last executing test programs: 3m55.375332465s ago: executing program 0 (id=558): r0 = open$dir(&(0x7f0000000340)='./file0\x00', 0x40000, 0x12) readlinkat(r0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)=""/119, 0x77) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000020b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0xce56fe61a68fc369, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x60, 0x30, 0x1, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0xffffffffffffffff, 0x4}, 0x3}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(0xffffffffffffffff, 0xc05c5340, &(0x7f0000000440)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000100)=0x11) socket$phonet_pipe(0x23, 0x5, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000040)=0x1) readv(r7, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0x940}], 0x1) ioctl$TIOCSETD(r7, 0x5423, &(0x7f00000001c0)=0x17) ioctl$TIOCVHANGUP(r7, 0x5437, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000280)={0xa2, 0x4, 0x1, 'queue0\x00', 0x5}) socket$netlink(0x10, 0x3, 0x4) 3m54.456244265s ago: executing program 0 (id=563): mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) r0 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r0, 0x800442d2, &(0x7f0000000440)={0x1, &(0x7f0000000340)=[{0x0, 0x0, 0x0, @remote}]}) chdir(&(0x7f0000000240)='./file0\x00') mkdir(&(0x7f0000000000)='./control\x00', 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0xc0686611, &(0x7f0000000180)={0x67, 0x0, 0x2, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) open$dir(&(0x7f00000002c0)='./control/file0\x00', 0x80040, 0xb3) symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./file1\x00', 0x27) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') r2 = openat$khugepaged_scan(0xffffff9c, &(0x7f0000000380), 0x1, 0x0) fcntl$setlease(r2, 0x400, 0x2) unlink(&(0x7f00000001c0)='./control/file0\x00') r3 = memfd_create(&(0x7f0000000000)='\xf3\xd9\b\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xfd\xd7\x8e\x7f\x89\xb8\xc5;~\x04\x03~K\xfbP\x84\x9d\x14Q\xa4=\xfa\x81\f\x1et\x10\x0e\xcf', 0x0) lseek(r3, 0x0, 0x4) rmdir(&(0x7f0000000040)='./control\x00') 3m54.406243755s ago: executing program 0 (id=564): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010080030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a320000000090000000060a010400000000000000000100000008000b400000000068000480340001800b000100657874686472000024000280080001400000000c080003400000000008000440000000220500020007000000300001800c000100626974776973650020000280080003400000000408000140000000140800024000000600040004800900010073797a"], 0x104}}, 0x0) 3m54.405579298s ago: executing program 0 (id=565): r0 = socket$kcm(0x10, 0x400000002, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1200000001000000040000000800000000000000", @ANYRES32, @ANYBLOB="00000000000000400000000000000400720220e1", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_emit_ethernet(0x1ba, &(0x7f0000002580)={@local, @broadcast, @void, {@ipv6={0x86dd, @tipc_packet={0x5, 0x6, "ad2c0d", 0x184, 0x6, 0x73b3883f147fd29e, @local, @private1, {[@routing={0x1, 0x14, 0x2, 0x40, 0x0, [@local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev={0xfe, 0x80, '\x00', 0x18}, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @empty, @dev={0xfe, 0x80, '\x00', 0x28}, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3c}}]}, @srh={0x62, 0x0, 0x4, 0x0, 0x1, 0x0, 0xd94}, @fragment={0x16, 0x0, 0x8, 0x0, 0x0, 0x1f, 0x66}, @hopopts={0x49, 0x2, '\x00', [@padn={0x1, 0x1, [0x0]}, @padn, @hao={0xc9, 0x10, @mcast2}]}, @routing={0x3b, 0x6, 0x1, 0x9, 0x0, [@private2, @private1, @mcast2]}, @dstopts={0x0, 0x4, '\x00', [@enc_lim={0x4, 0x1, 0x2}, @pad1, @jumbo={0xc2, 0x4, 0x80000001}, @jumbo={0xc2, 0x4, 0xc}, @hao={0xc9, 0x10, @private1}]}], @name_distributor={{0x44, 0x0, 0x0, 0x0, 0x0, 0xa, 0xb, 0x2, 0x9, 0x0, 0x1, 0x0, 0x5, 0x1, 0x4e20, 0x4e24, 0x4, 0x4}, [{0x9, 0x8fc0, 0x2, 0x71e, 0x4, 0x7, 0x6, 0x9}]}}}}}}, 0x0) bpf$BPF_PROG_ATTACH(0x9, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="11"], 0x11) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000280)=r2, 0x4) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="93430000520033"], 0xfe33) r3 = socket(0x1d, 0x3, 0x6) r4 = socket$inet(0x2, 0x3, 0x6) ioctl$sock_inet_SIOCSARP(r4, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @dev}, {0x1, @local}, 0x4a, {0x2, 0x0, @dev}}) ioctl$sock_inet_SIOCSARP(r4, 0x8953, &(0x7f0000000000)={{0x2, 0x0, @dev}, {0x0, @local}, 0x4a, {0x2, 0x0, @broadcast}, 'syz_tun\x00'}) getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000380)={0x2020}, 0x2020) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) timer_create(0x0, &(0x7f0000000180)={0x0, 0x21, 0x4}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x200001, &(0x7f0000000080)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f00000000c0)='./file0\x00') r6 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r6, 0x90009427, &(0x7f0000000180)) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4c00000010000304000000000000ed02daa70307", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800e00010069703665727370616e00000010000280060011004e2200000400120008000400"], 0x4c}, 0x1, 0x0, 0x0, 0x4000881}, 0x8000) read$FUSE(0xffffffffffffffff, &(0x7f0000002740)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r5, &(0x7f0000006280)="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", 0x2000, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x90, 0x0, 0x0, {0x3, 0x0, 0x0, 0x5, 0xa0, 0x0, {0x0, 0x0, 0x2000000020, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2000, 0x2, r8}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) 3m54.013835229s ago: executing program 0 (id=567): r0 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) write$char_usb(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket(0x1e, 0x1, 0x0) connect$tipc(r1, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) io_setup(0x8, &(0x7f0000000000)=0x0) io_submit(r3, 0x1, &(0x7f0000000040)=[&(0x7f0000000300)={0xffffff7f00000000, 0x0, 0x0, 0x1, 0x200, r2, 0x0, 0x0, 0x4}]) write$binfmt_misc(r1, &(0x7f0000000080), 0x2000011a) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_NODE_ADDR(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x0, 0x201, 0x400000, 0x25dfdbff, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}}, 0x0) io_setup(0x7fffffff, &(0x7f0000000340)) sendmsg$DEVLINK_CMD_TRAP_SET(r1, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x54, 0x0, 0x20, 0x70bd2d, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}]}, 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x4080) 3m53.845910933s ago: executing program 0 (id=569): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f00000013c0)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r1, &(0x7f00000003c0)="a7", 0xfffffffffffffd51, 0x0, 0x0, 0xfffffee2) recvmsg(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000900)}, 0x10122) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r1, 0x6, 0x15, &(0x7f0000000000)=0xea, 0x4) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="557b000000000000280012800b00010067656e65766500001800028008000b40"], 0x48}}, 0x0) 3m53.845420564s ago: executing program 32 (id=569): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f00000013c0)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r1, &(0x7f00000003c0)="a7", 0xfffffffffffffd51, 0x0, 0x0, 0xfffffee2) recvmsg(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000900)}, 0x10122) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r1, 0x6, 0x15, &(0x7f0000000000)=0xea, 0x4) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="557b000000000000280012800b00010067656e65766500001800028008000b40"], 0x48}}, 0x0) 2m36.414544584s ago: executing program 1 (id=1039): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_merged\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) syz_open_dev$sndctrl(&(0x7f0000000040), 0xff, 0x200001) ioctl$SIOCSIFHWADDR(r0, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="c300"}) 2m36.365656622s ago: executing program 1 (id=1040): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) prlimit64(r1, 0xd, &(0x7f0000000180)={0x1}, &(0x7f00000001c0)) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r2, 0x0, 0x30, 0xe1515f8735398fb, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x45c], 0x0, 0x0, 0x20ec, 0x1}}, 0x40) sendmmsg$inet6(r0, &(0x7f0000000f00)=[{{&(0x7f0000000300)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000100)='k', 0x1}], 0x1}}, {{&(0x7f0000000040)={0xa, 0x4e23, 0x4, @local, 0x6}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000080)="b6", 0x1}], 0x1}}], 0x2, 0x0) shutdown(r0, 0x1) getsockopt$bt_hci(r0, 0x84, 0x80, &(0x7f00000010c0)=""/4111, &(0x7f0000000000)=0x100f) 2m36.364944662s ago: executing program 1 (id=1041): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff, 0xaf71, 0x0, 0x0, 0x81, 0x7, 0xe, 0x401, 0x8, 0x2, 0x7, 'syz0\x00'}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f00000000c0)=@x86={0xe4, 0x6, 0x7, 0x0, 0xfffffff8, 0x40, 0x6, 0xa, 0x5a, 0x7, 0x10, 0x2e, 0x0, 0x3, 0x9, 0x6, 0xff, 0x0, 0x34, '\x00', 0x2f, 0x9}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x7, 0x0, 0x180, 0x7, 0x0, 0xf1, 0x0, 0x8000000000000, 0x5, 0x0, 0x9, 0x0, 0x0, 0x0, 0xbd9], 0x1, 0x3c4210}) ioctl$KVM_RUN(r2, 0xae80, 0x4b) 2m36.199500038s ago: executing program 1 (id=1045): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) r1 = openat$ocfs2_control(0xffffff9c, &(0x7f0000000000), 0x20302, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x1a) setsockopt$sock_int(r0, 0x1, 0xa, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x2, 0x0) r5 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)={0xf, 0x1403, 0x1, 0x70bd2d, 0x25dfdbff, "", [{{0x0, 0x2, 'syz2\x00'}, {0x0, 0x41, 'rxe\x00'}, {0x0, 0x33, 'bridge_slave_1\x00'}}, {{0x0, 0x2, 'syz1\x00'}, {0x0, 0x41, 'siw\x00'}, {0x0, 0x33, 'batadv0\x00'}}, {{0xfffffffffffffebb, 0x2, 'syz2\x00'}, {0x0, 0x41, 'rxe\x00'}, {0x0, 0x33, 'pim6reg1\x00'}}]}, 0x10}, 0x1, 0x0, 0x0, 0x4c090}, 0x20000880) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={0xffffffffffffffff, 0x58, &(0x7f0000000400)}, 0x10) connect$inet(r5, &(0x7f0000001980)={0x2, 0x1, @loopback}, 0x10) r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r6, 0x4068aea3, &(0x7f0000000180)={0xa4, 0x0, 0x1}) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) r7 = fsopen(&(0x7f0000000180)='gfs2meta\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040), 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) sendmmsg$inet(r5, &(0x7f0000000340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB], 0x24}}], 0x1, 0x8c37c2b979564e6e) 2m35.336088605s ago: executing program 1 (id=1051): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', 0x0}) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x1a3089, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) symlink(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) setpgid(r0, 0x0) setpgid(0x0, r0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r1, 0x0, 0x0) bpf$ENABLE_STATS(0x20, &(0x7f0000000640), 0x4) write$FUSE_INIT(r1, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount(0x0, &(0x7f0000000300)='./file1\x00', &(0x7f0000000080)='tmpfs\x00', 0x800, 0x0) (fail_nth: 5) 2m35.124899483s ago: executing program 1 (id=1054): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000fcffffdf0000000000000000850000003600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0xc, &(0x7f0000000280)=@assoc_value={0x0}, &(0x7f0000000880)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f0000000080)={r3, 0x2}, 0x8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="178d048604bf0bfb1945d7430008", 0x0, 0x501, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) (fail_nth: 10) r4 = gettid() timer_create(0x6, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8}, [@call={0x85, 0x0, 0x0, 0x2a}, @printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x10}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r5, 0x609, 0xe, 0x0, &(0x7f0000000140)="dd800000000000005d8ec6f10000", 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000071121b000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, &(0x7f000000b000)={0x77359400}, &(0x7f0000048000), 0x0) timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_procfs(0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) 2m20.108698904s ago: executing program 33 (id=1054): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000fcffffdf0000000000000000850000003600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0xc, &(0x7f0000000280)=@assoc_value={0x0}, &(0x7f0000000880)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f0000000080)={r3, 0x2}, 0x8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="178d048604bf0bfb1945d7430008", 0x0, 0x501, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) (fail_nth: 10) r4 = gettid() timer_create(0x6, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8}, [@call={0x85, 0x0, 0x0, 0x2a}, @printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x10}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r5, 0x609, 0xe, 0x0, &(0x7f0000000140)="dd800000000000005d8ec6f10000", 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000071121b000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, &(0x7f000000b000)={0x77359400}, &(0x7f0000048000), 0x0) timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_procfs(0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) 2m8.986596926s ago: executing program 3 (id=1271): ioctl$KVM_CAP_DIRTY_LOG_RING(0xffffffffffffffff, 0x4068aea3, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x80000c0) r0 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_rfc1337\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000008000", @ANYRES32=0x0, @ANYRES32], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9b, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r3, 0xfffff000, 0xe, 0x0, &(0x7f0000001700)="61df7100c80400d5721ff59fe864", 0x0, 0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x4c) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r4, 0x84, 0x13, 0x0, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x800, &(0x7f0000002380)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x6000}}) ppoll(&(0x7f0000002240)=[{r5}], 0x1, 0x0, 0x0, 0x0) umount2(&(0x7f0000000000)='./file0\x00', 0x0) 2m8.745037227s ago: executing program 3 (id=1275): r0 = io_uring_setup(0x7d98, &(0x7f00000003c0)={0x0, 0xfdcf, 0x2, 0x2}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000080000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0) readv(r2, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0xfdef}], 0x1) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000001200)={0x0, 0xffffff1e, 0xffffffff, 0x4, 0x16, "001bf100eeff0000a2c2000100000000002000"}) r3 = syz_open_pts(r2, 0x101) r4 = dup3(r3, r2, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0xd) r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000000c0)={0xffffffffffffffff}, 0x111, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r5, &(0x7f0000000140)={0x7, 0x8, 0xfa00, {r6, 0x4}}, 0x10) r7 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r5, &(0x7f0000000080)={0x30000000}) write$UHID_INPUT(r4, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000340)='kfree\x00', r1}, 0x18) r8 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100000cb768405e0483020b9901e4020109021b000100000000090400fb015c291d00090509"], 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000080), 0x3, 0x800) syz_usb_disconnect(r8) close_range(r0, 0xffffffffffffffff, 0x0) 2m7.258552783s ago: executing program 3 (id=1281): r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x117, 0x5, 0x0, 0xe) bind$alg(r0, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(cast6)\x00'}, 0x58) r1 = socket$kcm(0x2b, 0x1, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) io_uring_setup(0x2d58, &(0x7f0000000380)={0x0, 0x62cc, 0x400, 0x8000002, 0x3f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0xe2981) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r6, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32={[0x2600, 0x0, 0x2000]}}], 0xffc8) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000900)=[{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f00000007c0)="e0170acdf995ae59c89a454c1263286da8a6263aa870ca3fb4a89fdaca60f134ced2f82ca6b9112ab5f676e4a9d38fc918bd2a850202084655659988990748ca67", 0x41}], 0x1}], 0x1, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x24, 0x4, 0x8, 0x801, 0x0, 0x0, {}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_L3PROTO={0x6}]}, 0x24}}, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0xd, 0x0, 0x0) close(r1) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x28200, 0x0) fanotify_mark(0xffffffffffffffff, 0x1, 0x4800003e, 0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f00000000c0)=0xf) 2m6.359017446s ago: executing program 3 (id=1289): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, 0x0, 0x24008004) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) fanotify_init(0x0, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd74) r4 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x7079, 0x0, 0x4, 0x288, 0x0, r3}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r4, 0x3516, 0x0, 0x0, 0x0, 0x0) write$cgroup_int(r1, &(0x7f0000000080)=0x2, 0x12) socket$netlink(0x10, 0x3, 0x0) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)={0x114, 0x1f, 0x1, 0x0, 0x0, "", [@nested={0x101, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x1f}, @typed={0x14, 0x3, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00'}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe8101000000010000008b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd"]}]}, 0x114}], 0x1}, 0x0) r8 = socket$inet(0x2, 0x3, 0x2) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0x801, 0x200, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfe}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) setsockopt$inet_msfilter(r8, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e0000002ac1414aa00"], 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) syz_init_net_socket$x25(0x9, 0x5, 0x0) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) ioctl$KVM_CAP_DISABLE_QUIRKS(r11, 0x4068aea3, &(0x7f00000000c0)={0x74, 0x0, 0x5ecd977ea6db2784}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x20040000) keyctl$read(0x1f, 0x0, &(0x7f0000000340)=""/122, 0x7a) 2m5.829759729s ago: executing program 3 (id=1292): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, r1, {0x7, 0x1f, 0x1000001, 0x5069f481, 0xfffe, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000041c0)="412e450a2a7b9586d1e6e9de257afc4fd60c8de430c0d6348b2cf1db8d070a539de9c1e91a178f9240dbcfe303566018f6c20c55d643a2ed46aaacf49ca491ee2f06184bdb548778a2c56e56f6b40b994419428bbbb9dfa5f9593511ca8ae1c088fb0ee5da72f505000000000000002c04754204f194ae6ceff4570d44496eeffe619998eafc7167d22e1c6aa73e89ad19224e35130a37cf68d5c41ccafe59b4b753a26e06c4306d31d78de6cede97c06e3ca2cc4af66b7548268efa91621ffca2655d2c8f1a9bb019b88fa729cb3d32f72c098c44898d42c42f39feb4faead93980726c236129acdf31c01f1cabb5ca3ec4e45eb5e6e59912792b4976e3f2b560c861d49b539d8e1870040a8cf190a8a767ec067a8048aac53336b44669d3d425843ae80681a7c02a5d5a3d90f355fd4a6ac277e75230d558f0df20cb323cc65e9b5a258cdd669c8a9534e4aff09a8fe89b124748c9e756c28789c2152a5142bc0bb205e339d43bb980b3f04a3c1a424a2a093966b20600a5410e0528fb35937c998eea19f01eaf2f39e16d85563a6737ddab3213ca1832f0afdf891e34a582f6a4ac81fda70ebc3fedac2fb3a492fdb40b91021e5d371d990064cd1f7c2c1a6472dec7505f9a4940057a3e57fd53aa3cd2eb914e073a19b6e925f8553e6875c093c7d19de25861fd9640f0eca4cda0467f12126daa2e0c6df7d4e4babe5a6e59e8391be7700790315b6b8a8aa74cd6d3f054aceaeda79430676b67fe25c9029e0894b413377fc4d8300d9f9338fadd07e4c80cac08113df8971a868458c47c06fff0c1c4bfd48ea583e9e76ef103d42c233b6de10b30612cdbeb6b60a6a4dbbe2da63cc2dd4fb93cac65af3c1279274f4af0e2c5b96e6068aa5b41f7548fb72b0c142351f64446db7425115b89132b5589ee642ebbde655adb2d7d1117456a6e4f2886879b42baf85e05d53e2aceea9c3830673bdc4d081675fe76b994651af9c3f16b7513834fce4654f84558a8308fa677d05bffcc893d9813bf87c5ec520cd66ad58dc06f0c47d253cd36dfec82980fc8dbdcd4b1c037c2b30bef455984f3e8ed19d69e185fe4fbdda2c2517ec9abfbb4841252e650b6bf56fdeca9a4ee3c311de3c6859ec14cc00e95323c57c02fa894d83ea17944f3112fc19a7e11335d7951ec6dd5b4f06fb9b637313a230341ea5da6a7a959e707d0cd5fca60a6649c8df8d6c17e9a49d230e5775df14e4b43aa3420bd0b8814ec7360ab1910e69fab8932f7646d7998bdc2e8ec354c52da21ed83fb7582cb9d37bb95f144974f72c7b0ae7b42945768fa8ec0dd6daba72d05809670506ef10542a2201b00906c8af64e3e13a10f180688c96549b2d3d6b04403fd571e7b132891dd4b7cf37aec25ca1e9190c17aaefbc31e059915c12c232fb7097e9fa6f35fbb265c7102db62e2264590c583ea90f1aee3f166af81430d9084eb0c760ebbb16049c9fd1fee6ce33c8ac205e3ac9c275531feadfa4054e0c027c26beb009f54aa72b864d39bb11753f77931bb960276db33021c65671e57b3708bbf979be222e8439d71f58ca87cec7a054517af398a42735b580717377a54f139e2c46813cbb03d98e49c26f4ed54d75e48573cd06145f913f4e313eeee837496dfff75aa722fd8486c45f9c959da12ae48ba4a10712120a203e2476c7b96031d8f8773f68344e6fa21831287655aabbd594e9f272eb1a7315d2d79b8bcd5e63004cd106f80b1e40a5d9e428a01bc58264f4d63c2ee9db6efa70607a642aeb883bf4b9fe009d7f09c16b05a2c9b73573e9019e161ebbdc1fc9b9cd0c5fe1b57adcba2d0f3a767ad59aafa159b3dd181f0601ff95e8af8b5410e56c81ffb8ab35b1e04af35dabf69f08572e69260b72bfd502c5a0de627fd3fee44bf1d4a261bd356056c5739398e3ff161beec1240a089625daffbc61dc5e660c274565477a0ff1797fefff04a98704802ab0674ab72d400686229608cbfd2ca20f4e62495e8b09de9d180c47375bbad72f4474b67d56104b4b466192be60f7aa668fd0a4338b856f114311842ee806d6488ab09098ed9de0e21bcc8b42a5d5713d15eca108fcc7a65d6b414a112524a6e1418644508dd957147a92d4399d13faaf01cacef40549cd11900f9aa32a8333f55796ef25d33c554a308da9797cd0ac25888311b0ac88eff0be7a36ddedcfc2b095abb4d5a6a4edbbad67b70cdf60c7ed0c5e040ced90edb3322ef684332358942ede9191b431c99b3abf8f9c50206479f0ac118c0a99df61fb9c90d846f41caa6a2448fb7e15640965e051c2af4ee72a5cc7c962bacff7019615c10e6c3054e2e5792df3aa6e2c33425552148466a88568cc79b6edebf0107b7d3d24423a665d20c3a1c0f1a6b34eb475bf875912115914cfabcf394f8a096d64e5dc95705074fe5e985497dcf052b9f748b9d4688859c0200fa43719e4722ed6c064c0efa7e07beb2a26fd724b63537fa0eb506365d5c029cd8dce7dd0a1cb9d9058c061739734af6be9e880fe7e28a211a4c368a7babd1107110ecbb384b274cc092b9511c4abde2ddd863162e2739984a9f3c0a76e3c530a27d5e385f4a3b87607b2a944e09d28239661d27719e22c0a657ea383c30859ca29cdb8fbc79bc83e995dcb361743a7e195650c37e570b768a0a1f0b118fa5be9b3c838326343ec5b376d5ee040ee29dfd868cccf9cfa4591151f519cd6e2ae1453a58aa92f90ee5be11ceb8511ab743f399be0a190eeddfd112336866831c3255ef6520d88b2581ea3767f3df01a38d9b4656f2a89c5df41443291a795da45c8a846015cd041bea0dfbe648348b10ae73ce43d9017182792cd9172eee642c549a530cc1f537f9aa70ca63792ba4a86a713ae09b917136e5bf1506ad7f367d8d2f77f47a2318facd109bba9b1327b5db9e4aeffbdcf414db761eeacc227a15cd72aa52c8ede33bdbab9de9aa1e8f470a388013d07f08777e2131bbd4856ab5c1c38d03ef407197ccf24e8b2a8db69e78f9d6623033c453541bb79f9e0be9a55588e2e54fce65fb785467064a146c4bf218068b5e3efdafaf93a98253becaef226cd79468ff1bbe0c9d43877f5cbb5844fd8957f15d3ef208aac11816585cdccf039c36b429d3d7fb634054fd0f09c8abea3746a6b7379142abde26d998ac7e39b94746c60c09f86ddbd7497849d1ef839730672449f35a3c3253666e9fc053ac1c518e44e0b84555be507f7c00fa9e4864b4bf40ac3d93f12001eb780a779e655d0633803268c094ae161a0efd652003d6ac47f9a6c28d866b56233f371627b01e0fe9361dca611a28841968d4e12cb73d49ce08fe25de4a90b2d34607202b20e71f5e1eed38e17d0a2748f548cf61735f4c9cead1cb93b11929d906d65fc60f88e6919b7b5a1014e6d408bce9c8cc832eecf9147708fe451891717d2ed99dee70773feaa97985102abd3dd05c904c28898afe060621db6564887bc4afe158fbe1d819136a1ac1dc9d8674798a93daf5255460b50c34496205834c668db4c764e76ebb6cdaf5fc44b881cc2ae87b4a7cc045143f96b1620abfd0f116e673b335beefdafa1e58d9194e010cb78956044646da5ba853ce981667f2b8e5001c2df437c9d597ccd2be7d2887f5cb7aad0539abb3f9db1c8f5cd4d7d831946ba1c1aa8737c114fec1ac9a82519f57cb48c49b7f62e9eaa89f448df33fb307cd0036c70b490ac340f7d04e14f32bfeebb08a9d5bc7bbef8f231ea09311d4c82cc55c90eb53c6c003cc98a34dd3c4ec2d8b3a655a78e16e908f368733d0a02b36fe963e2d80b5e6f7b2e3aae3013c900c76e4d56e8348bef221f8a642e692c23b12520fb68c793e789eeeceb4efb2097a4d5952d144094cd7be6edc933d257f6230e962d70ba42e1b07ad9eca0ccd60d3d9a6e06b73ccf96a8aa490ed3bd58bf4d79db65355ae145b54be004e464f4dd23fb8b1bf15e13838116083da67186513652608e37c8f847b2bcafb57bcefc7efc8c8182c7d708cce5d14695b4e618e77f8e7be81f27a05e415fd37ac21507a665b2558daee5c0b0859fedfede8c03f181ef5e0ec0da6caa3edf402dd73bcb4026c489a7cca8ab700d3e9f050006c36768a16e8a48e48ed5750b8cdb7ad1fd12d4cc8333d324d6c83905303fa7013fc02553b587544affe38f1a95e0c4c39740d63b6d387fc89b30bd5fd745cb64844b13897ccf5cca135f7d39e03ce8adcda919d86b25b52764b0a0c4f07f88df68868415de13863df84a7e8d355b09cf90e482eb4174fd01f1b371a4dc52f3c89fc3a70c71657aa5d7573ef9acf4d2b0b321c41ff2640515bb43637ba2288ca0bff2e2a3a998ad8294c52f9edfe0a4ee0a3f8ed5b4b5c43319bb9c58dd07ea3237d7bb62cb086e7ea4a81cba2cdeb28794a09c275a704963110b64720bd089e3737ee1a91e348b5e97b63e1724de1fa9f49961d653bbb47b6fa993b035cf59659bcd0306180645162568abf51127845cbe6e37cc3c19b9d69657db4258fa5e8428a73eff6506bff474c2e302ad5559ac8de44c6f0baba5e2e579e7d7f9d9ebf540674432ac11d92bfc9abdc24126888b533f43bd6f293b0bc315915743114a35308a0ee2e710522137918a2b09ddbbc7a2313a2a6b85a1ad26f14dd70072651c8300ddf6de29704b716ce1bc431c66ccc96731f46359a9f6850976c96dcb5e0ee47446f50b6b3ba90d45224066e123ad3854d877c0cdd9325000ac0d6813c30cd43d3e150335601724ca3666458dc4c04f6562296982353e155d5255c9008c0b46d21a678c8fcb3aa8d6574476e0458eb0a76a6cb50f929ed218cc4654cb4f95fb3afbc2548b74acc312563375a19e55d488599488dfed4dd31b39f29ad61dad343dfca3b45b316a34e7a7bebd2b0f562a9e69848d13fc80a4fa52d0f17bd15d9e1fd39a7dcc86128d14493805d105a745673bddea68ca74ac09d95cc7412d5be2cbd0a247a81dc9e148111e22cdf3375805469226ca3538f960a6ba6aa0eeeb87c784ffb1bfc09180a61be3c7c535fc6d593c3b3f4de21b8c3eccc9021e80fb07dce0aeb3b023bd55f24356f646791ba80e5ca21ac092a069ae0a22cfefc08c23cc7aa69b570bd17cce9de15871d363f167288f99f04761caa67f12c949466493f661d39ee4280c955446ff5a9bb14f2d1ae21cdb91a5868e0c52097cf380f571935b140562922763f1b79c3709b949c57a00b08828ce9e685f6b234b5fe3c62d9feb249ce75e81f5efd556c14d5da24dc0554723fdbe52659969a39f470e82c50c4777c908628436e31177af1125d5f70ff627462247e5bc20c47ef75f369174586d43d42f7eefdd47fefa745badebca2a881ccc018ea411cc8a7a0881422bee8704bb98e6bea9fbec63441fb45d7ccfd436909b57a2b60b788e15bda3ca7663b19bd84d0879deb639f10def9a99d42a4b9a4fd7fecbf6d2e7598678307ba9a5b6f143c27cf1ca41e3c904007bb762cd5df6e63c4cf422c2ba959e53bd8e5664cf5df6a91a4bc8cebc52b22f30060fcbc5ead53d38eabd160c1da4cab8aa95c3640ffd78074aa2cbb05cb8ea90a0c95a4a1b2be1ee94f238000f1faffa069d87039f13f5f84ff368aec5a0b10020232b9fc954a6c22573ef48459e574d48a4845837e1d6ef386738ccedd093d4d5bf3a3f790c875ba7449d03397642feb71100f2c25ab2cadf0b0802544a2095a51b19cdece623b17d420b173a99c081f8e229b6de3c680d6bb39bb98b479517d77cca581b81cf856753a44ebd64cff111fb8ca37ea45d217a3fca44a083e6c35b0fed9f8f7631178d15e88f86c85f1ce68c900afdd1f7e5b8bd4ef3f58c447b77d3befc49180df7a5eb2ae8ae33b4ef573f3a425da8a60cde84d8eeae6d6399b9fbbfa0fa8d448b25c7f79b7554d0b02b0decbc74ae8560f630af596313fb33d442a410061ace0aa7a440d5e31ca8bb2cc495c4f0b672edb011b0c5f16781836df7f4af8329143d5a1a99d7b18ef9f774c4199d635848cedebac82637a03a189c65bf667503737c75b6639ac65ad424ca475285437e6f19830b36549f607ffc387c8b11a34a838159376a6335afaa045bd2bb04e279dd72436331d07dfbd72e2436b27f0df23a266fd15cf56d1a9e93aaac8901cfe49a3219ae36c5c65c75e5c708fb82cac4d6a50726509ec3a7d32d54cf584ae353a5bff75a6de77a0b240cf8a0a72817c9d37699ca89c96e0e0d96a7665ac3a7d1febca1a1d79e2cbde8025c271360e2f90048b2d9fd56f45c013e001dad4b7785be69dc01f8a954ef7a84455986fc5c9d5167d91808efdb4476ed79f99563d887cfd4e99809d9e388501dea228cbb3cf3770082dc566455251fd9c2c742963c33500618c6ec99e0bef007408a0462a081237be4c6e5db0258d4be5fc9cf63fd1ace1f4166c053b0fb84fe24917da1255cf40bbb1b45644f6a7699cf802a35a932c374b1d62013e6afca3787627469994c02f622ab877ed5491fc2a89eea60e4e1628da89e3ad600ff6442e4ebf20e47304176b6a1703c094b3cf6d7fbbddd8d8fa5a00f28b4d8f43d88487e9d4531071512f2027198714a8d1cef126775547fc74f2a35840510f325e50361be76557767560055e084f2ecaefa0dd8ca8215301a7a887d2eaddaeb1f5c3dfdbd2cc1ba5f02d4426b98c0f861c5f724405758f442560ea6cd1d953456cc4aac6642ad61c03dbaffc2364d8ec2ef9f483c70355139d1fbd9617ab3c7eedf0b8963c1cfdab769180db43c416a90d9fdf3fd0eb2f81187642b4e2a09d6462d27527fdfda31f7b262501749dcfc6c184983f9923424131d05cc811cacf5c2c87e8e6f135349e68cde0e8997bf1dde248e5124d5dca2681abdbe58d327a8edd585821f03fdd4515728f1336495ba25c9bba56a3f706d60c35cbd0b40d0ac0583a981f9af08510ed8ed0a726e5472f8995af3837fbf1e89587633d2ef944868a153919165778e963710872af12faf96c0919c638e5affa97104471ba6e178d27602f96b9546ebe52190d91be245be08742b96389080676a566d3229e593e4f56a76ae4c58113c6adc1088703b1b92dafe32a5600e14ac1e71df829dfef425911f16a2b91f693599ecabf93065c6c4f5fefca8d4ed095599113529f65d9120d5252f577af95b404979508c343df54e4d239720e7d3a861f1dcabfa69e12d655c8a026c10a4df279b139fd222e561d205ac9b45c1054f8699eca594fb23886e0de565186597766dd5e40f74a423d5708dac254f4172f1089270988fb18715813f13ee4d131b64dd517c7e77f27f804b229f5339ac2f483b14739ac33a9645044d3010bd77ed18fb117f7b11bb51c4ed683b59e28bf25a58f123dfbeb1f0f21f03d9b57d8e61d59b311037a5b757b03ca5c95e0eb73922c6918530c99de4d6733640f2b8d13bebce31d4f5e27aab201101e48cde23a0d7e87b9511949d812e3187ee5ff11bc5858c022ed7b00790eba32f9ef7e134ce5f73a01269ca971b40e62133eca9d596a768686d6390b2c74602f6dc597faec3ed9d9658102d99c9624c1a97d00d63853578afaccc7e30a77fe054ebc23eec45f608f996fd015cd6bd50a111360f0790eff6ffb1ea59d13c8e29480bd96217188f97e53a1f5d9eae0a2badb4fea52f2bb4f8cb04d0afd99e7371a978a7d7ef473f77ea6738ff84af655313a12db24cff692ec7e282245ae9a42338db814593448f7115df3dc3f4e2faa2c2fdbd68f679d6aba01a15031347bb17d8bf8f1fad0ecf365e9dcd32e69803c5c05f4b47adbf8a21af7e9fb327f267df1c914486389a9820edf0a03bde6ef388c255761e439b2f7e1f9c1c3c95bd30c502197ab37f76b52f0d0675f366e919be19329853767bba34a540fb75bcdcc9596a4cda254a660e11bed5af9d8646ac4b7d6d7aa5d7c0005879b6d08058a56c3d3a4d3d401b883153fa7f2f6a6d34dd010f6b9e7b4e457b9ff5a5802d7723abb35f9dca0afc10f6791824dbe0a7725d534e7753445b7268d90145b6438b93fc475f44d5d678d79da6c5770f3a9106f3cffbabe4b88cbe7eda9b8a495be4f6717b0fbee6fec78c86031b6d878d47e357b2089de3e6dd19a265552553d1f7da53884ef84d0eebe782791c48a9c68a28d8ea3bb70c922b01dc20b2cd05cfb276e326651398f766f5faaea54a41da597cf6b50f3d5ebc634185b99069126b8d935c6bc42c47f2109de42091ef4ade3d87cc44aeb78709255501e64f34ac2d4b2725cf7777315f8ca9424bc9d61a896a93500faa6cf5a5aee1fb888e17b47a38a667be2ffa3bae46afa88bfd8b5b6e1186d6e41b9a4e490591043372c23f36fb48d80caff74cc349adc92bb25f701738c809ccf74c47afa193795ee67bc58ea7fd85542fa7e70218490fff212163401cfde016df2f42496bae403d5391e53fe200f758bbcdead0fe72c77861889b9632a257229c35bdfe8fa78375b4f5c768b9c60cafbde1f00aff6ca1879f6472f28001f5f13d4d9d6c3a90e04d8df09873550daa8262d39efbe96a79c697fbcc9a7f27c9f6d782d5d5f6d024b291376e9cc40d902f809072e1f0f2c2ab88ce3d074e88461f5971853e7be749943ab6e25e25e8afa5042dd73407f49b50841c7782c54eece62ec2beef1f16caf1ca5989427bd2726ca0fee33e303702e9892e4382e92c3f3a03a6188f39762db81819c7e12b424be8fd964dcdbfbac00139e8c5a6200506f13f484ac34ef3d26e7cadd53cf402117419c1618205bfa5382486094bd55448f2b1aa4dbec2289189b601b1bbf5792b2a641c6f5dd19cf24abc72fc5264cf11f6b44a4929267a02cd1de1b602b9de65a6c06640aa0f76109baa90d66eeb17295b1711365b7d6835a2dd55b7fe868c59453613240643c847a5b48d27897a58dda63e579c1bba58350550e147b190f0a2c9a5ce719d627ce3302028b4b6801bbfa8cd74874ffba35817c0eca034d19210950796807125fe6065dcd47d7c870ed2db5c00cff235e4154e2d89ec2a09a87551f9b7ca25d519b5603c0c33d2cf72878199ffab567fc5e093529b89d1163587f3564ba8291d2d96cf9762e7f568e786ea90849f6312c1a10f45d61600cd45c48e6870a7d76c913f9c4497374fc04401cbd11f7710740148234fe8f041f24d0278fcfd48846e6aa49f05016fc332dc5d46b4a26574fed5c0751cebb9f7ab4cdbc1ee011d82d6ef95c52c9df8eedac3ab5cf30805f23d88d4f707601f8e6c606b58f2fe234e948d6756d430a5c4ec76a33874886c8fb484059b47a9bd198a61a1896419288a9e81d0969dec778a53e8233f0f63bd0134e5f29825e7817e7c8ccb7d9acd8f86ac9d3af78c43df3036d7934dd294f2bb12063bee52c547d27a218145befb0ca96cbfaabd39fa245b51c39f4cd4cf8db105f9dc46a7aaa8f7d06fa208120ce1ac49326179618fa2c8596c44e174eb7a141056b1d17689c10dee089c8b0867b8a757ae12251bbd68db5fba2be341275fb6ee379309f5cde9b31242b0b2bac44da74776fac141936bd96e3177161f057c820a8c22cca8cce29b158eb55aed0260253fbee70a6dd281d9fca23e0b0a38d46c76a95e1262f1cafcf0fc37b52e649a1ba1e2c0f97d10bbf4d2b5632cf340bce56736071d5885ec9b4e17910744d3e63e2ca6deb21e43fc21e89c6865d3ad424ef4a14efe8843ff3168c99ee395400dcc8755719d290c567c95a5e7d28ec1190ceee240084d444265cc801cd960f69b368359bbf06b8a4ec23b47c7bf9d4b16c701a1c4fb9e81abb55bf49d450b566ce03de939fc6f5c51291380086f8c995cdd4fa15a325601c4846a69f15c77f55c900270bc9ea5f406480cb0e3e89bc869fe8b7cec4fbef7e76283d50c25ab1b4d34d093a7df062990a925a9c44aa2661abd7d381a4d6cdb64821ef624dd51b72e99af914bca2f80c25b82ac6945df7c7582e6d0ce2cd073e35f1fc120a68ba210410db64592a9aa319b30f2b818c495750e1cea0610e27d52be31e52e501a3bd51b501bc51c2ec8592f679b6e55b9aa58d513fd2bebadc83ba76eb45e5676f130193e9a666b8c8132c9f5141681fbab324b555c5c890d488ac2dd00feead0a20fbd8a46391438e3193edc6fb89161cd864fca98f4f39a2893c933dcd13bc8c5d5a548d24862e8161c0fad7f33aca8c86791d620815fe3f0daddb5defd933d0c10097a7a98e67625420b6c0db7c3e17ab07ea64e6f0f53fdc670799e06a2e3a871d6be363a2639e35339361311e0f528cc433eacea4f79bf217108c7b1d657840253ffdea18bdd1f93cdee63e7a9b8dbcb4ee06162b253e09ea0641f2771bd9823dd210905e9ea495f43194bb471cdeb690e8890b03b50835d53dde1b572dd123ccc8507bb57a45e46c0efb8fb3d5596bddf9782d86dd911636eae2cf64b5829cf8893faf789be3fa22859accf688f5b5da6c29cacc96d477e23b63cc934f685b6e42e1655c9a9b94d6d78402de22b8d9776e3915391aa258e57467d770d65480ba2f6a94b0337965a8c659c42b4e90b14da4697d0c0a6d74774c94c52d8ecb694eee747bdaa6c3a6d60739db18c6446090eebba72e62ab88b0e8b88e728ba8cb133d8524eda89a2bff1c8414da3edfa6f83788331c8a7e5a8af2dd3682d4752190a3c689949abdad8350111373e7fb46151f54a10f79d91940e37efb05f9f157bddcfacf018b65a38ab614807c34a2786af4a1d48c4d1c1abd31815715f9d1b103992207fc664f12c82fd923c57d8e7cfb9f4af55182318d055c704865cf484206d60e34cf7fe9b6ce60b1772c5c7cdacb6695227d80da18ec1f98a434b1aaf9edb6d082f5663aed2bf267e559dca6b93d3ce34273846fc677f529690482df0a8f782b8ad7269f344f5f2b4d320a7ce2d2fa02284f8db634dc930c3e2b9a629245364acf35d41e9a14c88efde4e742ef1ea4b43d0caf2e70d4a617278823e6403934524debbd933e7676e441a48f630dc8bcccd55d9032d6bf3dea97d1669c39fb865b0e619eeb3f5461e517000f5aee3ef2abdb87d3a76b88e140eb4644a9fbddbdc9e20972cdfacf00bffa3a1ca5f84122c2ebc54067cdaa23967eaeb7bbbfe44e5843382b834fae1f62a066688595e4ee67c7ff9858672355abf7893ebeb4bcf88a62b2237c6e6cec9aebe3f28bfc310ced3a590e88d4bd0f53289206deb9addbf6f3c02115ce4980dadfc112683ae250c2d438fd9c0f2a090dbf122a0072828db798bdb868dcd47384dd3f5eeebc0307a5b268683cd51f312e8f02b5a7746b11a97ac43287d9b9765f03c720503cfe6e0117660a4c00d67895224c4d42b032000a10d7a743054758a8f54941fd5eaf72498b678d1579b3de4e5518f90f1e3d32517d09d7f5da9d180215e66218e9dd64036819cf12638ce82712a6cc79a9ddb36e86814b797d72c2bc58b18ba439e99965f745b4fb7de2878e3186e3e7b835c746b0935f6c67e92e3770bd8d5eb4f66d8175ceb7850e418c55e574db891639aa77fc62bc45dcb734681ede8484d4d4109a9adb8c3d00", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x0, {0x0, 0x9}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x24c01, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x80086601, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x0, @mcast2, 0x3}, {0xa, 0x0, 0x2, @mcast1}, r4}}, 0x48) close_range(r3, r3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f00000000c0)={0x0, 0x8, 0x2}, &(0x7f00000002c0)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000440)={r5, @in={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x3, 0x7, 0x2, 0x3, 0xc2, 0xfffffffd, 0x5}, 0x9c) r6 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) ioctl$AUTOFS_IOC_PROTOSUBVER(r6, 0x40049366, 0x0) 2m2.680882346s ago: executing program 3 (id=1314): r0 = syz_open_dev$dri(0x0, 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x1, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000003200)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 1m47.438549373s ago: executing program 34 (id=1314): r0 = syz_open_dev$dri(0x0, 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x1, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000003200)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 3.330017761s ago: executing program 6 (id=4121): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r0, &(0x7f0000000400)=[{{0x0, 0xf5ffffff, 0x0, 0x0, 0x0, 0x4000000}}], 0xf00, 0x4c42bb4f92, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7, 0x0, 0x1, 0x8000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) shutdown(r0, 0x0) 3.250059316s ago: executing program 6 (id=4122): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) syz_emit_ethernet(0x2a, &(0x7f0000000400)=ANY=[@ANYRESOCT=r0], 0x0) syz_open_dev$vim2m(&(0x7f00000001c0), 0x1f7ff6, 0x2) syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0x6d8c, 0x0, 0x20000000}, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0x3ee5}, {0x6, 0x0, 0x0, 0x4}]}, 0x8) sendmmsg$unix(r4, &(0x7f0000002a00)=[{{0x0, 0x0, &(0x7f0000000380)=[{0x0}], 0x1}}], 0x1, 0x0) 2.910164813s ago: executing program 5 (id=4124): mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x769f00b363895638, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) unshare(0x62040200) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(0xffffffffffffffff, 0x3) socket$inet6_sctp(0xa, 0x801, 0x84) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x70}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000140)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @multicast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xffff}}}}}}, 0x0) syz_emit_ethernet(0x36, &(0x7f00000003c0)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0xfd, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x4, 0x2}}}}}}, 0x0) 2.691565307s ago: executing program 5 (id=4128): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000040000000000000000000000850000002c000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb, 0x0, &(0x7f0000000300)="259a53f271a76d2688ca4c", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x4c) r1 = socket$packet(0x11, 0x2, 0x300) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000380)={@map, 0xffffffffffffffff, 0x16, 0x20, 0xffffffffffffffff, @void, @void, @void, @value}, 0x20) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x44, 0x1000}, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCBRDELBR(r2, 0x8901, &(0x7f0000001300)='veth1_to_team\x00') r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f00000003c0)=0x2, 0x4) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x0, 0xffffffff}, 0x1c) r4 = epoll_create(0xe7) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000080000000c"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r6}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r7, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000580)={0x10000000}) 2.61981601s ago: executing program 5 (id=4129): ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) openat$ptmx(0xffffff9c, &(0x7f0000000380), 0x210d40, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) socket$inet_udplite(0x2, 0x2, 0x88) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$netlink(0x10, 0x3, 0x15) writev(r4, &(0x7f0000000000)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80fae0090f000000000000a2bc5603ca00000f7f89000000200000004a2471083ec6811778581acb6c0101ff0000000309", 0x48}], 0x1) rseq(&(0x7f0000000540)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card1/oss_mixer\x00', 0x80401, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f0000000240)={0x0, {{0xa, 0x0, 0x4, @remote, 0xfffffffd}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x29}}}}, 0x104) 2.349856084s ago: executing program 6 (id=4132): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, 0x0, 0x24008004) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x20, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, @void, @value}, 0x94) fanotify_init(0x0, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd74) r4 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x7079, 0x0, 0x4, 0x288, 0x0, r3}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r4, 0x3516, 0x0, 0x0, 0x0, 0x0) write$cgroup_int(r1, &(0x7f0000000080)=0x2, 0x12) socket$netlink(0x10, 0x3, 0x0) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r7, 0x0, 0x0) r8 = socket$inet(0x2, 0x3, 0x2) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0x801, 0x200, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfe}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) setsockopt$inet_msfilter(r8, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e0000002ac1414aa00"], 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) syz_init_net_socket$x25(0x9, 0x5, 0x0) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) ioctl$KVM_CAP_DISABLE_QUIRKS(r11, 0x4068aea3, &(0x7f00000000c0)={0x74, 0x0, 0x5ecd977ea6db2784}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x20040000) keyctl$read(0x1f, 0x0, &(0x7f0000000340)=""/122, 0x7a) 1.730479698s ago: executing program 5 (id=4134): r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x117, 0x5, 0x0, 0xe) bind$alg(r0, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(cast6)\x00'}, 0x58) r1 = socket$kcm(0x2b, 0x1, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) io_uring_setup(0x2d58, &(0x7f0000000380)={0x0, 0x62cc, 0x400, 0x8000002, 0x3f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0xe2981) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r6, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32={[0x2600, 0x0, 0x2000]}}], 0xffc8) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000900)=[{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f00000007c0)="e0170acdf995ae59c89a454c1263286da8a6263aa870ca3fb4a89fdaca60f134ced2f82ca6b9112ab5f676e4a9d38fc918bd2a850202084655659988990748ca67e7", 0x42}], 0x1}], 0x1, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x24, 0x4, 0x8, 0x801, 0x0, 0x0, {}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_L3PROTO={0x6}]}, 0x24}}, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0xd, 0x0, 0x0) close(r1) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x28200, 0x0) fanotify_mark(0xffffffffffffffff, 0x1, 0x4800003e, 0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r7, 0x5423, 0x0) 1.656150769s ago: executing program 4 (id=4135): r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) prlimit64(r0, 0xd, &(0x7f0000000180)={0x1}, &(0x7f00000001c0)) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c41, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0xe1515f8735398fb, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x45c], 0x0, 0x0, 0x20ec, 0x1}}, 0x40) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000f00)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0x4, @local, 0x6}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000080)="b6", 0x1}], 0x1}}], 0x1, 0x0) shutdown(0xffffffffffffffff, 0x1) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x80, &(0x7f00000010c0)=""/4111, &(0x7f0000000000)=0x100f) 1.649364617s ago: executing program 2 (id=4136): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r0, &(0x7f0000000400)=[{{0x0, 0xf5ffffff, 0x0, 0x0, 0x0, 0x4000000}}], 0xf00, 0x4c42bb4f92, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7, 0x0, 0x1, 0x8000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) shutdown(r0, 0x0) 1.631861669s ago: executing program 6 (id=4137): ioctl$KVM_CAP_DIRTY_LOG_RING(0xffffffffffffffff, 0x4068aea3, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x80000c0) r0 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_rfc1337\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000008000", @ANYRES32=0x0, @ANYRES32], 0x48) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r2, 0xfffff000, 0xe, 0x0, &(0x7f0000001700)="61df7100c80400d5721ff59fe864", 0x0, 0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x4c) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, 0x0, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x800, &(0x7f0000002380)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x6000}}) ppoll(&(0x7f0000002240)=[{r4}], 0x1, 0x0, 0x0, 0x0) umount2(&(0x7f0000000000)='./file0\x00', 0x0) 1.625536695s ago: executing program 4 (id=4138): r0 = open$dir(&(0x7f0000000340)='./file0\x00', 0x40000, 0x12) readlinkat(r0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)=""/119, 0x77) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000020b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0xce56fe61a68fc369, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x60, 0x30, 0x1, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0xffffffffffffffff, 0x4}, 0x3}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(0xffffffffffffffff, 0xc05c5340, &(0x7f0000000440)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000100)=0x11) socket$phonet_pipe(0x23, 0x5, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000040)=0x1) readv(r7, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0x940}], 0x1) ioctl$TIOCSETD(r7, 0x5423, 0x0) ioctl$TIOCVHANGUP(r7, 0x5437, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000280)={0xa2, 