last executing test programs: 5m18.307025885s ago: executing program 2 (id=731): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x10, &(0x7f0000000ac0)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x18, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000000c0)=[{0x5, 0x2, 0x17, 0x7}, {0x10000005, 0x5, 0x0, 0x7}], 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x3, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) sendmsg$key(r0, &(0x7f00000007c0)={0x400000000000000, 0x0, 0x0}, 0x20004808) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) r4 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r4, 0x10e, 0xb, &(0x7f0000000000)=0x5, 0x4) sendmsg$NL80211_CMD_AUTHENTICATE(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)={0x20, 0x0, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc, 0x117}}}}, 0x20}}, 0x0) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x3, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x76) mkdirat(0xffffffffffffffff, 0xfffffffffffffffe, 0x5) mount(&(0x7f00000002c0)=@nullb, &(0x7f0000000380)='./file0\x00', &(0x7f0000000240)='ext3\x00', 0x808000, 0x0) 5m17.352092085s ago: executing program 2 (id=735): r0 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000000)=@newtaction={0x18, 0x30, 0x53b, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) sendmmsg(r0, &(0x7f0000000040), 0x0, 0x48000) 5m17.214273705s ago: executing program 2 (id=736): set_mempolicy(0x6, &(0x7f0000000980)=0x3, 0x6) syz_clone(0x2052580, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000240)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) epoll_create(0x400) eventfd(0x0) r1 = syz_open_procfs(0x0, 0x0) pread64(r1, &(0x7f0000000300)=""/246, 0xf6, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) syz_init_net_socket$rose(0xb, 0x5, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) setrlimit(0x1, &(0x7f00000002c0)={0x6, 0x103}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a1400000011"], 0x64}}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x2, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r1, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x80000000, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x18000000000002a0, 0x15, 0x0, &(0x7f0000000040)="b90103600040f000009e0ff008001fffffe1000040", 0x0, 0x104, 0x6000000000000000, 0x0, 0x0, &(0x7f0000000400)}, 0x4c) keyctl$dh_compute(0x17, &(0x7f0000000200)={r3, r3, r3}, &(0x7f0000000040)=""/217, 0xd9, &(0x7f00000001c0)={&(0x7f0000000140)={'sha384-avx\x00'}}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 5m16.172303909s ago: executing program 2 (id=747): r0 = socket$inet6(0xa, 0x806, 0x0) sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0x3c}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003a00)=[{{0x0, 0x0, &(0x7f0000001b80)=[{0x0}, {&(0x7f0000001840)=""/172, 0xac}], 0x2}}, {{0x0, 0x0, &(0x7f0000003280)}, 0x101}], 0x2, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000030000000000000000000000850000001900000095"], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) listen(r0, 0xffffffff) r1 = socket$inet_dccp(0x2, 0x6, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r2 = add_key$user(&(0x7f00000003c0), 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000200)={r2, r2, r2}, 0x0, 0x0, 0x0) mkdir(0x0, 0x200) openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x59) rename(&(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x102) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1e}}, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r3}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8b20, &(0x7f0000000040)={'wlan1\x00', @random="8d08ae394948"}) r5 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg(r5, &(0x7f0000001500), 0x588, 0x3000000) 5m15.233237648s ago: executing program 2 (id=751): unshare(0x2000000) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x88, 0x30, 0x1, 0x0, 0x0, {}, [{0x74, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x804}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$VIDIOC_G_FMT(0xffffffffffffffff, 0xc0d05604, &(0x7f0000000480)={0x6, @pix_mp={0x3, 0x6, 0x41416770, 0x2, 0xc, [{0x5, 0x5}, {0x3, 0x6}, {0x8, 0x40}, {0x5a36, 0x8}, {0x81, 0x2}, {0x9, 0x8}, {0x2d6a3, 0x400}, {0x1, 0x2}], 0xa, 0x2, 0x3, 0x1, 0x1}}) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000003700010324bd7002fcdbdf2508"], 0x14}}, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000640)=[0x0, 0x0], 0x2}) r4 = socket(0x10, 0x803, 0x0) socket(0x200000100000011, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {}, [@IFA_LOCAL={0x14, 0x2, @local}, @IFA_FLAGS={0x8, 0x8, 0x690}]}, 0x34}}, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x22002, 0x0) 5m14.982651822s ago: executing program 2 (id=753): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x8c, 0x30, 0x800, 0x70bd2c, 0x0, {}, [{0x78, 0x1, [@m_ct={0x2c, 0xa, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0xc, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x8}}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x804}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000008c0)=@security={'security\x00', 0x44, 0x4, 0x4d4, 0xffffffff, 0x0, 0x344, 0x0, 0xffffffff, 0xffffffff, 0x40c, 0x40c, 0x40c, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@private0, @mcast1, [0x0, 0x0, 0xffffffff], [0x0, 0x0, 0x0, 0xff], 'nr0\x00', 'veth0_vlan\x00', {}, {}, 0x2f}, 0x203, 0xa4, 0xec, 0x8502}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@dev={0xfe, 0x80, '\x00', 0x36}, '\x00', {0x7ff}}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @private2={0xfc, 0x2, '\x00', 0x1}, [0xffffff00, 0xff000000, 0xff, 0xff000000], [0xff000000, 0xff, 0xff, 0xff], 'dvmrp1\x00', 'dummy0\x00', {}, {}, 0x6c, 0x80, 0x4, 0x2c}, 0x0, 0x130, 0x258, 0x0, {}, [@common=@srh1={{0x8c}, {0x29, 0x0, 0x3, 0x9, 0x7, @ipv4={'\x00', '\xff\xff', @loopback}, @private0={0xfc, 0x0, '\x00', 0x1}, @private0, [0xff, 0xff, 0xffffff00, 0xffffffff], [0x0, 0xffffff00, 0xff, 0xff], [0xff000000, 0xff000000, 0xffffffff, 0xffffff00], 0x10}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:modem_device_t:s0\x00'}}}, {{@uncond, 0x0, 0xa4, 0xc8}, @common=@unspec=@AUDIT={0x24}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x530) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$l2tp6(0xa, 0x2, 0x73) socket$inet6_sctp(0xa, 0x5, 0x84) r4 = syz_io_uring_setup(0x117, &(0x7f0000000100), &(0x7f0000000280)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x7, 0x1, 0x0, 0x0, 0xc, 0x0, {0x0, r7}}) io_uring_enter(r4, 0x47f6, 0x0, 0x0, 0x0, 0x0) syz_open_dev$video4linux(&(0x7f0000000000), 0x3, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r9 = socket(0x1d, 0x2, 0x6) mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r9, @ANYBLOB=',wfdno=', @ANYRESHEX=r8]) mount(0x0, 0x0, &(0x7f0000000040)='hfs\x00', 0x8200, 0x0) r10 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r10, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2={0xff, 0x3}, 0x0, 0x0, 0xfffffffe, 0xffffffff}}) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000000)={{{@in6=@local, @in=@private=0xa010102, 0x4e21, 0x0, 0x4e21, 0x81, 0xa, 0x20, 0xa0, 0x8}, {0x3, 0x7, 0xa, 0x7fff, 0xfffffffffffffff9, 0x7, 0x5a, 0x5}, {0x6, 0x1, 0x1, 0x5}, 0xd, 0x0, 0x51bd808320f434c2, 0x1, 0x1, 0x1}, {{@in=@local, 0x4d5, 0x3c}, 0xa, @in=@remote, 0x34ff, 0x2, 0x3, 0x10, 0x1000, 0xcd}}, 0xe4) 4m59.961368317s ago: executing program 32 (id=753): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x8c, 0x30, 0x800, 0x70bd2c, 0x0, {}, [{0x78, 0x1, [@m_ct={0x2c, 0xa, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0xc, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x8}}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x804}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000008c0)=@security={'security\x00', 0x44, 0x4, 0x4d4, 0xffffffff, 0x0, 0x344, 0x0, 0xffffffff, 0xffffffff, 0x40c, 0x40c, 0x40c, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@private0, @mcast1, [0x0, 0x0, 0xffffffff], [0x0, 0x0, 0x0, 0xff], 'nr0\x00', 'veth0_vlan\x00', {}, {}, 0x2f}, 0x203, 0xa4, 0xec, 0x8502}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@dev={0xfe, 0x80, '\x00', 0x36}, '\x00', {0x7ff}}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @private2={0xfc, 0x2, '\x00', 0x1}, [0xffffff00, 0xff000000, 0xff, 0xff000000], [0xff000000, 0xff, 0xff, 0xff], 'dvmrp1\x00', 'dummy0\x00', {}, {}, 0x6c, 0x80, 0x4, 0x2c}, 0x0, 0x130, 0x258, 0x0, {}, [@common=@srh1={{0x8c}, {0x29, 0x0, 0x3, 0x9, 0x7, @ipv4={'\x00', '\xff\xff', @loopback}, @private0={0xfc, 0x0, '\x00', 0x1}, @private0, [0xff, 0xff, 0xffffff00, 0xffffffff], [0x0, 0xffffff00, 0xff, 0xff], [0xff000000, 0xff000000, 0xffffffff, 0xffffff00], 0x10}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:modem_device_t:s0\x00'}}}, {{@uncond, 0x0, 0xa4, 0xc8}, @common=@unspec=@AUDIT={0x24}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x530) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$l2tp6(0xa, 0x2, 0x73) socket$inet6_sctp(0xa, 0x5, 0x84) r4 = syz_io_uring_setup(0x117, &(0x7f0000000100), &(0x7f0000000280)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x7, 0x1, 0x0, 0x0, 0xc, 0x0, {0x0, r7}}) io_uring_enter(r4, 0x47f6, 0x0, 0x0, 0x0, 0x0) syz_open_dev$video4linux(&(0x7f0000000000), 0x3, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r9 = socket(0x1d, 0x2, 0x6) mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r9, @ANYBLOB=',wfdno=', @ANYRESHEX=r8]) mount(0x0, 0x0, &(0x7f0000000040)='hfs\x00', 0x8200, 0x0) r10 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r10, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2={0xff, 0x3}, 0x0, 0x0, 0xfffffffe, 0xffffffff}}) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000000)={{{@in6=@local, @in=@private=0xa010102, 0x4e21, 0x0, 0x4e21, 0x81, 0xa, 0x20, 0xa0, 0x8}, {0x3, 0x7, 0xa, 0x7fff, 0xfffffffffffffff9, 0x7, 0x5a, 0x5}, {0x6, 0x1, 0x1, 0x5}, 0xd, 0x0, 0x51bd808320f434c2, 0x1, 0x1, 0x1}, {{@in=@local, 0x4d5, 0x3c}, 0xa, @in=@remote, 0x34ff, 0x2, 0x3, 0x10, 0x1000, 0xcd}}, 0xe4) 3m29.401556567s ago: executing program 0 (id=1438): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f00000040c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={r0, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0}}, 0x8) 3m29.40143913s ago: executing program 0 (id=1439): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000280)={[0x730, 0x7, 0x1, 0x5, 0x7, 0x4, 0x7fffffffffffffff, 0x2, 0x5, 0x6, 0x401, 0x4f, 0xb, 0x1, 0xa], 0x8000000, 0x100}) 3m29.252034346s ago: executing program 0 (id=1440): r0 = socket$inet6(0xa, 0x2, 0x3a) sendto$inet6(r0, &(0x7f0000000000)="800037bbfa9ba1ce", 0x8, 0x0, &(0x7f0000001100)={0xa, 0x0, 0x0, @loopback={0xff00}}, 0x1c) 3m29.251816174s ago: executing program 0 (id=1441): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='\x00', 0x1101) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='\x00', 0x1101) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x30) 3m29.181957825s ago: executing program 0 (id=1442): r0 = userfaultfd(0x80001) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000018c0)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r3}, &(0x7f0000000000), &(0x7f0000000080)=r1}, 0x20) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 3m28.961393703s ago: executing program 0 (id=1443): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f00000003c0)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x0, 0x2}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) 3m28.947262099s ago: executing program 33 (id=1443): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f00000003c0)={0x1f, 0x4, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x0, 0x2}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) 2m14.141341377s ago: executing program 5 (id=2211): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000002d0000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x7, 0x4, 0x20, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_GET_MAP_INFO(0x4, &(0x7f0000000140)={r3, 0x58, &(0x7f0000000200)}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x1d8}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@mpls_delroute={0xa0, 0x19, 0x1, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_NEWDST={0x84, 0x12}]}, 0xa0}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='tlb_flush\x00', r2}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r6 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') r7 = syz_io_uring_setup(0xb, &(0x7f0000000080)={0x0, 0x4685, 0x40, 0xfffffffe, 0x340}, &(0x7f0000002500), &(0x7f0000002540)) io_uring_register$IORING_UNREGISTER_EVENTFD(r7, 0x5, 0x1000000, 0x0) writev(r6, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) sendmsg$IEEE802154_LLSEC_LIST_DEV(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x701, 0x0, 0x0, {0x26}}, 0x14}}, 0x0) r8 = gettid() timer_create(0x0, &(0x7f0000000200)={0x0, 0x11, 0x4, @tid=r8}, &(0x7f0000000100)) sched_setaffinity(r8, 0x8, &(0x7f0000000280)=0x54) 2m14.021975664s ago: executing program 5 (id=2212): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x18, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fdffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c0000000200"/31], 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"/441], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0xf5010000, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x6d) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x40189429, &(0x7f0000000180)={0x1, 0x5, 0x6}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000280)={r2, 0xffffffffffffff37, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x57, 0x0, 0x0, 0x10, &(0x7f0000001a00), 0x0, 0x0, 0x16, 0x8, 0x0, 0x0}}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="5000000010003b1500"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128008000100677470001c0002800500060000000000050005000000000008000300c70b000008000a00", @ANYRES32], 0x50}}, 0x0) 2m13.451339709s ago: executing program 5 (id=2216): r0 = request_key(&(0x7f0000000040)='pkcs7_test\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f00000000c0)='^[)*^+\x00', 0xfffffffffffffffb) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$unlink(0x9, r0, r1) timerfd_create(0x9, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0xfffffffc, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x27) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000040)={r4, 0x8}, 0xc) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, &(0x7f0000000180)={r4, 0x400, 0x10}, 0x8) r5 = socket(0x18, 0x1, 0x0) write(r5, &(0x7f0000000000)="240000001e005f80004000000000000002000000000000000000080008000100000000ff", 0x24) 2m13.451014621s ago: executing program 5 (id=2217): set_mempolicy(0x6, &(0x7f0000000980)=0x3, 0x6) syz_clone(0x2052580, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) epoll_create(0x400) eventfd(0x0) r1 = syz_open_procfs(0x0, 0x0) pread64(r1, &(0x7f0000000300)=""/246, 0xf6, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) syz_init_net_socket$rose(0xb, 0x5, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) setrlimit(0x1, &(0x7f00000002c0)={0x6, 0x103}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a1400000011"], 0x64}}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x2, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r1, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x80000000, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x18000000000002a0, 0x15, 0x0, &(0x7f0000000040)="b90103600040f000009e0ff008001fffffe1000040", 0x0, 0x104, 0x6000000000000000, 0x0, 0x0, &(0x7f0000000400)}, 0x4c) keyctl$dh_compute(0x17, &(0x7f0000000200)={r4, r4, r4}, &(0x7f0000000040)=""/217, 0xd9, &(0x7f00000001c0)={&(0x7f0000000140)={'sha384-avx\x00'}}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 2m12.521519005s ago: executing program 5 (id=2221): mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') read(0xffffffffffffffff, &(0x7f0000000240)=""/182, 0xb6) r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) 2m12.5211548s ago: executing program 5 (id=2222): prctl$PR_TASK_PERF_EVENTS_ENABLE(0x120) socket(0x1e, 0x1, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x11, 0x3, 0x10) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000000), 0x0) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmmsg$alg(r5, &(0x7f0000004140)=[{0x8dffffff, 0x0, 0x0}], 0x1, 0x0) r6 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x2c, &(0x7f0000000300)={0x0, 0x1, 0x3}) mq_timedsend(r6, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r6, 0x0, 0x0, 0x0, 0x0) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000040)={0x0, 0x1, 0xd, 0x2, 0x3}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYRES32=r7, @ANYRES32=r7, @ANYRESHEX=r7, @ANYBLOB="3be18e5c3344056710255549fb53585e0b940c3ba261878eae22cf96163e45b1085cd1fa8524c314d09c5e4bfa00994a3e79d28cf0ddc6ed8b9dfdaa6d67a2983d4825385896f570c4900098fd7c37ce9183432b4b7033c61fb8a327481be1fa3ce032d25489e113fe2db1845149995ee2327230d1491c7fa4df61b07f8af61f1f6c7bbe18b6a78bc72ef363cd5816886c83f651a54cdc64bb65d4d858ddcbeef0b314bafea0aafff33e47f621d991a9", @ANYRES32=r7, @ANYRES32=r7, @ANYRESDEC=r7, @ANYRES8=r7], 0x24}, 0x1, 0x0, 0x0, 0x20040040}, 0x800) 1m57.210842725s ago: executing program 34 (id=2222): prctl$PR_TASK_PERF_EVENTS_ENABLE(0x120) socket(0x1e, 0x1, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x11, 0x3, 0x10) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000000), 0x0) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmmsg$alg(r5, &(0x7f0000004140)=[{0x8dffffff, 0x0, 0x0}], 0x1, 0x0) r6 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x2c, &(0x7f0000000300)={0x0, 0x1, 0x3}) mq_timedsend(r6, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r6, 0x0, 0x0, 0x0, 0x0) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000040)={0x0, 0x1, 0xd, 0x2, 0x3}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYRES32=r7, @ANYRES32=r7, @ANYRESHEX=r7, @ANYBLOB="3be18e5c3344056710255549fb53585e0b940c3ba261878eae22cf96163e45b1085cd1fa8524c314d09c5e4bfa00994a3e79d28cf0ddc6ed8b9dfdaa6d67a2983d4825385896f570c4900098fd7c37ce9183432b4b7033c61fb8a327481be1fa3ce032d25489e113fe2db1845149995ee2327230d1491c7fa4df61b07f8af61f1f6c7bbe18b6a78bc72ef363cd5816886c83f651a54cdc64bb65d4d858ddcbeef0b314bafea0aafff33e47f621d991a9", @ANYRES32=r7, @ANYRES32=r7, @ANYRESDEC=r7, @ANYRES8=r7], 0x24}, 0x1, 0x0, 0x0, 0x20040040}, 0x800) 1m10.360338615s ago: executing program 6 (id=2615): r0 = socket$xdp(0x2c, 0x3, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000100)={&(0x7f000029a000/0x3000)=nil, &(0x7f00003fe000/0x3000)=nil, &(0x7f0000101000/0x1000)=nil, &(0x7f0000b15000/0x8000)=nil, &(0x7f0000541000/0x1000)=nil, &(0x7f0000995000/0x4000)=nil, &(0x7f00003cf000/0x3000)=nil, &(0x7f00001ee000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00008dd000/0x3000)=nil, &(0x7f0000187000/0x1000)=nil, &(0x7f0000000080)="b94daf6489f834c408b8b232bc596389ba1daeae78e41a001eba3549cd92622556cd6412181da23fc39cceb592aa9d0cd7c1f195fb831a7c873f1b081dbe472b7f74ee2b89fa29f9f00c0cfdad56cdd0545701e7178b5f06e5b49afe2ea26e9ada9ffcee5f95", 0x66, r0}, 0x64) r1 = socket(0x1e, 0x1, 0x0) r2 = dup(r1) r3 = socket(0x1e, 0x1, 0x0) listen(r3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000440)={{{@in=@multicast2, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@mcast1}}, &(0x7f0000000340)=0xe4) statx(r2, &(0x7f0000000380)='./file0\x00', 0x4100, 0x10, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000300), 0x0, &(0x7f0000000640)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id', 0x3d, 0xee00}, 0x2c, {'group_id', 0x3d, 0xee01}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x800}}, {@max_read={'max_read', 0x3d, 0xa4f1}}], [{@mask={'mask', 0x3d, '^MAY_READ'}}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@uid_gt={'uid>', r4}}, {@flag='sync'}, {@smackfstransmute={'smackfstransmute', 0x3d, '9p\x00'}}, {@euid_gt={'euid>', r5}}, {@defcontext={'defcontext', 0x3d, 'root'}}, {@fsname={'fsname', 0x3d, 'rfdno'}}, {@appraise_type}, {@smackfstransmute}]}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10010, r1, 0x0) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19) r6 = socket$inet6(0xa, 0x3, 0x75) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@remote, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, {0xfffffffffffffffd, 0xeca, 0x0, 0x9, 0x0, 0x0, 0x0, 0xffff}}, {{@in6=@mcast2, 0x4d6, 0x6c}, 0x0, @in=@multicast1}}, 0xe8) close(r6) ioctl$VT_OPENQRY(0xffffffffffffffff, 0x5600, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) move_pages(0x0, 0x1, &(0x7f0000000040)=[&(0x7f0000ff9000/0x2000)=nil], &(0x7f0000001180), &(0x7f0000000000), 0x0) 1m10.280854773s ago: executing program 6 (id=2616): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x10, &(0x7f0000000ac0)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x18, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000000c0)=[{0x5, 0x2, 0x17, 0x7}, {0x10000005, 0x5, 0x0, 0x7}], 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x3, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) sendmsg$key(r0, &(0x7f00000007c0)={0x400000000000000, 0x0, 0x0}, 0x20004808) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) r4 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r4, 0x10e, 0xb, &(0x7f0000000000)=0x5, 0x4) r5 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_AUTHENTICATE(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)={0x20, r5, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc, 