last executing test programs: 7.14593069s ago: executing program 1 (id=914): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000740)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = io_uring_setup(0x58e1, 0x0) r5 = syz_io_uring_setup(0x487, &(0x7f00000000c0)={0x0, 0x9010, 0x100, 0x4, 0x165, 0x0, r4}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r5, 0x16, &(0x7f0000000140)={&(0x7f0000001000)={[{0x0, 0x5, 0x3, 0x700}]}, 0x1, 0x1}, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x10, r3, 0x0, 0x0, 0x0, 0x60, 0x1, {0x1}}) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) io_uring_enter(r5, 0x3517, 0x173d, 0x42, 0x0, 0x0) r9 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r9, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r9, 0xc01864c6, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r9, 0xc05064a7, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000}) ioctl$DRM_IOCTL_MODE_GETENCODER(r11, 0xc01464a6, &(0x7f0000000180)={r12}) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) 6.780423112s ago: executing program 0 (id=916): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x70bd2b, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7b, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x94, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x34, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x108}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x1a6c42) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), r6) sendmsg$WG_CMD_SET_DEVICE(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)={0x30, r7, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x1ff}]}, 0x30}}, 0x0) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f0000000c80)={r4, 0x0, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1c, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200", [0xfffffffffffffffc]}}) r8 = socket(0x8000000010, 0x2, 0x0) write(r8, &(0x7f00000002c0)="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", 0xfc) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) r9 = socket(0x840000000002, 0x3, 0x100) connect$inet(r9, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r9, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) 5.715312707s ago: executing program 0 (id=920): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000001c0)={@initdev, @dev}, &(0x7f0000000280)=0xc) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000400), 0x401, r3, 0x0, 0xa002a0}, 0x38) openat$sequencer(0xffffff9c, &(0x7f0000001bc0), 0x88302, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b030040000000004c0012800b00010067656e65766500"], 0x74}}, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0xa, 0x0, &(0x7f00000000c0)="ff07000000000000ab5b", 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r4 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x40080, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r5, 0x4048aec9, &(0x7f0000000740)={0x1, 0x0, @ioapic={0x8080000, 0x8, 0x0, 0x0, 0x0, [{0x2}, {0x0, 0x4, 0x0, '\x00', 0x2}, {0x0, 0x4}, {0x81, 0x2}, {0x0, 0x0, 0x6}, {0x0, 0x0, 0x0, '\x00', 0x3}, {0xff}, {0x0, 0x0, 0x0, '\x00', 0x1}, {0x0, 0x0, 0x0, '\x00', 0x2}, {0x8}, {0xfe, 0x0, 0x9}, {}, {0x0, 0x0, 0x1, '\x00', 0x3}, {}, {}, {0x0, 0x4}, {0x0, 0x1, 0xf3, '\x00', 0x20}, {0x9}, {0x1c, 0x8c, 0x0, '\x00', 0x1}, {0xfe, 0xfc, 0x0, '\x00', 0x9}, {0xfc, 0x0, 0x5, '\x00', 0xfd}, {0xfc, 0x0, 0x0, '\x00', 0xea}, {0x0, 0x1, 0x0, '\x00', 0x3}, {0x0, 0x0, 0x80, '\x00', 0x1}]}}) 4.895998955s ago: executing program 3 (id=922): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x70bd2b, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7b, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x94, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x34, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x108}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x1a6c42) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)={0x30, 0x0, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x1ff}]}, 0x30}}, 0x0) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f0000000c80)={r4, 0x0, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1c, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200", [0xfffffffffffffffc]}}) dup(r5) r7 = socket(0x8000000010, 0x2, 0x0) write(r7, &(0x7f00000002c0)="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", 0xfc) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) r8 = socket(0x840000000002, 0x3, 0x100) connect$inet(r8, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r8, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) 4.737793429s ago: executing program 2 (id=923): timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x1, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x40) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) epoll_create(0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r3, {0x8, 0x7}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x100c}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000080)={0x34, r6, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x96c}]]}, 0x34}}, 0x40) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioprio_set$pid(0x1, 0x0, 0x0) add_key(&(0x7f00000018c0)='big_key\x00', &(0x7f0000001900)={'syz', 0x1}, &(0x7f0000001940)='\f', 0xfffff, 0xfffffffffffffffe) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$inet_sctp(0x2, 0x0, 0x84) setsockopt$EBT_SO_SET_ENTRIES(r8, 0x0, 0x80, &(0x7f0000000140)=@nat={'nat\x00', 0x19, 0x3, 0x44a, [0x80000380, 0x0, 0x0, 0x800003b0, 0x8000069c], 0x0, &(0x7f0000000100), &(0x7f0000000800)=ANY=[@ANYBLOB="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"]}, 0x4a5) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x5c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_COUNTERS={0x28, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x7}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x100000001}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x9}]}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_IMMEDIATE_DATA={0xc, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, 'L'}]}]}}}]}]}], {0x14}}, 0xfc}}, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_MCAST_MSFILTER(r9, 0x29, 0x30, 0x0, 0x290) socket$inet_sctp(0x2, 0x1, 0x84) 4.430854687s ago: executing program 2 (id=924): sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private0, 0x809}, {0xa, 0x8, 0x0, @empty}, 0x2, {[0x0, 0x1, 0xfffffffe, 0x0, 0xffffffff]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x0, {[0x1, 0x0, 0x0, 0x0, 0x9]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private2}, {0xa, 0x0, 0x0, @empty}}, 0x5c) setsockopt$MRT6_FLUSH(r2, 0x29, 0xd4, &(0x7f00000000c0)=0x7, 0x4) r3 = syz_io_uring_setup(0xa07, &(0x7f0000000200)={0x0, 0xcc75, 0x0, 0x3}, &(0x7f0000000140)=0x0, &(0x7f0000000280)=0x0) socket$kcm(0x11, 0x3, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r8, 0xc008ae88, &(0x7f0000002400)={0x1, 0x0, [{0x40000021}]}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_setup(0x5b03, &(0x7f00000003c0)={0x0, 0xef71, 0x800, 0x2, 0x2f1}, &(0x7f00000001c0)=0x0, &(0x7f0000000440)) r10 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r10, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_START(r10, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r10, 0x54a3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='sys_enter\x00'}, 0x18) syz_io_uring_submit(r9, r5, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x40, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}) io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0) 4.304687233s ago: executing program 2 (id=925): sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private0, 0x809}, {0xa, 0x8, 0x0, @empty}, 0x2, {[0x0, 0x1, 0xfffffffe, 0x0, 0xffffffff]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x0, {[0x1, 0x0, 0x0, 0x0, 0x9]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private2}, {0xa, 0x0, 0x0, @empty}}, 0x5c) setsockopt$MRT6_FLUSH(r2, 0x29, 0xd4, &(0x7f00000000c0)=0x7, 0x4) r3 = syz_io_uring_setup(0xa07, &(0x7f0000000200)={0x0, 0xcc75, 0x0, 0x3}, &(0x7f0000000140)=0x0, &(0x7f0000000280)=0x0) socket$kcm(0x11, 0x3, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r8, 0xc008ae88, &(0x7f0000002400)={0x1, 0x0, [{0x40000021}]}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_setup(0x5b03, &(0x7f00000003c0)={0x0, 0xef71, 0x800, 0x2, 0x2f1}, &(0x7f00000001c0)=0x0, &(0x7f0000000440)) r10 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r10, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_START(r10, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r10, 0x54a3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='sys_enter\x00'}, 0x18) syz_io_uring_submit(r9, r5, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x40, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}) io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0) 4.246620411s ago: executing program 1 (id=926): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x70bd2b, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7b, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x94, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x34, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x108}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x1a6c42) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), r6) sendmsg$WG_CMD_SET_DEVICE(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)={0x30, r7, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x1ff}]}, 0x30}}, 0x0) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f0000000c80)={r4, 0x0, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1c, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200", [0xfffffffffffffffc]}}) r8 = socket(0x8000000010, 0x2, 0x0) write(r8, &(0x7f00000002c0)="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", 0xfc) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) r9 = socket(0x840000000002, 0x3, 0x100) connect$inet(r9, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r9, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) 4.230004553s ago: executing program 0 (id=927): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x3ae9, &(0x7f0000000300)={0x0, 0xafc9, 0x20, 0x3, 0x0, 0x0, r1}, &(0x7f0000000100)=0x0, &(0x7f00000001c0)=0x0) r4 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r4, 0x4020565a, &(0x7f0000000240)={0x3, 0x8098f907, 0x1}) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x9, 0x0, 0x0, 0x0, {}, 0x1}) openat$misdntimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x3c1, 0x3, 0x3a4, 0x0, 0x111, 0x4b4, 0x0, 0xd4feffff, 0x2dc, 0x20a, 0x278, 0x2dc, 0x278, 0x3, 0x0, {[{{@ipv6={@loopback, @private2={0xfc, 0x2, '\x00', 0x1}, [0xffffff00, 0xffffffff, 0xffffff00, 0xff], [0x7f000000, 0xffffff00, 0xffffffff, 0xff], 'veth1_vlan\x00', 'nr0\x00', {0xff}, {0x1d3a72baaa49f5b2}, 0x87, 0x5, 0x4, 0x8}, 0x0, 0x188, 0x1b8, 0x0, {}, [@inet=@rpfilter={{0x24}}, @common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "6d93eb04697dfa39de04767f46614613a407abbf4ed2e83a63b484dbb3bf6b2a850e79009e2905d2f98ba19f91f3c9faee6d3686e9bee067f4e77d9ad66238750c4100d7ee97ec7646259d90edece6e9787a97bc956c01754c34c5c9518c46178ed5f9194454980e579c80eca35a58dc47d1d5e4ff6e216c724e88c702448587", 0x1}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x7, 0x9, 0x47b, 0x1}}}, {{@ipv6={@loopback, @private1, [], [], 'caif0\x00', 'veth0_virt_wifi\x00', {0xff}, {}, 0x2f}, 0x0, 0xc8, 0x124, 0x0, {}, [@inet=@rpfilter={{0x24}, {0xf}}]}, @common=@inet=@HMARK={0x5c, 'HMARK\x00', 0x0, {@ipv4=@local, [0xff, 0x0, 0xff, 0xffffffff], 0x4e23, 0x4e21, 0x4e20, 0x4e21, 0xf5e, 0xb1, 0xc, 0x4d, 0xb6a}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x400) socket(0x10, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$igmp6(0xa, 0x3, 0x2) sendto$inet6(r7, &(0x7f0000001480)="484e0ea0546cd3057ca1c9660e75fabf89d3c9aa24666ed7ebf66abc30f5df7fc74ae4d304847835979b78fa5b98f2ed43bc72eb43eb5de256184a7981633877136c93b4d1e1137c460f22d39675c1c4158df87a446c98d68e21a3fb745bddb301784c18cb143f4ca61eb4abcb32c5fa2a280a07016bea41e9f39ad88ff106c045e9412382510bf79cd81428625c3ad75fe8f852dd574102189f464365d730e3a82410457f629446de846f01da2fa194c9ac9d24db75977abf0b1338a8980e1345262f915a0795d78ff14159240a687d14ed2737195df93903fc53d200f2dc2bb9a3aa7df2a9659d8854af251cda6112bb453d56a23422efb0a64ec1d654df8b3ed6c44722bc2f98747429da65e70c08781f3d7c893109d7b9681626f20443b063220d5e85892005b9fed18d51ffb39ef2a2fd409a18d268ecaf19fd1970974f8607b7041f656e781638e51015b8c7f0f01a522204d1a3f761752f58038bb5b3383764d13ccf747fb6a592beccc81f0f1e5c15ea79ead9ce07aeb2bf542e8b4b6708fd2fc1db70c685ed6aa9589ac3b8bdfb0987dcb0f2ed720d92c185c1ca593a761ceeaef7e6c0d13796cf114fc6fdbbf673358db2ba9167d2d57adb343a02253661c1b246d3733af770aa283a9590a4fc6dfcdab1e16b61f946463c6a136c7b7eb0980dcb7329baf402982d1146101674db0b43aaf4709ddcaeabb5938646bd6d428767a7d503aff0eb3aa36a4aac836a79a31e6672b4587bf7f3ea77083c731ac5d1e4384da97d2dc72dc09a870d963e8c04bee7369154849a6f420c792dee3fece0b590812368ecbee7c1b3a63115dc7e1918a3b08c5ec23f08ea18510f3fffbba78ed7d720982adc3ecefe4b3e8601e28938aba660752061c3b4ab48e759032f1a6ef120706980a80e58461ccf07d9f3411a1fbdc6dfcf67eb0d9012d72450b0db68ef2d38fd95e029364785dfe633f1605a47ce74e175330a2aef02c876080e3e4accfe60af1c7da1ada12f652a2f3e632c9d88bc67d4cf009c2efbda79e520ef4de6a97d437521a9a37741735574d08ef04ecd8cc90037676f5df4ee3426ba5a6dd8f0d3f50cdd89db57284ff35b911efdff22940fc32894d3b17d8fd2b3fcd4abb43d01a599d51bfd53f41d299a52de2fdd7150a5d000c71f9cc540b040bb7ead2485bfe604a9b649a41e35732c958e14d77f31cab6ae943ca03ee507d924a1d6483c2501889ca4eff721ca2f7c7b44d898ae9089af50cf4311aeaf619360681258b0605f47aeb2c2674a3b895643c932415a0d20837ec17fef96a2d7bede12a78998d4fec5e07da4d58102f17773b4ac0ce68eae2dede4b5ebfabe164a042e30cfc684197434ffd34afe21248bf28829239a060e62dbd1cf38ec966d285f003e9c630daad17e279a60e6b8d6826cfca03fd31b8bd636a76a6dd07ce971627f86d60f9fc460cf49b7365bb0e4a85c480c276957a5cb87b8bd15594d86541c4464d0725c8b7f6e50cf6841218b3fafd6868c1f9ffaece0118511bf709bda3360aaa3062c45a8682dd966acdcb58c4cff28a295239c94af5f4ad0ebdca2b6b3fc36e9db2f21b6f151fe864dc250817c430848fc94a0f87b871bf83394e4f54e5f7c25422bbd50dd116aca1e44eded971e5049ea05e4f9b6f1bf3b95387a7637f859b365c2fade6a3f742520ab7e56d8f6b65716f7963ecdcb96f6e5c001ac1e028b842d7fb88b6bbbe3002a80bff9d33cd9d72f3ca57b37e8ab1c31582454a5617a4a930486b6713318eb08f470616a7a1ffc6343dc12bc8cb8ad370b09865ed5ebcd78d0b06cff6ceef04cb7afdbd2bdc7544bf115f76afa38bafed1b8f3e6a6140b881973226c345aec7b847dc4b749e1ed8dda315b7f0b7fca42ba07ab2ffdbc2f0a63141c958389c78414e56c6923af782fd02d7d10d88ace55e10270e6b9d719758a30791e8bb6721fde3834d4b1fb597eeaf34a4ac4027c151f754c5528f7454aa22d751378db10155c2f36d37d3cee76e8fcbe18fdae2f0bcf85a96b4543d608d0098eb00095de70096410044bd0d9e43079a872a7dfb20b2784a2f7af3ef27c177f33e2bdc2b7c0143d7df1f69b3a14b72f095aafcc91af8b141f62e6958a378f83542efa50f557bbaf681dd8a3d558b3880478f022ae8edfb34e741103b8d06208bd8f606139b028827c3a0be2d25b26fd9e50b458e8ae6302b309028c8dd9646549f63e4437dc225caa7b10caaf11967b4ff43c6d4683e8acdcc4f6e645fa38abb0821a6b6583183d74a8cf3c8f4b96394bc3fff05a436e8548eceff9be18f330fdc6c70fe57e3a895eb8f3e141711b56b732dca00fbfa633547839826eb60a6a619b192d439ea15f2422dbb417e4448e0d8799899a81b13762967e20431abc9165ebf2635b0bc05cd2a894e8d9f9a565b9edfad080bb13c0180c3b35ac0905e66af9712d2c745ba801e500f73a871d0ffabbfeb5f54ba40a8bdc6e1cdd66d2080c1bc479ebd69c79ac3eb22f808f1c883a45ee36e52dd131e661778b09975292f243ec16425a0c358b442a6919af67a1d588265646fab2d5a07ec68f105214b1695a34b583696e5cd5f0e2d9bcc97ee09d31a15a768f0077020cf65a5eb3984ded820d27753af3491656e4f34988d64a683c3bc7a2708d9f9b4a939cb560fc0239b8b1ef3c11f2495805b34344b02dea9bf7ff820db7362d6f05cdfe695ae53ec2eb8cc91c933d6aeb9d5a261048e765ea6c1ae46ffea54d8e22df0bbf7af960249111610eae661da18545f64f144839a13d75c0b93c0e31428b80ad5e64291e8444a46df05ff34795c90895b497fc50312ffbee434ceaa7fe29dd4542ddb4922373960fcb527adbdd09195d93c662902109c9f484bb5c46e4f18288385199ab393adacca7ef92e136323251703911fa059a239f216adfaf2d3b831de5312e9a83924add165b382fc7971901a3c7811e0c1826c5640f7d8dbebc866c114b4dd20e988297b2313f6994daafcbb3113b9cc5dda5bcb555ed41bd285a9cc4ac9194dac99d7577cbf309d9a62c66f8dc5e9b53ed11999e9f13a6525b92411ca91676e1d93c375e3013e1a980cf7c1000d63433fe58d34d04401a2fe1839f2148f497e804d77f68883c1af55d5f6f5755b4452324816ba47c34ae0a907f040f43444500694c5b3ef3c56de9366cc11f79bae15161e5b32d969248c0ce4c764bbe015deb4a5c3f8ce4ab0fcad9def42a866cc21abdfd30907c8adc725c295d784f57c87b136d240045172eee79da5b82ddb65398330b5b88baafaaee7268de5a761f7cf476c750147d13e0952d33bea40241295682484029bb65c40c36b4f76776cf8e39d192129c01882acc71eb07fc2ed48717fcce68c4846325cb0c66b86305a42ee0b2f4e716c28a7986e891744b2b4d671c0020e47029a19388a0363cb80d8dc7f587a295020cfce99735344f0b9b8ab3a88334b2c65ea716ed9fda2d2fa84ec3b74126ce0e404e577114d5cd28f7935cd424cc7af0f528d76489fa14cf5357edfed413be7d