0x4, 0x1, 'queue0\x00', 0x5}) socket$netlink(0x10, 0x3, 0x4) 1.505357243s ago: executing program 2 (id=4139): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpu.weight.nice\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[@ANYBLOB='-'], 0x9) 1.505115932s ago: executing program 2 (id=4140): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010028bd7000fbdbdf253000000008000300", @ANYRES32=r2, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x40050}, 0x4044800) 1.429534933s ago: executing program 2 (id=4141): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000040000000000000000000000850000002c000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xd, 0x0, &(0x7f0000000300)="259a53f271a76d2688ca4c6588", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x4c) r1 = socket$packet(0x11, 0x2, 0x300) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000380)={@map, 0xffffffffffffffff, 0x16, 0x20, 0xffffffffffffffff, @void, @void, @void, @value}, 0x20) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x44, 0x1000}, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCBRDELBR(r2, 0x8901, &(0x7f0000001300)='veth1_to_team\x00') r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f00000003c0)=0x2, 0x4) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x0, 0xffffffff}, 0x1c) r4 = epoll_create(0xe7) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000080000000c"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r6}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r7, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000580)={0x10000000}) 1.250858754s ago: executing program 2 (id=4142): ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) openat$ptmx(0xffffff9c, &(0x7f0000000380), 0x210d40, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) socket$inet_udplite(0x2, 0x2, 0x88) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$netlink(0x10, 0x3, 0x15) writev(r5, &(0x7f0000000000)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80fae0090f000000000000a2bc5603ca00000f7f89000000200000004a2471083ec6811778581acb6c0101ff0000000309", 0x48}], 0x1) rseq(&(0x7f0000000540)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card1/oss_mixer\x00', 0x80401, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r6, 0x29, 0x2e, &(0x7f0000000240)={0x0, {{0xa, 0x0, 0x4, @remote, 0xfffffffd}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x29}}}}, 0x104) 1.057991307s ago: executing program 6 (id=4143): ioctl$KVM_CAP_DIRTY_LOG_RING(0xffffffffffffffff, 0x4068aea3, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x80000c0) r0 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_rfc1337\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYBLOB="0000000000000000000000000000000000008000", @ANYRES32=0x0, @ANYRES32], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9b, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r3, 0xfffff000, 0xe, 0x0, &(0x7f0000001700)="61df7100c80400d5721ff59fe864", 0x0, 0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x4c) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r4, 0x84, 0x13, 0x0, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x800, &(0x7f0000002380)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x6000}}) ppoll(&(0x7f0000002240)=[{r5}], 0x1, 0x0, 0x0, 0x0) umount2(&(0x7f0000000000)='./file0\x00', 0x0) 860.26282ms ago: executing program 5 (id=4144): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x5, 0x0, 0x0, 0x2000, &(0x7f0000fe5000/0x2000)=nil}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000000000000034d564b00"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) 679.537684ms ago: executing program 5 (id=4145): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, 0x0, 0x24008004) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x20, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, @void, @value}, 0x94) fanotify_init(0x0, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd74) r4 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x7079, 0x0, 0x4, 0x288, 0x0, r3}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r4, 0x3516, 0x0, 0x0, 0x0, 0x0) write$cgroup_int(r1, &(0x7f0000000080)=0x2, 0x12) socket$netlink(0x10, 0x3, 0x0) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r7, 0x0, 0x0) r8 = socket$inet(0x2, 0x3, 0x2) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0x801, 0x200, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfe}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) setsockopt$inet_msfilter(r8, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e0000002ac1414aa00"], 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) syz_init_net_socket$x25(0x9, 0x5, 0x0) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) ioctl$KVM_CAP_DISABLE_QUIRKS(r11, 0x4068aea3, &(0x7f00000000c0)={0x74, 0x0, 0x5ecd977ea6db2784}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x20040000) keyctl$read(0x1f, 0x0, &(0x7f0000000340)=""/122, 0x7a) 678.959844ms ago: executing program 4 (id=4146): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, 0x0, 0x24008004) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x20, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, @void, @value}, 0x94) fanotify_init(0x0, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd74) r4 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x7079, 0x0, 0x4, 0x288, 0x0, r3}, &(0x7f0000000340)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r4, 0x3516, 0x0, 0x0, 0x0, 0x0) write$cgroup_int(r1, &(0x7f0000000080)=0x2, 0x12) socket$netlink(0x10, 0x3, 0x0) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)={0x114, 0x1f, 0x1, 0x0, 0x0, "", [@nested={0x101, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x1f}, @typed={0x14, 0x3, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00'}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe8101000000010000008b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd"]}]}, 0x114}], 0x1}, 0x0) r7 = socket$inet(0x2, 0x3, 0x2) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0x801, 0x200, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfe}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) setsockopt$inet_msfilter(r7, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e0000002ac1414aa00"], 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) syz_init_net_socket$x25(0x9, 0x5, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_CAP_DISABLE_QUIRKS(r10, 0x4068aea3, &(0x7f00000000c0)={0x74, 0x0, 0x5ecd977ea6db2784}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x20040000) keyctl$read(0x1f, 0x0, &(0x7f0000000340)=""/122, 0x7a) 648.295145ms ago: executing program 6 (id=4147): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r4, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x0) recvmmsg$unix(r3, &(0x7f0000000f40)=[{{&(0x7f00000000c0)=@abs, 0x6e, &(0x7f0000000240)=[{0x0}], 0x1, &(0x7f0000000280)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @rights={{0xc}}], 0xb0}}, {{&(0x7f0000000340), 0x6e, &(0x7f0000000440)=[{&(0x7f00000003c0)=""/111, 0x6f}], 0x1, &(0x7f0000000480)=[@rights={{0xc}}, @rights={{0xc}}, @rights={{0xc}}, @rights={{0xc}}, @rights={{0xc}}, @rights={{0xc}}, @rights={{0xc}}, @rights={{0xc}}, @rights={{0xc}}, @rights={{0xc}}, @rights={{0xc}}, @rights={{0xc}}, @rights={{0xc}}, @rights={{0xc}}, @rights={{0xc}}, @rights={{0xc}}, @rights={{0xc}}, @rights={{0xc}}, @rights={{0xc}}, @rights={{0xc}}, @rights={{0xc}}, @rights={{0xc}}, @rights={{0xc}}], 0x114}}, {{&(0x7f0000000540)=@abs, 0x6e, &(0x7f00000006c0)=[{&(0x7f0000000640)=""/28, 0x1c}, {&(0x7f0000000680)=""/18, 0x12}], 0x2, &(0x7f0000000700)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18}}], 0x78}}, {{&(0x7f0000000780), 0x6e, &(0x7f0000000e00)=[{&(0x7f0000000800)=""/190, 0xbe}, {&(0x7f00000008c0)=""/64, 0x40}, {&(0x7f0000000900)=""/99, 0x63}, {&(0x7f0000000980)=""/222, 0xde}, {&(0x7f0000000a80)=""/224, 0xe0}, {&(0x7f0000000b80)=""/4, 0x4}, {&(0x7f0000000bc0)=""/237, 0xed}, {&(0x7f0000000cc0)=""/60, 0x3c}, {&(0x7f0000000d00)=""/226, 0xe2}], 0x9, &(0x7f0000000e80)=[@cred={{0x18}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18}}], 0xa0}}], 0x4, 0x2, 0x0) 251.074921ms ago: executing program 2 (id=4148): r0 = io_uring_setup(0x7d98, &(0x7f00000003c0)={0x0, 0xfdcf, 0x2, 0x2}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000080000000000000004850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0) readv(r2, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0xfdef}], 0x1) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000001200)={0x0, 0xffffff1e, 0xffffffff, 0x4, 0x16, "001bf100eeff0000a2c2000100000000002000"}) r3 = syz_open_pts(r2, 0x101) r4 = dup3(r3, r2, 0x0) ioctl$TIOCSETD(r4, 0x5423, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000000c0)={0xffffffffffffffff}, 0x111, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r5, &(0x7f0000000140)={0x7, 0x8, 0xfa00, {r6, 0x4}}, 0x10) r7 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r5, &(0x7f0000000080)={0x30000000}) write$UHID_INPUT(r4, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000340)='kfree\x00', r1}, 0x18) r8 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100000cb768405e0483020b9901e4020109021b000100000000090400fb015c291d00090509"], 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000080), 0x3, 0x800) syz_usb_disconnect(r8) close_range(r0, 0xffffffffffffffff, 0x0) 101.162071ms ago: executing program 4 (id=4149): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='signal_generate\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8000}, [@call={0x85, 0x0, 0x0, 0x75}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x52) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r2}, 0x10) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) 71.470645ms ago: executing program 4 (id=4150): sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x34, 0x0, 0x8, 0x5, 0x0, 0x0, {0x5, 0x0, 0x4}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x8}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x2000c004}, 0x8040) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001300290a000000000000000007000000", @ANYRES32=r1, @ANYBLOB="00000132ae57f600"], 0x34}}, 0x0) 0s ago: executing program 4 (id=4151): ioctl$KVM_CAP_DIRTY_LOG_RING(0xffffffffffffffff, 0x4068aea3, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x80000c0) r0 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_rfc1337\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000008000", @ANYRES32=0x0, @ANYRES32], 0x48) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r2, 0xfffff000, 0xe, 0x0, &(0x7f0000001700)="61df7100c80400d5721ff59fe864", 0x0, 0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x4c) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, 0x0, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x800, &(0x7f0000002380)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x6000}}) ppoll(&(0x7f0000002240)=[{r4}], 0x1, 0x0, 0x0, 0x0) umount2(&(0x7f0000000000)='./file0\x00', 0x0) kernel console output (not intermixed with test programs): sg+0x10/0x10 [ 263.157467][T10927] ? rcu_is_watching+0x12/0xc0 [ 263.157488][T10927] __do_fast_syscall_32+0x73/0x120 [ 263.157510][T10927] do_fast_syscall_32+0x32/0x80 [ 263.157531][T10927] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 263.157550][T10927] RIP: 0023:0xf744e579 [ 263.157563][T10927] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 263.157579][T10927] RSP: 002b:00000000f50d655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 263.157595][T10927] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000140 [ 263.157605][T10927] RDX: 0000000004000810 RSI: 0000000000000000 RDI: 0000000000000000 [ 263.157615][T10927] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 263.157624][T10927] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 263.157633][T10927] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 263.157650][T10927] [ 263.236408][ T5983] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 263.397386][ T5983] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 263.400051][ T5983] usb 7-1: config 0 interface 0 has no altsetting 0 [ 263.403200][ T5983] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 263.405622][ T5983] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 263.408224][ T5983] usb 7-1: Product: syz [ 263.409370][ T5983] usb 7-1: Manufacturer: syz [ 263.410648][ T5983] usb 7-1: SerialNumber: syz [ 263.413048][ T5983] usb 7-1: config 0 descriptor?? [ 263.416474][ T5983] usb 7-1: selecting invalid altsetting 0 [ 263.976475][T10939] 9pnet: Could not find request transport: v‹rtio [ 264.033507][T10941] netlink: 92 bytes leftover after parsing attributes in process `syz.4.1340'. [ 264.126056][ T5950] Bluetooth: hci0: command 0x0406 tx timeout [ 264.845411][ T5950] Bluetooth: hci1: command 0x0c1a tx timeout [ 265.435728][T10966] netlink: 'syz.5.1347': attribute type 1 has an invalid length. [ 265.438536][T10966] netlink: 'syz.5.1347': attribute type 3 has an invalid length. [ 265.441183][T10966] netlink: 224 bytes leftover after parsing attributes in process `syz.5.1347'. [ 265.933321][T10969] FAULT_INJECTION: forcing a failure. [ 265.933321][T10969] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 265.937186][T10969] CPU: 3 UID: 0 PID: 10969 Comm: syz.5.1348 Not tainted 6.14.0-syzkaller-07318-g4fa118e5b79f #0 PREEMPT(full) [ 265.937201][T10969] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 265.937207][T10969] Call Trace: [ 265.937210][T10969] [ 265.937214][T10969] dump_stack_lvl+0x16c/0x1f0 [ 265.937231][T10969] should_fail_ex+0x512/0x640 [ 265.937249][T10969] _copy_to_user+0x32/0xd0 [ 265.937259][T10969] simple_read_from_buffer+0xe0/0x170 [ 265.937274][T10969] proc_fail_nth_read+0x197/0x270 [ 265.937298][T10969] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 265.937315][T10969] ? rw_verify_area+0xcf/0x680 [ 265.937327][T10969] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 265.937341][T10969] vfs_read+0x1de/0xc70 [ 265.937356][T10969] ? __pfx___mutex_lock+0x10/0x10 [ 265.937370][T10969] ? __pfx_vfs_read+0x10/0x10 [ 265.937385][T10969] ? __fget_files+0x20e/0x3c0 [ 265.937397][T10969] ksys_read+0x12a/0x240 [ 265.937410][T10969] ? __pfx_ksys_read+0x10/0x10 [ 265.937424][T10969] ? rcu_is_watching+0x12/0xc0 [ 265.937437][T10969] __do_fast_syscall_32+0x73/0x120 [ 265.937451][T10969] do_fast_syscall_32+0x32/0x80 [ 265.937463][T10969] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 265.937475][T10969] RIP: 0023:0xf744e579 [ 265.937482][T10969] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 265.937492][T10969] RSP: 002b:00000000f50d6590 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 265.937502][T10969] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f50d6620 [ 265.937508][T10969] RDX: 000000000000000f RSI: 00000000f743cff4 RDI: 0000000000000000 [ 265.937514][T10969] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 265.937519][T10969] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 265.937524][T10969] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 265.937534][T10969] [ 266.065683][ T5947] usb 7-1: USB disconnect, device number 12 [ 266.205477][ T5950] Bluetooth: hci0: command 0x0406 tx timeout [ 266.924344][ T5950] Bluetooth: hci1: command 0x0c1a tx timeout [ 267.281025][ T10] IPVS: starting estimator thread 0... [ 267.394021][T11015] IPVS: using max 44 ests per chain, 105600 per kthread [ 269.253395][ T5983] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 269.413355][ T5983] usb 7-1: Using ep0 maxpacket: 8 [ 269.416058][ T5983] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 269.418727][ T5983] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 269.421612][ T5983] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 269.424726][ T5983] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 269.428262][ T5983] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 269.430817][ T5983] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.637966][ T5983] usb 7-1: GET_CAPABILITIES returned 0 [ 269.639520][ T5983] usbtmc 7-1:16.0: can't read capabilities [ 269.762683][T11051] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1371'. [ 269.842265][ T6396] usb 7-1: USB disconnect, device number 13 [ 270.082553][T11059] 9pnet_fd: Insufficient options for proto=fd [ 270.643225][T11073] netlink: 'syz.5.1379': attribute type 1 has an invalid length. [ 270.645526][T11073] netlink: 224 bytes leftover after parsing attributes in process `syz.5.1379'. [ 270.978345][T11085] Cannot find set identified by id 0 to match [ 271.648508][T11099] netlink: 'syz.5.1384': attribute type 1 has an invalid length. [ 271.651926][T11099] netlink: 'syz.5.1384': attribute type 3 has an invalid length. [ 271.654090][T11099] netlink: 224 bytes leftover after parsing attributes in process `syz.5.1384'. [ 271.691873][ T1492] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 271.843213][ T1492] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 271.847071][ T1492] usb 7-1: config 0 interface 0 has no altsetting 0 [ 271.850729][ T1492] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 271.853398][ T1492] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 271.855740][ T1492] usb 7-1: Product: syz [ 271.857056][ T1492] usb 7-1: Manufacturer: syz [ 271.858617][ T1492] usb 7-1: SerialNumber: syz [ 271.860909][ T1492] usb 7-1: config 0 descriptor?? [ 271.864213][ T1492] usb 7-1: selecting invalid altsetting 0 [ 271.918302][T11102] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1385'. [ 272.071896][ T6396] libceph: connect (1)[c::]:6789 error -101 [ 272.077512][ T6396] libceph: mon0 (1)[c::]:6789 connect error [ 272.084761][ T6396] usb 7-1: USB disconnect, device number 14 [ 272.336149][ T6396] libceph: connect (1)[c::]:6789 error -101 [ 272.340977][ T6396] libceph: mon0 (1)[c::]:6789 connect error [ 272.812490][T11111] ceph: No mds server is up or the cluster is laggy [ 274.265776][ T5941] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 274.269863][ T5941] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 274.274046][ T5941] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 274.277380][ T5941] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 274.279629][ T5941] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 274.391403][T11149] chnl_net:caif_netlink_parms(): no params data found [ 274.441673][T11149] bridge0: port 1(bridge_slave_0) entered blocking state [ 274.443716][T11149] bridge0: port 1(bridge_slave_0) entered disabled state [ 274.445987][T11149] bridge_slave_0: entered allmulticast mode [ 274.448590][T11149] bridge_slave_0: entered promiscuous mode [ 274.453199][T11149] bridge0: port 2(bridge_slave_1) entered blocking state [ 274.455723][T11149] bridge0: port 2(bridge_slave_1) entered disabled state [ 274.458580][T11149] bridge_slave_1: entered allmulticast mode [ 274.462399][T11149] bridge_slave_1: entered promiscuous mode [ 274.500025][T11149] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 274.505924][T11149] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 274.535972][T11149] team0: Port device team_slave_0 added [ 274.547343][T11149] team0: Port device team_slave_1 added [ 274.576369][T11149] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 274.578906][T11149] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 274.588636][T11149] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 274.592698][T11149] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 274.595907][T11149] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 274.605219][T11149] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 274.646352][T11149] hsr_slave_0: entered promiscuous mode [ 274.648868][T11149] hsr_slave_1: entered promiscuous mode [ 274.651218][T11149] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 274.653907][T11149] Cannot create hsr debugfs directory [ 274.656915][T11161] sp0: Synchronizing with TNC [ 274.718371][ T95] bridge_slave_1: left allmulticast mode [ 274.720062][ T95] bridge_slave_1: left promiscuous mode [ 274.725734][ T95] bridge0: port 2(bridge_slave_1) entered disabled state [ 274.730435][ T95] bridge_slave_0: left allmulticast mode [ 274.732641][ T95] bridge_slave_0: left promiscuous mode [ 274.734488][ T95] bridge0: port 1(bridge_slave_0) entered disabled state [ 274.754941][ T95] batman_adv: batadv0: Removing interface: ip6gretap1 [ 274.974571][T11171] FAULT_INJECTION: forcing a failure. [ 274.974571][T11171] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 274.978247][T11171] CPU: 0 UID: 0 PID: 11171 Comm: syz.2.1403 Not tainted 6.14.0-syzkaller-07318-g4fa118e5b79f #0 PREEMPT(full) [ 274.978271][T11171] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 274.978277][T11171] Call Trace: [ 274.978281][T11171] [ 274.978285][T11171] dump_stack_lvl+0x16c/0x1f0 [ 274.978301][T11171] should_fail_ex+0x512/0x640 [ 274.978318][T11171] should_fail_alloc_page+0xe7/0x130 [ 274.978329][T11171] prepare_alloc_pages.constprop.0+0x172/0x570 [ 274.978345][T11171] __alloc_frozen_pages_noprof+0x18f/0x24d0 [ 274.978355][T11171] ? find_held_lock+0x2b/0x80 [ 274.978368][T11171] ? __lock_acquire+0xaa4/0x1ba0 [ 274.978383][T11171] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 274.978393][T11171] ? __lock_acquire+0xaa4/0x1ba0 [ 274.978411][T11171] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 274.978428][T11171] ? policy_nodemask+0xea/0x4e0 [ 274.978438][T11171] alloc_pages_mpol+0x1fb/0x540 [ 274.978449][T11171] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 274.978461][T11171] alloc_pages_noprof+0x131/0x390 [ 274.978471][T11171] get_free_pages_noprof+0xc/0x40 [ 274.978482][T11171] __pollwait+0x295/0x490 [ 274.978495][T11171] ? __fget_files+0x20e/0x3c0 [ 274.978505][T11171] snd_rawmidi_poll+0x4b5/0x690 [ 274.978519][T11171] ? __pfx___pollwait+0x10/0x10 [ 274.978532][T11171] ? __pfx_snd_rawmidi_poll+0x10/0x10 [ 274.978546][T11171] do_select+0xd67/0x17d0 [ 274.978566][T11171] ? __pfx_do_select+0x10/0x10 [ 274.978579][T11171] ? find_held_lock+0x2b/0x80 [ 274.978589][T11171] ? __pfx___might_resched+0x10/0x10 [ 274.978602][T11171] ? __pfx___pollwait+0x10/0x10 [ 274.978617][T11171] ? __pfx_pollwake+0x10/0x10 [ 274.978631][T11171] ? __pfx_pollwake+0x10/0x10 [ 274.978645][T11171] ? __pfx_pollwake+0x10/0x10 [ 274.978658][T11171] ? __pfx_pollwake+0x10/0x10 [ 274.978672][T11171] ? __pfx_pollwake+0x10/0x10 [ 274.978686][T11171] ? __pfx_pollwake+0x10/0x10 [ 274.978700][T11171] ? __pfx_pollwake+0x10/0x10 [ 274.978714][T11171] ? __pfx_pollwake+0x10/0x10 [ 274.978728][T11171] ? __pfx_pollwake+0x10/0x10 [ 274.978744][T11171] ? find_held_lock+0x2b/0x80 [ 274.978755][T11171] ? compat_core_sys_select+0x1dd/0x880 [ 274.978774][T11171] ? compat_core_sys_select+0x685/0x880 [ 274.978787][T11171] compat_core_sys_select+0x685/0x880 [ 274.978804][T11171] ? __pfx_compat_core_sys_select+0x10/0x10 [ 274.978820][T11171] ? find_held_lock+0x2b/0x80 [ 274.978837][T11171] ? set_compat_user_sigmask+0x213/0x2a0 [ 274.978848][T11171] ? __pfx_set_compat_user_sigmask+0x10/0x10 [ 274.978859][T11171] ? ksys_write+0x190/0x240 [ 274.978875][T11171] do_compat_pselect+0x1fe/0x240 [ 274.978890][T11171] ? __pfx_do_compat_pselect+0x10/0x10 [ 274.978907][T11171] __ia32_compat_sys_pselect6_time32+0x17b/0x240 [ 274.978918][T11171] ? __pfx___ia32_compat_sys_pselect6_time32+0x10/0x10 [ 274.978929][T11171] ? rcu_is_watching+0x12/0xc0 [ 274.978942][T11171] __do_fast_syscall_32+0x73/0x120 [ 274.978955][T11171] do_fast_syscall_32+0x32/0x80 [ 274.978967][T11171] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 274.978979][T11171] RIP: 0023:0xf7fa3579 [ 274.978987][T11171] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 274.978997][T11171] RSP: 002b:00000000f508455c EFLAGS: 00000296 ORIG_RAX: 0000000000000134 [ 274.979006][T11171] RAX: ffffffffffffffda RBX: 0000000000000040 RCX: 0000000080000600 [ 274.979012][T11171] RDX: 0000000000000000 RSI: 0000000080000680 RDI: 0000000000000000 [ 274.979018][T11171] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 274.979024][T11171] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 274.979029][T11171] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 274.979039][T11171] [ 275.100629][ T95] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 275.104650][ T95] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 275.107279][ T95] bond0 (unregistering): Released all slaves [ 275.158049][T11149] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 275.163663][T11149] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 275.166714][T11149] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 275.169773][T11149] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 275.179781][T11149] bridge0: port 2(bridge_slave_1) entered blocking state [ 275.181791][T11149] bridge0: port 2(bridge_slave_1) entered forwarding state [ 275.184006][T11149] bridge0: port 1(bridge_slave_0) entered blocking state [ 275.185953][T11149] bridge0: port 1(bridge_slave_0) entered forwarding state [ 275.216566][ T95] tipc: Disabling bearer [ 275.221273][ T95] tipc: Left network mode [ 275.223897][T11149] 8021q: adding VLAN 0 to HW filter on device bond0 [ 275.235232][T11149] 8021q: adding VLAN 0 to HW filter on device team0 [ 275.239455][ T1136] bridge0: port 1(bridge_slave_0) entered disabled state [ 275.243816][ T1136] bridge0: port 2(bridge_slave_1) entered disabled state [ 275.284001][ T1079] bridge0: port 1(bridge_slave_0) entered blocking state [ 275.286397][ T1079] bridge0: port 1(bridge_slave_0) entered forwarding state [ 275.291271][ T1136] bridge0: port 2(bridge_slave_1) entered blocking state [ 275.293226][ T1136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 275.400099][T11149] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 275.407671][ T95] hsr_slave_0: left promiscuous mode [ 275.409782][ T95] hsr_slave_1: left promiscuous mode [ 275.411644][ T95] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 275.414115][ T95] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 275.685393][T11166] [U] è [ 276.353314][T11183] pimreg: entered allmulticast mode [ 276.359902][ T5941] Bluetooth: hci2: command tx timeout [ 276.436517][T11149] veth0_vlan: entered promiscuous mode [ 276.444117][T11149] veth1_vlan: entered promiscuous mode [ 276.457094][T11149] veth0_macvtap: entered promiscuous mode [ 276.460138][T11149] veth1_macvtap: entered promiscuous mode [ 276.508974][T11149] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 276.514022][T11149] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 276.520344][T11149] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.522795][T11149] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.525506][T11149] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.528094][T11149] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.584196][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 276.586386][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 276.616261][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 276.618765][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 276.918376][T11210] netlink: 'syz.6.1398': attribute type 1 has an invalid length. [ 276.922164][T11210] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1398'. [ 277.606382][T11243] netlink: 'syz.2.1416': attribute type 1 has an invalid length. [ 277.612606][T11243] netlink: 'syz.2.1416': attribute type 3 has an invalid length. [ 277.618409][T11243] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1416'. [ 277.983372][T11228] mmap: syz.6.1417 (11228): VmData 25882624 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 278.081556][T11252] netlink: 'syz.6.1422': attribute type 4 has an invalid length. [ 278.090313][T11252] netlink: 'syz.6.1422': attribute type 4 has an invalid length. [ 278.254194][T11257] netlink: 'syz.2.1424': attribute type 4 has an invalid length. [ 278.259644][T11257] netlink: 'syz.2.1424': attribute type 4 has an invalid length. [ 278.293150][T11259] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1425'. [ 278.298168][T11259] kAFS: No cell specified [ 278.449257][ T5941] Bluetooth: hci2: command tx timeout [ 279.149137][T11286] netlink: 'syz.6.1432': attribute type 1 has an invalid length. [ 279.155745][T11286] netlink: 'syz.6.1432': attribute type 3 has an invalid length. [ 279.157909][T11286] netlink: 224 bytes leftover after parsing attributes in process `syz.6.1432'. [ 279.194218][T11286] bridge0: port 2(bridge_slave_1) entered disabled state [ 279.196355][T11286] bridge0: port 1(bridge_slave_0) entered disabled state [ 279.243841][T11286] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 279.252219][T11286] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 279.287051][T11286] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.293347][T11286] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.295885][T11286] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.300095][T11286] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.108458][T11311] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1438'. [ 280.517469][ T5941] Bluetooth: hci2: command tx timeout [ 280.567803][T11326] netlink: 'syz.5.1442': attribute type 1 has an invalid length. [ 280.573842][T11326] netlink: 224 bytes leftover after parsing attributes in process `syz.5.1442'. [ 280.867450][ T5947] usb 11-1: new low-speed USB device number 2 using dummy_hcd [ 281.088897][ T5947] usb 11-1: config 168 descriptor has 1 excess byte, ignoring [ 281.091023][ T5947] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 281.172352][ T5947] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 281.175527][ T5947] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 281.179177][ T5947] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 281.182904][ T5947] usb 11-1: config 168 descriptor has 1 excess byte, ignoring [ 281.185098][ T5947] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 281.188124][ T5947] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 281.191053][ T5947] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 281.194225][ T5947] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 281.197904][ T5947] usb 11-1: config 168 descriptor has 1 excess byte, ignoring [ 281.200143][ T5947] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 281.203122][ T5947] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 281.205899][ T5947] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 281.209123][ T5947] usb 11-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 281.214042][ T5947] usb 11-1: string descriptor 0 read error: -22 [ 281.215863][ T5947] usb 11-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 281.218498][ T5947] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.224415][ T5947] adutux 11-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 281.446565][ T1323] usb 11-1: USB disconnect, device number 2 [ 282.257237][T11364] FAULT_INJECTION: forcing a failure. [ 282.257237][T11364] name failslab, interval 1, probability 0, space 0, times 0 [ 282.260844][T11364] CPU: 3 UID: 0 PID: 11364 Comm: syz.6.1454 Not tainted 6.14.0-syzkaller-07318-g4fa118e5b79f #0 PREEMPT(full) [ 282.260858][T11364] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 282.260864][T11364] Call Trace: [ 282.260868][T11364] [ 282.260871][T11364] dump_stack_lvl+0x16c/0x1f0 [ 282.260887][T11364] should_fail_ex+0x512/0x640 [ 282.260902][T11364] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 282.260920][T11364] should_failslab+0xc2/0x120 [ 282.260930][T11364] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 282.260945][T11364] ? __pfx___might_resched+0x10/0x10 [ 282.260958][T11364] ? alloc_vmap_area+0x613/0x2970 [ 282.260971][T11364] alloc_vmap_area+0x613/0x2970 [ 282.260986][T11364] ? __pfx_alloc_vmap_area+0x10/0x10 [ 282.261001][T11364] __get_vm_area_node+0x1a7/0x300 [ 282.261015][T11364] __vmalloc_node_range_noprof+0x277/0x1540 [ 282.261029][T11364] ? bpf_check+0x1c1/0xb740 [ 282.261041][T11364] ? rcu_read_unlock+0x17/0x60 [ 282.261054][T11364] ? bpf_check+0x1c1/0xb740 [ 282.261064][T11364] ? ___kmalloc_large_node+0x183/0x1e0 [ 282.261076][T11364] ? lockdep_hardirqs_on+0x7c/0x110 [ 282.261089][T11364] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 282.261103][T11364] ? rcu_is_watching+0x12/0xc0 [ 282.261115][T11364] ? trace_kmalloc+0x2b/0xd0 [ 282.261125][T11364] ? __kvmalloc_node_noprof.cold+0x60/0x65 [ 282.261138][T11364] ? rcu_is_watching+0x12/0xc0 [ 282.261148][T11364] ? ktime_get+0x200/0x310 [ 282.261160][T11364] ? bpf_check+0x1c1/0xb740 [ 282.261172][T11364] vzalloc_noprof+0x6b/0x90 [ 282.261185][T11364] ? bpf_check+0x1c1/0xb740 [ 282.261195][T11364] bpf_check+0x1c1/0xb740 [ 282.261207][T11364] ? pcpu_alloc_noprof+0xed9/0x14b0 [ 282.261224][T11364] ? __pfx_bpf_check+0x10/0x10 [ 282.261251][T11364] ? find_held_lock+0x2b/0x80 [ 282.261264][T11364] ? rcu_is_watching+0x12/0xc0 [ 282.261274][T11364] ? ktime_get_with_offset+0x26e/0x3b0 [ 282.261288][T11364] ? __asan_memset+0x23/0x50 [ 282.261300][T11364] ? bpf_obj_name_cpy+0x14a/0x1a0 [ 282.261316][T11364] bpf_prog_load+0xe3c/0x2480 [ 282.261327][T11364] ? __pfx_bpf_prog_load+0x10/0x10 [ 282.261343][T11364] __sys_bpf+0x4890/0x4c80 [ 282.261353][T11364] ? __pfx___sys_bpf+0x10/0x10 [ 282.261362][T11364] ? ksys_write+0x190/0x240 [ 282.261377][T11364] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 282.261396][T11364] ? fput+0x70/0xf0 [ 282.261406][T11364] ? ksys_write+0x1b9/0x240 [ 282.261419][T11364] ? __pfx_ksys_write+0x10/0x10 [ 282.261434][T11364] __ia32_sys_bpf+0x76/0xe0 [ 282.261444][T11364] __do_fast_syscall_32+0x73/0x120 [ 282.261457][T11364] do_fast_syscall_32+0x32/0x80 [ 282.261470][T11364] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 282.261481][T11364] RIP: 0023:0xf7f21579 [ 282.261489][T11364] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 282.261499][T11364] RSP: 002b:00000000f504655c EFLAGS: 00000296 ORIG_RAX: 0000000000000165 [ 282.261508][T11364] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000800000c0 [ 282.261515][T11364] RDX: 00000000000000ae RSI: 0000000000000000 RDI: 0000000000000000 [ 282.261520][T11364] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 282.261525][T11364] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 282.261531][T11364] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 282.261545][T11364] [ 282.261579][T11364] syz.6.1454: vmalloc error: size 792, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 282.310996][ T5941] Bluetooth: hci2: connection err: -111 [ 282.402201][T11364] ,cpuset=/,mems_allowed=0-1 [ 282.403754][T11364] CPU: 2 UID: 0 PID: 11364 Comm: syz.6.1454 Not tainted 6.14.0-syzkaller-07318-g4fa118e5b79f #0 PREEMPT(full) [ 282.403778][T11364] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 282.403787][T11364] Call Trace: [ 282.403794][T11364] [ 282.403800][T11364] dump_stack_lvl+0x16c/0x1f0 [ 282.403823][T11364] warn_alloc+0x248/0x3a0 [ 282.403840][T11364] ? __pfx_warn_alloc+0x10/0x10 [ 282.403854][T11364] ? kfree+0x2b6/0x4d0 [ 282.403877][T11364] ? __get_vm_area_node+0x1e5/0x300 [ 282.403901][T11364] __vmalloc_node_range_noprof+0xd31/0x1540 [ 282.403923][T11364] ? rcu_read_unlock+0x17/0x60 [ 282.403943][T11364] ? bpf_check+0x1c1/0xb740 [ 282.403960][T11364] ? ___kmalloc_large_node+0x183/0x1e0 [ 282.403979][T11364] ? lockdep_hardirqs_on+0x7c/0x110 [ 282.403998][T11364] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 282.404019][T11364] ? rcu_is_watching+0x12/0xc0 [ 282.404036][T11364] ? trace_kmalloc+0x2b/0xd0 [ 282.404052][T11364] ? __kvmalloc_node_noprof.cold+0x60/0x65 [ 282.404072][T11364] ? rcu_is_watching+0x12/0xc0 [ 282.404088][T11364] ? ktime_get+0x200/0x310 [ 282.404106][T11364] ? bpf_check+0x1c1/0xb740 [ 282.404124][T11364] vzalloc_noprof+0x6b/0x90 [ 282.404144][T11364] ? bpf_check+0x1c1/0xb740 [ 282.404160][T11364] bpf_check+0x1c1/0xb740 [ 282.404178][T11364] ? pcpu_alloc_noprof+0xed9/0x14b0 [ 282.404203][T11364] ? __pfx_bpf_check+0x10/0x10 [ 282.404226][T11364] ? find_held_lock+0x2b/0x80 [ 282.404245][T11364] ? rcu_is_watching+0x12/0xc0 [ 282.404260][T11364] ? ktime_get_with_offset+0x26e/0x3b0 [ 282.404280][T11364] ? __asan_memset+0x23/0x50 [ 282.404300][T11364] ? bpf_obj_name_cpy+0x14a/0x1a0 [ 282.404324][T11364] bpf_prog_load+0xe3c/0x2480 [ 282.404341][T11364] ? __pfx_bpf_prog_load+0x10/0x10 [ 282.404368][T11364] __sys_bpf+0x4890/0x4c80 [ 282.404384][T11364] ? __pfx___sys_bpf+0x10/0x10 [ 282.404398][T11364] ? ksys_write+0x190/0x240 [ 282.404422][T11364] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 282.404449][T11364] ? fput+0x70/0xf0 [ 282.404469][T11364] ? ksys_write+0x1b9/0x240 [ 282.404489][T11364] ? __pfx_ksys_write+0x10/0x10 [ 282.404512][T11364] __ia32_sys_bpf+0x76/0xe0 [ 282.404527][T11364] __do_fast_syscall_32+0x73/0x120 [ 282.404548][T11364] do_fast_syscall_32+0x32/0x80 [ 282.404566][T11364] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 282.404584][T11364] RIP: 0023:0xf7f21579 [ 282.404596][T11364] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 282.404610][T11364] RSP: 002b:00000000f504655c EFLAGS: 00000296 ORIG_RAX: 0000000000000165 [ 282.404626][T11364] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000800000c0 [ 282.404636][T11364] RDX: 00000000000000ae RSI: 0000000000000000 RDI: 0000000000000000 [ 282.404645][T11364] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 282.404654][T11364] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 282.404662][T11364] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 282.404678][T11364] [ 282.404683][T11364] Mem-Info: [ 282.454219][T11368] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 282.486915][T11364] active_anon:13229 inactive_anon:16 isolated_anon:0 [ 282.486915][T11364] active_file:4026 inactive_file:16566 isolated_file:0 [ 282.486915][T11364] unevictable:1768 dirty:394 writeback:0 [ 282.486915][T11364] slab_reclaimable:5986 slab_unreclaimable:62931 [ 282.486915][T11364] mapped:27175 shmem:7279 pagetables:779 [ 282.486915][T11364] sec_pagetables:306 bounce:0 [ 282.486915][T11364] kernel_misc_reclaimable:0 [ 282.486915][T11364] free:58201 free_pcp:5057 free_cma:0 [ 282.486968][T11364] Node 0 active_anon:236kB inactive_anon:4kB active_file:288kB inactive_file:0kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:12896kB dirty:216kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:9684kB pagetables:1124kB sec_pagetables:1132kB all_unreclaimable? yes [ 282.486995][T11364] Node 1 active_anon:52680kB inactive_anon:60kB active_file:15816kB inactive_file:66264kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:95804kB dirty:1360kB writeback:0kB shmem:25580kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:2828kB pagetables:1992kB sec_pagetables:92kB all_unreclaimable? no [ 282.487019][T11364] Node 0 DMA free:2364kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:212kB local_pcp:0kB free_cma:0kB [ 282.545105][T11364] lowmem_reserve[]: 0 293 293 293 293 [ 282.547252][T11364] Node 0 DMA32 free:21268kB boost:0kB min:13448kB low:16808kB high:20168kB reserved_highatomic:4096KB active_anon:312kB inactive_anon:4kB active_file:288kB inactive_file:0kB unevictable:3536kB writepending:216kB present:1032196kB managed:300588kB mlocked:0kB bounce:0kB free_pcp:792kB local_pcp:24kB free_cma:0kB [ 282.556645][T11364] lowmem_reserve[]: 0 0 0 0 0 [ 282.558034][T11364] Node 1 DMA32 free:221040kB boost:14336kB min:61484kB low:73268kB high:85052kB reserved_highatomic:2048KB active_anon:52680kB inactive_anon:60kB active_file:15816kB inactive_file:66264kB unevictable:3536kB writepending:1360kB present:1048432kB managed:948292kB mlocked:0kB bounce:0kB free_pcp:8480kB local_pcp:48kB free_cma:0kB [ 282.567548][T11364] lowmem_reserve[]: 0 0 0 0 0 [ 282.568980][T11364] Node 0 DMA: 23*4kB (M) 8*8kB (UM) 24*16kB (UM) 19*32kB (UM) 9*64kB (UM) 5*128kB (UM) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 2364kB [ 282.572930][T11364] Node 0 DMA32: 6*4kB (EH) 54*8kB (MEH) 49*16kB (UMEH) 97*32kB (UMEH) 59*64kB (UMH) 31*128kB (UMEH) 15*256kB (MEH) 5*512kB (UME) 2*1024kB (UH) 0*2048kB 0*4096kB = 20536kB [ 282.578024][T11364] Node 1 DMA32: 747*4kB (UM) 661*8kB (UMEH) 638*16kB (UMEH) 426*32kB (UMEH) 208*64kB (UMEH) 56*128kB (UME) 30*256kB (UME) 14*512kB (UM) 38*1024kB (UM) 18*2048kB (U) 19*4096kB (U) = 221044kB [ 282.583225][T11364] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 282.585844][T11364] Node 0 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 282.589130][T11364] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 282.591814][T11364] Node 1 hugepages_total=4 hugepages_free=1 hugepages_surp=2 hugepages_size=2048kB [ 282.594381][T11364] 28087 total pagecache pages [ 282.595716][T11364] 241 pages in swap cache [ 282.597112][ T5941] Bluetooth: hci2: command tx timeout [ 282.599054][T11364] Free swap = 120980kB [ 282.600290][T11364] Total swap = 124996kB [ 282.601488][T11364] 524155 pages RAM [ 282.602590][T11364] 0 pages HighMem/MovableOnly [ 282.603837][T11364] 208095 pages reserved [ 282.604912][T11364] 0 pages cma reserved [ 282.687438][T11377] validate_nla: 1 callbacks suppressed [ 282.687448][T11377] netlink: 'syz.2.1456': attribute type 1 has an invalid length. [ 282.691152][T11377] netlink: 'syz.2.1456': attribute type 3 has an invalid length. [ 282.693312][T11377] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1456'. [ 282.729071][T11378] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1458'. [ 282.733342][T11375] netlink: 'syz.5.1457': attribute type 1 has an invalid length. [ 282.735509][T11375] netlink: 'syz.5.1457': attribute type 3 has an invalid length. [ 282.738891][T11375] netlink: 224 bytes leftover after parsing attributes in process `syz.5.1457'. [ 283.186181][ T10] usb 11-1: new high-speed USB device number 3 using dummy_hcd [ 283.387807][ T10] usb 11-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 283.390581][ T10] usb 11-1: config 0 interface 0 has no altsetting 0 [ 283.396661][ T10] usb 11-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 283.399453][ T10] usb 11-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 283.401867][ T10] usb 11-1: Product: syz [ 283.403062][ T10] usb 11-1: Manufacturer: syz [ 283.404505][ T10] usb 11-1: SerialNumber: syz [ 283.417792][ T10] usb 11-1: config 0 descriptor?? [ 283.421356][ T10] usb 11-1: selecting invalid altsetting 0 [ 283.627865][ T24] usb 11-1: USB disconnect, device number 3 [ 284.612672][T11446] netlink: 220 bytes leftover after parsing attributes in process `syz.5.1485'. [ 284.759496][T11467] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1493'. [ 284.871206][T11478] lo speed is unknown, defaulting to 1000 [ 284.872896][T11478] lo speed is unknown, defaulting to 1000 [ 284.877744][T11478] lo speed is unknown, defaulting to 1000 [ 284.881227][T11478] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 284.885805][T11478] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 284.901362][T11478] lo speed is unknown, defaulting to 1000 [ 284.904222][T11478] lo speed is unknown, defaulting to 1000 [ 284.911229][T11478] lo speed is unknown, defaulting to 1000 [ 284.914034][T11478] lo speed is unknown, defaulting to 1000 [ 284.917519][T11478] lo speed is unknown, defaulting to 1000 [ 284.920263][T11478] lo speed is unknown, defaulting to 1000 [ 284.923125][T11478] lo speed is unknown, defaulting to 1000 [ 284.925949][T11478] lo speed is unknown, defaulting to 1000 [ 285.051227][T11501] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1502'. [ 285.090348][T11510] netlink: 'syz.4.1506': attribute type 3 has an invalid length. [ 285.092753][T11510] netlink: 666 bytes leftover after parsing attributes in process `syz.4.1506'. [ 285.281620][T11539] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1519'. [ 285.399219][T11562] openvswitch: netlink: Flow key attr not present in new flow. [ 285.401850][T11562] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1529'. [ 285.522045][T11582] sctp: [Deprecated]: syz.5.1536 (pid 11582) Use of struct sctp_assoc_value in delayed_ack socket option. [ 285.522045][T11582] Use struct sctp_sack_info instead [ 285.526449][T11586] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1538'. [ 285.578137][T11595] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 285.656023][T11607] netlink: 'syz.5.1547': attribute type 1 has an invalid length. [ 285.658190][T11607] netlink: 'syz.5.1547': attribute type 1 has an invalid length. [ 285.660353][T11607] netlink: 'syz.5.1547': attribute type 2 has an invalid length. [ 285.690927][T11613] netlink: 'syz.4.1550': attribute type 1 has an invalid length. [ 285.709369][T11613] bond1: (slave gretap1): making interface the new active one [ 285.711919][T11613] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 287.330593][T11776] netlink: 'syz.4.1626': attribute type 1 has an invalid length. [ 287.337774][T11776] 8021q: adding VLAN 0 to HW filter on device bond2 [ 287.349393][T11776] bond2: (slave gretap2): making interface the new active one [ 287.352673][T11776] bond2: (slave gretap2): Enslaving as an active interface with an up link [ 288.155775][T11820] __nla_validate_parse: 19 callbacks suppressed [ 288.155787][T11820] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1646'. [ 