0x117}}}}, 0x20}}, 0x0) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x3, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x76) mkdirat(0xffffffffffffffff, 0xfffffffffffffffe, 0x5) mount(&(0x7f00000002c0)=@nullb, &(0x7f0000000380)='./file0\x00', &(0x7f0000000240)='ext3\x00', 0x808000, 0x0) 1m9.379019999s ago: executing program 6 (id=2619): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000600)=ANY=[@ANYBLOB="580100002600f3a200"/20, @ANYBLOB="0000000000004c681d980000640012800b000100697036746e6c000054000280060011004e2000001400030000000000000000000000ffff64010102060012004e20000014000200ff020000000000000000000000000001080007000600000006000f0002000000060012004e200000080005"], 0x158}}, 0x0) r2 = socket(0x1, 0x3, 0xfffffffd) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, 0x0, 0x0) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newaddr={0x48, 0x14, 0x509, 0x0, 0x25dfdbfd, {0x2, 0x1f, 0x0, 0xcb, r6}, [@IFA_ADDRESS={0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x41}}, @IFA_LOCAL={0x8, 0x2, @broadcast}, @IFA_RT_PRIORITY={0x8, 0x9, 0x6}, @IFA_RT_PRIORITY={0x8, 0x9, 0x10000009}, @IFA_ADDRESS={0x8, 0x1, @empty}, @IFA_RT_PRIORITY={0x8, 0x9, 0x103}]}, 0x48}}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) ioctl$TUNSETNOCSUM(r7, 0xc0189436, 0x1ffffffe) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0x70}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f00000001c0)={'syztnl0\x00', 0x0, 0x4, 0x6, 0x9a, 0xb9, 0x6, @loopback, @private0={0xfc, 0x0, '\x00', 0x1}, 0x700, 0x10, 0x0, 0x2}}) (async) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=@mpls_delroute={0x1c, 0x18, 0x9, 0xfffffffc, 0x0, {0x1c, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x1c}}, 0x20000084) 1m9.378835244s ago: executing program 6 (id=2620): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001a80), r0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) (async) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) (async) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r2 = syz_clone(0x904000, 0x0, 0x5f, 0x0, 0x0, 0x0) setpgid(r2, 0x0) (async) setpgid(0x0, r2) (async) stat(&(0x7f0000004b40)='./file0/file0\x00', 0x0) (async) mount$9p_virtio(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x0, 0x0) (async) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000000300)={0x34, r1, 0x1, 0x1000000, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x1c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}]}]}, 0x34}}, 0x20004000) 1m9.310643021s ago: executing program 6 (id=2621): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f00000004c0)={0x0, 0x465f}, 0x8) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000140)='./file1\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) mount$afs(&(0x7f00000002c0)=ANY=[@ANYBLOB="03e9d3030031c9c388f541fda99d74a6c2302303ffffffffffffffff300000"], &(0x7f00000001c0)='./file1\x00', &(0x7f0000000200), 0x40, &(0x7f0000000280)=ANY=[@ANYBLOB='floctext=root,\x00'/30]) quotactl_fd$Q_SETQUOTA(r1, 0xffffffff80000800, 0x0, &(0x7f00000000c0)={0x100, 0x3, 0xa960, 0x14, 0x201, 0x1, 0x0, 0x0, 0xdf}) r2 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000080)='.log\x00', 0x1810c0, 0x0) fchown(r2, 0xee01, 0x0) 1m9.080635429s ago: executing program 6 (id=2622): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f00000000c0)={&(0x7f0000000340)="000bdbb82324406f6533cfe9cdfadd7ff6c284c7c051034f555ba0da203c05c78011e93eb5d506a5", 0x28}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000140)={&(0x7f0000000580)="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", 0x123, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0xc00464be, &(0x7f0000000000)={r1}) 1m9.053944375s ago: executing program 35 (id=2622): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f00000000c0)={&(0x7f0000000340)="000bdbb82324406f6533cfe9cdfadd7ff6c284c7c051034f555ba0da203c05c78011e93eb5d506a5", 0x28}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000140)={&(0x7f0000000580)="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", 0x123, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0xc00464be, &(0x7f0000000000)={r1}) 3.008566389s ago: executing program 3 (id=3080): r0 = socket$kcm(0x10, 0x100000000002, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19, 0x0, 0xffffffffffffffff, 0x54, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x42) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000040)=r1, 0x4) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="39000000140081ae00002c000500015601618575e285af0180000000171300883795c04a31ba377a1b2cc32b38d3740000ffffffffffffffff", 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f00000003c0), 0x10) r3 = syz_io_uring_setup(0x1114, &(0x7f0000000300), &(0x7f00000001c0)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x8, 0x0, 0x7, 0x0, 0x0}) r6 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) getsockopt$ax25_int(r6, 0x101, 0xa, &(0x7f0000000240), 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r7 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x80100, 0x0, 0x39}, 0x18) r8 = open_tree(r7, 0x0, 0x0) socket$inet6(0xa, 0x5, 0x0) r9 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r9, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(r3, 0x47fa, 0x0, 0x0, 0x0, 0x0) r10 = mq_open(&(0x7f0000000040)='!\x7f\x00\xca\x00\x00\x00\f\x00\x00\x01E!Tnux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000000)={0x0, 0x1, 0x8}) mq_timedreceive(r10, 0x0, 0xfffffffffffffee3, 0x1, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000040)={'gretap0\x00', &(0x7f0000001000)={'syztnl2\x00', 0x0, 0x0, 0xa000, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0xfd, 0x2f, 0x0, @empty, @rand_addr=0x64010100}}}}) socket$inet_dccp(0x2, 0x6, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'xfrm0\x00'}) socket$nl_route(0x10, 0x3, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r8, 0x7, &(0x7f0000000140), 0x1) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="6800000010000100"/20, @ANYRES32=r12, @ANYBLOB="0000000000000000480012800e0001006970366772657461700000003400028008000100", @ANYRES32], 0x68}}, 0x0) 2.890055676s ago: executing program 1 (id=3081): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x29, 0x0, &(0x7f0000000240)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x70bd2b, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7b, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) r1 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000240)='dns_resolver\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f0000000280)="dee7030022cf5c6c7bc31bd2599759fafa9e5e1dbac27b0426fc0299c41fb9b9761a", 0x22, r1) keyctl$search(0xa, r1, &(0x7f00000000c0)='dns_resolver\x00', &(0x7f0000000140)={'syz', 0x1, 0x2e}, 0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x6, 0x4, 0xd, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x6, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000dcafb6ac000000000000000000001b0000181500006a21244a51475578633b78bda39c4a9da36ef7c8a3fcafba73c7d0863555bd6fce198ee95d0d5a096fce491851631e7fc40f8e0649ee121b59ebee64e06beb21793ffb", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000450000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000200), 0xa0201, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000180)=@o_path={&(0x7f0000000000)='./file1\x00', 0x0, 0x4010, r6}, 0x14) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r7, &(0x7f0000d84000)={0xa, 0x2, 0x200008, @loopback, 0x39}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f00000010c0)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}}, 0x0, 0x0, 0x1b, 0x0, "61a1ed8439cde8054f2ada6fcd5fe76b933e8bb0ac60081e33dffa150835f7519d5f73b4f5d80eb4881a5b98cb9fb96d225d602392f816d0bdcc09b5063087117502d8c24f1fe97f61fd27a06d6a38a7"}, 0xd8) 2.170416899s ago: executing program 3 (id=3082): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020696c25000000000020"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x20, 0x12, 0xa01, 0x0, 0x0, {0x80}}, 0x26}}, 0x0) 2.109957897s ago: executing program 3 (id=3083): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000008000000000000000000000b5f910d069da2302c6c7a15dad1d67eb00"/44], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340), 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000000800), 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0xaea3, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r5, &(0x7f00000000c0), 0x9) sendfile(r5, r4, 0x0, 0x10000) 2.010128656s ago: executing program 4 (id=3084): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000000000), 0x651, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0xffffffffffffff7b, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = syz_io_uring_setup(0x6b63, &(0x7f00000003c0)={0x0, 0x7f89, 0x26058, 0x1, 0x6a}, &(0x7f0000000440), &(0x7f0000000480)) r2 = syz_io_uring_setup(0x1c15, &(0x7f0000000240)={0x0, 0xfffffffd, 0x1, 0x0, 0x0, 0x0, r1}, &(0x7f00000001c0), &(0x7f0000000000)) io_uring_enter(r2, 0x0, 0x0, 0xd, &(0x7f0000000800), 0x18) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) (async) write(0xffffffffffffffff, &(0x7f00000002c0)="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", 0xfc) (async) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @empty}, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}}, 0x0, {0x2, 0x0, @multicast1=0xe000cc02}}) (async) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) (async) r6 = fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000200)={0xffffffffffffffff, r6, 0x1, 0x0, @void}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900030073797a0600000000140004800800024032658aeb08000140000000000900010073797a300000000048000000060a010400000000000000000100000008000b40000000000900010073797a3000000000200004801c0001800b00010072656a65637400000c000280080001400000000114000000110001"], 0xd0}}, 0x0) (async) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/consoles\x00', 0x0, 0x0) (async) openat$uinput(0xffffff9c, &(0x7f0000000500), 0x2, 0x0) pread64(r7, &(0x7f00000002c0)=""/118, 0x53, 0x7) syz_emit_ethernet(0x4a, &(0x7f00000004c0)=ANY=[@ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="500400009078"], 0x0) socket$nl_generic(0x10, 0x3, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) 2.009809936s ago: executing program 1 (id=3085): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/mdstat\x00', 0x0, 0x0) io_setup(0x5, &(0x7f0000002340)=0x0) io_submit(r2, 0x1, &(0x7f00000014c0)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) io_setup(0x400, &(0x7f0000000040)=0x0) io_getevents(r3, 0x2, 0x2, &(0x7f0000000080)=[{}, {}], &(0x7f0000000100)={0x0, 0x989680}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e21, 0x8, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1}}, 0x7}, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r4, @ANYBLOB="00001700000000001c003780"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) 1.939852818s ago: executing program 7 (id=3087): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = openat$ttynull(0xffffff9c, &(0x7f0000000080), 0xc080, 0x0) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newlink={0x3c, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_AGEING_TIME={0x8, 0x8, 0x81}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000881}, 0x4) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$lock(r3, 0x26, &(0x7f0000000040)={0x0, 0x2}) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x38, r5, 0x3559482e553b8fc3, 0xfffffffd, 0x0, {{0x5}, {@void, @val={0xc, 0x99, {0x0, 0x23}}}}, [@NL80211_ATTR_HE_OBSS_PD={0x10, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x4, 0x2, 0x81}]}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x81}]}, 0x38}, 0x1, 0x0, 0x0, 0x400c880}, 0x0) (async) r6 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x9, &(0x7f0000000380)=0x1, 0x4) (async) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="580000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="030100000000000024001280110001006272696467655f736c617665000000000c000580050202e8d7dfa2c9e60003006272696467655f7376472cd0dab2d0be1e29af0710568599087170377676dfd5206d4c4ac4be552ac5468460d763baabd27e4f40652910f80246c92d2eca0f3338b45ad6494609699e5ab13673b912040982d2fb2122999c24b33c1cdfee7c15c06229bf5125b9d56905029512e9396e2e48ab7ea28ba08b310474"], 0x58}}, 0x0) 1.880185808s ago: executing program 7 (id=3088): r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) (async) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB="040e040835200dbcbd316600b99198ff4536b7198b6696eb4de614ec39f9d64ced34edf2617d8455931cb8c3a71081a2c149ecc16985842483c68ae0ff3f4a582f032868d1deecedf29dcfc683d251dc4f3e3778841848d623bbefd4cb6c29547c6221b86368de363ee4001daae1b8c6804c3383f3edd109a4d19ce4248afe46fce9e00d0c6993503a29e1f4580792f6bd7cb420968c26ba16eec04458ae000000000000"], 0x7) (async) syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB="040e040835200dbcbd316600b99198ff4536b7198b6696eb4de614ec39f9d64ced34edf2617d8455931cb8c3a71081a2c149ecc16985842483c68ae0ff3f4a582f032868d1deecedf29dcfc683d251dc4f3e3778841848d623bbefd4cb6c29547c6221b86368de363ee4001daae1b8c6804c3383f3edd109a4d19ce4248afe46fce9e00d0c6993503a29e1f4580792f6bd7cb420968c26ba16eec04458ae000000000000"], 0x7) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x3, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fd7000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000020000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f00000000c0)="660f3881ae000000c483b17e35e661c286000f08c4a2ed8c03f30f09f30fc7b5c5a40000410f01cbc4c2f9341cd50d0000000f7973d50f08", 0x38}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, 0x0) 1.878805814s ago: executing program 7 (id=3089): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x18, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fdffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"/441], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0xf5010000, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x6d) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x40189429, &(0x7f0000000180)={0x1, 0x5, 0x6}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000280)={r2, 0xffffffffffffff37, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x57, 0x0, 0x0, 0x10, &(0x7f0000001a00), 0x0, 0x0, 0x16, 0x8, 0x0, 0x0}}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="5000000010003b1500"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128008000100677470001c000280050006000000000005000500000000", @ANYRES32], 0x50}}, 0x0) 1.748666939s ago: executing program 1 (id=3090): socket$kcm(0x29, 0x5, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x10, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x61, 0x11, 0x24}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x60000000, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x1b00, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x7c}, [@ldst={0x6, 0x3}], {0x95, 0x0, 0xc00}}, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x3c) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'veth1_to_bridge\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}}, 0x0) syz_emit_ethernet(0xa7, &(0x7f0000001200)={@link_local={0x3}, @broadcast, @void, {@ipv4={0x800, @dccp={{0x11, 0x4, 0x2, 0x10, 0x99, 0xf800, 0x0, 0x8c, 0x21, 0x0, @multicast1, @loopback, {[@lsrr={0x83, 0x27, 0xf0, [@local, @dev={0xac, 0x14, 0x14, 0x3c}, @private=0xa010100, @remote, @local, @multicast1, @multicast2, @dev={0xac, 0x14, 0x14, 0x24}, @private=0xa010101]}, @timestamp_addr={0x44, 0x4, 0x51, 0x1, 0x9}, @generic={0x44, 0x4, "8ba5"}]}}, {{0x4e24, 0x4e22, 0x4, 0x1, 0x2, 0x0, 0x0, 0x6, 0x5, "d9a73a", 0x3, "c8a3e2"}, "f3799a4953230aceec0db402adec5ea247ac0a235a83b5f68cb0002c87bb908e98da29ccedaaba2289c36a3e489f7fce9819984fdacb9eab63adfc5f9a8fe9f76bcc58e033"}}}}}, 0x0) 1.748456503s ago: executing program 1 (id=3091): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020696c25000000000020"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x300, &(0x7f0000000000)={&(0x7f0000000080)={0x20, 0x12, 0xa01, 0x0, 0x0, {0x80}}, 0x26}}, 0x0) 1.688917771s ago: executing program 1 (id=3092): socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x200001, &(0x7f0000000080)=ANY=[@ANYBLOB='dyn']) r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x256f16877c8c0da9, 0x0) getsockopt$IP_SET_OP_GET_BYINDEX(0xffffffffffffffff, 0x1, 0x53, &(0x7f0000000340)={0x7, 0x7, 0x4}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x0, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{}, 0x4}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x1}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$evdev(&(0x7f0000005e80), 0x4, 0x42) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) r4 = io_uring_setup(0x4668, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1}) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0}, 0x0) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000240)="76e2288a4f15d489589713716ff0436745f957be9348fd436217fa5e917c58ee", 0x20}], 0x11) chdir(&(0x7f00000000c0)='./file0\x00') r5 = open(&(0x7f0000000000)='./file1\x00', 0x0, 0x85) statx(r5, &(0x7f0000000280)='./file1\x00', 0x1000, 0x800, &(0x7f0000000380)) 1.629921831s ago: executing program 7 (id=3093): bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0x5, &(0x7f0000000040)=@framed={{}, [@cb_func={0x18, 0x6, 0x4, 0x0, 0xfffffffffffffff9}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$kcm(0x11, 0xa, 0x300) io_uring_enter(0xffffffffffffffff, 0x47fa, 0x0, 0x10, 0x0, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2688ca4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.629644028s ago: executing program 4 (id=3094): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020696c25000000000020"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x20, 0x12, 0xa01, 0x0, 0x0, {0x80}}, 0x26}}, 0x0) (fail_nth: 3) 1.569872729s ago: executing program 4 (id=3095): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="940000000001050500000000000000000a0000003c0002802c00018014000300ff01000000000000008000000000000114000400ff020000000000000000000000010c00028005000100000000003c0001800c00028005000100000000002c00018014000300ff020000000000000000000008000001ac1e0001080007400000000100"/148], 0x94}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) gettid() sendmsg$ETHTOOL_MSG_PAUSE_SET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x2c, r3, 0x431, 0x0, 0x0, {}, [@ETHTOOL_A_PAUSE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000080}, 0x8d0) r4 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r5 = epoll_create(0xb) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000002600)={0x10000011}) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000080)={&(0x7f00000009c0)={0x398, r3, 0x4, 0x70bd29, 0x25dfdbfc, {}, [@ETHTOOL_A_EEE_ENABLED={0x5}, @ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0x2}, @ETHTOOL_A_EEE_ENABLED={0x5, 0x5, 0x1}, @ETHTOOL_A_EEE_MODES_OURS={0x35c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x5c, 0x4, "6f4bd4fd9af22448c5b610350fe753b471264160f01bf60fdaa2777a93dd6e34dfcc4e480a4ae66ec0337f9b40af1c07e6aa2bd61667101034c476b75eb80f532251898472fe945e1b60a14b8447e36881e8f2b0275d3a0c"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x6f}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x144, 0x3, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '.{\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '}&+#\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xc}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\xff\xff'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '\\[.\x9f\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1000}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3ff}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, '!*$,^}/{{^()\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x101}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, ']{\x00'}]}, {0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, ']\'!+\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '{\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8000}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '!*:\\\x00'}]}]}, @ETHTOOL_A_BITSET_BITS={0x64, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffff8}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\xff\xff'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '\'+\x00'}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '\xae\x12\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\xff\xff'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}]}]}, @ETHTOOL_A_BITSET_BITS={0xa0, 0x3, 0x0, 0x1, [{0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '\xae\x12\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '--\\.\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '\\./]}$\x00'}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\xff\xff'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '\'+\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xca}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '#.@%\x00'}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, ']{\x00'}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x400}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_BITS={0xa8, 0x3, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\xff\xff'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffc24}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '#^!