, 0x0, 0x1}}, 0x3c) 978.020512ms ago: executing program 0 (id=860): close(0x3) syz_open_dev$midi(0x0, 0x3, 0x88c02) r0 = syz_io_uring_setup(0x88b, &(0x7f0000000140)={0x0, 0x1000aede, 0x40, 0x1, 0xffdfffff}, &(0x7f0000000000), &(0x7f0000000040)) r1 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x484, &(0x7f0000000000)=""/108, &(0x7f0000000080)=0x18) io_uring_enter(r0, 0x47f4, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(0x0, r2) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000ffdbdf254400000008000300", @ANYRES32, @ANYRESOCT=r3], 0x38}, 0x1, 0x0, 0x0, 0x45}, 0x14) socket$inet_smc(0x2b, 0x1, 0x0) syz_emit_vhci(0x0, 0x16) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x26e1, 0x0) close(r4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) ioctl$SIOCSIFHWADDR(r4, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100008dffff"}) getsockopt$X25_QBITINCL(0xffffffffffffffff, 0x106, 0x1, &(0x7f0000000100), &(0x7f0000000140)=0x4) 938.419784ms ago: executing program 5 (id=861): r0 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39ddd8) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0xaab, 0x2}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x1) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x25dfdbfb, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x8, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}, @m_ife={0x48, 0x3, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000280)={0x2}) socket$nl_route(0x10, 0x3, 0x0) close(r6) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x2, 0x2, 0x0, 0x3, 0x11, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb}, @sadb_x_sa2={0x2, 0x9}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, @sadb_x_sec_ctx={0x1, 0x18, 0x4}]}, 0x88}}, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x2000011, 0xffffffffffffffff, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000006c0)={r8, 0x0, 0xea, 0x82, &(0x7f00000003c0)="fbf03de78450c2ce51c0b7af95051eb37fa1279474cdda074b4eb0d0dfd3bfc1974ad9c1dae5586bcfda6a72c77c5e7ed80d9af1e07b283744cbf4355bbdf8681fe86e4a61f0753ab974d2140eff9dca78f16969a3be9dd82a048329477848e15dcf7df63ff26dfd9abeae3d4a7f0ffc6f10c6e2fc6c23d1d8148955e16b21995c758cd194c9adf8984ec0914b8014f27222118c729c666b46b1b5f9be74bb7e682ebae86144694a4b3837573a9102f387e6fc2a8482bf7c2056d483d2630352e7f106619eabd8e2c216d4da264e4834ef4d567b01bdb41af585a45d1dc8c26dd1d9de9b82bb161df2ac", &(0x7f00000004c0)=""/130, 0x8001, 0x0, 0xa0, 0x1e, &(0x7f0000000600)="70a0908657b8e3cc64a1ed8c6326f6a9198c2c8dcae2e37def5db1156ff8277ac6563e53e88f505d2917ec8af3b1ddbc88793cf026ceb9b90a4241e1598df3822718317aebd649ce60a76a03439cc3b6b35a199a99716ee6e841df014526dcbdb568261b44a528cae8aecc3e5f3ae52734b7ffa8e5fd5cf68d0d4e8a51466061a7f326d46b77420796b50db74745a1762fc39642e5b162421763e4f2ec8df27d", &(0x7f0000000580)="546a7abf9a443bc7697c2778fdbe9eb0dd3f5bfbf1f5db5ef4033f90124c", 0x4, 0x0, 0x9f41}, 0x4c) write$qrtrtun(r1, &(0x7f0000000300)="ca0e808bb35bdabb", 0x8) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r8, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], 0x0, 0x0, 0x1}}, 0x3c) 918.177486ms ago: executing program 4 (id=862): syz_init_net_socket$x25(0x9, 0x5, 0x0) getsockopt$EBT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd74) syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x7079, 0x0, 0x14, 0x28b, 0x0, r1}, &(0x7f0000000140)=0x0, &(0x7f0000000280)=0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)={0x20, r6, 0x301, 0xfffffffc, 0x0, {0x2b}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}}, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0xf0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x48, 0x0, r7, 0x21eae}}, 0x20}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x3}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r9, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00'}) close(0xffffffffffffffff) r10 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_emit_ethernet(0x7e, &(0x7f0000000540)={@local, @random="ca8d6f7ea8db", @void, {@llc={0x4, {@snap={0x0, 0xaa, "4689", "6ab047", 0x11, "7616565c399f45ee77d05bbf98c6c92c919031c4ec4a82f14243ded16a4ad2982abffd03261a6b73bec121b14daa9bb220cc84e79c8f979abe3db208c3c9ccd7267f02079c25a279efdc053663420c8f51fa62512547a4353bb0ac05013c0ed7f91e702e21ac33"}}}}}, 0x0) recvmsg(r10, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b06, &(0x7f0000000000)={'wlan1\x00', @random="060000000010"}) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001000010000003a194618000000008553", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0), 0x106, 0x5}}, 0x20) r11 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r11, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x110, 0x0, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) 902.773873ms ago: executing program 0 (id=863): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000b80), r0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x2, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x800, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x0, 0xffffffff}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042) writev(r3, &(0x7f0000000040)=[{&(0x7f0000000640)="f3", 0x1}], 0x1) read$msr(r3, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000005c0), &(0x7f0000000600)=0xc) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="30000000100001000000ce6bb9092919507f3400", @ANYRES32=0x0, @ANYBLOB="000000000000000408000a00", @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) r7 = openat$nvme_fabrics(0xffffff9c, &(0x7f0000000300), 0x10480, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x8, &(0x7f0000000340)=0x81, 0x4) recvmmsg(0xffffffffffffffff, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0x39}, 0x0, 0x1, 0x0, 0x4}, 0x0) 706.612902ms ago: executing program 1 (id=864): r0 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39ddd8) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0xaab, 0x2}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x1) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x25dfdbfb, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x8, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}, @m_ife={0x48, 0x3, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000280)={0x2}) socket$nl_route(0x10, 0x3, 0x0) close(r6) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x2, 0x2, 0x0, 0x3, 0x11, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb}, @sadb_x_sa2={0x2, 0x9}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, @sadb_x_sec_ctx={0x1, 0x18, 0x4}]}, 0x88}}, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x2000011, 0xffffffffffffffff, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000006c0)={r8, 0x0, 0xea, 0x82, &(0x7f00000003c0)="fbf03de78450c2ce51c0b7af95051eb37fa1279474cdda074b4eb0d0dfd3bfc1974ad9c1dae5586bcfda6a72c77c5e7ed80d9af1e07b283744cbf4355bbdf8681fe86e4a61f0753ab974d2140eff9dca78f16969a3be9dd82a048329477848e15dcf7df63ff26dfd9abeae3d4a7f0ffc6f10c6e2fc6c23d1d8148955e16b21995c758cd194c9adf8984ec0914b8014f27222118c729c666b46b1b5f9be74bb7e682ebae86144694a4b3837573a9102f387e6fc2a8482bf7c2056d483d2630352e7f106619eabd8e2c216d4da264e4834ef4d567b01bdb41af585a45d1dc8c26dd1d9de9b82bb161df2ac", &(0x7f00000004c0)=""/130, 0x8001, 0x0, 0xa0, 0x1e, &(0x7f0000000600)="70a0908657b8e3cc64a1ed8c6326f6a9198c2c8dcae2e37def5db1156ff8277ac6563e53e88f505d2917ec8af3b1ddbc88793cf026ceb9b90a4241e1598df3822718317aebd649ce60a76a03439cc3b6b35a199a99716ee6e841df014526dcbdb568261b44a528cae8aecc3e5f3ae52734b7ffa8e5fd5cf68d0d4e8a51466061a7f326d46b77420796b50db74745a1762fc39642e5b162421763e4f2ec8df27d", &(0x7f0000000580)="546a7abf9a443bc7697c2778fdbe9eb0dd3f5bfbf1f5db5ef4033f90124c", 0x4, 0x0, 0x9f41}, 0x4c) write$qrtrtun(r1, &(0x7f0000000300)="ca0e808bb35bdabb", 0x8) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r8, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], 0x0, 0x0, 0x1}}, 0x3c) 0s ago: executing program 4 (id=865): syz_init_net_socket$x25(0x9, 0x5, 0x0) getsockopt$EBT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd74) syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x7079, 0x0, 0x14, 0x28b, 0x0, r1}, &(0x7f0000000140)=0x0, &(0x7f0000000280)=0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)={0x20, r6, 0x301, 0xfffffffc, 0x0, {0x2b}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}}, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0xf0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x48, 0x0, r7, 0x21eae}}, 0x20}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r9, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00'}) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x26e1, 0x0) close(r10) r11 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_emit_ethernet(0x7e, &(0x7f0000000540)={@local, @random="ca8d6f7ea8db", @void, {@llc={0x4, {@snap={0x0, 0xaa, "4689", "6ab047", 0x11, "7616565c399f45ee77d05bbf98c6c92c919031c4ec4a82f14243ded16a4ad2982abffd03261a6b73bec121b14daa9bb220cc84e79c8f979abe3db208c3c9ccd7267f02079c25a279efdc053663420c8f51fa62512547a4353bb0ac05013c0ed7f91e702e21ac33"}}}}}, 0x0) recvmsg(r11, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) ioctl$SIOCSIFHWADDR(r10, 0x8b06, &(0x7f0000000000)={'wlan1\x00', @random="060000000010"}) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001000010000003a194618000000008553", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r10, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0), 0x106, 0x5}}, 0x20) r12 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r12, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x110, 0x0, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:35362' (ED25519) to the list of known hosts. [ 40.908388][ T5867] cgroup: Unknown subsys name 'net' [ 41.033625][ T5867] cgroup: Unknown subsys name 'cpuset' [ 41.038922][ T5867] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 41.915527][ T5867] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 45.378671][ T5963] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 45.391829][ T5961] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 45.394130][ T5956] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 45.395023][ T5961] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 45.400446][ T5961] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 45.403302][ T5956] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 45.403726][ T5961] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 45.405962][ T5956] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 45.411293][ T5956] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 45.414518][ T5961] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 45.414674][ T5965] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 45.419273][ T5967] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 45.420330][ T5965] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 45.423767][ T5967] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 45.424460][ T5965] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 45.426681][ T5967] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 45.429071][ T5965] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 45.432913][ T5967] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 45.433317][ T5965] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 45.436351][ T5967] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 45.655119][ T5964] chnl_net:caif_netlink_parms(): no params data found [ 45.672333][ T5951] chnl_net:caif_netlink_parms(): no params data found [ 45.687638][ T5952] chnl_net:caif_netlink_parms(): no params data found [ 45.847411][ T5964] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.850637][ T5964] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.853116][ T5964] bridge_slave_0: entered allmulticast mode [ 45.856591][ T5964] bridge_slave_0: entered promiscuous mode [ 45.890195][ T5964] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.892890][ T5964] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.895186][ T5964] bridge_slave_1: entered allmulticast mode [ 45.897804][ T5964] bridge_slave_1: entered promiscuous mode [ 45.921321][ T5952] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.924091][ T5952] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.926861][ T5952] bridge_slave_0: entered allmulticast mode [ 45.929956][ T5952] bridge_slave_0: entered promiscuous mode [ 45.998298][ T5952] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.000744][ T5952] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.003054][ T5952] bridge_slave_1: entered allmulticast mode [ 46.005826][ T5952] bridge_slave_1: entered promiscuous mode [ 46.024282][ T5958] chnl_net:caif_netlink_parms(): no params data found [ 46.029426][ T5951] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.032005][ T5951] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.034365][ T5951] bridge_slave_0: entered allmulticast mode [ 46.037008][ T5951] bridge_slave_0: entered promiscuous mode [ 46.073597][ T5964] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.076710][ T5951] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.079008][ T5951] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.081412][ T5951] bridge_slave_1: entered allmulticast mode [ 46.084145][ T5951] bridge_slave_1: entered promiscuous mode [ 46.087990][ T5952] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.098202][ T5964] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.148287][ T5952] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.184330][ T5951] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.207729][ T5964] team0: Port device team_slave_0 added [ 46.211970][ T5951] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.237670][ T5964] team0: Port device team_slave_1 added [ 46.266688][ T5952] team0: Port device team_slave_0 added [ 46.304962][ T5951] team0: Port device team_slave_0 added [ 46.308168][ T5952] team0: Port device team_slave_1 added [ 46.326315][ T5964] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.328530][ T5964] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.336790][ T5964] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.344488][ T5951] team0: Port device team_slave_1 added [ 46.420401][ T5964] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.422840][ T5964] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.430293][ T5964] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.467650][ T5952] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.469738][ T5952] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.479952][ T5952] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.484897][ T5952] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.487464][ T5952] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.496488][ T5952] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.500120][ T5958] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.503205][ T5958] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.505359][ T5958] bridge_slave_0: entered allmulticast mode [ 46.508521][ T5958] bridge_slave_0: entered promiscuous mode [ 46.518342][ T5951] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.521348][ T5951] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.530369][ T5951] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.539875][ T5951] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.542711][ T5951] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.552923][ T5951] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.561217][ T5958] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.563924][ T5958] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.566147][ T5958] bridge_slave_1: entered allmulticast mode [ 46.568754][ T5958] bridge_slave_1: entered promiscuous mode [ 46.614827][ T5958] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.657332][ T5958] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.723045][ T5951] hsr_slave_0: entered promiscuous mode [ 46.726309][ T5951] hsr_slave_1: entered promiscuous mode [ 46.798429][ T5952] hsr_slave_0: entered promiscuous mode [ 46.800792][ T5952] hsr_slave_1: entered promiscuous mode [ 46.802860][ T5952] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 46.805360][ T5952] Cannot create hsr debugfs directory [ 46.809559][ T5958] team0: Port device team_slave_0 added [ 46.815963][ T5964] hsr_slave_0: entered promiscuous mode [ 46.819123][ T5964] hsr_slave_1: entered promiscuous mode [ 46.822153][ T5964] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 46.825293][ T5964] Cannot create hsr debugfs directory [ 46.865212][ T5958] team0: Port device team_slave_1 added [ 46.993686][ T5958] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.995946][ T5958] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.006340][ T5958] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.013826][ T5958] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.016629][ T5958] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.027011][ T5958] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.170069][ T5958] hsr_slave_0: entered promiscuous mode [ 47.175732][ T5958] hsr_slave_1: entered promiscuous mode [ 47.178537][ T5958] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 47.183170][ T5958] Cannot create hsr debugfs directory [ 47.424985][ T5951] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 47.431461][ T5951] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 47.437684][ T5951] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 47.449260][ T5951] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 47.471294][ T5965] Bluetooth: hci0: command tx timeout [ 47.480965][ T5965] Bluetooth: hci3: command tx timeout [ 47.483756][ T5965] Bluetooth: hci1: command tx timeout [ 47.486190][ T5965] Bluetooth: hci2: command tx timeout [ 47.490244][ T5964] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 47.494405][ T5964] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 47.498385][ T5964] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 47.502855][ T5964] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 47.553596][ T5952] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 47.559091][ T5952] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 47.572724][ T5952] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 47.583921][ T5952] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 47.626540][ T5951] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.640072][ T5958] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 47.645577][ T5958] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 47.654695][ T5958] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 47.659243][ T5958] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 47.691915][ T5951] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.706659][ T1038] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.709026][ T1038] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.724550][ T5964] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.727727][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.729954][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.741327][ T5952] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.769893][ T5964] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.781353][ T5952] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.789352][ T5958] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.794248][ T1038] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.796554][ T1038] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.799760][ T1038] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.802070][ T1038] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.814089][ T1038] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.816375][ T1038] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.821970][ T1038] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.824165][ T1038] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.839106][ T5958] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.855746][ T1154] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.858711][ T1154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.873211][ T1154] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.876143][ T1154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.006629][ T5951] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.036418][ T5951] veth0_vlan: entered promiscuous mode [ 48.044026][ T5951] veth1_vlan: entered promiscuous mode [ 48.054239][ T5964] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.078457][ T5952] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.088790][ T5951] veth0_macvtap: entered promiscuous mode [ 48.098861][ T5951] veth1_macvtap: entered promiscuous mode [ 48.106889][ T5958] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.123256][ T5951] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.129400][ T5951] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.145889][ T5951] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.148628][ T5951] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.152862][ T5951] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.156435][ T5951] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.167538][ T5964] veth0_vlan: entered promiscuous mode [ 48.174664][ T5952] veth0_vlan: entered promiscuous mode [ 48.186290][ T5964] veth1_vlan: entered promiscuous mode [ 48.203382][ T5952] veth1_vlan: entered promiscuous mode [ 48.215650][ T5958] veth0_vlan: entered promiscuous mode [ 48.239415][ T5964] veth0_macvtap: entered promiscuous mode [ 48.243679][ T5958] veth1_vlan: entered promiscuous mode [ 48.250330][ T5964] veth1_macvtap: entered promiscuous mode [ 48.253677][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.256811][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.277002][ T5964] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.284499][ T5952] veth0_macvtap: entered promiscuous mode [ 48.287427][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.289101][ T5964] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.289866][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.305125][ T5964] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.307875][ T5964] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.310555][ T5964] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.314075][ T5964] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.319987][ T5952] veth1_macvtap: entered promiscuous mode [ 48.344654][ T5958] veth0_macvtap: entered promiscuous mode [ 48.351642][ T5958] veth1_macvtap: entered promiscuous mode [ 48.358115][ T5951] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 48.365867][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.369143][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.373093][ T5952] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.388443][ T5952] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.404374][ T5958] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.408520][ T5952] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.409426][ T1255] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.411456][ T5952] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.414616][ T1255] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.416600][ T5952] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.422165][ T5952] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.453873][ T5958] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.461996][ T5958] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.464925][ T5958] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.467672][ T5958] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.470550][ T5958] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.505114][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.508165][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.656597][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 48.656614][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 48.656716][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 48.656888][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 48.657726][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 48.658058][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 48.658713][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 48.678865][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 48.679256][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 48.679271][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 48.754563][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.757166][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.890259][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.896615][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.931748][ T1154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.940110][ T1154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.551225][ T5963] Bluetooth: hci0: command tx timeout [ 49.553409][ T5963] Bluetooth: hci2: command tx timeout [ 49.555188][ T5963] Bluetooth: hci1: command tx timeout [ 49.557068][ T5965] Bluetooth: hci3: command tx timeout [ 50.285471][ T6088] capability: warning: `syz.2.7' uses 32-bit capabilities (legacy support in use) [ 51.641327][ T5967] Bluetooth: hci3: command tx timeout [ 51.642737][ T5965] Bluetooth: hci1: command tx timeout [ 51.643876][ T5967] Bluetooth: hci2: command tx timeout [ 51.645361][ T5965] Bluetooth: hci0: command tx timeout [ 53.734046][ T5967] Bluetooth: hci2: command tx timeout [ 53.735955][ T5963] Bluetooth: hci1: command tx timeout [ 53.737767][ T5963] Bluetooth: hci3: command tx timeout [ 53.739632][ T5967] Bluetooth: hci0: command tx timeout [ 54.641649][ T6145] netlink: 28 bytes leftover after parsing attributes in process `syz.3.18'. [ 54.668681][ T6145] warning: `syz.3.18' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 65.608984][ T6264] netlink: 28 bytes leftover after parsing attributes in process `syz.2.48'. [ 70.855860][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 70.858833][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 74.183802][ T1255] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.513400][ T1255] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.603154][ T1255] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.644614][ T5965] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 74.647710][ T5965] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 74.650458][ T5965] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 74.654578][ T5965] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 74.661090][ T5965] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 74.683874][ T1255] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.869978][ T1255] bridge_slave_1: left allmulticast mode [ 74.872405][ T1255] bridge_slave_1: left promiscuous mode [ 74.874678][ T1255] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.880071][ T1255] bridge_slave_0: left allmulticast mode [ 74.883056][ T1255] bridge_slave_0: left promiscuous mode [ 74.885063][ T1255] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.273585][ T1255] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 75.279827][ T1255] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 75.289400][ T1255] bond0 (unregistering): Released all slaves [ 75.465006][ T6376] chnl_net:caif_netlink_parms(): no params data found [ 75.762547][ T6376] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.765559][ T6376] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.768677][ T6376] bridge_slave_0: entered allmulticast mode [ 75.781109][ T6376] bridge_slave_0: entered promiscuous mode [ 75.790289][ T6376] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.802949][ T6376] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.815777][ T6376] bridge_slave_1: entered allmulticast mode [ 75.838754][ T6376] bridge_slave_1: entered promiscuous mode [ 76.761346][ T5967] Bluetooth: hci2: command tx timeout [ 76.815625][ T6376] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.860471][ T6376] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.888285][ T1255] hsr_slave_0: left promiscuous mode [ 76.893197][ T1255] hsr_slave_1: left promiscuous mode [ 76.897121][ T1255] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 76.899614][ T1255] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 76.907479][ T1255] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 76.909837][ T1255] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 76.929565][ T1255] veth1_macvtap: left promiscuous mode [ 76.937979][ T1255] veth0_macvtap: left promiscuous mode [ 76.939885][ T1255] veth1_vlan: left promiscuous mode [ 76.941870][ T1255] veth0_vlan: left promiscuous mode [ 78.295122][ T1255] team0 (unregistering): Port device team_slave_1 removed [ 78.381309][ T1255] team0 (unregistering): Port device team_slave_0 removed [ 78.844886][ T5967] Bluetooth: hci2: command tx timeout [ 80.001479][ T6005] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 80.100737][ T6029] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 80.158266][ T6005] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 80.162223][ T6005] usb 7-1: can't read configurations, error -61 [ 80.261234][ T6029] usb 5-1: Using ep0 maxpacket: 8 [ 80.264873][ T6029] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 80.268404][ T6029] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 80.272797][ T6029] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 80.276019][ T6029] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 80.281778][ T6029] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 80.285693][ T6029] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.290852][ T6005] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 80.315502][ T6376] team0: Port device team_slave_0 added [ 80.321432][ T6376] team0: Port device team_slave_1 added [ 80.378122][ T6376] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.380498][ T6376] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.389593][ T6376] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.395037][ T6376] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.397360][ T6376] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.405615][ T6376] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.443392][ T6005] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 80.446622][ T6005] usb 7-1: can't read configurations, error -61 [ 80.449740][ T6005] usb usb7-port1: attempt power cycle [ 80.490289][ T6376] hsr_slave_0: entered promiscuous mode [ 80.494326][ T6376] hsr_slave_1: entered promiscuous mode [ 80.498282][ T6376] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.500992][ T6029] usb 5-1: usb_control_msg returned -32 [ 80.502493][ T6376] Cannot create hsr debugfs directory [ 80.504419][ T6029] usbtmc 5-1:16.0: can't read capabilities [ 80.543008][ T6029] usb 5-1: USB disconnect, device number 2 [ 80.709376][ T6376] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 80.717230][ T6376] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 80.722025][ T6376] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 80.726327][ T6376] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 80.774311][ T6376] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.783427][ T6376] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.800856][ T6005] usb 7-1: new full-speed USB device number 4 using dummy_hcd [ 80.821984][ T1255] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.823862][ T6005] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 80.825062][ T1255] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.828130][ T6005] usb 7-1: can't read configurations, error -61 [ 80.848947][ T1255] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.851838][ T1255] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.911398][ T5967] Bluetooth: hci2: command tx timeout [ 81.000890][ T6005] usb 7-1: new full-speed USB device number 5 using dummy_hcd [ 81.002466][ T6376] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.086236][ T53] cfg80211: failed to load regulatory.db [ 81.324594][ T6376] veth0_vlan: entered promiscuous mode [ 81.360269][ T6376] veth1_vlan: entered promiscuous mode [ 81.385223][ T6005] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 81.388417][ T6005] usb 7-1: can't read configurations, error -61 [ 81.391532][ T6005] usb usb7-port1: unable to enumerate USB device [ 81.449465][ T6376] veth0_macvtap: entered promiscuous mode [ 81.486406][ T6376] veth1_macvtap: entered promiscuous mode [ 81.526926][ T6376] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.602672][ T6376] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.621108][ T6376] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.631193][ T6376] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.633960][ T6376] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.636692][ T6376] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.089935][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.096012][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.123495][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.127368][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.000927][ T5967] Bluetooth: hci2: command tx timeout [ 84.244532][ T24] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 84.479713][ T24] usb 7-1: Using ep0 maxpacket: 8 [ 84.502924][ T24] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 84.510994][ T24] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 84.522964][ T24] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 84.532211][ T24] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 84.545966][ T24] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 84.560364][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.842991][ T24] usb 7-1: usb_control_msg returned -32 [ 84.844936][ T24] usbtmc 7-1:16.0: can't read capabilities [ 84.908706][ T24] usb 7-1: USB disconnect, device number 6 [ 86.380751][ T54] usb 7-1: new full-speed USB device number 7 using dummy_hcd [ 86.660465][ T54] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 87.173503][ T54] usb 7-1: can't read configurations, error -61 [ 87.300734][ T54] usb 7-1: new full-speed USB device number 8 using dummy_hcd [ 87.455187][ T6567] Zero length message leads to an empty skb [ 87.518489][ T54] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 87.939286][ T54] usb 7-1: can't read configurations, error -61 [ 88.107943][ T54] usb usb7-port1: attempt power cycle [ 88.450866][ T54] usb 7-1: new full-speed USB device number 9 using dummy_hcd [ 88.473738][ T54] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 88.476260][ T54] usb 7-1: can't read configurations, error -61 [ 88.600754][ T54] usb 7-1: new full-speed USB device number 10 using dummy_hcd [ 88.625990][ T54] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 88.629735][ T54] usb 7-1: can't read configurations, error -61 [ 88.633099][ T54] usb usb7-port1: unable to enumerate USB device [ 89.021823][ T6586] netlink: 28 bytes leftover after parsing attributes in process `syz.4.111'. [ 93.077304][ T6629] netlink: 28 bytes leftover after parsing attributes in process `syz.0.121'. [ 93.840899][ T53] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 94.021416][ T53] usb 6-1: Using ep0 maxpacket: 8 [ 94.050897][ T53] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 94.058860][ T53] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 94.072222][ T53] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 94.082270][ T53] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 94.087672][ T53] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 94.098173][ T53] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.325785][ T53] usb 6-1: usb_control_msg returned -32 [ 94.327640][ T53] usbtmc 6-1:16.0: can't read capabilities [ 94.339650][ T53] usb 6-1: USB disconnect, device number 2 [ 101.706477][ T6769] netlink: 4 bytes leftover after parsing attributes in process `syz.1.143'. [ 104.091190][ T5383] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 104.260832][ T5383] usb 5-1: Using ep0 maxpacket: 8 [ 104.269884][ T5383] usb 5-1: config 0 has no interfaces? [ 104.285820][ T5383] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 104.288813][ T5383] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.293062][ T5383] usb 5-1: Product: syz [ 104.294387][ T5383] usb 5-1: Manufacturer: syz [ 104.295934][ T5383] usb 5-1: SerialNumber: syz [ 104.312229][ T5383] usb 5-1: config 0 descriptor?? [ 104.334675][ T6810] netlink: 4 bytes leftover after parsing attributes in process `syz.1.153'. [ 104.535144][ T5383] usb 5-1: USB disconnect, device number 3 [ 106.260625][ T6834] syz.0.160: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 106.266748][ T6834] CPU: 3 UID: 0 PID: 6834 Comm: syz.0.160 Not tainted 6.16.0-rc1-syzkaller-00203-g4774cfe3543a #0 PREEMPT(full) [ 106.266764][ T6834] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 106.266772][ T6834] Call Trace: [ 106.266776][ T6834] [ 106.266782][ T6834] dump_stack_lvl+0x16c/0x1f0 [ 106.266802][ T6834] warn_alloc+0x248/0x3a0 [ 106.266848][ T6834] ? __pfx_warn_alloc+0x10/0x10 [ 106.266864][ T6834] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 106.266881][ T6834] ? stack_depot_save_flags+0x3e0/0xa40 [ 106.266903][ T6834] ? kasan_save_stack+0x42/0x60 [ 106.266918][ T6834] ? kasan_save_stack+0x33/0x60 [ 106.266933][ T6834] ? kasan_save_track+0x14/0x30 [ 106.266948][ T6834] ? xskq_create+0x52/0x1d0 [ 106.266961][ T6834] ? xsk_setsockopt+0x640/0x840 [ 106.266974][ T6834] ? do_sock_setsockopt+0x224/0x470 [ 106.266988][ T6834] ? xskq_create+0xfb/0x1d0 [ 106.267002][ T6834] __vmalloc_node_range_noprof+0xff5/0x14b0 [ 106.267021][ T6834] ? xskq_create+0xfb/0x1d0 [ 106.267038][ T6834] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 106.267057][ T6834] ? xskq_create+0xfb/0x1d0 [ 106.267071][ T6834] vmalloc_user_noprof+0x9e/0xe0 [ 106.267084][ T6834] ? xskq_create+0xfb/0x1d0 [ 106.267098][ T6834] xskq_create+0xfb/0x1d0 [ 106.267116][ T6834] xsk_setsockopt+0x640/0x840 [ 106.267130][ T6834] ? __pfx_xsk_setsockopt+0x10/0x10 [ 106.267144][ T6834] ? __pfx_aa_sk_perm+0x10/0x10 [ 106.267158][ T6834] ? errseq_sample+0x53/0x70 [ 106.267177][ T6834] ? __pfx_xsk_setsockopt+0x10/0x10 [ 106.267191][ T6834] do_sock_setsockopt+0x224/0x470 [ 106.267202][ T6834] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 106.267222][ T6834] __sys_setsockopt+0x120/0x1a0 [ 106.267241][ T6834] __ia32_sys_setsockopt+0xbc/0x160 [ 106.267256][ T6834] ? lockdep_hardirqs_on+0x7c/0x110 [ 106.267273][ T6834] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 106.267290][ T6834] __do_fast_syscall_32+0x7c/0x3a0 [ 106.267301][ T6834] do_fast_syscall_32+0x32/0x80 [ 106.267311][ T6834] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 106.267325][ T6834] RIP: 0023:0xf704e579 [ 106.267334][ T6834] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 106.267344][ T6834] RSP: 002b:00000000f503e55c EFLAGS: 00000296 ORIG_RAX: 000000000000016e [ 106.267359][ T6834] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000000011b [ 106.267365][ T6834] RDX: 0000000000000006 RSI: 0000000080000000 RDI: 0000000000000004 [ 106.267371][ T6834] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 106.267377][ T6834] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 106.267383][ T6834] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 106.267396][ T6834] [ 106.267400][ T6834] Mem-Info: [ 106.359366][ T6834] active_anon:10533 inactive_anon:0 isolated_anon:0 [ 106.359366][ T6834] active_file:1410 inactive_file:39865 isolated_file:0 [ 106.359366][ T6834] unevictable:1768 dirty:381 writeback:0 [ 106.359366][ T6834] slab_reclaimable:10180 slab_unreclaimable:53310 [ 106.359366][ T6834] mapped:28042 shmem:5975 pagetables:1188 [ 106.359366][ T6834] sec_pagetables:299 bounce:0 [ 106.359366][ T6834] kernel_misc_reclaimable:0 [ 106.359366][ T6834] free:43169 free_pcp:15283 free_cma:0 [ 106.376835][ T6834] Node 0 active_anon:2856kB inactive_anon:0kB active_file:4kB inactive_file:15652kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:9180kB dirty:0kB writeback:0kB shmem:4120kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:7952kB pagetables:1260kB sec_pagetables:1140kB all_unreclaimable? yes Balloon:0kB [ 106.376889][ T6834] Node 1 active_anon:40676kB inactive_anon:0kB active_file:5636kB inactive_file:143808kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:104388kB dirty:1524kB writeback:0kB shmem:21180kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:5360kB pagetables:3492kB sec_pagetables:56kB all_unreclaimable? no Balloon:0kB [ 106.376919][ T6834] Node 0 DMA free:2868kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:216kB local_pcp:32kB free_cma:0kB [ 106.376952][ T6834] lowmem_reserve[]: 0 289 289 289 289 [ 106.377002][ T6834] Node 0 DMA32 free:17120kB boost:0kB min:13216kB low:16520kB high:19824kB reserved_highatomic:4096KB free_highatomic:1104KB active_anon:2856kB inactive_anon:0kB active_file:4kB inactive_file:15648kB unevictable:3536kB writepending:0kB present:1032196kB managed:296396kB mlocked:0kB bounce:0kB free_pcp:13404kB local_pcp:2352kB free_cma:0kB [ 106.377036][ T6834] lowmem_reserve[]: 0 0 0 0 0 [ 106.377059][ T6834] Node 1 DMA32 free:148688kB boost:0kB min:47144kB low:58928kB high:70712kB reserved_highatomic:0KB free_highatomic:0KB active_anon:40676kB inactive_anon:0kB active_file:5636kB inactive_file:143808kB unevictable:3536kB writepending:1524kB present:1048432kB managed:948268kB mlocked:0kB bounce:0kB free_pcp:50140kB local_pcp:14220kB free_cma:0kB [ 106.377091][ T6834] lowmem_reserve[]: 0 0 0 0 0 [ 106.377111][ T6834] Node 0 DMA: 57*4kB (UM) 22*8kB (UM) 4*16kB (U) 15*32kB (UM) 2*64kB (U) 0*128kB 1*256kB (M) 1*512kB (M) 1*1024kB (M) 0*2048kB 0*4096kB = 2868kB [ 106.443084][ T6834] Node 0 DMA32: 32*4kB (MEH) 6*8kB (EH) 11*16kB (H) 244*32kB (UEH) 62*64kB (UH) 17*128kB (UEH) 3*256kB (UM) 4*512kB (UME) 0*1024kB 0*2048kB 0*4096kB = 17120kB [ 106.447821][ T6834] Node 1 DMA32: 117*4kB (UE) 10*8kB (UE) 0*16kB 40*32kB (UME) 103*64kB (UME) 76*128kB (UME) 63*256kB (UM) 54*512kB (UM) 31*1024kB (UME) 2*2048kB (M) 12*4096kB (UM) = 146916kB [ 106.454526][ T6834] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 106.454536][ T6834] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 106.454544][ T6834] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 106.454553][ T6834] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 106.454561][ T6834] 48896 total pagecache pages [ 106.454587][ T6834] 0 pages in swap cache [ 106.454592][ T6834] Free swap = 124996kB [ 106.454596][ T6834] Total swap = 124996kB [ 106.454601][ T6834] 524155 pages RAM [ 106.454605][ T6834] 0 pages HighMem/MovableOnly [ 106.454609][ T6834] 209149 pages reserved [ 106.454612][ T6834] 0 pages cma reserved [ 106.467156][ T6834] Bluetooth: MGMT ver 1.23 [ 106.506890][ T6837] Bluetooth: hci0: Opcode 0x0c03 failed: -112 [ 108.510867][ T5967] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 109.984232][ T6878] autofs: Unknown parameter '0x0000000000000000' [ 113.271075][ T6917] 9pnet_fd: Insufficient options for proto=fd [ 120.863684][ T6993] netlink: 4 bytes leftover after parsing attributes in process `syz.0.198'. [ 121.912793][ T7003] netlink: 28 bytes leftover after parsing attributes in process `syz.0.201'. [ 123.271813][ T7018] netlink: 28 bytes leftover after parsing attributes in process `syz.0.205'. [ 123.921955][ T7035] syz.1.209: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 123.928247][ T7035] CPU: 1 UID: 0 PID: 7035 Comm: syz.1.209 Not tainted 6.16.0-rc1-syzkaller-00203-g4774cfe3543a #0 PREEMPT(full) [ 123.928265][ T7035] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 123.928272][ T7035] Call Trace: [ 123.928276][ T7035] [ 123.928281][ T7035] dump_stack_lvl+0x16c/0x1f0 [ 123.928305][ T7035] warn_alloc+0x248/0x3a0 [ 123.928324][ T7035] ? __pfx_warn_alloc+0x10/0x10 [ 123.928340][ T7035] ? __pfx_stack_trace_save+0x10/0x10 [ 123.928353][ T7035] ? stack_depot_save_flags+0x28/0xa40 [ 123.928374][ T7035] ? kasan_save_stack+0x42/0x60 [ 123.928390][ T7035] ? kasan_save_stack+0x33/0x60 [ 123.928405][ T7035] ? kasan_save_track+0x14/0x30 [ 123.928420][ T7035] ? xskq_create+0x52/0x1d0 [ 123.928434][ T7035] ? xsk_setsockopt+0x640/0x840 [ 123.928446][ T7035] ? do_sock_setsockopt+0x224/0x470 [ 123.928460][ T7035] ? xskq_create+0xfb/0x1d0 [ 123.928476][ T7035] __vmalloc_node_range_noprof+0xff5/0x14b0 [ 123.928495][ T7035] ? xskq_create+0xfb/0x1d0 [ 123.928513][ T7035] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 123.928532][ T7035] ? xskq_create+0xfb/0x1d0 [ 123.928547][ T7035] vmalloc_user_noprof+0x9e/0xe0 [ 123.928561][ T7035] ? xskq_create+0xfb/0x1d0 [ 123.928576][ T7035] xskq_create+0xfb/0x1d0 [ 123.928592][ T7035] xsk_setsockopt+0x640/0x840 [ 123.928607][ T7035] ? __pfx_xsk_setsockopt+0x10/0x10 [ 123.928620][ T7035] ? __pfx_aa_sk_perm+0x10/0x10 [ 123.928634][ T7035] ? errseq_sample+0x53/0x70 [ 123.928654][ T7035] ? __pfx_xsk_setsockopt+0x10/0x10 [ 123.928667][ T7035] do_sock_setsockopt+0x224/0x470 [ 123.928679][ T7035] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 123.928700][ T7035] __sys_setsockopt+0x120/0x1a0 [ 123.928719][ T7035] __ia32_sys_setsockopt+0xbc/0x160 [ 123.928734][ T7035] ? lockdep_hardirqs_on+0x7c/0x110 [ 123.928751][ T7035] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 123.928769][ T7035] __do_fast_syscall_32+0x7c/0x3a0 [ 123.928781][ T7035] do_fast_syscall_32+0x32/0x80 [ 123.928791][ T7035] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 123.928806][ T7035] RIP: 0023:0xf707e579 [ 123.928815][ T7035] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 123.928825][ T7035] RSP: 002b:00000000f506e55c EFLAGS: 00000296 ORIG_RAX: 000000000000016e [ 123.928841][ T7035] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000000011b [ 123.928847][ T7035] RDX: 0000000000000006 RSI: 0000000080000000 RDI: 0000000000000004 [ 123.928854][ T7035] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 123.928859][ T7035] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 123.928865][ T7035] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 123.928879][ T7035] [ 123.928883][ T7035] Mem-Info: [ 124.034111][ T7035] active_anon:12056 inactive_anon:676 isolated_anon:0 [ 124.034111][ T7035] active_file:1143 inactive_file:35608 isolated_file:0 [ 124.034111][ T7035] unevictable:1768 dirty:275 writeback:0 [ 124.034111][ T7035] slab_reclaimable:8264 slab_unreclaimable:52889 [ 124.034111][ T7035] mapped:33278 shmem:8149 pagetables:1225 [ 124.034111][ T7035] sec_pagetables:300 bounce:0 [ 124.034111][ T7035] kernel_misc_reclaimable:0 [ 124.034111][ T7035] free:48761 free_pcp:15171 free_cma:0 [ 124.049273][ T7035] Node 0 active_anon:2836kB inactive_anon:2576kB active_file:676kB inactive_file:7068kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:11228kB dirty:0kB writeback:0kB shmem:6392kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:8216kB pagetables:1448kB sec_pagetables:1140kB all_unreclaimable? no Balloon:0kB [ 124.070823][ T7035] Node 1 active_anon:45288kB inactive_anon:128kB active_file:3896kB inactive_file:135364kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:113684kB dirty:1100kB writeback:0kB shmem:26204kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:5172kB pagetables:3452kB sec_pagetables:60kB all_unreclaimable? no Balloon:0kB [ 124.084731][ T7035] Node 0 DMA free:2564kB boost:0kB min:760kB low:948kB high:1136kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:156kB local_pcp:104kB free_cma:0kB [ 124.098136][ T7035] lowmem_reserve[]: 0 289 289 289 289 [ 124.100734][ T7035] Node 0 DMA32 free:18292kB boost:0kB min:13216kB low:16520kB high:19824kB reserved_highatomic:4096KB free_highatomic:1248KB active_anon:2836kB inactive_anon:2576kB active_file:676kB inactive_file:7068kB unevictable:3536kB writepending:0kB present:1032196kB managed:296396kB mlocked:0kB bounce:0kB free_pcp:4700kB local_pcp:384kB free_cma:0kB [ 124.102443][ T7036] Bluetooth: hci0: Opcode 0x0c03 failed: -112 [ 124.114501][ T7035] lowmem_reserve[]: 0 0 0 0 0 [ 124.114548][ T7035] Node 1 DMA32 free:173820kB boost:0kB min:47144kB low:58928kB high:70712kB reserved_highatomic:0KB free_highatomic:0KB active_anon:45288kB inactive_anon:128kB active_file:3896kB inactive_file:135364kB unevictable:3536kB writepending:1092kB present:1048432kB managed:948268kB mlocked:0kB bounce:0kB free_pcp:56616kB local_pcp:12876kB free_cma:0kB [ 124.114602][ T7035] lowmem_reserve[]: 0 0 0 0 0 [ 124.114638][ T7035] Node 0 DMA: 42*4kB (UM) 17*8kB (UM) 0*16kB 2*32kB (M) 1*64kB (M) 1*128kB (M) 0*256kB 1*512kB (M) 1*1024kB (M) 0*2048kB 0*4096kB = 2096kB [ 124.138858][ T7039] autofs: Unknown parameter 'fd0x0000000000000000' [ 124.139822][ T7035] Node 0 DMA32: 57*4kB (MEH) 56*8kB (UMEH) 36*16kB (UMEH) 40*32kB (UEH) 31*64kB (UMEH) 15*128kB (UMEH) 16*256kB (UME) 8*512kB (ME) 3*1024kB (UME) 0*2048kB 0*4096kB = 17700kB [ 124.149297][ T7035] Node 1 DMA32: 484*4kB (UE) 564*8kB (UE) 443*16kB (UE) 569*32kB (UME) 202*64kB (UME) 104*128kB (UE) 63*256kB (U) 52*512kB (UM) 39*1024kB (UME) 8*2048kB (UM) 4*4096kB (U) = 173440kB [ 124.156648][ T7035] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 124.160592][ T7035] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 124.164600][ T7035] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 124.168506][ T7035] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 124.172349][ T7035] 44901 total pagecache pages [ 124.174316][ T7035] 0 pages in swap cache [ 124.176053][ T7035] Free swap = 124996kB [ 124.177956][ T7035] Total swap = 124996kB [ 124.179695][ T7035] 524155 pages RAM [ 124.181377][ T7035] 0 pages HighMem/MovableOnly [ 124.183360][ T7035] 209149 pages reserved [ 124.185102][ T7035] 0 pages cma reserved [ 125.314338][ T7060] netlink: 28 bytes leftover after parsing attributes in process `syz.2.216'. [ 126.256500][ T5967] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 126.336769][ T7073] autofs: Unknown parameter 'fd0x0000000000000000' [ 127.887112][ T7092] netlink: 28 bytes leftover after parsing attributes in process `syz.1.225'. [ 129.875628][ T7110] Bluetooth: hci0: Opcode 0x0c03 failed: -112 [ 131.079086][ T7130] netlink: 28 bytes leftover after parsing attributes in process `syz.2.235'. [ 131.951002][ T5967] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 132.315781][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.321021][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.394336][ T7148] Bluetooth: hci0: Opcode 0x0c03 failed: -112 [ 133.567191][ T7164] netlink: 28 bytes leftover after parsing attributes in process `syz.1.244'. [ 133.745042][ T7172] netlink: 28 bytes leftover after parsing attributes in process `syz.4.246'. [ 134.203242][ T7179] warn_alloc: 2 callbacks suppressed [ 134.203257][ T7179] syz.1.248: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 134.215239][ T7179] CPU: 3 UID: 0 PID: 7179 Comm: syz.1.248 Not tainted 6.16.0-rc1-syzkaller-00203-g4774cfe3543a #0 PREEMPT(full) [ 134.215266][ T7179] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 134.215278][ T7179] Call Trace: [ 134.215287][ T7179] [ 134.215293][ T7179] dump_stack_lvl+0x16c/0x1f0 [ 134.215358][ T7179] warn_alloc+0x248/0x3a0 [ 134.215389][ T7179] ? __pfx_warn_alloc+0x10/0x10 [ 134.215415][ T7179] ? __pfx_stack_trace_save+0x10/0x10 [ 134.215433][ T7179] ? stack_depot_save_flags+0x28/0xa40 [ 134.215475][ T7179] ? kasan_save_stack+0x42/0x60 [ 134.215499][ T7179] ? kasan_save_stack+0x33/0x60 [ 134.215525][ T7179] ? kasan_save_track+0x14/0x30 [ 134.215549][ T7179] ? xskq_create+0x52/0x1d0 [ 134.215573][ T7179] ? xsk_setsockopt+0x640/0x840 [ 134.215593][ T7179] ? do_sock_setsockopt+0x224/0x470 [ 134.215619][ T7179] ? xskq_create+0xfb/0x1d0 [ 134.215642][ T7179] __vmalloc_node_range_noprof+0xff5/0x14b0 [ 134.215675][ T7179] ? xskq_create+0xfb/0x1d0 [ 134.215700][ T7179] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 134.215731][ T7179] ? xskq_create+0xfb/0x1d0 [ 134.215765][ T7179] vmalloc_user_noprof+0x9e/0xe0 [ 134.215789][ T7179] ? xskq_create+0xfb/0x1d0 [ 134.215815][ T7179] xskq_create+0xfb/0x1d0 [ 134.215841][ T7179] xsk_setsockopt+0x640/0x840 [ 134.215867][ T7179] ? __pfx_xsk_setsockopt+0x10/0x10 [ 134.215890][ T7179] ? __pfx_aa_sk_perm+0x10/0x10 [ 134.215914][ T7179] ? errseq_sample+0x53/0x70 [ 134.215948][ T7179] ? __pfx_xsk_setsockopt+0x10/0x10 [ 134.215973][ T7179] do_sock_setsockopt+0x224/0x470 [ 134.215995][ T7179] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 134.216027][ T7179] __sys_setsockopt+0x120/0x1a0 [ 134.216060][ T7179] __ia32_sys_setsockopt+0xbc/0x160 [ 134.216087][ T7179] ? lockdep_hardirqs_on+0x7c/0x110 [ 134.216113][ T7179] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 134.216143][ T7179] __do_fast_syscall_32+0x7c/0x3a0 [ 134.216164][ T7179] do_fast_syscall_32+0x32/0x80 [ 134.216182][ T7179] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 134.216205][ T7179] RIP: 0023:0xf707e579 [ 134.216221][ T7179] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 134.216237][ T7179] RSP: 002b:00000000f506e55c EFLAGS: 00000296 ORIG_RAX: 000000000000016e [ 134.216253][ T7179] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000000011b [ 134.216264][ T7179] RDX: 0000000000000006 RSI: 0000000080000000 RDI: 0000000000000004 [ 134.216274][ T7179] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 134.216285][ T7179] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 134.216296][ T7179] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 134.216323][ T7179] [ 134.217976][ T7179] Mem-Info: [ 134.335149][ T7179] active_anon:12287 inactive_anon:1188 isolated_anon:0 [ 134.335149][ T7179] active_file:1816 inactive_file:33851 isolated_file:0 [ 134.335149][ T7179] unevictable:1768 dirty:313 writeback:0 [ 134.335149][ T7179] slab_reclaimable:8297 slab_unreclaimable:53025 [ 134.335149][ T7179] mapped:32356 shmem:9409 pagetables:1229 [ 134.335149][ T7179] sec_pagetables:304 bounce:0 [ 134.335149][ T7179] kernel_misc_reclaimable:0 [ 134.335149][ T7179] free:56944 free_pcp:6175 free_cma:0 [ 134.352527][ T7179] Node 0 active_anon:2896kB inactive_anon:4632kB active_file:2552kB inactive_file:0kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:10060kB dirty:0kB writeback:0kB shmem:10404kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:8240kB pagetables:1632kB sec_pagetables:1156kB all_unreclaimable? no Balloon:0kB [ 134.366973][ T7179] Node 1 active_anon:46252kB inactive_anon:120kB active_file:4712kB inactive_file:135404kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:119364kB dirty:1252kB writeback:0kB shmem:27232kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:5232kB pagetables:3284kB sec_pagetables:60kB all_unreclaimable? no Balloon:0kB [ 134.380213][ T7179] Node 0 DMA free:2204kB boost:0kB min:760kB low:948kB high:1136kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:192kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:472kB local_pcp:80kB free_cma:0kB [ 134.392332][ T7179] lowmem_reserve[]: 0 289 289 289 289 [ 134.394471][ T7179] Node 0 DMA32 free:18124kB boost:0kB min:13216kB low:16520kB high:19824kB reserved_highatomic:4096KB free_highatomic:1268KB active_anon:2896kB inactive_anon:4440kB active_file:2552kB inactive_file:0kB unevictable:3536kB writepending:0kB present:1032196kB managed:296396kB mlocked:0kB bounce:0kB free_pcp:1752kB local_pcp:428kB free_cma:0kB [ 134.408639][ T7179] lowmem_reserve[]: 0 0 0 0 0 [ 134.410542][ T7179] Node 1 DMA32 free:207112kB boost:0kB min:47144kB low:58928kB high:70712kB reserved_highatomic:0KB free_highatomic:0KB active_anon:46252kB inactive_anon:120kB active_file:4712kB inactive_file:135404kB unevictable:3536kB writepending:1252kB present:1048432kB managed:948268kB mlocked:0kB bounce:0kB free_pcp:22884kB local_pcp:5916kB free_cma:0kB [ 134.424589][ T7179] lowmem_reserve[]: 0 0 0 0 0 [ 134.426578][ T7179] Node 0 DMA: 53*4kB (UM) 17*8kB (U) 2*16kB (UM) 11*32kB (UM) 3*64kB (UM) 2*128kB (M) 0*256kB 0*512kB 1*1024kB (M) 0*2048kB 0*4096kB = 2204kB [ 134.433256][ T5967] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 134.436309][ T7179] Node 0 DMA32: 72*4kB (UMEH) 56*8kB (UMEH) 27*16kB (UEH) 127*32kB (UMEH) 58*64kB (UMEH) 18*128kB (UMEH) 8*256kB (UME) 7*512kB (ME) 1*1024kB (M) 0*2048kB 0*4096kB = 17904kB [ 134.441563][ T7179] Node 1 DMA32: 724*4kB (UE) 537*8kB (UE) 417*16kB (UE) 551*32kB (UME) 218*64kB (UE) 141*128kB (UME) 103*256kB (UM) 71*512kB (UM) 57*1024kB (UME) 5*2048kB (UM) 3*4096kB (UM) = 207112kB [ 134.447672][ T7179] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 134.450345][ T7179] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 134.453220][ T7179] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 134.455927][ T7179] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 134.458673][ T7179] 45171 total pagecache pages [ 134.460390][ T7179] 57 pages in swap cache [ 134.461940][ T7179] Free swap = 121700kB [ 134.463175][ T7179] Total swap = 124996kB [ 134.464365][ T7179] 524155 pages RAM [ 134.465553][ T7179] 0 pages HighMem/MovableOnly [ 134.467083][ T7179] 209149 pages reserved [ 134.468270][ T7179] 0 pages cma reserved [ 135.027616][ T7180] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 136.396391][ T7208] netlink: 28 bytes leftover after parsing attributes in process `syz.0.255'. [ 137.051418][ T7217] Bluetooth: hci0: Opcode 0x0c03 failed: -112 [ 138.613500][ T7234] fuse: Bad value for 'group_id' [ 138.615171][ T7234] fuse: Bad value for 'group_id' [ 138.924030][ T7239] netlink: 28 bytes leftover after parsing attributes in process `syz.1.264'. [ 139.070780][ T5967] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 139.703880][ T7249] Bluetooth: hci0: Opcode 0x0c03 failed: -112 [ 141.098871][ T7271] netlink: 4 bytes leftover after parsing attributes in process `syz.2.273'. [ 141.644280][ T7273] netlink: 28 bytes leftover after parsing attributes in process `syz.1.274'. [ 141.710748][ T5967] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 142.089633][ T7278] Bluetooth: hci0: Opcode 0x0c03 failed: -112 [ 144.114071][ T5967] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 145.065725][ T7306] netlink: 28 bytes leftover after parsing attributes in process `syz.4.283'. [ 145.193204][ T7314] netlink: 4 bytes leftover after parsing attributes in process `syz.2.284'. [ 148.255092][ T7348] netlink: 28 bytes leftover after parsing attributes in process `syz.4.293'. [ 148.297245][ T7350] netlink: 4 bytes leftover after parsing attributes in process `syz.4.294'. [ 151.222466][ T7388] netlink: 28 bytes leftover after parsing attributes in process `syz.0.303'. [ 151.356187][ T7390] netlink: 4 bytes leftover after parsing attributes in process `syz.0.305'. [ 154.006480][ T7431] netlink: 28 bytes leftover after parsing attributes in process `syz.0.313'. [ 157.072546][ T7471] netlink: 28 bytes leftover after parsing attributes in process `syz.1.322'. [ 157.122586][ T7473] netlink: 28 bytes leftover after parsing attributes in process `syz.4.323'. [ 157.128654][ T7473] netlink: 32 bytes leftover after parsing attributes in process `syz.4.323'. [ 158.474110][ T7500] 9pnet_fd: Insufficient options for proto=fd [ 159.789649][ T7520] netlink: 28 bytes leftover after parsing attributes in process `syz.2.333'. [ 161.993032][ T7554] 9pnet_fd: Insufficient options for proto=fd [ 166.933760][ T7622] 9pnet_fd: Insufficient options for proto=fd [ 170.191257][ T5963] Bluetooth: hci3: command 0x0406 tx timeout [ 170.194492][ T5955] Bluetooth: hci1: command 0x0406 tx timeout [ 171.275508][ T7683] 9pnet_fd: Insufficient options for proto=fd [ 174.072774][ T7722] binder: 7721:7722 ioctl c0306201 0 returned -14 [ 178.108826][ T1154] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.210041][ T1154] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.687661][ T5967] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 178.692129][ T5967] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 178.695922][ T5967] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 178.699824][ T5967] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 178.703183][ T5967] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 178.735888][ T1154] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.881092][ T1154] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.959134][ T7780] chnl_net:caif_netlink_parms(): no params data found [ 179.161562][ T7780] bridge0: port 1(bridge_slave_0) entered blocking state [ 179.164657][ T7780] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.167597][ T7780] bridge_slave_0: entered allmulticast mode [ 179.172116][ T7780] bridge_slave_0: entered promiscuous mode [ 179.176938][ T7780] bridge0: port 2(bridge_slave_1) entered blocking state [ 179.177211][ T7802] netlink: 4 bytes leftover after parsing attributes in process `syz.4.396'. [ 179.180003][ T7780] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.186001][ T7780] bridge_slave_1: entered allmulticast mode [ 179.189866][ T7780] bridge_slave_1: entered promiscuous mode [ 179.271642][ T7780] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 179.283568][ T7780] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 179.459454][ T7780] team0: Port device team_slave_0 added [ 179.584488][ T7780] team0: Port device team_slave_1 added [ 179.645382][ T7780] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 179.647479][ T7780] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 179.655953][ T7780] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 179.666113][ T1154] bridge_slave_1: left allmulticast mode [ 179.667949][ T1154] bridge_slave_1: left promiscuous mode [ 179.669813][ T1154] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.684753][ T1154] bridge_slave_0: left allmulticast mode [ 179.686715][ T1154] bridge_slave_0: left promiscuous mode [ 179.689442][ T1154] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.995007][ T1154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 179.999652][ T1154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 180.003663][ T1154] bond0 (unregistering): Released all slaves [ 180.014296][ T7780] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 180.021055][ T7780] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 180.030026][ T7780] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 180.170545][ T7780] hsr_slave_0: entered promiscuous mode [ 180.174527][ T7780] hsr_slave_1: entered promiscuous mode [ 180.176758][ T7780] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 180.179549][ T7780] Cannot create hsr debugfs directory [ 180.524529][ T1154] hsr_slave_0: left promiscuous mode [ 180.527027][ T1154] hsr_slave_1: left promiscuous mode [ 180.529367][ T1154] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 180.532547][ T1154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 180.537249][ T1154] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 180.539940][ T1154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 180.559681][ T1154] veth1_macvtap: left promiscuous mode [ 180.561872][ T1154] veth0_macvtap: left promiscuous mode [ 180.563682][ T1154] veth1_vlan: left promiscuous mode [ 180.565392][ T1154] veth0_vlan: left promiscuous mode [ 180.754556][ T5967] Bluetooth: hci1: command tx timeout [ 181.860541][ T1154] team0 (unregistering): Port device team_slave_1 removed [ 181.935594][ T1154] team0 (unregistering): Port device team_slave_0 removed [ 182.774047][ T7780] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 182.780095][ T7780] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 182.791946][ T7780] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 182.801526][ T7780] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 182.831059][ T5967] Bluetooth: hci1: command tx timeout [ 182.914491][ T7780] 8021q: adding VLAN 0 to HW filter on device bond0 [ 182.945490][ T7780] 8021q: adding VLAN 0 to HW filter on device team0 [ 182.956561][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.959756][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 182.968759][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.971558][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 183.063390][ T7865] netlink: 4 bytes leftover after parsing attributes in process `syz.0.404'. [ 183.191402][ T7780] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 183.394974][ T7780] veth0_vlan: entered promiscuous mode [ 183.404521][ T7780] veth1_vlan: entered promiscuous mode [ 183.425124][ T7780] veth0_macvtap: entered promiscuous mode [ 183.429511][ T7780] veth1_macvtap: entered promiscuous mode [ 183.458488][ T7780] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 183.487842][ T7780] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 183.515158][ T7780] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.522545][ T7780] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.526238][ T7780] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.529801][ T7780] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.589243][ T1038] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 183.595809][ T1038] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 183.648039][ T1038] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 183.655411][ T1038] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 184.912709][ T5967] Bluetooth: hci1: command tx timeout [ 186.993473][ T5967] Bluetooth: hci1: command tx timeout [ 192.701199][ T8030] warn_alloc: 3 callbacks suppressed [ 192.701216][ T8030] syz.5.422: vmalloc error: size 16777216, failed to allocated page array size 32768, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 192.710053][ T8030] CPU: 3 UID: 0 PID: 8030 Comm: syz.5.422 Not tainted 6.16.0-rc1-syzkaller-00203-g4774cfe3543a #0 PREEMPT(full) [ 192.710080][ T8030] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 192.710091][ T8030] Call Trace: [ 192.710105][ T8030] [ 192.710113][ T8030] dump_stack_lvl+0x16c/0x1f0 [ 192.710160][ T8030] warn_alloc+0x248/0x3a0 [ 192.710190][ T8030] ? __pfx_warn_alloc+0x10/0x10 [ 192.710231][ T8030] ? __v4l2_ctrl_modify_dimensions+0x1be/0x630 [ 192.710251][ T8030] ? __vmalloc_node_noprof+0xad/0xf0 [ 192.710278][ T8030] __vmalloc_node_range_noprof+0x101b/0x14b0 [ 192.710317][ T8030] ? __v4l2_ctrl_modify_dimensions+0x1be/0x630 [ 192.710346][ T8030] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 192.710371][ T8030] ? __alloc_pages_noprof+0xb/0x1b0 [ 192.710398][ T8030] ? ___kmalloc_large_node+0x84/0x1e0 [ 192.710425][ T8030] __kvmalloc_node_noprof+0x30a/0x620 [ 192.710450][ T8030] ? __v4l2_ctrl_modify_dimensions+0x1be/0x630 [ 192.710471][ T8030] ? __v4l2_ctrl_modify_dimensions+0x1be/0x630 [ 192.710495][ T8030] ? __v4l2_ctrl_modify_dimensions+0x1be/0x630 [ 192.710512][ T8030] __v4l2_ctrl_modify_dimensions+0x1be/0x630 [ 192.710535][ T8030] vivid_update_format_cap+0x12de/0x25a0 [ 192.710558][ T8030] ? __asan_memset+0x23/0x50 [ 192.710584][ T8030] ? __pfx_vivid_update_format_cap+0x10/0x10 [ 192.710607][ T8030] ? vivid_get_format+0x124/0x180 [ 192.710629][ T8030] vivid_s_fmt_vid_cap+0x19dc/0x3290 [ 192.710683][ T8030] ? __pfx_vivid_s_fmt_vid_cap+0x10/0x10 [ 192.710704][ T8030] fmt_sp2mp_func+0xb1/0x3e0 [ 192.710724][ T8030] ? __pfx_fmt_sp2mp_func+0x10/0x10 [ 192.710766][ T8030] ? v4l_sanitize_format+0x18d/0x430 [ 192.710794][ T8030] vidioc_s_fmt_vid_cap+0xa0/0xe0 [ 192.710818][ T8030] vivid_s_fmt_cap+0x76/0xc0 [ 192.710852][ T8030] v4l_s_fmt+0x433/0xf30 [ 192.710883][ T8030] __video_do_ioctl+0xb3d/0xfc0 [ 192.710914][ T8030] ? __might_fault+0xe3/0x190 [ 192.710939][ T8030] ? __pfx___video_do_ioctl+0x10/0x10 [ 192.710978][ T8030] video_usercopy+0x47f/0x1440 [ 192.711006][ T8030] ? __pfx___video_do_ioctl+0x10/0x10 [ 192.711035][ T8030] ? __pfx_video_usercopy+0x10/0x10 [ 192.711071][ T8030] ? hook_file_ioctl_common+0x145/0x410 [ 192.711107][ T8030] v4l2_ioctl+0x1ba/0x250 [ 192.711130][ T8030] ? __ia32_compat_sys_openat+0x161/0x210 [ 192.711156][ T8030] v4l2_compat_ioctl32+0x217/0x2c0 [ 192.711181][ T8030] ? __pfx_v4l2_compat_ioctl32+0x10/0x10 [ 192.711208][ T8030] __ia32_compat_sys_ioctl+0x242/0x370 [ 192.711233][ T8030] __do_fast_syscall_32+0x7c/0x3a0 [ 192.711254][ T8030] do_fast_syscall_32+0x32/0x80 [ 192.711271][ T8030] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 192.711293][ T8030] RIP: 0023:0xf707e579 [ 192.711316][ T8030] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 192.711333][ T8030] RSP: 002b:00000000f504d55c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 192.711351][ T8030] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 00000000c0d05605 [ 192.711363][ T8030] RDX: 0000000080000180 RSI: 0000000000000000 RDI: 0000000000000000 [ 192.711375][ T8030] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 192.711385][ T8030] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 192.711396][ T8030] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 192.711424][ T8030] [ 192.813857][ T8030] Mem-Info: [ 192.814828][ T8030] active_anon:17988 inactive_anon:91 isolated_anon:0 [ 192.814828][ T8030] active_file:2230 inactive_file:17892 isolated_file:0 [ 192.814828][ T8030] unevictable:1768 dirty:315 writeback:0 [ 192.814828][ T8030] slab_reclaimable:6990 slab_unreclaimable:54283 [ 192.814828][ T8030] mapped:38876 shmem:13749 pagetables:1343 [ 192.814828][ T8030] sec_pagetables:326 bounce:0 [ 192.814828][ T8030] kernel_misc_reclaimable:0 [ 192.814828][ T8030] free:73229 free_pcp:1550 free_cma:0 [ 192.827778][ T8030] Node 0 active_anon:4436kB inactive_anon:272kB active_file:20kB inactive_file:220kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:7312kB dirty:4kB writeback:0kB shmem:7324kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:8572kB pagetables:1724kB sec_pagetables:1220kB all_unreclaimable? yes Balloon:0kB [ 192.838240][ T8030] Node 1 active_anon:67516kB inactive_anon:92kB active_file:8900kB inactive_file:71348kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:148192kB dirty:1256kB writeback:0kB shmem:47672kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:5140kB pagetables:3648kB sec_pagetables:84kB all_unreclaimable? no Balloon:0kB [ 192.851274][ T8030] Node 0 DMA free:2080kB boost:0kB min:760kB low:948kB high:1136kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:12kB free_cma:0kB [ 192.859963][ T8030] lowmem_reserve[]: 0 289 289 289 289 [ 192.864531][ T8030] Node 0 DMA32 free:16844kB boost:0kB min:13216kB low:16520kB high:19824kB reserved_highatomic:2048KB free_highatomic:344KB active_anon:4436kB inactive_anon:272kB active_file:20kB inactive_file:220kB unevictable:3536kB writepending:4kB present:1032196kB managed:296396kB mlocked:0kB bounce:0kB free_pcp:2800kB local_pcp:768kB free_cma:0kB [ 192.874130][ T8030] lowmem_reserve[]: 0 0 0 0 0 [ 192.876189][ T8030] Node 1 DMA32 free:273992kB boost:0kB min:47144kB low:58928kB high:70712kB reserved_highatomic:0KB free_highatomic:0KB active_anon:67516kB inactive_anon:92kB active_file:8900kB inactive_file:71348kB unevictable:3536kB writepending:1256kB present:1048432kB managed:948268kB mlocked:0kB bounce:0kB free_pcp:3976kB local_pcp:2692kB free_cma:0kB [ 192.889047][ T8030] lowmem_reserve[]: 0 0 0 0 0 [ 192.890576][ T8030] Node 0 DMA: 2*4kB (M) 3*8kB (UM) 4*16kB (UM) 4*32kB (UM) 3*64kB (UM) 1*128kB (M) 2*256kB (M) 0*512kB 1*1024kB (M) 0*2048kB 0*4096kB = 2080kB [ 192.897947][ T8030] Node 0 DMA32: 31*4kB (MEH) 42*8kB (UMEH) 31*16kB (UMEH) 55*32kB (UMEH) 72*64kB (UMEH) 30*128kB (UME) 12*256kB (UME) 3*512kB (UE) 1*1024kB (U) 0*2048kB 0*4096kB = 16796kB [ 192.903615][ T8030] Node 1 DMA32: 26*4kB (UME) 306*8kB (UME) 540*16kB (UME) 296*32kB (UME) 298*64kB (UME) 205*128kB (UME) 124*256kB (UME) 104*512kB (UME) 100*1024kB (UME) 8*2048kB (U) 1*4096kB (U) = 273848kB [ 192.909566][ T8030] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 192.912758][ T8030] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 192.915764][ T8030] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 192.919487][ T8030] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 192.923678][ T8030] 34108 total pagecache pages [ 192.925700][ T8030] 233 pages in swap cache [ 192.927629][ T8030] Free swap = 120688kB [ 192.929436][ T8030] Total swap = 124996kB [ 192.931333][ T8030] 524155 pages RAM [ 192.932610][ T8030] 0 pages HighMem/MovableOnly [ 192.934125][ T8030] 209149 pages reserved [ 192.935449][ T8030] 0 pages cma reserved [ 193.712895][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.714983][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.234692][ T6005] IPVS: starting estimator thread 0... [ 196.320892][ T8123] IPVS: using max 42 ests per chain, 100800 per kthread [ 196.674662][ T8141] netlink: 20 bytes leftover after parsing attributes in process `syz.5.433'. [ 200.914733][ T5967] Bluetooth: hci2: command 0x0406 tx timeout [ 201.801688][ T916] IPVS: starting estimator thread 0... [ 201.900875][ T8205] IPVS: using max 42 ests per chain, 100800 per kthread [ 202.191321][ T8206] netlink: 20 bytes leftover after parsing attributes in process `syz.1.446'. [ 205.161982][ T8248] netlink: 20 bytes leftover after parsing attributes in process `syz.1.453'. [ 205.197255][ T8249] netlink: 20 bytes leftover after parsing attributes in process `syz.5.452'. [ 211.337514][ T916] IPVS: starting estimator thread 0... [ 211.430821][ T8326] IPVS: using max 42 ests per chain, 100800 per kthread [ 211.645596][ T8332] netlink: 20 bytes leftover after parsing attributes in process `syz.4.469'. [ 211.734254][ T8333] netlink: 20 bytes leftover after parsing attributes in process `syz.1.470'. [ 213.290778][ T8355] netlink: 20 bytes leftover after parsing attributes in process `syz.4.472'. [ 213.474656][ T8363] netlink: 20 bytes leftover after parsing attributes in process `syz.5.475'. [ 215.096228][ T8380] netlink: 4 bytes leftover after parsing attributes in process `syz.5.478'. [ 215.470532][ T8387] netlink: 20 bytes leftover after parsing attributes in process `syz.4.479'. [ 216.317593][ T54] IPVS: starting estimator thread 0... [ 216.420769][ T8403] IPVS: using max 42 ests per chain, 100800 per kthread [ 216.464477][ T8408] netlink: 20 bytes leftover after parsing attributes in process `syz.4.484'. [ 216.774209][ T8411] netlink: 20 bytes leftover after parsing attributes in process `syz.0.485'. [ 224.463199][ T8508] netlink: 20 bytes leftover after parsing attributes in process `syz.0.504'. [ 224.675453][ T8512] netlink: 28 bytes leftover after parsing attributes in process `syz.5.507'. [ 227.677348][ T8548] netlink: 28 bytes leftover after parsing attributes in process `syz.1.516'. [ 229.246097][ T8571] netlink: 20 bytes leftover after parsing attributes in process `syz.5.520'. [ 231.045634][ T8596] netlink: 28 bytes leftover after parsing attributes in process `syz.4.526'. [ 231.434482][ T8603] netlink: 20 bytes leftover after parsing attributes in process `syz.0.527'. [ 234.054560][ T8635] netlink: 28 bytes leftover after parsing attributes in process `syz.4.536'. [ 234.234331][ T8642] netlink: 20 bytes leftover after parsing attributes in process `syz.0.534'. [ 234.553845][ T8637] netlink: 20 bytes leftover after parsing attributes in process `syz.4.537'. [ 237.124509][ T8679] netlink: 28 bytes leftover after parsing attributes in process `syz.5.545'. [ 237.466600][ T8687] netlink: 20 bytes leftover after parsing attributes in process `syz.5.546'. [ 238.335276][ T8692] netlink: 20 bytes leftover after parsing attributes in process `syz.1.548'. [ 238.696551][ T8705] netlink: 20 bytes leftover after parsing attributes in process `syz.4.551'. [ 241.243269][ T8738] netlink: 20 bytes leftover after parsing attributes in process `syz.1.558'. [ 242.687388][ T8755] 9pnet_fd: Insufficient options for proto=fd [ 246.317717][ T8813] netlink: 20 bytes leftover after parsing attributes in process `syz.1.576'. [ 247.403036][ T8833] netlink: 20 bytes leftover after parsing attributes in process `syz.1.581'. [ 247.452660][ T8831] netlink: 20 bytes leftover after parsing attributes in process `syz.5.582'. [ 247.766424][ T8845] netlink: 20 bytes leftover after parsing attributes in process `syz.0.584'. [ 250.117480][ T8889] netlink: 20 bytes leftover after parsing attributes in process `syz.4.594'. [ 251.819335][ T8909] netlink: 20 bytes leftover after parsing attributes in process `syz.5.598'. [ 253.407636][ T8930] netlink: 20 bytes leftover after parsing attributes in process `syz.4.604'. [ 254.019666][ T8940] warn_alloc: 1 callbacks suppressed [ 254.019677][ T8940] syz.4.606: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 254.026339][ T8940] CPU: 2 UID: 0 PID: 8940 Comm: syz.4.606 Not tainted 6.16.0-rc1-syzkaller-00203-g4774cfe3543a #0 PREEMPT(full) [ 254.026355][ T8940] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 254.026361][ T8940] Call Trace: [ 254.026366][ T8940] [ 254.026370][ T8940] dump_stack_lvl+0x16c/0x1f0 [ 254.026418][ T8940] warn_alloc+0x248/0x3a0 [ 254.026437][ T8940] ? __pfx_warn_alloc+0x10/0x10 [ 254.026452][ T8940] ? __pfx_stack_trace_save+0x10/0x10 [ 254.026465][ T8940] ? stack_depot_save_flags+0x28/0xa40 [ 254.026489][ T8940] ? kasan_save_stack+0x42/0x60 [ 254.026503][ T8940] ? kasan_save_stack+0x33/0x60 [ 254.026518][ T8940] ? kasan_save_track+0x14/0x30 [ 254.026533][ T8940] ? xskq_create+0x52/0x1d0 [ 254.026546][ T8940] ? xsk_setsockopt+0x640/0x840 [ 254.026559][ T8940] ? do_sock_setsockopt+0x224/0x470 [ 254.026574][ T8940] ? xskq_create+0xfb/0x1d0 [ 254.026589][ T8940] __vmalloc_node_range_noprof+0xff5/0x14b0 [ 254.026609][ T8940] ? xskq_create+0xfb/0x1d0 [ 254.026627][ T8940] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 254.026646][ T8940] ? xskq_create+0xfb/0x1d0 [ 254.026660][ T8940] vmalloc_user_noprof+0x9e/0xe0 [ 254.026674][ T8940] ? xskq_create+0xfb/0x1d0 [ 254.026689][ T8940] xskq_create+0xfb/0x1d0 [ 254.026704][ T8940] xsk_setsockopt+0x640/0x840 [ 254.026719][ T8940] ? __pfx_xsk_setsockopt+0x10/0x10 [ 254.026733][ T8940] ? __pfx_aa_sk_perm+0x10/0x10 [ 254.026746][ T8940] ? errseq_sample+0x53/0x70 [ 254.026773][ T8940] ? __pfx_xsk_setsockopt+0x10/0x10 [ 254.026788][ T8940] do_sock_setsockopt+0x224/0x470 [ 254.026800][ T8940] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 254.026823][ T8940] __sys_setsockopt+0x120/0x1a0 [ 254.026843][ T8940] __ia32_sys_setsockopt+0xbc/0x160 [ 254.026859][ T8940] ? lockdep_hardirqs_on+0x7c/0x110 [ 254.026877][ T8940] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 254.026896][ T8940] __do_fast_syscall_32+0x7c/0x3a0 [ 254.026908][ T8940] do_fast_syscall_32+0x32/0x80 [ 254.026918][ T8940] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 254.026932][ T8940] RIP: 0023:0xf710e579 [ 254.026941][ T8940] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 254.026951][ T8940] RSP: 002b:00000000f50fe55c EFLAGS: 00000296 ORIG_RAX: 000000000000016e [ 254.026961][ T8940] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000000011b [ 254.026968][ T8940] RDX: 0000000000000006 RSI: 0000000080000000 RDI: 0000000000000004 [ 254.026974][ T8940] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 254.026980][ T8940] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 254.026986][ T8940] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 254.026999][ T8940] [ 254.027017][ T8940] Mem-Info: [ 254.129308][ T8940] active_anon:6098 inactive_anon:995 isolated_anon:96 [ 254.129308][ T8940] active_file:361 inactive_file:2184 isolated_file:25 [ 254.129308][ T8940] unevictable:1779 dirty:312 writeback:0 [ 254.129308][ T8940] slab_reclaimable:6876 slab_unreclaimable:54097 [ 254.129308][ T8940] mapped:29904 shmem:7641 pagetables:1313 [ 254.129308][ T8940] sec_pagetables:319 bounce:0 [ 254.129308][ T8940] kernel_misc_reclaimable:0 [ 254.129308][ T8940] free:96229 free_pcp:1220 free_cma:0 [ 254.144028][ T8940] Node 0 active_anon:1168kB inactive_anon:268kB active_file:600kB inactive_file:468kB unevictable:3540kB isolated(anon):0kB isolated(file):0kB mapped:3608kB dirty:0kB writeback:0kB shmem:3544kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:8408kB pagetables:1676kB sec_pagetables:1188kB all_unreclaimable? yes Balloon:0kB [ 254.157254][ T8940] Node 1 active_anon:23676kB inactive_anon:3712kB active_file:1020kB inactive_file:8268kB unevictable:3576kB isolated(anon):84kB isolated(file):0kB mapped:116708kB dirty:1248kB writeback:0kB shmem:27020kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:5424kB pagetables:3652kB sec_pagetables:88kB all_unreclaimable? no Balloon:0kB [ 254.167778][ T8940] Node 0 DMA free:2268kB boost:0kB min:760kB low:948kB high:1136kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 254.176725][ T8940] lowmem_reserve[]: 0 289 289 289 289 [ 254.178482][ T8940] Node 0 DMA32 free:24284kB boost:2048kB min:15264kB low:18568kB high:21872kB reserved_highatomic:2048KB free_highatomic:344KB active_anon:1168kB inactive_anon:268kB active_file:600kB inactive_file:468kB unevictable:3540kB writepending:0kB present:1032196kB managed:296396kB mlocked:4kB bounce:0kB free_pcp:2816kB local_pcp:2268kB free_cma:0kB [ 254.188822][ T8940] lowmem_reserve[]: 0 0 0 0 0 [ 254.193418][ T8940] Node 1 DMA32 free:356632kB boost:0kB min:47144kB low:58928kB high:70712kB reserved_highatomic:0KB free_highatomic:0KB active_anon:23632kB inactive_anon:3756kB active_file:1020kB inactive_file:8268kB unevictable:3576kB writepending:1248kB present:1048432kB managed:948268kB mlocked:140kB bounce:0kB free_pcp:6692kB local_pcp:1068kB free_cma:0kB [ 254.214854][ T8940] lowmem_reserve[]: 0 0 0 0 0 [ 254.216752][ T8940] Node 0 DMA: 7*4kB (UM) 4*8kB (UM) 4*16kB (UM) 9*32kB (UM) 3*64kB (UM) 1*128kB (M) 2*256kB (M) 0*512kB 1*1024kB (M) 0*2048kB 0*4096kB = 2268kB [ 254.221851][ T8940] Node 0 DMA32: 239*4kB (UEH) 216*8kB (UMEH) 92*16kB (UMEH) 132*32kB (UMEH) 77*64kB (UMEH) 33*128kB (UME) 15*256kB (UME) 3*512kB (UME) 1*1024kB (M) 0*2048kB 0*4096kB = 23932kB [ 254.228401][ T8940] Node 1 DMA32: 691*4kB (UME) 1181*8kB (UME) 803*16kB (UME) 513*32kB (UME) 347*64kB (UME) 258*128kB (UME) 175*256kB (UME) 149*512kB (UME) 136*1024kB (UME) 0*2048kB 0*4096kB = 357060kB [ 254.236314][ T8940] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 254.240431][ T8940] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 254.244530][ T8940] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 254.248129][ T8940] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 254.256955][ T8940] 10463 total pagecache pages [ 254.258618][ T8940] 434 pages in swap cache [ 254.260082][ T8940] Free swap = 99356kB [ 254.262627][ T8940] Total swap = 124996kB [ 254.264031][ T8940] 524155 pages RAM [ 254.265300][ T8940] 0 pages HighMem/MovableOnly [ 254.266859][ T8940] 209149 pages reserved [ 254.268229][ T8940] 0 pages cma reserved [ 254.288349][ T8951] netlink: 28 bytes leftover after parsing attributes in process `syz.1.608'. [ 254.850625][ T8943] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 255.153098][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.155113][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.853373][ T8975] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 256.769399][ T8998] netlink: 20 bytes leftover after parsing attributes in process `syz.5.618'. [ 258.003419][ T9009] netlink: 20 bytes leftover after parsing attributes in process `syz.0.621'. [ 258.978450][ T9037] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 259.265109][ T9041] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 259.365131][ T9042] bridge_slave_0: left allmulticast mode [ 259.367691][ T9042] bridge_slave_0: left promiscuous mode [ 259.371483][ T9042] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.379197][ T9042] bridge_slave_1: left allmulticast mode [ 259.382255][ T9042] bridge_slave_1: left promiscuous mode [ 259.384009][ T9042] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.392541][ T9042] bond0: (slave bond_slave_0): Releasing backup interface [ 259.399003][ T9042] bond0: (slave bond_slave_1): Releasing backup interface [ 259.409737][ T9043] netlink: 'syz.1.629': attribute type 10 has an invalid length. [ 259.415762][ T9042] team0: Port device team_slave_0 removed [ 259.425216][ T9042] team0: Port device team_slave_1 removed [ 259.428103][ T9042] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 259.430408][ T9042] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 259.437267][ T9042] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 259.440385][ T9042] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 259.479753][ T9043] mac80211_hwsim hwsim5 wlan1: left allmulticast mode [ 259.489073][ T9043] 8021q: adding VLAN 0 to HW filter on device bond0 [ 259.512351][ T9043] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 260.014425][ T9055] mac80211_hwsim hwsim13 wlan1: entered allmulticast mode [ 260.119551][ T9066] bridge_slave_0: left allmulticast mode [ 260.124667][ T9066] bridge_slave_0: left promiscuous mode [ 260.127272][ T9066] bridge0: port 1(bridge_slave_0) entered disabled state [ 260.135139][ T9066] bridge_slave_1: left allmulticast mode [ 260.137064][ T9066] bridge_slave_1: left promiscuous mode [ 260.139310][ T9066] bridge0: port 2(bridge_slave_1) entered disabled state [ 260.150762][ T9066] bond0: (slave bond_slave_0): Releasing backup interface [ 260.156969][ T9066] bond0: (slave bond_slave_1): Releasing backup interface [ 260.168704][ T9067] netlink: 'syz.5.631': attribute type 10 has an invalid length. [ 260.202975][ T9066] team0: Port device team_slave_0 removed [ 260.210126][ T9066] team0: Port device team_slave_1 removed [ 260.213143][ T9066] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 260.215910][ T9066] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 260.219772][ T9066] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 260.222485][ T9066] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 260.241390][ T9067] mac80211_hwsim hwsim13 wlan1: left allmulticast mode [ 260.254779][ T9067] 8021q: adding VLAN 0 to HW filter on device bond0 [ 260.264267][ T9067] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 261.913285][ T9088] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 261.983183][ T9093] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 262.045144][ T9096] bridge_slave_0: left allmulticast mode [ 262.046988][ T9096] bridge_slave_0: left promiscuous mode [ 262.048852][ T9096] bridge0: port 1(bridge_slave_0) entered disabled state [ 262.054801][ T9096] bridge_slave_1: left allmulticast mode [ 262.056649][ T9096] bridge_slave_1: left promiscuous mode [ 262.058604][ T9096] bridge0: port 2(bridge_slave_1) entered disabled state [ 262.065423][ T9096] bond0: (slave bond_slave_0): Releasing backup interface [ 262.085183][ T9096] bond0: (slave bond_slave_1): Releasing backup interface [ 262.114904][ T9099] netlink: 'syz.0.638': attribute type 10 has an invalid length. [ 262.120472][ T9096] team0: Port device team_slave_0 removed [ 262.137532][ T9096] team0: Port device team_slave_1 removed [ 262.140350][ T9096] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 262.142929][ T9096] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 262.147965][ T9096] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 262.150367][ T9096] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 262.174041][ T9099] mac80211_hwsim hwsim3 wlan1: left allmulticast mode [ 262.179943][ T9099] 8021q: adding VLAN 0 to HW filter on device bond0 [ 262.187312][ T9099] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 262.274283][ T9101] netlink: 20 bytes leftover after parsing attributes in process `syz.4.640'. [ 262.623974][ T9106] bond0: (slave wlan1): Releasing backup interface [ 262.698213][ T9106] netlink: 'syz.1.641': attribute type 10 has an invalid length. [ 262.701743][ T9106] mac80211_hwsim hwsim5 wlan1: left allmulticast mode [ 262.710581][ T9106] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 264.924420][ T9142] netlink: 20 bytes leftover after parsing attributes in process `syz.1.649'. [ 265.178028][ T9147] netlink: 28 bytes leftover after parsing attributes in process `syz.5.651'. [ 265.606007][ T9153] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 265.694497][ T9156] bond0: (slave wlan1): Releasing backup interface [ 265.786504][ T9152] netlink: 'syz.1.653': attribute type 10 has an invalid length. [ 265.789805][ T9152] mac80211_hwsim hwsim5 wlan1: left allmulticast mode [ 265.804342][ T9152] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 265.954750][ T9161] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 266.049282][ T9165] bond0: (slave wlan1): Releasing backup interface [ 266.151229][ T9160] netlink: 'syz.1.655': attribute type 10 has an invalid length. [ 266.153667][ T9160] mac80211_hwsim hwsim5 wlan1: left allmulticast mode [ 266.159528][ T9160] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 267.841841][ T9187] bond0: (slave wlan1): Releasing backup interface [ 268.304712][ T9202] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 268.407139][ T9203] bond0: (slave wlan1): Releasing backup interface [ 268.668569][ T9208] bridge_slave_0: left allmulticast mode [ 268.675146][ T9208] bridge_slave_0: left promiscuous mode [ 268.677129][ T9208] bridge0: port 1(bridge_slave_0) entered disabled state [ 268.701463][ T9208] bridge_slave_1: left allmulticast mode [ 268.703496][ T9208] bridge_slave_1: left promiscuous mode [ 268.705869][ T9208] bridge0: port 2(bridge_slave_1) entered disabled state [ 268.715871][ T9208] bond0: (slave bond_slave_0): Releasing backup interface [ 268.723683][ T9209] netlink: 'syz.4.665': attribute type 10 has an invalid length. [ 268.752434][ T9208] bond0: (slave bond_slave_1): Releasing backup interface [ 268.798775][ T9208] team0: Port device team_slave_0 removed [ 268.807246][ T9208] team0: Port device team_slave_1 removed [ 268.810043][ T9208] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 268.813061][ T9208] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 268.817178][ T9208] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 268.819622][ T9208] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 268.844244][ T9209] mac80211_hwsim hwsim11 wlan1: left allmulticast mode [ 268.867504][ T9209] 8021q: adding VLAN 0 to HW filter on device bond0 [ 268.884170][ T9209] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 268.901467][ T9215] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 268.905673][ T9216] mac80211_hwsim hwsim13 wlan1: entered allmulticast mode [ 269.042642][ T9218] bond0: (slave wlan1): Releasing backup interface [ 269.094029][ T9217] netlink: 'syz.5.667': attribute type 10 has an invalid length. [ 269.096605][ T9217] mac80211_hwsim hwsim13 wlan1: left allmulticast mode [ 269.106619][ T9217] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 269.210385][ T9218] netlink: 'syz.1.666': attribute type 10 has an invalid length. [ 269.214145][ T9218] mac80211_hwsim hwsim5 wlan1: left allmulticast mode [ 269.220474][ T9218] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 270.617497][ T9247] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 270.696629][ T9248] bond0: (slave wlan1): Releasing backup interface [ 270.894720][ T9251] mac80211_hwsim hwsim13 wlan1: entered allmulticast mode [ 271.020374][ T9254] bond0: (slave wlan1): Releasing backup interface [ 272.102499][ T9277] netlink: 20 bytes leftover after parsing attributes in process `syz.1.683'. [ 275.089517][ T9336] netlink: 'syz.5.692': attribute type 10 has an invalid length. [ 275.092122][ T9336] mac80211_hwsim hwsim13 wlan1: left allmulticast mode [ 275.098635][ T9336] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 275.168533][ T9340] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 275.427301][ T9342] bond0: (slave wlan1): Releasing backup interface [ 275.662746][ T9347] netlink: 'syz.4.695': attribute type 10 has an invalid length. [ 275.666263][ T9347] mac80211_hwsim hwsim11 wlan1: left allmulticast mode [ 275.678659][ T9347] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 277.734784][ T9378] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 277.847426][ T9378] bond0: (slave wlan1): Releasing backup interface [ 277.859453][ T9381] mac80211_hwsim hwsim13 wlan1: entered allmulticast mode [ 277.976425][ T9383] bond0: (slave wlan1): Releasing backup interface [ 278.163257][ T9383] netlink: 'syz.5.704': attribute type 10 has an invalid length. [ 278.165809][ T9383] mac80211_hwsim hwsim13 wlan1: left allmulticast mode [ 278.169755][ T9383] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 280.326781][ T9426] netlink: 'syz.4.712': attribute type 10 has an invalid length. [ 280.329213][ T9426] mac80211_hwsim hwsim11 wlan1: left allmulticast mode [ 280.335780][ T9426] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 281.314648][ T9447] netlink: 20 bytes leftover after parsing attributes in process `syz.4.714'. [ 281.851246][ T9452] mac80211_hwsim hwsim13 wlan1: entered allmulticast mode [ 281.952397][ T9455] bond0: (slave wlan1): Releasing backup interface [ 282.034114][ T9458] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 282.041608][ T9451] netlink: 'syz.5.716': attribute type 10 has an invalid length. [ 282.045325][ T9451] mac80211_hwsim hwsim13 wlan1: left allmulticast mode [ 282.049187][ T9451] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 282.127014][ T9460] bond0: (slave wlan1): Releasing backup interface [ 282.199116][ T9461] netlink: 20 bytes leftover after parsing attributes in process `syz.1.717'. [ 282.235047][ T9460] netlink: 'syz.4.718': attribute type 10 has an invalid length. [ 282.237693][ T9460] mac80211_hwsim hwsim11 wlan1: left allmulticast mode [ 282.243998][ T9460] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 282.751093][ T9470] mac80211_hwsim hwsim13 wlan1: entered allmulticast mode [ 282.825941][ T9471] netlink: 'syz.5.720': attribute type 10 has an invalid length. [ 282.828973][ T9471] mac80211_hwsim hwsim13 wlan1: left allmulticast mode [ 283.148637][ T9480] netlink: 20 bytes leftover after parsing attributes in process `syz.4.722'. [ 283.649299][ T9489] mac80211_hwsim hwsim13 wlan1: entered allmulticast mode [ 283.759642][ T9488] netlink: 'syz.0.723': attribute type 10 has an invalid length. [ 283.766866][ T9491] netlink: 'syz.5.724': attribute type 10 has an invalid length. [ 283.803045][ T9490] bond0: (slave wlan1): Releasing backup interface [ 283.820774][ T9488] mac80211_hwsim hwsim3 wlan1: left allmulticast mode [ 283.842690][ T9488] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 283.942369][ T9491] mac80211_hwsim hwsim13 wlan1: left allmulticast mode [ 283.947911][ T9491] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 284.875128][ T9511] bond0: (slave wlan1): Releasing backup interface [ 285.328188][ T9516] netlink: 28 bytes leftover after parsing attributes in process `syz.4.730'. [ 286.042529][ T9524] netlink: 'syz.1.732': attribute type 10 has an invalid length. [ 286.045009][ T9524] mac80211_hwsim hwsim5 wlan1: left allmulticast mode [ 286.051937][ T9524] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 286.262390][ T9531] mac80211_hwsim hwsim13 wlan1: entered allmulticast mode [ 286.488910][ T9537] netlink: 'syz.5.734': attribute type 10 has an invalid length. [ 286.492226][ T9537] mac80211_hwsim hwsim13 wlan1: left allmulticast mode [ 286.499244][ T9537] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 287.156810][ T9545] mac80211_hwsim hwsim13 wlan1: entered allmulticast mode [ 287.243437][ T9547] netlink: 'syz.5.737': attribute type 10 has an invalid length. [ 287.246124][ T9547] mac80211_hwsim hwsim13 wlan1: left allmulticast mode [ 287.775832][ T9552] 9pnet_fd: Insufficient options for proto=fd [ 287.855205][ T9555] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 288.043434][ T9558] bond0: (slave wlan1): Releasing backup interface [ 288.053235][ T9559] mac80211_hwsim hwsim13 wlan1: entered allmulticast mode [ 288.163313][ T9562] bond0: (slave wlan1): Releasing backup interface [ 288.224523][ T9562] netlink: 'syz.5.741': attribute type 10 has an invalid length. [ 288.227030][ T9562] mac80211_hwsim hwsim13 wlan1: left allmulticast mode [ 288.233393][ T9562] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 288.267551][ T9558] netlink: 'syz.1.740': attribute type 10 has an invalid length. [ 288.270184][ T9558] mac80211_hwsim hwsim5 wlan1: left allmulticast mode [ 288.282564][ T9558] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 288.953335][ T9578] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 289.087547][ T9580] netlink: 'syz.1.743': attribute type 10 has an invalid length. [ 289.101878][ T9578] bond0: (slave wlan1): Releasing backup interface [ 289.114737][ T9580] mac80211_hwsim hwsim5 wlan1: left allmulticast mode [ 289.139687][ T9580] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 289.223680][ T9581] mac80211_hwsim hwsim13 wlan1: entered allmulticast mode [ 289.357342][ T9581] bond0: (slave wlan1): Releasing backup interface [ 289.414067][ T9581] netlink: 'syz.5.744': attribute type 10 has an invalid length. [ 289.416317][ T9581] mac80211_hwsim hwsim13 wlan1: left allmulticast mode [ 289.423079][ T9581] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 289.973761][ T9599] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 290.119943][ T9603] bond0: (slave wlan1): Releasing backup interface [ 290.163426][ T9605] netlink: 20 bytes leftover after parsing attributes in process `syz.5.748'. [ 290.237512][ T9603] netlink: 'syz.1.747': attribute type 10 has an invalid length. [ 290.241162][ T9603] mac80211_hwsim hwsim5 wlan1: left allmulticast mode [ 290.249221][ T9603] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 290.768458][ T9620] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 290.843643][ T9623] netlink: 'syz.1.750': attribute type 10 has an invalid length. [ 290.846087][ T9623] mac80211_hwsim hwsim5 wlan1: left allmulticast mode [ 291.035212][ T9628] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 291.124499][ T9630] bond0: (slave wlan1): Releasing backup interface [ 291.189406][ T9630] netlink: 'syz.4.751': attribute type 10 has an invalid length. [ 291.192334][ T9630] mac80211_hwsim hwsim11 wlan1: left allmulticast mode [ 291.198370][ T9630] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 291.669863][ T9642] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 291.748902][ T9643] netlink: 