288.395505][T11829] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1650'. [ 288.848977][T11859] lo speed is unknown, defaulting to 1000 [ 289.025883][T11865] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1663'. [ 289.074777][T11870] validate_nla: 2 callbacks suppressed [ 289.074788][T11870] netlink: 'syz.5.1665': attribute type 5 has an invalid length. [ 289.118837][T11877] openvswitch: netlink: Message has 4 unknown bytes. [ 289.120854][T11877] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 289.842474][T11909] trusted_key: syz.4.1682 sent an empty control message without MSG_MORE. [ 291.316257][T11941] lo speed is unknown, defaulting to 1000 [ 291.397544][T11956] tipc: Invalid UDP bearer configuration [ 291.397563][T11956] tipc: Enabling of bearer rejected, failed to enable media [ 291.502429][T11977] syz_tun: entered allmulticast mode [ 291.505166][T11974] syz_tun: left allmulticast mode [ 292.384991][T11991] vlan0: entered promiscuous mode [ 292.386400][T11991] ip6gretap0: entered promiscuous mode [ 292.428311][T11992] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1714'. [ 292.537981][T12002] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1720'. [ 292.569270][T12007] netlink: 'syz.5.1722': attribute type 1 has an invalid length. [ 292.577172][T12007] 8021q: adding VLAN 0 to HW filter on device bond1 [ 292.608034][T12013] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1725'. [ 292.857798][T12047] wireguard0: entered promiscuous mode [ 292.860018][T12047] wireguard0: entered allmulticast mode [ 292.868728][T12050] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1740'. [ 292.874111][T12050] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input10 [ 293.215918][T12062] netlink: 136 bytes leftover after parsing attributes in process `syz.4.1751'. [ 293.218382][T12062] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 293.402715][T12073] bridge0: port 1(syz_tun) entered blocking state [ 293.405684][T12073] bridge0: port 1(syz_tun) entered disabled state [ 293.407665][T12073] syz_tun: entered allmulticast mode [ 293.410412][T12073] syz_tun: entered promiscuous mode [ 293.448933][T12076] netlink: 'syz.4.1748': attribute type 10 has an invalid length. [ 293.450853][T12076] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1748'. [ 293.460598][T12076] dummy0: entered promiscuous mode [ 293.462413][T12076] bridge0: port 2(dummy0) entered blocking state [ 293.464267][T12076] bridge0: port 2(dummy0) entered disabled state [ 293.465924][T12076] dummy0: entered allmulticast mode [ 293.594388][T12086] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1753'. [ 293.757035][T12098] bond0: entered promiscuous mode [ 293.758571][T12098] bond_slave_0: entered promiscuous mode [ 293.760503][T12098] bond_slave_1: entered promiscuous mode [ 293.770666][T12098] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 293.773932][T12098] bond0: left promiscuous mode [ 293.775262][T12098] bond_slave_0: left promiscuous mode [ 293.776750][T12098] bond_slave_1: left promiscuous mode [ 293.878406][T12109] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1764'. [ 293.997588][T12121] lo speed is unknown, defaulting to 1000 [ 294.215837][T12136] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1775'. [ 294.871079][T12165] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1785'. [ 294.903829][T12167] openvswitch: netlink: Key type 216 is out of range max 32 [ 294.962846][T12171] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1788'. [ 295.104277][T12181] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1793'. [ 295.151435][T12191] tipc: Enabled bearer , priority 10 [ 295.183803][T12196] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1799'. [ 295.189020][T12196] macvtap1: entered promiscuous mode [ 295.191082][T12196] bond0: entered promiscuous mode [ 295.192497][T12196] bond_slave_0: entered promiscuous mode [ 295.194041][T12196] bond_slave_1: entered promiscuous mode [ 295.195641][T12196] macvtap1: entered allmulticast mode [ 295.197108][T12196] bond0: entered allmulticast mode [ 295.198481][T12196] bond_slave_0: entered allmulticast mode [ 295.200137][T12196] bond_slave_1: entered allmulticast mode [ 295.202499][T12196] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 296.034192][T12196] bond0: left allmulticast mode [ 296.035626][T12196] bond_slave_0: left allmulticast mode [ 296.037213][T12196] bond_slave_1: left allmulticast mode [ 296.038749][T12196] bond0: left promiscuous mode [ 296.040291][T12196] bond_slave_0: left promiscuous mode [ 296.041811][T12196] bond_slave_1: left promiscuous mode [ 296.091557][T12218] netlink: 44 bytes leftover after parsing attributes in process `syz.6.1811'. [ 296.223922][T12250] netlink: 'syz.5.1826': attribute type 10 has an invalid length. [ 296.226154][T12250] macvlan0: entered promiscuous mode [ 296.229813][T12250] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 296.250902][T12255] netdevsim netdevsim6 netdevsim0: entered promiscuous mode [ 296.253005][T12255] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 297.228082][T12287] macsec1: entered promiscuous mode [ 297.231387][T12287] mac80211_hwsim hwsim5 wlan0: entered promiscuous mode [ 297.233297][T12287] macsec1: entered allmulticast mode [ 297.234778][T12287] mac80211_hwsim hwsim5 wlan0: entered allmulticast mode [ 297.240275][T12287] macsec2: entered promiscuous mode [ 297.241854][T12287] macsec2: entered allmulticast mode [ 297.274748][T12284] netlink: 'syz.6.1837': attribute type 1 has an invalid length. [ 297.277242][T12284] netlink: 'syz.6.1837': attribute type 3 has an invalid length. [ 297.282324][T12284] net veth1_virt_wifi virt_wifi0: left promiscuous mode [ 297.284459][T12284] netdevsim netdevsim6 netdevsim0: left promiscuous mode [ 297.289086][T12284] macvtap1: left promiscuous mode [ 297.290530][T12284] macvtap1: left allmulticast mode [ 297.387170][T12301] netlink: 'syz.2.1846': attribute type 10 has an invalid length. [ 297.649936][T12310] ieee802154 phy0 wpan0: encryption failed: -22 [ 298.009164][T12324] netlink: 'syz.6.1854': attribute type 1 has an invalid length. [ 298.011219][T12324] netlink: 'syz.6.1854': attribute type 3 has an invalid length. [ 298.295157][T12311] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 298.298216][T12311] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 298.300099][T12311] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 298.304051][T12311] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 298.316388][T12311] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 299.409970][T12382] vlan2: entered promiscuous mode [ 299.412049][T12382] team0: entered promiscuous mode [ 299.413918][T12382] team_slave_0: entered promiscuous mode [ 299.416341][T12382] team_slave_1: entered promiscuous mode [ 299.431072][T12384] __nla_validate_parse: 5 callbacks suppressed [ 299.431087][T12384] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1880'. [ 299.486117][T12388] lo speed is unknown, defaulting to 1000 [ 299.602625][T12388] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1881'. [ 299.787835][ T5950] Bluetooth: hci0: command 0x0406 tx timeout [ 299.790556][T12311] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 300.347638][ T5950] Bluetooth: hci2: command 0x0c1a tx timeout [ 300.347837][ T5952] Bluetooth: hci1: command 0x0c1a tx timeout [ 300.547457][T12403] lo speed is unknown, defaulting to 1000 [ 300.674536][T12403] sch_fq: defrate 2048 ignored. [ 300.677923][T12438] netlink: 'syz.2.1903': attribute type 10 has an invalid length. [ 300.680307][T12438] veth1_macvtap: left promiscuous mode [ 300.682304][T12438] team0: Device veth1_macvtap failed to register rx_handler [ 300.750963][T12448] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1908'. [ 300.752748][T12450] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1909'. [ 300.757007][T12450] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1909'. [ 301.734606][T12494] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1927'. [ 301.735673][T12493] netlink: 'syz.6.1926': attribute type 7 has an invalid length. [ 301.741961][T12493] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1926'. [ 301.784220][T12500] netlink: 'syz.4.1930': attribute type 4 has an invalid length. [ 301.788452][T12500] netlink: 'syz.4.1930': attribute type 4 has an invalid length. [ 301.849961][T12515] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1937'. [ 301.867254][ T5941] Bluetooth: hci0: command 0x0406 tx timeout [ 301.915795][T12524] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 301.921672][T12524] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1941'. [ 301.924609][T12526] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1942'. [ 301.994748][T12526] lo speed is unknown, defaulting to 1000 [ 302.166431][T12579] netlink: 'syz.4.1965': attribute type 58 has an invalid length. [ 302.180650][T12581] lo speed is unknown, defaulting to 1000 [ 302.189145][T12584] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 302.231670][T12589] lo speed is unknown, defaulting to 1000 [ 302.306419][T12608] batadv_slave_1: entered allmulticast mode [ 302.398681][T12624] vlan0: entered promiscuous mode [ 302.400217][T12624] bridge4: entered promiscuous mode [ 302.426573][ T5941] Bluetooth: hci2: command 0x0c1a tx timeout [ 302.432463][T12630] hsr0: entered promiscuous mode [ 303.115892][T12630] hsr_slave_0: left promiscuous mode [ 303.121416][T12630] hsr_slave_1: left promiscuous mode [ 303.135009][T12630] hsr0 (unregistering): left promiscuous mode [ 303.534266][T12701] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 304.178663][T12752] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 304.342633][T12772] netlink: 'syz.6.2047': attribute type 1 has an invalid length. [ 304.505619][ T5941] Bluetooth: hci2: command 0x0c1a tx timeout [ 304.596571][T12796] __nla_validate_parse: 16 callbacks suppressed [ 304.596584][T12796] netlink: 136 bytes leftover after parsing attributes in process `syz.6.2057'. [ 304.600968][T12796] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 304.775052][T12828] netlink: 260 bytes leftover after parsing attributes in process `syz.6.2073'. [ 304.806070][ T24] IPVS: starting estimator thread 0... [ 304.818992][ T1079] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 304.821188][ T1079] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 304.821997][T12839] netlink: 136 bytes leftover after parsing attributes in process `syz.4.2078'. [ 304.826039][T12839] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 304.834960][T12834] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 304.909246][T12835] IPVS: using max 44 ests per chain, 105600 per kthread [ 305.035613][T12877] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2096'. [ 305.113972][T12891] lo speed is unknown, defaulting to 1000 [ 305.299874][T12906] netlink: 136 bytes leftover after parsing attributes in process `syz.4.2107'. [ 305.302641][T12906] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 305.331954][T12910] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2108'. [ 305.342119][T12910] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2108'. [ 305.430726][T12928] netlink: 136 bytes leftover after parsing attributes in process `syz.4.2118'. [ 305.434281][T12928] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 305.480555][T12936] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2121'. [ 305.568736][T12950] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2127'. [ 306.318648][T13073] netlink: 'syz.6.2187': attribute type 1 has an invalid length. [ 306.585301][ T5941] Bluetooth: hci2: command 0x0c1a tx timeout [ 306.708575][T13133] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 306.830173][T13159] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 306.853626][T13165] netlink: 'syz.2.2231': attribute type 1 has an invalid length. [ 306.924113][T13187] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 307.150000][T13219] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 307.267136][T13239] net_ratelimit: 1 callbacks suppressed [ 307.267147][T13239] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 307.519839][T13184] Set syz1 is full, maxelem 65536 reached [ 307.698222][T10844] syz_tun (unregistering): left allmulticast mode [ 307.699839][ T5950] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 307.699977][T10844] syz_tun (unregistering): left promiscuous mode [ 307.704094][ T5950] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 307.706117][ T5950] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 307.706278][T10844] bridge0: port 1(syz_tun) entered disabled state [ 307.709992][ T5950] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 307.712687][ T5950] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 307.731345][T13279] lo speed is unknown, defaulting to 1000 [ 307.758948][T13289] netlink: 'syz.5.2288': attribute type 1 has an invalid length. [ 307.770932][T13284] netlink: 'syz.6.2286': attribute type 10 has an invalid length. [ 307.782210][T13284] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 307.802374][T13279] chnl_net:caif_netlink_parms(): no params data found [ 307.845055][T13279] bridge0: port 1(bridge_slave_0) entered blocking state [ 307.847073][T13279] bridge0: port 1(bridge_slave_0) entered disabled state [ 307.849028][T13279] bridge_slave_0: entered allmulticast mode [ 307.851081][T13279] bridge_slave_0: entered promiscuous mode [ 307.853583][T13279] bridge0: port 2(bridge_slave_1) entered blocking state [ 307.856086][T13279] bridge0: port 2(bridge_slave_1) entered disabled state [ 307.857968][T13279] bridge_slave_1: entered allmulticast mode [ 307.860017][T13279] bridge_slave_1: entered promiscuous mode [ 307.878671][T13279] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 307.882263][T13279] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 307.902370][T13279] team0: Port device team_slave_0 added [ 307.906719][T13279] team0: Port device team_slave_1 added [ 307.921947][T13279] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 307.924825][T13279] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 307.931796][T13279] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 307.936401][T13279] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 307.938306][T13279] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 307.945666][T13279] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 307.967694][T13279] hsr_slave_0: entered promiscuous mode [ 307.969591][T13279] hsr_slave_1: entered promiscuous mode [ 308.363955][T13279] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 308.367797][T13279] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 308.371723][T13279] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 308.376367][T13279] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 308.393074][T13279] bridge0: port 2(bridge_slave_1) entered blocking state [ 308.395098][T13279] bridge0: port 2(bridge_slave_1) entered forwarding state [ 308.397163][T13279] bridge0: port 1(bridge_slave_0) entered blocking state [ 308.399104][T13279] bridge0: port 1(bridge_slave_0) entered forwarding state [ 308.417626][T13279] 8021q: adding VLAN 0 to HW filter on device bond0 [ 308.426672][ T78] bridge0: port 1(bridge_slave_0) entered disabled state [ 308.429975][ T78] bridge0: port 2(bridge_slave_1) entered disabled state [ 308.441779][T13279] 8021q: adding VLAN 0 to HW filter on device team0 [ 308.449079][ T78] bridge0: port 1(bridge_slave_0) entered blocking state [ 308.451051][ T78] bridge0: port 1(bridge_slave_0) entered forwarding state [ 308.456252][ T1248] bridge0: port 2(bridge_slave_1) entered blocking state [ 308.458218][ T1248] bridge0: port 2(bridge_slave_1) entered forwarding state [ 308.537669][T13279] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 308.642722][T13279] veth0_vlan: entered promiscuous mode [ 308.648927][T13279] veth1_vlan: entered promiscuous mode [ 308.666237][T13279] veth0_macvtap: entered promiscuous mode [ 308.669142][T13279] veth1_macvtap: entered promiscuous mode [ 308.676055][T13279] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 308.680719][T13279] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 308.685165][T13279] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.687799][T13279] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.690333][T13279] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.692834][T13279] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.721307][ T78] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 308.727562][ T78] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 308.739143][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 308.741394][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 308.746375][T13319] netlink: 'syz.2.2296': attribute type 1 has an invalid length. [ 308.829744][T13349] netlink: 'syz.2.2306': attribute type 1 has an invalid length. [ 309.375861][T13436] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 309.660409][T13462] __nla_validate_parse: 31 callbacks suppressed [ 309.660422][T13462] netlink: 136 bytes leftover after parsing attributes in process `syz.5.2353'. [ 309.664788][T13462] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 309.708718][T13470] netlink: 260 bytes leftover after parsing attributes in process `syz.5.2357'. [ 309.784110][ T5941] Bluetooth: hci3: command tx timeout [ 309.808579][T13488] tipc: Started in network mode [ 309.810108][T13488] tipc: Node identity , cluster identity 4711 [ 309.811943][T13488] tipc: Failed to obtain node identity [ 309.814351][T13488] tipc: Enabling of bearer rejected, failed to enable media [ 309.816813][T13490] netlink: 136 bytes leftover after parsing attributes in process `syz.2.2365'. [ 309.819938][T13490] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 309.840908][T13492] netlink: 188 bytes leftover after parsing attributes in process `syz.6.2367'. [ 309.844273][T13492] netlink: 'syz.6.2367': attribute type 1 has an invalid length. [ 310.752719][T13513] netlink: 260 bytes leftover after parsing attributes in process `syz.4.2376'. [ 310.760466][T13517] netlink: 188 bytes leftover after parsing attributes in process `syz.6.2379'. [ 310.765192][T13517] netlink: 'syz.6.2379': attribute type 1 has an invalid length. [ 310.766187][T13519] netlink: 1004 bytes leftover after parsing attributes in process `syz.2.2378'. [ 310.788099][T13523] tipc: Started in network mode [ 310.789539][T13523] tipc: Node identity , cluster identity 4711 [ 310.791257][T13523] tipc: Failed to obtain node identity [ 310.793400][T13523] tipc: Enabling of bearer rejected, failed to enable media [ 310.828140][T13536] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2380'. [ 310.859077][T13546] netlink: 188 bytes leftover after parsing attributes in process `syz.6.2391'. [ 310.862556][T13546] netlink: 'syz.6.2391': attribute type 1 has an invalid length. [ 310.884622][T13550] netlink: 1004 bytes leftover after parsing attributes in process `syz.2.2393'. [ 311.186272][T13618] netlink: 'syz.2.2426': attribute type 1 has an invalid length. [ 311.446192][T13668] netlink: 'syz.6.2449': attribute type 1 has an invalid length. [ 311.546335][T13688] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 311.657504][T13710] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 311.714491][T13721] syzkaller1: entered promiscuous mode [ 311.716104][T13721] syzkaller1: entered allmulticast mode [ 311.781004][T13739] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 311.820866][T13747] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 311.862748][ T5941] Bluetooth: hci3: command tx timeout [ 312.070664][T13774] tipc: Started in network mode [ 312.072741][T13774] tipc: Node identity , cluster identity 4711 [ 312.074445][T13774] tipc: Failed to obtain node identity [ 312.076060][T13774] tipc: Enabling of bearer rejected, failed to enable media [ 312.523830][T13829] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 312.671492][T13853] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 312.820353][T13876] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 312.948318][ T5950] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 312.951877][ T5950] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 312.954823][ T5950] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 312.957536][ T5950] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 312.959722][ T5950] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 312.975000][T13892] lo speed is unknown, defaulting to 1000 [ 313.036710][T13892] chnl_net:caif_netlink_parms(): no params data found [ 313.091956][T13892] bridge0: port 1(bridge_slave_0) entered blocking state [ 313.094094][T13892] bridge0: port 1(bridge_slave_0) entered disabled state [ 313.096141][T13892] bridge_slave_0: entered allmulticast mode [ 313.098250][T13892] bridge_slave_0: entered promiscuous mode [ 313.100890][T13892] bridge0: port 2(bridge_slave_1) entered blocking state [ 313.103320][T13892] bridge0: port 2(bridge_slave_1) entered disabled state [ 313.105538][T13892] bridge_slave_1: entered allmulticast mode [ 313.107588][T13892] bridge_slave_1: entered promiscuous mode [ 313.137840][T13892] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 313.143708][T13892] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 313.185707][T13892] team0: Port device team_slave_0 added [ 313.196224][T13892] team0: Port device team_slave_1 added [ 313.212070][T13919] validate_nla: 2 callbacks suppressed [ 313.212081][T13919] netlink: 'syz.5.2569': attribute type 1 has an invalid length. [ 313.225329][T13892] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 313.227328][T13892] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 313.236179][T13892] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 313.240980][T13892] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 313.243102][T13892] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 313.250743][T13892] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 313.274615][T13892] hsr_slave_0: entered promiscuous mode [ 313.276553][T13892] hsr_slave_1: entered promiscuous mode [ 313.278304][T13892] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 313.280376][T13892] Cannot create hsr debugfs directory [ 313.470807][T13938] netlink: 'syz.4.2578': attribute type 1 has an invalid length. [ 313.699867][T13964] netlink: 'syz.5.2590': attribute type 1 has an invalid length. [ 