97c58db4bdd4c3b43d2ddf3c00eb5a1374203572b635d61b04b87cccde2a01476a017de51af55cbf3324ecca052fcc3e32313a31a9e49d6e24e790542b1e0bdff6992b62b8537971c089f805f1d326600e765ab96f2738bfabfc3b983ca0fbba7b024474f6071c7557c650abf0650a9cfe25110a7273759b5995649cec911392a49643cd259347bdca07f09803c517cdf8476d1b4ef9245895d90dc1f2c9755757669957fd5ed7f17400a9c804511652f672b8b4090577a57ac6d1f967de373fa859682ba2a1da043a2b9ae01c4d07a5809abba51ea2469a586e994b2b1ae7e406c83cf19d6b8d3f6b4514a15cfddc23fb820c80cbb0997ab98c6e2671994445e3ff027e90eff3f02eeeabda0f6eb25e913d18e846fff16dcab40fb97837498a2756cab5413246d6f239eb7b25b177068884305f69ba16a5b3cb0cf1a28598557a4c269790193cf222690bb4d597c28714a5a4bbe1bd62bcb5058961524d121a267b6090263046b1798c4e9c7df0cd924dc3c313c16d52db77b4b19b082ff1ee480defeae8679dfb071baf22991c228f1c81099ff7830b96149283030527c55de42636e6f5a97c020fe97241cd4e51300701550bbfdcb84d11f0f4209054659365d607e6e7c8aa79e6a31c5442a707f2a56d659fdf990950d3c8656b732ee9082eaa662c91269e756fdf85951a93df6b472b93495855ce93e39926c69644149fae7508f41140fcc5c720a86e4656096ee67788a2b4cda8007ef6e4327da571be5a7ad54d1d950a8cf87e5d92ee2bfea8323d436a906f62ef24b5f02da2f4bfb854e0f5453436e30e38109f31bd1c758d7e52b0af92a4e88f491068e0c894145a4da159618fa5719fea9542894cac60863a5bed16c6fc4c4b6af6592cc77f383893cba9dd091d2d85ff637fb6cbd56e2320823e99cf85d5c2e3986fda40a5fc192947e3c1f371f4cc1f0d9874d72c88d4d43fe0a50e2e6827ff4b81afe1c909cd334b764c12dc510f13629ce4859af163b876e17a595c63030f4b3f08e65539ab89e83b8b332657d457c46068318bfce1509bc6b526b67e344f7ca1785f90eb36d2e08391a72f4743938d622b18ac960a11672a12fa88e6768b991a0f4c7d95b2c74fa22a448fd1e22c18d7007f844af2581620f4f0643063fa91ca88acd60f04706e2fe0d51daecd3539574c2a7e18bb3a6160c1f6ceb19d9aa63711ca0262598d80d1419f8594177ef4ea784e7af2a5986589a06180133c54f94fbbc1953787dc05112f490cd33f8555717fdd3e86c1bcc42a129820c3e1500c54213b632be870461aceb20b77f82cee4c4571032c10becd03c47f562eaad1a96eeac2e946af5034cf07d654dfe1b44de7fea0af5b5691f65f37b965b7c8c4c5fda51477893a71a861c9e1f7586b1fbe6dd92508e5562c9388330e3ebd6c67dac76690f6e8e1088682bc5ea2b98e1dc2bd6ec7b1c0f23727ec436d607c583387adf27f7d3ffbe1184d11daa402cc19a8ed5db654703b1f2def81c44edfa5aa91844a2f698d789cbf42b21a8ed99f438027e41c8c42562f04b78736a4b091675bffed913f1dc63043557201f29379bd43157e67d47048d01523860f4785120d6227681dc0384c206db3a7356c0d0bbbb18c3ee6bf3d69c5206fa19eabfbf8f4758313739df7daa1b2095f497b2ffbf2ef3d123eb1f1a93a20f6ac739b9bc10894ce15d9865d7ab2182f936af1f618401433bb972370810b3e4a960423a049d80e79ae7ed9e8ef223ad46855e7eab72c447bc87a829ba9bdb041314fb6b93b038e99ae7e21210e9d0f557ba4030bdd79ff4f9f9319cbbc20e92c90eac7cab8d99e729f38d07ef43eae73ff1fbf7090bbcf6b338d71e1f872c292a76e3ea7111859b0d3b3f0fffa235ab822a81b2237690bfab5d62b4ade146374696899c2291ce4f9867407c21437b3965fb67ee7441eca86179927492f2e5a554ffae7691e12d85362fcfc863898733f6715e129b22be463a7ed68b291624161a30b66cf079c85393815f5c3aed8f40145bf4d7930314bc2ad928b58313b0273ff2dfa18c9a229010714a00a7e290b62953208b21ab6f30c1d8fcb2cf5e03bb891137d2d4a1290cff451ceaa4d861c6d94a2d862259f498e57ed049aa4b34d4d6d8918c83bc38066b72ca66a0bf0d77ff43dc7afe52a50d40bb1ab32e0dca1d4d4d2d2addd87e8ea1188dac91bf0eff003e5caa97f05c19d124f93270feb9e", 0x1000, 0x8890, &(0x7f0000000280)={0xa, 0x4e20, 0x200, @private0={0xfc, 0x0, '\x00', 0x1}, 0x3}, 0x1c) socket$inet_smc(0x2b, 0x1, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r10, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xe0000000, 0x5, 0xb7, 0x2, 0x1, 0x1, 0x4, 0x3, 0x1}}}}]}, 0x58}}, 0x4000) r11 = socket(0x10, 0x803, 0x0) r12 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newtfilter={0x3c, 0x2c, 0xd2b, 0x0, 0x0, {0x0, 0x0, 0x0, r13, {0xb, 0x3}, {}, {0x1, 0xe}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0xb, 0x4}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x81}, 0x800) sendmsg$TIPC_NL_MON_PEER_GET(r6, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20048005}, 0x0) socket$packet(0x11, 0x3, 0x300) 4.13617221s ago: executing program 2 (id=928): unshare(0x6a040000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x101043, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f0000000140)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c0d23266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)={0x1}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendmmsg$inet(r2, &(0x7f0000000280)=[{{&(0x7f0000000040)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x25}}, 0x10, 0x0}}], 0x1, 0x20000000) listen(r2, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x9}, {0x20000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe}], 0x2}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x20000000, 0x0, 0x2, 0x0, 0x0, 0x2004cb, 0x3, 0x0, 0x0, 0x0, 0xfffffffffffff2a4, 0x2000000000003ff, 0x2], 0x0, 0x200306}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r4 = gettid() timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00'}, 0x94) ioctl$KVM_GET_VCPU_EVENTS(r3, 0x8040ae9f, &(0x7f0000000400)=@arm64) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$EBT_SO_GET_ENTRIES(r5, 0x0, 0x81, &(0x7f0000001d40)={'broute\x00', 0x0, 0x3, 0x0, [], 0x0, 0x0, 0x0}, &(0x7f0000001dc0)=0xa8) getsockopt$EBT_SO_GET_INIT_ENTRIES(r5, 0x0, 0x83, &(0x7f0000000180)={'nat\x00', 0x0, 0x3, 0x6c, [0x800, 0x6000000, 0x7, 0x335, 0x2, 0x5], 0x5, &(0x7f0000000080)=[{}, {}, {}, {}, {}], &(0x7f0000000100)=""/108}, &(0x7f0000000240)=0x50) 3.956318341s ago: executing program 3 (id=929): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000044402, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0x0, 0xffffffff}, 0x1c) socket$igmp6(0xa, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1, 0xc}, &(0x7f0000001fee)='R\x10suse\x00\x00\x00\x00\x00\x00\x00dn\x00\x00\x00', 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCFLSH(r5, 0x400455c8, 0x4) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000180)) r6 = openat$fb0(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r7 = socket$l2tp6(0xa, 0x2, 0x73) bind$inet6(r7, &(0x7f0000000000)={0xa, 0x4e20, 0x80000000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xf}, 0x1c) ioctl$FBIOPUT_VSCREENINFO(r6, 0x4601, &(0x7f0000000380)={0x3c0, 0x78, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x8, 0x3, 0x1ff, 0x3d, 0x5, 0x3, 0x53, 0x202, 0x1, 0xc}) syz_emit_ethernet(0x82, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x0) 3.264728829s ago: executing program 1 (id=930): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) mknod(&(0x7f0000000080)='./bus\x00', 0x8000, 0x7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00'}, 0x10) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x5, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) listen(0xffffffffffffffff, 0x3) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r5, 0x4008af60, &(0x7f0000000280)={@my=0x1}) mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000040)='./bus\x00', &(0x7f0000000180)='jfs\x00', 0x400080, &(0x7f00000001c0)='discard') sendmsg$DEVLINK_CMD_RATE_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r1, 0x633d41a77d0888ff, 0x70bd24, 0x25dfdbfd, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x20048844) r6 = fsopen(&(0x7f0000000000)='devtmpfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) fsmount(r6, 0x0, 0x1) fsconfig$FSCONFIG_CMD_RECONFIGURE(r6, 0x7, 0x0, 0x0, 0x0) 3.212349967s ago: executing program 2 (id=931): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000001c0)={@initdev, @dev, 0x0}, &(0x7f0000000280)=0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xb, 0x1f, 0x2, 0xbf22, 0x1, 0xffffffffffffffff, 0x8, '\x00', r3}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000480)={0x0, 0x0, 0x0, &(0x7f0000000400), 0x401, r4, 0x0, 0xa002a0}, 0x38) openat$sequencer(0xffffff9c, &(0x7f0000001bc0), 0x88302, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b030040000000004c0012800b00010067656e65766500"], 0x74}}, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0xa, 0x0, &(0x7f00000000c0)="ff07000000000000ab5b", 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r5 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x40080, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r6, 0x4048aec9, &(0x7f0000000740)={0x1, 0x0, @ioapic={0x8080000, 0x8, 0x0, 0x0, 0x0, [{0x2}, {0x0, 0x4, 0x0, '\x00', 0x2}, {0x0, 0x4}, {0x81, 0x2}, {0x0, 0x0, 0x6}, {0x0, 0x0, 0x0, '\x00', 0x3}, {0xff}, {0x0, 0x0, 0x0, '\x00', 0x1}, {0x0, 0x0, 0x0, '\x00', 0x2}, {0x8}, {0xfe, 0x0, 0x9}, {}, {0x0, 0x0, 0x1, '\x00', 0x3}, {}, {}, {0x0, 0x4}, {0x0, 0x1, 0xf3, '\x00', 0x20}, {0x9}, {0x1c, 0x8c, 0x0, '\x00', 0x1}, {0xfe, 0xfc, 0x0, '\x00', 0x9}, {0xfc, 0x0, 0x5, '\x00', 0xfd}, {0xfc, 0x0, 0x0, '\x00', 0xea}, {0x0, 0x1, 0x0, '\x00', 0x3}, {0x0, 0x0, 0x80, '\x00', 0x1}]}}) 3.200831422s ago: executing program 0 (id=932): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r1, 0x4008ae89, &(0x7f0000000200)=ANY=[@ANYBLOB="010000000000000005"]) r2 = dup(r0) r3 = socket$l2tp6(0xa, 0x2, 0x73) getsockopt$inet_mreqn(r2, 0x0, 0x24, 0x0, &(0x7f0000000380)) ioctl$sock_inet6_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f00000003c0)={@loopback, 0x23}) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000740)=ANY=[], 0x0) r5 = socket$netlink(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r6, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0, 0x3}, 0x94) r7 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r7, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r7, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r7, 0x6, 0xd, 0x0, 0x0) sendto$inet(r7, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r7, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) timer_create(0x0, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'geneve0\x00'}) 2.656174475s ago: executing program 1 (id=933): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e78, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{}, 0x80}}]}, {0x2}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x40000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x141) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000300)='./file0\x00') write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100), 0x4) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x30) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="f800000016008502000000000000000020010000000000000000000000000002", @ANYRES32=0x0, @ANYBLOB="fe800000"], 0xf8}}, 0x0) keyctl$clear(0x7, 0xfffffffffffffffb) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[], 0x134}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a32000000002c0003800800014000000000180003801400010076657468315f00005f626f6e64000000080002400000000064000000160a0101000b000000000000010000000900020073797a32000000000900010073797a3000000000300003802c0003801400010067656e657665300000000000000000001400010076657468315f746f5f626f6e640000000800"], 0x104}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e20, @local}]}, &(0x7f0000000100)=0x10) recvmsg(r0, &(0x7f00000027c0)={0x0, 0x0, 0x0}, 0x100) sendmmsg$inet6(r0, &(0x7f0000003f00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 2.655794631s ago: executing program 3 (id=934): syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r0, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000001c0)='sched_process_wait\x00', r1}, 0x18) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r2}, 0x8) r4 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="85000000070000006a0a00ff000000220c00000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)=ANY=[@ANYRES32=0x0, @ANYRES32=r4, @ANYBLOB="1100"/12, @ANYRES32=r3, @ANYBLOB="1e9a3457796df560b6e3d090c4207a8494ba", @ANYRES64=0x0], 0x20) r5 = socket$l2tp(0x2, 0x2, 0x73) getsockopt$sock_cred(r5, 0x1, 0x38, 0x0, &(0x7f0000003b40)) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002540), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r6, &(0x7f0000000080)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0xf, @loopback, 0x6}, {0xa, 0x4e20, 0x80, @empty, 0x4}, 0xffffffffffffffff, 0x8}}, 0x48) mq_getsetattr(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x1e, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r7 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r7, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r11, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000340)=[{0x20, 0xc, 0x77, 0xfffff034}, {0x6, 0x0, 0x0, 0x2}]}, 0x8) sendmmsg(r10, &(0x7f0000001c00), 0x400000000000159, 0x40840) 2.086411778s ago: executing program 0 (id=935): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000740)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = io_uring_setup(0x58e1, 0x0) r5 = syz_io_uring_setup(0x487, &(0x7f00000000c0)={0x0, 0x9010, 0x100, 0x4, 0x165, 0x0, r4}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r5, 0x16, &(0x7f0000000140)={&(0x7f0000001000)={[{0x0, 0x5, 0x3, 0x700}]}, 0x1, 0x1}, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x10, r3, 0x0, 0x0, 0x0, 0x60, 0x1, {0x1}}) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) io_uring_enter(r5, 0x3517, 0x173d, 0x42, 0x0, 0x0) r9 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r9, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r9, 0xc01864c6, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r9, 0xc05064a7, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000}) ioctl$DRM_IOCTL_MODE_GETENCODER(r11, 0xc01464a6, &(0x7f0000000180)={r12}) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) 1.436599479s ago: executing program 1 (id=936): sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private0, 0x809}, {0xa, 0x8, 0x0, @empty}, 0x2, {[0x0, 0x1, 0xfffffffe, 0x0, 0xffffffff]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x0, {[0x1, 0x0, 0x0, 0x0, 0x9]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private2}, {0xa, 0x0, 0x0, @empty}}, 0x5c) setsockopt$MRT6_FLUSH(r2, 0x29, 0xd4, &(0x7f00000000c0)=0x7, 0x4) r3 = syz_io_uring_setup(0xa07, &(0x7f0000000200)={0x0, 0xcc75, 0x0, 0x3}, &(0x7f0000000140)=0x0, &(0x7f0000000280)=0x0) socket$kcm(0x11, 0x3, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r8, 0xc008ae88, &(0x7f0000002400)={0x1, 0x0, [{0x40000021}]}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_setup(0x5b03, &(0x7f00000003c0)={0x0, 0xef71, 0x800, 0x2, 0x2f1}, &(0x7f00000001c0)=0x0, &(0x7f0000000440)) r10 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r10, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_START(r10, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r10, 0x54a3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='sys_enter\x00'}, 0x18) syz_io_uring_submit(r9, r5, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x40, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}) io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0) 1.035515992s ago: executing program 3 (id=937): openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x34, 0x10, 0x581, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x4d014}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x22004002}, 0x4040800) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x8800) write$uinput_user_dev(r2, &(0x7f0000000580)={'syz0\x00', {0x6ec9, 0x7, 0x5, 0x5}, 0x3e, [0x9, 0x2, 0x8, 0x2, 0x5334, 0x9, 0x80000000, 0x5, 0x8, 0x0, 0x200006, 0xf5, 0x9, 0x39, 0x747d5a13, 0x8, 0xfffffb9a, 0xfffffffc, 0x4, 0xfffffffb, 0x4, 0x3, 0x4, 0xf252, 0x4, 0x800, 0x300000, 0x7, 0xe, 0x4623b, 0x0, 0x0, 0x1ff, 0x8000, 0x3ff, 0x3, 0xd, 0x4, 0xba55, 0x8da8, 0x2, 0x200, 0x3959, 0x8, 0xe, 0x3, 0x2, 0xde, 0x8, 0x9, 0x1, 0x1, 0x80000001, 0x2, 0xc, 0x1, 0x4, 0x0, 0x1000, 0x5, 0x40, 0x9, 0x7, 0x1], [0x6, 0x1e, 0x0, 0x8000, 0xfffffffe, 0x3, 0x0, 0x5, 0x7, 0xfffffffc, 0x6, 0x7fff, 0x72c, 0xc32, 0x3, 0x9, 0x10000, 0x400, 0x8001, 0x3, 0x1, 0x297, 0x5, 0x0, 0x981, 0x4, 0x100, 0x9, 0x2, 0x8, 0x0, 0x1000001, 0xdc3, 0xfffffffd, 0x0, 0x5, 0x1, 0xffffffff, 0x6, 0x5, 0x800, 0xffff, 0x6, 0x96, 0xfffffff9, 0x101, 0x0, 0x2, 0x401, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0x8, 0x6, 0x2, 0x1, 0x1, 0x8, 0x6, 0x200, 0x3], [0x401, 0xc584, 0xffff, 0xcd4, 0x7, 0x20, 0x7, 0x1004, 0x7, 0x20000010, 0x7, 0x9, 0xe8b, 0x5, 0x80000001, 0x5, 0xffffffff, 0x1000, 0x2, 0x10, 0x1, 0xfffffff9, 0xe55, 0x10, 0x80000001, 0x4, 0x4, 0x5, 0x6, 0x2, 0x5, 0x80, 0x9, 0x9, 0x47, 0x2, 0x2, 0x4, 0x7, 0x6d7e, 0x3, 0x8, 0x8001, 0xbf23, 0x6, 0x8, 0x95a, 0x0, 0x3ff, 0x3, 0x6, 0x100fffd, 0x2, 0x7, 0x4, 0xea, 0x7, 0x5, 0x6, 0xd9, 0x0, 0x8, 0x401, 0x5], [0x108e, 0x7fff, 0x3, 0x3, 0x88, 0x2, 0x6, 0x3, 0x50, 0x2, 0x763, 0xb, 0x402, 0x800, 0x4, 0x1000, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x1e0, 0x4, 0xe48, 0x3, 0x3, 0x4, 0x103, 0x1000, 0x3b, 0x2, 0x5, 0x800, 0xa80a, 0x65f413f9, 0x4, 0x8, 0x8a8, 0x2, 0x40, 0x7, 0x2, 0x4, 0x4, 0x10, 0x800, 0xfffffffd, 0x7fff, 0x2, 0xfffffff8, 0x3, 0x9, 0x200, 0x7, 0x4ee1, 0xfffffffd, 0x7, 0xe, 0x2, 0xc, 0x2000b, 0x133, 0x6]}, 0x45c) r3 = socket(0x8000000010, 0x2, 0x0) write(r3, 0x0, 0x0) ioctl$UI_DEV_CREATE(r2, 0x5501) readv(r2, &(0x7f0000001900), 0x0) open(&(0x7f00000001c0)='./file0\x00', 0x80ff, 0x88) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000180)={0x80000020}, 0x10) sendmsg$nl_route(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000000c0)=@getlink={0x24, 0x12, 0x18efde40b3708357, 0x0, 0x0, {}, [@IFLA_PHYS_SWITCH_ID={0x4}]}, 0x24}}, 0x0) r5 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000040)=0x13) ioctl$TCXONC(r5, 0x540a, 0x2) r6 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi2\x00', 0xa400, 0x0) ioctl$COMEDI_DEVCONFIG(r6, 0x40946400, &(0x7f0000000140)={'dt2801\x00', [0x9e1, 0x2566, 0xfffffffe, 0x4, 0x8, 0x0, 0x5, 0x10, 0x1002, 0xffffffff, 0x1, 0x5, 0x344, 0x1, 0x107, 0x0, 0x8, 0x3, 0x9, 0xe, 0x100, 0x1003, 0x7, 0xa, 0x5, 0x1, 0xb0c4, 0x7df, 0x8, 0x400007, 0x1]}) 1.032844127s ago: executing program 2 (id=945): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000001c0)={@initdev, @dev, 0x0}, &(0x7f0000000280)=0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xb, 0x1f, 0x2, 0xbf22, 0x1, 0xffffffffffffffff, 0x8, '\x00', r3}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) openat$sequencer(0xffffff9c, &(0x7f0000001bc0), 0x88302, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b030040000000004c0012800b00010067656e65766500"], 0x74}}, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0xa, 0x0, &(0x7f00000000c0)="ff07000000000000ab5b", 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r4 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x40080, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r5, 0x4048aec9, &(0x7f0000000740)={0x1, 0x0, @ioapic={0x8080000, 0x8, 0x0, 0x0, 0x0, [{0x2}, {0x0, 0x4, 0x0, '\x00', 0x2}, {0x0, 0x4}, {0x81, 0x2}, {0x0, 0x0, 0x6}, {0x0, 0x0, 0x0, '\x00', 0x3}, {0xff}, {0x0, 0x0, 0x0, '\x00', 0x1}, {0x0, 0x0, 0x0, '\x00', 0x2}, {0x8}, {0xfe, 0x0, 0x9}, {}, {0x0, 0x0, 0x1, '\x00', 0x3}, {}, {}, {0x0, 0x4}, {0x0, 0x1, 0xf3, '\x00', 0x20}, {0x9}, {0x1c, 0x8c, 0x0, '\x00', 0x1}, {0xfe, 0xfc, 0x0, '\x00', 0x9}, {0xfc, 0x0, 0x5, '\x00', 0xfd}, {0xfc, 0x0, 0x0, '\x00', 0xea}, {0x0, 0x1, 0x0, '\x00', 0x3}, {0x0, 0x0, 0x80, '\x00', 0x1}]}}) 924.157582ms ago: executing program 3 (id=938): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x70bd2b, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7b, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x94, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x34, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x108}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x1a6c42) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), r6) sendmsg$WG_CMD_SET_DEVICE(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)={0x30, r7, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x1ff}]}, 0x30}}, 0x0) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f0000000c80)={r4, 0x0, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1c, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200", [0xfffffffffffffffc]}}) r8 = socket(0x8000000010, 0x2, 0x0) write(r8, &(0x7f00000002c0)="fc0000001c000704ab5b2509b868030002ab087a0100000001481093210001c0f0030584050060100000000000039815fa2c53c28648000000b9d95662537a00bc000c00f0ff7f0000b400600033d44000040560916a0033f436313012dafd5a32e273fc83ab82d710f74cec184406f90d435ef8b29d3ef3d92c94170e5bba2e177312e081bea05d3a021e8ca062914a46ccfc510bb73c9463cdc8363ae4f5df77bc4cfd6239ec2a0f0d1bcae5fa0f5f9dcdd51af51af8502943283f4bb102b2b8f5566791cf190201ded815b2ccd243f395ed94e0ad91bd6433802e0784f2013cd1890058a10000c880ac801fe4af000049f0d4796f0000090548de", 0xfc) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) r9 = socket(0x840000000002, 0x3, 0x100) connect$inet(r9, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r9, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) 726.176ms ago: executing program 1 (id=939): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r1, 0x4008ae89, &(0x7f0000000200)=ANY=[@ANYBLOB="010000000000000005010040"]) r2 = dup(r0) r3 = socket$l2tp6(0xa, 0x2, 0x73) getsockopt$inet_mreqn(r2, 0x0, 0x24, 0x0, &(0x7f0000000380)) ioctl$sock_inet6_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f00000003c0)={@loopback, 0x23}) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000740)=ANY=[], 0x0) r5 = socket$netlink(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r6, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0, 0x3}, 0x94) r7 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r7, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r7, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r7, 0x6, 0xd, 0x0, 0x0) sendto$inet(r7, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r7, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r8 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x4c) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'geneve0\x00'}) 390.177528ms ago: executing program 0 (id=940): unshare(0x6a040000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x101043, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f0000000140)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c0d23266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)={0x1}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendmmsg$inet(r2, &(0x7f0000000280)=[{{&(0x7f0000000040)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x25}}, 0x10, 0x0}}], 0x1, 0x20000000) listen(r2, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x9}, {0x20000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe}], 0x2}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x20000000, 0x0, 0x2, 0x0, 0x0, 0x2004cb, 0x3, 0x0, 0x0, 0x0, 0xfffffffffffff2a4, 0x2000000000003ff, 0x2], 0x0, 0x200306}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r4 = gettid() timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00'}, 0x94) ioctl$KVM_GET_VCPU_EVENTS(r3, 0x8040ae9f, &(0x7f0000000400)=@arm64) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$EBT_SO_GET_ENTRIES(r5, 0x0, 0x81, &(0x7f0000001d40)={'broute\x00', 0x0, 0x3, 0x0, [], 0x0, 0x0, 0x0}, &(0x7f0000001dc0)=0xa8) getsockopt$EBT_SO_GET_INIT_ENTRIES(r5, 0x0, 0x83, &(0x7f0000000180)={'nat\x00', 0x0, 0x3, 0x6c, [0x800, 0x6000000, 0x7, 0x335, 0x2, 0x5], 0x5, &(0x7f0000000080)=[{}, {}, {}, {}, {}], &(0x7f0000000100)=""/108}, &(0x7f0000000240)=0x50) 0s ago: executing program 3 (id=941): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000e40)={'wlan0\x00'}) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x6, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) keyctl$reject(0x13, 0x0, 0x400, 0x8000000000000204, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000fff000/0x1000)=nil) madvise(&(0x7f0000f0f000/0x2000)=nil, 0x2000, 0x15) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000f00)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000015}, 0x44000) setreuid(0x0, 0xee00) request_key(&(0x7f0000000440)='rxrpc_s\x00', &(0x7f0000000480)={'syz', 0x2}, &(0x7f0000000500)='/dev/vcsu#\x00', 0xffffffffffffffff) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:34519' (ED25519) to the list of known hosts. [ 40.946324][ T5899] cgroup: Unknown subsys name 'net' [ 41.112212][ T5899] cgroup: Unknown subsys name 'cpuset' [ 41.116532][ T5899] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 42.029585][ T5899] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 45.378891][ T5982] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 45.379003][ T5985] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 45.382069][ T5982] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 45.384678][ T5985] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 45.386288][ T5982] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 45.388316][ T5985] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 45.391480][ T5982] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 45.391611][ T5981] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 45.392387][ T5981] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 45.392709][ T5981] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 45.393202][ T5990] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 45.393437][ T5990] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 45.393729][ T5985] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 45.394163][ T5985] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 45.394553][ T5985] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 45.395029][ T5982] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 45.395376][ T5985] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 45.397849][ T5981] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 45.398799][ T5985] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 45.422903][ T5981] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 45.606876][ T5972] chnl_net:caif_netlink_parms(): no params data found [ 45.733798][ T5974] chnl_net:caif_netlink_parms(): no params data found [ 45.758035][ T5972] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.762579][ T5972] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.764914][ T5972] bridge_slave_0: entered allmulticast mode [ 45.767586][ T5972] bridge_slave_0: entered promiscuous mode [ 45.774803][ T5972] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.777060][ T5972] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.779334][ T5972] bridge_slave_1: entered allmulticast mode [ 45.782386][ T5972] bridge_slave_1: entered promiscuous mode [ 45.848152][ T5987] chnl_net:caif_netlink_parms(): no params data found [ 45.854963][ T5972] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 45.875344][ T5972] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 45.954832][ T5974] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.957187][ T5974] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.959388][ T5974] bridge_slave_0: entered allmulticast mode [ 45.962037][ T5974] bridge_slave_0: entered promiscuous mode [ 45.969395][ T5972] team0: Port device team_slave_0 added [ 45.973054][ T5972] team0: Port device team_slave_1 added [ 45.975206][ T5973] chnl_net:caif_netlink_parms(): no params data found [ 45.981197][ T5974] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.983421][ T5974] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.985724][ T5974] bridge_slave_1: entered allmulticast mode [ 45.988509][ T5974] bridge_slave_1: entered promiscuous mode [ 46.078273][ T5974] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.083881][ T5974] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.087099][ T5972] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.089379][ T5972] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.097599][ T5972] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.160151][ T5972] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.162354][ T5972] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.170687][ T5972] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.177516][ T5987] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.180017][ T5987] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.182246][ T5987] bridge_slave_0: entered allmulticast mode [ 46.184800][ T5987] bridge_slave_0: entered promiscuous mode [ 46.188720][ T5974] team0: Port device team_slave_0 added [ 46.198726][ T5974] team0: Port device team_slave_1 added [ 46.204984][ T5987] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.206985][ T5987] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.209168][ T5987] bridge_slave_1: entered allmulticast mode [ 46.211841][ T5987] bridge_slave_1: entered promiscuous mode [ 46.248359][ T5987] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.271199][ T5987] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.287911][ T5974] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.290872][ T5974] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.300396][ T5974] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.374711][ T5974] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.376887][ T5974] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.384839][ T5974] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.388842][ T5973] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.391297][ T5973] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.393569][ T5973] bridge_slave_0: entered allmulticast mode [ 46.396166][ T5973] bridge_slave_0: entered promiscuous mode [ 46.416603][ T5972] hsr_slave_0: entered promiscuous mode [ 46.418881][ T5972] hsr_slave_1: entered promiscuous mode [ 46.422903][ T5987] team0: Port device team_slave_0 added [ 46.428926][ T5987] team0: Port device team_slave_1 added [ 46.444187][ T5973] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.446438][ T5973] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.448721][ T5973] bridge_slave_1: entered allmulticast mode [ 46.451693][ T5973] bridge_slave_1: entered promiscuous mode [ 46.510026][ T5973] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.517818][ T5973] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.521190][ T5987] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.523432][ T5987] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.531407][ T5987] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.587540][ T5987] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.590469][ T5987] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.600464][ T5987] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.626393][ T5974] hsr_slave_0: entered promiscuous mode [ 46.628780][ T5974] hsr_slave_1: entered promiscuous mode [ 46.631962][ T5974] debugfs: 'hsr0' already exists in 'hsr' [ 46.633809][ T5974] Cannot create hsr debugfs directory [ 46.680253][ T5973] team0: Port device team_slave_0 added [ 46.685256][ T5973] team0: Port device team_slave_1 added [ 46.781970][ T5973] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.784905][ T5973] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.793260][ T5973] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.837351][ T5973] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.839683][ T5973] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.847614][ T5973] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.855686][ T5987] hsr_slave_0: entered promiscuous mode [ 46.858841][ T5987] hsr_slave_1: entered promiscuous mode [ 46.861153][ T5987] debugfs: 'hsr0' already exists in 'hsr' [ 46.862955][ T5987] Cannot create hsr debugfs directory [ 46.975925][ T5973] hsr_slave_0: entered promiscuous mode [ 46.978155][ T5973] hsr_slave_1: entered promiscuous mode [ 46.980491][ T5973] debugfs: 'hsr0' already exists in 'hsr' [ 46.982329][ T5973] Cannot create hsr debugfs directory [ 47.079531][ T5972] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 47.087054][ T5972] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 47.094176][ T5972] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 47.117903][ T5972] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 47.165311][ T5974] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 47.172245][ T5974] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 47.176338][ T5974] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 47.181345][ T5974] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 47.219555][ T5987] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 47.224181][ T5987] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 47.229388][ T5987] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 47.233690][ T5987] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 47.299861][ T5973] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 47.306150][ T5973] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 47.312971][ T5973] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 47.318928][ T5972] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.322556][ T5973] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 47.328908][ T5974] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.352271][ T5972] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.367226][ T5974] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.373666][ T47] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.376030][ T47] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.379781][ T47] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.382121][ T47] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.392219][ T47] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.394475][ T47] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.397638][ T47] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.399927][ T47] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.420379][ T63] Bluetooth: hci3: command tx timeout [ 47.420412][ T5981] Bluetooth: hci2: command tx timeout [ 47.420449][ T5337] Bluetooth: hci0: command tx timeout [ 47.444276][ T5987] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.476394][ T5987] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.485154][ T47] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.487534][ T47] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.497571][ T5973] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.499893][ T5981] Bluetooth: hci1: command tx timeout [ 47.508707][ T5973] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.515821][ T90] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.518294][ T90] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.527792][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.530062][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.544923][ T1233] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.547721][ T1233] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.588472][ T5972] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.602880][ T5974] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.639090][ T5972] veth0_vlan: entered promiscuous mode [ 47.657825][ T5972] veth1_vlan: entered promiscuous mode [ 47.669116][ T5974] veth0_vlan: entered promiscuous mode [ 47.677154][ T5987] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.683362][ T5974] veth1_vlan: entered promiscuous mode [ 47.712960][ T5972] veth0_macvtap: entered promiscuous mode [ 47.721598][ T5974] veth0_macvtap: entered promiscuous mode [ 47.725356][ T5972] veth1_macvtap: entered promiscuous mode [ 47.735217][ T5974] veth1_macvtap: entered promiscuous mode [ 47.738066][ T5987] veth0_vlan: entered promiscuous mode [ 47.754268][ T5972] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 47.760680][ T5973] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.765181][ T5987] veth1_vlan: entered promiscuous mode [ 47.770193][ T5972] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 47.777615][ T5974] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 47.783057][ T1137] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.787269][ T1137] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.794278][ T5974] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 47.797511][ T1137] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.801627][ T1137] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.814115][ T47] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.826738][ T47] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.830958][ T47] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.838704][ T47] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.871899][ T5987] veth0_macvtap: entered promiscuous mode [ 47.882512][ T5973] veth0_vlan: entered promiscuous mode [ 47.884819][ T5987] veth1_macvtap: entered promiscuous mode [ 47.891350][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.893792][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.910360][ T5987] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 47.919955][ T5973] veth1_vlan: entered promiscuous mode [ 47.927492][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.930810][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.936859][ T5987] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 47.947565][ T47] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.951029][ T47] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.954684][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.955442][ T1137] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.957757][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.963054][ T1137] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.970991][ T1137] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.973915][ T1137] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.993018][ T5973] veth0_macvtap: entered promiscuous mode [ 47.996252][ T5974] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 48.002443][ T5973] veth1_macvtap: entered promiscuous mode [ 48.026505][ T5973] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.036116][ T1137] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.039366][ T1137] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.046095][ T5973] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.059132][ T90] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.062982][ T90] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.069879][ T90] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.072650][ T90] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.075746][ T1233] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.078201][ T1233] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.107998][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.113159][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.132421][ T1233] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.135549][ T1233] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.190882][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 48.198318][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 49.079891][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 49.500940][ T5981] Bluetooth: hci3: command tx timeout [ 49.503705][ T63] Bluetooth: hci0: command tx timeout [ 49.505765][ T63] Bluetooth: hci2: command tx timeout [ 49.589496][ T5981] Bluetooth: hci1: command tx timeout [ 49.673494][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 49.679615][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 50.200858][ T0] NOHZ tick-stop error: local softirq work is pending, handler #280!!! [ 50.371965][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 50.760859][ T6105] syzkaller1: entered promiscuous mode [ 50.762616][ T6105] syzkaller1: entered allmulticast mode [ 50.779662][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 50.782283][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 50.784996][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 50.864681][ T6110] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11'. [ 50.963835][ T6110] capability: warning: `syz.0.11' uses deprecated v2 capabilities in a way that may be insecure [ 51.032549][ T6105] program syz.1.10 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 51.076911][ T6105] nfs: Unknown parameter 'ntext' [ 51.579782][ T63] Bluetooth: hci0: command tx timeout [ 51.589573][ T63] Bluetooth: hci3: command tx timeout [ 51.591941][ T63] Bluetooth: hci2: command tx timeout [ 51.669562][ T5337] Bluetooth: hci1: command tx timeout [ 53.116799][ T6123] kexec: Could not allocate control_code_buffer [ 53.194439][ T6134] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(10) [ 53.196598][ T6134] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 53.217289][ T6134] vhci_hcd vhci_hcd.0: Device attached [ 53.226870][ T6134] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(12) [ 53.228978][ T6134] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 53.232824][ T6134] vhci_hcd vhci_hcd.0: Device attached [ 53.239138][ T6134] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 53.244064][ T6134] vhci_hcd vhci_hcd.0: pdev(1) rhport(3) sockfd(17) [ 53.246172][ T6134] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 53.248687][ T6134] vhci_hcd vhci_hcd.0: Device attached [ 53.254121][ T6134] vhci_hcd vhci_hcd.0: pdev(1) rhport(4) sockfd(19) [ 53.256254][ T6134] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 53.259051][ T6134] vhci_hcd vhci_hcd.0: Device attached [ 53.263540][ T6134] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(21) [ 53.265652][ T6134] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 53.268887][ T6134] vhci_hcd vhci_hcd.0: Device attached [ 53.276757][ T6134] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 53.285411][ T6134] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 53.295759][ T6134] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 53.306611][ T6134] vhci_hcd vhci_hcd.0: port 0 already used [ 53.339025][ T6145] vhci_hcd: connection closed [ 53.340467][ T1233] vhci_hcd: stop threads [ 53.340584][ T6141] vhci_hcd: connection closed [ 53.341409][ T6143] vhci_hcd: connection closed [ 53.344385][ T1233] vhci_hcd: release socket [ 53.345843][ T6135] vhci_hcd: connection closed [ 53.347850][ T6139] vhci_hcd: connection closed [ 53.347919][ T1233] vhci_hcd: disconnect device [ 53.348229][ T1233] vhci_hcd: stop threads [ 53.358716][ T1233] vhci_hcd: release socket [ 53.361971][ T1233] vhci_hcd: disconnect device [ 53.363683][ T1233] vhci_hcd: stop threads [ 53.365389][ T1233] vhci_hcd: release socket [ 53.367027][ T1233] vhci_hcd: disconnect device [ 53.368759][ T1233] vhci_hcd: stop threads [ 53.370311][ T1233] vhci_hcd: release socket [ 53.371866][ T1233] vhci_hcd: disconnect device [ 53.373827][ T1233] vhci_hcd: stop threads [ 53.375280][ T1233] vhci_hcd: release socket [ 53.376879][ T1233] vhci_hcd: disconnect device [ 53.389938][ T6022] vhci_hcd: vhci_device speed not set [ 53.489744][ T6150] block device autoloading is deprecated and will be removed. [ 53.660508][ T5337] Bluetooth: hci2: command tx timeout [ 53.662826][ T5337] Bluetooth: hci3: command 0x0419 tx timeout [ 53.664807][ T63] Bluetooth: hci0: command tx timeout [ 53.739583][ T5337] Bluetooth: hci1: command tx timeout [ 54.401138][ T6159] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(11) [ 54.403251][ T6159] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 54.419815][ T6159] vhci_hcd vhci_hcd.0: Device attached [ 54.979691][ T61] usb 41-1: new high-speed USB device number 2 using vhci_hcd [ 55.491904][ T6160] vhci_hcd: connection reset by peer [ 55.749132][ T1137] vhci_hcd: stop threads [ 55.751855][ T1137] vhci_hcd: release socket [ 55.753723][ T1137] vhci_hcd: disconnect device [ 55.776250][ T5337] Bluetooth: hci3: command 0x0419 tx timeout [ 57.574328][ T6199] overlayfs: failed to resolve './file1': -2 [ 58.530069][ T6218] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(10) [ 58.532168][ T6218] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 58.534819][ T6218] vhci_hcd vhci_hcd.0: Device attached [ 58.695386][ T6218] 9pnet: Could not find request transport: Kdæ)W [ 59.439641][ T6219] vhci_hcd: connection closed [ 59.527934][ T1136] vhci_hcd: stop threads [ 59.532359][ T1136] vhci_hcd: release socket [ 59.539922][ T1136] vhci_hcd: disconnect device [ 60.209715][ T61] vhci_hcd: vhci_device speed not set [ 60.513409][ T40] audit: type=1804 audit(1754461892.485:2): pid=6241 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.34" name="/newroot/6/bus/bus" dev="tmpfs" ino=57 res=1 errno=0 [ 63.474189][ T10] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 64.011488][ T10] usb 8-1: Using ep0 maxpacket: 16 [ 64.030699][ T10] usb 8-1: config 0 has no interfaces? [ 64.041946][ T10] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 64.044790][ T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 64.047276][ T10] usb 8-1: Product: syz [ 64.048715][ T10] usb 8-1: Manufacturer: syz [ 64.050944][ T10] usb 8-1: SerialNumber: syz [ 64.061661][ T10] usb 8-1: config 0 descriptor?? [ 64.906221][ T6287] netlink: 12 bytes leftover after parsing attributes in process `syz.2.45'. [ 65.485647][ T6292] mmap: syz.1.44 (6292) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 65.947474][ T6263] Set syz1 is full, maxelem 65536 reached [ 66.022674][ T1455] usb 8-1: USB disconnect, device number 2 [ 66.118216][ T6312] random: crng reseeded on system resumption [ 68.132391][ T6347] tipc: Failed to remove unknown binding: 66,1,1/0:2151383385/2151383387 [ 68.135214][ T6347] tipc: Failed to remove unknown binding: 66,1,1/0:2151383385/2151383387 [ 68.441176][ T6345] Zero length message leads to an empty skb [ 69.903999][ T5330] cfg80211: failed to load regulatory.db [ 69.954946][ T6369] binder: 6367:6369 ioctl c00c620f 80000740 returned -22 [ 70.537420][ T6365] vlan1: entered promiscuous mode [ 70.539188][ T6365] vlan1: entered allmulticast mode [ 70.541008][ T6365] veth0_vlan: entered allmulticast mode [ 70.700676][ T6365] syz.0.62 (6365) used greatest stack depth: 19560 bytes left [ 70.895069][ T6380] netlink: 'syz.1.66': attribute type 4 has an invalid length. [ 70.898412][ T1416] ieee802154 phy0 wpan0: encryption failed: -22 [ 70.900716][ T1416] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.068702][ T6385] netlink: 8 bytes leftover after parsing attributes in process `syz.0.67'. [ 71.608701][ T1116] sr 2:0:0:0: [sr0] tag#19 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 71.629495][ T1116] sr 2:0:0:0: [sr0] tag#19 Sense Key : Illegal Request [current] [ 71.637975][ T1116] sr 2:0:0:0: [sr0] tag#19 Add. Sense: Invalid command operation code [ 71.651252][ T1116] sr 2:0:0:0: [sr0] tag#19 CDB: Write(10) 2a 00 00 00 00 00 00 00 04 00 [ 71.659536][ T1116] critical target error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 2 prio class 0 [ 71.662913][ T1116] Buffer I/O error on dev sr0, logical block 0, lost async page write [ 71.665547][ T1116] Buffer I/O error on dev sr0, logical block 1, lost async page write [ 72.200519][ T6383] kexec: Could not allocate control_code_buffer [ 72.218685][ T6383] Process accounting resumed [ 74.108783][ T6418] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 74.214412][ T24] IPVS: starting estimator thread 0... [ 74.309651][ T6422] IPVS: using max 43 ests per chain, 103200 per kthread [ 75.118527][ T6448] vxcan1: tx drop: invalid da for name 0x0000000000000016 [ 75.260739][ T6419] evm: overlay not supported [ 75.435776][ T6480] block device autoloading is deprecated and will be removed. [ 75.846737][ T6491] process 'syz.3.80' launched '/dev/fd/11' with NULL argv: empty string added [ 75.942362][ T6482] sd 0:0:0:0: PR command failed: 1026 [ 75.944189][ T6482] sd 0:0:0:0: Sense Key : Illegal Request [current] [ 75.946306][ T6482] sd 0:0:0:0: Add. Sense: Invalid command operation code [ 76.264786][ T6499] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 76.293500][ T6502] syz.3.84(6502): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 77.377196][ T6060] libceph: connect (1)[c::]:6789 error -101 [ 77.379344][ T6060] libceph: mon0 (1)[c::]:6789 connect error [ 77.398953][ T6519] ceph: No mds server is up or the cluster is laggy [ 77.463903][ T6523] vxfs: WRONG superblock magic 00000000 at 1 [ 77.467161][ T6523] vxfs: WRONG superblock magic 00000000 at 8 [ 77.496191][ T6523] vxfs: can't find superblock. [ 77.996183][ T6529] netlink: 4 bytes leftover after parsing attributes in process `syz.2.89'. [ 78.907383][ T40] audit: type=1326 audit(1754461910.665:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6533 comm="syz.1.90" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709e579 code=0x7ffc0000 [ 78.932372][ T40] audit: type=1326 audit(1754461910.665:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6533 comm="syz.1.90" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709e579 code=0x7ffc0000 [ 78.938948][ T40] audit: type=1326 audit(1754461910.675:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6533 comm="syz.1.90" exe="/syz-executor" sig=0 arch=40000003 syscall=394 compat=1 ip=0xf709e579 code=0x7ffc0000 [ 78.948219][ T40] audit: type=1326 audit(1754461910.675:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6533 comm="syz.1.90" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709e579 code=0x7ffc0000 [ 78.957461][ T40] audit: type=1326 audit(1754461910.675:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6533 comm="syz.1.90" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709e579 code=0x7ffc0000 [ 78.966109][ T40] audit: type=1326 audit(1754461910.675:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6533 comm="syz.1.90" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf709e579 code=0x7ffc0000 [ 78.975705][ T40] audit: type=1326 audit(1754461910.675:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6533 comm="syz.1.90" exe="/syz-executor" sig=0 arch=40000003 syscall=346 compat=1 ip=0xf709e579 code=0x7ffc0000 [ 78.980811][ T6547] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 78.986688][ T6547] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 78.986995][ T6547] vhci_hcd vhci_hcd.0: Device attached [ 78.986984][ T40] audit: type=1326 audit(1754461910.675:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6533 comm="syz.1.90" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf709e579 code=0x7ffc0000 [ 78.987095][ T40] audit: type=1326 audit(1754461910.675:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6533 comm="syz.1.90" exe="/syz-executor" sig=0 arch=40000003 syscall=346 compat=1 ip=0xf709e579 code=0x7ffc0000 [ 78.987119][ T40] audit: type=1326 audit(1754461910.675:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6533 comm="syz.1.90" exe="/syz-executor" sig=0 arch=40000003 syscall=6 compat=1 ip=0xf709e579 code=0x7ffc0000 [ 79.288381][ T6547] netdevsim netdevsim3: Direct firmware load for @ failed with error -2 [ 79.291274][ T6547] netdevsim netdevsim3: Falling back to sysfs fallback for: @ [ 79.374381][ T29] usb 43-1: new low-speed USB device number 2 using vhci_hcd [ 79.987014][ T6548] vhci_hcd: connection reset by peer [ 79.994454][ T47] vhci_hcd: stop threads [ 79.999096][ T47] vhci_hcd: release socket [ 80.001840][ T47] vhci_hcd: disconnect device [ 80.040731][ T6564] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 80.053671][ T6564] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 80.446361][ T6571] kvm_intel: kvm [6567]: vcpu1, guest rIP: 0xfff0 Unhandled WRMSR(0x1d9) = 0x6 [ 80.650829][ T6060] IPVS: starting estimator thread 0... [ 80.739528][ T6572] IPVS: using max 43 ests per chain, 103200 per kthread [ 81.482680][ T6579] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 81.498239][ T5337] Bluetooth: hci2: Invalid handle: 0x30c9 > 0x0eff [ 81.580495][ T6576] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 82.994922][ T6596] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 83.103799][ T5975] libceph: connect (1)[c::]:6789 error -101 [ 83.106354][ T5975] libceph: mon0 (1)[c::]:6789 connect error [ 83.155520][ T6608] ceph: No mds server is up or the cluster is laggy [ 83.178497][ T6611] /dev/nullb0: Can't open blockdev [ 84.139673][ T5337] Bluetooth: hci3: command 0x0419 tx timeout [ 84.346408][ T6060] libceph: connect (1)[c::]:6789 error -101 [ 84.349924][ T6060] libceph: mon0 (1)[c::]:6789 connect error [ 84.491704][ T29] vhci_hcd: vhci_device speed not set [ 84.610507][ T6060] libceph: connect (1)[c::]:6789 error -101 [ 84.612576][ T6060] libceph: mon0 (1)[c::]:6789 connect error [ 84.911225][ T6623] ceph: No mds server is up or the cluster is laggy [ 84.961528][ T6596] Set syz1 is full, maxelem 65536 reached [ 85.479533][ T6639] netlink: 260 bytes leftover after parsing attributes in process `syz.1.112'. [ 85.499077][ T6639] netlink: 260 bytes leftover after parsing attributes in process `syz.1.112'. [ 85.607871][ T6640] netlink: 260 bytes leftover after parsing attributes in process `syz.1.112'. [ 85.611062][ T6640] netlink: 260 bytes leftover after parsing attributes in process `syz.1.112'. [ 85.625263][ T6640] netlink: 'syz.1.112': attribute type 33 has an invalid length. [ 85.627712][ T6640] netlink: 152 bytes leftover after parsing attributes in process `syz.1.112'. [ 85.634784][ T6640] netlink: 'syz.1.112': attribute type 10 has an invalid length. [ 85.641586][ T6640] team0: Port device team_slave_0 removed [ 88.260201][ T6672] syz.2.120 uses obsolete (PF_INET,SOCK_PACKET) [ 88.265263][ T6672] syzkaller1: entered promiscuous mode [ 88.267535][ T6672] syzkaller1: entered allmulticast mode [ 89.692179][ T6690] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 89.695570][ T6690] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 89.707566][ T6690] vhci_hcd vhci_hcd.0: Device attached [ 89.826745][ T6690] netdevsim netdevsim3: Direct firmware load for @ failed with error -2 [ 89.830582][ T6690] netdevsim netdevsim3: Falling back to sysfs fallback for: @ [ 90.441473][ T29] usb 44-1: SetAddress Request (2) to port 0 [ 90.445248][ T29] usb 44-1: new SuperSpeed USB device number 2 using vhci_hcd [ 91.202545][ T6712] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 91.204615][ T6712] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 91.207246][ T6712] vhci_hcd vhci_hcd.0: Device attached [ 91.499180][ T6691] vhci_hcd: connection reset by peer [ 91.502594][ T1233] vhci_hcd: stop threads [ 91.504029][ T1233] vhci_hcd: release socket [ 91.506024][ T1233] vhci_hcd: disconnect device [ 91.522312][ T6711] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 91.599548][ T6060] usb 42-1: SetAddress Request (2) to port 0 [ 91.601540][ T6060] usb 42-1: new SuperSpeed USB device number 2 using vhci_hcd [ 91.704883][ T6713] vhci_hcd: connection reset by peer [ 91.715847][ T1138] vhci_hcd: stop threads [ 91.717203][ T1138] vhci_hcd: release socket [ 91.718937][ T1138] vhci_hcd: disconnect device [ 91.773239][ T6724] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 91.783932][ T6724] netlink: 'syz.1.128': attribute type 10 has an invalid length. [ 93.794091][ T6753] netlink: 4 bytes leftover after parsing attributes in process `syz.1.135'. [ 94.529550][ T6042] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 94.604063][ T6745] wireguard0: entered promiscuous mode [ 94.605831][ T6745] wireguard0: entered allmulticast mode [ 94.717166][ T6042] usb 5-1: Using ep0 maxpacket: 16 [ 94.724501][ T6042] usb 5-1: config 0 has no interfaces? [ 94.735359][ T40] kauditd_printk_skb: 11 callbacks suppressed [ 94.735368][ T40] audit: type=1326 audit(1754461926.705:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6757 comm="syz.1.136" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf709e579 code=0x7ffc0000 [ 94.740690][ T6042] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 94.745665][ T40] audit: type=1326 audit(1754461926.705:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6757 comm="syz.1.136" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf709e5a7 code=0x7ffc0000 [ 94.756637][ T40] audit: type=1326 audit(1754461926.705:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6757 comm="syz.1.136" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709e579 code=0x7ffc0000 [ 94.763280][ T40] audit: type=1326 audit(1754461926.705:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6757 comm="syz.1.136" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf709e579 code=0x7ffc0000 [ 94.770104][ T40] audit: type=1326 audit(1754461926.705:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6757 comm="syz.1.136" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf709e5a7 code=0x7ffc0000 [ 94.776667][ T40] audit: type=1326 audit(1754461926.705:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6757 comm="syz.1.136" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709e579 code=0x7ffc0000 [ 94.782914][ T6042] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.785679][ T40] audit: type=1326 audit(1754461926.715:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6757 comm="syz.1.136" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709e579 code=0x7ffc0000 [ 94.786801][ T6042] usb 5-1: Product: syz [ 94.793273][ T40] audit: type=1326 audit(1754461926.715:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6757 comm="syz.1.136" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709e579 code=0x7ffc0000 [ 94.800739][ T40] audit: type=1326 audit(1754461926.715:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6757 comm="syz.1.136" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf709e579 code=0x7ffc0000 [ 94.807787][ T40] audit: type=1326 audit(1754461926.715:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6757 comm="syz.1.136" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf709e5a7 code=0x7ffc0000 [ 94.832247][ T6042] usb 5-1: Manufacturer: syz [ 94.844719][ T6042] usb 5-1: SerialNumber: syz [ 94.863218][ T6042] usb 5-1: config 0 descriptor?? [ 94.904889][ T6758] input: syz1 as /devices/virtual/input/input6 [ 95.153356][ T6758] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 95.603329][ T6765] bridge1: entered promiscuous mode [ 95.770125][ T6765] 9pnet: Could not find request transport: fd0xffffffffffffffff [ 95.869544][ T29] usb 44-1: device descriptor read/8, error -110 [ 96.010147][ T6768] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 96.307122][ T29] usb usb44-port1: attempt power cycle [ 96.495109][ T6750] Set syz1 is full, maxelem 65536 reached [ 96.535383][ T34] usb 5-1: USB disconnect, device number 2 [ 96.700643][ T6060] usb 42-1: device descriptor read/8, error -110 [ 96.785402][ T6784] 9pnet_virtio: no channels available for device syz [ 96.871079][ T13] Bluetooth: Error in BCSP hdr checksum [ 96.931070][ T29] usb usb44-port1: unable to enumerate USB device [ 97.090812][ T6060] usb usb42-port1: attempt power cycle [ 98.004451][ T6796] bridge1: entered promiscuous mode [ 98.060066][ T6060] usb usb42-port1: unable to enumerate USB device [ 98.207198][ T6798] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 98.211936][ T6798] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 98.229001][ T6798] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 98.231609][ T6798] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 98.238950][ T6798] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 98.241976][ T6798] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 98.248888][ T6798] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 98.251407][ T6798] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 98.357499][ T6805] bridge_slave_0: left allmulticast mode [ 98.359951][ T6805] bridge_slave_0: left promiscuous mode [ 98.363161][ T6805] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.368886][ T6805] bridge_slave_1: left allmulticast mode [ 98.372793][ T6805] bridge_slave_1: left promiscuous mode [ 98.375095][ T6805] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.384091][ T6805] bond0: (slave bond_slave_0): Releasing backup interface [ 98.390015][ T6805] bond0: (slave bond_slave_1): Releasing backup interface [ 98.398001][ T6805] team0: Port device team_slave_1 removed [ 98.400334][ T6805] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 98.402663][ T6805] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 98.406998][ T6805] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 98.409309][ T6805] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 98.420790][ T55] syz1: Port: 1 Link DOWN [ 98.421198][ T6806] vlan0: entered promiscuous mode [ 98.427965][ T6806] team0: Port device vlan0 added [ 98.480608][ T6805] tipc: Started in network mode [ 98.482296][ T6805] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 98.484605][ T6805] tipc: Enabled bearer , priority 0 [ 98.629618][ T63] Bluetooth: hci4: command 0x1003 tx timeout [ 98.630691][ T5981] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 99.135687][ T6812] fuse: Bad value for 'user_id' [ 99.137418][ T6812] fuse: Bad value for 'user_id' [ 99.505124][ T55] tipc: Node number set to 11578026 [ 99.764369][ T6815] netlink: 160 bytes leftover after parsing attributes in process `syz.1.152'. [ 100.013449][ T6823] nvme_fabrics: missing parameter 'transport=%s' [ 100.015720][ T6823] nvme_fabrics: missing parameter 'nqn=%s' [ 100.261214][ T55] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 100.412534][ T55] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 100.419644][ T55] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 24623, setting to 1024 [ 100.423882][ T55] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 100.443009][ T55] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 100.446476][ T55] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.452530][ T6817] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 100.460626][ T55] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 100.465432][ C3] ata1: illegal qc_active transition (00000000->00800000) [ 100.879700][ T1106] ata1: SATA link up 1.5 Gbps (SStatus 113 SControl 300) [ 100.892022][ T1106] ata1.00: configured for UDMA/100 [ 101.076069][ T6845] netlink: 56 bytes leftover after parsing attributes in process `syz.3.151'. [ 103.669736][ T29] usb 8-1: USB disconnect, device number 3 [ 105.157428][ T40] kauditd_printk_skb: 1924 callbacks suppressed [ 105.157439][ T40] audit: type=1326 audit(1754461937.125:1958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6872 comm="syz.2.164" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be579 code=0x7fc00000 [ 105.195375][ T6890] netlink: 28 bytes leftover after parsing attributes in process `syz.1.166'. [ 105.219877][ T6060] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 105.381252][ T6896] netlink: 'syz.2.168': attribute type 4 has an invalid length. [ 105.401795][ T6060] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 105.406489][ T6060] usb 8-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 105.412839][ T6060] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 105.417765][ T6060] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 105.423657][ T6060] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 105.431948][ T6060] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 105.435668][ T6060] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 105.449527][ T6060] usb 8-1: Product: syz [ 105.457716][ T6060] usb 8-1: Manufacturer: syz [ 105.466256][ T6060] cdc_wdm 8-1:1.0: skipping garbage [ 105.468871][ T6060] cdc_wdm 8-1:1.0: skipping garbage [ 105.480476][ T6060] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 105.485015][ T6060] cdc_wdm 8-1:1.0: Unknown control protocol [ 105.589642][ T34] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 105.685137][ C1] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 105.685216][ T1455] usb 8-1: USB disconnect, device number 4 [ 105.687394][ C1] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 105.687407][ C1] cdc_wdm 8-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 105.694533][ T6882] cdc_wdm 8-1:1.0: Tx URB error: -19 [ 105.761304][ T34] usb 5-1: config 0 has no interfaces? [ 105.764515][ T34] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 105.767327][ T34] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.770136][ T34] usb 5-1: Product: syz [ 105.771472][ T34] usb 5-1: Manufacturer: syz [ 105.772939][ T34] usb 5-1: SerialNumber: syz [ 105.775580][ T34] usb 5-1: config 0 descriptor?? [ 106.029659][ T1455] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 106.145788][ T6902] netlink: 4 bytes leftover after parsing attributes in process `syz.1.169'. [ 106.193156][ T1455] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 106.195945][ T1455] usb 8-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 106.199388][ T1455] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 106.209648][ T1455] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 106.219617][ T1455] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 106.232282][ T1455] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 106.235054][ T1455] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 106.237563][ T1455] usb 8-1: Product: syz [ 106.238924][ T1455] usb 8-1: Manufacturer: syz [ 106.261977][ T1455] cdc_wdm 8-1:1.0: skipping garbage [ 106.311574][ T1455] cdc_wdm 8-1:1.0: skipping garbage [ 106.330396][ T1455] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 106.339545][ T1455] cdc_wdm 8-1:1.0: Unknown control protocol [ 106.849059][ T1455] usb 5-1: USB disconnect, device number 3 [ 107.061346][ T6910] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 107.067613][ T6910] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 107.737774][ T6917] netlink: zone id is out of range [ 107.739674][ T6917] netlink: zone id is out of range [ 107.741907][ T6917] netlink: del zone limit has 4 unknown bytes [ 108.090899][ T24] usb 8-1: USB disconnect, device number 5 [ 108.287645][ T6921] netlink: 'syz.2.173': attribute type 4 has an invalid length. [ 108.298573][ T6921] netlink: 'syz.2.173': attribute type 4 has an invalid length. [ 109.280582][ T6952] netlink: 12 bytes leftover after parsing attributes in process `syz.3.178'. [ 109.908947][ T6965] vivid-007: ================= START STATUS ================= [ 109.911850][ T6965] vivid-007: Enable Output Cropping: true [ 109.914739][ T6965] vivid-007: Enable Output Composing: true [ 109.916600][ T6965] vivid-007: Enable Output Scaler: true [ 109.918430][ T6965] vivid-007: Tx RGB Quantization Range: Automatic [ 109.920714][ T6965] vivid-007: Transmit Mode: HDMI [ 109.922339][ T6965] vivid-007: Hotplug Present: 0x00000000 [ 109.924140][ T6965] vivid-007: RxSense Present: 0x00000000 [ 109.925955][ T6965] vivid-007: EDID Present: 0x00000000 [ 109.927711][ T6965] vivid-007: ================== END STATUS ================== [ 109.936373][ T6965] netlink: 4 bytes leftover after parsing attributes in process `syz.2.181'. [ 109.964108][ T6958] kernel profiling enabled (shift: 17) [ 110.297991][ T6966] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.423993][ T6968] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 110.431979][ T6968] team0: Port device batadv1 added [ 110.532218][ T6966] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.650754][ T6966] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.749067][ T6966] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.945816][ T1138] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.956032][ T1138] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.964952][ T1138] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.972405][ T1138] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.011473][ T6976] fuse: Bad value