'syz.1.753': attribute type 10 has an invalid length. [ 291.764179][ T9642] bond0: (slave wlan1): Releasing backup interface [ 291.767495][ T9643] mac80211_hwsim hwsim5 wlan1: left allmulticast mode [ 291.828414][ T9643] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 291.879334][ T9648] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 291.951294][ T9649] 9pnet_fd: Insufficient options for proto=fd [ 291.970568][ T9650] bond0: (slave wlan1): Releasing backup interface [ 292.158441][ T9657] netlink: 28 bytes leftover after parsing attributes in process `syz.5.757'. [ 292.160397][ T9650] netlink: 'syz.4.755': attribute type 10 has an invalid length. [ 292.165796][ T9650] mac80211_hwsim hwsim11 wlan1: left allmulticast mode [ 292.186411][ T9650] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 292.315493][ T9660] mac80211_hwsim hwsim13 wlan1: entered allmulticast mode [ 292.416468][ T9661] bond0: (slave wlan1): Releasing backup interface [ 292.464797][ T9661] netlink: 'syz.5.758': attribute type 10 has an invalid length. [ 292.467476][ T9661] mac80211_hwsim hwsim13 wlan1: left allmulticast mode [ 292.475217][ T9661] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 293.268656][ T9668] mac80211_hwsim hwsim13 wlan1: entered allmulticast mode [ 293.344863][ T9668] bond0: (slave wlan1): Releasing backup interface [ 293.420954][ T9668] netlink: 'syz.5.760': attribute type 10 has an invalid length. [ 293.423513][ T9668] mac80211_hwsim hwsim13 wlan1: left allmulticast mode [ 293.429661][ T9668] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 293.438224][ T9671] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 293.496674][ T9671] bond0: (slave wlan1): Releasing backup interface [ 293.620368][ T9671] netlink: 'syz.0.761': attribute type 10 has an invalid length. [ 293.623045][ T9671] mac80211_hwsim hwsim3 wlan1: left allmulticast mode [ 293.628877][ T9671] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 293.850712][ T9681] netlink: 20 bytes leftover after parsing attributes in process `syz.5.763'. [ 293.854025][ T9680] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 293.950346][ T9684] bond0: (slave wlan1): Releasing backup interface [ 294.012176][ T9684] netlink: 'syz.0.764': attribute type 10 has an invalid length. [ 294.017017][ T9684] mac80211_hwsim hwsim3 wlan1: left allmulticast mode [ 294.035141][ T9684] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 294.626779][ T9689] netlink: 28 bytes leftover after parsing attributes in process `syz.0.766'. [ 295.415041][ T9709] bond0: (slave wlan1): Releasing backup interface [ 295.791291][ T9715] mac80211_hwsim hwsim13 wlan1: entered allmulticast mode [ 295.903677][ T9717] bond0: (slave wlan1): Releasing backup interface [ 296.003853][ T9713] netlink: 'syz.5.771': attribute type 10 has an invalid length. [ 296.007152][ T9713] mac80211_hwsim hwsim13 wlan1: left allmulticast mode [ 296.011607][ T9713] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 296.696972][ T9726] mac80211_hwsim hwsim13 wlan1: entered allmulticast mode [ 296.817690][ T9729] bond0: (slave wlan1): Releasing backup interface [ 296.825958][ T9730] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 296.912664][ T9729] netlink: 'syz.5.773': attribute type 10 has an invalid length. [ 296.915144][ T9729] mac80211_hwsim hwsim13 wlan1: left allmulticast mode [ 296.924211][ T9729] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 296.972090][ T9733] netlink: 'syz.1.774': attribute type 10 has an invalid length. [ 296.974620][ T9733] mac80211_hwsim hwsim5 wlan1: left allmulticast mode [ 296.987211][ T9733] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 297.006496][ T9736] netlink: 28 bytes leftover after parsing attributes in process `syz.4.776'. [ 297.172641][ T9739] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 297.237431][ T9739] bond0: (slave wlan1): Releasing backup interface [ 297.360829][ T9739] netlink: 'syz.4.777': attribute type 10 has an invalid length. [ 297.364362][ T9739] mac80211_hwsim hwsim11 wlan1: left allmulticast mode [ 297.377630][ T9739] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 297.594789][ T9744] mac80211_hwsim hwsim13 wlan1: entered allmulticast mode [ 297.755311][ T9747] bond0: (slave wlan1): Releasing backup interface [ 297.836345][ T9747] netlink: 'syz.5.778': attribute type 10 has an invalid length. [ 297.839666][ T9747] mac80211_hwsim hwsim13 wlan1: left allmulticast mode [ 297.848158][ T9747] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 298.483336][ T9768] mac80211_hwsim hwsim13 wlan1: entered allmulticast mode [ 298.583120][ T9769] bond0: (slave wlan1): Releasing backup interface [ 298.643761][ T9769] netlink: 'syz.5.782': attribute type 10 has an invalid length. [ 298.646341][ T9769] mac80211_hwsim hwsim13 wlan1: left allmulticast mode [ 298.651228][ T9769] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 299.086782][ T9778] netlink: 28 bytes leftover after parsing attributes in process `syz.1.785'. [ 299.092219][ T9777] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 299.169961][ T9777] bond0: (slave wlan1): Releasing backup interface [ 299.177659][ T9781] netlink: 'syz.0.784': attribute type 10 has an invalid length. [ 299.188128][ T9781] mac80211_hwsim hwsim3 wlan1: left allmulticast mode [ 299.196151][ T9781] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 299.237994][ T9782] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 299.334802][ T9783] bond0: (slave wlan1): Releasing backup interface [ 299.405542][ T9783] netlink: 'syz.1.786': attribute type 10 has an invalid length. [ 299.408848][ T9783] mac80211_hwsim hwsim5 wlan1: left allmulticast mode [ 299.457779][ T9783] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 299.612640][ T9786] netlink: 20 bytes leftover after parsing attributes in process `syz.5.787'. [ 299.734745][ T9790] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 299.875174][ T9793] bond0: (slave wlan1): Releasing backup interface [ 299.955137][ T9793] netlink: 'syz.0.788': attribute type 10 has an invalid length. [ 299.957767][ T9793] mac80211_hwsim hwsim3 wlan1: left allmulticast mode [ 299.964046][ T9793] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 300.316634][ T9810] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 300.362682][ T9810] bond0: (slave wlan1): Releasing backup interface [ 300.445605][ T9810] netlink: 'syz.1.791': attribute type 10 has an invalid length. [ 300.448291][ T9810] mac80211_hwsim hwsim5 wlan1: left allmulticast mode [ 300.454823][ T9810] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 300.994563][ T9820] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 301.034163][ T9823] netlink: 28 bytes leftover after parsing attributes in process `syz.1.794'. [ 301.068022][ T9820] netlink: 'syz.0.793': attribute type 10 has an invalid length. [ 301.082485][ T9821] bond0: (slave wlan1): Releasing backup interface [ 301.093370][ T9820] mac80211_hwsim hwsim3 wlan1: left allmulticast mode [ 301.104281][ T9820] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 301.327922][ T9829] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 301.516137][ T9833] bond0: (slave wlan1): Releasing backup interface [ 301.722616][ T9835] mac80211_hwsim hwsim11 wlan1: left allmulticast mode [ 301.744716][ T9835] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 301.749766][ T9840] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 301.796121][ T9840] bond0: (slave wlan1): Releasing backup interface [ 301.962369][ T9840] validate_nla: 1 callbacks suppressed [ 301.962380][ T9840] netlink: 'syz.1.798': attribute type 10 has an invalid length. [ 301.966621][ T9840] mac80211_hwsim hwsim5 wlan1: left allmulticast mode [ 301.972395][ T9840] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 302.413306][ T9848] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 302.549231][ T9848] netlink: 'syz.4.800': attribute type 10 has an invalid length. [ 302.563899][ T9853] bond0: (slave wlan1): Releasing backup interface [ 302.568098][ T9848] mac80211_hwsim hwsim11 wlan1: left allmulticast mode [ 302.583417][ T9848] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 302.597256][ T9858] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 302.631000][ T9858] bond0: (slave wlan1): Releasing backup interface [ 302.724390][ T9858] netlink: 'syz.1.802': attribute type 10 has an invalid length. [ 302.727571][ T9858] mac80211_hwsim hwsim5 wlan1: left allmulticast mode [ 302.735706][ T9858] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 302.894540][ T9862] netlink: 28 bytes leftover after parsing attributes in process `syz.1.803'. [ 303.016950][ T9865] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 303.080242][ T9865] bond0: (slave wlan1): Releasing backup interface [ 303.147801][ T9865] netlink: 'syz.1.804': attribute type 10 has an invalid length. [ 303.153180][ T9865] mac80211_hwsim hwsim5 wlan1: left allmulticast mode [ 303.162550][ T9865] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 303.312214][ T5965] Bluetooth: hci1: command 0x0406 tx timeout [ 303.429288][ T9873] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 303.477827][ T9873] bond0: (slave wlan1): Releasing backup interface [ 303.557534][ T9873] netlink: 'syz.1.806': attribute type 10 has an invalid length. [ 303.559940][ T9873] mac80211_hwsim hwsim5 wlan1: left allmulticast mode [ 303.566049][ T9873] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 303.677871][ T9877] mac80211_hwsim hwsim13 wlan1: entered allmulticast mode [ 303.694993][ T9877] bond0: (slave wlan1): Releasing backup interface [ 303.733216][ T9877] netlink: 'syz.5.808': attribute type 10 has an invalid length. [ 303.735657][ T9877] mac80211_hwsim hwsim13 wlan1: left allmulticast mode [ 303.739705][ T9877] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 304.503260][ T9887] bond0: (slave wlan1): Releasing backup interface [ 304.894777][ T9891] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 304.947554][ T9893] netlink: 28 bytes leftover after parsing attributes in process `syz.1.812'. [ 304.983659][ T9894] bond0: (slave wlan1): Releasing backup interface [ 305.044800][ T9894] netlink: 'syz.0.811': attribute type 10 has an invalid length. [ 305.047432][ T9894] mac80211_hwsim hwsim3 wlan1: left allmulticast mode [ 305.052976][ T9894] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 305.788133][ T9914] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 305.879275][ T9915] bond0: (slave wlan1): Releasing backup interface [ 305.943636][ T9915] netlink: 'syz.0.815': attribute type 10 has an invalid length. [ 305.946146][ T9915] mac80211_hwsim hwsim3 wlan1: left allmulticast mode [ 305.952249][ T9915] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 306.531063][ T9925] mac80211_hwsim hwsim13 wlan1: entered allmulticast mode [ 306.707678][ T9929] netlink: 'syz.5.818': attribute type 10 has an invalid length. [ 306.710345][ T9929] mac80211_hwsim hwsim13 wlan1: left allmulticast mode [ 306.716428][ T9929] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 307.403075][ T9945] netlink: 28 bytes leftover after parsing attributes in process `syz.4.821'. [ 307.555335][ T9948] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 307.659302][ T9950] netlink: 20 bytes leftover after parsing attributes in process `syz.5.820'. [ 307.683499][ T9952] bond0: (slave wlan1): Releasing backup interface [ 307.820433][ T9952] netlink: 'syz.4.822': attribute type 10 has an invalid length. [ 307.823125][ T9952] mac80211_hwsim hwsim11 wlan1: left allmulticast mode [ 307.829609][ T9952] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 307.931913][ T9955] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 308.053224][ T9956] bond0: (slave wlan1): Releasing backup interface [ 308.235899][ T9956] netlink: 'syz.1.823': attribute type 10 has an invalid length. [ 308.238891][ T9956] mac80211_hwsim hwsim5 wlan1: left allmulticast mode [ 308.248519][ T9956] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 308.637176][ T9966] bond0: (slave wlan1): Releasing backup interface [ 308.665597][ T9967] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 308.803143][ T9967] bond0: (slave wlan1): Releasing backup interface [ 308.968405][ T9964] netlink: 'syz.4.825': attribute type 10 has an invalid length. [ 308.971986][ T9964] mac80211_hwsim hwsim11 wlan1: left allmulticast mode [ 308.976678][ T9964] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 310.361457][ T9999] netlink: 28 bytes leftover after parsing attributes in process `syz.0.830'. [ 310.485633][T10009] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 310.640445][T10011] netlink: 'syz.0.832': attribute type 10 has an invalid length. [ 310.644076][T10011] mac80211_hwsim hwsim3 wlan1: left allmulticast mode [ 310.649820][T10011] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 310.922896][T10014] bond0: (slave wlan1): Releasing backup interface [ 311.555586][T10030] netlink: 20 bytes leftover after parsing attributes in process `syz.0.834'. [ 313.453582][T10061] netlink: 28 bytes leftover after parsing attributes in process `syz.5.840'. [ 313.463499][T10059] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 313.539556][T10064] bond0: (slave wlan1): Releasing backup interface [ 313.635825][T10070] netlink: 'syz.1.839': attribute type 10 has an invalid length. [ 313.642934][T10069] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 313.646141][T10070] mac80211_hwsim hwsim5 wlan1: left allmulticast mode [ 313.660558][T10070] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 313.729260][T10071] bond0: (slave wlan1): Releasing backup interface [ 313.871605][T10071] netlink: 'syz.0.842': attribute type 10 has an invalid length. [ 313.884704][T10071] mac80211_hwsim hwsim3 wlan1: left allmulticast mode [ 313.891900][T10071] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 314.408150][T10077] bond0: (slave wlan1): Releasing backup interface [ 314.621757][T10081] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 314.741490][T10085] bond0: (slave wlan1): Releasing backup interface [ 314.797175][T10088] netlink: 20 bytes leftover after parsing attributes in process `syz.4.846'. [ 314.826412][T10080] netlink: 'syz.0.845': attribute type 10 has an invalid length. [ 314.829381][T10080] mac80211_hwsim hwsim3 wlan1: left allmulticast mode [ 314.833589][T10080] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 315.293728][T10099] netlink: 28 bytes leftover after parsing attributes in process `syz.0.849'. [ 315.432594][T10104] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 315.524016][T10109] bond0: (slave wlan1): Releasing backup interface [ 315.586094][T10109] netlink: 'syz.1.850': attribute type 10 has an invalid length. [ 315.588572][T10109] mac80211_hwsim hwsim5 wlan1: left allmulticast mode [ 315.594757][T10109] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 316.461606][T10125] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 316.594245][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.595062][T10129] bond0: (slave wlan1): Releasing backup interface [ 316.598536][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 316.692511][T10129] netlink: 'syz.1.855': attribute type 10 has an invalid length. [ 316.695094][T10129] mac80211_hwsim hwsim5 wlan1: left allmulticast mode [ 316.699515][T10129] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 318.264519][T10157] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 318.450191][T10159] netlink: 'syz.4.862': attribute type 10 has an invalid length. [ 318.452690][T10159] mac80211_hwsim hwsim11 wlan1: left allmulticast mode [ 318.458168][T10159] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 318.658759][T10163] bond0: (slave wlan1): Releasing backup interface [ 319.130358][T10179] ------------[ cut here ]------------ [ 319.132327][T10179] WARNING: CPU: 2 PID: 10179 at kernel/kcov.c:872 kcov_remote_start+0xf7/0x6d0 [ 319.135231][T10179] Modules linked in: [ 319.136657][T10179] CPU: 2 UID: 0 PID: 10179 Comm: syz.4.865 Not tainted 6.16.0-rc1-syzkaller-00203-g4774cfe3543a #0 PREEMPT(full) [ 319.142056][T10179] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 319.145673][T10179] RIP: 0010:kcov_remote_start+0xf7/0x6d0 [ 319.147886][T10179] Code: 65 4c 8b 3d a3 58 10 12 4d 89 7c 24 28 8b 95 18 16 00 00 65 8b 05 a9 58 10 12 a9 00 01 ff 00 75 53 81 e2 ff ff ff