313.797616][T13892] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 313.801336][T13892] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 313.805041][T13892] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 313.808248][T13892] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 313.824323][T13892] bridge0: port 2(bridge_slave_1) entered blocking state [ 313.826207][T13892] bridge0: port 2(bridge_slave_1) entered forwarding state [ 313.828184][T13892] bridge0: port 1(bridge_slave_0) entered blocking state [ 313.830056][T13892] bridge0: port 1(bridge_slave_0) entered forwarding state [ 313.856181][T13892] 8021q: adding VLAN 0 to HW filter on device bond0 [ 313.863948][T13892] 8021q: adding VLAN 0 to HW filter on device team0 [ 313.872346][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 313.878921][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 313.905868][ T78] bridge0: port 1(bridge_slave_0) entered blocking state [ 313.908493][ T78] bridge0: port 1(bridge_slave_0) entered forwarding state [ 313.915319][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 313.917612][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 313.941122][ T5950] Bluetooth: hci3: command tx timeout [ 314.009588][T13892] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 314.026768][T13892] veth0_vlan: entered promiscuous mode [ 314.030299][T13892] veth1_vlan: entered promiscuous mode [ 314.043649][T13892] veth0_macvtap: entered promiscuous mode [ 314.046529][T13892] veth1_macvtap: entered promiscuous mode [ 314.052598][T13892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 314.055362][T13892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 314.058727][T13892] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 314.069141][T13892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 314.073116][T13892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 314.077709][T13892] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 314.082854][T13892] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.086019][T13892] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.089309][T13892] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.092609][T13892] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.128526][ T1248] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 314.135289][ T1248] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 314.144381][ T1248] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 314.146764][ T1248] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 314.683662][T14049] __nla_validate_parse: 49 callbacks suppressed [ 314.683681][T14049] netlink: 256 bytes leftover after parsing attributes in process `syz.6.2627'. [ 314.726270][T14054] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2630'. [ 314.810842][T14062] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 314.847646][T14065] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2635'. [ 315.762470][T14075] netlink: 256 bytes leftover after parsing attributes in process `syz.5.2639'. [ 315.781458][T14079] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2642'. [ 315.877390][ T1323] IPVS: starting estimator thread 0... [ 315.881264][T14093] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 315.960267][T14094] IPVS: using max 41 ests per chain, 98400 per kthread [ 316.020249][ T5950] Bluetooth: hci3: command tx timeout [ 316.422747][ T1415] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.425944][ T1415] ieee802154 phy1 wpan1: encryption failed: -22 [ 316.774291][T14108] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2656'. [ 316.799958][T14112] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2658'. [ 316.806513][T14115] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2654'. [ 316.843922][T14121] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 317.805333][ T1323] IPVS: starting estimator thread 0... [ 317.809330][ T1138] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 317.811963][ T1138] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 317.818179][T14150] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 317.858552][T14155] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2675'. [ 317.888817][T14152] IPVS: using max 44 ests per chain, 105600 per kthread [ 318.730570][T14170] lo speed is unknown, defaulting to 1000 [ 318.745692][T14173] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2686'. [ 318.755591][T14176] tipc: Started in network mode [ 318.756992][T14176] tipc: Node identity , cluster identity 4711 [ 318.759267][T14176] tipc: Failed to obtain node identity [ 318.761446][T14176] tipc: Enabling of bearer rejected, failed to enable media [ 319.739588][T14204] netlink: 'syz.2.2700': attribute type 29 has an invalid length. [ 319.741958][T14204] __nla_validate_parse: 5 callbacks suppressed [ 319.741966][T14204] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2700'. [ 319.749738][T14207] netlink: 240 bytes leftover after parsing attributes in process `syz.4.2702'. [ 319.895344][T14204] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2700'. [ 320.658179][T14224] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2707'. [ 320.685621][T14224] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.686189][T14233] netlink: 240 bytes leftover after parsing attributes in process `syz.4.2715'. [ 320.752734][T14224] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.806019][T14247] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2721'. [ 320.842265][T14253] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2724'. [ 320.844846][T14253] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2724'. [ 320.859041][T14224] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.881632][T14257] netlink: 240 bytes leftover after parsing attributes in process `syz.5.2726'. [ 320.890646][T14255] tap0: tun_chr_ioctl cmd 1074025680 [ 320.930760][T14224] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.943035][T14261] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 321.011948][T14224] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.019079][T14224] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.028476][T14265] delete_channel: no stack [ 321.030761][T14224] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.038090][T14224] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.101927][T14269] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2732'. [ 321.128926][T14271] netlink: 'syz.2.2733': attribute type 7 has an invalid length. [ 321.318490][T14287] vti0: entered promiscuous mode [ 321.489040][T14313] netlink: 'syz.6.2754': attribute type 11 has an invalid length. [ 321.621672][T14338] team0: No ports can be present during mode change [ 321.650939][T14344] netlink: 'syz.6.2768': attribute type 2 has an invalid length. [ 321.659306][T14344] fþ²¹¥‰: entered promiscuous mode [ 321.662683][T14346] lo speed is unknown, defaulting to 1000 [ 321.826805][T14363] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 321.830152][T14363] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 321.833418][T14363] bond0 (unregistering): (slave netdevsim0): Releasing backup interface [ 321.838025][T14363] bond0 (unregistering): Released all slaves [ 321.845915][T14346] lo speed is unknown, defaulting to 1000 [ 322.115046][T14410] tipc: Failed to remove unknown binding: 66,1,1/0:1685337836/1685337838 [ 322.117155][T14418] tipc: Invalid UDP bearer configuration [ 322.117610][T14418] tipc: Enabling of bearer rejected, failed to enable media [ 322.341364][ T6004] IPVS: starting estimator thread 0... [ 322.346234][T14443] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 322.446479][T14444] IPVS: using max 44 ests per chain, 105600 per kthread [ 322.948306][T14476] netlink: 'syz.5.2829': attribute type 10 has an invalid length. [ 322.953110][T14476] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 323.051119][T14473] infiniband syz2: set down [ 323.052626][T14473] infiniband syz2: added ipvlan1 [ 323.080625][T14473] RDS/IB: syz2: added [ 323.082319][T14473] smc: adding ib device syz2 with port count 1 [ 323.084479][T14473] smc: ib device syz2 port 1 has pnetid [ 323.283890][T14506] veth3: entered allmulticast mode [ 323.285624][T14506] bridge0: port 3(veth3) entered blocking state [ 323.288242][T14506] bridge0: port 3(veth3) entered disabled state [ 323.290615][T14506] veth3: entered promiscuous mode [ 323.308016][T14506] bridge0: port 3(veth3) entered blocking state [ 323.309845][T14506] bridge0: port 3(veth3) entered forwarding state [ 323.312821][T14506] 8021q: adding VLAN 0 to HW filter on device team0 [ 323.317164][T14506] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 323.332744][ T1138] bridge0: port 3(veth3) entered disabled state [ 323.439071][T14518] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 323.443242][T14518] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 323.447990][T14518] bond0 (unregistering): (slave macvlan0): Releasing backup interface [ 323.453501][T14518] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 323.463784][T14518] bond0 (unregistering): Released all slaves [ 323.642128][T14535] netlink: 'syz.5.2856': attribute type 29 has an invalid length. [ 324.236511][T14573] netlink: 'syz.2.2874': attribute type 1 has an invalid length. [ 324.958645][T14590] __nla_validate_parse: 29 callbacks suppressed [ 324.958657][T14590] netlink: 1084 bytes leftover after parsing attributes in process `syz.2.2882'. [ 324.998269][T14595] netlink: 'syz.4.2885': attribute type 1 has an invalid length. [ 325.001213][T14595] netlink: 192 bytes leftover after parsing attributes in process `syz.4.2885'. [ 325.109802][T14608] netlink: 'syz.6.2890': attribute type 10 has an invalid length. [ 325.112025][T14608] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2890'. [ 325.114557][T14608] dummy0: entered promiscuous mode [ 325.119936][T14608] bridge0: port 4(dummy0) entered blocking state [ 325.121792][T14608] bridge0: port 4(dummy0) entered disabled state [ 325.123992][T14608] dummy0: entered allmulticast mode [ 325.126828][T14608] bridge0: port 4(dummy0) entered blocking state [ 325.128723][T14608] bridge0: port 4(dummy0) entered forwarding state [ 325.148941][T14616] netlink: 136 bytes leftover after parsing attributes in process `syz.2.2894'. [ 325.193554][T14626] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2896'. [ 325.317927][T14646] netlink: 240 bytes leftover after parsing attributes in process `syz.2.2907'. [ 325.547446][T14665] netlink: 240 bytes leftover after parsing attributes in process `syz.4.2917'. [ 325.751721][T14681] netlink: 'syz.5.2925': attribute type 10 has an invalid length. [ 325.754719][T14681] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2925'. [ 325.813428][T14689] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 325.826325][T14691] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2930'. [ 326.153481][T14709] netlink: 240 bytes leftover after parsing attributes in process `syz.6.2938'. [ 326.359627][T14725] netlink: 'syz.4.2946': attribute type 1 has an invalid length. [ 326.369720][T14725] 8021q: adding VLAN 0 to HW filter on device bond1 [ 326.387387][T14725] bond1: (slave veth7): Enslaving as an active interface with a down link [ 326.410450][T14725] bond1: (slave syz_tun): making interface the new active one [ 326.413190][T14725] syz_tun: entered promiscuous mode [ 326.417498][T14725] bond1: (slave syz_tun): Enslaving as an active interface with an up link [ 326.610319][T14753] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 326.756191][T14769] veth0_to_bridge: entered promiscuous mode [ 326.759646][T14768] veth0_to_bridge: left promiscuous mode [ 327.243894][T14833] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 327.586297][T14875] syzkaller0: entered promiscuous mode [ 327.587949][T14875] syzkaller0: entered allmulticast mode [ 327.605973][T14875] syzkaller0: create flow: hash 239875957 index 1 [ 327.656443][T14874] syzkaller0: delete flow: hash 239875957 index 1 [ 328.961952][T14920] lo speed is unknown, defaulting to 1000 [ 329.292535][T14958] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 329.307139][T14960] Bluetooth: MGMT ver 1.23 [ 330.013874][T15037] __nla_validate_parse: 19 callbacks suppressed [ 330.013885][T15037] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3096'. [ 330.739027][T15036] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3096'. [ 330.777437][T15041] netlink: 260 bytes leftover after parsing attributes in process `syz.4.3097'. [ 330.794226][ T78] wlan0: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID [ 330.800590][T15043] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 330.927327][T15056] netlink: 'syz.5.3105': attribute type 1 has an invalid length. [ 330.936121][T15056] 8021q: adding VLAN 0 to HW filter on device bond0 [ 331.000439][T15061] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3107'. [ 331.005657][T15061] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3107'. [ 331.258674][T15078] netlink: 'syz.5.3115': attribute type 1 has an invalid length. [ 331.267162][T15078] 8021q: adding VLAN 0 to HW filter on device bond2 [ 331.332666][T15083] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3117'. [ 331.336835][T15083] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3117'. [ 331.540991][T15104] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 331.607551][T15107] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3128'. [ 331.612533][T15107] netlink: 44 bytes leftover after parsing attributes in process `syz.6.3128'. [ 331.664045][T15112] vlan2: entered promiscuous mode [ 331.665497][T15112] bridge0: entered promiscuous mode [ 331.669580][T15112] netlink: 'syz.4.3130': attribute type 10 has an invalid length. [ 331.672773][T15112] bridge0: port 2(bridge_slave_1) entered disabled state [ 331.674995][T15112] bridge0: port 1(bridge_slave_0) entered disabled state [ 331.681199][T15112] bridge0: port 2(bridge_slave_1) entered blocking state [ 331.683289][T15112] bridge0: port 2(bridge_slave_1) entered forwarding state [ 331.685529][T15112] bridge0: port 1(bridge_slave_0) entered blocking state [ 331.687637][T15112] bridge0: port 1(bridge_slave_0) entered forwarding state [ 331.692321][T15112] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 331.764428][T15128] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3138'. [ 332.845318][T15231] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 333.636599][T15308] lo speed is unknown, defaulting to 1000 [ 333.653730][T15319] netlink: 'syz.6.3231': attribute type 1 has an invalid length. [ 333.932507][T15373] lo speed is unknown, defaulting to 1000 [ 333.959139][T15375] netlink: 'syz.4.3258': attribute type 16 has an invalid length. [ 333.961394][T15375] netlink: 'syz.4.3258': attribute type 17 has an invalid length. [ 334.028535][T15375] bridge0: port 2(bridge_slave_1) entered disabled state [ 334.031197][T15375] bridge0: port 1(bridge_slave_0) entered disabled state [ 334.153398][T15375] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 334.170852][T15375] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 334.259923][T15375] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.263198][T15375] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.265707][T15375] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.268219][T15375] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.317233][T15399] netlink: 'syz.2.3267': attribute type 1 has an invalid length. [ 334.327656][T15403] netlink: 'syz.4.3268': attribute type 7 has an invalid length. [ 334.547124][T15453] lo speed is unknown, defaulting to 1000 [ 334.890905][T15503] lo speed is unknown, defaulting to 1000 [ 334.893289][T15505] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 335.045062][T15513] syzkaller1: entered promiscuous mode [ 335.046652][T15513] syzkaller1: entered allmulticast mode [ 335.351964][T15529] netlink: 'syz.2.3327': attribute type 30 has an invalid length. [ 335.432659][T15539] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input11 [ 335.480906][T15546] __nla_validate_parse: 32 callbacks suppressed [ 335.480918][T15546] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3336'. [ 335.724635][T15581] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3352'. [ 336.094414][T15605] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3363'. [ 336.370879][T15623] netlink: 'syz.2.3372': attribute type 1 has an invalid length. [ 336.387749][T15624] lo speed is unknown, defaulting to 1000 [ 336.513611][T15641] netlink: 'syz.4.3380': attribute type 4 has an invalid length. [ 336.529600][T15645] lo speed is unknown, defaulting to 1000 [ 336.620196][T15659] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3388'. [ 336.635826][T15645] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3382'. [ 336.731825][T15674] lo speed is unknown, defaulting to 1000 [ 336.796063][T15685] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3400'. [ 336.835279][T15691] bond1: (slave syz_tun): Releasing active interface [ 336.837673][T15691] syz_tun: left promiscuous mode [ 336.870049][T15698] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3405'. [ 337.871131][T15735] lo speed is unknown, defaulting to 1000 [ 338.816998][T15774] netlink: 'syz.2.3435': attribute type 1 has an invalid length. [ 339.038731][T15802] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3441'. [ 339.041584][T15802] netlink: 'syz.6.3441': attribute type 7 has an invalid length. [ 339.047297][T15802] netlink: 'syz.6.3441': attribute type 8 has an invalid length. [ 339.050956][T15802] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3441'. [ 339.372459][T15791] lo speed is unknown, defaulting to 1000 [ 339.464102][T15818] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3449'. [ 339.678677][T15866] lo speed is unknown, defaulting to 1000 [ 339.892582][T15915] netlink: 'syz.2.3496': attribute type 15 has an invalid length. [ 340.284913][T15986] netlink: 'syz.5.3528': attribute type 1 has an invalid length. [ 340.287043][T15988] vlan0: entered promiscuous mode [ 340.540333][T16021] __nla_validate_parse: 23 callbacks suppressed [ 340.540344][T16021] netlink: 188 bytes leftover after parsing attributes in process `syz.5.3544'. [ 340.548929][T16025] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3546'. [ 340.657598][T16037] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3551'. [ 340.763000][T16047] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3555'. [ 340.895610][ T5941] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 340.914487][ T5941] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 340.919187][ T5941] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 340.923955][ T5941] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 340.929077][ T5941] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 340.947029][T16054] lo speed is unknown, defaulting to 1000 [ 341.056847][T16054] chnl_net:caif_netlink_parms(): no params data found [ 341.131223][T16054] bridge0: port 1(bridge_slave_0) entered blocking state [ 341.133632][T16054] bridge0: port 1(bridge_slave_0) entered disabled state [ 341.136245][T16054] bridge_slave_0: entered allmulticast mode [ 341.141925][T16054] bridge_slave_0: entered promiscuous mode [ 341.146237][T16054] bridge0: port 2(bridge_slave_1) entered blocking state [ 341.148647][T16054] bridge0: port 2(bridge_slave_1) entered disabled state [ 341.151183][T16054] bridge_slave_1: entered allmulticast mode [ 341.153479][T16054] bridge_slave_1: entered promiscuous mode [ 341.169531][T16075] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3565'. [ 341.185805][T16054] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 341.192529][T16054] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 341.224977][T16054] team0: Port device team_slave_0 added [ 341.228132][T16054] team0: Port device team_slave_1 added [ 341.295529][T16054] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 341.298106][T16054] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 341.305915][T16054] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 341.312746][T16054] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 341.315415][T16054] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 341.324380][T16054] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 341.350564][T16054] hsr_slave_0: entered promiscuous mode [ 341.353296][T16054] hsr_slave_1: entered promiscuous mode [ 341.355090][T16054] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 341.357276][T16054] Cannot create hsr debugfs directory [ 341.446769][T16094] lo speed is unknown, defaulting to 1000 [ 341.732966][T16130] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3591'. [ 341.742279][T16130] macvtap1: entered promiscuous mode [ 341.744379][T16130] macvtap1: entered allmulticast mode [ 341.746254][T16130] team0: entered allmulticast mode [ 341.747840][T16130] team_slave_0: entered allmulticast mode [ 341.749609][T16130] team_slave_1: entered allmulticast mode [ 341.751487][T16130] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 341.797448][T16133] 8021q: adding VLAN 0 to HW filter on device bond0 [ 341.799876][T16133] 8021q: adding VLAN 0 to HW filter on device team0 [ 341.803520][T16133] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 341.837308][T16054] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 341.844112][T16054] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 341.850698][T16054] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 341.856246][T16054] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 341.872324][T16054] bridge0: port 2(bridge_slave_1) entered blocking state [ 341.874308][T16054] bridge0: port 2(bridge_slave_1) entered forwarding state [ 341.876487][T16054] bridge0: port 1(bridge_slave_0) entered blocking state [ 341.878470][T16054] bridge0: port 1(bridge_slave_0) entered forwarding state [ 341.901889][T16054] 8021q: adding VLAN 0 to HW filter on device bond0 [ 341.911733][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 341.917927][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 341.939696][T16054] 8021q: adding VLAN 0 to HW filter on device team0 [ 341.966625][T16054] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 341.969957][T16054] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 341.974514][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 341.976527][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 341.980856][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 341.982885][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 