-[\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xa}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x18, 0x2, '\x00\xd5\xf2\x13&\xb4.\b\xa1\n\xb2\xe3-\x10\xd7}\x997\xben'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffff}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '6\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x77b6282d}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}]}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5}, @ETHTOOL_A_EEE_ENABLED={0x5, 0x5, 0x1}]}, 0x398}, 0x1, 0x0, 0x0, 0x48085}, 0x20040001) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x58, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x2000}]}, 0x58}}, 0x0) 1.569576464s ago: executing program 7 (id=3096): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=@newtaction={0x9d8, 0x30, 0x300, 0x0, 0x0, {}, [{0x9c4, 0x1, [@m_ct={0x70, 0x0, 0x0, 0x0, {{0x7}, {0x4}, {0x45, 0x6, "53229564cbad5359c4d8bc927498d9a91c209b5b36be49157b5c59ca7a65c0968f8cfec184cc9740356ea637b515ffd074f5bdd861f3fcf71a453a755275d40000"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_police={0x950, 0xa, 0x0, 0x0, {{0xb}, {0x86c, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7, 0x0, 0xe, 0xd0, 0x0, 0xffffff81, 0x7, 0x277, 0x1402, 0x100, 0x3, 0x8, 0x6, 0x0, 0x200, 0x51, 0x9, 0x6, 0x101, 0x7fff, 0x6, 0xb1, 0x1, 0x63, 0x8c, 0x3, 0x0, 0x80, 0x2149, 0x4, 0x7, 0x3, 0x4871, 0x1, 0x61, 0x1, 0x1, 0x7, 0x7, 0x4, 0x13, 0x2, 0x10000, 0x1ff, 0x3, 0x5, 0xfffff001, 0x9, 0x62ff, 0x4, 0x200, 0xff, 0x1, 0x3, 0x1, 0x6cf, 0x10000, 0x0, 0x7, 0x5, 0x6, 0x4, 0x1, 0x6, 0xc, 0x7fff, 0x2, 0x12c6000, 0x9d, 0x0, 0x15, 0xffffffff, 0x2, 0xffffffff, 0xabb3, 0x2, 0x1, 0x100, 0xd65, 0x8, 0xfffffeff, 0x7fff, 0x401, 0x0, 0x1, 0x8, 0x2, 0x1000, 0xf, 0x5, 0x5, 0x0, 0x10001, 0x66537569, 0x795, 0x6a7ba0a2, 0x4, 0xb, 0x3, 0x3ff, 0x401, 0x9, 0x0, 0x7, 0xfffffff2, 0x8, 0x58ae, 0x7, 0x80, 0xc9ce, 0x2, 0x1ab, 0x0, 0x80000001, 0x0, 0x63, 0x8, 0x53, 0x7fff, 0x4, 0x8, 0x3, 0x22, 0x1, 0x6, 0x4, 0x1, 0x2, 0x9, 0x20, 0x7, 0x3, 0x3, 0x5, 0x4, 0xffffff6d, 0x1, 0xc3, 0x3, 0x8, 0x8, 0xb, 0x40, 0x100, 0x9, 0xd, 0x4, 0x5, 0x5, 0x6cce, 0x7, 0x1000, 0xa, 0x3, 0x5, 0x2, 0x80000000, 0xd, 0xf, 0x5, 0x87, 0x3, 0x7155557a, 0x57, 0x1, 0x63f9, 0x4, 0x4, 0x7, 0x7f, 0x9d, 0x20000000, 0x6, 0x8, 0x0, 0x8, 0x5d81, 0xaf2b, 0x0, 0x7a4c, 0xffffff80, 0x2, 0x7ff, 0x1, 0x4, 0xfffffff5, 0x0, 0x400, 0x3ff, 0x3, 0x44, 0xffffffc0, 0x80000001, 0x400, 0x3, 0x4, 0x0, 0x9, 0x4, 0xe, 0x28, 0x7f, 0x8, 0xf1, 0x7, 0xd, 0x7, 0xe0000000, 0x6, 0x0, 0x800, 0x8, 0x0, 0x77f6, 0x8c, 0x1, 0x4, 0x33d8, 0xd, 0x4, 0x2, 0x1, 0x7, 0x400, 0x14c8, 0x81, 0x3, 0x2, 0x9, 0x6c79, 0x454, 0xc1, 0x400, 0x4, 0x2b1, 0xffff, 0x6, 0xfff, 0xec, 0x0, 0x8, 0x6, 0x1, 0x10001, 0x2, 0x4, 0x6, 0xd, 0x9, 0x7, 0x9, 0x1, 0x2, 0xa, 0x9, 0xc]}, @TCA_POLICE_RESULT={0x8, 0x5, 0xffffff12}, @TCA_POLICE_PEAKRATE64={0xc}, @TCA_POLICE_RESULT={0x8, 0x5, 0x3}, @TCA_POLICE_TBF={0x3c, 0x1, {0xbb46, 0x5, 0x80, 0xe21, 0x5, {0x9, 0x1, 0x3, 0x1, 0xfff9, 0x1}, {0x0, 0x2, 0xffff, 0x8000, 0x3ff, 0xffffffff}, 0x1, 0xa2, 0x9}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x5}], [@TCA_POLICE_RATE={0x404, 0x2, [0x5a400000, 0x8, 0xfffffffc, 0x5, 0x2, 0x7, 0xff, 0xb, 0x6, 0x1ff, 0x7, 0x0, 0x1, 0xff, 0x4, 0x9, 0x8, 0xe, 0x6, 0x1, 0x1581, 0x2, 0x101, 0x9, 0x4, 0x9, 0xfffffff7, 0x4f92, 0x40, 0x75e99c1a, 0x6, 0x5, 0x0, 0x8, 0x7fff, 0x5, 0x7, 0x8, 0x2, 0x3, 0x2, 0x2, 0x0, 0xc561, 0x4080000, 0xb863, 0x9f, 0x7, 0x4, 0x7, 0x7fb, 0x5, 0x1, 0x1, 0xa, 0x3, 0x10, 0x1, 0x9, 0x0, 0x3, 0x7fff, 0x81, 0x0, 0x80000001, 0x1, 0x9, 0x7, 0x2, 0x8, 0x1, 0x7f, 0xfff, 0x3, 0x1, 0x8001, 0x4, 0x3a5b, 0xff, 0x0, 0x7ff, 0x101, 0x5, 0x5, 0x648f, 0x3c4, 0xbd1, 0xe7, 0x3, 0x6, 0x3, 0x9, 0xbb91, 0x5, 0x8, 0x2474cf64, 0x0, 0xff, 0x6, 0x7, 0x100, 0x7, 0x3, 0x8, 0x7, 0x7fffffff, 0x7, 0x5, 0xcb, 0x7fff, 0x1800, 0x4, 0x6, 0x9, 0x80000000, 0x7, 0x10c, 0x4, 0x2, 0x2, 0xb, 0x769, 0x9, 0x8, 0xffffffff, 0x24c9ad0e, 0x6, 0xb, 0xfffff701, 0xe, 0x8, 0x5b, 0x3, 0xdf, 0x4, 0x7, 0x10, 0x0, 0x1, 0x3, 0x80000000, 0x101, 0xfff, 0x4, 0x6, 0x4, 0x4, 0x2, 0x1, 0x7f, 0x10, 0x400, 0x4, 0x1, 0x10001, 0x10000, 0x0, 0x0, 0x6, 0x1000, 0x3, 0x1, 0xfffffffe, 0x2, 0x4, 0x4, 0x2, 0x6, 0x1, 0x2, 0x2, 0x39, 0x8, 0x0, 0x7ff, 0x4, 0x9, 0x1b, 0xe6, 0x8, 0x5, 0x2, 0xce3, 0x7d46, 0x600000, 0x9, 0x7, 0x2, 0x2, 0x5, 0x7, 0xa28, 0x34, 0x6, 0x1, 0x6, 0x6, 0x1f, 0x0, 0x2, 0x816d, 0x81, 0x3, 0xfffffff9, 0x4, 0xc, 0x800, 0x8, 0x15, 0x0, 0x2bd, 0xb9, 0x9, 0x7, 0x2000, 0x9, 0xdca, 0x0, 0xffff, 0x8, 0xe39f, 0x7f, 0x40000, 0x6, 0x5, 0x3, 0xbdb, 0x6, 0x8000, 0x9, 0x6, 0x1, 0x9, 0x3, 0x800, 0x1, 0x3, 0xfffeffff, 0x5, 0x1, 0x5, 0x7, 0x6, 0x1009, 0x7ff, 0x2, 0x7fff, 0x1, 0xc4f9, 0x4, 0x0, 0x7000000, 0x7, 0x8, 0x2, 0xffffffff]}]]}, {0xbb, 0x6, "3fd06c9ef48d235516f39365167bd2760e2e73ecb80c75382bb948a07c97cb35f95ac68a71ed10ef1371e6d8ea6fd61ee92b2b5467afb133738ea6478e9eeb481176f5e8b5e083c8ae6bb813d4db5ce5296a653bb79883109893285994ba7d48c4fdc8d692f93e45ac830b714e31d641b3ebd6b9bcfaee931d0e81c2519abaa8f33bc5ba402e724294fe451cab32a1a5f3771b7d556d1382e14560ed20f8c1d8305dce0bc578f5f87df6a7f5e8bb9e86e474dc615bbbd0"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x9d8}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, 0x0) syz_80211_inject_frame(&(0x7f0000000280)=@device_b, &(0x7f0000000300)=ANY=[], 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sched_setaffinity(0x0, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000006c0)="5c00000013006bcd9e3fe3dc6e48aa31086b8703240000007ea60264160af365040014000d000a000e0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) fsetxattr$system_posix_acl(r3, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000100)={{}, {0x1, 0x1}, [], {0x20, 0x1}, [], {0x10, 0x2}}, 0x24, 0x2) io_uring_enter(r3, 0x2b, 0xf67, 0x2, &(0x7f00000000c0)={[0x8001, 0x1ff]}, 0x8) 1.569160816s ago: executing program 4 (id=3097): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0x40d, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, 0x10}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_PORT_SELF={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 1.469679092s ago: executing program 4 (id=3098): r0 = socket$inet(0x2, 0x3, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000200000095"], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x8, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) syz_clone(0x800c000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = getpid() bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[], 0x50) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0x40305839, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000200700000000000000f4000000"]) socket$inet6_mptcp(0xa, 0x1, 0x106) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'adiantum(xchacha20-simd,anubis-generic,nhpoly1305-sse2)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r6 = accept4(r5, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000013a40)={0x0, 0x0, &(0x7f0000013a00)={&(0x7f00000158c0), 0x10b8c}}, 0x0) write$uinput_user_dev(r4, &(0x7f0000000100)={'syz0\x00', {}, 0x7, [0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf6, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0xfffffffe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0xffffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x180d, 0x0, 0xae4d, 0x0, 0x0, 0x3], [0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x400, 0x0, 0xed0, 0x4000000], [0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0e, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0xf, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffe]}, 0x45c) ioctl$UI_DEV_SETUP(r4, 0x5501, 0x0) write$input_event(r4, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000280)={@multicast1, @local, @remote}, 0xc) socket$nl_route(0x10, 0x3, 0x0) 869.599487ms ago: executing program 3 (id=3099): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x1, 0x7fff0000}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) r1 = syz_open_procfs(0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000001040)=@newsa={0xf0, 0x10, 0x713, 0x0, 0x0, {{@in=@broadcast, @in6=@mcast1}, {@in6=@remote, 0x0, 0x33}, @in6=@mcast1, {}, {}, {}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x6a}}, 0xf0}}, 0x0) r2 = syz_open_dev$admmidi(&(0x7f0000000080), 0x2, 0x40002) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r2, 0x40045730, &(0x7f0000001080)) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000300)={'wg1\x00'}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, 0x0, 0x0) r4 = accept4(r3, 0x0, 0x0, 0x0) write(r4, &(0x7f0000000040), 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000140)) socket$key(0xf, 0x3, 0x2) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x1, 0x7fff0000}]}) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) (async) syz_open_procfs(0x0, 0x0) (async) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000001040)=@newsa={0xf0, 0x10, 0x713, 0x0, 0x0, {{@in=@broadcast, @in6=@mcast1}, {@in6=@remote, 0x0, 0x33}, @in6=@mcast1, {}, {}, {}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x6a}}, 0xf0}}, 0x0) (async) syz_open_dev$admmidi(&(0x7f0000000080), 0x2, 0x40002) (async) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r2, 0x40045730, &(0x7f0000001080)) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000300)={'wg1\x00'}) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) socket$alg(0x26, 0x5, 0x0) (async) bind$alg(r3, 0x0, 0x0) (async) accept4(r3, 0x0, 0x0, 0x0) (async) write(r4, &(0x7f0000000040), 0x0) (async) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000140)) (async) socket$key(0xf, 0x3, 0x2) (async) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) (async) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) (async) 749.15522ms ago: executing program 3 (id=3100): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) (async) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x5bd402, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000100)={0x1b, "5660359c3245d1c42317afad7d48ed51000000000000000100"}) (async) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000180)={0x1000, "340b7832ceefd131b8e6498c25f58fad9987ffe93bbabd18cf501922de974a27", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r2, 0xc0303e03, &(0x7f00000000c0)={"3c24139ed44aec57f2e2ad238a7b448ed886923c31d4b8affbf514fd00", r2}) ppoll(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) connect(0xffffffffffffffff, &(0x7f00000001c0)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x2c}}}, 0x80) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x40047452, 0x0) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) (async) openat$sysfs(0xffffff9c, 0x0, 0x82, 0x8b) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'batadv_slave_0\x00', 0x0}) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x1, 0x5, 0x0, @void, @value}, 0x28) (async) bpf$PROG_LOAD_XDP(0x5, 0x0, 0xffffff6c) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) (async) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4001, 0x43, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xd}, 0x1c) pipe(&(0x7f0000000100)) (async) splice(r4, 0x0, r2, 0x0, 0xe160, 0x5) msync(&(0x7f0000720000/0x3000)=nil, 0x3000, 0x4) (async) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) (async) ioctl$KVM_SET_CPUID2(r5, 0x4008ae90, &(0x7f0000000240)=ANY=[@ANYRES64=r3]) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/diskstats\x00', 0x0, 0x0) (async) openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) 748.863153ms ago: executing program 3 (id=3101): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020696c25000000000020"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket(0x10, 0x3, 0x0) setrlimit(0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x2, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r1 = open$dir(&(0x7f0000000140)='./file0\x00', 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) mremap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x3000, 0x4, &(0x7f0000ffa000/0x3000)=nil) ftruncate(r2, 0x2000009) sendfile(r1, r2, 0x0, 0x7ffff000) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x2, &(0x7f00000000c0)=@raw=[@call={0x85, 0x0, 0x0, 0xae}, @exit={0x95, 0x0, 0x9fff}], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000003c0)='virtio_transport_alloc_pkt\x00', r5}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r4, 0x28, 0x1, &(0x7f0000000100)=0xffffffff00040000, 0x112) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x24, 0x12, 0xa01, 0xfffffffd, 0x0, {0x80}, [@typed={0x8, 0x83, 0x0, 0x0, @ipv4=@remote}, @typed={0x8, 0x10d, 0x0, 0x0, @pid=r3}]}, 0x24}}, 0x0) r6 = openat$dsp(0xffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r6, 0xc0045002, &(0x7f0000000140)=0x6) 580.097024ms ago: executing program 4 (id=3102): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$loop(&(0x7f0000000280), 0x7cc9, 0x400200) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r0], 0x0, 0xfffffffffffffe52, 0x0, 0x0, 0x8, 0x0, @void, @value}, 0x28) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0x11) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x3, 0x10004, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) close(r4) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) keyctl$dh_compute(0x17, &(0x7f0000000040), 0x0, 0x0, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_mptcp_buf(r5, 0x11c, 0x3, &(0x7f0000000040)=""/185, &(0x7f0000000140)=0xb9) 91.735214ms ago: executing program 1 (id=3103): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x10, &(0x7f0000000ac0)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x18, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000000c0)=[{0x5, 0x2, 0x17, 0x7}, {0x10000005, 0x5, 0x0, 0x7}], 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x3, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) sendmsg$key(r0, &(0x7f00000007c0)={0x400000000000000, 0x0, 0x0}, 0x20004808) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) r4 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r4, 0x10e, 0xb, &(0x7f0000000000)=0x5, 0x4) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_AUTHENTICATE(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)={0x20, r5, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc, 0x117}}}}, 0x20}}, 0x0) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x3, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x76) mkdirat(0xffffffffffffffff, 0xfffffffffffffffe, 0x5) mount(&(0x7f00000002c0)=@nullb, &(0x7f0000000380)='./file0\x00', 0x0, 0x808000, 0x0) 0s ago: executing program 7 (id=3104): msgsnd(0x0, &(0x7f0000000180)=ANY=[], 0x4000, 0x0) (async) msgsnd(0x0, &(0x7f0000000180)=ANY=[], 0x4000, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x8, 0x10, &(0x7f0000000400)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xbecd}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x5}}, {}, [@ldst={0x2, 0x0, 0x3, 0x6, 0x5, 0x30}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, @void, @value}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bond={{0x9}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BOND_PEER_NOTIF_DELAY={0x8, 0x1c, 0x200}, @IFLA_BOND_ARP_VALIDATE={0x8, 0x9, 0x2}, @IFLA_BOND_MIIMON={0x8, 0x3, 0x5}]}}}]}, 0x4c}}, 0x0) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$snapshot(0xffffff9c, &(0x7f00000001c0), 0x8001, 0x0) (async) openat$snapshot(0xffffff9c, &(0x7f00000001c0), 0x8001, 0x0) unshare(0x68060200) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) getsockopt$EBT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000000)={'filter\x00', 0x0, 0x0, 0x0, [0xfffffffc, 0x0, 0xed, 0x6]}, &(0x7f0000000080)=0x50) getsockopt$EBT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x81, &(0x7f00000003c0)={'nat\x00', 0x0, 0x3, 0x0, [0x5, 0x9, 0xfa, 0x6, 0x10000, 0x8001], 0x0, 0x0, 0x0}, 0x0) kernel console output (not intermixed with test programs): hci4: command 0x0405 tx timeout [ 362.071194][T13937] overlayfs: missing 'lowerdir' [ 362.264912][T13942] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2170'. [ 362.421665][T13944] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 362.423523][T13944] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 362.428995][T13944] vhci_hcd vhci_hcd.0: Device attached [ 362.600871][ T834] vhci_hcd: vhci_device speed not set [ 362.656332][T13945] vhci_hcd: connection closed [ 362.656713][ T7118] vhci_hcd: stop threads [ 362.660554][ T7118] vhci_hcd: release socket [ 362.664153][ T834] usb 47-1: new full-speed USB device number 3 using vhci_hcd [ 362.670732][ T7118] vhci_hcd: disconnect device [ 362.674611][ T834] usb 47-1: enqueue for inactive port 0 [ 362.741746][ T834] vhci_hcd: vhci_device speed not set [ 362.963672][T13955] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2176'. [ 362.969864][T13955] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2176'. [ 362.983192][T13955] vlan2: entered promiscuous mode [ 362.984708][T13955] bond0: entered promiscuous mode [ 362.986192][T13955] bond_slave_0: entered promiscuous mode [ 362.988077][T13955] bond_slave_1: entered promiscuous mode [ 363.234643][T13965] input: syz1 as /devices/virtual/input/input72 [ 363.713541][ T6008] libceph: connect (1)[c::]:6789 error -101 [ 363.725854][ T6008] libceph: mon0 (1)[c::]:6789 connect error [ 363.765480][T13970] ceph: No mds server is up or the cluster is laggy [ 364.083266][T13982] /dev/nullb0: Can't open blockdev [ 364.161716][T13981] input: syz0 as /devices/virtual/input/input73 [ 364.352677][T13985] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2182'. [ 365.140959][T13998] lo speed is unknown, defaulting to 1000 [ 365.143085][T13998] lo speed is unknown, defaulting to 1000 [ 365.147869][T13998] lo speed is unknown, defaulting to 1000 [ 365.158133][T14008] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2187'. [ 365.164987][T13998] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 365.203864][T13998] lo speed is unknown, defaulting to 1000 [ 365.214516][T13998] lo speed is unknown, defaulting to 1000 [ 365.219967][T13998] lo speed is unknown, defaulting to 1000 [ 365.225574][T13998] lo speed is unknown, defaulting to 1000 [ 365.230588][T13998] lo speed is unknown, defaulting to 1000 [ 365.237926][T13998] lo speed is unknown, defaulting to 1000 [ 365.545065][ T39] audit: type=1804 audit(2000000096.549:355): pid=14013 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.2189" name="/newroot/356/file0" dev="tmpfs" ino=1879 res=1 errno=0 [ 365.580476][ T5990] hid-generic 0001:0004:0007.0009: item fetching failed at offset 5/204 [ 365.583883][ T5990] hid-generic 0001:0004:0007.0009: probe with driver hid-generic failed with error -22 [ 365.756697][T14025] netlink: 'syz.1.2193': attribute type 1 has an invalid length. [ 365.758961][T14025] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2193'. [ 365.839508][T14028] netlink: 'syz.1.2194': attribute type 10 has an invalid length. [ 365.847558][T14028] team0: Cannot enslave team device to itself [ 366.205142][T14038] input: syz0 as /devices/virtual/input/input74 [ 366.983612][T14048] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 366.985475][T14048] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 366.988378][T14048] vhci_hcd vhci_hcd.0: Device attached [ 367.170861][ T6008] vhci_hcd: vhci_device speed not set [ 367.214267][T14049] vhci_hcd: connection closed [ 367.240986][ T6008] usb 43-1: new full-speed USB device number 17 using vhci_hcd [ 367.268336][ T1051] vhci_hcd: stop threads [ 367.269671][ T1051] vhci_hcd: release socket [ 367.271465][ T1051] vhci_hcd: disconnect device [ 367.388813][T14062] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2201'. [ 368.372469][T14082] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2208'. [ 368.639798][T14084] input: syz0 as /devices/virtual/input/input75 [ 368.930248][T14093] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2211'. [ 369.065697][T14097] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2210'. [ 369.456044][T14108] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 369.458052][T14108] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 369.460391][T14108] vhci_hcd vhci_hcd.0: Device attached [ 369.641090][ T1322] vhci_hcd: vhci_device speed not set [ 369.666658][T14109] vhci_hcd: connection closed [ 369.680980][ T7115] vhci_hcd: stop threads [ 369.683619][ T7115] vhci_hcd: release socket [ 369.685006][ T7115] vhci_hcd: disconnect device [ 369.718560][ T1322] usb 45-1: new full-speed USB device number 7 using vhci_hcd [ 369.720994][ T1322] usb 45-1: enqueue for inactive port 0 [ 369.790906][ T1322] vhci_hcd: vhci_device speed not set [ 369.859404][T14122] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2217'. [ 370.501522][T14127] lo speed is unknown, defaulting to 1000 [ 371.460943][ T5296] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 371.519976][T14144] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 371.521937][T14144] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 371.526842][T14144] vhci_hcd vhci_hcd.0: Device attached [ 371.689840][T14149] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2226'. [ 371.798126][T14145] vhci_hcd: connection reset by peer [ 371.800638][ T1173] vhci_hcd: stop threads [ 371.803266][ T1173] vhci_hcd: release socket [ 371.804896][ T1173] vhci_hcd: disconnect device [ 372.149716][T14156] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2229'. [ 372.330987][ T6008] vhci_hcd: vhci_device speed not set [ 373.363758][T14178] loop9: detected capacity