bf 74 4b 90 <0f> 0b 90 e8 c1 ac c0 09 44 8b 1d 9a e8 1f 19 89 c0 48 03 1c c5 a0 [ 319.153968][T10179] RSP: 0018:ffffc90007f4e9c0 EFLAGS: 00010002 [ 319.155931][T10179] RAX: 0000000080000200 RBX: ffffffff93cc7968 RCX: 0000000000000001 [ 319.158511][T10179] RDX: 0000000000000002 RSI: ffffffff8ddee206 RDI: ffffffff8c155fa0 [ 319.161009][T10179] RBP: ffff888023524880 R08: 6a0687483c8f491e R09: 0000000000000014 [ 319.163509][T10179] R10: ffffc90007f4e880 R11: 0000000000000001 R12: ffff88802b428968 [ 319.166092][T10179] R13: 0000000000000200 R14: 0000000000000000 R15: ffff888023524880 [ 319.168607][T10179] FS: 0000000000000000(0000) GS:ffff888097761000(0063) knlGS:00000000f50ddb40 [ 319.171522][T10179] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 319.173679][T10179] CR2: 0000000032507ffc CR3: 000000006d68d000 CR4: 0000000000352ef0 [ 319.176680][T10179] Call Trace: [ 319.177856][T10179] [ 319.178864][T10179] ieee80211_rx_list+0x45f/0x2980 [ 319.180504][T10179] ? __lock_acquire+0x622/0x1c90 [ 319.182177][T10179] ? __pfx_ieee80211_rx_list+0x10/0x10 [ 319.183935][T10179] ? __lock_acquire+0xb8a/0x1c90 [ 319.185769][T10179] ? lock_acquire+0x179/0x350 [ 319.187326][T10179] ieee80211_rx_napi+0xdc/0x410 [ 319.188915][T10179] ? __pfx_ieee80211_rx_napi+0x10/0x10 [ 319.190690][T10179] ? lockdep_hardirqs_on+0x7c/0x110 [ 319.192364][T10179] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 319.194276][T10179] ieee80211_handle_queued_frames+0xd5/0x130 [ 319.196346][T10179] ? ieee80211_stop_device+0x14/0x110 [ 319.198290][T10179] ieee80211_stop_device+0x32/0x110 [ 319.199959][T10179] ieee80211_do_stop+0x1ac3/0x2520 [ 319.201672][T10179] ? __pfx_ieee80211_do_stop+0x10/0x10 [ 319.203455][T10179] ? do_raw_spin_lock+0x12c/0x2b0 [ 319.205219][T10179] ? mark_held_locks+0x49/0x80 [ 319.207191][T10179] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 319.209618][T10179] ? __pfx_ieee80211_stop+0x10/0x10 [ 319.211635][T10179] ieee80211_stop+0x165/0x300 [ 319.213171][T10179] ? __pfx_ieee80211_stop+0x10/0x10 [ 319.214925][T10179] __dev_close_many+0x29b/0x770 [ 319.216573][T10179] ? __pfx___dev_close_many+0x10/0x10 [ 319.218354][T10179] __dev_change_flags+0x4d8/0x720 [ 319.220001][T10179] ? __pfx___dev_change_flags+0x10/0x10 [ 319.221777][T10179] ? find_held_lock+0x2b/0x80 [ 319.223324][T10179] ? __pfx_validate_linkmsg+0x10/0x10 [ 319.225163][T10179] netif_change_flags+0x8d/0x160 [ 319.227139][T10179] do_setlink.constprop.0+0xb53/0x4380 [ 319.228969][T10179] ? __pfx_do_setlink.constprop.0+0x10/0x10 [ 319.230885][T10179] ? stack_trace_save+0x8e/0xc0 [ 319.232452][T10179] ? __pfx_stack_trace_save+0x10/0x10 [ 319.234207][T10179] ? __lock_acquire+0xb8a/0x1c90 [ 319.236064][T10179] ? kasan_save_stack+0x42/0x60 [ 319.237647][T10179] ? kasan_save_stack+0x33/0x60 [ 319.239255][T10179] ? __kasan_kmalloc+0xaa/0xb0 [ 319.240801][T10179] ? __mutex_trylock_common+0xe9/0x250 [ 319.242592][T10179] ? __pfx___mutex_trylock_common+0x10/0x10 [ 319.244505][T10179] ? __pfx___might_resched+0x10/0x10 [ 319.246668][T10179] ? rcu_is_watching+0x12/0xc0 [ 319.248236][T10179] ? trace_contention_end+0xdd/0x130 [ 319.249970][T10179] ? __mutex_lock+0x1ca/0xb90 [ 319.251502][T10179] ? rcu_is_watching+0x12/0xc0 [ 319.253084][T10179] ? rtnl_newlink+0x600/0x2000 [ 319.254622][T10179] ? trace_cap_capable+0x18d/0x200 [ 319.256320][T10179] ? __pfx___mutex_lock+0x10/0x10 [ 319.257981][T10179] ? apparmor_capable+0x114/0x1d0 [ 319.259617][T10179] ? netlink_ns_capable+0xfa/0x130 [ 319.261326][T10179] rtnl_newlink+0x1446/0x2000 [ 319.262848][T10179] ? __pfx_rtnl_newlink+0x10/0x10 [ 319.264473][T10179] ? __pfx___schedule+0x10/0x10 [ 319.266431][T10179] ? kmem_cache_free+0x2d1/0x4d0 [ 319.268215][T10179] ? kfree_skbmem+0x1a4/0x1f0 [ 319.269781][T10179] ? __lock_acquire+0x622/0x1c90 [ 319.271380][T10179] ? rcu_is_watching+0x12/0xc0 [ 319.272962][T10179] ? trace_cap_capable+0x18d/0x200 [ 319.274606][T10179] ? find_held_lock+0x2b/0x80 [ 319.276405][T10179] ? __pfx_rtnl_newlink+0x10/0x10 [ 319.278269][T10179] ? __pfx_rtnl_newlink+0x10/0x10 [ 319.279934][T10179] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 319.281603][T10179] ? __pfx_rtnl_newlink+0x10/0x10 [ 319.283242][T10179] rtnetlink_rcv_msg+0x95b/0xe90 [ 319.284903][T10179] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 319.286833][T10179] ? __lock_acquire+0xb8a/0x1c90 [ 319.288551][T10179] netlink_rcv_skb+0x158/0x420 [ 319.290141][T10179] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 319.291970][T10179] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 319.293698][T10179] ? rcu_is_watching+0x12/0xc0 [ 319.295295][T10179] netlink_unicast+0x53a/0x7f0 [ 319.296844][T10179] ? __pfx_netlink_unicast+0x10/0x10 [ 319.298603][T10179] netlink_sendmsg+0x8d1/0xdd0 [ 319.300163][T10179] ? __pfx_netlink_sendmsg+0x10/0x10 [ 319.302390][T10179] ? __import_iovec+0x1dd/0x650 [ 319.304261][T10179] ____sys_sendmsg+0xa95/0xc70 [ 319.305933][T10179] ? __pfx_____sys_sendmsg+0x10/0x10 [ 319.307645][T10179] ? get_compat_msghdr+0x11a/0x170 [ 319.309350][T10179] ? __pfx_futex_wake_mark+0x10/0x10 [ 319.311060][T10179] ___sys_sendmsg+0x134/0x1d0 [ 319.312587][T10179] ? __pfx____sys_sendmsg+0x10/0x10 [ 319.314297][T10179] ? find_held_lock+0x2b/0x80 [ 319.316033][T10179] __sys_sendmsg+0x16d/0x220 [ 319.317608][T10179] ? __pfx___sys_sendmsg+0x10/0x10 [ 319.319257][T10179] ? __ia32_sys_futex_time32+0x1d9/0x460 [ 319.321146][T10179] ? rcu_is_watching+0x12/0xc0 [ 319.322714][T10179] __do_fast_syscall_32+0x7c/0x3a0 [ 319.324594][T10179] do_fast_syscall_32+0x32/0x80 [ 319.326612][T10179] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 319.329174][T10179] RIP: 0023:0xf710e579 [ 319.330847][T10179] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 319.338499][T10179] RSP: 002b:00000000f50dd55c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 319.341867][T10179] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000080000040 [ 319.345064][T10179] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 319.348289][T10179] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 319.351500][T10179] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 319.354445][T10179] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 319.357572][T10179] [ 319.358733][T10179] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 319.361490][T10179] CPU: 2 UID: 0 PID: 10179 Comm: syz.4.865 Not tainted 6.16.0-rc1-syzkaller-00203-g4774cfe3543a #0 PREEMPT(full) [ 319.366076][T10179] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 319.370372][T10179] Call Trace: [ 319.371734][T10179] [ 319.372968][T10179] dump_stack_lvl+0x3d/0x1f0 [ 319.374915][T10179] panic+0x71c/0x800 [ 319.376389][T10179] ? __pfx_panic+0x10/0x10 [ 319.378124][T10179] ? show_trace_log_lvl+0x29b/0x3e0 [ 319.380264][T10179] ? kcov_remote_start+0xf7/0x6d0 [ 319.382296][T10179] check_panic_on_warn+0xab/0xb0 [ 319.384325][T10179] __warn+0xf6/0x3c0 [ 319.385957][T10179] ? kcov_remote_start+0xf7/0x6d0 [ 319.388032][T10179] report_bug+0x3c3/0x580 [ 319.389845][T10179] ? kcov_remote_start+0xf7/0x6d0 [ 319.391796][T10179] handle_bug+0x184/0x210 [ 319.393608][T10179] exc_invalid_op+0x17/0x50 [ 319.395460][T10179] asm_exc_invalid_op+0x1a/0x20 [ 319.397504][T10179] RIP: 0010:kcov_remote_start+0xf7/0x6d0 [ 319.399803][T10179] Code: 65 4c 8b 3d a3 58 10 12 4d 89 7c 24 28 8b 95 18 16 00 00 65 8b 05 a9 58 10 12 a9 00 01 ff 00 75 53 81 e2 ff ff ff bf 74 4b 90 <0f> 0b 90 e8 c1 ac c0 09 44 8b 1d 9a e8 1f 19 89 c0 48 03 1c c5 a0 [ 319.407253][T10179] RSP: 0018:ffffc90007f4e9c0 EFLAGS: 00010002 [ 319.409775][T10179] RAX: 0000000080000200 RBX: ffffffff93cc7968 RCX: 0000000000000001 [ 319.413027][T10179] RDX: 0000000000000002 RSI: ffffffff8ddee206 RDI: ffffffff8c155fa0 [ 319.416164][T10179] RBP: ffff888023524880 R08: 6a0687483c8f491e R09: 0000000000000014 [ 319.418947][T10179] R10: ffffc90007f4e880 R11: 0000000000000001 R12: ffff88802b428968 [ 319.421436][T10179] R13: 0000000000000200 R14: 0000000000000000 R15: ffff888023524880 [ 319.423932][T10179] ieee80211_rx_list+0x45f/0x2980 [ 319.425556][T10179] ? __lock_acquire+0x622/0x1c90 [ 319.427175][T10179] ? __pfx_ieee80211_rx_list+0x10/0x10 [ 319.428950][T10179] ? __lock_acquire+0xb8a/0x1c90 [ 319.430522][T10179] ? lock_acquire+0x179/0x350 [ 319.432033][T10179] ieee80211_rx_napi+0xdc/0x410 [ 319.433542][T10179] ? __pfx_ieee80211_rx_napi+0x10/0x10 [ 319.435222][T10179] ? lockdep_hardirqs_on+0x7c/0x110 [ 319.436958][T10179] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 319.438774][T10179] ieee80211_handle_queued_frames+0xd5/0x130 [ 319.440655][T10179] ? ieee80211_stop_device+0x14/0x110 [ 319.442344][T10179] ieee80211_stop_device+0x32/0x110 [ 319.443911][T10179] ieee80211_do_stop+0x1ac3/0x2520 [ 319.445514][T10179] ? __pfx_ieee80211_do_stop+0x10/0x10 [ 319.447247][T10179] ? do_raw_spin_lock+0x12c/0x2b0 [ 319.448862][T10179] ? mark_held_locks+0x49/0x80 [ 319.450405][T10179] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 319.452282][T10179] ? __pfx_ieee80211_stop+0x10/0x10 [ 319.453989][T10179] ieee80211_stop+0x165/0x300 [ 319.455492][T10179] ? __pfx_ieee80211_stop+0x10/0x10 [ 319.457157][T10179] __dev_close_many+0x29b/0x770 [ 319.458721][T10179] ? __pfx___dev_close_many+0x10/0x10 [ 319.460422][T10179] __dev_change_flags+0x4d8/0x720 [ 319.462061][T10179] ? __pfx___dev_change_flags+0x10/0x10 [ 319.463818][T10179] ? find_held_lock+0x2b/0x80 [ 319.465324][T10179] ? __pfx_validate_linkmsg+0x10/0x10 [ 319.467019][T10179] netif_change_flags+0x8d/0x160 [ 319.468587][T10179] do_setlink.constprop.0+0xb53/0x4380 [ 319.470313][T10179] ? __pfx_do_setlink.constprop.0+0x10/0x10 [ 319.472198][T10179] ? stack_trace_save+0x8e/0xc0 [ 319.473786][T10179] ? __pfx_stack_trace_save+0x10/0x10 [ 319.475489][T10179] ? __lock_acquire+0xb8a/0x1c90 [ 319.477079][T10179] ? kasan_save_stack+0x42/0x60 [ 319.478630][T10179] ? kasan_save_stack+0x33/0x60 [ 319.480168][T10179] ? __kasan_kmalloc+0xaa/0xb0 [ 319.481669][T10179] ? __mutex_trylock_common+0xe9/0x250 [ 319.483324][T10179] ? __pfx___mutex_trylock_common+0x10/0x10 [ 319.485107][T10179] ? __pfx___might_resched+0x10/0x10 [ 319.486774][T10179] ? rcu_is_watching+0x12/0xc0 [ 319.488243][T10179] ? trace_contention_end+0xdd/0x130 [ 319.489909][T10179] ? __mutex_lock+0x1ca/0xb90 [ 319.491452][T10179] ? rcu_is_watching+0x12/0xc0 [ 319.492974][T10179] ? rtnl_newlink+0x600/0x2000 [ 319.494492][T10179] ? trace_cap_capable+0x18d/0x200 [ 319.496166][T10179] ? __pfx___mutex_lock+0x10/0x10 [ 319.497809][T10179] ? apparmor_capable+0x114/0x1d0 [ 319.499441][T10179] ? netlink_ns_capable+0xfa/0x130 [ 319.501154][T10179] rtnl_newlink+0x1446/0x2000 [ 319.502701][T10179] ? __pfx_rtnl_newlink+0x10/0x10 [ 319.504334][T10179] ? __pfx___schedule+0x10/0x10 [ 319.505918][T10179] ? kmem_cache_free+0x2d1/0x4d0 [ 319.507493][T10179] ? kfree_skbmem+0x1a4/0x1f0 [ 319.508995][T10179] ? __lock_acquire+0x622/0x1c90 [ 319.510570][T10179] ? rcu_is_watching+0x12/0xc0 [ 319.512083][T10179] ? trace_cap_capable+0x18d/0x200 [ 319.513715][T10179] ? find_held_lock+0x2b/0x80 [ 319.515212][T10179] ? __pfx_rtnl_newlink+0x10/0x10 [ 319.516810][T10179] ? __pfx_rtnl_newlink+0x10/0x10 [ 319.518421][T10179] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 319.520027][T10179] ? __pfx_rtnl_newlink+0x10/0x10 [ 319.521738][T10179] rtnetlink_rcv_msg+0x95b/0xe90 [ 319.523320][T10179] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 319.525089][T10179] ? __lock_acquire+0xb8a/0x1c90 [ 319.526711][T10179] netlink_rcv_skb+0x158/0x420 [ 319.528227][T10179] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 319.529947][T10179] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 319.531622][T10179] ? rcu_is_watching+0x12/0xc0 [ 319.533154][T10179] netlink_unicast+0x53a/0x7f0 [ 319.534686][T10179] ? __pfx_netlink_unicast+0x10/0x10 [ 319.536362][T10179] netlink_sendmsg+0x8d1/0xdd0 [ 319.537934][T10179] ? __pfx_netlink_sendmsg+0x10/0x10 [ 319.539552][T10179] ? __import_iovec+0x1dd/0x650 [ 319.541144][T10179] ____sys_sendmsg+0xa95/0xc70 [ 319.542671][T10179] ? __pfx_____sys_sendmsg+0x10/0x10 [ 319.544218][T10179] ? get_compat_msghdr+0x11a/0x170 [ 319.545862][T10179] ? __pfx_futex_wake_mark+0x10/0x10 [ 319.547540][T10179] ___sys_sendmsg+0x134/0x1d0 [ 319.549069][T10179] ? __pfx____sys_sendmsg+0x10/0x10 [ 319.550770][T10179] ? find_held_lock+0x2b/0x80 [ 319.552305][T10179] __sys_sendmsg+0x16d/0x220 [ 319.553856][T10179] ? __pfx___sys_sendmsg+0x10/0x10 [ 319.555517][T10179] ? __ia32_sys_futex_time32+0x1d9/0x460 [ 319.557346][T10179] ? rcu_is_watching+0x12/0xc0 [ 319.558877][T10179] __do_fast_syscall_32+0x7c/0x3a0 [ 319.560486][T10179] do_fast_syscall_32+0x32/0x80 [ 319.562057][T10179] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 319.564055][T10179] RIP: 0023:0xf710e579 [ 319.565372][T10179] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 319.571288][T10179] RSP: 002b:00000000f50dd55c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 319.573915][T10179] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000080000040 [ 319.576383][T10179] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 319.578862][T10179] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 319.581330][T10179] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 319.583800][T10179] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 319.586292][T10179] [ 319.587975][T10179] Kernel Offset: disabled [ 319.589359][T10179] Rebooting in 86400 seconds.. VM DIAGNOSIS: 16:59:10 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000002 RBX=ffff888021618700 RCX=0000000000000006 RDX=0000000000000000 RSI=ffffffff8de13681 RDI=ffffffff8c155fa0 RBP=0000000000000286 RSP=ffffc9002234f818 R8 =0000000000000001 R9 =0000000000000001 R10=ffffffff90a82b57 R11=0000000000000001 R12=0000000000000002 R13=ffff888021618570 R14=ffff888021618740 R15=ffff8880216180e8 RIP=ffffffff8b7ed571 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888097561000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f3511cfe000 CR3=0000000047c11000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6f732e6d61706269 6c2f343662696c2f ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000610 000000000000f9f0 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffff0000000000ff ffffffffffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ffffffffffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000001da0 0000000000033260 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 EAX=f68f08a0 EBX=815fdc38 ECX=00000000 EDX=815fdc38 ESI=815fdc38 EDI=f68eebd0 EBP=f68ef850 ESP=ff99e6d0 EIP=f70b7aaf EFL=00000296 [--S-AP-] CPL=3 II=0 A20=1 SMM=0 HLT=0 ES =002b 00000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0023 00000000 ffffffff 00c0fb00 DPL=3 CS32 [-RA] SS =002b 00000000 ffffffff 00c0f300 DPL=3 DS [-WA] DS =002b 00000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 00000000 ffffffff 00c00000 GS =0063 568d4440 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 00000000 ffffffff 00c00000 TR =0040 0004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000002f9fdffc CR3=000000004b989000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000f000000000 0000000300000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=dffffc0000000060 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd RSI=ffffffff85580ed0 RDI=ffffffff9b06da80 RBP=ffffffff9b06da40 RSP=ffffc90007f4e2d8 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000001 R12=0000000000000000 R13=0000000000000020 R14=fffffbfff360dba2 R15=dffffc0000000000 RIP=ffffffff85580ef7 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888097761000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000032507ffc CR3=000000006d68d000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000005000000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000003 RBX=ffff888021633680 RCX=ffffffff81896c45 RDX=0000000000000000 RSI=0000000000000004 RDI=ffff888021633680 RBP=ffffc90023a0f978 RSP=ffffc90023a0f930 R8 =0000000000000000 R9 =ffffed10042c66d0 R10=ffff888021633683 R11=0000000000000001 R12=ffff88802b53bdc0 R13=ffff888022b24880 R14=0000000000000001 R15=ffff88802b53cc30 RIP=ffffffff81896c67 RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888097861000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000080785000 CR3=000000006d68d000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000a000000000 0000000200000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000