342.065916][T16054] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 342.191554][T16054] veth0_vlan: entered promiscuous mode [ 342.197782][T16054] veth1_vlan: entered promiscuous mode [ 342.215119][T16054] veth0_macvtap: entered promiscuous mode [ 342.218900][T16054] veth1_macvtap: entered promiscuous mode [ 342.224691][T16054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 342.230340][T16054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 342.233503][T16054] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 342.239191][T16054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 342.242175][T16054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 342.245255][T16054] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 342.250804][T16054] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.253213][T16054] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.255510][T16054] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.262336][T16054] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.311735][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 342.313980][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 342.336744][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 342.340814][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 342.389524][T16163] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3558'. [ 342.785925][T16177] netlink: 'syz.2.3602': attribute type 10 has an invalid length. [ 342.820063][T16186] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3610'. [ 342.986279][ T5941] Bluetooth: hci4: command tx timeout [ 343.760613][T16206] netlink: 188 bytes leftover after parsing attributes in process `syz.5.3618'. [ 343.782778][T16211] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3621'. [ 343.869189][T16223] netlink: 'syz.6.3617': attribute type 1 has an invalid length. [ 343.871438][T16223] netlink: 'syz.6.3617': attribute type 3 has an invalid length. [ 343.928152][T16223] bridge0: port 4(dummy0) entered disabled state [ 343.961278][T16223] team0: left allmulticast mode [ 343.964919][T16223] team_slave_0: left allmulticast mode [ 343.969260][T16223] team_slave_1: left allmulticast mode [ 343.973585][T16223] macvtap1: left promiscuous mode [ 343.977287][T16223] macvtap1: left allmulticast mode [ 344.492681][ T5983] libceph: connect (1)[c::]:6789 error -101 [ 344.496592][ T5983] libceph: mon0 (1)[c::]:6789 connect error [ 344.767654][ T5983] libceph: connect (1)[c::]:6789 error -101 [ 344.772467][ T5983] libceph: mon0 (1)[c::]:6789 connect error [ 345.055368][ T5941] Bluetooth: hci4: command tx timeout [ 345.295786][ T5983] libceph: connect (1)[c::]:6789 error -101 [ 345.298266][ T5983] libceph: mon0 (1)[c::]:6789 connect error [ 345.342320][T16239] ceph: No mds server is up or the cluster is laggy [ 345.541348][T16271] lo speed is unknown, defaulting to 1000 [ 346.541573][T16288] __nla_validate_parse: 3 callbacks suppressed [ 346.541584][T16288] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3646'. [ 346.884810][T16309] netlink: 'syz.4.3653': attribute type 1 has an invalid length. [ 346.890967][T16309] netlink: 'syz.4.3653': attribute type 3 has an invalid length. [ 346.903476][T16309] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3653'. [ 346.951800][T16311] netlink: 'syz.2.3652': attribute type 1 has an invalid length. [ 346.954042][T16311] netlink: 'syz.2.3652': attribute type 3 has an invalid length. [ 346.968089][T16311] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3652'. [ 347.089805][T16309] vlan2: left promiscuous mode [ 347.094494][T16309] bridge0: left promiscuous mode [ 347.124544][ T5941] Bluetooth: hci4: command tx timeout [ 347.179504][T16311] bridge0: port 2(bridge_slave_1) entered disabled state [ 347.182429][T16311] bridge0: port 1(bridge_slave_0) entered disabled state [ 347.369972][T16311] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 347.383340][T16311] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 347.535553][T16311] vlan0: left promiscuous mode [ 347.583652][T16311] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.587444][T16311] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.594111][T16311] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.597738][T16311] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.657618][T16311] vti0: left promiscuous mode [ 349.203474][ T5941] Bluetooth: hci4: command tx timeout [ 350.246624][T16376] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3678'. [ 350.250910][T16376] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3678'. [ 350.765947][T16384] netlink: 56 bytes leftover after parsing attributes in process `syz.6.3676'. [ 351.342024][ T74] usb 11-1: new high-speed USB device number 4 using dummy_hcd [ 351.493196][ T74] usb 11-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 351.496379][ T74] usb 11-1: config 0 interface 0 has no altsetting 0 [ 351.501215][ T74] usb 11-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 351.504099][ T74] usb 11-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 351.506343][ T74] usb 11-1: Product: syz [ 351.507603][ T74] usb 11-1: Manufacturer: syz [ 351.508931][ T74] usb 11-1: SerialNumber: syz [ 351.510988][ T74] usb 11-1: config 0 descriptor?? [ 351.522106][ T74] usb 11-1: selecting invalid altsetting 0 [ 351.785057][ T74] usb 11-1: USB disconnect, device number 4 [ 352.020257][T16396] 8021q: adding VLAN 0 to HW filter on device bond1 [ 352.039538][T16396] bond1: (slave veth9): Enslaving as an active interface with an up link [ 352.046964][T16396] bond1: (slave syz_tun): Enslaving as an active interface with an up link [ 352.150148][T16410] netlink: 'syz.4.3687': attribute type 1 has an invalid length. [ 352.158212][T16410] netlink: 'syz.4.3687': attribute type 3 has an invalid length. [ 352.160323][T16410] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3687'. [ 352.271569][ T1323] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 352.432979][ T1323] usb 10-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 352.437039][ T1323] usb 10-1: config 0 interface 0 has no altsetting 0 [ 352.714121][ T1323] usb 10-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 352.716816][ T1323] usb 10-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 352.719337][ T1323] usb 10-1: Product: syz [ 352.720729][ T1323] usb 10-1: Manufacturer: syz [ 352.722559][ T1323] usb 10-1: SerialNumber: syz [ 352.724669][ T1323] usb 10-1: config 0 descriptor?? [ 352.728791][ T1323] usb 10-1: selecting invalid altsetting 0 [ 352.937052][ T1323] usb 10-1: USB disconnect, device number 2 [ 353.286337][T16428] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3697'. [ 353.313686][T16432] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 353.354618][T16440] 8021q: adding VLAN 0 to HW filter on device bond0 [ 353.371918][T16440] bond0: (slave veth5): Enslaving as an active interface with an up link [ 353.581130][T14324] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 353.742038][T14324] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 353.744719][T14324] usb 7-1: config 0 interface 0 has no altsetting 0 [ 353.747910][T14324] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 353.750361][T14324] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 353.752933][T14324] usb 7-1: Product: syz [ 353.754541][T14324] usb 7-1: Manufacturer: syz [ 353.760703][T14324] usb 7-1: SerialNumber: syz [ 353.763106][T14324] usb 7-1: config 0 descriptor?? [ 353.766424][T14324] usb 7-1: selecting invalid altsetting 0 [ 354.073174][ T58] usb 7-1: USB disconnect, device number 15 [ 354.156312][T16454] netlink: 'syz.4.3706': attribute type 1 has an invalid length. [ 354.161254][T16454] netlink: 'syz.4.3706': attribute type 3 has an invalid length. [ 354.163402][T16454] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3706'. [ 355.165778][T16462] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3708'. [ 355.193373][T16471] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 355.660864][T16486] netlink: 'syz.6.3718': attribute type 1 has an invalid length. [ 355.666182][T16486] netlink: 'syz.6.3718': attribute type 3 has an invalid length. [ 355.668851][T16486] netlink: 224 bytes leftover after parsing attributes in process `syz.6.3718'. [ 355.980068][ T58] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 356.131317][ T58] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 356.134110][ T58] usb 7-1: config 0 interface 0 has no altsetting 0 [ 356.139977][ T58] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 356.142519][ T58] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 356.145838][ T58] usb 7-1: Product: syz [ 356.147128][ T58] usb 7-1: Manufacturer: syz [ 356.150063][ T58] usb 7-1: SerialNumber: syz [ 356.154066][ T58] usb 7-1: config 0 descriptor?? [ 356.160547][ T58] usb 7-1: selecting invalid altsetting 0 [ 356.172950][T16497] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3723'. [ 356.217326][T16505] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3727'. [ 356.456784][ T5947] usb 7-1: USB disconnect, device number 16 [ 356.551303][T16533] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3738'. [ 356.572116][T16535] netlink: 'syz.5.3740': attribute type 1 has an invalid length. [ 356.588515][T16535] 8021q: adding VLAN 0 to HW filter on device bond1 [ 356.610733][T16535] bond1: (slave veth3): Enslaving as an active interface with an up link [ 356.619862][T16535] bond1: (slave syz_tun): Enslaving as an active interface with an up link [ 356.731356][T16547] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3743'. [ 356.856628][T16561] netlink: 'syz.5.3751': attribute type 1 has an invalid length. [ 356.866552][T16561] 8021q: adding VLAN 0 to HW filter on device bond2 [ 356.890228][T16561] bond2: (slave veth5): Enslaving as an active interface with an up link [ 356.900659][T16561] bond1: (slave syz_tun): Releasing backup interface [ 356.904824][T16561] bond2: (slave syz_tun): Enslaving as an active interface with an up link [ 357.006732][T16571] netlink: 260 bytes leftover after parsing attributes in process `syz.2.3755'. [ 357.038621][ T78] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 357.041279][ T78] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 357.045806][T16573] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 357.156941][T16583] netlink: 'syz.5.3761': attribute type 1 has an invalid length. [ 357.164981][T16583] 8021q: adding VLAN 0 to HW filter on device bond3 [ 357.179865][T16583] bond3: (slave veth7): Enslaving as an active interface with an up link [ 357.191378][T16583] bond2: (slave syz_tun): Releasing backup interface [ 357.195193][T16583] bond3: (slave syz_tun): Enslaving as an active interface with an up link [ 357.588202][T16613] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3774'. [ 357.603573][ T74] IPVS: starting estimator thread 0... [ 357.611160][T16615] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 357.709256][T16616] IPVS: using max 44 ests per chain, 105600 per kthread [ 357.767670][T16632] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 358.331300][T16652] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3791'. [ 358.425567][T16662] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3795'. [ 358.441383][T16662] netlink: 108 bytes leftover after parsing attributes in process `syz.2.3795'. [ 358.468345][T16663] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3788'. [ 358.481259][T16665] netlink: 'syz.5.3792': attribute type 1 has an invalid length. [ 358.486582][T16665] netlink: 'syz.5.3792': attribute type 3 has an invalid length. [ 358.492310][T16665] netlink: 224 bytes leftover after parsing attributes in process `syz.5.3792'. [ 358.735308][T16665] bridge0: port 2(bridge_slave_1) entered disabled state [ 358.737406][T16665] bridge0: port 1(bridge_slave_0) entered disabled state [ 358.804116][T16679] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 358.847735][T16665] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 358.856229][T16665] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 358.923257][T16665] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.925742][T16665] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.928816][T16665] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.931270][T16665] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.958371][T16682] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3802'. [ 359.008832][T16689] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3804'. [ 359.172909][T16696] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3806'. [ 359.261107][T16705] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 359.538062][T14324] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 359.592745][ T5950] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 359.595934][ T5950] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 359.600525][ T5950] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 359.603718][ T5950] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 359.606105][ T5950] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 359.626380][T16710] lo speed is unknown, defaulting to 1000 [ 359.709423][T14324] usb 9-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 359.713385][T16710] chnl_net:caif_netlink_parms(): no params data found [ 359.717838][T14324] usb 9-1: config 0 interface 0 has no altsetting 0 [ 359.721159][T14324] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 359.723680][T14324] usb 9-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 359.725933][T14324] usb 9-1: Product: syz [ 359.727114][T14324] usb 9-1: Manufacturer: syz [ 359.729575][T14324] usb 9-1: SerialNumber: syz [ 359.731892][T14324] usb 9-1: config 0 descriptor?? [ 359.734865][T14324] usb 9-1: selecting invalid altsetting 0 [ 359.779142][T16710] bridge0: port 1(bridge_slave_0) entered blocking state [ 359.781883][T16710] bridge0: port 1(bridge_slave_0) entered disabled state [ 359.784606][T16710] bridge_slave_0: entered allmulticast mode [ 359.787453][T16710] bridge_slave_0: entered promiscuous mode [ 359.802843][T16710] bridge0: port 2(bridge_slave_1) entered blocking state [ 359.805501][T16710] bridge0: port 2(bridge_slave_1) entered disabled state [ 359.808804][T16710] bridge_slave_1: entered allmulticast mode [ 359.811386][T16710] bridge_slave_1: entered promiscuous mode [ 359.827199][T16721] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3814'. [ 359.839773][T16710] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 359.843727][T16710] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 359.871850][T16710] team0: Port device team_slave_0 added [ 359.876025][T16710] team0: Port device team_slave_1 added [ 359.912762][T16710] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 359.915633][T16710] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 359.925636][T16710] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 359.931204][T16710] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 359.933869][T16710] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 359.936538][ T74] usb 9-1: USB disconnect, device number 2 [ 359.945033][T16710] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 359.996043][T16710] hsr_slave_0: entered promiscuous mode [ 359.998599][T16710] hsr_slave_1: entered promiscuous mode [ 360.000484][T16710] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 360.002663][T16710] Cannot create hsr debugfs directory [ 360.024443][T16729] netlink: 'syz.2.3815': attribute type 1 has an invalid length. [ 360.029857][T16729] netlink: 'syz.2.3815': attribute type 3 has an invalid length. [ 360.064988][T16730] bond3: (slave syz_tun): Releasing backup interface [ 360.495296][T16710] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 360.502004][T16710] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 360.505937][T16710] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 360.514634][T16710] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 360.542028][T16710] 8021q: adding VLAN 0 to HW filter on device bond0 [ 360.548486][T16710] 8021q: adding VLAN 0 to HW filter on device team0 [ 360.552339][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 360.554377][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 360.559115][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 360.561172][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 360.587925][T16710] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 360.640915][T16710] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 360.739041][T16710] veth0_vlan: entered promiscuous mode [ 360.744658][T16710] veth1_vlan: entered promiscuous mode [ 360.759624][T16710] veth0_macvtap: entered promiscuous mode [ 360.763213][T16710] veth1_macvtap: entered promiscuous mode [ 360.773014][T16710] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 360.778462][T16710] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 360.783087][T16710] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.786206][T16710] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.792561][T16710] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.795684][T16710] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.844587][ T1138] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 360.846842][ T1138] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 360.865874][ T1248] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 360.868797][ T1248] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 361.231256][T16769] bond1: (slave syz_tun): Releasing backup interface [ 361.547177][ T58] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 361.677262][ T5950] Bluetooth: hci1: command tx timeout [ 361.698403][ T58] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 361.700913][ T58] usb 7-1: config 0 interface 0 has no altsetting 0 [ 361.704147][ T58] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 361.706615][ T58] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 361.709404][ T58] usb 7-1: Product: syz [ 361.710514][ T58] usb 7-1: Manufacturer: syz [ 361.711772][ T58] usb 7-1: SerialNumber: syz [ 361.713847][ T58] usb 7-1: config 0 descriptor?? [ 361.717629][ T58] usb 7-1: selecting invalid altsetting 0 [ 361.918862][ T58] usb 7-1: USB disconnect, device number 17 [ 362.789239][ T1248] wlan0: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID [ 362.797606][T16871] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 363.116349][ T6396] usb 11-1: new high-speed USB device number 5 using dummy_hcd [ 363.278839][ T6396] usb 11-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 363.281585][ T6396] usb 11-1: config 0 interface 0 has no altsetting 0 [ 363.285830][ T6396] usb 11-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 363.288921][ T6396] usb 11-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 363.291207][ T6396] usb 11-1: Product: syz [ 363.292415][ T6396] usb 11-1: Manufacturer: syz [ 363.293738][ T6396] usb 11-1: SerialNumber: syz [ 363.295854][ T6396] usb 11-1: config 0 descriptor?? [ 363.299414][ T6396] usb 11-1: selecting invalid altsetting 0 [ 363.307958][T16897] lo speed is unknown, defaulting to 1000 [ 363.334075][T16899] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 363.356026][T16901] __nla_validate_parse: 10 callbacks suppressed [ 363.356038][T16901] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3884'. [ 363.409281][T16905] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3886'. [ 363.504207][ T1323] usb 11-1: USB disconnect, device number 5 [ 363.756784][ T5950] Bluetooth: hci1: command tx timeout [ 363.994818][T16915] netlink: 'syz.2.3889': attribute type 1 has an invalid length. [ 363.997085][T16915] netlink: 'syz.2.3889': attribute type 3 has an invalid length. [ 364.004242][T16915] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3889'. [ 364.453016][T16957] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3909'. [ 364.460520][T16958] lo speed is unknown, defaulting to 1000 [ 364.626239][ T58] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 364.657692][ T6372] IPVS: starting estimator thread 0... [ 364.664038][T16982] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 364.755409][T16983] IPVS: using max 43 ests per chain, 103200 per kthread [ 364.776868][ T58] usb 9-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 364.779591][ T58] usb 9-1: config 0 interface 0 has no altsetting 0 [ 364.781083][ T1248] wlan0: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID [ 364.782860][ T58] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 364.787075][ T58] usb 9-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 364.789303][ T58] usb 9-1: Product: syz [ 364.790464][ T58] usb 9-1: Manufacturer: syz [ 364.793253][ T58] usb 9-1: SerialNumber: syz [ 364.796196][ T58] usb 9-1: config 0 descriptor?? [ 364.799271][ T58] usb 9-1: selecting invalid altsetting 0 [ 364.946126][T16996] lo speed is unknown, defaulting to 1000 [ 365.004149][ T58] usb 9-1: USB disconnect, device number 3 [ 365.092641][T17003] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 365.480114][T17018] lo speed is unknown, defaulting to 1000 [ 365.544682][T17027] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3937'. [ 365.587991][T17029] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3938'. [ 365.776239][T17051] netlink: 'syz.2.3940': attribute type 1 has an invalid length. [ 365.778454][T17051] netlink: 'syz.2.3940': attribute type 3 has an invalid length. [ 365.780587][T17051] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3940'. [ 365.784482][T17053] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3948'. [ 365.844807][ T5950] Bluetooth: hci1: command tx timeout [ 365.848255][T17057] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3950'. [ 365.898583][T17062] lo speed is unknown, defaulting to 1000 [ 366.214590][T14324] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 366.375900][T14324] usb 10-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 366.378680][T14324] usb 10-1: config 0 interface 0 has no altsetting 0 [ 366.382087][T14324] usb 10-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 366.387412][T14324] usb 10-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 366.389704][T14324] usb 10-1: Product: syz [ 366.390909][T14324] usb 10-1: Manufacturer: syz [ 366.392232][T14324] usb 10-1: SerialNumber: syz [ 366.394276][T14324] usb 10-1: config 0 descriptor?? [ 366.400026][T14324] usb 10-1: selecting invalid altsetting 0 [ 366.600688][T14324] usb 