change from 0 to 1 [ 373.365936][T14178] Dev loop9: unable to read RDB block 1 [ 373.367683][T14178] loop9: unable to read partition table [ 373.369506][T14178] loop9: partition table beyond EOD, truncated [ 373.372263][T14178] loop_reread_partitions: partition scan of loop9 (þ被xü°ŸÑà– ) failed (rc=-5) [ 373.404057][T14180] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 373.584705][T14185] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 373.586670][T14185] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 373.589343][T14185] vhci_hcd vhci_hcd.0: Device attached [ 373.800879][T14186] vhci_hcd: connection closed [ 373.801144][ T7113] vhci_hcd: stop threads [ 373.803824][ T7113] vhci_hcd: release socket [ 373.810991][ T7113] vhci_hcd: disconnect device [ 373.856093][ T6008] vhci_hcd: vhci_device speed not set [ 374.240985][T14198] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2242'. [ 376.374165][T14227] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2250'. [ 376.531716][T14229] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2251'. [ 376.614107][T14232] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 376.616020][T14232] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 376.618752][T14232] vhci_hcd vhci_hcd.0: Device attached [ 376.800887][ T5989] vhci_hcd: vhci_device speed not set [ 376.822363][T14233] vhci_hcd: connection closed [ 376.830891][T10767] vhci_hcd: stop threads [ 376.833650][T10767] vhci_hcd: release socket [ 376.835072][T10767] vhci_hcd: disconnect device [ 376.860922][ T5989] usb 43-1: new full-speed USB device number 19 using vhci_hcd [ 376.863201][ T5989] usb 43-1: enqueue for inactive port 0 [ 376.931225][ T5989] vhci_hcd: vhci_device speed not set [ 378.024446][ T1414] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.026490][ T1414] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.868755][T14271] 9pnet_virtio: no channels available for device syz [ 378.880893][T14271] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 378.883018][T14271] overlayfs: failed to set xattr on upper [ 378.884850][T14271] overlayfs: ...falling back to redirect_dir=nofollow. [ 378.886977][T14271] overlayfs: ...falling back to index=off. [ 378.888749][T14271] overlayfs: ...falling back to uuid=null. [ 379.128066][T14283] netlink: 392 bytes leftover after parsing attributes in process `syz.4.2265'. [ 379.171217][ T6008] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 379.308889][T14288] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2267'. [ 379.313045][T14288] 9pnet_virtio: no channels available for device syz [ 379.331030][ T6008] usb 8-1: Using ep0 maxpacket: 16 [ 379.333809][ T6008] usb 8-1: config 0 has no interfaces? [ 379.336924][ T6008] usb 8-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 379.339671][ T6008] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 379.342400][ T6008] usb 8-1: Product: syz [ 379.343815][ T6008] usb 8-1: Manufacturer: syz [ 379.345247][ T6008] usb 8-1: SerialNumber: syz [ 379.348761][ T6008] r8152-cfgselector 8-1: Unknown version 0x0000 [ 379.350861][ T6008] r8152-cfgselector 8-1: config 0 descriptor?? [ 379.559406][T14292] /dev/nullb0: Can't open blockdev [ 380.065041][ T5989] r8152-cfgselector 8-1: USB disconnect, device number 12 [ 381.127899][T14315] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2274'. [ 381.274515][T14322] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2277'. [ 381.440603][T14326] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2276'. [ 382.367996][T14343] /dev/nullb0: Can't open blockdev [ 382.585372][T14344] input: syz0 as /devices/virtual/input/input76 [ 383.888938][T14366] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2287'. [ 384.111394][T14371] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2289'. [ 385.055362][ T1051] nci: nci_ntf_packet: unknown ntf opcode 0xe1f [ 385.380149][T14390] /dev/nullb0: Can't open blockdev [ 385.997637][T14106] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 386.002037][T14106] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 386.005081][T14106] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 386.008083][T14106] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 386.013815][T14106] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 386.016047][T14106] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 386.038414][T14407] lo speed is unknown, defaulting to 1000 [ 386.096628][T14407] chnl_net:caif_netlink_parms(): no params data found [ 386.495975][ T35] kernel read not supported for file /adsp1 (pid: 35 comm: kworker/3:0) [ 386.499479][ T35] kernel read not supported for file /adsp1 (pid: 35 comm: kworker/3:0) [ 386.591968][T14407] bridge0: port 1(bridge_slave_0) entered blocking state [ 386.595413][T14407] bridge0: port 1(bridge_slave_0) entered disabled state [ 386.599047][T14407] bridge_slave_0: entered allmulticast mode [ 386.605997][T14407] bridge_slave_0: entered promiscuous mode [ 386.611695][T14407] bridge0: port 2(bridge_slave_1) entered blocking state [ 386.613799][T14407] bridge0: port 2(bridge_slave_1) entered disabled state [ 386.615871][T14407] bridge_slave_1: entered allmulticast mode [ 386.620411][T14407] bridge_slave_1: entered promiscuous mode [ 386.657727][T14407] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 386.663718][T14407] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 386.687519][T14420] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2298'. [ 386.779665][T14407] team0: Port device team_slave_0 added [ 386.784631][T14407] team0: Port device team_slave_1 added [ 386.922715][T14407] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 386.925077][T14407] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 386.934789][T14407] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 386.940018][T14407] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 386.950848][T14407] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 386.957552][T14407] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 386.966252][T14425] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2300'. [ 386.992359][T14407] hsr_slave_0: entered promiscuous mode [ 386.994363][T14407] hsr_slave_1: entered promiscuous mode [ 386.996233][T14407] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 386.998500][T14407] Cannot create hsr debugfs directory [ 387.125005][T14407] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 387.129724][T14407] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 387.136017][T14407] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 387.140063][T14407] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 387.140291][T14427] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2299'. [ 387.224430][T14407] 8021q: adding VLAN 0 to HW filter on device bond0 [ 387.233022][T14407] 8021q: adding VLAN 0 to HW filter on device team0 [ 387.236901][ T1051] bridge0: port 1(bridge_slave_0) entered blocking state [ 387.239047][ T1051] bridge0: port 1(bridge_slave_0) entered forwarding state [ 387.249000][T10767] bridge0: port 2(bridge_slave_1) entered blocking state [ 387.251164][T10767] bridge0: port 2(bridge_slave_1) entered forwarding state [ 387.385368][T14407] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 387.481324][T14407] veth0_vlan: entered promiscuous mode [ 387.485642][T14407] veth1_vlan: entered promiscuous mode [ 387.498728][T14407] veth0_macvtap: entered promiscuous mode [ 387.503582][T14407] veth1_macvtap: entered promiscuous mode [ 387.509479][T14407] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 387.512647][T14407] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 387.515868][T14407] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 387.519950][T14407] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 387.523968][T14407] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 387.527993][T14407] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 387.531995][T14407] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 387.536040][T14407] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 387.539470][T14407] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 387.542926][T14407] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 387.546461][T14407] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 387.552060][T14407] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 387.555083][T14407] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 387.557884][T14407] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 387.560947][T14407] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 387.563737][T14407] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 387.566742][T14407] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 387.569593][T14407] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 387.572694][T14407] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 387.575530][T14407] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 387.578511][T14407] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 387.582209][T14407] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 387.586834][T14407] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.590157][T14407] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.593518][T14407] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.596790][T14407] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.627803][ T7113] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 387.631014][ T7113] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 387.640532][ T7113] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 387.643426][ T7113] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 388.050924][ T8556] usb 11-1: new low-speed USB device number 2 using dummy_hcd [ 388.101298][ T5296] Bluetooth: hci3: command tx timeout [ 388.204930][ T8556] usb 11-1: config 0 has an invalid interface number: 1 but max is 0 [ 388.209622][ T8556] usb 11-1: config 0 has no interface number 0 [ 388.211857][ T8556] usb 11-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 388.216210][ T8556] usb 11-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 388.220579][ T8556] usb 11-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 388.224327][ T8556] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 388.229391][ T8556] usb 11-1: config 0 descriptor?? [ 388.232952][T14458] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 388.239532][ T8556] iowarrior 11-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 388.379345][T14463] /dev/nullb0: Can't open blockdev [ 388.562553][ T5989] usb 11-1: USB disconnect, device number 2 [ 388.897673][T14478] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2308'. [ 389.027495][T14466] input: syz0 as /devices/virtual/input/input77 [ 389.649418][T14484] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2311'. [ 389.692073][T14490] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2313'. [ 389.797920][T14497] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2310'. [ 389.913398][T14500] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2312'. [ 390.116131][T14502] input: syz0 as /devices/virtual/input/input78 [ 390.180915][ T5296] Bluetooth: hci3: command tx timeout [ 390.784224][T14512] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 390.786636][T14512] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 390.881800][T14512] vhci_hcd vhci_hcd.0: Device attached [ 391.051016][ T5989] vhci_hcd: vhci_device speed not set [ 391.110971][ T5989] usb 45-1: new full-speed USB device number 8 using vhci_hcd [ 391.145373][T14513] vhci_hcd: connection reset by peer [ 391.148205][ T7113] vhci_hcd: stop threads [ 391.149544][ T7113] vhci_hcd: release socket [ 391.152132][ T7113] vhci_hcd: disconnect device [ 391.874858][T14536] input: syz0 as /devices/virtual/input/input79 [ 391.923555][T14538] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2322'. [ 392.251052][ T5296] Bluetooth: hci3: command tx timeout [ 392.321671][T14547] /dev/nullb0: Can't open blockdev [ 392.951136][T14558] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2326'. [ 393.854429][T14573] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2329'. [ 394.034723][T14574] /dev/nullb0: Can't open blockdev [ 394.332245][ T5296] Bluetooth: hci3: command tx timeout [ 394.398726][ T6008] libceph: connect (1)[c::]:6789 error -101 [ 394.401226][ T6008] libceph: mon0 (1)[c::]:6789 connect error [ 394.455329][T14582] ceph: No mds server is up or the cluster is laggy [ 394.565341][T14588] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2333'. [ 394.983650][T14595] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2335'. [ 395.050142][T14596] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2334'. [ 396.410915][ T5989] vhci_hcd: vhci_device speed not set [ 396.865224][T14639] /dev/nullb0: Can't open blockdev [ 396.983583][T14642] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2345'. [ 397.025058][T14647] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2347'. [ 397.281470][T14649] input: syz0 as /devices/virtual/input/input80 [ 397.662243][T14653] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2349'. [ 397.942712][T14663] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2350'. [ 398.152284][T14667] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2360'. [ 399.487270][T14683] input: syz0 as /devices/virtual/input/input81 [ 399.846951][T14689] /dev/nullb0: Can't open blockdev [ 400.122341][T14692] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2358'. [ 400.316909][T14106] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 400.321700][T14106] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 400.324385][T14106] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 400.327926][T14106] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 400.336754][T14106] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 400.339720][T14106] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 400.363165][T14693] lo speed is unknown, defaulting to 1000 [ 400.435053][T14693] chnl_net:caif_netlink_parms(): no params data found [ 400.495445][T14693] bridge0: port 1(bridge_slave_0) entered blocking state [ 400.497682][T14693] bridge0: port 1(bridge_slave_0) entered disabled state [ 400.499804][T14693] bridge_slave_0: entered allmulticast mode [ 400.506061][T14693] bridge_slave_0: entered promiscuous mode [ 400.510133][T14693] bridge0: port 2(bridge_slave_1) entered blocking state [ 400.512868][T14693] bridge0: port 2(bridge_slave_1) entered disabled state [ 400.514969][T14693] bridge_slave_1: entered allmulticast mode [ 400.517184][T14693] bridge_slave_1: entered promiscuous mode [ 400.518657][T14702] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2361'. [ 400.563878][T14693] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 400.570568][T14693] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 400.598166][T14693] team0: Port device team_slave_0 added [ 400.611149][T14693] team0: Port device team_slave_1 added [ 400.629539][T14693] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 400.633134][T14693] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 400.640545][T14693] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 400.646902][T14693] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 400.649528][T14693] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 400.971148][T14693] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 401.002306][T14693] hsr_slave_0: entered promiscuous mode [ 401.004291][T14693] hsr_slave_1: entered promiscuous mode [ 401.006158][T14693] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 401.008325][T14693] Cannot create hsr debugfs directory [ 401.104616][T14693] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 401.108705][T14693] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.205276][T14693] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 401.208309][T14693] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.286401][T14693] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 401.289461][T14693] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.362237][T14693] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 401.365191][T14693] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.452548][T14714] lo speed is unknown, defaulting to 1000 [ 401.484618][T14693] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 401.490426][T14693] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 401.501434][T14693] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 401.509756][T14693] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 401.540658][T14693] 8021q: adding VLAN 0 to HW filter on device bond0 [ 401.562869][T14693] 8021q: adding VLAN 0 to HW filter on device team0 [ 401.569614][ T7113] bridge0: port 1(bridge_slave_0) entered blocking state [ 401.571743][ T7113] bridge0: port 1(bridge_slave_0) entered forwarding state [ 401.576498][ T1051] bridge0: port 2(bridge_slave_1) entered blocking state [ 401.578690][ T1051] bridge0: port 2(bridge_slave_1) entered forwarding state [ 401.595861][T14693] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 401.598961][T14693] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 401.672907][T14693] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 401.687406][T14693] veth0_vlan: entered promiscuous mode [ 401.691352][T14693] veth1_vlan: entered promiscuous mode [ 401.703010][T14693] veth0_macvtap: entered promiscuous mode [ 401.706039][T14693] veth1_macvtap: entered promiscuous mode [ 401.711677][T14693] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 401.714803][T14693] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 401.717594][T14693] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 401.720604][T14693] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 401.725108][T14693] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 401.728130][T14693] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 401.731401][T14693] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 401.734411][T14693] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 401.737290][T14693] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 401.740309][T14693] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 401.743240][T14693] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 401.746245][T14693] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 401.749689][T14693] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 401.759503][T14693] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 401.762651][T14693] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 401.765426][T14693] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 401.768405][T14693] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 401.771351][T14693] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 401.774314][T14693] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 401.777101][T14693] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 401.780086][T14693] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 401.782961][T14693] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 401.785934][T14693] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 401.788724][T14693] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 401.791795][T14693] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 401.795164][T14693] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 401.799330][T14693] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.801947][T14693] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.804426][T14693] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.806903][T14693] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.831779][ T7113] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 401.834105][ T7113] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 401.850270][ T7113] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 401.852952][ T7113] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 402.302853][T14734] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2359'. [ 402.411586][T14106] Bluetooth: hci5: command tx timeout [ 402.683093][T14715] ISOFS: Unable to identify CD-ROM format. [ 402.820903][T14742] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(3) [ 402.823016][T14742] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 402.841201][T14742] vhci_hcd vhci_hcd.0: Device attached [ 402.843715][T14741] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2367'. [ 403.031029][ T8556] vhci_hcd: vhci_device speed not set [ 403.075334][T14743] vhci_hcd: connection closed [ 403.090892][ T8556] usb 49-1: new full-speed USB device number 2 using vhci_hcd [ 403.094947][T14744] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 403.163762][T10767] vhci_hcd: stop threads [ 403.165072][T10767] vhci_hcd: release socket [ 403.166473][T10767] vhci_hcd: disconnect device [ 403.348492][T14756] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2369'. [ 404.464965][T14792] netlink: 'syz.1.2378': attribute type 4 has an invalid length. [ 404.467212][T14792] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2378'. [ 404.468301][T14778] input: syz0 as /devices/virtual/input/input82 [ 404.490952][T14106] Bluetooth: hci5: command tx timeout [ 404.834677][T14800] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2382'. [ 405.157223][T14825] overlayfs: missing 'lowerdir' [ 