for 'user_id' [ 111.013563][ T6976] fuse: Bad value for 'user_id' [ 113.100286][ T29] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 113.641489][ T29] usb 6-1: config 0 has no interfaces? [ 113.645505][ T29] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 113.651154][ T29] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.656399][ T29] usb 6-1: Product: syz [ 113.659124][ T29] usb 6-1: Manufacturer: syz [ 113.663148][ T29] usb 6-1: SerialNumber: syz [ 113.667384][ T29] usb 6-1: config 0 descriptor?? [ 114.938906][ T29] usb 6-1: USB disconnect, device number 2 [ 115.604813][ T7043] netlink: 20 bytes leftover after parsing attributes in process `syz.1.200'. [ 117.100168][ T7058] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 117.102742][ T7058] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 117.149553][ T7058] vhci_hcd vhci_hcd.0: Device attached [ 117.202545][ T7057] netdevsim netdevsim2: Direct firmware load for @ failed with error -2 [ 117.205397][ T7057] netdevsim netdevsim2: Falling back to sysfs fallback for: @ [ 117.419578][ T29] usb 42-1: SetAddress Request (6) to port 0 [ 117.422080][ T29] usb 42-1: new SuperSpeed USB device number 6 using vhci_hcd [ 117.462598][ T7061] vhci_hcd: connection reset by peer [ 117.464433][ T90] vhci_hcd: stop threads [ 117.465966][ T90] vhci_hcd: release socket [ 117.468290][ T90] vhci_hcd: disconnect device [ 118.566306][ T7083] fuse: Bad value for 'user_id' [ 118.567899][ T7083] fuse: Bad value for 'user_id' [ 119.645615][ T7102] netlink: 20 bytes leftover after parsing attributes in process `syz.1.213'. [ 122.459978][ T29] usb 42-1: device descriptor read/8, error -110 [ 122.602392][ T7151] bridge2: entered promiscuous mode [ 122.667580][ T7153] netlink: 20 bytes leftover after parsing attributes in process `syz.2.226'. [ 122.983187][ T29] usb usb42-port1: attempt power cycle [ 123.539939][ T29] usb usb42-port1: unable to enumerate USB device [ 123.672056][ T7174] netlink: 20 bytes leftover after parsing attributes in process `syz.2.238'. [ 126.183067][ T7213] bridge0: entered promiscuous mode [ 126.259508][ T1455] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 126.411662][ T1455] usb 8-1: config 0 has no interfaces? [ 126.416444][ T1455] usb 8-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 126.419837][ T1455] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.422461][ T1455] usb 8-1: Product: syz [ 126.423779][ T1455] usb 8-1: Manufacturer: syz [ 126.425235][ T1455] usb 8-1: SerialNumber: syz [ 126.434129][ T1455] usb 8-1: config 0 descriptor?? [ 127.295113][ T7226] netlink: 20 bytes leftover after parsing attributes in process `syz.0.242'. [ 127.451058][ T1455] usb 8-1: USB disconnect, device number 6 [ 127.719115][ T7230] netlink: 32 bytes leftover after parsing attributes in process `syz.2.244'. [ 127.722122][ T7230] netlink: 32 bytes leftover after parsing attributes in process `syz.2.244'. [ 127.895847][ T7233] netlink: 'syz.3.243': attribute type 1 has an invalid length. [ 127.940578][ T7233] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 127.951593][ T1137] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 127.957387][ T7233] 8021q: adding VLAN 0 to HW filter on device bond1 [ 127.978807][ T29] Process accounting resumed [ 128.011675][ T7230] netlink: 32 bytes leftover after parsing attributes in process `syz.2.244'. [ 128.014553][ T7230] netlink: 32 bytes leftover after parsing attributes in process `syz.2.244'. [ 128.064587][ T7230] netlink: 32 bytes leftover after parsing attributes in process `syz.2.244'. [ 128.067614][ T7230] netlink: 32 bytes leftover after parsing attributes in process `syz.2.244'. [ 128.067933][ T7233] bond1 (unregistering): (slave ip6gretap1): Removing an active aggregator [ 128.075874][ T7233] bond1 (unregistering): (slave ip6gretap1): Releasing backup interface [ 128.080250][ T7233] bond1 (unregistering): Released all slaves [ 128.260984][ T7247] netlink: 20 bytes leftover after parsing attributes in process `syz.1.254'. [ 128.405562][ T7251] netlink: 260 bytes leftover after parsing attributes in process `syz.2.248'. [ 128.408630][ T7251] netlink: 260 bytes leftover after parsing attributes in process `syz.2.248'. [ 128.492154][ T7253] netlink: 260 bytes leftover after parsing attributes in process `syz.2.248'. [ 128.504357][ T7253] netlink: 'syz.2.248': attribute type 33 has an invalid length. [ 128.508963][ T7253] netlink: 'syz.2.248': attribute type 10 has an invalid length. [ 128.515717][ T7253] team0: Port device team_slave_0 removed [ 131.018610][ T7284] random: crng reseeded on system resumption [ 131.139136][ T7281] bridge1: entered promiscuous mode [ 131.266330][ T29] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 131.452609][ T29] usb 7-1: config 0 has no interfaces? [ 131.461611][ T29] usb 7-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 131.464794][ T29] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.467713][ T29] usb 7-1: Product: syz [ 131.469726][ T29] usb 7-1: Manufacturer: syz [ 131.471462][ T29] usb 7-1: SerialNumber: syz [ 131.475232][ T7281] 9pnet: Could not find request transport: fd0xffffffffffffffff [ 131.540992][ T29] usb 7-1: config 0 descriptor?? [ 132.302300][ T1416] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.304362][ T1416] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.569100][ T6074] usb 7-1: USB disconnect, device number 2 [ 134.769167][ T7341] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 135.002073][ T7341] netlink: 'syz.2.269': attribute type 10 has an invalid length. [ 135.323847][ T7346] netlink: 'syz.1.279': attribute type 1 has an invalid length. [ 135.545598][ T7351] bond3: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 135.588550][ T13] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 135.594093][ T7346] 8021q: adding VLAN 0 to HW filter on device bond3 [ 135.685083][ T7346] bond3 (unregistering): (slave ip6gretap1): Removing an active aggregator [ 135.688143][ T7346] bond3 (unregistering): (slave ip6gretap1): Releasing backup interface [ 135.705313][ T7346] bond3 (unregistering): Released all slaves [ 135.992163][ T7362] __nla_validate_parse: 3 callbacks suppressed [ 135.992175][ T7362] netlink: 20 bytes leftover after parsing attributes in process `syz.0.273'. [ 136.333041][ T54] libceph: connect (1)[c::]:6789 error -101 [ 136.335302][ T54] libceph: mon0 (1)[c::]:6789 connect error [ 136.591855][ T54] libceph: connect (1)[c::]:6789 error -101 [ 136.594340][ T54] libceph: mon0 (1)[c::]:6789 connect error [ 136.890725][ T7366] ceph: No mds server is up or the cluster is laggy [ 137.317659][ T7386] bridge2: entered promiscuous mode [ 138.879705][ T7410] netlink: 20 bytes leftover after parsing attributes in process `syz.3.285'. [ 138.894805][ T7411] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 138.923586][ T7411] netlink: 'syz.0.283': attribute type 10 has an invalid length. [ 139.583809][ T7414] netlink: 260 bytes leftover after parsing attributes in process `syz.3.286'. [ 139.586630][ T7414] netlink: 260 bytes leftover after parsing attributes in process `syz.3.286'. [ 139.684150][ T7419] netlink: 260 bytes leftover after parsing attributes in process `syz.3.286'. [ 139.691219][ T7419] netlink: 260 bytes leftover after parsing attributes in process `syz.3.286'. [ 139.743847][ T7425] netlink: 'syz.3.286': attribute type 33 has an invalid length. [ 139.746836][ T7425] netlink: 152 bytes leftover after parsing attributes in process `syz.3.286'. [ 139.753467][ T7425] netlink: 'syz.3.286': attribute type 10 has an invalid length. [ 139.764333][ T7425] team0: Port device team_slave_0 removed [ 139.808603][ T7427] netlink: 20 bytes leftover after parsing attributes in process `syz.1.294'. [ 140.686544][ T7443] netlink: 'syz.0.292': attribute type 1 has an invalid length. [ 140.877354][ T7446] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 140.881000][ T13] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 140.885856][ T7447] 8021q: adding VLAN 0 to HW filter on device bond1 [ 140.949958][ T7449] bond1 (unregistering): (slave ip6gretap1): Removing an active aggregator [ 140.953141][ T7449] bond1 (unregistering): (slave ip6gretap1): Releasing backup interface [ 140.957142][ T7449] bond1 (unregistering): Released all slaves [ 140.987636][ T7450] bridge2: entered promiscuous mode [ 141.638938][ T7465] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(11) [ 141.641076][ T7465] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 141.643707][ T7465] vhci_hcd vhci_hcd.0: Device attached [ 141.899545][ T54] usb 39-1: new high-speed USB device number 3 using vhci_hcd [ 142.568578][ T7466] vhci_hcd: connection reset by peer [ 142.572787][ T1138] vhci_hcd: stop threads [ 142.574294][ T1138] vhci_hcd: release socket [ 142.575844][ T1138] vhci_hcd: disconnect device [ 142.689086][ T7479] random: crng reseeded on system resumption [ 142.799496][ T6074] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 143.022548][ T6074] usb 5-1: config 0 has no interfaces? [ 143.028602][ T6074] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 143.031670][ T6074] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.034225][ T6074] usb 5-1: Product: syz [ 143.035540][ T6074] usb 5-1: Manufacturer: syz [ 143.037000][ T6074] usb 5-1: SerialNumber: syz [ 143.042483][ T6074] usb 5-1: config 0 descriptor?? [ 143.499601][ T7491] netlink: 20 bytes leftover after parsing attributes in process `syz.2.300'. [ 145.181529][ T6074] usb 5-1: USB disconnect, device number 4 [ 146.730632][ T7534] netlink: 20 bytes leftover after parsing attributes in process `syz.1.311'. [ 147.061948][ T54] vhci_hcd: vhci_device speed not set [ 148.595333][ T7563] wireguard0: entered promiscuous mode [ 148.597171][ T7563] wireguard0: entered allmulticast mode [ 149.133840][ T7569] random: crng reseeded on system resumption [ 150.167672][ T7588] netlink: 20 bytes leftover after parsing attributes in process `syz.0.324'. [ 151.964119][ T7606] syzkaller1: entered promiscuous mode [ 151.966028][ T7606] syzkaller1: entered allmulticast mode [ 152.150232][ T7605] program syz.2.328 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 152.154319][ T7605] nfs: Unknown parameter 'ntext' [ 155.969021][ T7669] wireguard0: entered promiscuous mode [ 155.971046][ T7669] wireguard0: entered allmulticast mode [ 156.404138][ T7686] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.443335][ T7688] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 156.448935][ T7688] team0: Port device batadv1 added [ 156.518181][ T7686] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.585792][ T7686] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.652715][ T7686] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.806467][ T1136] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.823107][ T1136] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.836666][ T13] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.843307][ T13] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.162417][ T7702] netlink: 20 bytes leftover after parsing attributes in process `syz.2.348'. [ 158.206173][ T7716] netlink: 4 bytes leftover after parsing attributes in process `syz.3.354'. [ 158.293824][ T7719] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 158.295920][ T7719] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 158.298729][ T7719] vhci_hcd vhci_hcd.0: Device attached [ 158.421858][ T7719] netdevsim netdevsim2: Direct firmware load for @ failed with error -2 [ 158.426042][ T7719] netdevsim netdevsim2: Falling back to sysfs fallback for: @ [ 158.559507][ T54] usb 41-1: new low-speed USB device number 3 using vhci_hcd [ 158.947487][ T7720] vhci_hcd: connection reset by peer [ 158.953108][ T1138] vhci_hcd: stop threads [ 158.955411][ T1138] vhci_hcd: release socket [ 158.957016][ T1138] vhci_hcd: disconnect device [ 159.562825][ T7736] wireguard0: entered promiscuous mode [ 159.565088][ T7736] wireguard0: entered allmulticast mode [ 160.056020][ T7743] bridge3: entered promiscuous mode [ 160.139641][ T7743] 9pnet: Could not find request transport: fd0xffffffffffffffff [ 161.219253][ T7763] bridge2: entered promiscuous mode [ 161.318905][ T7766] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 161.326730][ T7766] netlink: 'syz.3.365': attribute type 10 has an invalid length. [ 162.231542][ T7778] netlink: 4 bytes leftover after parsing attributes in process `syz.2.367'. [ 162.819938][ T40] audit: type=1326 audit(1754461994.795:1959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7780 comm="syz.3.368" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e579 code=0x7ffc0000 [ 162.826986][ T40] audit: type=1326 audit(1754461994.795:1960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7780 comm="syz.3.368" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e579 code=0x7ffc0000 [ 163.870502][ T54] vhci_hcd: vhci_device speed not set [ 165.186281][ T40] audit: type=1804 audit(1754461997.155:1961): pid=7839 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.384" name="/newroot/101/bus/bus" dev="overlay" ino=555 res=1 errno=0 [ 165.305584][ T40] audit: type=1804 audit(1754461997.165:1962): pid=7839 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.384" name="/newroot/101/bus/bus" dev="overlay" ino=555 res=1 errno=0 [ 168.134850][ T7875] wireguard0: entered promiscuous mode [ 168.143835][ T7875] wireguard0: entered allmulticast mode [ 168.797632][ T7892] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 168.799771][ T7892] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 168.819527][ T7892] vhci_hcd vhci_hcd.0: Device attached [ 169.119572][ T54] usb 39-1: new low-speed USB device number 4 using vhci_hcd [ 169.534837][ T7893] vhci_hcd: connection reset by peer [ 169.538318][ T13] vhci_hcd: stop threads [ 169.539863][ T13] vhci_hcd: release socket [ 169.541342][ T13] vhci_hcd: disconnect device [ 170.863515][ T7922] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.916003][ T7923] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 170.922267][ T7923] team0: Port device batadv1 added [ 171.008709][ T7922] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.059771][ T7922] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.134613][ T7922] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.268118][ T1136] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.284387][ T90] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.293684][ T90] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.301496][ T90] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.410406][ T40] audit: type=1804 audit(1754462003.385:1963): pid=7930 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.405" name="/newroot/99/bus/bus" dev="overlay" ino=537 res=1 errno=0 [ 171.422398][ T40] audit: type=1804 audit(1754462003.395:1964): pid=7930 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.405" name="/newroot/99/bus/bus" dev="overlay" ino=537 res=1 errno=0 [ 174.219562][ T54] vhci_hcd: vhci_device speed not set [ 183.792508][ T8109] syzkaller1: entered promiscuous mode [ 183.794297][ T8109] syzkaller1: entered allmulticast mode [ 183.799221][ T8109] program syz.3.451 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 183.804389][ T8109] nfs: Unknown parameter 'ntext' [ 188.189602][ T10] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 188.449657][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 188.456882][ T10] usb 6-1: config 0 has no interfaces? [ 188.481584][ T10] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 188.485051][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.487870][ T10] usb 6-1: Product: syz [ 188.489345][ T10] usb 6-1: Manufacturer: syz [ 188.493609][ T10] usb 6-1: SerialNumber: syz [ 188.511090][ T10] usb 6-1: config 0 descriptor?? [ 189.004432][ T61] usb 6-1: USB disconnect, device number 3 [ 191.822672][ T8228] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 191.824786][ T8228] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 191.828026][ T8228] vhci_hcd vhci_hcd.0: Device attached [ 191.831797][ T8229] usbip_core: unknown command [ 191.833831][ T8229] vhci_hcd: unknown pdu 774857321 [ 191.835967][ T8229] usbip_core: unknown command [ 191.846198][ T1138] vhci_hcd: stop threads [ 191.847593][ T1138] vhci_hcd: release socket [ 191.849171][ T1138] vhci_hcd: disconnect device [ 191.936843][ T8233] bridge_slave_0: left allmulticast mode [ 191.945878][ T8233] bridge_slave_0: left promiscuous mode [ 191.972194][ T8233] bridge0: port 1(bridge_slave_0) entered disabled state [ 192.200586][ T8241] netlink: 4 bytes leftover after parsing attributes in process `syz.2.478'. [ 193.137024][ T8233] bridge_slave_1: left allmulticast mode [ 193.139054][ T8233] bridge_slave_1: left promiscuous mode [ 193.142263][ T8233] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.149884][ T8233] bond0: (slave bond_slave_0): Releasing backup interface [ 193.168580][ T8233] bond0: (slave bond_slave_1): Releasing backup interface [ 193.388401][ T8233] team0: Port device team_slave_1 removed [ 193.439583][ T8233] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 193.445000][ T8233] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 193.450088][ T8233] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 193.454838][ T8233] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 193.478642][ T8237] team0: Mode changed to "loadbalance" [ 193.743161][ T1416] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.745172][ T1416] ieee802154 phy1 wpan1: encryption failed: -22 [ 193.982917][ T8275] wireguard0: entered promiscuous mode [ 193.984909][ T8275] wireguard0: entered allmulticast mode [ 199.417953][ T8343] input: syz0 as /devices/virtual/input/input9 [ 199.743653][ T8349] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 199.746396][ T8349] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 199.752964][ T8349] vhci_hcd vhci_hcd.0: Device attached [ 199.777460][ T8349] 9pnet_fd: Insufficient options for proto=fd [ 199.857523][ T8350] vhci_hcd: connection closed [ 199.858611][ T90] vhci_hcd: stop threads [ 199.865974][ T90] vhci_hcd: release socket [ 199.867466][ T90] vhci_hcd: disconnect device [ 201.762600][ T8376] netlink: 8 bytes leftover after parsing attributes in process `syz.2.504'. [ 202.576284][ T8375] kexec: Could not allocate control_code_buffer [ 202.595800][ T8375] Process accounting resumed [ 204.940705][ T8420] netlink: 'syz.1.518': attribute type 27 has an invalid length. [ 204.977898][ T8420] tipc: Resetting bearer [ 205.214442][ T8420] vlan0: left promiscuous mode [ 205.275403][ T8420] bridge0: left promiscuous mode [ 205.278531][ T8420] bridge1: left promiscuous mode [ 205.283268][ T8420] bridge2: left promiscuous mode [ 205.465246][ T8431] netlink: 216 bytes leftover after parsing attributes in process `syz.2.520'. [ 205.468178][ T8431] netlink: 216 bytes leftover after parsing attributes in process `syz.2.520'. [ 205.510610][ T34] hid-generic 0000:7FFFFFFF:0000.0002: unknown main item tag 0x4 [ 205.513982][ T8426] 8021q: adding VLAN 0 to HW filter on device bond0 [ 205.515105][ T34] hid-generic 0000:7FFFFFFF:0000.0002: unknown main item tag 0x0 [ 205.518612][ T34] hid-generic 0000:7FFFFFFF:0000.0002: unknown main item tag 0x1 [ 205.518967][ T8426] 8021q: adding VLAN 0 to HW filter on device team0 [ 205.527538][ T8426] tipc: Resetting bearer [ 205.529640][ T34] hid-generic 0000:7FFFFFFF:0000.0002: hidraw1: HID v0.00 Device [syz0] on syz1 [ 205.556465][ T8426] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 205.566711][ T8427] : entered promiscuous mode [ 205.568867][ T1136] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.580654][ T1136] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.583477][ T1136] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.588298][ T1136] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.615338][ T8432] fido_id[8432]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 206.112384][ T8443] tipc: Resetting bearer [ 208.890526][ T8485] netlink: 8 bytes leftover after parsing attributes in process `syz.3.531'. [ 210.078099][ T8482] kexec: Could not allocate control_code_buffer [ 210.113881][ T8482] Process accounting resumed [ 210.151611][ T61] hid-generic 0005:0007:0007.0003: reserved main item tag 0xd [ 210.154160][ T8497] netlink: 372 bytes leftover after parsing attributes in process `syz.3.535'. [ 210.154322][ T61] hid-generic 0005:0007:0007.0003: unexpected long global item [ 210.163784][ T61] hid-generic 0005:0007:0007.0003: probe with driver hid-generic failed with error -22 [ 210.363931][ T8500] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(10) [ 210.366183][ T8500] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 210.368727][ T8500] vhci_hcd vhci_hcd.0: Device attached [ 210.450996][ T8501] vhci_hcd: connection closed [ 210.457406][ T13] vhci_hcd: stop threads [ 210.469600][ T13] vhci_hcd: release socket [ 210.481258][ T13] vhci_hcd: disconnect device [ 210.902290][ T8512] syzkaller1: entered promiscuous mode [ 210.904139][ T8512] syzkaller1: entered allmulticast mode [ 210.919724][ T8512] program syz.0.537 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 210.927567][ T8512] nfs: Unknown parameter 'ntext' [ 212.318721][ T8524] netlink: 'syz.2.542': attribute type 27 has an invalid length. [ 212.458247][ T8524] bridge2: left promiscuous mode [ 212.462426][ T8524] bridge3: left promiscuous mode [ 212.590879][ T8530] 8021q: adding VLAN 0 to HW filter on device bond0 [ 212.605692][ T8530] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 212.621125][ T1136] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.624023][ T1136] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.626789][ T1136] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.629912][ T13] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.295940][ T29] IPVS: starting estimator thread 0... [ 213.299625][ T8543] loop6: detected capacity change from 0 to 524287999 [ 213.309547][ T8543] netlink: 'syz.0.546': attribute type 12 has an invalid length. [ 213.389617][ T8546] IPVS: using max 43 ests per chain, 103200 per kthread [ 215.006839][ T8574] netlink: 20 bytes leftover after parsing attributes in process `syz.2.555'. [ 217.218863][ T6074] hid-generic 0005:0007:0007.0004: reserved main item tag 0xd [ 217.224531][ T8609] netlink: 372 bytes leftover after parsing attributes in process `syz.1.564'. [ 217.228447][ T6074] hid-generic 0005:0007:0007.0004: unexpected long global item [ 217.237115][ T6074] hid-generic 0005:0007:0007.0004: probe with driver hid-generic failed with error -22 [ 217.807479][ T8623] : entered promiscuous mode [ 218.722447][ T8655] input: syz0 as /devices/virtual/input/input10 [ 220.203211][ T8675] kvm_intel: kvm [8665]: vcpu1, guest rIP: 0xfff0 Unhandled WRMSR(0x1d9) = 0x6 [ 220.444168][ T8670] syzkaller1: entered promiscuous mode [ 220.445973][ T8670] syzkaller1: entered allmulticast mode [ 220.460073][ T8670] program syz.3.571 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 220.466181][ T8670] nfs: Unknown parameter 'ntext' [ 221.809539][ T8689] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 221.948017][ T8699] netlink: 20 bytes leftover after parsing attributes in process `syz.0.579'. [ 223.025064][ T8712] input: syz0 as /devices/virtual/input/input11 [ 225.879339][ T8753] netlink: 8 bytes leftover after parsing attributes in process `syz.1.591'. [ 225.885678][ T8753] netlink: 24 bytes leftover after parsing attributes in process `syz.1.591'. [ 225.889226][ T8753] netlink: 24 bytes leftover after parsing attributes in process `syz.1.591'. [ 226.322441][ T8761] : entered promiscuous mode [ 229.018876][ T8812] loop6: detected capacity change from 0 to 524287999 [ 229.038003][ T8812] netlink: 'syz.3.600': attribute type 12 has an invalid length. [ 229.249340][ T8818] Bluetooth: MGMT ver 1.23 [ 230.902580][ T8845] JFS: discard option not supported on device [ 230.905831][ T8845] Mount JFS Failure: -22 [ 230.907253][ T8845] jfs_mount failed w/return code = -22 [ 233.958678][ T8886] vlan1: entered promiscuous mode [ 233.960483][ T8886] vlan1: entered allmulticast mode [ 233.962130][ T8886] veth0_vlan: entered allmulticast mode [ 233.963907][ T8886] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check. [ 234.555568][ T8901] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 234.558990][ T8901] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 235.316078][ T8916] loop6: detected capacity change from 0 to 524287999 [ 235.325601][ T8916] netlink: 'syz.3.623': attribute type 12 has an invalid length. [ 235.417134][ T8908] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 235.420032][ T8908] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 235.447459][ T8908] vhci_hcd vhci_hcd.0: Device attached [ 235.709647][ T6042] usb 40-1: SetAddress Request (2) to port 0 [ 235.712275][ T6042] usb 40-1: new SuperSpeed USB device number 2 using vhci_hcd [ 235.775299][ T8923] netlink: 8 bytes leftover after parsing attributes in process `syz.2.625'. [ 235.778873][ T8923] netlink: 24 bytes leftover after parsing attributes in process `syz.2.625'. [ 235.783622][ T8923] netlink: 24 bytes leftover after parsing attributes in process `syz.2.625'. [ 236.214345][ T8917] vhci_hcd: connection reset by peer [ 236.225016][ T13] vhci_hcd: stop threads [ 236.226460][ T13] vhci_hcd: release socket [ 236.227952][ T13] vhci_hcd: disconnect device [ 237.223042][ T8942] JFS: discard option not supported on device [ 237.228162][ T8942] Mount JFS Failure: -22 [ 237.230211][ T8942] jfs_mount failed w/return code = -22 [ 238.792989][ T8969] wireguard0: entered promiscuous mode [ 238.797171][ T8969] wireguard0: entered allmulticast mode [ 240.789706][ T6042] usb 40-1: device descriptor read/8, error -110 [ 241.302612][ T6042] usb usb40-port1: attempt power cycle [ 241.935938][ T6042] usb usb40-port1: unable to enumerate USB device [ 242.679641][ T54] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 243.915930][ T9054] netlink: 'syz.2.655': attribute type 12 has an invalid length. [ 243.971560][ T9056] loop6: detected capacity change from 0 to 524287999 [ 245.352877][ T9074] JFS: discard option not supported on device [ 245.356325][ T9074] Mount JFS Failure: -22 [ 245.357751][ T9074] jfs_mount failed w/return code = -22 [ 246.038536][ T9085] vlan1: entered promiscuous mode [ 246.040470][ T9085] vlan1: entered allmulticast mode [ 246.042210][ T9085] veth0_vlan: entered allmulticast mode [ 246.044006][ T9085] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check. [ 248.123297][ T9118] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 248.629156][ T9128] lo speed is unknown, defaulting to 1000 [ 248.631493][ T9128] lo speed is unknown, defaulting to 1000 [ 248.636416][ T9128] lo speed is unknown, defaulting to 1000 [ 248.665029][ T9128] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 248.727013][ T9128] lo speed is unknown, defaulting to 1000 [ 248.734987][ T9128] lo speed is unknown, defaulting to 1000 [ 248.740930][ T9128] lo speed is unknown, defaulting to 1000 [ 248.746669][ T9128] lo speed is unknown, defaulting to 1000 [ 250.038539][ T9156] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 250.041722][ T9156] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 250.045599][ T9156] vhci_hcd vhci_hcd.0: Device attached [ 250.346808][ T54] usb 39-1: new low-speed USB device number 5 using vhci_hcd [ 250.663671][ T9157] vhci_hcd: connection reset by peer [ 250.665700][ T1233] vhci_hcd: stop threads [ 250.667068][ T1233] vhci_hcd: release socket [ 250.668649][ T1233] vhci_hcd: disconnect device [ 251.719748][ T9186] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 251.721924][ T9186] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 251.724802][ T9186] vhci_hcd vhci_hcd.0: Device attached [ 251.989570][ T29] usb 44-1: SetAddress Request (6) to port 0 [ 251.991552][ T29] usb 44-1: new SuperSpeed USB device number 6 using vhci_hcd [ 252.307157][ T9188] vhci_hcd: connection reset by peer [ 252.336502][ T46] vhci_hcd: stop threads [ 252.338348][ T46] vhci_hcd: release socket [ 252.349321][ T46] vhci_hcd: disconnect device [ 252.605403][ T9206] loop6: detected capacity change from 0 to 524287999 [ 252.637677][ T9206] netlink: 'syz.0.694': attribute type 12 has an invalid length. [ 253.105428][ T9213] netlink: 'syz.2.695': attribute type 12 has an invalid length. [ 255.128008][ T9245] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 255.130946][ T9245] overlayfs: failed to set xattr on upper [ 255.132920][ T9245] overlayfs: ...falling back to redirect_dir=nofollow. [ 255.135170][ T9245] overlayfs: ...falling back to index=off. [ 255.137168][ T9245] overlayfs: ...falling back to uuid=null. [ 255.181761][ T1416] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.189519][ T1416] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.426476][ T9251] netlink: 'syz.3.705': attribute type 12 has an invalid length. [ 255.509616][ T54] vhci_hcd: vhci_device speed not set [ 256.471399][ T9262] netlink: 'syz.3.708': attribute type 12 has an invalid length. [ 256.812191][ T9269] input: syz0 as /devices/virtual/input/input12 [ 257.019913][ T29] usb 44-1: device descriptor read/8, error -110 [ 257.422989][ T29] usb usb44-port1: attempt power cycle [ 258.281961][ T29] usb usb44-port1: unable to enumerate USB device [ 259.351827][ T55] libceph: connect (1)[c::]:6789 error -101 [ 259.354384][ T55] libceph: mon0 (1)[c::]:6789 connect error [ 259.378912][ T9294] ceph: No mds server is up or the cluster is laggy [ 260.445673][ T9317] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 260.447941][ T9317] overlayfs: failed to set xattr on upper [ 260.460785][ T9317] overlayfs: ...falling back to redirect_dir=nofollow. [ 260.468694][ T9317] overlayfs: ...falling back to index=off. [ 260.474905][ T9317] overlayfs: ...falling back to uuid=null. [ 260.502591][ T9319] tipc: Started in network mode [ 260.504197][ T9319] tipc: Node identity 4, cluster identity 4711 [ 260.506190][ T9319] tipc: Node number set to 4 [ 260.825579][ T9329] overlayfs: failed to clone upperpath [ 261.108514][ T9335] wireguard0: entered promiscuous mode [ 261.115293][ T9335] wireguard0: entered allmulticast mode [ 262.704321][ T9363] netlink: 'syz.2.738': attribute type 12 has an invalid length. [ 263.049845][ T9371] netlink: 'syz.3.740': attribute type 12 has an invalid length. [ 264.012961][ T9380] netlink: 'syz.1.743': attribute type 12 has an invalid length. [ 265.056847][ T9406] loop6: detected capacity change from 0 to 524287999 [ 265.069118][ T9406] netlink: 'syz.0.752': attribute type 12 has an invalid length. [ 266.860886][ T9431] netlink: 'syz.3.758': attribute type 12 has an invalid length. [ 267.971026][ T9446] netlink: 'syz.3.764': attribute type 12 has an invalid length. [ 268.884220][ T9458] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 268.886611][ T9458] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 268.889549][ T9458] vhci_hcd vhci_hcd.0: Device attached [ 269.259832][ T5975] usb 38-1: SetAddress Request (2) to port 0 [ 269.262661][ T5975] usb 38-1: new SuperSpeed USB device number 2 using vhci_hcd [ 269.546365][ T9459] vhci_hcd: connection reset by peer [ 269.548670][ T1138] vhci_hcd: stop threads [ 269.550670][ T1138] vhci_hcd: release socket [ 269.552644][ T1138] vhci_hcd: disconnect device [ 269.708289][ T9470] netlink: 44 bytes leftover after parsing attributes in process `syz.3.769'. [ 270.004264][ T9476] loop6: detected capacity change from 0 to 524287999 [ 270.037549][ T9476] netlink: 'syz.1.770': attribute type 12 has an invalid length. [ 273.313196][ T9515] netlink: 20 bytes leftover after parsing attributes in process `syz.1.780'. [ 273.451171][ T9517] netlink: 'syz.3.781': attribute type 12 has an invalid length. [ 274.254015][ T9528] JFS: discard option not supported on device [ 274.257530][ T9528] Mount JFS Failure: -22 [ 274.258963][ T9528] jfs_mount failed w/return code = -22 [ 274.267652][ T9520] openvswitch: : Dropping previously announced user features [ 274.299915][ T5975] usb 38-1: device descriptor read/8, error -110 [ 274.717328][ T5975] usb usb38-port1: attempt power cycle [ 275.380363][ T9549] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 275.390772][ T5975] usb usb38-port1: unable to enumerate USB device [ 275.399977][ T9549] netlink: 'syz.0.788': attribute type 10 has an invalid length. [ 276.259562][ T40] audit: type=1326 audit(1754462108.225:1965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9553 comm="syz.2.790" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf70be579 code=0x0 [ 276.688037][ T9562] netlink: 20 bytes leftover after parsing attributes in process `syz.1.792'. [ 276.790283][ T9571] fuse: Bad value for 'fd' [ 277.299595][ T9578] /dev/nullb0: Can't lookup blockdev [ 277.502800][ T9582] loop6: detected capacity change from 0 to 524287999 [ 277.523640][ T9582] netlink: 'syz.0.795': attribute type 12 has an invalid length. [ 277.630051][ T9583] siw: device registration error -23 [ 278.220392][ T9595] netlink: 'syz.3.798': attribute type 12 has an invalid length. [ 278.515567][ T9596] netlink: 4 bytes leftover after parsing attributes in process `syz.0.800'. [ 278.587707][ T9597] netlink: 'syz.0.800': attribute type 11 has an invalid length. [ 278.590304][ T9597] netlink: 224 bytes leftover after parsing attributes in process `syz.0.800'. [ 279.846566][ T9632] netlink: 44 bytes leftover after parsing attributes in process `syz.2.806'. [ 279.997346][ T9634] loop6: detected capacity change from 