10-1: USB disconnect, device number 3 [ 366.981697][T17092] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3964'. [ 367.133953][T17105] lo speed is unknown, defaulting to 1000 [ 367.183712][T17109] netlink: 'syz.4.3968': attribute type 1 has an invalid length. [ 367.189195][T17109] netlink: 'syz.4.3968': attribute type 3 has an invalid length. [ 367.923823][ T5950] Bluetooth: hci1: command tx timeout [ 368.177394][T17130] netlink: 'syz.5.3979': attribute type 1 has an invalid length. [ 368.184823][T17130] 8021q: adding VLAN 0 to HW filter on device bond4 [ 368.199856][T17130] bond4: (slave syz_tun): making interface the new active one [ 368.202468][T17130] bond4: (slave syz_tun): Enslaving as an active interface with an up link [ 368.329798][ T1138] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 368.332023][ T1138] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 368.341400][T17149] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 368.371849][T17152] netlink: 'syz.6.3984': attribute type 1 has an invalid length. [ 368.379496][T17152] netlink: 'syz.6.3984': attribute type 3 has an invalid length. [ 368.381731][T17152] __nla_validate_parse: 3 callbacks suppressed [ 368.381739][T17152] netlink: 224 bytes leftover after parsing attributes in process `syz.6.3984'. [ 368.573787][ T6004] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 368.657185][T17152] bridge0: port 2(bridge_slave_1) entered disabled state [ 368.659428][T17152] bridge0: port 1(bridge_slave_0) entered disabled state [ 368.738172][ T6004] usb 10-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 368.741019][ T6004] usb 10-1: config 0 interface 0 has no altsetting 0 [ 368.747044][ T6004] usb 10-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 368.749816][ T6004] usb 10-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 368.752287][ T6004] usb 10-1: Product: syz [ 368.755666][ T6004] usb 10-1: Manufacturer: syz [ 368.757828][ T6004] usb 10-1: SerialNumber: syz [ 368.760660][ T6004] usb 10-1: config 0 descriptor?? [ 368.770289][ T6004] usb 10-1: selecting invalid altsetting 0 [ 368.787543][T17152] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 368.803162][T17152] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 368.892538][T17152] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.896684][T17152] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.900166][T17152] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.904148][T17152] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.966364][ T1323] usb 10-1: USB disconnect, device number 4 [ 369.196730][T17168] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3990'. [ 369.374680][T17182] lo speed is unknown, defaulting to 1000 [ 369.810956][T17206] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4006'. [ 369.925089][T17213] bond4: (slave syz_tun): Releasing active interface [ 370.060734][T17217] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4010'. [ 370.231052][T17229] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4015'. [ 370.297431][T17237] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4019'. [ 370.404258][T17242] lo speed is unknown, defaulting to 1000 [ 370.623547][T17252] netlink: 'syz.2.4023': attribute type 1 has an invalid length. [ 370.625838][T17252] netlink: 'syz.2.4023': attribute type 3 has an invalid length. [ 370.628116][T17252] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4023'. [ 370.688898][T17256] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4025'. [ 370.970967][T17273] lo speed is unknown, defaulting to 1000 [ 371.181327][T17283] netlink: 'syz.2.4035': attribute type 1 has an invalid length. [ 371.186623][T17283] netlink: 'syz.2.4035': attribute type 3 has an invalid length. [ 371.191870][T17283] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4035'. [ 371.479783][T17292] lo speed is unknown, defaulting to 1000 [ 371.644578][T17308] lo speed is unknown, defaulting to 1000 [ 372.404983][T17331] netlink: 'syz.6.4051': attribute type 1 has an invalid length. [ 372.410696][T17331] netlink: 'syz.6.4051': attribute type 3 has an invalid length. [ 372.412974][T17331] netlink: 224 bytes leftover after parsing attributes in process `syz.6.4051'. [ 372.600824][T17337] netlink: 'syz.4.4052': attribute type 1 has an invalid length. [ 372.608231][T17337] netlink: 'syz.4.4052': attribute type 3 has an invalid length. [ 372.780648][ T1079] wlan0: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID [ 372.791146][T17345] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 372.891252][ T6396] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 373.044785][ T6396] usb 10-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 373.047474][ T6396] usb 10-1: config 0 interface 0 has no altsetting 0 [ 373.050804][ T6396] usb 10-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 373.054028][ T6396] usb 10-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 373.056281][ T6396] usb 10-1: Product: syz [ 373.057483][ T6396] usb 10-1: Manufacturer: syz [ 373.058792][ T6396] usb 10-1: SerialNumber: syz [ 373.061371][ T6396] usb 10-1: config 0 descriptor?? [ 373.064334][ T6396] usb 10-1: selecting invalid altsetting 0 [ 373.342538][ T6396] usb 10-1: USB disconnect, device number 5 [ 374.090098][ T1079] wlan0: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID [ 374.095075][T17387] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 374.110003][T17388] netlink: 'syz.6.4066': attribute type 1 has an invalid length. [ 374.115418][T17388] netlink: 'syz.6.4066': attribute type 3 has an invalid length. [ 374.124703][T17388] __nla_validate_parse: 1 callbacks suppressed [ 374.124712][T17388] netlink: 224 bytes leftover after parsing attributes in process `syz.6.4066'. [ 374.333234][T17398] lo speed is unknown, defaulting to 1000 [ 374.598535][T17416] lo speed is unknown, defaulting to 1000 [ 374.652140][T17410] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4078'. [ 374.864154][T17438] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 374.981998][T17442] netlink: 224 bytes leftover after parsing attributes in process `syz.5.4088'. [ 375.495417][T17450] lo speed is unknown, defaulting to 1000 [ 375.549778][T17449] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4091'. [ 376.338513][ T1136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 376.341936][ T1136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 376.447108][T17476] validate_nla: 2 callbacks suppressed [ 376.447232][T17476] netlink: 'syz.4.4098': attribute type 1 has an invalid length. [ 376.453178][T17476] netlink: 'syz.4.4098': attribute type 3 has an invalid length. [ 376.456343][T17476] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4098'. [ 376.517214][T17478] lo speed is unknown, defaulting to 1000 [ 376.587245][T17474] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4101'. [ 377.019047][T17488] netlink: 'syz.5.4105': attribute type 1 has an invalid length. [ 377.028109][T17488] 8021q: adding VLAN 0 to HW filter on device bond5 [ 377.036226][T17488] bond5: (slave syz_tun): making interface the new active one [ 377.042074][T17488] bond5: (slave syz_tun): Enslaving as an active interface with an up link [ 377.311207][T17508] lo speed is unknown, defaulting to 1000 [ 377.430542][T17515] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 377.469008][ T6396] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 377.521676][T17516] netlink: 56 bytes leftover after parsing attributes in process `syz.6.4114'. [ 377.620130][ T6396] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 377.623459][ T6396] usb 7-1: config 0 interface 0 has no altsetting 0 [ 377.627312][ T6396] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 377.630981][ T6396] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 377.633756][ T6396] usb 7-1: Product: syz [ 377.635214][ T6396] usb 7-1: Manufacturer: syz [ 377.636807][ T6396] usb 7-1: SerialNumber: syz [ 377.640008][ T6396] usb 7-1: config 0 descriptor?? [ 377.644643][ T6396] usb 7-1: selecting invalid altsetting 0 [ 377.832473][ T1415] ieee802154 phy0 wpan0: encryption failed: -22 [ 377.834325][ T1415] ieee802154 phy1 wpan1: encryption failed: -22 [ 377.910570][T14324] usb 7-1: USB disconnect, device number 18 [ 378.231073][T17530] netlink: 'syz.5.4119': attribute type 1 has an invalid length. [ 378.233235][T17530] netlink: 'syz.5.4119': attribute type 3 has an invalid length. [ 378.235308][T17530] netlink: 224 bytes leftover after parsing attributes in process `syz.5.4119'. [ 378.631872][T17544] lo speed is unknown, defaulting to 1000 [ 378.801867][T17550] lo speed is unknown, defaulting to 1000 [ 379.176166][ T12] wlan0: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID [ 379.183388][T17566] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 379.222841][T17567] netlink: 56 bytes leftover after parsing attributes in process `syz.5.4129'. [ 380.162301][T17594] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4140'. [ 380.686276][T17603] netlink: 56 bytes leftover after parsing attributes in process `syz.2.4142'. [ 381.099191][T17615] netlink: 'syz.4.4146': attribute type 1 has an invalid length. [ 381.101363][T17615] netlink: 'syz.4.4146': attribute type 3 has an invalid length. [ 381.103501][T17615] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4146'. [ 381.593403][ T45] page: refcount:2 mapcount:0 mapping:0000000000000000 index:0xffff888052974000 pfn:0x52974 [ 381.596425][ T45] flags: 0x4fff00000010001(locked|reclaim|node=1|zone=1|lastcpupid=0x7ff) [ 381.599359][ T45] raw: 04fff00000010001 ffffc9000070f5b8 ffffc9000070f5b8 ffffffff8b9e2ae2 [ 381.602262][ T45] raw: ffff888052974000 0000000000000000 00000002ffffffff 0000000000000000 [ 381.605184][ T45] page dumped because: VM_BUG_ON_PAGE(!((__builtin_constant_p(PAGE_CLAIMED) && __builtin_constant_p((uintptr_t)(&page->private) != (uintptr_t)((void *)0)) && (uintptr_t)(&page->private) != (uintptr_t)((void *)0) && __builtin_constant_p(*(const unsigned long *)(&page->private))) ? const_test_bit(PAGE_CLAIMED, &page->private) : _test_bit(PAGE_CLAIMED, &page->private))) [ 381.617104][ T45] page_owner tracks the page as allocated [ 381.619464][ T45] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x12800(GFP_NOWAIT|__GFP_NORETRY), pid 115, tgid 115 (kswapd1), ts 380680263129, free_ts 378459402992 [ 381.625541][ T45] post_alloc_hook+0x181/0x1b0 [ 381.627835][ T45] get_page_from_freelist+0x10c4/0x34c0 [ 381.630018][ T45] __alloc_frozen_pages_noprof+0x223/0x24d0 [ 381.632340][ T45] alloc_pages_mpol+0x1fb/0x540 [ 381.633826][ T45] alloc_pages_noprof+0x131/0x390 [ 381.635210][ T45] z3fold_zpool_malloc+0x861/0x1510 [ 381.637558][ T45] zswap_store+0xf16/0x2660 [ 381.639462][ T45] swap_writepage+0x3bd/0x1170 [ 381.641358][ T45] pageout+0x3b0/0xa90 [ 381.642909][ T45] shrink_folio_list+0x2f4f/0x40a0 [ 381.644534][ T45] evict_folios+0x775/0x1a90 [ 381.646306][ T45] try_to_shrink_lruvec+0x5a3/0x990 [ 381.650562][ T45] shrink_one+0x3e3/0x7a0 [ 381.652264][ T45] shrink_node+0x26f6/0x3de0 [ 381.654006][ T45] balance_pgdat+0xbdb/0x1a30 [ 381.655795][ T45] kswapd+0x590/0xb90 [ 381.657515][ T45] page last free pid 12 tgid 12 stack trace: [ 381.659770][ T45] free_frozen_pages+0x6d8/0xf40 [ 381.662016][ T45] ringbuf_map_free+0xd7/0x130 [ 381.663639][ T45] bpf_map_free_deferred+0x1c7/0x410 [ 381.665603][ T45] process_one_work+0x9cc/0x1b70 [ 381.667984][ T45] worker_thread+0x6c8/0xf10 [ 381.669694][ T45] kthread+0x3c2/0x780 [ 381.671241][ T45] ret_from_fork+0x45/0x80 [ 381.672984][ T45] ret_from_fork_asm+0x1a/0x30 [ 381.674957][ T45] ------------[ cut here ]------------ [ 381.677265][ T45] kernel BUG at mm/z3fold.c:1293! [ 381.685620][ T45] Oops: invalid opcode: 0000 [#1] SMP KASAN NOPTI [ 381.688006][ T45] CPU: 2 UID: 0 PID: 45 Comm: kcompactd1 Not tainted 6.14.0-syzkaller-07318-g4fa118e5b79f #0 PREEMPT(full) [ 381.692048][ T45] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 381.695963][ T45] RIP: 0010:z3fold_page_migrate+0xc6b/0x13b0 [ 381.698191][ T45] Code: 91 92 ff 48 c7 c6 a0 22 9e 8b 48 89 ef e8 7d 70 d9 ff 90 0f 0b e8 55 91 92 ff 48 c7 c6 00 23 9e 8b 48 89 ef e8 66 70 d9 ff 90 <0f> 0b e8 3e 91 92 ff 48 8d bb a0 00 00 00 48 b8 00 00 00 00 00 fc [ 381.704639][ T45] RSP: 0018:ffffc9000070f430 EFLAGS: 00010293 [ 381.706927][ T45] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 381.709231][ T45] RDX: ffff888040e84880 RSI: ffffffff8228b16a RDI: ffff888040e84cc4 [ 381.711718][ T45] RBP: ffffea00014a5d00 R08: 0000000000000001 R09: 0000000000000001 [ 381.714547][ T45] R10: ffffffff9083f517 R11: 0000000000000000 R12: ffffea0001e31300 [ 381.717393][ T45] R13: ffffea00014a5d28 R14: 0000000000000001 R15: ffffea00014a5d18 [ 381.720355][ T45] FS: 0000000000000000(0000) GS:ffff888097a20000(0000) knlGS:0000000000000000 [ 381.723282][ T45] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 381.725471][ T45] CR2: 000055870e366000 CR3: 000000004a04a000 CR4: 0000000000352ef0 SYZFAIL: failed to recv rpc [ 381.727663][ T45] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 381.730100][ T45] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 381.732715][ T45] Call Trace: [ 381.733676][ T45] [ 381.734502][ T45] ? die+0x31/0x80 [ 381.735557][ T45] ? do_trap+0x232/0x430 [ 381.736742][ T45] ? z3fold_page_migrate+0xc6b/0x13b0 [ 381.738324][ T45] ? do_error_trap+0xf8/0x240 [ 381.739659][ T45] ? z3fold_page_migrate+0xc6b/0x13b0 [ 381.741152][ T45] ? z3fold_page_migrate+0xc6b/0x13b0 fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 381.742911][ T45] ? handle_invalid_op+0x34/0x40 [ 381.744324][ T45] ? z3fold_page_migrate+0xc6b/0x13b0 [ 381.745789][ T45] ? exc_invalid_op+0x2e/0x50 [ 381.747096][ T45] ? asm_exc_invalid_op+0x1a/0x20 [ 381.748461][ T45] ? z3fold_page_migrate+0xc6a/0x13b0 [ 381.749942][ T45] ? z3fold_page_migrate+0xc6b/0x13b0 [ 381.751437][ T45] ? page_ext_put+0x3e/0xd0 [ 381.752709][ T45] move_to_new_folio+0x449/0x700 [ 381.754075][ T45] migrate_pages_batch+0x201d/0x31a0 [ 381.755530][ T45] ? __pfx_compaction_free+0x10/0x10 [ 381.756979][ T45] ? __pfx_migrate_pages_batch+0x10/0x10 [ 381.758536][ T45] migrate_pages_sync+0x4c5/0x8a0 [ 381.759931][ T45] ? __pfx_compaction_alloc+0x10/0x10 [ 381.761397][ T45] ? __pfx_compaction_free+0x10/0x10 [ 381.762844][ T45] ? __pfx_migrate_pages_sync+0x10/0x10 [ 381.764357][ T45] ? find_held_lock+0x2b/0x80 [ 381.766143][ T45] ? isolate_movable_page+0x111/0x750 [ 381.768200][ T45] migrate_pages+0x1b28/0x2350 [ 381.770103][ T45] ? __pfx_compaction_alloc+0x10/0x10 [ 381.772168][ T45] ? __pfx_compaction_free+0x10/0x10 [ 381.774239][ T45] ? __pfx_migrate_pages+0x10/0x10 [ 381.776073][ T45] ? __pfx_isolate_migratepages_block+0x10/0x10 [ 381.778050][ T45] compact_zone+0x1f6d/0x4220 [ 381.779873][ T45] ? __lock_acquire+0xaa4/0x1ba0 [ 381.781802][ T45] ? __pfx_compact_zone+0x10/0x10 [ 381.783214][ T45] compact_node+0x1a4/0x2d0 [ 381.784983][ T45] ? __pfx_compact_node+0x10/0x10 [ 381.786929][ T45] ? __pfx___might_resched+0x10/0x10 [ 381.789032][ T45] ? __pfx_extfrag_for_order+0x10/0x10 [ 381.790957][ T45] ? rcu_is_watching+0x12/0xc0 [ 381.792704][ T45] kcompactd+0x762/0xea0 [ 381.794164][ T45] ? __pfx_kcompactd+0x10/0x10 [ 381.795798][ T45] ? find_held_lock+0x2b/0x80 [ 381.797180][ T45] ? __pfx_autoremove_wake_function+0x10/0x10 [ 381.798866][ T45] ? lockdep_hardirqs_on+0x7c/0x110 [ 381.800466][ T45] ? __kthread_parkme+0x19e/0x250 [ 381.801864][ T45] ? __pfx_kcompactd+0x10/0x10 [ 381.803198][ T45] kthread+0x3c2/0x780 [ 381.804325][ T45] ? __pfx_kthread+0x10/0x10 [ 381.805710][ T45] ? __pfx_kthread+0x10/0x10 [ 381.806999][ T45] ? __pfx_kthread+0x10/0x10 [ 381.808235][ T45] ? __pfx_kthread+0x10/0x10 [ 381.809479][ T45] ? rcu_is_watching+0x12/0xc0 [ 381.810812][ T45] ? __pfx_kthread+0x10/0x10 [ 381.812070][ T45] ret_from_fork+0x45/0x80 [ 381.813275][ T45] ? __pfx_kthread+0x10/0x10 [ 381.814544][ T45] ret_from_fork_asm+0x1a/0x30 [ 381.815860][ T45] [ 381.816694][ T45] Modules linked in: [ 381.817806][ T1323] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 381.818101][ T45] ---[ end trace 0000000000000000 ]--- [ 381.821855][ T45] RIP: 0010:z3fold_page_migrate+0xc6b/0x13b0 [ 381.824125][ T45] Code: 91 92 ff 48 c7 c6 a0 22 9e 8b 48 89 ef e8 7d 70 d9 ff 90 0f 0b e8 55 91 92 ff 48 c7 c6 00 23 9e 8b 48 89 ef e8 66 70 d9 ff 90 <0f> 0b e8 3e 91 92 ff 48 8d bb a0 00 00 00 48 b8 00 00 00 00 00 fc [ 381.832229][ T45] RSP: 0018:ffffc9000070f430 EFLAGS: 00010293 [ 381.834296][ T45] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 381.836598][ T45] RDX: ffff888040e84880 RSI: ffffffff8228b16a RDI: ffff888040e84cc4 [ 381.839459][ T45] RBP: ffffea00014a5d00 R08: 0000000000000001 R09: 0000000000000001 [ 381.847624][ T45] R10: ffffffff9083f517 R11: 0000000000000000 R12: ffffea0001e31300 [ 381.850835][ T45] R13: ffffea00014a5d28 R14: 0000000000000001 R15: ffffea00014a5d18 [ 381.853370][ T45] FS: 0000000000000000(0000) GS:ffff888097b20000(0000) knlGS:0000000000000000 [ 381.855948][ T45] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 381.859315][ T45] CR2: 000000005677a4ac CR3: 0000000064258000 CR4: 0000000000352ef0 [ 381.862421][ T45] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 381.865524][ T45] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 381.869201][ T45] Kernel panic - not syncing: Fatal exception [ 381.871813][ T45] Kernel Offset: disabled [ 381.873029][ T45] Rebooting in 86400 seconds.. VM DIAGNOSIS: 12:31:25 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000002 RBX=ffff88804d359b82 RCX=ffffffff8b62d138 RDX=ffff888063ad4880 RSI=000000000000003f RDI=0000000000000001 RBP=ffffc90003b0f7b0 RSP=ffffc90003b0f558 R8 =0000000000000001 R9 =000000000000003f R10=0000000000000006 R11=0000000000000000 R12=0000000000000650 R13=ffff88804d359b80 R14=0000000000000006 R15=ffffffff81f0fe20 RIP=ffffffff81bb3c62 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888097820000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000000c31669b CR3=000000005bb30000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000000 RBX=0000000000000000 RCX=ffffffff81a90336 RDX=ffff88801da9a440 RSI=ffffffff81a90343 RDI=0000000000000001 RBP=00000000000126f6 RSP=ffffc9000046fd78 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000000 R12=ffff88802b328220 R13=dffffc0000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff81bb42f1 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888097920000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000056fc74a8 CR3=0000000052a3e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=0000000000000000 RCX=ffffffff84cfab56 RDX=ffff888021c84880 RSI=0000000000000000 RDI=0000000000000005 RBP=0000000000000020 RSP=ffffc900030171d0 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000000 R12=1ffff92000602e3b R13=ffffc90003017400 R14=ffffc900030173e0 R15=dffffc0000000000 RIP=ffffffff84cfab56 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007fdfc04b7d00 ffffffff 00c00000 GS =0000 ffff888097a20000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000055870e363000 CR3=000000004a04a000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008082082 Opmask01=0000000000000000 Opmask02=00000000dfff7fff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 554245440045534f 4252455600524f52 5245004c41544146 0054454955510029 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 554245440045534f 4252455600524f52 5245004c41544146 005445495551000c ZMM20=0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 ZMM21=343be602343be602 343be602343be602 343be602343be602 343be602343be602 343be602343be602 343be602343be602 343be602343be602 343be602343be602 ZMM22=d79a7329d79a7329 d79a7329d79a7329 d79a7329d79a7329 d79a7329d79a7329 d79a7329d79a7329 d79a7329d79a7329 d79a7329d79a7329 d79a7329d79a7329 ZMM23=4bb9bf664bb9bf66 4bb9bf664bb9bf66 4bb9bf664bb9bf66 4bb9bf664bb9bf66 4bb9bf664bb9bf66 4bb9bf664bb9bf66 4bb9bf664bb9bf66 4bb9bf664bb9bf66 ZMM24=4066d4394066d439 4066d4394066d439 4066d4394066d439 4066d4394066d439 4066d4394066d439 4066d4394066d439 4066d4394066d439 4066d4394066d439 ZMM25=e263319ce263319c e263319ce263319c e263319ce263319c e263319ce263319c e263319ce263319c e263319ce263319c e263319ce263319c e263319ce263319c ZMM26=b25f1cc1b25f1cc1 b25f1cc1b25f1cc1 b25f1cc1b25f1cc1 b25f1cc1b25f1cc1 b25f1cc1b25f1cc1 b25f1cc1b25f1cc1 b25f1cc1b25f1cc1 b25f1cc1b25f1cc1 ZMM27=0d8f5bdc0d8f5bdc 0d8f5bdc0d8f5bdc 0d8f5bdc0d8f5bdc 0d8f5bdc0d8f5bdc 0d8f5bdc0d8f5bdc 0d8f5bdc0d8f5bdc 0d8f5bdc0d8f5bdc 0d8f5bdc0d8f5bdc ZMM28=000000100000000f 0000000e0000000d 0000000c0000000b 0000000a00000009 0000000800000007 0000000600000005 0000000400000003 0000000200000001 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=e4150000e4150000 e4150000e4150000 e4150000e4150000 e4150000e4150000 e4150000e4150000 e4150000e4150000 e4150000e4150000 e4150000e4150000 info registers vcpu 3 CPU#3 RAX=0000000000000002 RBX=ffffc9000396fb90 RCX=ffffffff84c82290 RDX=ffff888058b64880 RSI=0000000000000000 RDI=0000000000000005 RBP=0000000000000000 RSP=ffffc9000396f9b0 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000000 R12=ffffc9000396fb98 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff81bb3c62 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888097b20000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f73d6188 CR3=0000000052a3e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000300001 Opmask01=0000000000040000 Opmask02=00000000ffffffff Opmask03=0000000000000000 Opmask04=00000000ffff7fff Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff17ba5070 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6565656565656565 6565656565656565 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ff00ff0000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ffffffffffff0000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ff00ff0000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 74636120426b343a 6e6f00002e6b6365 686320657361656c 70202c6e6f697400 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7463612042613430 6465000024616365 6263206573616566 7020266465637400 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3426202c31362e31 38332020453e313c 002929295f746165 695f203a20296561 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3426202631362d31 382020202023233c 00292929435f3427 4150203020222320 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 796f7e557e796465 692a352a2323236f 7e6b7c63787a3427 6f6d6b7a2c222320 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7a2c2a264e4f4743 4b4649554f4d4b5a 227e6368557e796f 7e552a302a236f7e ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000