405.919601][T14834] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2391'. [ 406.280731][T14843] input: syz0 as /devices/virtual/input/input83 [ 406.571142][T14106] Bluetooth: hci5: command tx timeout [ 406.836534][T14866] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2399'. [ 407.170109][T14878] 8021q: adding VLAN 0 to HW filter on device bond1 [ 407.185621][T14878] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 407.188714][T14878] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 407.191315][T14878] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 407.194050][T14878] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 407.196572][T14878] vxlan0: entered promiscuous mode [ 407.198063][T14878] vxlan0: entered allmulticast mode [ 407.201766][T14878] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 407.204525][T14878] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 407.207011][T14878] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 407.209573][T14878] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 407.297476][T14881] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2404'. [ 407.357637][T14882] netlink: 124 bytes leftover after parsing attributes in process `syz.3.2404'. [ 407.513137][T14929] No control pipe specified [ 407.609298][T14928] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2407'. [ 407.718650][ T9352] bridge0: port 3(syz_tun) entered disabled state [ 407.730578][ T9352] syz_tun (unregistering): left allmulticast mode [ 407.732814][ T9352] syz_tun (unregistering): left promiscuous mode [ 407.734733][ T9352] bridge0: port 3(syz_tun) entered disabled state [ 407.741598][ T5296] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 407.746779][ T5296] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 407.750726][ T5296] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 407.754998][ T5296] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 407.757467][ T5296] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 407.759733][ T5296] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 407.787977][T14934] lo speed is unknown, defaulting to 1000 [ 407.840255][T14939] loop8: detected capacity change from 0 to 1 [ 407.847014][T14939] Dev loop8: unable to read RDB block 1 [ 407.848764][T14939] loop8: unable to read partition table [ 407.850532][T14939] loop8: partition table beyond EOD, truncated [ 407.854961][T14939] loop_reread_partitions: partition scan of loop8 (þ被xüŸÑø éÚ¬§½dƤ´à–ƒÝ¡¯¨â·û [ 407.854961][T14939] ) failed (rc=-5) [ 407.868335][T14934] chnl_net:caif_netlink_parms(): no params data found [ 407.909580][T14934] bridge0: port 1(bridge_slave_0) entered blocking state [ 407.912899][T14934] bridge0: port 1(bridge_slave_0) entered disabled state [ 407.915014][T14934] bridge_slave_0: entered allmulticast mode [ 407.917209][T14934] bridge_slave_0: entered promiscuous mode [ 407.919863][T14934] bridge0: port 2(bridge_slave_1) entered blocking state [ 407.922778][T14934] bridge0: port 2(bridge_slave_1) entered disabled state [ 407.924856][T14934] bridge_slave_1: entered allmulticast mode [ 407.927027][T14934] bridge_slave_1: entered promiscuous mode [ 407.949246][T14934] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 407.954236][T14934] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 407.977855][T14934] team0: Port device team_slave_0 added [ 407.982643][T14934] team0: Port device team_slave_1 added [ 408.003761][T14934] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 408.005868][T14934] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 408.017520][T14934] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 408.022631][T14934] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 408.024659][T14934] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 408.032289][T14934] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 408.059662][T14934] hsr_slave_0: entered promiscuous mode [ 408.062577][T14934] hsr_slave_1: entered promiscuous mode [ 408.064833][T14934] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 408.067045][T14934] Cannot create hsr debugfs directory [ 408.130720][T14934] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.220717][T14934] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.260927][ T8556] vhci_hcd: vhci_device speed not set [ 408.295064][T14934] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.358526][T14934] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.449370][T14934] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 408.453079][T14934] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 408.456323][T14934] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 408.459410][T14934] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 408.475630][T14934] bridge0: port 2(bridge_slave_1) entered blocking state [ 408.477786][T14934] bridge0: port 2(bridge_slave_1) entered forwarding state [ 408.479956][T14934] bridge0: port 1(bridge_slave_0) entered blocking state [ 408.482641][T14934] bridge0: port 1(bridge_slave_0) entered forwarding state [ 408.507380][T14934] 8021q: adding VLAN 0 to HW filter on device bond0 [ 408.515555][T10765] bridge0: port 1(bridge_slave_0) entered disabled state [ 408.518951][T10765] bridge0: port 2(bridge_slave_1) entered disabled state [ 408.535635][T14934] 8021q: adding VLAN 0 to HW filter on device team0 [ 408.542699][T10765] bridge0: port 1(bridge_slave_0) entered blocking state [ 408.544831][T10765] bridge0: port 1(bridge_slave_0) entered forwarding state [ 408.549372][ T7116] bridge0: port 2(bridge_slave_1) entered blocking state [ 408.551518][ T7116] bridge0: port 2(bridge_slave_1) entered forwarding state [ 408.636258][T14934] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 408.651458][T14106] Bluetooth: hci5: command tx timeout [ 408.660121][T14934] veth0_vlan: entered promiscuous mode [ 408.667589][T14934] veth1_vlan: entered promiscuous mode [ 408.684065][T14934] veth0_macvtap: entered promiscuous mode [ 408.687027][T14968] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2416'. [ 408.692004][T14934] veth1_macvtap: entered promiscuous mode [ 408.698208][T14934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 408.701634][T14934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 408.704429][T14934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 408.707426][T14934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 408.710238][T14934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 408.714138][T14934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 408.716929][T14934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 408.719872][T14934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 408.722859][T14934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 408.725848][T14934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 408.728906][T14934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 408.732243][T14934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 408.735024][T14934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 408.737945][T14934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 408.742052][T14934] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 408.748072][T14934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 408.751533][T14934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 408.754361][T14934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 408.757339][T14934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 408.760314][T14934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 408.763335][T14934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 408.766123][T14934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 408.769133][T14934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 408.772161][T14934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 408.775149][T14934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 408.777956][T14934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 408.781080][T14934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 408.783920][T14934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 408.786889][T14934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 408.790243][T14934] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 408.794451][T14934] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.796964][T14934] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.799457][T14934] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.802219][T14934] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.849633][ T1180] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 408.857885][ T1180] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 408.868827][ T7118] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 408.871475][ T7118] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 408.901018][T14980] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2417'. [ 409.141324][T14989] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2419'. [ 409.251119][T14997] bond0: entered promiscuous mode [ 409.520907][ T1322] usb 6-1: new full-speed USB device number 24 using dummy_hcd [ 409.696019][ T1322] usb 6-1: config 0 has an invalid interface number: 50 but max is 0 [ 409.698588][ T1322] usb 6-1: config 0 has no interface number 0 [ 409.700520][ T1322] usb 6-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 409.704034][ T1322] usb 6-1: config 0 interface 50 altsetting 0 endpoint 0x82 has invalid maxpacket 1023, setting to 64 [ 409.708762][ T1322] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 409.711665][ T1322] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 409.714127][ T1322] usb 6-1: Product: syz [ 409.715448][ T1322] usb 6-1: Manufacturer: syz [ 409.716888][ T1322] usb 6-1: SerialNumber: syz [ 409.719169][ T1322] usb 6-1: config 0 descriptor?? [ 409.720559][T15016] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2425'. [ 409.721139][T15001] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 409.728719][ T1322] yurex 6-1:0.50: USB YUREX device now attached to Yurex #0 [ 409.771060][T14106] Bluetooth: hci0: command tx timeout [ 409.928823][T15001] kernel profiling enabled (shift: 7) [ 409.956896][ T1322] usb 6-1: USB disconnect, device number 24 [ 409.963810][ T1322] yurex 6-1:0.50: USB YUREX #0 now disconnected [ 410.195829][T15033] 8021q: adding VLAN 0 to HW filter on device bond1 [ 410.214146][T15033] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 410.216740][T15033] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 410.219577][T15033] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 410.222966][T15033] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 410.227509][T15033] vxlan0: entered promiscuous mode [ 410.228611][T15035] input: syz0 as /devices/virtual/input/input84 [ 410.232952][T15033] vxlan0: entered allmulticast mode [ 410.242395][T15033] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 410.244973][T15033] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 410.247494][T15033] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 410.250005][T15033] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 410.959620][T15079] /dev/nullb0: Can't open blockdev [ 411.631224][T15097] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2437'. [ 411.685611][ C0] sr 2:0:0:0: [sr0] tag#4 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 411.688587][ C0] sr 2:0:0:0: [sr0] tag#4 CDB: Play audio msf [ 411.690412][ C0] sr 2:0:0:0: [sr0] tag#4 CDB[00]: 47 af 83 98 e4 71 19 35 2d d9 c4 05 f8 66 54 d8 [ 411.693483][ C0] sr 2:0:0:0: [sr0] tag#4 CDB[10]: 73 eb [ 411.851084][T14106] Bluetooth: hci0: command tx timeout [ 412.330894][T14106] Bluetooth: hci2: command 0x0c1a tx timeout [ 412.330933][ T5319] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 412.335862][ T5319] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 412.416346][T15115] overlay: filesystem on ./bus not supported as upperdir [ 412.768979][T15133] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2446'. [ 413.694860][T15148] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2449'. [ 413.918253][T15156] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2451'. [ 413.961047][T14106] Bluetooth: hci0: command tx timeout [ 414.319151][T15163] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input85 [ 414.410931][ T5319] Bluetooth: hci4: Opcode 0x0c1a failed: -110 [ 414.412755][ T5319] Bluetooth: hci4: Error when powering off device on rfkill (-110) [ 414.473165][T15168] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2455'. [ 414.486654][T15168] : entered promiscuous mode [ 415.074087][ T39] audit: type=1800 audit(2000000146.079:356): pid=15197 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.4.2466" name="/" dev="sockfs" ino=53383 res=0 errno=0 [ 415.104030][T15204] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2467'. [ 415.106969][T15204] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2467'. [ 415.144602][ T5296] block nbd1: Receive control failed (result -32) [ 415.145178][T15163] block nbd1: shutting down sockets [ 415.180450][T15207] fuse: Bad value for 'group_id' [ 415.182187][T15207] fuse: Bad value for 'group_id' [ 415.228368][T15212] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2465'. [ 416.021033][T14106] Bluetooth: hci0: command tx timeout [ 416.054660][T15222] netdevsim netdevsim3: Direct firmware load for . [ 416.054660][T15222] failed with error -2 [ 416.058021][T15222] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 416.058021][T15222] [ 416.165315][T15227] bond0: Error: Cannot enslave bond to itself. [ 416.490870][T14106] Bluetooth: hci3: command 0x0c1a tx timeout [ 416.493144][ T5319] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 416.495001][ T5319] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 417.059871][T15243] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(3) [ 417.061875][T15243] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 417.079493][T15243] vhci_hcd vhci_hcd.0: Device attached [ 417.238612][T15244] vhci_hcd: connection closed [ 417.242314][T10765] vhci_hcd: stop threads [ 417.244863][T10765] vhci_hcd: release socket [ 417.250881][ T834] vhci_hcd: vhci_device speed not set [ 417.261099][T10765] vhci_hcd: disconnect device [ 417.312663][ T39] audit: type=1326 audit(2000000148.319:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15258 comm="syz.4.2482" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff3579 code=0x7ffc0000 [ 417.319917][ T39] audit: type=1326 audit(2000000148.319:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15258 comm="syz.4.2482" exe="/syz-executor" sig=0 arch=40000003 syscall=120 compat=1 ip=0xf7ff3579 code=0x7ffc0000 [ 417.329977][ T39] audit: type=1326 audit(2000000148.339:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15260 comm="syz.4.2482" exe="/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf7ff3579 code=0x7ffc0000 [ 417.337385][ T39] audit: type=1326 audit(2000000148.339:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15258 comm="syz.4.2482" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff3579 code=0x7ffc0000 [ 417.346301][ T39] audit: type=1326 audit(2000000148.339:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15258 comm="syz.4.2482" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff3579 code=0x7ffc0000 [ 417.353193][ T39] audit: type=1326 audit(2000000148.339:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15258 comm="syz.4.2482" exe="/syz-executor" sig=0 arch=40000003 syscall=284 compat=1 ip=0xf7ff3579 code=0x7ffc0000 [ 417.372802][T15261] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2480'. [ 417.478600][ T39] audit: type=1326 audit(2000000148.479:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15260 comm="syz.4.2482" exe="/syz-executor" sig=0 arch=40000003 syscall=1 compat=1 ip=0xf7ff3579 code=0x7ffc0000 [ 417.492272][ T39] audit: type=1326 audit(2000000148.499:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15258 comm="syz.4.2482" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7ff3598 code=0x7ffc0000 [ 417.499953][ T39] audit: type=1326 audit(2000000148.499:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15258 comm="syz.4.2482" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff3579 code=0x7ffc0000 [ 417.830925][T14443] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 417.980847][T14443] usb 9-1: Using ep0 maxpacket: 8 [ 417.983563][T14443] usb 9-1: config 0 has an invalid interface number: 55 but max is 0 [ 417.985903][T14443] usb 9-1: config 0 has no interface number 0 [ 417.987662][T14443] usb 9-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 417.990745][T14443] usb 9-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 417.994103][T14443] usb 9-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 417.997189][T14443] usb 9-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 418.000946][T14443] usb 9-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 418.003529][T14443] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 418.006601][T14443] usb 9-1: config 0 descriptor?? [ 418.009700][T14443] ldusb 9-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 418.270859][ T9] usb 9-1: USB disconnect, device number 12 [ 418.274674][ T9] ldusb 9-1:0.55: LD USB Device #0 now disconnected [ 418.570870][ T5319] Bluetooth: hci5: Opcode 0x0c1a failed: -110 [ 418.572695][ T5319] Bluetooth: hci5: Error when powering off device on rfkill (-110) [ 418.587904][T14106] Bluetooth: hci5: command 0x0c1a tx timeout [ 419.179708][T15310] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2491'. [ 419.293528][T15080] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 419.451138][T15080] usb 9-1: Using ep0 maxpacket: 16 [ 419.459283][T15080] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 419.467392][T15080] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 419.471901][T15080] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 419.476670][T15080] usb 9-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 419.480063][T15080] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 419.483672][T15080] usb 9-1: config 0 descriptor?? [ 419.901322][T15080] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/0003:045E:07DA.000A/input/input87 [ 419.973189][T15080] microsoft 0003:045E:07DA.000A: input,hidraw1: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 420.116158][T15080] usb 9-1: USB disconnect, device number 13 [ 420.650856][ T5319] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 420.652767][ T5319] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 420.661588][T14106] Bluetooth: hci0: command 0x0c1a tx timeout [ 421.435685][T15364] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2506'. [ 421.952085][T15375] ISOFS: Unable to identify CD-ROM format. [ 422.050842][T15376] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 422.052836][T15376] overlayfs: failed to set xattr on upper [ 422.054487][T15376] overlayfs: ...falling back to redirect_dir=nofollow. [ 422.056415][T15376] overlayfs: ...falling back to metacopy=off. [ 422.058142][T15376] overlayfs: ...falling back to index=off. [ 422.059808][T15376] overlayfs: ...falling back to uuid=null. [ 422.745634][T15386] rdma_rxe: rxe_newlink: failed to add veth0_to_batadv [ 422.748204][T15390] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(3) [ 422.750106][T15390] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 422.753031][T15390] vhci_hcd vhci_hcd.0: Device attached [ 422.897531][T15391] vhci_hcd: connection closed [ 422.897733][ T1173] vhci_hcd: stop threads [ 422.900304][ T1173] vhci_hcd: release socket [ 422.901926][ T1173] vhci_hcd: disconnect device [ 422.941252][ T9] vhci_hcd: vhci_device speed not set [ 423.382307][T15408] bond0: Error: Cannot enslave bond to itself. [ 423.594231][T15418] can0: slcan on pts0. [ 424.108225][T15428] program syz.3.2525 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 424.146395][T15431] lo speed is unknown, defaulting to 1000 [ 424.361715][T15413] can0 (unregistered): slcan off pts0. [ 424.450261][T15446] fuse: Bad value for 'fd' [ 424.584995][T15458] Cannot find add_set index 4 as target [ 424.606486][T15460] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 424.608398][T15460] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 424.611060][T15460] vhci_hcd vhci_hcd.0: Device attached [ 424.633453][T15464] 9pnet_virtio: no channels available for device syz [ 424.644041][T15464] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 424.801882][ T9] vhci_hcd: vhci_device speed not set [ 424.822340][T15461] vhci_hcd: connection closed [ 424.822561][ T7118] vhci_hcd: stop threads [ 424.825352][ T7118] vhci_hcd: release socket [ 424.827056][ T7118] vhci_hcd: disconnect device [ 424.870923][ T9] usb 43-1: new full-speed USB device number 20 using vhci_hcd [ 424.876619][ T9] usb 43-1: enqueue for inactive port 0 [ 424.950889][ T9] vhci_hcd: vhci_device speed not set [ 425.409039][T15487] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 425.451220][T15490] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2540'. [ 425.476681][T15492] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 426.620188][T15515] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2546'. [ 426.720331][T15516] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2548'. [ 427.464738][T15530] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 