0 to 524287999 [ 280.063747][ T9635] netlink: 'syz.0.804': attribute type 12 has an invalid length. [ 280.668337][ T9641] netlink: 32 bytes leftover after parsing attributes in process `syz.0.807'. [ 280.697472][ T9641] netlink: 32 bytes leftover after parsing attributes in process `syz.0.807'. [ 280.947569][ T9648] netlink: 'syz.2.808': attribute type 12 has an invalid length. [ 281.049153][ T54] libceph: connect (1)[c::]:6789 error -101 [ 281.053092][ T54] libceph: mon0 (1)[c::]:6789 connect error [ 281.097369][ T9650] ceph: No mds server is up or the cluster is laggy [ 281.325024][ T54] libceph: connect (1)[c::]:6789 error -101 [ 281.327098][ T54] libceph: mon0 (1)[c::]:6789 connect error [ 281.536951][ T9658] netlink: 'syz.3.810': attribute type 12 has an invalid length. [ 281.635568][ T9664] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 282.311881][ T9680] netlink: 'syz.2.815': attribute type 12 has an invalid length. [ 283.092227][ T9697] fuse: Unknown parameter 'user_id0000000000000000000000000000000000000000' [ 283.235821][ T9691] e1000e 0000:00:02.0 eth1: NIC Link is Down [ 283.331629][ T9704] loop6: detected capacity change from 0 to 524287999 [ 283.341199][ T9704] netlink: 'syz.0.827': attribute type 12 has an invalid length. [ 285.197142][ T9753] loop6: detected capacity change from 0 to 524287999 [ 286.921148][ T9786] could not allocate digest TFM handle sha1-generic [ 286.926311][ T9792] netlink: 8 bytes leftover after parsing attributes in process `syz.3.835'. [ 287.772162][ T9804] loop6: detected capacity change from 0 to 524287999 [ 288.447028][ T9818] netlink: 4 bytes leftover after parsing attributes in process `syz.3.842'. [ 289.066865][ T9821] netlink: 8 bytes leftover after parsing attributes in process `syz.1.843'. [ 289.078050][ T9821] netlink: 'syz.1.843': attribute type 5 has an invalid length. [ 289.089654][ T9821] netlink: 28 bytes leftover after parsing attributes in process `syz.1.843'. [ 289.114886][ T9821] geneve2: entered promiscuous mode [ 289.117225][ T9821] geneve2: entered allmulticast mode [ 289.159714][ T1139] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 289.162550][ T1139] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 289.165156][ T1139] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 289.167765][ T1139] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 292.341172][ T9880] JFS: discard option not supported on device [ 292.344105][ T9880] Mount JFS Failure: -22 [ 292.345953][ T9880] jfs_mount failed w/return code = -22 [ 292.865345][ T9884] loop6: detected capacity change from 0 to 524287999 [ 292.874882][ T9884] netlink: 'syz.1.859': attribute type 12 has an invalid length. [ 294.034030][ T9899] netlink: 'syz.3.869': attribute type 12 has an invalid length. [ 295.105240][ T9911] fuse: Bad value for 'fd' [ 295.902163][ T9930] netlink: 'syz.2.870': attribute type 12 has an invalid length. [ 298.793607][ T9970] netlink: 'syz.3.880': attribute type 12 has an invalid length. [ 299.489043][ T9979] netlink: 'syz.2.883': attribute type 12 has an invalid length. [ 300.080538][ T9988] loop6: detected capacity change from 0 to 524287999 [ 300.787502][ T9998] lo speed is unknown, defaulting to 1000 [ 300.930225][ T9999] fuse: Bad value for 'fd' [ 301.428921][T10009] netlink: 'syz.0.892': attribute type 12 has an invalid length. [ 304.153637][T10046] netlink: 'syz.2.902': attribute type 12 has an invalid length. [ 304.394499][T10053] lo speed is unknown, defaulting to 1000 [ 304.472844][ T34] IPVS: starting estimator thread 0... [ 304.477158][T10053] fuse: Bad value for 'fd' [ 304.612916][T10056] IPVS: using max 43 ests per chain, 103200 per kthread [ 305.768576][ T90] IPVS: stop unused estimator thread 0... [ 306.117073][T10073] netlink: 'syz.3.907': attribute type 12 has an invalid length. [ 306.770771][T10085] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.814234][T10081] JFS: discard option not supported on device [ 306.817442][T10081] Mount JFS Failure: -22 [ 306.819259][T10081] jfs_mount failed w/return code = -22 [ 306.882984][T10089] loop6: detected capacity change from 0 to 524287999 [ 307.114813][T10085] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.210731][T10085] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.327572][T10085] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.683257][ T1233] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.686010][ T1233] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.699614][ T90] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.742154][ T1139] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.755213][T10108] loop6: detected capacity change from 0 to 524287999 [ 307.765684][T10108] netlink: 'syz.0.916': attribute type 12 has an invalid length. [ 309.517427][T10129] netlink: 'syz.3.922': attribute type 12 has an invalid length. [ 310.098142][T10141] lo speed is unknown, defaulting to 1000 [ 310.269559][ T40] audit: type=1800 audit(1754462142.225:1966): pid=10146 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.929" name="nullb0" dev="tmpfs" ino=920 res=0 errno=0 [ 310.280679][T10147] loop6: detected capacity change from 0 to 524287999 [ 310.350216][T10150] netlink: 'syz.1.926': attribute type 12 has an invalid length. [ 311.293378][T10166] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.359941][T10166] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.487762][T10161] JFS: discard option not supported on device [ 311.489964][T10161] Mount JFS Failure: -22 [ 311.491317][T10161] jfs_mount failed w/return code = -22 [ 311.617301][T10166] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.696728][T10166] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.918025][ T90] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.918056][ T90] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.948265][ T90] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.964789][ T90] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.554744][T10204] netlink: 'syz.3.938': attribute type 12 has an invalid length. [ 313.871135][T10205] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 313.927595][T10207] lo speed is unknown, defaulting to 1000 [ 313.983924][T10205] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 314.066964][T10205] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 314.122030][T10207] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 314.146951][T10205] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 314.360118][T10205] BUG: unable to handle page fault for address: ffff8880976ce020 [ 314.363066][T10205] #PF: supervisor write access in kernel mode [ 314.366201][T10205] #PF: error_code(0x0002) - not-present page [ 314.369598][T10205] PGD 1b401067 P4D 1b401067 PUD 0 [ 314.371775][T10205] Oops: Oops: 0002 [#1] SMP KASAN NOPTI [ 314.373769][T10205] CPU: 2 UID: 0 PID: 10205 Comm: syz.1.939 Not tainted 6.16.0-syzkaller-11752-g7881cd6886a8 #0 PREEMPT(full) [ 314.378171][T10205] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 314.382636][T10205] RIP: 0010:nsim_queue_free+0xba/0x120 [ 314.384955][T10205] Code: 07 77 6c 4a 8d 3c ed 60 3e f5 8d 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 46 4a 03 1c ed 60 3e f5 8d <4c> 01 63 20 be 00 02 00 00 48 8d 3d 00 00 00 00 e8 d1 a0 54 fa 48 [ 314.392856][T10205] RSP: 0018:ffffc90002f27150 EFLAGS: 00010286 [ 314.395508][T10205] RAX: dffffc0000000000 RBX: ffff8880976ce000 RCX: 0000000000007c53 [ 314.398848][T10205] RDX: 1ffffffff1bea7ce RSI: ffffffff8c161500 RDI: ffffffff8df53e70 [ 314.402149][T10205] RBP: ffff88806aea2800 R08: 0000000000000000 R09: 0000000000000000 [ 314.405372][T10205] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000000 [ 314.408255][T10205] R13: 0000000000000002 R14: ffff88806a105880 R15: ffffed100dbab08e [ 314.411476][T10205] FS: 0000000000000000(0000) GS:ffff8880976ce000(0063) knlGS:00000000f506db40 [ 314.415181][T10205] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 314.417977][T10205] CR2: ffff8880976ce020 CR3: 0000000024125000 CR4: 0000000000352ef0 [ 314.421361][T10205] Call Trace: [ 314.422778][T10205] [ 314.424034][T10205] nsim_create+0xd0a/0x1260 [ 314.425991][T10205] __nsim_dev_port_add+0x435/0x7d0 [ 314.428140][T10205] ? __pfx___nsim_dev_port_add+0x10/0x10 [ 314.430484][T10205] ? nsim_dev_hwstats_init+0xf5/0x4f0 [ 314.432737][T10205] nsim_dev_reload_up+0x5b8/0x860 [ 314.434577][T10205] ? __pfx_nsim_dev_reload_up+0x10/0x10 [ 314.436298][T10205] ? devlink_params_driverinit_load_new+0x231/0x2c0 [ 314.438654][T10205] ? nsim_dev_reload_destroy+0x1a9/0x4d0 [ 314.441001][T10205] devlink_reload+0x322/0x7c0 [ 314.443001][T10205] ? __pfx_devlink_reload+0x10/0x10 [ 314.445159][T10205] devlink_nl_reload_doit+0xe31/0x1410 [ 314.447184][T10205] ? __pfx_devlink_nl_reload_doit+0x10/0x10 [ 314.449207][T10205] ? __pfx_devlink_get_from_attrs_lock+0x10/0x10 [ 314.451177][T10205] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 314.453469][T10205] genl_family_rcv_msg_doit+0x206/0x2f0 [ 314.455189][T10205] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 314.457055][T10205] ? rcu_is_watching+0x12/0xc0 [ 314.458777][T10205] ? bpf_lsm_capable+0x9/0x10 [ 314.460715][T10205] ? security_capable+0x7e/0x260 [ 314.462292][T10205] genl_rcv_msg+0x55c/0x800 [ 314.463881][T10205] ? __pfx_genl_rcv_msg+0x10/0x10 [ 314.466027][T10205] ? __pfx_devlink_nl_pre_doit_dev_lock+0x10/0x10 [ 314.468749][T10205] ? __pfx_devlink_nl_reload_doit+0x10/0x10 [ 314.471173][T10205] ? __pfx_devlink_nl_post_doit_dev_lock+0x10/0x10 [ 314.473813][T10205] netlink_rcv_skb+0x155/0x420 [ 314.475835][T10205] ? __pfx_genl_rcv_msg+0x10/0x10 [ 314.478002][T10205] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 314.480236][T10205] genl_rcv+0x28/0x40 [ 314.481949][T10205] netlink_unicast+0x5aa/0x870 [ 314.483961][T10205] ? __pfx_netlink_unicast+0x10/0x10 [ 314.486199][T10205] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 314.488329][T10205] netlink_sendmsg+0x8d1/0xdd0 [ 314.489868][T10205] ? __pfx_netlink_sendmsg+0x10/0x10 [ 314.491585][T10205] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 314.493511][T10205] ____sys_sendmsg+0xa98/0xc70 [ 314.495106][T10205] ? __pfx_____sys_sendmsg+0x10/0x10 [ 314.496771][T10205] ? get_compat_msghdr+0x11a/0x170 [ 314.498434][T10205] ___sys_sendmsg+0x134/0x1d0 [ 314.499915][T10205] ? __pfx____sys_sendmsg+0x10/0x10 [ 314.501613][T10205] ? find_held_lock+0x2b/0x80 [ 314.503072][T10205] __sys_sendmsg+0x16d/0x220 [ 314.504540][T10205] ? __pfx___sys_sendmsg+0x10/0x10 [ 314.506584][T10205] ? __ia32_sys_futex_time32+0x1d9/0x460 [ 314.509031][T10205] ? rcu_is_watching+0x12/0xc0 [ 314.511083][T10205] __do_fast_syscall_32+0x7c/0x3a0 [ 314.513265][T10205] do_fast_syscall_32+0x32/0x80 [ 314.515314][T10205] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 314.517724][T10205] RIP: 0023:0xf709e579 [ 314.519018][T10205] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 314.525087][T10205] RSP: 002b:00000000f506d55c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 314.527745][T10205] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000080000080 [ 314.530586][T10205] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 314.533650][T10205] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 314.536329][T10205] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 314.538822][T10205] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 314.542011][T10205] [ 314.543368][T10205] Modules linked in: [ 314.544758][T10205] CR2: ffff8880976ce020 [ 314.546333][T10205] ---[ end trace 0000000000000000 ]--- [ 314.548652][T10205] RIP: 0010:nsim_queue_free+0xba/0x120 [ 314.550850][T10205] Code: 07 77 6c 4a 8d 3c ed 60 3e f5 8d 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 46 4a 03 1c ed 60 3e f5 8d <4c> 01 63 20 be 00 02 00 00 48 8d 3d 00 00 00 00 e8 d1 a0 54 fa 48 [ 314.557244][T10205] RSP: 0018:ffffc90002f27150 EFLAGS: 00010286 [ 314.559261][T10205] RAX: dffffc0000000000 RBX: ffff8880976ce000 RCX: 0000000000007c53 [ 314.561831][T10205] RDX: 1ffffffff1bea7ce RSI: ffffffff8c161500 RDI: ffffffff8df53e70 [ 314.564535][T10205] RBP: ffff88806aea2800 R08: 0000000000000000 R09: 0000000000000000 [ 314.567578][T10205] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000000 [ 314.570055][T10205] R13: 0000000000000002 R14: ffff88806a105880 R15: ffffed100dbab08e [ 314.572525][T10205] FS: 0000000000000000(0000) GS:ffff8880976ce000(0063) knlGS:00000000f506db40 [ 314.575562][T10205] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 314.577644][T10205] CR2: ffff8880976ce020 CR3: 0000000024125000 CR4: 0000000000352ef0 [ 314.580101][T10205] Kernel panic - not syncing: Fatal exception in interrupt [ 314.582946][T10205] Kernel Offset: disabled [ 314.584539][T10205] Rebooting in 86400 seconds.. VM DIAGNOSIS: 06:35:46 Registers: info registers vcpu 0 CPU#0 RAX=00000000004c757c RBX=0000000000000000 RCX=ffffffff8b8f7bf9 RDX=ffffed1005646656 RSI=ffffffff8c161500 RDI=ffffffff8190cd41 RBP=fffffbfff1c52ef8 RSP=ffffffff8e207e08 R8 =0000000000000000 R9 =ffffed1005646655 R10=ffff88802b2332ab R11=0000000000000001 R12=0000000000000000 R13=ffffffff8e2977c0 R14=ffffffff90ab2890 R15=0000000000000000 RIP=ffffffff8b8f675f RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880974ce000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000311eaffc CR3=0000000012399000 CR4=00352ef0 DR0=000000005ffffffd DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000600 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000ff ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4e4f4954504f5f4e 4153410063657865 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000002 RBX=0000000000000000 RCX=ffffffff8206dc34 RDX=ffff88806dd38000 RSI=0000000000000000 RDI=0000000000000001 RBP=0000000000000002 RSP=ffffc9002640f7a0 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000000 R11=00000000000103fe R12=0000000000000000 R13=0000000000000000 R14=ffffc9002640f9e0 R15=dffffc0000000000 RIP=ffffffff8206e3af RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff8880975ce000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f7f255c0 CR3=000000004f9e0000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000ff ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4e4f4954504f5f4e 4153410063657865 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000031 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85609b15 RDI=ffffffff9b0ee7c0 RBP=ffffffff9b0ee780 RSP=ffffc90002f269e0 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=727265203a465023 R12=0000000000000000 R13=0000000000000031 R14=ffffffff9b0ee780 R15=ffffffff85609ab0 RIP=ffffffff85609b3f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff8880976ce000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=ffff8880976ce020 CR3=0000000024125000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000ff ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4e4f4954504f5f4e 4153410063657865 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000080000 RBX=ffffe8fffea30000 RCX=ffffc90026e8e000 RDX=0000000000080000 RSI=ffffe8fffea30000 RDI=ffffe8fffea30000 RBP=ffff888058477180 RSP=ffffc90002f877a0 R8 =0000000000000006 R9 =ffffe8fffea30000 R10=ffffe8fffea30000 R11=000000000000001e R12=ffff888020c95fb0 R13=8000000000000163 R14=ffffe8fffea30000 R15=ffffe8fffea30000 RIP=ffffffff820ea522 RFL=00000292 [--S-A--] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff8880977ce000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00000000312d9ffc CR3=0000000012399000 CR4=00352ef0 DR0=000000005ffffffd DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000600 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 deb4713109081744 740bfbe0ce9f4883 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 07c432a7ba67e8ff df9b278b5f0d6ce6 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 9d6e222ccd41a42b 63a1ccf40dd7b69c ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 b6bbd62f7e22dfad ab418dc72c63fabc ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000006d80 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000040 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ce000000ef000000 0002e4b7bf657fab ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 66000000c0000000 a400000086000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 14000000bf6332ae 0004d95abf62aae1 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 bf693250bf698929 bc000000000e2729 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6e781b2b36d5d556 5b9f19d4b2cfd980 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a6a35f4af023ea07 64f06251ebe28646 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a54ff53a3c6ef372 bb67ae856a09e667 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5be0cd191f83d9ab 9b05688c510e527f ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000