427.466696][T15530] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 427.469182][T15530] vhci_hcd vhci_hcd.0: Device attached [ 427.672069][T15531] vhci_hcd: connection closed [ 427.800635][T14443] vhci_hcd: vhci_device speed not set [ 427.804951][ T1173] vhci_hcd: stop threads [ 427.806667][ T1173] vhci_hcd: release socket [ 427.815114][ T1173] vhci_hcd: disconnect device [ 427.861097][T14443] usb 45-1: new full-speed USB device number 9 using vhci_hcd [ 427.864759][T14443] usb 45-1: enqueue for inactive port 0 [ 427.931661][T14443] vhci_hcd: vhci_device speed not set [ 428.176396][T15544] lo speed is unknown, defaulting to 1000 [ 428.844862][T15562] lo: entered promiscuous mode [ 428.960976][T15567] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2560'. [ 429.029246][T15568] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2561'. [ 429.077689][T15561] lo: left promiscuous mode [ 429.186267][T15574] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2563'. [ 429.525975][T15595] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2569'. [ 429.631149][T15601] lo: entered promiscuous mode [ 429.710313][T15602] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2571'. [ 429.787500][T15604] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2572'. [ 429.837476][T15600] lo: left promiscuous mode [ 429.934434][T15618] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 429.940983][T15618] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 430.298753][T15635] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2581'. [ 430.456767][T15645] netlink: 'syz.1.2585': attribute type 4 has an invalid length. [ 430.469436][T15645] __nla_validate_parse: 1 callbacks suppressed [ 430.469468][T15645] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2585'. [ 431.033523][T15654] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2588'. [ 431.051168][T15653] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2588'. [ 431.116791][T15665] sp0: Synchronizing with TNC [ 431.129361][T15664] [U] è [ 431.260397][T15670] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2593'. [ 431.381550][T15680] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2598'. [ 431.400720][T15680] 8021q: adding VLAN 0 to HW filter on device bond2 [ 431.413114][T15680] 8021q: adding VLAN 0 to HW filter on device bond2 [ 431.415525][T15680] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 431.419905][T15680] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 431.559105][T15691] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 431.561095][T15691] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 431.564010][T15691] vhci_hcd vhci_hcd.0: Device attached [ 431.740871][ T5319] vhci_hcd: vhci_device speed not set [ 431.783068][T15697] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2600'. [ 431.801837][ T5319] usb 43-1: new full-speed USB device number 21 using vhci_hcd [ 431.836018][T15692] vhci_hcd: connection reset by peer [ 431.838580][ T1137] vhci_hcd: stop threads [ 431.840311][ T1137] vhci_hcd: release socket [ 431.842394][ T1137] vhci_hcd: disconnect device [ 432.139765][T15714] netfs: Couldn't get user pages (rc=-14) [ 432.381599][T15717] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2607'. [ 432.431969][ T834] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 432.603820][ T834] usb 9-1: Using ep0 maxpacket: 8 [ 432.606870][ T834] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 432.610491][ T834] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 432.619001][ T834] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 432.623700][ T834] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 432.627981][ T834] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 432.633847][ T834] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 432.637502][ T834] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 432.878992][T15740] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2613'. [ 432.896719][ T834] usb 9-1: usb_control_msg returned -32 [ 432.899089][ T834] usbtmc 9-1:16.0: can't read capabilities [ 433.207720][T15714] overlay: ./file1 is not a directory [ 433.584095][T15745] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2617'. [ 433.667416][T15752] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2619'. [ 433.992071][ T1051] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.069889][ T1051] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.126789][T14106] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 434.131866][T14106] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 434.135867][T14106] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 434.138616][T14106] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 434.141487][T14106] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 434.144902][T14106] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 434.166292][ T5296] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 434.168606][ T5296] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 434.171043][ T1051] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.174166][ T5296] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 434.177261][ T5296] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 434.180304][ T5296] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 434.183594][ T5296] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 434.197146][T15762] lo speed is unknown, defaulting to 1000 [ 434.227035][ T1051] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.265246][T15762] chnl_net:caif_netlink_parms(): no params data found [ 434.345142][T15762] bridge0: port 1(bridge_slave_0) entered blocking state [ 434.347378][T15762] bridge0: port 1(bridge_slave_0) entered disabled state [ 434.352252][T15762] bridge_slave_0: entered allmulticast mode [ 434.354609][T15762] bridge_slave_0: entered promiscuous mode [ 434.359521][T15762] bridge0: port 2(bridge_slave_1) entered blocking state [ 434.361756][T15762] bridge0: port 2(bridge_slave_1) entered disabled state [ 434.364230][T15762] bridge_slave_1: entered allmulticast mode [ 434.366414][T15762] bridge_slave_1: entered promiscuous mode [ 434.402201][T15762] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 434.407208][T15762] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 434.410286][ T1051] bridge_slave_1: left allmulticast mode [ 434.412511][ T1051] bridge_slave_1: left promiscuous mode [ 434.415521][ T1051] bridge0: port 2(bridge_slave_1) entered disabled state [ 434.420320][ T1051] bridge_slave_0: left allmulticast mode [ 434.431279][ T1051] bridge_slave_0: left promiscuous mode [ 434.433016][ T1051] bridge0: port 1(bridge_slave_0) entered disabled state [ 434.747081][ T1051] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 434.751788][ T1051] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 434.755376][ T1051] bond0 (unregistering): Released all slaves [ 434.789251][T15762] team0: Port device team_slave_0 added [ 434.793134][T15762] team0: Port device team_slave_1 added [ 434.824514][T15762] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 434.826651][T15762] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 434.835828][T15762] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 434.840607][T15762] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 434.843252][T15762] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 434.850696][T15762] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 434.922851][T15762] hsr_slave_0: entered promiscuous mode [ 434.924913][T15762] hsr_slave_1: entered promiscuous mode [ 434.926861][T15762] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 434.929147][T15762] Cannot create hsr debugfs directory [ 435.080025][ T1051] hsr_slave_0: left promiscuous mode [ 435.084999][ T1051] hsr_slave_1: left promiscuous mode [ 435.087049][ T1051] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 435.089466][ T1051] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 435.093114][ T1051] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 435.095904][ T1051] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 435.126393][ T1051] veth1_macvtap: left promiscuous mode [ 435.128946][ T1051] veth0_macvtap: left promiscuous mode [ 435.130706][ T1051] veth1_vlan: left promiscuous mode [ 435.132979][ T1051] veth0_vlan: left promiscuous mode [ 435.143216][ T6008] usb 9-1: USB disconnect, device number 14 [ 435.783272][T15802] __nla_validate_parse: 1 callbacks suppressed [ 435.783281][T15802] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2631'. [ 435.924200][ T1051] team0 (unregistering): Port device team_slave_1 removed [ 436.015003][ T1051] team0 (unregistering): Port device team_slave_0 removed [ 436.253998][ T5296] Bluetooth: hci1: command tx timeout [ 436.722672][T15807] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2633'. [ 436.772117][T15762] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 436.776265][T15762] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 436.780093][T15762] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 436.795302][T15762] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 436.849693][T15762] 8021q: adding VLAN 0 to HW filter on device bond0 [ 436.874508][T15762] 8021q: adding VLAN 0 to HW filter on device team0 [ 436.883891][ T5319] vhci_hcd: vhci_device speed not set [ 436.899441][ T1180] bridge0: port 1(bridge_slave_0) entered blocking state [ 436.902465][ T1180] bridge0: port 1(bridge_slave_0) entered forwarding state [ 436.923094][ T1180] bridge0: port 2(bridge_slave_1) entered blocking state [ 436.925222][ T1180] bridge0: port 2(bridge_slave_1) entered forwarding state [ 437.021784][T15762] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 437.117035][T15762] veth0_vlan: entered promiscuous mode [ 437.124202][T15762] veth1_vlan: entered promiscuous mode [ 437.125921][T15826] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2635'. [ 437.147176][T15762] veth0_macvtap: entered promiscuous mode [ 437.151201][T15762] veth1_macvtap: entered promiscuous mode [ 437.157973][T15762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 437.162722][T15762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 437.165783][T15762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 437.169063][T15762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 437.172242][T15762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 437.175386][T15762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 437.178531][T15762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 437.181732][T15762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 437.185102][T15762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 437.188841][T15762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 437.192395][T15762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 437.195742][T15762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 437.198585][T15762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 437.201704][T15762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 437.205156][T15762] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 437.209609][T15762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 437.212895][T15762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 437.215833][T15762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 437.218816][T15762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 437.221989][T15762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 437.225055][T15762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 437.227878][T15762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 437.231001][T15762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 437.233826][T15762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 437.236846][T15762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 437.239643][T15762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 437.243127][T15762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 437.246021][T15762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 437.248985][T15762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 437.252542][T15762] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 437.266216][T15762] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.268759][T15762] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.271500][T15762] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.274028][T15762] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.302169][ T1180] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 437.305482][ T1180] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 437.321513][T10765] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 437.323880][T10765] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 438.241217][T15852] input: syz0 as /devices/virtual/input/input90 [ 438.286281][ T39] kauditd_printk_skb: 12 callbacks suppressed [ 438.286291][ T39] audit: type=1326 audit(2000000169.289:378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15855 comm="syz.4.2643" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff3579 code=0x7ffc0000 [ 438.299670][ T39] audit: type=1326 audit(2000000169.299:379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15855 comm="syz.4.2643" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff3579 code=0x7ffc0000 [ 438.310844][ T39] audit: type=1326 audit(2000000169.299:380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15855 comm="syz.4.2643" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7ff3579 code=0x7ffc0000 [ 438.317071][ T39] audit: type=1326 audit(2000000169.299:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15855 comm="syz.4.2643" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff3579 code=0x7ffc0000 [ 438.323923][ T39] audit: type=1326 audit(2000000169.299:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15855 comm="syz.4.2643" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff3579 code=0x7ffc0000 [ 438.330175][ T39] audit: type=1326 audit(2000000169.309:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15855 comm="syz.4.2643" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7ff3579 code=0x7ffc0000 [ 438.336451][ T5296] Bluetooth: hci1: command tx timeout [ 438.341314][ T39] audit: type=1326 audit(2000000169.309:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15855 comm="syz.4.2643" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff3579 code=0x7ffc0000 [ 438.347514][ T39] audit: type=1326 audit(2000000169.309:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15855 comm="syz.4.2643" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff3579 code=0x7ffc0000 [ 438.353917][ T39] audit: type=1326 audit(2000000169.329:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15855 comm="syz.4.2643" exe="/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf7ff3579 code=0x7ffc0000 [ 438.360131][ T39] audit: type=1326 audit(2000000169.329:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15855 comm="syz.4.2643" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff3579 code=0x7ffc0000 [ 438.419708][T15860] netlink: 'syz.4.2644': attribute type 1 has an invalid length. [ 438.422730][T15860] bridge0: port 2(bridge_slave_1) entered disabled state [ 438.425030][T15860] bridge0: port 2(bridge_slave_1) entered blocking state [ 438.427140][T15860] bridge0: port 2(bridge_slave_1) entered forwarding state [ 438.834687][T15872] kernel read not supported for file /rmdF¼ìýŸ‹Z°™C‹Ç²AËT™ûc詨ot4wÈ &¹°Ö'_4ƒ%¼kS¨L¥Q+©5©…u·Î‘aÈOåV9,¯Ñ†éÙ=_¦$¾Ò»IVÑÓ¦ÏÕÒáO>@6u®½­šwù\—-¿ÒGtÄÒ?¬ÇF%x±^àÜØ• [ 449.249713][T16130] dump_stack_lvl+0x16c/0x1f0 [ 449.249756][T16130] should_fail_ex+0x50a/0x650 [ 449.249775][T16130] ? fs_reclaim_acquire+0xae/0x150 [ 449.249791][T16130] should_failslab+0xc2/0x120 [ 449.249803][T16130] kmem_cache_alloc_noprof+0x6e/0x3b0 [ 449.249815][T16130] ? vm_area_dup+0x53/0x300 [ 449.249829][T16130] vm_area_dup+0x53/0x300 [ 449.249841][T16130] __split_vma+0x181/0x1210 [ 449.249852][T16130] ? vma_merge_existing_range+0xaf8/0x2070 [ 449.249864][T16130] ? __pfx___split_vma+0x10/0x10 [ 449.249878][T16130] ? hlock_class+0x4e/0x130 [ 449.249894][T16130] vma_modify.constprop.0+0x1f9/0x3b0 [ 449.249906][T16130] vma_modify_flags_name+0x243/0x300 [ 449.249918][T16130] ? __pfx_vma_modify_flags_name+0x10/0x10 [ 449.249934][T16130] ? hlock_class+0x4e/0x130 [ 449.249947][T16130] ? __lock_acquire+0xcc5/0x3c40 [ 449.249960][T16130] madvise_update_vma+0x14c/0xbb0 [ 449.249974][T16130] ? __pfx_madvise_update_vma+0x10/0x10 [ 449.249994][T16130] madvise_vma_behavior+0x7a2/0x1dd0 [ 449.250013][T16130] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 449.250027][T16130] ? find_vma_prev+0xdb/0x160 [ 449.250036][T16130] ? __pfx_find_vma_prev+0x10/0x10 [ 449.250048][T16130] ? trace_lock_acquire+0x14e/0x1f0 [ 449.250057][T16130] ? ksys_write+0x191/0x250 [ 449.250066][T16130] ? do_madvise+0x207/0x7c0 [ 449.250079][T16130] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 449.250091][T16130] madvise_walk_vmas+0x1cf/0x2c0 [ 449.250104][T16130] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 449.250119][T16130] do_madvise+0x366/0x7c0 [ 449.250133][T16130] ? __pfx_do_madvise+0x10/0x10 [ 449.250149][T16130] ? ksys_write+0x1ba/0x250 [ 449.250158][T16130] ? __pfx_ksys_write+0x10/0x10 [ 449.250169][T16130] __ia32_sys_madvise+0xa7/0x110 [ 449.250182][T16130] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 449.250197][T16130] __do_fast_syscall_32+0x73/0x120 [ 449.250213][T16130] do_fast_syscall_32+0x32/0x80 [ 449.250227][T16130] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 449.250242][T16130] RIP: 0023:0xf7ff3579 [ 449.250249][T16130] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 449.250259][T16130] RSP: 002b:00000000f511655c EFLAGS: 00000296 ORIG_RAX: 00000000000000db [ 449.250268][T16130] RAX: ffffffffffffffda RBX: 0000000020bdc000 RCX: 00000000ff2f4713 [ 449.250273][T16130] RDX: 000000000000000a RSI: 0000000000000000 RDI: 0000000000000000 [ 449.250279][T16130] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 449.250283][T16130] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 449.250289][T16130] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 449.250300][T16130] [ 449.391221][ T35] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 449.550940][ T35] usb 8-1: Using ep0 maxpacket: 8 [ 449.556690][ T35] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 449.559155][ T35] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 449.562659][ T35] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 449.565373][ T35] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 449.568394][ T35] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 449.572325][ T35] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 449.575019][ T35] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 449.788874][ T35] usb 8-1: usb_control_msg returned -32 [ 449.790676][ T35] usbtmc 8-1:16.0: can't read capabilities [ 450.155386][T16146] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2719'. [ 450.188497][T16127] overlay: ./file1 is not a directory [ 450.308525][ T39] kauditd_printk_skb: 61 callbacks suppressed [ 450.308536][ T39] audit: type=1326 audit(2000000181.309:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16147 comm="syz.4.2720" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7ff3579 code=0x0 [ 450.543001][T16155] input: syz0 as /devices/virtual/input/input94 [ 451.047394][T16172] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2726'. [ 451.169328][T16180] 9pnet_fd: Insufficient options for proto=fd [ 451.202113][T16183] fuse: Bad value for 'fd' [ 451.578634][T16191] netlink: 2036 bytes leftover after parsing attributes in process `syz.4.2733'. [ 451.581887][T16191] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2733'. [ 451.630985][T16194] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2732'. [ 452.065428][T16198] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2734'. [ 452.105758][ T9] usb 8-1: USB disconnect, device number 13 [ 452.428437][T16207] tipc: Started in network mode [ 452.430386][T16207] tipc: Node identity be75bb6816a7, cluster identity 4711 [ 452.433506][T16207] tipc: Enabled bearer , priority 0 [ 452.441020][T16206] tipc: Resetting bearer [ 453.450480][ T6008] tipc: Node number set to 2832382824 [ 453.746263][T16206] tipc: Disabling bearer [ 453.749713][T16210] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2739'. [ 453.760896][T15080] vhci_hcd: vhci_device speed not set [ 454.422758][T15038] usb 8-1: new low-speed USB device number 14 using dummy_hcd [ 454.572026][T15038] usb 8-1: config 0 has an invalid interface number: 55 but max is 0 [ 454.574413][T15038] usb 8-1: config 0 has no interface number 0 [ 454.576205][T15038] usb 8-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 454.579465][T15038] usb 8-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 454.582927][T15038] usb 8-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 454.586300][T15038] usb 8-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 454.589486][T15038] usb 8-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 454.592790][T15038] usb 8-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 454.596534][T15038] usb 8-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 454.599174][T15038] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 454.602844][T15038] usb 8-1: config 0 descriptor?? [ 454.604788][T16222] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 454.606936][T16222] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 454.610151][T15038] ldusb 8-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 454.647323][T16252] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2750'. [ 454.870635][ T5988] usb 8-1: USB disconnect, device number 14 [ 454.879498][T16222] ata1.00: invalid multi_count 1 ignored [ 454.881306][ T5988] ldusb 8-1:0.55: LD USB Device #0 now disconnected [ 454.992413][T16265] random: crng reseeded on system resumption [ 455.252536][T16278] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2752'. [ 455.460549][T16284] netlink: 'syz.3.2758': attribute type 4 has an invalid length. [ 455.856531][T16297] netlink: 728 bytes leftover after parsing attributes in process `syz.7.2762'. [ 456.043887][T16299] overlayfs: overlapping lowerdir path [ 456.168998][T16308] wireguard0: entered promiscuous mode [ 456.174744][T16308] wireguard0: entered allmulticast mode [ 456.507359][T16320] lo speed is unknown, defaulting to 1000 [ 456.726024][T16326] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2769'. [ 458.349002][T16350] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2774'. [ 459.326229][T16366] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2777'. [ 460.306419][T16388] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2784'. [ 460.814036][T16393] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2786'. [ 462.058370][T16400] veth1_macvtap: left promiscuous mode [ 462.248880][T16400] lo speed is unknown, defaulting to 1000 [ 462.957089][T16431] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2796'. [ 463.150648][T16435] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2797'. [ 463.428142][T16439] netlink: 6 bytes leftover after parsing attributes in process `syz.1.2799'. [ 463.509770][T16443] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2798'. [ 463.698724][T16451] ptm ptm7: ldisc open failed (-12), clearing slot 7 [ 463.764376][T16456] lo speed is unknown, defaulting to 1000 [ 463.822334][T16456] macvlan0: entered allmulticast mode [ 463.854189][T16463] netlink: 'syz.4.2805': attribute type 1 has an invalid length. [ 463.865892][T16463] bond2: entered promiscuous mode [ 463.867653][T16463] 8021q: adding VLAN 0 to HW filter on device bond2 [ 463.875058][T16463] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2805'. [ 464.006578][T16463] bond2 (unregistering): Released all slaves [ 464.021022][T16470] ref_ctr_offset mismatch. inode: 0x278 offset: 0x7 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x0 [ 464.349321][T16479] program syz.3.2810 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 464.372529][T16480] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2808'. [ 464.689000][T16496] No buffer was provided with the request [ 464.932968][T16502] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2814'. [ 465.801750][T16521] Cannot find set identified by id 0 to match [ 465.937660][T16529] veth1_macvtap: left promiscuous mode [ 466.020915][ T5992] usb 8-1: new full-speed USB device number 15 using dummy_hcd [ 466.107170][ T39] audit: type=1326 audit(2000000197.109:483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16527 comm="syz.1.2825" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f42579 code=0x0 [ 466.142861][T16532] lo speed is unknown, defaulting to 1000 [ 466.193726][ T5992] usb 8-1: config 1 interface 0 altsetting 5 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 466.200564][ T5992] usb 8-1: config 1 interface 0 altsetting 5 endpoint 0x82 has invalid maxpacket 536, setting to 64 [ 466.204669][ T5992] usb 8-1: config 1 interface 0 altsetting 5 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 466.208750][ T5992] usb 8-1: config 1 interface 0 has no altsetting 0 [ 466.217748][ T5992] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 466.220562][ T5992] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 466.223410][ T5992] usb 8-1: Product: syz [ 466.224816][ T5992] usb 8-1: Manufacturer: syz [ 466.231263][ T5992] usb 8-1: SerialNumber: syz [ 466.241521][T16519] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 466.243989][T16519] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 466.246413][T16519] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 466.502592][ T5992] cdc_ether 8-1:1.0: probe with driver cdc_ether failed with error -22 [ 466.507628][ T5992] usb 8-1: USB disconnect, device number 15 [ 466.843417][ T39] audit: type=1326 audit(2000000197.849:484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16545 comm="syz.4.2830" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff3579 code=0x7ffc0000 [ 466.849727][ T39] audit: type=1326 audit(2000000197.849:485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16545 comm="syz.4.2830" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff3579 code=0x7ffc0000 [ 466.857062][ T39] audit: type=1326 audit(2000000197.849:486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16545 comm="syz.4.2830" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7ff3579 code=0x7ffc0000 [ 466.863570][ T39] audit: type=1326 audit(2000000197.849:487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16545 comm="syz.4.2830" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff3579 code=0x7ffc0000 [ 466.869673][ T39] audit: type=1326 audit(2000000197.849:488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16545 comm="syz.4.2830" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff3579 code=0x7ffc0000 [ 466.877681][ T39] audit: type=1326 audit(2000000197.849:489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16545 comm="syz.4.2830" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7ff3579 code=0x7ffc0000 [ 466.884220][ T39] audit: type=1326 audit(2000000197.849:490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16545 comm="syz.4.2830" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff3579 code=0x7ffc0000 [ 466.890316][ T39] audit: type=1326 audit(2000000197.849:491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16545 comm="syz.4.2830" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff3579 code=0x7ffc0000 [ 466.896729][ T39] audit: type=1326 audit(2000000197.849:492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16545 comm="syz.4.2830" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7ff3579 code=0x7ffc0000 [ 466.936870][T16556] vivid-007: disconnect [ 467.174104][T16571] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2836'. [ 467.295278][T16574] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2833'. [ 467.584365][T16577] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2838'. [ 467.773897][T16555] vivid-007: reconnect [ 467.932236][T16594] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2841'. [ 468.109968][T16599] netlink: 'syz.3.2843': attribute type 10 has an invalid length. [ 468.115652][T16599] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 468.243157][T16606] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2845'. [ 468.252749][T16606] fuse: Bad value for 'fd' [ 469.073500][T16627] serio: Serial port ptm0 [ 470.134231][T16662] tipc: Started in network mode [ 470.135933][T16662] tipc: Node identity 5e5dffffffffffff93, cluster identity 4711 [ 470.288232][T16666] 9pnet_fd: Insufficient options for proto=fd [ 470.311618][T16669] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2864'. [ 470.318506][T16669] macsec1: entered allmulticast mode [ 470.320104][T16669] macvlan0: entered allmulticast mode [ 470.322315][T16669] veth1_vlan: entered allmulticast mode [ 470.919077][T16684] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2868'. [ 471.082821][ T5296] Bluetooth: hci1: unexpected event for opcode 0x0c7b [ 471.413190][T16697] Process accounting resumed [ 471.650458][T16701] 9pnet_fd: Insufficient options for proto=fd [ 471.655067][T16701] 9pnet_fd: Insufficient options for proto=fd [ 471.656980][T16701] 9pnet_fd: Insufficient options for proto=fd [ 471.658950][T16701] 9pnet_fd: Insufficient options for proto=fd [ 471.660908][T16701] 9pnet_fd: Insufficient options for proto=fd [ 471.662805][T16701] 9pnet_fd: Insufficient options for proto=fd [ 471.664678][T16701] 9pnet_fd: Insufficient options for proto=fd [ 471.666648][T16701] 9pnet_fd: Insufficient options for proto=fd [ 471.668568][T16701] 9pnet_fd: Insufficient options for proto=fd [ 471.670573][T16701] 9pnet_fd: Insufficient options for proto=fd [ 471.673635][T16701] 9pnet_fd: Insufficient options for proto=fd [ 471.676373][T16701] 9pnet_fd: Insufficient options for proto=fd [ 471.679077][T16701] 9pnet_fd: Insufficient options for proto=fd [ 471.681983][T16701] 9pnet_fd: Insufficient options for proto=fd [ 471.684654][T16701] 9pnet_fd: Insufficient options for proto=fd [ 471.687582][T16701] 9pnet_fd: Insufficient options for proto=fd [ 471.690296][T16701] 9pnet_fd: Insufficient options for proto=fd [ 471.693795][T16701] 9pnet_fd: Insufficient options for proto=fd [ 471.696482][T16701] 9pnet_fd: Insufficient options for proto=fd [ 471.699147][T16701] 9pnet_fd: Insufficient options for proto=fd [ 471.701952][T16701] 9pnet_fd: Insufficient options for proto=fd [ 471.704602][T16701] 9pnet_fd: Insufficient options for proto=fd [ 471.707574][T16701] 9pnet_fd: Insufficient options for proto=fd [ 471.710302][T16701] 9pnet_fd: Insufficient options for proto=fd [ 471.713144][T16701] 9pnet_fd: Insufficient options for proto=fd [ 471.715944][T16701] 9pnet_fd: Insufficient options for proto=fd [ 471.718805][T16701] 9pnet_fd: Insufficient options for proto=fd [ 471.721507][T16701] 9pnet_fd: Insufficient options for proto=fd [ 471.723474][T16701] 9pnet_fd: Insufficient options for proto=fd [ 471.725449][T16701] 9pnet_fd: Insufficient options for proto=fd [ 471.727408][T16701] 9pnet_fd: Insufficient options for proto=fd [ 471.729359][T16701] 9pnet_fd: Insufficient options for proto=fd [ 471.731345][T16701] 9pnet_fd: Insufficient options for proto=fd [ 472.371923][T16712] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2874'. [ 472.743974][T16722] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2878'. [ 473.462212][T16737] ipt_ECN: cannot use operation on non-tcp rule [ 473.474815][T16737] netlink: 'syz.7.2883': attribute type 4 has an invalid length. [ 473.765535][T16744] Process accounting resumed [ 474.227316][T16758] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2888'. [ 474.397680][T16761] overlayfs: failed to resolve './file1': -2 [ 474.891108][T16777] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2893'. [ 475.142881][ T5296] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 475.145673][ T5296] Bluetooth: hci1: Injecting HCI hardware error event [ 475.148906][ T5296] Bluetooth: hci1: hardware error 0x00 [ 476.475966][T14106] Bluetooth: hci1: unexpected event for opcode 0x0c05 [ 476.704514][T16816] netlink: 64 bytes leftover after parsing attributes in process `syz.7.2904'. [ 476.938554][T16823] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 477.211026][ T5296] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 477.800499][T16833] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2907'. [ 479.310327][ T39] kauditd_printk_skb: 29 callbacks suppressed [ 479.310336][ T39] audit: type=1326 audit(2000000210.309:522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16870 comm="syz.1.2917" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f42579 code=0x7ffc0000 [ 479.318482][ T39] audit: type=1326 audit(2000000210.309:523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16870 comm="syz.1.2917" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f42579 code=0x7ffc0000 [ 479.324670][ T39] audit: type=1326 audit(2000000210.309:524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16870 comm="syz.1.2917" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f42579 code=0x7ffc0000 [ 479.330865][ T39] audit: type=1326 audit(2000000210.309:525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16870 comm="syz.1.2917" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f42579 code=0x7ffc0000 [ 479.337089][ T39] audit: type=1326 audit(2000000210.319:526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16870 comm="syz.1.2917" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f42579 code=0x7ffc0000 [ 479.343356][ T39] audit: type=1326 audit(2000000210.319:527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16870 comm="syz.1.2917" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f42579 code=0x7ffc0000 [ 479.349436][ T39] audit: type=1326 audit(2000000210.319:528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16870 comm="syz.1.2917" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f42579 code=0x7ffc0000 [ 479.355640][ T39] audit: type=1326 audit(2000000210.319:529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16870 comm="syz.1.2917" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f42579 code=0x7ffc0000 [ 479.361876][ T39] audit: type=1326 audit(2000000210.319:530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16870 comm="syz.1.2917" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f42579 code=0x7ffc0000 [ 479.367938][ T39] audit: type=1326 audit(2000000210.319:531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16870 comm="syz.1.2917" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f42579 code=0x7ffc0000 [ 479.431360][ T5988] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 479.600961][ T5988] usb 8-1: Using ep0 maxpacket: 8 [ 479.603726][ T5988] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 479.606653][ T5988] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 479.609238][ T5988] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 479.612774][ T5988] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 479.616039][ T5988] usb 8-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 479.618628][ T5988] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 479.622923][ T5988] hub 8-1:1.0: bad descriptor, ignoring hub [ 479.624660][ T5988] hub 8-1:1.0: probe with driver hub failed with error -5 [ 479.627045][ T5988] cdc_wdm 8-1:1.0: skipping garbage [ 479.628585][ T5988] cdc_wdm 8-1:1.0: skipping garbage [ 479.630454][ T5988] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 479.632898][ T5988] cdc_wdm 8-1:1.0: Unknown control protocol [ 479.697567][T16883] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2919'. [ 479.931866][T15080] usb 8-1: USB disconnect, device number 16 [ 480.125166][T16886] overlayfs: missing 'workdir' [ 480.325642][T15080] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 480.385174][T16897] 9pnet_virtio: no channels available for device syz [ 480.730952][T15080] usb 8-1: Using ep0 maxpacket: 8 [ 480.734155][T15080] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 480.737082][T15080] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 480.739642][T15080] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 480.743829][T15080] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 480.748005][T15080] usb 8-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 480.750646][T15080] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 480.754891][T15080] hub 8-1:1.0: bad descriptor, ignoring hub [ 480.756640][T15080] hub 8-1:1.0: probe with driver hub failed with error -5 [ 480.758845][T15080] cdc_wdm 8-1:1.0: skipping garbage [ 480.760363][T15080] cdc_wdm 8-1:1.0: skipping garbage [ 480.763087][T15080] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 480.764924][T15080] cdc_wdm 8-1:1.0: Unknown control protocol [ 480.958451][T16864] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 480.962801][T16864] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 481.069687][T16923] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2928'. [ 482.349068][T16949] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2933'. [ 482.542958][ T30] usb 8-1: USB disconnect, device number 17 [ 482.678408][T16954] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 482.787699][T16963] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 482.789672][T16963] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 482.796276][T16963] vhci_hcd vhci_hcd.0: Device attached [ 482.971006][ T9] vhci_hcd: vhci_device speed not set [ 483.273344][ T9] usb 39-1: new full-speed USB device number 21 using vhci_hcd [ 483.641913][T16964] vhci_hcd: connection reset by peer [ 483.644111][ T1137] vhci_hcd: stop threads [ 483.645816][ T1137] vhci_hcd: release socket [ 483.650901][ T1137] vhci_hcd: disconnect device [ 484.106528][T17002] input: syz0 as /devices/virtual/input/input95 [ 484.429744][T17017] program syz.1.2956 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 484.633875][T17025] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 484.635806][T17025] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 484.638230][T17025] vhci_hcd vhci_hcd.0: Device attached [ 485.523760][T17044] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 485.526490][T17044] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 485.529624][T17044] vhci_hcd vhci_hcd.0: Device attached [ 485.946112][ T5988] vhci_hcd: vhci_device speed not set [ 486.000901][ T5988] usb 45-1: new full-speed USB device number 11 using vhci_hcd [ 486.024043][ T8556] kernel write not supported for file [eventfd] (pid: 8556 comm: kworker/2:4) [ 486.192591][T17027] vhci_hcd: connection closed [ 486.192938][ T1173] vhci_hcd: stop threads [ 486.196678][ T1173] vhci_hcd: release socket [ 486.198597][ T1173] vhci_hcd: disconnect device [ 486.358372][T17043] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 486.368864][T17045] vhci_hcd: connection reset by peer [ 486.373744][ T1180] vhci_hcd: stop threads [ 486.375061][ T1180] vhci_hcd: release socket [ 486.376554][ T1180] vhci_hcd: disconnect device [ 486.435353][T17068] xt_CT: You must specify a L4 protocol and not use inversions on it [ 486.629642][T17079] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2973'. [ 486.817610][ T39] kauditd_printk_skb: 37 callbacks suppressed [ 486.817621][ T39] audit: type=1804 audit(2000000217.819:569): pid=17082 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.2974" name="/newroot/132/bus/file0" dev="overlay" ino=723 res=1 errno=0 [ 486.825521][ T39] audit: type=1804 audit(2000000217.819:570): pid=17084 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.2974" name="/newroot/132/bus/file0" dev="overlay" ino=723 res=1 errno=0 [ 487.381762][ T30] kernel write not supported for file [eventfd] (pid: 30 comm: kworker/1:0) [ 487.652132][T17122] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2984'. [ 487.692747][T17118] netlink: 48 bytes leftover after parsing attributes in process `syz.7.2985'. [ 487.852873][T17128] overlayfs: failed to resolve './file0': -2 [ 488.400952][ T9] vhci_hcd: vhci_device speed not set [ 488.587120][T17167] netlink: 'syz.3.2997': attribute type 10 has an invalid length. [ 488.592848][T17164] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2996'. [ 488.596922][T17167] 8021q: adding VLAN 0 to HW filter on device team0 [ 488.599838][T17167] bond0: (slave team0): Enslaving as an active interface with an up link [ 488.779768][T17182] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3002'. [ 488.782898][T17182] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3002'. [ 488.785732][T17182] IPVS: set_ctl: invalid protocol: 2 172.30.0.2:20002 [ 488.876185][T17174] input: syz0 as /devices/virtual/input/input96 [ 489.223937][T17196] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3008'. [ 489.271951][T17205] macvlan0: entered allmulticast mode [ 489.273556][T17205] veth1_vlan: entered allmulticast mode [ 489.275919][T17202] macvlan0: left allmulticast mode [ 489.277460][T17202] veth1_vlan: left allmulticast mode [ 490.085364][T17230] cgroup2: Unknown parameter 'pids_localewents' [ 490.092969][T17230] syz.1.3015: attempt to access beyond end of device [ 490.092969][T17230] nbd1: rw=0, sector=64, nr_sectors = 2 limit=0 [ 490.097760][T17230] syz.1.3015: attempt to access beyond end of device [ 490.097760][T17230] nbd1: rw=0, sector=512, nr_sectors = 2 limit=0 [ 490.102139][T17230] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 490.105576][T17230] syz.1.3015: attempt to access beyond end of device [ 490.105576][T17230] nbd1: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 490.109281][T17230] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 490.113568][T17230] syz.1.3015: attempt to access beyond end of device [ 490.113568][T17230] nbd1: rw=0, sector=64, nr_sectors = 4 limit=0 [ 490.117303][T17230] syz.1.3015: attempt to access beyond end of device [ 490.117303][T17230] nbd1: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 490.121649][T17230] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 490.124397][T17230] syz.1.3015: attempt to access beyond end of device [ 490.124397][T17230] nbd1: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 490.127941][T17230] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 490.130687][T17230] syz.1.3015: attempt to access beyond end of device [ 490.130687][T17230] nbd1: rw=0, sector=64, nr_sectors = 8 limit=0 [ 490.134360][T17230] syz.1.3015: attempt to access beyond end of device [ 490.134360][T17230] nbd1: rw=0, sector=2048, nr_sectors = 8 limit=0 [ 490.137928][T17230] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 490.140712][T17230] syz.1.3015: attempt to access beyond end of device [ 490.140712][T17230] nbd1: rw=0, sector=4096, nr_sectors = 8 limit=0 [ 490.144389][T17230] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 490.147290][T17230] UDF-fs: warning (device nbd1): udf_fill_super: No partition found (1) [ 490.227041][T17237] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3019'. [ 490.308462][T17243] netlink: 'syz.7.3021': attribute type 1 has an invalid length. [ 490.313254][T17243] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3021'. [ 490.545540][T17266] Bluetooth: MGMT ver 1.23 [ 490.734520][T17278] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3031'. [ 491.044315][ T834] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 491.120905][ T5988] vhci_hcd: vhci_device speed not set [ 491.201053][ T834] usb 6-1: Using ep0 maxpacket: 8 [ 491.206751][ T834] usb 6-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 491.210978][ T834] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 491.214435][ T834] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 492.465572][T17317] input: syz0 as /devices/virtual/input/input97 [ 492.749112][T17326] pty pty29: ldisc open failed (-12), clearing slot 29 [ 493.992980][ T6008] usb 6-1: USB disconnect, device number 26 [ 494.257683][T17347] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3047'. [ 495.483123][T14106] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 495.488172][T14106] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 495.492979][T14106] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 495.502209][T14106] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 495.505870][T14106] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 495.514367][T14106] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 495.558051][ T1051] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 495.560989][T17376] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3056'. [ 495.564181][T17376] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3056'. [ 495.578384][T17381] lo speed is unknown, defaulting to 1000 [ 495.663339][ T1051] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 495.676931][T17381] chnl_net:caif_netlink_parms(): no params data found [ 495.771801][ T1051] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 495.809172][T17381] bridge0: port 1(bridge_slave_0) entered blocking state [ 495.813181][T17381] bridge0: port 1(bridge_slave_0) entered disabled state [ 495.815386][T17381] bridge_slave_0: entered allmulticast mode [ 495.817688][T17381] bridge_slave_0: entered promiscuous mode [ 495.847974][ T1051] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 495.854469][T17381] bridge0: port 2(bridge_slave_1) entered blocking state [ 495.856731][T17381] bridge0: port 2(bridge_slave_1) entered disabled state [ 495.859777][T17381] bridge_slave_1: entered allmulticast mode [ 495.863499][T17381] bridge_slave_1: entered promiscuous mode [ 495.895776][T17381] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 495.899810][T17381] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 495.937648][T17381] team0: Port device team_slave_0 added [ 495.944636][T17381] team0: Port device team_slave_1 added [ 495.977675][T17381] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 495.979853][T17381] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 495.990434][T17381] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 495.997161][T17381] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 495.999900][T17381] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 496.010568][T17381] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 496.052161][T17381] hsr_slave_0: entered promiscuous mode [ 496.054758][T17381] hsr_slave_1: entered promiscuous mode [ 496.057196][T17381] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 496.059948][T17381] Cannot create hsr debugfs directory [ 496.118864][ T1051] bridge_slave_1: left allmulticast mode [ 496.120892][ T1051] bridge_slave_1: left promiscuous mode [ 496.122618][ T1051] bridge0: port 2(bridge_slave_1) entered disabled state [ 496.126828][ T1051] bridge_slave_0: left allmulticast mode [ 496.128486][ T1051] bridge_slave_0: left promiscuous mode [ 496.130134][ T1051] bridge0: port 1(bridge_slave_0) entered disabled state [ 496.564573][ T1051] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 496.570387][ T1051] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 496.576185][ T1051] bond0 (unregistering): Released all slaves [ 496.681121][ T1051] bond1 (unregistering): Released all slaves [ 496.685557][ T1051] bond2 (unregistering): Released all slaves [ 496.813924][T17410] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3061'. [ 496.825569][T17415] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3064'. [ 496.829446][T17415] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3064'. [ 497.073084][ T1051] hsr_slave_0: left promiscuous mode [ 497.074959][ T1051] hsr_slave_1: left promiscuous mode [ 497.076697][ T1051] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 497.078788][ T1051] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 497.084494][ T1051] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 497.090747][ T1051] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 497.118054][ T1051] veth0_macvtap: left promiscuous mode [ 497.119739][ T1051] veth1_vlan: left promiscuous mode [ 497.121617][ T1051] veth0_vlan: left promiscuous mode [ 497.295827][ T1051] macvlan0 (unregistering): left allmulticast mode [ 497.531028][ T5296] Bluetooth: hci3: command tx timeout [ 497.780430][T17423] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3066'. [ 497.783183][T17423] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3066'. [ 497.888570][ T1051] team0 (unregistering): Port device team_slave_1 removed [ 497.987857][ T1051] team0 (unregistering): Port device team_slave_0 removed [ 498.046552][T17429] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3067'. [ 498.693816][ T9] lo speed is unknown, defaulting to 1000 [ 498.828349][T17381] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 498.837702][T17381] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 498.857660][T17381] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 498.866287][T17381] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 498.946453][T17381] 8021q: adding VLAN 0 to HW filter on device bond0 [ 498.953041][T17381] 8021q: adding VLAN 0 to HW filter on device team0 [ 498.958658][ T1137] bridge0: port 1(bridge_slave_0) entered blocking state [ 498.960869][ T1137] bridge0: port 1(bridge_slave_0) entered forwarding state [ 498.973482][T10765] bridge0: port 2(bridge_slave_1) entered blocking state [ 498.975636][T10765] bridge0: port 2(bridge_slave_1) entered forwarding state [ 498.998898][T17381] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 499.002073][T17381] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 499.035377][ T1051] IPVS: stop unused estimator thread 0... [ 499.163072][T17381] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 499.348120][T17381] veth0_vlan: entered promiscuous mode [ 499.355864][T17381] veth1_vlan: entered promiscuous mode [ 499.368715][T17381] veth0_macvtap: entered promiscuous mode [ 499.375120][T17381] veth1_macvtap: entered promiscuous mode [ 499.381890][T17381] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 499.389459][T17381] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 499.393342][T17381] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 499.396406][T17381] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 499.399266][T17381] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 499.406737][T17381] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 499.409583][T17381] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 499.413259][T17381] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 499.416665][T17381] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 499.420593][T17381] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 499.430320][T17381] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 499.434257][T17381] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 499.437908][T17381] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 499.444385][T17381] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 499.449036][T17381] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 499.459064][T17381] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 499.462238][T17381] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 499.465119][T17381] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 499.468091][T17381] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 499.470924][T17381] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 499.473823][T17381] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 499.476710][T17381] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 499.479734][T17381] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 499.483163][T17381] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 499.486330][T17381] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 499.489206][T17381] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 499.492136][T17381] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 499.494925][T17381] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 499.498076][T17381] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 499.502226][T17381] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 499.507201][T17381] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 499.509804][T17381] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 499.512686][T17381] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 499.515256][T17381] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 499.558504][ T7116] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 499.565027][ T7116] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 499.580363][ T1180] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 499.583377][ T1180] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 499.611494][ T5296] Bluetooth: hci3: command tx timeout [ 500.068865][T17472] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3075'. [ 500.071629][T17472] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3075'. [ 500.152424][T17494] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3080'. [ 500.893416][ T1414] ieee802154 phy0 wpan0: encryption failed: -22 [ 500.895908][ T1414] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.088139][T17507] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3085'. [ 501.090997][T17507] veth1_vlan: left allmulticast mode [ 501.095445][T17507] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3085'. [ 501.137718][T17513] netlink: 'syz.7.3087': attribute type 8 has an invalid length. [ 501.140127][T17512] netlink: 'syz.7.3087': attribute type 2 has an invalid length. [ 501.302864][T17525] veth1_to_bridge: entered promiscuous mode [ 501.361952][T17522] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3089'. [ 501.364448][T17522] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3089'. [ 501.480748][T17537] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3095'. [ 501.485121][T17537] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3095'. [ 501.504461][T17539] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 501.519017][T17541] bridge0: port 2(bridge_slave_1) entered disabled state [ 501.521494][T17541] bridge0: port 1(bridge_slave_0) entered disabled state [ 501.530422][T17541] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 501.691031][ T5296] Bluetooth: hci3: command tx timeout [ 501.874819][T17547] input: syz0 as /devices/virtual/input/input98 [ 502.710546][T17565] can0: slcan on ttyS3. [ 503.053229][T17569] (unnamed net_device) (uninitialized): peer notification delay (512) is not a multiple of miimon (5), value rounded to 510 ms [ 503.165410][T17560] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000001: 0000 [#1] PREEMPT SMP KASAN NOPTI [ 503.168834][T17560] KASAN: null-ptr-deref in range [0x0000000000000008-0x000000000000000f] [ 503.172074][T17560] CPU: 0 UID: 0 PID: 17560 Comm: syz.3.3101 Not tainted 6.13.0-syzkaller-09760-g69e858e0b8b2 #0 [ 503.176577][T17560] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 503.180442][T17560] RIP: 0010:iter_file_splice_write+0xa2d/0x10b0 [ 503.182074][T17560] Code: 00 48 89 fa 48 c1 ea 03 80 3c 1a 00 0f 85 b1 04 00 00 4d 8b 65 10 49 c7 45 10 00 00 00 00 49 8d 7c 24 08 48 89 fa 48 c1 ea 03 <80> 3c 1a 00 0f 85 1a 05 00 00 49 8b 54 24 08 4c 89 ee 4c 89 ff 83 [ 503.188250][T17560] RSP: 0018:ffffc90003167928 EFLAGS: 00010202 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 503.190543][T17560] RAX: 0000000000080000 RBX: dffffc0000000000 RCX: ffffc9002d60a000 [ 503.193240][T17560] RDX: 0000000000000001 RSI: ffffffff823d8a35 RDI: 0000000000000008 [ 503.195953][T17560] RBP: 000000000000034f R08: 0000000000000006 R09: 0000000000000000 [ 503.198759][T17560] R10: 7fffffffffffefff R11: 0000000000000000 R12: 0000000000000000 [ 503.201507][T17560] R13: ffff88806a378258 R14: 7fffffffffffefff R15: ffff8880772dbc00 [ 503.204241][T17560] FS: 0000000000000000(0000) GS:ffff88802b400000(0063) knlGS:00000000f5106b40 [ 503.207095][T17560] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 503.208912][T17560] CR2: 00000000f5004da4 CR3: 00000000134f8000 CR4: 0000000000352ef0 [ 503.211567][T17560] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 503.213896][T17560] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 503.216245][T17560] Call Trace: [ 503.217596][T17560] [ 503.218735][T17560] ? die_addr+0x3b/0xa0 [ 503.219933][T17560] ? exc_general_protection+0x155/0x230 [ 503.221779][T17560] ? asm_exc_general_protection+0x26/0x30 [ 503.223675][T17560] ? iter_file_splice_write+0x9f5/0x10b0 [ 503.225338][T17560] ? iter_file_splice_write+0xa2d/0x10b0 [ 503.227022][T17560] ? iter_file_splice_write+0x9f5/0x10b0 [ 503.229079][T17560] ? __pfx_iter_file_splice_write+0x10/0x10 [ 503.231223][T17560] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 503.232887][T17560] ? splice_direct_to_actor+0x346/0xa40 [ 503.234391][T17560] ? __pfx_iter_file_splice_write+0x10/0x10 [ 503.236094][T17560] direct_splice_actor+0x18f/0x6c0 [ 503.237568][T17560] splice_direct_to_actor+0x346/0xa40 [ 503.239019][T17560] ? __pfx_direct_splice_actor+0x10/0x10 [ 503.240534][T17560] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 503.242249][T17560] ? __fget_files+0x1fc/0x3a0 [ 503.243536][T17560] do_splice_direct+0x178/0x250 [ 503.244980][T17560] ? __pfx_do_splice_direct+0x10/0x10 [ 503.246474][T17560] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 503.248352][T17560] ? rw_verify_area+0xcf/0x680 [ 503.250201][T17560] do_sendfile+0xafb/0xe40 [ 503.251815][T17560] ? __pfx_do_sendfile+0x10/0x10 [ 503.253637][T17560] ? __ia32_sys_futex_time32+0x1da/0x460 [ 503.255350][T17560] ? __ia32_sys_futex_time32+0x2fd/0x460 [ 503.256865][T17560] __ia32_compat_sys_sendfile+0x1e7/0x230 [ 503.258387][T17560] ? __pfx___ia32_compat_sys_sendfile+0x10/0x10 [ 503.260053][T17560] __do_fast_syscall_32+0x73/0x120 [ 503.261578][T17560] do_fast_syscall_32+0x32/0x80 [ 503.262856][T17560] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 503.264546][T17560] RIP: 0023:0xf7fe1579 [ 503.265617][T17560] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 503.270680][T17560] RSP: 002b:00000000f510655c EFLAGS: 00000296 ORIG_RAX: 00000000000000bb [ 503.272867][T17560] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000005 [ 503.274967][T17560] RDX: 0000000000000000 RSI: 000000007ffff000 RDI: 0000000000000000 [ 503.277080][T17560] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 503.279173][T17560] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 503.281311][T17560] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 503.283346][T17560] [ 503.284165][T17560] Modules linked in: [ 503.285544][T17560] ---[ end trace 0000000000000000 ]--- [ 503.302831][T17560] RIP: 0010:iter_file_splice_write+0xa2d/0x10b0 [ 503.306062][T17560] Code: 00 48 89 fa 48 c1 ea 03 80 3c 1a 00 0f 85 b1 04 00 00 4d 8b 65 10 49 c7 45 10 00 00 00 00 49 8d 7c 24 08 48 89 fa 48 c1 ea 03 <80> 3c 1a 00 0f 85 1a 05 00 00 49 8b 54 24 08 4c 89 ee 4c 89 ff 83 [ 503.311758][T17560] RSP: 0018:ffffc90003167928 EFLAGS: 00010202 [ 503.314100][T17560] RAX: 0000000000080000 RBX: dffffc0000000000 RCX: ffffc9002d60a000 [ 503.317028][T17560] RDX: 0000000000000001 RSI: ffffffff823d8a35 RDI: 0000000000000008 [ 503.319334][T17560] RBP: 000000000000034f R08: 0000000000000006 R09: 0000000000000000 [ 503.323310][T17560] R10: 7fffffffffffefff R11: 0000000000000000 R12: 0000000000000000 [ 503.325368][T17560] R13: ffff88806a378258 R14: 7fffffffffffefff R15: ffff8880772dbc00 [ 503.327441][T17560] FS: 0000000000000000(0000) GS:ffff88802b400000(0063) knlGS:00000000f5106b40 [ 503.329874][T17560] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 503.332823][T17560] CR2: 00007fce86b8afbc CR3: 00000000134f8000 CR4: 0000000000352ef0 [ 503.335517][T17560] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 503.337839][T17560] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 503.340231][T17560] Kernel panic - not syncing: Fatal exception [ 503.342730][T17560] Kernel Offset: disabled [ 503.343859][T17560] Rebooting in 86400 seconds.. VM DIAGNOSIS: 06:21:08 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000030 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff853824b5 RDI=ffffffff9aacfea0 RBP=ffffffff9aacfe60 RSP=ffffc90003167320 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=000000004153414b R12=0000000000000000 R13=0000000000000030 R14=ffffffff9aacfe60 R15=0000000000000000 RIP=ffffffff853824df RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802b400000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f5004da4 CR3=00000000134f8000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000005000000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000b93974 RBX=0000000000000001 RCX=ffffffff8b463e39 RDX=ffffed10056a6f7e RSI=ffffffff8bd2c300 RDI=ffffffff818ff929 RBP=ffffed1003ad5910 RSP=ffffc9000047fe08 R8 =0000000000000000 R9 =ffffed10056a6f7d R10=ffff88802b537beb R11=0000000000000000 R12=0000000000000001 R13=ffff88801d6ac880 R14=ffffffff905fc510 R15=0000000000000000 RIP=ffffffff8b46521f RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b500000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000000c2aec73 CR3=000000001dd8e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000005000000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=0000000000000003 RCX=ffffffff84c2b833 RDX=ffff88801f972440 RSI=0000000000000040 RDI=0000000000000001 RBP=ffffffff8bd31300 RSP=ffffc900031372d8 R8 =0000000000000001 R9 =0000000000000040 R10=0000000000000020 R11=0000000000000012 R12=0000000000000020 R13=0000000000000001 R14=0000000000000003 R15=0000000000000020 RIP=ffffffff81b8d511 RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f218d1c8d00 ffffffff 00c00000 GS =0000 ffff88802b600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000055b8ed6b9000 CR3=000000004bab0000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008082082 Opmask01=0000000000000000 Opmask02=00000000dfff7fff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 554245440045534f 4252455600524f52 5245004c41544146 0054454955510029 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 554245440045534f 4252455600524f52 5245004c41544146 005445495551000c ZMM20=0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 ZMM21=b687270cb687270c b687270cb687270c b687270cb687270c b687270cb687270c b687270cb687270c b687270cb687270c b687270cb687270c b687270cb687270c ZMM22=b1b1e781b1b1e781 b1b1e781b1b1e781 b1b1e781b1b1e781 b1b1e781b1b1e781 b1b1e781b1b1e781 b1b1e781b1b1e781 b1b1e781b1b1e781 b1b1e781b1b1e781 ZMM23=ab711466ab711466 ab711466ab711466 ab711466ab711466 ab711466ab711466 ab711466ab711466 ab711466ab711466 ab711466ab711466 ab711466ab711466 ZMM24=21e1f8ec21e1f8ec 21e1f8ec21e1f8ec 21e1f8ec21e1f8ec 21e1f8ec21e1f8ec 21e1f8ec21e1f8ec 21e1f8ec21e1f8ec 21e1f8ec21e1f8ec 21e1f8ec21e1f8ec ZMM25=99ce5f3199ce5f31 99ce5f3199ce5f31 99ce5f3199ce5f31 99ce5f3199ce5f31 99ce5f3199ce5f31 99ce5f3199ce5f31 99ce5f3199ce5f31 99ce5f3199ce5f31 ZMM26=a290f1dca290f1dc a290f1dca290f1dc a290f1dca290f1dc a290f1dca290f1dc a290f1dca290f1dc a290f1dca290f1dc a290f1dca290f1dc a290f1dca290f1dc ZMM27=f7fbcc4af7fbcc4a f7fbcc4af7fbcc4a f7fbcc4af7fbcc4a f7fbcc4af7fbcc4a f7fbcc4af7fbcc4a f7fbcc4af7fbcc4a f7fbcc4af7fbcc4a f7fbcc4af7fbcc4a ZMM28=000000100000000f 0000000e0000000d 0000000c0000000b 0000000a00000009 0000000800000007 0000000600000005 0000000400000003 0000000200000001 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=d2130000d2130000 d2130000d2130000 d2130000d2130000 d2130000d2130000 d2130000d2130000 d2130000d2130000 d2130000d2130000 d2130000d2130000 info registers vcpu 3 CPU#3 RAX=0000000000517f24 RBX=0000000000000003 RCX=ffffffff8b463e39 RDX=ffffed10056e6f7e RSI=ffffffff8bd2c300 RDI=ffffffff818ff929 RBP=ffffed1003ad8488 RSP=ffffc9000049fe08 R8 =0000000000000000 R9 =ffffed10056e6f7d R10=ffff88802b737beb R11=0000000000000000 R12=0000000000000003 R13=ffff88801d6c2440 R14=ffffffff905fc510 R15=0000000000000000 RIP=ffffffff8b46521f RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b700000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000000c2a21d9 CR3=000000004bab0000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000